Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About mihaly.szuhanics
05-22-2019
mihaly.szuhanic
Member since
04-19-2016
Beginner
Created by
mihaly.szuhanic
in Routing
05-16-2019
02:56 AM
05-16-2019
02:56 AM
Hi, for the IP SLA, you need to specify first the IP SLA-s operation type. like ICMP echo then you'll have your option just as you wrote, let me show you an example. (config)#ip sla 1299 (config-ip-sla)#icmp-echo 1.1.1.1 source-interface lo 1 (config-ip-sla-echo)#history ? buckets-kept Maximum number of history buckets to collect distributions-of-statistics-kept Maximum number of statistics distribution buckets to capture enhanced Enable enhanced history collection filter Add operation to History when... hours-of-statistics-kept Maximum number of statistics hour groups to capture lives-kept Maximum number of history lives to collect statistics-distribution-interval Statistics distribution interval size (config-ip-sla-echo)#history hours-of-statistics-kept 20 (config-ip-sla-echo)# The other configuration can be worked around with ZBFW using it as an extra command when you specify a class action "drop" and you add the log option. Please mark this comment as helpful if it answers your question. Thank you
... View more
05-16-2019
02:23 AM
Hi, Is it possible for you to have wireshark on the server? Also, you might have to span the port on your cisco switch which is connected to the edge switch. It might generate quite a lot of traffic but at the moment with this limited info, that is what I can come up with. You can also use the embedded packet capture on the Core Switch, but that is quite far away from the phone. But of course, it depends on what you want to see and what errors you are looking for. Please mark this comment as helpful if it answers your question. Thank you
... View more
05-16-2019
02:17 AM
Hi, the log messages have nothing to do with the EEM applet that you have provided. Most probably there is another script running to add these entries, maybe kron. Please mark this comment as helpful if it answers your question. Thank you
... View more
Created by
mihaly.szuhanic
in Routing
05-16-2019
01:26 AM
05-16-2019
01:26 AM
Hey, As I see the registration of your prefix is correct. Source Registry ARIN Net Range 138.43.254.0 - 138.43.255.255 CIDR 138.43.254.0/23 Name MEDIA-566 Handle NET-138-43-254-0-1 Parent NET-138-0-0-0-0 Net Type DIRECT ASSIGNMENT Origin AS not provided Registration Tue, 19 Feb 2019 21:55:11 GMT (Tue Feb 19 2019 local time) Last Changed Tue, 19 Feb 2019 21:55:11 GMT (Tue Feb 19 2019 local time) Self https://rdap.arin.net/registry/ip/138.43.254.0 Alternate https://whois.arin.net/rest/net/NET-138-43-254-0-1 Port 43 Whois whois.arin.net Related Entities 1 Entity And I've checked on an Infowest Looking glass and it is truly not visible Router: InfoWest D3C Border Command: show ip bgp 138.43.254.0 Thu May 16 02:18:33.368 MDT BGP routing table entry for 138.43.254.0/24 Versions: Process bRIB/RIB SendTblVer Speaker 414879695 414879695 Last Modified: May 14 01:14:40.669 for 2d01h Paths: (3 available, best #3) Advertised to update-groups (with more than one peer): 0.2 0.8 Advertised to peers (in unique update groups): 208.76.14.223 10.16.0.229 209.33.231.254 Path #1: Received by speaker 0 Not advertised to any peer 174 577 397304 10.250.10.101 (metric 1) from 10.250.10.101 (10.250.10.101) Origin IGP, metric 75, localpref 76, valid, internal, group-best Received Path ID 0, Local Path ID 0, version 0 Community: 174:21001 174:22003 11071:300 Path #2: Received by speaker 0 Not advertised to any peer 6461 577 397304 10.250.10.233 (metric 1) from 10.250.10.233 (10.250.10.233) Origin IGP, metric 100, localpref 76, valid, internal, group-best Received Path ID 0, Local Path ID 0, version 0 Community: 6461:5997 11071:300 Extended community: VALIDITY:1 Origin-AS validity: not-found (iBGP signalled) Path #3: Received by speaker 0 Advertised to update-groups (with more than one peer): 0.2 0.8 Advertised to peers (in unique update groups): 208.76.14.223 10.16.0.229 209.33.231.254 209 577 397304 63.234.254.141 from 63.234.254.141 (205.171.200.178) Origin IGP, metric 79, localpref 76, valid, external, best, group-best Received Path ID 0, Local Path ID 0, version 414879695 Community: 209:888 11071:300 Origin-AS validity: not-found outer: InfoWest D3C Border Command: show ip bgp 138.43.255.0 <<<<<< Thu May 16 02:21:05.104 MDT
% Network not in table According to your config, it looks good. However it is now on your ISP to check their Internet router, and within their AS what is happening with your advertisements. In my opinion, they should advertise your /24 prefixes without any further do, so definitely raise a case with them and ask them to check it. It is easy for them to validate, as they can see if they receive your advertisement, and they can see how their router handles it. Keep us posted about this case's progress. Was my comment helpful? If so please leave feedback.
... View more
- Tags:
- internet routing
Created by
mihaly.szuhanic
in Routing
02-14-2019
04:57 AM
02-14-2019
04:57 AM
It Seems that its basic cisco BUG (or programing error) - this BUG report says its fixed after 16.8.1 https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf46516 I just tested a 16.9.2 and its there again. It seems someone messed up this from 15.5 and from there on it was there till it was noticed and reported probably a few years after the 15.5 got released... Now I have to wait for an "M" release...
... View more
Created by
mihaly.szuhanic
in Routing
02-14-2019
01:37 AM
02-14-2019
01:37 AM
To all Cisco enthusiasts,
I am looking for a documentation about this matter I run into.
How come that I can not change the queue-limit in any of my Qos Classes to use byte based queue calculation and not packet based.
on ASR1001-X I can set Packet/Bytes/Ms based ones and it gives me an option:
ASR1001-X( config-pmap-c)#queue-limit ? <1-64000000> in bytes, <1-3400> in ms, <1-8192000> in packets by default
ASR1001-X(config-pmap-c)#queue-limit 1000 ? bytes in bytes ms in milliseconds packets in packets <cr>
As you see the ASR says you can set packet/ bytes / Ms value and that its packets by default.
The ISR4K says you can set bytes or packets and packets are by default, but does not give an option for bytes only packets
ISR4K(config-pmap-c)#queue-limit ? <1-64000000> in bytes, <1-8192000> in packets by default
ISR4K( config-pmap-c)#queue-limit 1000 ? packets in packets
I have checked various IOS versions from 15.5 till the latest 16.X version, none has this option.
@cisco Is this a missing feature? Is there a way to enable it maybe? (License?)
... View more
Labels:
Created by
mihaly.szuhanic
in Routing
08-10-2018
01:16 AM
08-10-2018
01:16 AM
Hi,
I have BGP communication between the hubs and the spokes not EIGRP. But the routing refreshed, I can clearly see on the HUB that the BU is not the only/best path anymore but the primary. However this does not reflect on the NHRP in some of the spoke routers.
My question is really, what would trigger a working spoke, that has already learned a prefix from the back-up, to forget it and replace it with the primary router's NHRP information. Since both are up and both respond.
As I read, the spoke has to request an inquiery but why would it do that if there is already an entry?
Thanks
... View more
08-09-2018
08:46 AM
Dear Engineers,
I am facing a very odd situation.
I have a DMVPN network based upon 2 Hubs.
One of the spoke sites, - let's call it Site A - I work on, have two routers sharing the two same hubs.
The other site which is involved in my issue is Site B.
The issue is that the NHRP registers on Site B that my Backup router has my local LAN network and not the Primary. However, as I clear the DMVPN sessions, the Site B router starts to learn the LAN subnet from the Primary VPN router.
I checked the config is identical on each and every spoke router, its based on a template. Each has the ip nhrp shortcut and both hubs have the ip nhrp redirect.
The last key thing to note, is that due to overutilization and not efficient Qos setup, the primary router had some minor disconnections and tunnel flaps.
In case the primary goes down, when a remote spoke wants to reach out to the Site A's LAN range, it'll ask the HUB to send it the proper entry to reach the actual router on Site A that has the network, that will be in this case the back-up router.
But when the Primary comes up again, I would expect the hub to know that, and when a new query comes in from another spoke, it'll provide it with the actual setup and it'll receive the Primary router.
Here comes the question. If such flap happens, what triggers a remote spoke that already learned the Back-up router as the source of the Site A's LAN to ask for a new query and update it with the Primary router when it comes back online.
As for now, I can't seem to find anything and based on my understanding that is the purpose of Phase 3 to keep that update as long as its alive.
I am not asking for config review, but theoritical discussion. As for now, this causes asymmetric routing since even if the primary is up again, the back-up's address was updated at many spokes and they keep sending packets there.
Thanks for your inputs
... View more
Labels:
06-09-2016
07:20 AM
I found the solution, I had to set a vty 0 transport input none, so the EEM script can use the 0 all the time, and I won't shut myself out as if I telnet into the router, the vty 0 will be skipped.
... View more
06-09-2016
02:50 AM
Hi,
the WLC is a 5500 running on: 7.6.130.0
The screenshots are attached.
Please note that there is an exact same AP on site which works perfectly.
Best Regards
... View more
06-09-2016
01:15 AM
Dear All,
I have an issue with a LAP: cisco AIR-LAP1242AG-E-K9
Using the IOS: System image file is "flash:/c1240-k9w8-mx.124-25e.JAO6/c1240-k9w8-mx.124-25e.JAO6"
LAP#sh controllers dot11Radio 0 | i reset
Driver TX blocks: in use 0, high 0, at reset 0, fail 0 drop 0
Last radio reset code: 62
Radio resets - total:21 retries:0 failed:0
LAP#sh controllers dot11Radio 1 | i reset
Driver TX blocks: in use 0, high 0, at reset 0, fail 0 drop 0
Last radio reset code: 37
Radio resets - total:17 retries:0 failed:0
LAP#
I have the above issue, and my radio interface keeps bouncing randomly:
62
RADIO_RC_SET_CHANNEL
Radio channel set. Reset while setting channel from Control and Provisioning of Wireless Access Points (CAPWAP).
37
RADIO_RC_IDB_RESET
Radio interface reset.
LAP#sh log | i adio
*Mar 1 00:00:07.471: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
*Mar 1 00:00:08.930: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1
*Dec 13 00:58:52.268: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 13 00:58:52.268: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Dec 13 00:58:52.504: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Dec 13 00:58:52.504: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to resetlwapp_crypto_init: MIC Present and Parsed Successfully
*Dec 13 00:58:53.268: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec 13 00:58:53.268: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Dec 13 00:58:53.809: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Dec 13 00:58:54.809: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Dec 13 00:58:54.848: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 13 00:58:55.847: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jun 2 07:54:18.816: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Jun 2 07:54:18.818: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jun 2 07:54:19.792: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jun 2 07:54:20.058: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun 2 07:54:20.062: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Jun 2 07:54:20.067: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jun 2 07:54:21.185: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jun 2 07:54:21.185: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jun 2 07:54:21.330: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jun 2 07:54:21.339: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Jun 2 07:54:21.344: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jun 2 07:54:22.403: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jun 2 07:54:22.403: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jun 2 07:54:22.438: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun 2 07:54:22.444: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Jun 2 07:54:22.449: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jun 2 07:54:23.494: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jun 2 07:54:23.495: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jun 2 07:54:23.728: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jun 2 07:54:24.801: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jun 4 12:15:40.633: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Jun 4 12:15:40.635: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jun 4 12:15:41.632: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jun 4 12:15:41.658: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun 4 12:15:42.658: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
LAP#
I tried to reload the LAP, but had no effect on the fault. I tried to find some more info on cisco forums about the codes or how to remedy them but I could not get anyfurther.
Please let me know if you have any ideas.
Best Regards
... View more
Labels:
05-10-2016
08:39 AM
Hi,
just to be sure, the first attempt should allow me to log in with tacacs+. I am not familiar with this command.
Here the first attempt is the local, if it is set, will it allow me to login with either local or either TACACS+ for the first attempt?
Cheers
... View more
05-10-2016
07:35 AM
Dear All,
I am running into an issue with an old IOS and EEM script as I can't make it bypass the AAA.
So I have a script that should log into config mode and shut an interface if an event happens. Writing the script is not an issue.
But to make it run! We have tacacs+ and to make this work on the router I need a user that is authenticated. Or I have to log onto a router in a way that the tacacs+ is bypassed.
The config does not support the known feature of EEM 3.1 - event manager applet <ANY> bypass auth...
I made the script and the bypass, by setting up a the below stated:
!
aaa authentication login EEMScript local
aaa authentication enable default none
aaa authorization exec EEMScript none
aaa authorization commands 0 EEMScript none
aaa authorization commands 1 EEMScript none
aaa authorization commands 15 EEMScript none
!
username EEMScript privilege 15 secret 5 XXXXXXXXXXXXXXXXXXXXXXXXXXX
!
line vty 0 2
exec-timeout 1 0
privilege level 15
authorization commands 0 EEMScript
authorization commands 1 EEMScript
authorization commands 15 EEMScript
authorization exec EEMScript
login authentication EEMScript
length 0
transport input nonne
transport output none
4
event manager session cli username EEMScript
However in this situation the issue is that if I log onto this router I'll be logged onto the vty 0 - which means I can't be authenticated by the TACACS as its not set on vty lines 0-2. Which means the router becomes unmanageable....
The solution however works! Cause if I am not logged on the script will use the vty 0 by default, which as you see has the "correct" setup not to use AAA - but I need a tiny modification.
Here comes the real question:
Can I force my EEM script to use a specific vty line? like Vty 20 that I'll never use?
Any Ideas or better solution would be appreciated!
HW is 1841 - c1841-advipservicesk9-mz.124-17.bin"
... View more
Labels:
04-20-2016
06:26 AM
Hi,
I have counted the TC values for the current confog and I found that the Tc value was some 7.3ms which seemed to be too high. Compared with another sites using the same ISR series but different EF BW-s the Tc came out to be 4ms only.
I varied the Bc to fit into the calculation form and give me Tc 4ms - So no my tests were showing better results. Seems like the general config generation was not correct. Thanks for the good points on the Tc, I have trusted the system generated values... which were incorrect. Cheers
... View more
Created by
mihaly.szuhanics
in Routing
05-16-2019 02:56 AM
05-16-2019 02:56 AM
Hi, for the IP SLA, you need to specify first the IP SLA-s operation
type. like ICMP echo then you'l...
05-16-2019 02:23 AM
Hi, Is it possible for you to have wireshark on the server? Also, you
might have to span the port on...
05-16-2019 02:17 AM
Hi, the log messages have nothing to do with the EEM applet that you
have provided. Most probably th...
05-16-2019 01:26 AM
Hey, As I see the registration of your prefix is correct. Source
RegistryARINNet Range138.43.254.0 -...
Created by
mihaly.szuhanics
in Routing
02-14-2019 04:57 AM
02-14-2019 04:57 AM
It Seems that its basic cisco BUG (or programing error) - this BUG
report says its fixed after
16.8....
02-14-2019 01:37 AM
To all Cisco enthusiasts, I am looking for a documentation about this
matter I run into. How come th...
Created by
mihaly.szuhanics
in Routing
08-10-2018 01:16 AM
08-10-2018 01:16 AM
Hi, I have BGP communication between the hubs and the spokes not EIGRP.
But the routing refreshed, I...
08-09-2018 08:46 AM
Dear Engineers, I am facing a very odd situation. I have a DMVPN network
based upon 2 Hubs. One of t...
06-09-2016 07:20 AM
I found the solution, I had to set a vty 0 transport input none, so the
EEM script can use the 0 all...
06-09-2016 02:50 AM
Hi, the WLC is a 5500 running on: 7.6.130.0 The screenshots are
attached. Please note that there is ...
06-09-2016 01:15 AM
Dear All, I have an issue with a LAP: cisco AIR-LAP1242AG-E-K9 Using the
IOS: System image file is
"...
05-10-2016 08:39 AM
Hi, just to be sure, the first attempt should allow me to log in with
tacacs+. I am not familiar wit...
05-10-2016 07:35 AM
Dear All, I am running into an issue with an old IOS and EEM script as I
can't make it bypass the AA...
Public Statistics
| Date Registered | 04-19-2016 08:07 AM |
| Date Last Visited | 05-22-2019 12:07 AM |
| Total Messages Posted | 18 |
| Total Helpful Votes Received | 5 |
.jpg "VIP Expert"){kind=icon}
