Cisco 4500 VSS link issue
Hi,
We are having Cisco 4500 switches running in VSS mode. Currently VSS links are connected on ports with capacity of 1 GB & we wanted to replace those ports with new 10 GB DAC cable.
We manage this switch remotely via SSH. If we disable VSS link or broke the VSS between 2 switches , is it still possible to access switches over SSH ?
or we need someone near to device for Console session ?
Thanks in advance.
It depends on how the setup is.
If you have the devices access through the console server then you should be able to access the box.
Reason: When you bring down the VSL link the dua active condition triggered.
Switch 1 detects that switch 2 is now also active triggering dual active
condition thus switch 1 brings down all the local interfaces to avoid network
instability. Until VSL link restoration occurs, switch 1 is isolated from the
network;
Once the VSL link comes up, the role negotiation determines that switch 1
needs to come up in STAND_BY mode hence it reboots itself; finally, all
interface on switch 1 are brought on line and switch 1 assumes STAND_BY role.
HTH
Similar Messages
-
Microsoft NLB and Cisco 4500 VSS
Hi,
I have a pair of Cisco 4507 switches in VSS mode. An server (10.4.1.166) using Microsoft NLB MAC address (03bf.0a04.01a6) is connected to VSS Node 1 on port Gi1/6/43. The following is configured on the switch.
arp 10.4.1.166 03bf.0a04.01a6 ARPA
mac address-table static 03bf.0a04.01a6 vlan 31 interface Gi1/6/43
The second command appears differently in running-config but looks good in mac-address-table:
# show running-config | inc mac address
mac address-table static 03bf.0a04.01a6 vlan 31 interface Gi6/43
# show mac address static | inc 01a6
31 03bf.0a04.01a6 static Gi1/6/43
Now, from a PC I can ping the VIP address 10.4.1.166 when connected to VSS Node 1 or any other switch connecting to VSS Node1. If the PC attachment is to VSS Node 2 directly or indirectly, then the ping times out. Doing the same for all the rest of servers not using Microsoft NLB but connected to Node 1 only, is successful from anywhere.
Why is the traffic not traversing the the VSL link i.e. PC -> VSS Node 2 -> VSL -> VSS Node1 -> Server.
Thanks,
Rick.Thanks Reza, Please find the output of the commands below. The VSS switch looks to be good and working for all other services.
#show switch virtualExecuting the command on VSS member switch role = VSS Active, id = 1Switch mode : Virtual SwitchVirtual switch domain number : 1Local switch number : 1Local switch operational role: Virtual Switch ActivePeer switch number : 2Peer switch operational role : Virtual Switch StandbyExecuting the command on VSS member switch role = VSS Standby, id = 2Switch mode : Virtual SwitchVirtual switch domain number : 1Local switch number : 2Local switch operational role: Virtual Switch StandbyPeer switch number : 1Peer switch operational role : Virtual Switch Active# show switch virtual redundancyExecuting the command on VSS member switch role = VSS Active, id = 1 My Switch Id = 1 Peer Switch Id = 2 Last switchover reason = none Configured Redundancy Mode = Stateful Switchover Operating Redundancy Mode = Stateful SwitchoverSwitch 1 Slot 3 Processor Information :----------------------------------------------- Current Software state = ACTIVE Image Version = Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 15.1(2)SG, RELEASE SOFTWARE (fc3)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2012 by Cisco Systems, Inc.Compiled Wed 05-Dec-12 04:38 by prod_rel_team BOOT = bootflash:cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin,1; Configuration register = 0x102 Fabric State = ACTIVE Control Plane State = ACTIVESwitch 2 Slot 3 Processor Information :----------------------------------------------- Current Software state = STANDBY HOT (switchover target) Image Version = Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 15.1(2)SG, RELEASE SOFTWARE (fc3)Technical Support: http://www.cisco.com/techsupportCopyright (c) 1986-2012 by Cisco Systems, Inc.Compiled Wed 05-Dec-12 04:38 by pro BOOT = bootflash:cat4500e-universalk9.SPA.03.04.00.SG.151-2.SG.bin,1; Configuration register = 0x102 Fabric State = ACTIVE Control Plane State = STANDBYExecuting the command on VSS member switch role = VSS Standby, id = 2show virtual switch redundancy is not supported on the standbySKR_4507_01#show switch virtual link port-channelExecuting the command on VSS member switch role = VSS Active, id = 1Flags: D - down P - bundled in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use N - not in use, no aggregation f - failed to allocate aggregator M - not in use, no aggregation due to minimum links not met m - not in use, port not aggregated due to minimum links not met u - unsuitable for bundling d - default port w - waiting to be aggregatedGroup Port-channel Protocol Ports------+-------------+-----------+-------------------15 Po15(SU) - Te1/3/1(P) Te1/4/1(P)16 Po16(SU) - Te2/3/1(P) Te2/4/1(P)Executing the command on VSS member switch role = VSS Standby, id = 2Flags: D - down P - bundled in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use N - not in use, no aggregation f - failed to allocate aggregator M - not in use, no aggregation due to minimum links not met m - not in use, port not aggregated due to minimum links not met u - unsuitable for bundling d - default port w - waiting to be aggregatedGroup Port-channel Protocol Ports------+-------------+-----------+-------------------15 Po15(SU) - Te1/3/1(P) Te1/4/1(P)16 Po16(SU) - Te2/3/1(P) Te2/4/1(P)#show run int gi1/6/43interface GigabitEthernet1/6/43 switchport access vlan 31 switchport mode access spanning-tree portfast spanning-tree guard root
Regards,
Rick. -
Dear All,
We are planning to purchase 2 Cisco 4500-X Series switches for "Enterprise Campus Collapsed Distribution and Core Architecture" design. Could you please answer me below questions:
1. Which is good stacking or VSS?
2. What are the points I should remember before implementing stacking?
3. Do we have to purchase stacking cables?
4. Do we need twinax cables to Interconnect each switch or stacking is enough?
5. The plan is to implement High availability in a way if one switch fails another should take over automatically. So which solution will be good here VSS or stacking?Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Yes and no. When you configure a VSS pair, the pair appears as one device. Whatever configuration changes are made, they're saved to both physical switches.
With VSS there's primary and secondary, but that deals with which switch actively manages the pair. Both switches actively forward traffic.
I'm not 100% sure about what happens if the primary switch fails, then you make configuration changes, and then the primary switch comes back on-line. However, I would expect the switch coming back on-line would get the latest configuration changes. (Normally, when a VSS unit fails, your first concern is getting it back on-line, not making new configuration changes. Ideally, everything will work with just either VSS unit being active.) -
How to replace bad sup in 4500 VSS cluster
I have a Supervisor 7-E on its way to replace a bad one in a 4500 VSS cluster that handles my executive row and I've just realized I only have the foggiest idea what config is required to make it join the VSS cluster.
I've looked and not found anything on point. Does anyone have a quick cheat sheet on how to do this?I actually was able to read between the lines of some different docs and came to the exact same conclusion. There is one BIG caveat that is not mentioned in your document and that is licensing.
First, Cisco TAC is totally ill-equipped to understand how VSS affects commands output on the 4500 and was little to no help in the process. I figured out the other issues below on my own and basically told them what I needed
The RMA'd unit will not have the correct license on it, it will only have LAN base which does not support VSS
4500's are licensed per chassis, not per supervisor HOWEVER the supervisor(s) are where the license resides (on 4500 sup7/8)
The "show license udi" and "license install <location>" command only run on the active supervisor. There is NO WAY that I could find to update the license on the inactive supervisor. If you replace a chassis or supervisor and add it to the VSS cluster before doing licensing, you will have to reboot the current active chassis before putting the correct license on it
You are FAR better off getting the licensing straight before adding an RMA replacement supervisor/chassis added to the VSS cluster then after. -
Cisco 4500X VSS & MEC Cisco 2960X
Hi
I have Cisco 4500x VSS connect to MEC Cisco 2960X using LACP.
I encountered a problem about C2960X
Integration reason
1.C2960X Ten 1/0/2 link flapping interface error-disable . I am disable interface then enable interface , switch show SFP not Present .
Te1/0/2 notconnect 1 full 10G Not Present. (SPF plug-in Correct)
2.use CLI reload C2960X , Ten 1/0/1 ,Ten 1/0/2 notconnect SPF Not Present. (SPF plug-in Correct)
error message :
Dec 18 12:40:25.250: %SYS-5-CONFIG_I: Configured from console by console
Dec 18 12:41:48.888: % ILET-1-AUTHENTICATION_FAIL: This Switch may not have been manufactured by Cisco or with Cisco's authorization. This product may contain software that was copied in violation of Cisco's license terms. If your use of this product is the cause of a support issue, Cisco may deny operation of the product, support under your warranty or under a Cisco technical support program such as Smartnet. Please contact Cisco's Technical Assistance Center for more information.
26F_guest_switch#show license
Index 1 Feature: lanlite
Period left: 0 minute 0 second
Index 2 Feature: lanbase
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Priority: Medium
License Count: Non-Counted
3.C2960X power Cycle ,C2960X operation normal, ,but recurring problems every day.
I do not know where the problem , I have upgrade C2960X IOS but it had same problem.
Cisco 2960X IOS version: 15.2(3)E C2960X-UNIVERSALK9-M
Cisco 4500X IOS version: cat4500e-universalk9.SPA.03.05.00.E.152-1.E.bin
Thanks for your help,Hi Reza,
Thanks for your help
I can not confirm that because I have a few switch have the same problem.
C2960X 10G port 1 is connected to C4500X slot 1, Port 2 is connected to C4500X Slot2.
link flapping, On the switch port 2.
I need to do a more precise test to confirm the problem is C2960X or 4500VSS -
Hi,
I am having an issue that the VSS is different for each switch and the trunking is not working, is there anyway to configure the trunking on the VSL port without breaking the VSS? I have set the trunking on both switches but somehow after the VSS connection is up the trunking is removed on the switch 2. The following are the snippet of the VSS configuration:
Switch 1:
interface Port-channel1
description *** VSS Port-Channel 1 ***
switchport
switchport mode trunk
switchport nonegotiate
switch virtual link 1
interface TenGigabitEthernet1/2/8
description *** VSS Links ***
switchport mode trunk
switchport nonegotiate
no lldp transmit
no lldp receive
no cdp enable
channel-group 1 mode on
service-policy output VSL-Queuing-Policy
Switch 2:
interface Port-channel2
switchport
switch virtual link 2
interface TenGigabitEthernet2/2/8
no lldp transmit
no lldp receive
no cdp enable
channel-group 2 mode on
service-policy output VSL-Queuing-Policy
Now I only have limited command on the Port-Channel 2:
SWITCH01(config)#int po2
SWITCH01(config-if)#?
virtual link interface commands (restricted):
default Set a command to its defaults
description Interface specific description
exit Exit from virtual link interface configuration mode
load-interval Specify interval for load calculation for an interface
logging Configure logging for interface
no Negate a command or set its defaults
service-policy Configure CPL Service Policy
shutdown Shutdown the selected interface
switch Configure switch link
Thanks in advance for any helpful comment.Hi,
You don't need to configure the VSL link as trunk:
just follow this config example:
Switch-1(config)# interface port-channel 10
Switch-1(config-if)# switch virtual link 1
Switch-1(config-if)# no shutdown (If the port is admin shutdown)
Switch-1(config)# interface tenGigabitEthernet 5/1
Switch-1(config-if)# channel-group 10 mode on
Switch-1(config-if)# no shutdown (If the port is admin shutdown)
Switch-2(config)# interface port-channel 25
Switch-2(config-if)# switch virtual link 2
Switch-2(config-if)# no shutdown (If the port is admin shutdown)
Switch-2(config-if)# interface tenGigabitEthernet 5/2
Switch-2(config-if)# channel-group 25 mode on
Switch-2(config-if)# no shutdown (If the port is admin shutdown)
link:
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/15-1-2/XE_340/configuration/guide/config/vss.html#wp1060298
HTH -
Cisco 4500 Quad Supervisor Deployment
Hi Experts,
I'm installing 2nd supervisor in Cisco 4500 redundant chassis.
1st supervisor is working fine with Enterprise Services License but now i need to install 2nd (newly purchased supervisor) in the chassis.
Could someone please help me on how to deploy only one license on the chassis level and link the 2nd supervisor with the existing one's enterprise services license.
Cisco delivered paper base license PAK with the 2nd supervisor, so do i need to use that PAK for this new supervisor OR without doing it i can sync the new supervisor with the license of existing one.
Your usual support is required.
With Regards,
UmerDisclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
I recall, all you need to do is install the 2nd sup with an Enterprise license, and insure SSO is configured. (I also recall, unless Enterprise license is already installed, 2nd sup installation "acts funny'; at least with sup7.) I.e. don't believe you need to muck about with license again.
Your subject title, though, has "Quad", so is this for VSS? -
Layer 2 trunk ports went down due to cisco 4500 core switch !!!
Hi Everyone,
My 2 Layer 2 2960 switchTrunk Ports went down due to cisco 4500 switch. It happening everytime . I rebbot the switch 4500 . then problem disappears but after sometime facing same issue.
Please help.My 2 Layer 2 2960 switchTrunk Ports went down due to cisco 4500 switch. It happening everytime . I rebbot the switch 4500 . then problem disappears but after sometime facing same issue.
Hmmmm ... You won't be able to determine anything if you won't provide any addition information. I mean what do you mean by "went down"? Did the port go into "error disable"?
If it went into error disable, console in both switches and post the output to the command "sh interface status err". -
REP MSTP Compatibility mode on Cisco 4500 ????
Hi all.
I having issue when deploy REP bethween Cisco 4500 Sup 7E/6LE with ASR 9000.
Follow the guide http://www.2mul.com/en/US/docs/routers/asr9000/software/asr9k_r4.0/lxvpn/configuration/guide/lesc40book.pdf , page 319 then ASR 9000 work at REP Access Gateway is supported when the access device (cisco 4500) interfaces that connect to the gateway devices are configured with REP MSTP Compatibility mode.
How to config REP MSTP Compatibility mode on interface of Cisco 4500 ??????????
How to config REP Access Gateway on ASR 9000 ???????????
Please help!
Thanks.Tran,
you can configure REP-AG on the A9k as follows:
spanning-tree repag
int g0/0/0/0.1
int g0/0/0/0.1 l2trans
encap untagged
Note that REP-AG is not full rep, we only trigger on the TCN from the rep ring and invoke a mac flush then.
Because the 9k needs to be at the head of the ring you need to configure the following on your peer:
rep edge no-neighbor
and the compatibility mode is done via:
rep stcn stp
Finally, if the 2 endpoints of the rep ring are on the same device, you may want to put the encap untagged EFP's into an XCON or BD, if the 9k's are remote a PW to make sure that you can transport the TCN's from one ring point to the other if need be in specific design scenarios.
xander
sr Tech Lead ASR9000
CCIE -
Slow program response, crashes when creating titles and dynamic link issues
Dear reader,
I am now trialling Adobe CC OSX with Premiere Pro and After Effects before deciding to subscribe but I am experiencing a lot of issues while working.
I am now working on an animation, but editing raw mxf files also gives crashes and slow responses/ program refreshes.
1) Slow mouse response
2) Slow program refresh while key framing visuals
3) Rendering in PP is extremely slow when AE is open in the background, when closing AE and re-initiate the render in PP it renders super fast
4) Crashes. When I overlay titles in my time line PP regularly crashes
5) Dynamic Link issues when working combined in AE and PP where file connections in the time line get lost when the AE project has too many sequences
I am curious to find out if other people are also experiencing these issues.
I am indecisive in getting the paid yearly plan or move to FCPX instead? Or should I get a new MacPro and is this model too old?
It worked fine 2 months ago, however I was still working on FCP7. After updating it is really bad working with it...
My system consist of:
MacPro mid-2010
OSX 10.9.5 (13F34) (new installation)
2x2,66Ghz 6-core Intel Xeon
24GB DDR3 ECC
Nvidia Quadro K5000, 4GB
2x PCIe SSD 1TB
2x HDD 3TB
2x HDD 2TB
Feedback is much appreciated! Best regards, Alexanderthis does work for basic colour correction but not when trying to grade an entire suqence to achieve a specific style, applying a vingette or certain effects have to be done in after effects.
I want to try and get my whole sequence into after effects but preserve the edits and effects added in permier pro, is there any way to do this?
rich -
Hi
I am trying to create a link in my project to one of our
company intranet pages. I am using a click box and the URL - it
works fine in the Preview from Slide or next 5 slides, but when I
Preview in Web Browser it doesn't connect. Any suggestions as to
what might be the cause?
Thanks
AlexHi Alex
Hmmm, before investigating too deeply, I'm seeing some
familiarity here. For starters, the first link is to a .PDF. It's
been my experience that links to .PDF and Word .DOC files is "iffy"
at best. If you truly copied and pasted the links, I'd first try
removing the %20 from that first link. That's something the browser
normally inserts for a space. So instead of:
http://wlgweb/Corporat/HumanResources/Staff%20Conduct/EmailInternetUsagePolicy.pdf
Change it to read:
http://wlgweb/Corporat/HumanResources/Staff
Conduct/EmailInternetUsagePolicy.pdf
This may help and it may just be twisting in the wind. But
I'd try that first. I've often seen linking issues arise from that
silly %20. If possible, try to avoid that. I'm guessing here that
it may not be possible to control in your case as someone else may
be in control of those names. I've personally always opted to
either use a mix of upper/lower case names ( StaffConduct ) or
substitution of an underscore where spaces would normally occur (
Staff_Conduct ).
Other wierdness I've seen when linking to .PDF content:
* I personally had a different PDF reader (Foxit) installed
as my default. When Foxit was my default reader, PDF links refused
to open.
* I think this one is IE specific, but I've also seen it
where if I have a .PDF in the same folder and open that way, even
though the address is totally correct, the first time through, the
link fails. With the totally correct address showing in the address
bar. I simply refresh the page and bingo, the PDF shows! Go figure.
I really don't believe that this one is related to Captivate and
the way it calls the links. My gut tells me it's an IE thing. But I
have nothing to back me up on this.
I'm not sure what to say or suggest for the second link. I
tested it myself and it doesn't work, which tells me that either
the link is simply incorrect, or possibly it's located on an
intranet site.
Sincerely... Rick -
Dear support taem, in cisco 4500 series switch i am getting error interface TenGigabitethernet 1/14 utlization threshold violated.current in traffic 705.228 (70.52 %) and out traffic 707.462 ( 70.75 %) whereas configured threshold is 30 %.
i have checked on switch but qos is there in configuration.
where i need to check if any restriction is there for incoming and outgoing traffic.
and what necassery troubleshooting i need to be done.This looks like a policy shaping.
-
Hello,
I am trying to make an OCCI9.2 sample application (occidesc) getting linking issue. I am don't think I have all the required Oracle library in my linking options. What am I missing?
My development environment: HUPX11, g++3.3.2, OCCI 9.2
===============================================
Link flags:
LDFLAGS = -L$(ORACLE_HOME)/lib32 \
-L$(ORACLE_HOME)/rdbms/lib32 \
-locci -locci9 -lclntsh \
`cat /u01/home/oracle/product/920/lib32/sysliblist`
========================================================
Linker errors:
/usr/ccs/bin/ld: Unsatisfied symbols:
typeinfo for oracle::occi::SQLException(first referenced in occidesc.o) (data)
oracle::occi::SQLException::SQLException[in-charge](oracle::occi::SQLException const&)(first referenced in occidesc.o) (code)
oracle::occi::Environment::createEnvironment(oracle::occi::Environment::Mode, void*, void* (*)(void*, unsigned long), void* (*)(void*, void*, unsigned long), void (*)(void*, void*))(first referenced in occidesc.o) (code)
oracle::occi::MetaData::getBoolean(oracle::occi::MetaData::AttrId) const(first referenced in occidesc.o) (code)
oracle::occi::MetaData::operator=(oracle::occi::MetaData const&)(first referenced in occidesc.o) (code)
oracle::occi::MetaData::getUInt(oracle::occi::MetaData::AttrId) const(first referenced in occidesc.o) (code)I can't find any documentation referencing supported compiler for OCCI. Do you know of any from Oracle that support my environment?
Environment:
Oracle 9.2
HPUX B.11.00 A
Thanks,
Minh -
Hello Freinds,
I have two querries:-
1)
a) What would be the effect if one SUP is removed (out of two) from Cisco 4500/6500 series switch.
b) what is the result after removing both SUP from cisco 4500/6500 switch.
++++++++++++++++++++++++++++++++++++
2) PLease share the step wise process for upgrading IOS on 4500 switch (with 2 SUP card).http://www.cisco.com/en/US/products/hw/switches/ps663/products_configuration_example09186a00801461ef.shtml
-
I cannot update my I tunes. I get a secure link issue when I run a diagnostic check. This is using windows xp system
Many thanks.
With those symptoms, I'd try the following document:
Apple software on Windows: May see performance issues and blank iTunes Store
(If there's a SpeedBit LSP showing up in Autoruns, it's usually best to just uninstall your SpeedBit Video Accelerator.)
Maybe you are looking for
-
Regarding : Creation of child nodes in a outlinefield
Hi, I am facing a few problems in creating a child node. I read elements from an array to populate the outline field. The array has exact definitions as to what should be a parent and child respectively. While I am able to create nodes at the parent
-
I am using thunderbird english version(up to date)with a lost of message and i want to use thunderbird in french.I try many commands with menu but it seem that nothing good So I think to uninstall the english one to run the french one. Before doing t
-
IPhone 5 not working with data or won't send text messages
Is it possible to get my phone replaced by verizon, my phone is not usable right now and I need it in case of emergency. On my LCD screen you can also see thin blue lines throughout; it looks like it is getting worse, is there anything I can do about
-
How to implement a search engine in java ?
Hi All, 1. Can anyone explain me with java code how to connect to a excel database residing on a different(I know that we do it thro' dsn) machine in my network. I know that we do it with a dsn. I created a network map but when I execute the statemen
-
HT1386 touch screen not working
I put a new tempered glass screen protector on my phone just now but now my touch on my phone isnt working. I cant access my phone or get the slide to unlock phone. Could it be the phone or screen protector?