CCTV problems over Cisco Switching

Hello,
this is my frst post in these forums and i start by apologising for my English as it is not my native language and thanking any help that can be provided as this is one problem i cant seem to solve and its making me lose my sleep.
Moving to the issue,
recently we migrated couple of uplinks from a C3750 cluster to a C6509 in one of our customers, wich lead to the discovery of the following issue in their CCTV ( 3rd party, not cisco ) network:
- Cameras function normally <-> 15 seconds elapsed time <-> Cameras start losing bandwidth streaming from 700 kps to 0 kps <-> Cameras freeze <-> 5 seconds after cameras are back to normal <-> Rinse and repeat
Now, prior to even having the C3750 the customer had a similar setup but using switches from another vendor, and i cant guarantee that the solution was working when the C3750 were first installed as no problems were reported, but heres what i know: the CCTV works properly using the other vendor switches with simple VLans created and nothing else. (they still have their original config on)
I have been running all kinds of troubleshooting revolving multicasting as this was my initial bet to solve the problem, but i have exhausted my moves and would apreciate any help this community can give me.
Wild fixes are accepted also.
TY.
Antonio

So, i have found out that the CCTV circuit when connected to the C3750 in an isolated environment works perfectly. Only when i connect the trunks from the C3750 to the C6509, the CCTV issues return.
So, something is wrong with the communications between the C3750 and C6509 switches. Maybe a problem between the Vlans. Any ideas?
Ty again.
Antonio.

Similar Messages

NTP Service on Domain Controller have problem with cisco switch

Hello!
I have Windows Server 2008 R2 SP1 Domain Controller with NTP services
The windows opertion system clients get NTP time ok.
There are problem with cisco switch, can't get time from NTP.
Can anybody help me to fix problem?
C:\Users\Sysuser>w32tm /query /configuration
[Configuration]
EventLogFlags: 2 (Local)
AnnounceFlags: 5 (Local)
TimeJumpAuditOffset: 28800 (Local)
MinPollInterval: 6 (Local)
MaxPollInterval: 10 (Local)
MaxNegPhaseCorrection: 1800 (Local)
MaxPosPhaseCorrection: 1800 (Local)
MaxAllowedPhaseOffset: 300 (Local)
FrequencyCorrectRate: 4 (Local)
PollAdjustFactor: 5 (Local)
LargePhaseOffset: 50000000 (Local)
SpikeWatchPeriod: 900 (Local)
LocalClockDispersion: 10 (Local)
HoldPeriod: 5 (Local)
PhaseCorrectRate: 7 (Local)
UpdateInterval: 100 (Local)
[TimeProviders]
NtpClient (Local)
DllName: C:\Windows\system32\w32time.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
AllowNonstandardModeCombinations: 1 (Local)
ResolvePeerBackoffMinutes: 15 (Policy)
ResolvePeerBackoffMaxTimes: 7 (Policy)
CompatibilityFlags: 2147483648 (Local)
EventLogFlags: 0 (Policy)
LargeSampleSkew: 3 (Local)
SpecialPollInterval: 3600 (Policy)
Type: NTP (Policy)
NtpServer: 10.7.0.4 (Policy)
NtpServer (Local)
DllName: C:\Windows\system32\w32time.dll (Local)
Enabled: 1 (Local)
InputProvider: 0 (Local)
AllowNonstandardModeCombinations: 1 (Local)
VMICTimeProvider (Local)
DllName: C:\Windows\System32\vmictimeprovider.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
Cisco config and errors
CISCO1#show ntp ass det
10.7.0.7 configured, insane, invalid, stratum 3
ref ID 10.7.0.4, time D5BC850F.C8400AB2 (15:50:39.782 MSK Mon Aug 19 2013)
our mode client, peer mode server, our poll intvl 1024, peer poll intvl 1024
root delay 62.50 msec, root disp 11128.04, reach 377, sync dist 11218.796
delay 6.06 msec, offset -467951.1096 msec, dispersion 56.49
precision 2**6, version 3
org time D5BC8864.F79C33A7 (16:04:52.967 MSK Mon Aug 19 2013)
rcv time D5BC8A38.EBDECB39 (16:12:40.921 MSK Mon Aug 19 2013)
xmt time D5BC8A38.EA5173BE (16:12:40.915 MSK Mon Aug 19 2013)
filtdelay = 6.06 5.87 3.23 7.90 6.41 5.17 13.03 3.43
filtoffset = -467951 -467905 -467936 -467885 -467764 -467816 -467707 -467697
filterror = 0.02 15.64 31.27 46.89 62.52 78.14 93.75 93.78

Hi,
>>I gave log on as a service right to this account in Default Domain Controllers Policy but unfortunately it was not enough
Based on your description, we can try to grant this account Allow log on locally
user right in the default domain controller policy to see if it helps.
The policy setting is:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow log on locally
Allow log on locally
http://technet.microsoft.com/en-us/library/cc756809(v=ws.10).aspx#feedback
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.
Best regards,
Frank Shen

Exchange latency problem after cisco switch implementation

I recently upgraded our network with 9 2950's and 1 3560G switch. I've configured 2 vlans, one for servers and the other for clients and everything seems to work ok except communications to our exchange box. Since the upgrade users receive a message box "requesting data from microsoft exchange" several times during the day. For some users it only appears for a second or few seconds, others it's up for a minute or more.
I've run diagnostics on the exchange box and everything there seems to be ok, but i'm wondering if maybe I missed something in the port configuration on the switches that would cause this type of latency problem. Anyone ever see anything like this before?
Regards,
Dave

Should this be all VLAN interfaces or just the one the exchange server resides in? I looked up this command and it states it is used to keep tcp sessions from being dropped. Is there a command that shows the number of sessions which have been dropped on the switch?
the show interface command only gives me this:
GigabitEthernet0/27 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 0014.a9fb.bd9b (bia 0014.a9fb.bd9b)
Description: Exchange
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX
input flow-control is off, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output 00:00:01, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 210000 bits/sec, 22 packets/sec
5 minute output rate 29000 bits/sec, 10 packets/sec
71823404 packets input, 1002585060 bytes, 0 no buffer
Received 1121971 broadcasts (0 multicast)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
22824962 packets output, 3874554074 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out

Cisco Switch TCL SMTP timeout

Hello I have some problem with cisco switch if i use SMTP event over TCL.
My TCl scrip contain code:
if [catch {smtp_send_email $mail_msg} result] {
error $result $errorInfo
#code for dump to file
} else {#code if all ok}
If internet is work script work fine. but if internet is down switch try send message long time and script "Process Forced Exit"
I have error
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl: Process Forced Exit- MAXRUN timer expired.
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl:     while executing
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl: "error $result $errorInfo"
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl:     invoked from within
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl: "$slave eval $Contents"
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl:     (procedure "eval_script" line 7)
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl:     invoked from within
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl: "eval_script slave $scriptname"
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl:     invoked from within
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl: "if {$security_level == 1} {       #untrusted script
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl:      interp create -safe slave
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl:      interp share {} stdin slave
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl:      interp share {} stdout slave
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl: ..."
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl:     (file "tmpsys:/lib/tcl/base.tcl" line 50)
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl: Tcl policy execute failed:
Jul 12 23:35:10: %HA_EM-6-LOG: event.tcl: Process Forced Exit- MAXRUN timer expired.
I try change Maxrun timer but it not help (i have same error but it not print before time not end).
I try ios for switch 150-2.SE4 | 122-55.SE8 | 122-44.6
I try this code on cisco router, it work fine(if smtp server not avalable script print error 1-2sec).
Thank you.

If the mailer server is not listening on tcp/25 or otherwise refuses the connection, then the socket attempt should die quickly. If the mail server is truly unreachable, then the socket will never timeout until the EEM policy terminates. This holds true on the latest version of EEM on routers as well.

Power Over ethernet on Cisco switches - why??

I administer 3 servers (two g4 towers and one xserve attached to an XCraid) and 50 Macintosh workstations in an agency/production group within a fairly large company (2000+). Like most major companies the majority of the computer and servers are Windows based (specifically DELL) with CISCO switches.
I ran into a problem today where a switch was updated the "OS of the swithc" without my knowledge by our Infrastructure group. This resulted in a very high latency problem when pulling files from our Apple servers. After some digging we determined that the feature "Power Over Ethernet" had been disabled when they updated the switch's OS. Once we enabled PoE back on those ports, it was back to business.
My question here is, why does this feature have to be enabled? All DELL servers reconnected without a hitch. I hear PoE is only really resevered for VoiP devices and such. What is it with Apple servers that need this feature turned on?
Look forward to hear from you all.
Xserver, Xraid, G5, etc Mac OS X (10.4.6)

I can confirm that portfast makes a huge difference, as the autonegotiation between the switch and the client is performed inside of about 2 seconds, rather than the standard thrash-around period of about 40 seconds that some ethernet devices can use to determine line speed and simplex / duplex operation.
Turn on portfast on any switch ports that you don't plan on using for trunking / uplinking. When you do this, it tells the switch that there isn't a managed switch / router downstream, so it doesn't need to try to negotiate routing protocols and whatnot - it greatly speeds up the autonegotiation process.
Also, on some Cisco switches (We found it on a Cisco Catalyst 4006) if you lock the port to a specific operating speed / mode (e.g. 100Mbps / full duplex), the Mac doesn't like it nearly as much as if you leave it to autonegotiation. We were having the exact same issue the OP is seeing (limited bandwidth, massive CRC error count) until we put it back to auto and enabled portfast, and then we got the performance we expected, without recurrence of the issue.

We use Adobe Creative Suite 4 Master Collection. Are there problems if we switch over to Windows 8?

We use Adobe Creative Suite 4 Master Collection. Are there problems if we switch over to Windows 8?

CS 4 is not supported under Windows 8. There are bound to be problems with several programs. You will have more problems with 64-bit Windows 8 than the 32-bit version. I know for certain that you will have issues with Acrobat.

3com and cisco switches (802.1q)vlan integration problem - broadcast storm?

Hi forum,
we are using 3com switches, the 3com switches implement open vlans, which mean if an ieee 802.1q packet is received at a port and the port is not a member of that vlan, the switch does not perform vlan filtering. if the address is previously learned, it will be forwarded correctly, but if it is not, it will be flooded to all ports within that VLAN.
my questions:
1) if another cisco switch connected with the 3com switch are placed in the same vlan, and the 3com switch received a 802.1q packet from a rogue device, it will be flooded to all the ports(including the cisco ports) within that VLANs, will it cause a broadcast storm?
2) how do i configure the cisco switch to filter off unknown tagged packet on a port? by using vlan prunning?
3) how do i blocked the broadcast from the 3com switches? using broadcast suppression?
4) is there a way on the design side to effectly counter this problem?
Kind regards,
paul

It sounds like setup of your 3com switch is not quite up to your requirements. If a port is declared as tagged, it's ok to receive tagged frames for VLAN's that were not previously known on this port. However if your policy requires that only specific VLAN's are permitted on given tagged port, then you need to add some extra command on your 3com switch. Check with documentation and possibly with your 3com support partner.
As for cisco routers, tagged ports in Cisco-speach are trunks (this might be confusing for you as 3com calls trunks what in Cisco world is known as either Etherchannel or port aggregation). By default a trunk (tagged) port allows any VLAN. If your policy requires so, you can explicitly specify which VLAN's are allowed on given trunk (tagged) port. If a frame arrives with a tag that is not on the allowed list, the frame will be discarded. So you don't need any fancy broadcast supression to block traffic from disallowed vlans coming from your 3com switch to cisco.
P.S.: Make sure that you don't mistake 'member of VLAN' with 'native VLAN'. Some parts of your message suggest that you do.

How to get info over snmp on cisco switch whether native vlan on a port is tagged or not?

Hi!
I want to know which oid(s) should I query to know whether native vlan on trunk port on cisco switch is tagged or not?
I am querying the oid .1.3.6.1.4.1.9.9.46.1.6.3.0 (vlanTrunkPortsDot1qTag) on cisco 3560 (E Series) and I am getting global value. Also, this OID is showing as deprecated. So I query .1.3.6.1.4.1.9.9.246.1.6 (cltcDot1qAllTagged) and its subtree, but no value is returned.
Switch Version is
Cisco IOS Software, C3560E Software (C3560E-UNIVERSALK9-M), Version 12.2(50)SE2

Keep in mind that DHCP is a broadcast packet to start. So the AP can only listen in the subnet that it has an IP address for.
Now, for any other subnet you can use the AP for DHCP but you have to have an IP helper address on your L3 pointing back to the AP.
That being said, I wouldn't use the DHCP server on the AP as it is limited. You'd be better off using a Microsoft server or some other device that is designed for DHCP.
HTH,
Steve

Cisco AnyConnect connection problem over WiFi

Hi guys,
I'm having some problem with Cisco AnyConnect connections.
hardware: ASA 5515-x with AnyConnect Essentials.
software: ASA Software Version 9.1(2)8
anyconnect-win-3.1.05187-k9.pk
Internet Explorer 11 on computers
Problem:
Can't connect with the AnyConnect WebLaunch on WiFi.
it's stucked for about 20sec at "Please wait while the VPN connections is established"
Then we get this error message "The IPsec VPN connection was terminated due to an atuchentication failure or timeout...."
If I click Connect in the AnyConnect Client it connects and I login with my credentials without any problem.
First thought was that my test-computer was the problem, but have tried with 3 different PCs with different hardware.
If i plugg in a network cable it works perfect with the WebLaunch.
Has anyone experience the same problem and have a solution?
Thanks in advance!
br
Robin
Update:
I still go the problem, I've updated our FW to ASA9.2(2.4).
Anyone have a clue? It works good on two of our ASA5505.

The Windows Vista PC that were having problem connecting via AnyConnect, were they an upgrade from Windows XP? If they are, and they have AnyConnect installed prior, it needs to be uninstall prior to upgrading to Windows Vista as per the AnyConnect release notes:
http://www.cisco.com/en/US/partner/docs/security/vpn_client/anyconnect/anyconnect24/release/notes/anyconnect24rn.html
Also, you might want to double check that the Vista is either with SP2 or Vista SP 1 with KB952876.

Integration problem between Cisco Seure ACS 4.2 with LDAP

Hi expert,
I have a problem with the integration between Cisco Secure ACS 4.2 with SUN Java System Directory (LDAP). During the integration, I noticed that user failed to authenticate against LDAP via Cisco Secure ACS. The error message is "Authentication Type is not supported by external DB". In this case the "external DB" refer to LDAP. Anyone of you having an experience on integration on both product before? Can any of you give me some pointers about this. Attached are both screen capture on my ACS server.
Thanks very much,
Daniel

Hi,
Thanks for the compatibility chart. Oh dear ..., it seems that the LDAP does not supports PEAP (EAP-MS CHAPv2) at all. Am not sure if the latest LDAP (particularly for SUN Java System Directory) able to support this authentication protocol.
Just to clarify with you all just in case if you wonder what I'm trying to do; our company wants to implement 802.1x over the network. So, every staff on the network must authenticated before able to access the network resources. Our Linksys switches supports this standard including Cisco switches of course. Our RADIUS server is Cisco Secure ACS 4.2 but all those users information including username and passwords are stored in our directory server (LDAP) which is SUN Java System Directory.
Since most of our staff machines are running on XP and Vista, the only available authentication method (beside certificate based) is PEAP (EAP-MSCHAPv2). Based on the compatibility chart, the generic LDAP does not supports this authentication protocol as what we noted the "authentication type not supported by external database" error message in the ACS logs.
From what I learned that the latest LDAP (version 3.0?) able to support this authentication protocol, but yet to be confirmed on my further research.
So... Anyone can advice me on this matter? Thanks very much !

ARD and Cisco switches (multicast storm issue)?

We had Cisco bring in an engineer to look into our problem where ARD stalls/fails to push packages or pull reports (etc.). We never have a problem remotely controlling computers.
They told us "Multicast" needs to be on at every switch that has Macs connected. In one environment all Macs are on the 10.100.9.xx subnet, and Macs are at different locations. All the switches these dot-9 subnet Macs are connected to need "Multicast" turned on.
I've read numerous threads regarding how Macs drift in and out and ARD is not able to do what it's advertised to do. Has anyone run into this issue where Cisco switch configuration caused ARD to not perform properly?
I will summarize once Cisco resolves the issue. They're due in for another test or two before we can make the necessary switch adjustments.
Thanks,
Don

I have 3COM switches and they appear to be performing as your CISCOs are. I have computers drift in and out all day as well as my task server not responding to input at all. When trying to browse the LAN for computers, I don't receive any information regarding my computers, or I only get 5 out of 2100. I will talk with my Network Administrator and find out if Multicast is turned on. I have sent Apple 300 crash reports over the past 3 months, but have not received any word on a fix for ARD issues.

ASA 5505 Trunking problem with cisco 3760

Here is my asa 5505 configuration and at bottom i am pasting cisco 3760 configuration, I am having trunking problem and seen other people having the same issue but no solution.
Problem: when i connect any device on Switch 3760 port 1 which is trunked i cannot communicate with niether vlan.
I have tried device with both static vlan configuration
192.168.1.99 (vlan 2)
172.168.1.99 (vlan 8)
if i change port 1 to access mode or define native vlan it work with one vlan.
interface 5 of Cisco ASA is connected with interface 25 (uplink) on Cisco Switch
interface Ethernet0/5
switchport trunk allowed vlan 1-10
switchport mode trunk
interface GigabitEthernet1/0/25
description **UPLINK**
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1-10
switchport mode trunk
On port 1 of cisco Switch i am creating trunk
interface GigabitEthernet1/0/1
description **LAN**
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1-10
switchport mode trunk
no logging event link-status
spanning-tree portfast
CISCO ASA Config i have configure the following vlans
interface Vlan2
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
interface Vlan8
description Server VLAN
nameif Internal_LAN
security-level 90
ip address 172.168.1.1 255.255.255.0
interface Ethernet0/0
switchport access vlan 2
on Cisco 3760 i have configure the following vlan.
v
vlan 2
name inside
vlan 8
name Internal_LAN
interface Null0
no ip unreachables
Message was edited by: macboy

Hello,
I can see many people have visited the post but there isn't any reply.
I think this is because of the following:
The configurations are long and most people dont want to read it. Try adding only relevant configuration to the issue.
The problem description is not clear. You mention trunking problem but what exactly is the problem? Can you ping from switch to ASA? Is any Vlan information being passed or they are all failing. Try to be as much specific as possible.
Which port of the switch connects to the ASA?
Using portfast on a trunk (interface GigabitEthernet1/0/1) is not recommended.
Regards,
Felipe.
Remember to rate useful posts.

Has anyone develped an EM plug-in for Cisco switches or routers

Folks,
Has anyone develped an EM plug-in for Cisco switches or routers? Please reply to this thread if you have developed one and would like to share your experience in developing this plug-in?
Thanks,

It's probably not the conversion from CMYK to RGB that's causing the problem, but color profile (ICC) embedding in Photoshop. Fireworks doesn't read color profiles. You might be able to create an action to remove the color profile in Photoshop and then batch process the images with it.

Cisco switches and virtual ip address(load balancing address) on xenapp portals

Hi I am quite new in configuring cisco switches and stumble across an issue after installing xenapp7.6 with load balanced portal to the ddc`s
It seems i only can ping or get access to portal if using real ip address behind cisco switch from other subnets in my network.
I can ping ddc01 and ddc02 and connect to the portal with http without problem. However when i triy to access the load balancing address of the ddc`s
it wont answer to ping or http
In same subnett it is no problem connecting to the load balancing address of the ddc`s, but in loactions on other subnets i only can access real server ip
eks
dd01 192.168.1.4 ok ping and access behind cisco switch from subnets
ddc02 192.168.1.5 ok to ping access behind cisco switch from subnets
load balancing for both ddc 192.168.1.6 not able to get answer og access from subnets, only in same subnett
Is there any way to configure switch to access the load balancing address of the ddc`s ?
Regards
Pål Arne Røberg

Wrong forum. This forum is dedicated to feedback related to CSC framework itself. You should not wish for response here.
Moved by moderator, no longer apply.

Configure Domain Controller ( PDC emulator) as NTP source for Cisco switch 6509

Hi All,
My Org consists of 2 DC one Physical and One Virtual. All Roles are on Physical machine. I ran a W32tm /Query /Configuration command on PDC emulator and the results are confusing.My PDC is using time source VMICTimeProvider a syou can see below.
VMICTimeProvider (Local)
DllName: C:\Windows\System32\vmictimeprovider.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
My first Question is that Is it Ok for PDC emulator to use this time source or should I change to some Other source like pool.ntp.org or time.windows.com,0x1.
My Second Question is that I have a core switch cisco 6509 and I want this switch to use my NTP server (PDC emulator ) as NTP source,but at present I cannot as I am getting this error on switch.(no select intersectionTP )
Can Any one help ... Its is urgent
Thanks in Advance
EagleAsh

You should not make your DCs sync their time with your Hypervisor. This usually ends with time synchronization problem so I would recommend to disable that on your DCs and domain joined VMs and use an external NTP server to sync time on your PDC while using
your AD forest topology for time sync on other DCs and domain-joined computers.
I have already started a Wiki article that describes how to configure time sync in an AD domain and you might consider using the GPO configuration option that is stated: http://social.technet.microsoft.com/wiki/contents/articles/18573.time-synchronization-in-active-directory-forests.aspx
For the CISCO switch, I would recommend asking them in CISCO forums.
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password

CCTV problems over Cisco Switching

Similar Messages

Maybe you are looking for