Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Grant-Security/Network Analyst
03-15-2019
Grant-Security/
Member since
11-02-2017
Beginner
Created by
Grant-Security/
in Networking Documents
03-11-2019
11:15 AM
03-11-2019
11:15 AM
I meant to show this in the solution:
3750X-CS#sh run inter g1/0/2 Building configuration...
Current configuration : 132 bytes ! interface GigabitEthernet1/0/2 description Sentinel - WAN switchport access vlan 23 switchport mode access no cdp enable end
3750X-CS#sh run inter g1/0/3 Building configuration...
Current configuration : 133 bytes ! interface GigabitEthernet1/0/3 description Sentinel - LAN switchport access vlan 200 switchport mode access no cdp enable end
... View more
Created by
Grant-Security/
in Networking Documents
03-11-2019
09:40 AM
03-11-2019
09:40 AM
Symptoms
Connected to the console port I was getting the following messages over and over again. In my case vlan 23 went to the WAN port on a IPS server and vlan 200 went to the LAN port on the same server. It is not a switch but I was told because it was crossing vlans cdp was reporting the issue even though it wasn't a problem.
Mar 9 23:15:26.022: %CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet1/0/3 (200), with 3750X-CS.kbsi-cs.com GigabitEthernet1/0/2 (23).
Mar 9 23:15:30.971: %CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet1/0/2 (23), with 3750X-CS.kbsi-cs.com GigabitEthernet1/0/3 (200).
Diagnosis
interface GigabitEthernet1/0/2 description Sentinel - WAN switchport access vlan 23 switchport mode access end
3750X-CS#sh run inter g1/0/3 Building configuration...
Current configuration : 133 bytes ! interface GigabitEthernet1/0/3 description Sentinel - LAN switchport access vlan 200 switchport mode access end
Solution
In this case everything was working as designed. The notification was because the ports were connected to the same device crossing vlans. So we applied "no cdp enable" on both interfaces and the logs messages stopped.
... View more
Created by
Grant-Security/
in Network Management
02-15-2019
12:14 PM
02-15-2019
12:14 PM
I cannot add the following to an interface or to the vlans which is why I believe mine shows to be inactive.
3750X-06(config)#inter g1/0/1 3750X-06(config-if)#ip flow monitor NETFLOW-MONITOR sampler NETFLOW-SAMPLER input % Flow Monitor: 'NETFLOW-MONITOR' could not be added.
3750X-06#sh flow monit Flow Monitor NETFLOW-MONITOR: Description: NETFLOW-MONITOR Flow Record: NETFLOW-RECORD Flow Exporter: NETFLOW-EXPORTER (inactive) Cache: Type: normal Status: not allocated Size: 128 entries / 0 bytes Cache: Type: normal (Platform cache) Status: not allocated Size: Unknown
Why can't I add IP monitor commands? Is it the switch that is the problem? I am using a 3750-X.
... View more
Created by
Grant-Security/
in Small Business Switches
02-12-2019
02:21 PM
02-12-2019
02:21 PM
I have the same issue. Based on the link below the temp should be much lower. Where is the system temp value read from? If it is air flow as you state then why doesn't it report that reading? It doesn't even match the snmp data I am getting on my collector.
53 C is HOT(127F)
3560cx-1#show env all SYSTEM TEMPERATURE is OK System Temperature Value: 53 Degree Celsius System Temperature State: GREEN Yellow Threshold : 89 Degree Celsius Red Threshold : 96 Degree Celsius
... View more
02-12-2019
11:06 AM
What is the purpose of the vlan configuration X command? Can someone point me to the documentation? I assume this allows you to get input from all these vlans to the flow monitor?
!
vlan configuration 20
ip flow monitor MONITOR input
!
... View more
Created by
Grant-Security/
in Advanced Threats
02-07-2019
02:16 PM
02-07-2019
02:16 PM
Is there a way to force a downgrade? I assume if I select a 6.1.x version it would downgrade the clients accordingly? This issue is reported on all 6.2.x versions so I don't want them running any version of 6.2.
... View more
Created by
Grant-Security/
in Switching
02-04-2019
12:12 PM
02-04-2019
12:12 PM
I have three printers that are reporting high utilization on three different ports but on the same switch in the stack(5 switches in the stack). This just started this weekend and I thought at first it maybe a problem with Orion(Solarwinds) but you can see below that the transmit is high with these printers. Is there a problem and where do I begin to look?
C3750-CS#show controllers gigabitEthernet 3/0/13 utilization Receive Bandwidth Percentage Utilization : 0 Transmit Bandwidth Percentage Utilization : 74 C3750-CS#show controllers gigabitEthernet 3/0/22 utilization Receive Bandwidth Percentage Utilization : 0 Transmit Bandwidth Percentage Utilization : 74 C3750-CS#show controllers gigabitEthernet 3/0/26 utilization Receive Bandwidth Percentage Utilization : 0 Transmit Bandwidth Percentage Utilization : 73 C3750-CS#sh inter g3/0/13 GigabitEthernet3/0/13 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is 0016.c7e9.770d (bia 0016.c7e9.770d) Description: East Printer MTU 9000 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 76/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:22, output hang never Last clearing of "show interface" counters 02:58:17 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7632695 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 30112000 bits/sec, 2550 packets/sec 2207 packets input, 150608 bytes, 0 no buffer Received 1802 broadcasts (2 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 2 multicast, 0 pause input 0 input packets with dribble condition detected 35784035 packets output, 52886106339 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out C3750-CS#sh inter g3/0/22 GigabitEthernet3/0/22 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is 0016.c7e9.7716 (bia 0016.c7e9.7716) Description: Admin Printer MTU 9000 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 75/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:19, output hang never Last clearing of "show interface" counters 02:58:14 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7634485 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 29612000 bits/sec, 2507 packets/sec 15120 packets input, 1000764 bytes, 0 no buffer Received 1805 broadcasts (2 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 2 multicast, 0 pause input 0 input packets with dribble condition detected 35797434 packets output, 52906725657 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out C3750-CS#sh inter g3/0/26 GigabitEthernet3/0/26 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is 0016.c7e9.771a (bia 0016.c7e9.771a) Description: Upstairs Printer MTU 9000 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 75/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:16, output hang never Last clearing of "show interface" counters 02:58:14 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7642390 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 29612000 bits/sec, 2507 packets/sec 451 packets input, 31674 bytes, 0 no buffer Received 2 broadcasts (0 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 0 multicast, 0 pause input 0 input packets with dribble condition detected 35852521 packets output, 52987579548 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:09, output hang never Last clearing of "show interface" counters 02:50:36 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7582667 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 72344000 bits/sec, 6029 packets/sec 15020 packets input, 993006 bytes, 0 no buffer Received 1728 broadcasts (2 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 2 multicast, 0 pause input 0 input packets with dribble condition detected 35352472 packets output, 52289135482 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out C3750-CS#sh inter g3/0/26 GigabitEthernet3/0/26 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is 0016.c7e9.771a (bia 0016.c7e9.771a) Description: Upstairs Printer MTU 9000 bytes, BW 100000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 181/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, media type is 10/100/1000BaseTX input flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output 00:00:07, output hang never Last clearing of "show interface" counters 02:50:38 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7581407 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 71156000 bits/sec, 5931 packets/sec 451 packets input, 31674 bytes, 0 no buffer Received 2 broadcasts (0 multicasts) 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 0 multicast, 0 pause input 0 input packets with dribble condition detected 35340415 packets output, 52268969752 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out
... View more
Labels:
Created by
Grant-Security/
in Email Security
11-12-2018
08:36 AM
11-12-2018
08:36 AM
In correct!
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118188-qanda-esa-00.html#anc5
... View more
Created by
Grant-Security/
in Firewalls
10-16-2018
09:08 AM
10-16-2018
09:08 AM
Yes I would be glad to give you all the information that I have ran into with this issue. Bottom line is that FTD at a remote site will not function like the ASA/FirePower at a remote site without preconfiguring locally. Personally due to the fact that if something happens to the unit you may not be able to support that remote location remotely. Cisco suggested that we buy yet another piece of equipment(router) for the remote site so this would function. Absolutely crazy.
That said, they are working on a solution that works similar to the ASA/FirePower but I cannot say when if this will happen. I know sales will tell you that this certainly works and field engineers will support them but there is enough documentation that we gave to TAC showing that it will not function the same. I do like FTD for the most part(we are running a 2110 locally) but I elected to reimage my ASA's with ASA/FirePower for my remote locationsl. If you need to links I could do some looking to show you others that too discovered what we did.
Best of luck and just reimage for now IMO.
... View more
Created by
Grant-Security/
in VPN and AnyConnect
05-30-2018
09:41 AM
05-30-2018
09:41 AM
No solutions?
... View more
Created by
Grant-Security/
in Firewalls
03-29-2018
09:12 AM
03-29-2018
09:12 AM
yes show inventory has always shown the correct chassis serial number, but what is crazy is that the show run or show version doesn't match. The real question is why is this the case?
... View more
Latest Contributions by Grant-Security/Network Analyst
- Latest Contributions by Grant-Security/Network Analyst
- Discussions Grant-Security/Network Analyst has Participated In
- TKBs Grant-Security/Network Analyst has Participated In
- Blogs Grant-Security/Network Analyst has Participated In
- Events Grant-Security/Network Analyst has Participated In
- Videos Grant-Security/Network Analyst has Participated In
Created by
Grant-Security/Network Analyst
in Networking Documents
03-11-2019 11:15 AM
03-11-2019 11:15 AM
I meant to show this in the solution: 3750X-CS#sh run inter
g1/0/2Building configuration... Current ...
Created by
Grant-Security/Network Analyst
in Networking Documents
03-11-2019 09:40 AM
03-11-2019 09:40 AM
Symptoms Connected to the console port I was getting the following
messages over and over again. In ...
Created by
Grant-Security/Network Analyst
in FirePOWER
02-27-2019 11:08 AM
02-27-2019 11:08 AM
The problem was with Putty. As of version 6.3 of FMC the encryption
requirements have changed requir...
Created by
Grant-Security/Network Analyst
in FirePOWER
02-27-2019 09:42 AM
02-27-2019 09:42 AM
I discovered today that I cannot ssh into FMC(not sure if I have since
upgrading to 6.3). I am able ...
Created by
Grant-Security/Network Analyst
in Network Management
02-15-2019 12:14 PM
02-15-2019 12:14 PM
I cannot add the following to an interface or to the vlans which is why
I believe mine shows to be i...
Created by
Grant-Security/Network Analyst
in Small Business Switches
02-12-2019 02:21 PM
02-12-2019 02:21 PM
I have the same issue. Based on the link below the temp should be much
lower. Where is the system te...
02-12-2019 11:06 AM
What is the purpose of the vlan configuration X command? Can someone
point me to the documentation? ...
Created by
Grant-Security/Network Analyst
in Advanced Threats
02-07-2019 02:16 PM
02-07-2019 02:16 PM
Is there a way to force a downgrade? I assume if I select a 6.1.x
version it would downgrade the cli...
Created by
Grant-Security/Network Analyst
in Switching
02-04-2019 12:12 PM
02-04-2019 12:12 PM
I have three printers that are reporting high utilization on three
different ports but on the same s...
Created by
Grant-Security/Network Analyst
in Email Security
11-12-2018 08:36 AM
11-12-2018 08:36 AM
In correct!
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118188-qand...
Created by
Grant-Security/Network Analyst
in Firewalls
10-16-2018 09:08 AM
10-16-2018 09:08 AM
Yes I would be glad to give you all the information that I have ran into
with this issue. Bottom lin...
Created by
Grant-Security/Network Analyst
in VPN and AnyConnect
05-30-2018 09:41 AM
05-30-2018 09:41 AM
No solutions?
Created by
Grant-Security/Network Analyst
in FirePOWER
05-03-2018 08:21 AM
05-03-2018 08:21 AM
Simply stated, you cannot do the same process with FTD as we can with
ASA/FirePower which sucks. To ...
Created by
Grant-Security/Network Analyst
in Firewalls
03-29-2018 09:12 AM
03-29-2018 09:12 AM
yes show inventory has always shown the correct chassis serial number,
but what is crazy is that the...
Public Statistics
| Date Registered | 11-02-2017 09:04 AM |
| Date Last Visited | 03-15-2019 08:44 AM |
| Total Messages Posted | 15 |
| Total Helpful Votes Received | 5 |
