6500 VSS SNMP issues

We recently converted 2 6506-E chassis to use VSS w/ Quad-Sup and noticed that several SNMP OIDs we used for monitoring have stopped working.
OID 1.3.6.1.4.1.9.9.217.1.3 only provides module statistics for the active chassis, rather than both.
OID 1.3.6.1.4.1.9.5 no longer exists as an object. We monitored numerous items under 1.3.6.1.4.1.9.5.1.3.1.1 which are no longer available.
Has anyone encountered these issues after converting to VSS and/or do you have any suggestions with how to deal with them?
Thanks,
-Kevin

I am having similar issue on 4500-X VSS, ENTITY-MIB only available on active chassis.

Similar Messages

6500 VSS Chassis in unknown state

Hi,
we have 6500 chassises in our set up. But using CWLMS 4.0 , we are unable to manage VSS feature of 6500.Also
User tracking for Nexus 7K Switches subnets are not working.
Please guide.
Rgrds,
Soumik.

Hi,
Would you mind posting some more information about the VSS problem. (Exact steps or maybe a screenshot of what you are doing). I didn't have any major issues configuring Cisco 6500 VSS in LMS or NCS. Minor ones were some SNMP MIBs which you can simply ignore.
Predrag Petrovic

LMS 4.0.1 - Inventory problem with 6500 VSS

Hello,
I have just made a fresh install of LMS 4.0. I installed the 4.0.1 version too. It is done on a Windows 2008 STD running a WM environment.
I have only one problem : I cannot get the inventory collection for a 6500 VSS chassis. It is discovered, I got the archive configuration, it is visible on the data topology and on CiscoView but when I try to collect it for the inventory I got the following message :
R2-C6509-01
Device Collection Failed.
Someone has an idea?
Thanks by advance,
Regards,
Abel JULIAN,
Nextiraone France.

Login to LMS, then point your browser to
http://SERVERIP:1741/rme/devices.do
select your device and click "Edit Device Attributes", then click "Inlide Edit" and adjust the SNMP timeout settings for this device; in a first step change it to 10 (default is 2); Save the settings by clicking "Modify" and on the next screen "Apply".
Retry Inventory Collection and see if it will be successful now.

NAC 4.7.2 OOB SNMP issues

Hello,
I am setting up a NAC CAM and CAS 4.7.2 OOB setup in a test environment (NAC failover for CAM and CAS), and I am seeing some strange SNMP issues. I am testing with a 3750 switch (12.2(53)SE1) using SNMP v2 and v3 since v3 and accessing the switch port configuration in the NAC manager is extremely slow. I click OOB Management -> devices -> switch XXX and it takes several minutes for the port listing to display. Then sometimes it comes up quickly but a 'show debug snmp' on the switch shows that it isn't polling the switch so it apparently starts pulling the ports page from cache, but I can see now logic in how it does this.
Q1) When and why does the ports page pull cached info?
Q2) Why is SNMP queries operating so slowly with NAC 4.7.2 OOB?
Here is my test switch/NAC SNMP config (with pseudo names and fake passwords):
snmp-server community switch_read ro (matches OOB Management -> Profiles -> Device -> SNMP Read v2 settings)
snmp-server view v1default iso included
snmp-server user switch_write switch_group v3 auth md5 <my-password> (matches OOB Management -> Profiles -> Device -> SNMP Write v3 settings)
snmp-server group switch_group v3 auth read v1default write v1default
snmp-server user cam_notify cam_group v3 auth md5 <my-password>
snmp-server host 10.200.11.100 traps version 3 auth cam_notify mac-notification snmp (matches OOB Management -> Profiles -> SNMP Receiver v3 settings)
snmp-server group cam_group v3 auth read v1default write v1default notify v1default
What is wrong with my setup? Any help is appreciated.

Did anyone ever find a solution to this issue? I'm having the same problem.... it takes minutes to open the ports on a switch in the CAM. It shouldn't take minutes to manage ports for each switch, it should take less than 10 seconds...

Installing New network card on a Cisco Catalyst 6500 VSS mode

Hi All.
I need to install a new network card on Cisco Catalyst 6500 VSS mode, I need to follow any special procedures or is it only insert the new card and the Catalyst automatically recognizes the card?
Thank you So mucho.

Hi,
Just insert the blade and the switch should recognize it. For the 6500 series the blades are hot swap able.
HTH

Two Nexus 5020 vPC etherchannel with Two Catalyst 6500 VSS

Hi,
we are fighting with an 40 Gbps etherchannel between 2 Nx 5000 and 2 Catalyst 6500 but the etherchannel never comes up. Here is the config:
NK5-1
interface port-channel30
description Trunk hacia VSS 6500
switchport mode trunk
vpc 30
switchport trunk allowed vlan 50-54
speed 10000
interface Ethernet1/3
switchport mode trunk
switchport trunk allowed vlan 50-54
beacon
channel-group 30
interface Ethernet1/4
switchport mode trunk
switchport trunk allowed vlan 50-54
channel-group 30
NK5-2
interface port-channel30
description Trunk hacia VSS 6500
switchport mode trunk
vpc 30
switchport trunk allowed vlan 50-54
speed 10000
interface Ethernet1/3
switchport mode trunk
switchport trunk allowed vlan 50-54
beacon
channel-group 30
interface Ethernet1/4
switchport mode trunk
switchport trunk allowed vlan 50-54
beacon
channel-group 30
Catalyst 6500 VSS
interface Port-channel30
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 50-54
interface TenGigabitEthernet2/1/2
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 50-54
channel-protocol lacp
channel-group 30 mode passive
interface TenGigabitEthernet2/1/3
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 50-54
channel-protocol lacp
channel-group 30 mode passive
interface TenGigabitEthernet1/1/2
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 50-54
channel-protocol lacp
channel-group 30 mode passive
interface TenGigabitEthernet1/1/3
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 50-54
channel-protocol lacp
channel-group 30 mode passive
The "Show vpc 30" is as follows
N5K-2# sh vpc 30
vPC status
id     Port        Status Consistency Reason                     Active vlans
30     Po30        down* success     success                    -
But the "Show vpc Consistency-parameters vpc 30" is
N5K-2# sh vpc consistency-parameters vpc 30
    Legend:
        Type 1 : vPC will be suspended in case of mismatch
Name                             Type Local Value            Peer Value
Shut Lan                              1     No                     No
STP Port Type                    1     Default                Default
STP Port Guard                  1     None                   None
STP MST Simulate PVST 1     Default                Default
mode                                    1     on                     -
Speed                                  1     10 Gb/s                -
Duplex                                   1     full                   -
Port Mode                            1     trunk                  -
Native Vlan                           1     1                      -
MTU                                       1     1500                   -
Allowed VLANs                    -     50-54                  50-54
Local suspended VLANs    -     -                      -
We will apreciate any advice,
Thank you very much for your time...
Jose

Hi Lucien,
here is the "show vpc brief"
N5K-2# sh vpc brief
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link
vPC domain id                   : 5
Peer status                     : peer adjacency formed ok
vPC keep-alive status           : peer is alive
Configuration consistency status: success
Per-vlan consistency status     : success
Type-2 consistency status       : success
vPC role                        : secondary
Number of vPCs configured       : 2
Peer Gateway                    : Disabled
Dual-active excluded VLANs      : -
Graceful Consistency Check      : Enabled
vPC Peer-link status
id   Port   Status Active vlans
1    Po5    up     50-54
vPC status
id     Port        Status Consistency Reason                     Active vlans
30     Po30        down* success     success                    -
31     Po31        down* failed      Consistency Check Not      -
                                      Performed
*************************************************************************+
*************************************************************************+
N5K-1# sh vpc brief
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link
vPC domain id                   : 5
Peer status                     : peer adjacency formed ok
vPC keep-alive status           : peer is alive
Configuration consistency status: success
Per-vlan consistency status     : success
Type-2 consistency status       : success
vPC role                        : primary
Number of vPCs configured       : 2
Peer Gateway                    : Disabled
Dual-active excluded VLANs      : -
Graceful Consistency Check      : Enabled
vPC Peer-link status
id   Port   Status Active vlans
1    Po5    up     50-54
vPC status
id     Port        Status Consistency Reason                     Active vlans
30     Po30        down* failed      Consistency Check Not      -
                                      Performed
31     Po31        down* failed      Consistency Check Not      -
                                      Performed
I have changed the lacp on both devices to active:
On Nexus N5K-1/-2
interface Ethernet1/3
switchport mode trunk
switchport trunk allowed vlan 50-54
channel-group 30 mode active
interface Ethernet1/4
switchport mode trunk
switchport trunk allowed vlan 50-54
channel-group 30 mode active
On Catalyst 6500
interface TenGigabitEthernet2/1/2-3
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 50-54
switchport mode trunk
channel-protocol lacp
channel-group 30 mode active
interface TenGigabitEthernet1/1/2-3
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 50-54
switchport mode trunk
channel-protocol lacp
channel-group 30 mode active
Thanks for your time.
Jose

Cisco 6500 VSS , VSL Link Connection Issue

Hello Everyone
actually i have two Cisco 6509E with two VS-S720-10G and want to run VSS on them
i do all the config same as cisco recommend, but i get somethings wrong on them, 1st. on switch2 , under "switch virtual domain" when i enter switch2, its not accepot and 2nd. non of 10G link goes up & so VSL link always down
here is my config and show commands
SWITCH#1
==================================
switch virtual domain 10
switch mode virtual
switch 1 priority 110
mac-address use-virtual
redundancy
main-cpu
auto-sync running-config
mode sso
interface Port-channel1
no switchport
no ip address
switch virtual link 1
mls qos trust cos
no mls qos channel-consistency
interface TenGigabitEthernet1/5/4
no switchport
no ip address
mls qos trust cos
no cdp enable
channel-group 1 mode on
interface TenGigabitEthernet1/5/5
no switchport
no ip address
mls qos trust cos
no cdp enable
channel-group 1 mode on
======
SWITCH#2
switch virtual domain 10
switch mode virtual
switch 1 priority 110
redundancy
main-cpu
auto-sync running-config
mode sso
interface Port-channel2
no switchport
no ip address
switch virtual link 2
mls qos trust cos
no mls qos channel-consistency
interface TenGigabitEthernet2/5/4
no switchport
no ip address
mls qos trust cos
no cdp enable
channel-group 2 mode on
interface TenGigabitEthernet2/5/5
no switchport
no ip address
mls qos trust cos
no cdp enable
channel-group 2 mode on
Thank you all in advance

Hello Dear Reza
at first, thanks for your replay
below you can find the Show Version of the SWITCH#1
6500-1#sh version
Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9-M), Version 15.1(1)SY1, RELEASE SOFTWARE (fc5)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Wed 01-May-13 13:16 by prod_rel_team
ROM: System Bootstrap, Version 12.2(17r)SX5, RELEASE SOFTWARE (fc1)
BOOTLDR: Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9-M), Version 15.1(1)SY1, RELEASE SOFTWARE (fc5)
6500-1 uptime is 6 minutes
Uptime for this control processor is 6 minutes
System returned to ROM by power cycle at 11:49:28 UTC Mon Nov 17 2014 (SP by power on)
System image file is "sup-bootdisk:s72033-adventerprisek9-mz.151-1.SY1.bin"
Last reload reason: reload
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco WS-C6509-E (R7000) processor (revision 1.6) with 983008K/65536K bytes of memory.
Processor board ID SMC18080014
SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache
Last reset from s/w reset
1 Virtual Ethernet interface
99 Gigabit Ethernet interfaces
5 Ten Gigabit Ethernet interfaces
1917K bytes of non-volatile configuration memory.
65536K bytes of Flash internal SIMM (Sector size 512K).
Configuration register is 0x2102
as you see i use "adventerprisek9-mz.151-1.SY1" but now downgrade it to "s72033-adventerprisek9_wan-mz.122-33.SXJ2" , so nothing change and EtherChannel still not up
below are the show commands:
VSS-Sw2#show etherchannel 2 summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use N - not in use, no aggregation
f - failed to allocate aggregator
M - not in use, no aggregation due to minimum links not met
m - not in use, port not aggregated due to minimum links not met
u - unsuitable for bundling
d - default port
w - waiting to be aggregated
Number of channel-groups in use: 1
Number of aggregators: 1
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
2 Po2(RD) - Te2/5/4(D) Te2/5/5(D)
Last applied Hash Distribution Algorithm: -
===========================
VSS-Sw2#sh etherchannel 2 port
Ports in the group:
Port: Te2/5/4
Port state = Down Not-in-Bndl
Channel group = 2 Mode = On Gcchange = -
Port-channel = null GC = - Pseudo port-channel = Po2
Port index = 0 Load = 0x00 Protocol = -
Age of the port in the current state: 0d:00h:00m:00s
Port: Te2/5/5
Port state = Down Not-in-Bndl
Channel group = 2 Mode = On Gcchange = -
Port-channel = null GC = - Pseudo port-channel = Po2
Port index = 0 Load = 0x00 Protocol = -
Age of the port in the current state: 0d:00h:00m:00s
Last applied Hash Distribution Algorithm: -

6500 VSS issue

I am getting below error on my VSS switches:
Operational EARL Mode Mismatch: ACTIVE: Operational Earl mode is XL-Lite
STANDBY: Operational Earl mode is XL
i think becasue of this error my i am not able to see the supervisor interfaces of my backup chassis.

What IOS version are you running ?
Can you post a "sh inventory" or a "sh module" from each chassis ?
Jon

High CPU on 6500 VSS

I am also Observing the Same problem of High CPU on 6500.
Please suggest some Investigations
When i ran Debug as defiend by u . i found two problems
•-           Many configured ACEs have the “log” command. This means that a copy of the packets will also be sent to the CPU. As you can see below:
ip access-list extended watch110_in
permit ip any host 172.27.192.10 log
permit ip host 172.27.206.2 any log
permit ip host 172.27.206.10 any log
permit ip host 172.27.206.126 any log
•-          In the netdr capture that I performed, I could see packets with a source IP of any of the above was also sent to the CPU.
2/ Redirects
•-          There are a number of packets which also have the destination index of 0x7F07
Please suggest

Hello Leo
We have the same issue but our VSS is already upgraded to SXJ6.
Do you think that it could do any difference to upload the right MIBs to LMS?
We are using 4.2.2.
Best regards
Isaac

SNMP issue in shared printer

Hi,
We have a print server with Windows server 2k8 64bit, it has around 30 printers configured in it. recently we removed the legacy printer and installed new printers with same ip and name and updated the drivers.
After we updated the drivers, the newly added printers show offline status in the print server, however we are able to ping the printer and also able to access the web interface of the printer.
The printers come to ready status when i disable the SNMP in the port configuration option. as SNMP is a need for us to monitor the printers, Kindly assist me in fixing this issue as many printers are affected now ...
Printers are canon branded.

Ping nor the web page on the device require SNMP.
Are the Standard TCP/IP Ports configured with the same SNMP community name that is set on the device?
Also verify that you have enabled SNMP on the devices.
You should be able to use snmputil.exe to walk the device mib.
Here are the instructions. But I was unable to find the file in the list of Win2k Resource kit. If the first two items check out, go searching for the tool and confirm the SNMP information gets returned from the device when queried.
http://support.microsoft.com/kb/232663/en-us
Alan Morris formerly with Windows Printing Team

Windows 2008 R2 - Printer "Offline" SNMP issue.

The issue:
Not unique from what I have read in these forums and elsewhere around the globe. But essentially, I have printers that go "offline" and only come back into life if I disable SNMP per printer port and therefore lose any "real" status messages.
Some Environmental Information:
- The printers and the print server are on the same logical subnet
- There is no filtering/Firewall between the printers and the print server and not relevant given they are on the same logical subnet.
- The firewall is disabled on the Print Server
- The SNMP community string(s) configured on the printer matches that of the print server port
- The manufacturing model of the printer varies. Various print vendor makes and models, of the 5-6 affected devices, all of them are different.
The following information relates to the newest printer a Ricoh Aficio MP C4501, manufactured and released in 2011 which is one of the models that has the issue
- The Printer's NIC firmware is up to date (applied myself as I work for this particular print vendor) and is fully compliant with SNMP V1, V2 and V3 and supports all relevant MIBs
- When the issue occurs, I can access the printer's web configuration page
- When the issue occurs, I can ping the printer device showing "offline" on the print server
- When the issue occurs, I can interrogate the printer device using an SNMP browser (many different types) on SNMP V1, V2 and V3 without issue
- When the issue occurs, I can monitor the device and get detailed status updates using SNMP V1, V2 and V3 in the print vendors own device management application as well as Spiceworks without issue
Note:
I am quite confident that there is not a communication issue with SNMP to/from the device.
I am quite confident that there is not an issue with the printers NIC in terms of firmware
I can get around this by disabling SNMP per port, but this is _NOT_ a fix because "actual" status' other than "online" are never reported.
Summary:
I'm going out on a limb here and suspecting that the root cause is not the device, firmware or print driver, but in fact something within Windows Server Print Subsystem. To that end and given there has been a huge amount of discussion on this issue,
is there any progress or even acknowledgement that this _MIGHT_ be a problem that Microsoft need to address?
--------------------------- ASE, CNE, CCNP, CLP, MCSE --------------------------

Hi Alan,
Lately I experienced this "printer-offline-problem" on my
Windows Server 2008 R2 Standard, Service Pack 1 . I found this thread on the internet and probably tried out everthing mentioned here. But nothing helped in my case. When I deleted and recreated this printer, it was in status Ready and was working as
long there was no restart of the print spooler service. Then it switched to offline and stopped working.
So I did open a support case at Microsoft as recommended by you.
It didn't help to install the latest hot fixes or to delete third party language monitors from the registry. What did help, I found out two weeks ago and I want to share it here for other people having the same problem.
1. Delete the "Offline"-printer and its port.
2. Search the Registry for the printer name. You might find these keys:
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Hardware Profiles\0001\System\CurrentControlSet\Control\Print\Printers\***problemprinter***]
"PrinterOnLine"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Hardware Profiles\Current\System\CurrentControlSet\Control\Print\Printers\***problemprinter***]"PrinterOnLine"=dword:00000000
3. Recreate this printer - done!
4. Test it by restarting the print spooler service - if you like.
If you cannot delete the printer, because you don't want to lose the print jobs in the queue, try to find the above mentioned registry keys and delete them. Then restart the print spooler service. The printer will
switch to Ready and start printing.
Microsoft then confirmed they have comparable cases like this in their database, but no information why there are these registry keys and why they arouse this problem.

VSS Permission Issue - Event ID 8194

I have a server 2012 cluster server that gets the following error a number of times every minute.
Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.
. This is often caused by incorrect security settings in either the writer or requestor process.
Operation:
Gathering Writer Data
Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {957ea24a-fb64-4b24-98f6-26efe5481451}
I have checked permissions on any third party vss writers and they are good. I'm able to stop this error from occurring if I stop the Cryptographic Services service which seems to indicate a problem with one of windows built in VSS writers. If
I run a vssadmin list writers then all of them come back stable with no errors. Any suggestions on how to fix this at this point would be greatly appreciated, thank you.

Hi,
There is a similar thread, please go through it to help troubleshoot this issue:
Server 2012 - VSS Event ID 8194 - Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005 Access is denied
http://social.technet.microsoft.com/Forums/windowsserver/en-US/329e9b71-f27e-4e42-87c0-f6bac31516dc/server-2012-vss-event-id-8194-unexpected-error-querying-for-the-ivsswritercallback-interface-hr?forum=winserverfiles
If this error occurs on Cluster nodes and no other symptoms are observed, the error can be safely ignored.
Regards,
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

6500 VSS FWSM Question

Hello,
I have a question regarding license with dual 6500's for an FWSM with VSS. If I'm running VSS does the 6500 see the FWSMs as two separate firewalls., or still as one. I ask because of the fail over for it that I would like to setup. Thanks in advance!

Dear Marvin
I want to apply license to increase security context in FWSM which is running in Active-Active mode on VSS Core switches
As per below document, first we need to disable failover by entering 'no failover' command on active FWSM and then apply the license seperately on both FWSM.
I just want to know when i will disable the failover then standby move to pseudo-standby state.
Will there be any services impact which are running behind the FWSM when disbaling the failover and then re-enabling the failover.
http://www.cisco.com/c/en/us/td/docs/security/fwsm/fwsm40/configuration/guide/fwsm_cfg/swcnfg_f.html#wp1073226
Appreciate your response.

6500-VSS and NEXUS 56XX vPC interoperability

Hello, is it possible to establish a PORT CHANNEL between a couple of Cisco 6500 running VSS mode and a couple of NEXUS 5000 running vPC? . Design should be " Back-to-Back" : VSS-- Port-Channel--vPC.
I want also to support L2 and L3 flows between the two couples.
I read many forums but i am not sure it runs.
Is such design, if it runs; supported by Cisco?
Thanks a lot for your help.

Hi Tlequertier,
We have VSS 6509Es with Sup 2Ts & 6908 modules. These have a 40gb/sec (4 x 10gb/sec) uplink to our NEXUS 5548UP vPC switches.
So we have a fully meshed ether-channel between the 4 physical switches (2 x N5548UP & 2x6509E)
Kind regards,
Tim

Switch 6500 VSS

Hi,
I have a client with a couple of 6500 with supervisor 720-2B
Now he would activate a VSS between the 6500.
The supervisor don't support VSS and the question is: is there an upgrade for the 720-3B or he must change them ?
Best Regards
Claudio

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
You'll need to replace the sup. The sup720 doesn't support VSS.
Also for VSS, only certain line cards are supported.

6500 VSS SNMP issues

Similar Messages

Maybe you are looking for