Hi, I would like to know what are the commands available on Catalyst 9300 IOS-XE devices for checking packet drops in the forwarding path. I am seeing an issue where PBR route-map and ACL is showing hit counts - but packet is getting dropped. I checked all basic things like SVI Configs, PBR NextHop's ARP entry etc. Packet comes in on a SVI and gets PBR'ed onto another SVI. Egress link is a L2 port-channel in the Egress SVI.   ... View more

I went through Meraki documentation on how to create a NetworkAccessPolicy for 802.1x through API and I could not find the API. I could only find the GET API. I can create though dashboard - but I am looking for the REST API format for POST for this. Please let me know if you have any pointers. ... View more

Hi All, I am looking for Meraki API support for turning on 802.1X on MS Switches. I looked at the documentation here https://developer.cisco.com/meraki/api/#/rest/getting-started  - but could not find the AccessPolicy Related APIs to configure 802.1X on Switch Ports. Please let me know if I am missing something. Please note that I am looking for "Wired" 802.1X.   TIA ... View more

    After switch bootup ZTP is not getting started.  I have below ISC-DHCP Settings and ZTP-poap config file. I am not seeing the guestshell  getting started during ZTP. Anyone faced similar situation.        Installed CAT3K_CAA-UNIVERSALK9-M Version 16.12.1 on  my C3650 switch and write erased the startup-config to kick start the ZTP provisioning. ZTP is not getting invoked.   DHCP Server Settings: subnet 101.1.1.0 netmask 255.255.255.0 { option routers 101.1.1.1; default-lease-time 7200; max-lease-time 14400; authoritative; pool { allow members of "cisco"; range 101.1.1.21 101.1.1.40; option tftp-server-name "101.1.1.41"; option bootfile-name "poap_cisco.cfg"; <========== } }   Poap_cisco.cfg file in tftp server: snmp-server community public RW lldp run int gig0/0 ip address dhcp no shut hostname access1 line vty 0 15 transport input ssh transport output ssh ================================   Cat3650 console log : Switch#sh startup-config startup-config is not present Switch# Switch# Switch#reload System configuration has been modified. Save? [yes/no]: no Reload command is being issued on Active unit, this will reload the whole stack Proceed with reload? [confirm]    << switch reloaded >>   % Checking backup nvram % No config present. Using default config *Jan 17 22:19:40.579: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed state to down *Jan 17 22:19:42.854: %SYS-6-STARTUP_CONFIG_IGNORED: System startup configuration is ignored based on the configuration register setting. *Jan 17 22:19:43.385: %SYS-5-CONFIG_P: Configured programmatically by process CPP MQC QoS Policy manager from console as vty2 *Jan 17 22:19:43.524: %SYS-5-CONFIG_P: Configured programmatically by process PnP Agent Discovery from console as vty2 *Jan 17 22:19:43.528: %LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to up *Jan 17 22:19:43.578: %IOSXE_MGMTVRF-3-AFI_ATTACH_FAIL: Management VRF AFI ipv6 attach failed *Jan 17 22:19:43.653: %SYS-5-CONFIG_P: Configured programmatically by process MGMT VRF Process from console as vty0 *Jan 17 22:19:43.664: %IOSXE_MGMTVRF-6-CREATE_SUCCESS_INFO: Management vrf Mgmt-vrf created with ID 1, ipv4 table-id 0x1, ipv6 table-id 0x1E000001 *Jan 17 22:19:43.666: %SYS-5-CONFIG_P: Configured programmatically by process MGMT VRF Process from console as vty0 *Jan 17 22:19:45.011: %EVENT_TRACE-6-ENABLE: Trace already enabled. *Jan 17 22:19:45.012: %EVENT_TRACE-6-ENABLE: Trace already enabled. *Jan 17 22:19:45.013: %EVENT_TRACE-6-ENABLE: Trace already enabled. *Jan 17 22:19:45.013: %EVENT_TRACE-6-ENABLE: Trace already enabled. *Jan 17 22:19:45.164: %SYS-5-RESTART: System restarted -- Cisco IOS Software [Gibraltar], Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 16.12.1, RELEASE SOFTWARE (fc4) Technical Support: http://www.cisco.com/techsupport   *Jan 17 22:19:47.155: %LINK-3-UPDOWN: Interface Vlan1, changed state to up *Jan 17 22:19:47.811: %ILPOWER-7-DETECT: Interface Gi1/0/20: Power Device detected: IEEE PD *Jan 17 22:19:48.167: %SYS-6-BOOTTIME: Time taken to reboot after reload = 241 seconds *Jan 17 22:19:48.715: %ILPOWER-5-POWER_GRANTED: Interface Gi1/0/20: Power granted *Jan 17 22:19:50.157: %ONEP_BASE-6-SS_ENABLED: ONEP: Service set Base was enabled by Default *Jan 17 22:24:16.406: %PLATFORM_THERMAL-1-FRU_FAN_NOT_PRESENT: Switch 1: System fan 1 not present *Jan 17 22:25:17.598: AUTOINSTALL: GigabitEthernet0/0 releasing DHCP ip address 101.1.1.21. <-mgmt DHCP allocated ip got released *Jan 17 22:25:17.666: %IP-4-CLASS: Bad IP address and mask 0.0.0.0/0 in class_resolve()   << ZTP not getting invoked...>>   Anything missing       ... View more

Hi, Do we have a CLI or CLIs to display all packet drops because of forwarding (like L2/L3 related errors, ACL Drops etc) in the Catalyst Switch family. I am not looking at qos/queuing drops as such. Looking for more of forwarding drops.    Thanks.   ... View more