Etherchannel in switch multilayer packet tracer

Hi experts this is my first post,
I´m practicing with SW multilayer in packet tracer, I´ve created a port-channel between 2 multilayer switches with the next commands
channel-group 1 mode desirable
but when i´m trying to assign an ip to this port channel with the command "no switchport" I can not do it and I´m getting this:
Switch(config)#int port-channel 1
Switch(config-if)#no switchport
% Incomplete command.
and also I get this message: 
Switch(config-if-range)#no switchport 
Command rejected (Port-channel): Either port is L2 and port-channel is L3, or vice-versa
Command rejected (Port-channel): Either port is L2 and port-channel is L3, or vice-versa
So my question is, how can I assign an ip address to a port channel in a multilayer switch in packet tracer? is it possible to do that in PT?
Thanks in advance may be I´m doing something wrong.

I just did this same setup in Packet Tracer 6.1.1 and it appears to work.
Default the configurations in each of your existing links, set the individual links as "no switchport" first, then place them into a port-channel, then enter into the port-channel interface and set the IP address.
interface Port-channel 1
  no switchport
  ip address 10.10.1.1 255.255.255.0
interface FastEthernet0/1
  no switchport
  channel-group 1 mode desirable
  no ip address
  duplex auto
  speed auto
interface FastEthernet0/2
  no switchport
  channel-group 1 mode desirable
  no ip address
  duplex auto
  speed auto
Hope that helps.

Similar Messages

  • Bug in packet tracer 5.3

    Hi all.
    I have a L3 switch in packet tracer. If i put the command "no ip routing" the switch can route.. Its a bug?¿¿?
    I add a pkt file... If anyone ping from pc3 to , for example, pc1 ping works using the no ip routing command.
    Regards.

    The "redistribute" command works for all IP routing protocol groups
    The format of the command is documented here:
    http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_pi/command/iri-cr-a1.html#GUID-9C67E447-FD2B-47E3-9A2C-334A41829A76
    You have to identify the routing protocol (and AS, if applicable) that from which you intent to redistribute before adding any other arguments.
    e.g.
    redistribute rip (details)
    redistribute eigrp 109 (details)
    In your case, you omitted that and the command parser tried to interpret "metric" as if it were the name of a routing protocol.
    "metric" is a valid argument (which is why the "help" works), but it needs to appear later in the multi-staged redistribute command. 
    Once could argue that Cisco should enhance the help to be more clever, but if you start with "redistribute ?" that step should be clear.

  • Is packet tracer 5.1 or 5.2 enough to simulate all labs of CCNP exams?

    Now am practicing for BSCI and BCMSN.I don`t have any facility to do labs.
    1)  Is packet tracer 5.1 or 5.2 enough to simulate all labs of CCNP exams..?
         And i could find layer 2 switchs in packet tracer 5.1.
    2) ip helper-address will support in layer 2 switches..?

    Now am practicing for BSCI and BCMSN.I don`t have any facility to do labs.1)  Is packet tracer 5.1 or 5.2 enough to simulate all labs of CCNP exams..?     And i could find layer 2 switchs in packet tracer 5.1.2) ip helper-address will support in layer 2 switches..?
    Hi,
    Packet tracer 5.1 is good for practising labs for CCNP routing or switching and also you can try GNS3 for real time simulation of labs for CCNP and for your second question  L2 switch supports VLANs, but cannot route traffic from one VLAN to another without help from another L3 device to do the routing.
    You will need to configure a trunk port to whatever device you use for routing, and configure the ip helper-address on each subinterface or vlan interface you setup on the L3 device.
    Hope to Help !!
    Ganesh.H
    Remember to rate the helpful post

  • EtherChannel with Packet Tracer

    I tried in Packet Tracer to bundle 4 links between 2 switches, each switch is connected to a host.
    when I try to ping from host to other, it pings and successful, but when I try to disconnect a cable, which the selected link by the PAgP, it says Request timed out.
    and it can't ping till I return that cable back again, what is the problem?

    Hello, i have packet tracer 6.2, and i use Switches 3560(L3), my portchannel have two ports, when i reload de Switch1, after to startup the Switch appear this message
    %EC-5-CANNOT_BUNDLE2: Fa0/1 is not compatible with Po1 and will be suspended (trunk encap of Fa0/1 is auto Po1 is dot1q)
    %EC-5-CANNOT_BUNDLE2: Fa0/2 is not compatible with Po1 and will be suspended (trunk encap of Fa0/2 is auto Po1 is dot1q)
    Do you Know what is the problem
    CONFIG S1
    interface Port-channel 1
    switchport trunk allowed vlan 10,20
    switchport trunk encapsulation dot1q
    switchport mode trunk
    interface FastEthernet0/1
    channel-protocol pagp
    channel-group 1 mode auto
    switchport trunk allowed vlan 10,20
    switchport trunk encapsulation dot1q
    switchport mode trunk
    interface FastEthernet0/2
    channel-protocol pagp
    channel-group 1 mode auto
    switchport trunk allowed vlan 10,20
    switchport trunk encapsulation dot1q
    switchport mode trunk
    CONFIG S2
    interface Port-channel 1
    switchport trunk allowed vlan 10,20
    switchport trunk encapsulation dot1q
    switchport mode trunk
    interface FastEthernet0/1
    channel-protocol pagp
    channel-group 1 mode desirable
    switchport trunk allowed vlan 10,20
    switchport mode trunk
    interface FastEthernet0/2
    channel-protocol pagp
    channel-group 1 mode desirable
    switchport trunk allowed vlan 10,20
    switchport mode trunk
    Thanks

  • Problem setting vty password in packet tracer

    I'm trying to configure a vty password in packet tracer and I think I'm doing something wrong. These are the commands I'm using:
    line vty 0
    password test
    end
    When I do showrun I can see the command, but when I try to get access to the vty line, it never ask's me for the password. What am I doing wrong.
    Screen shot included. Thanks.

    As far as I know, you can't assign an IP address to an individual interface, but you can assign an administrative IP address to the switch itself. This screen shot is the commands that I used to assign an ip address, subnet mask & gateway. And I have done this on real 2960g.

  • Packet Tracer 6.0 problem

    How to open saved *.pka file on another PC? When I try I got message: "The file ... is not compatible for this version of Packet Tracer". I use version 6.0 on both PCs. Thank you.

    It was a bug of version 6.0.1. Cisco says: 
    All NetAcad students using the student version of Cisco Packet Tracer (PT) 6.1 should upgrade to PT 6.1.1 as soon as possible. Version 6.1.1 contains an important fix to a bug and helps ensure the correct scoring of Packet Tracer Skills Assessments (PTSAs) in the CCNA Routing and Switching curriculum. 
    So I just upgraded my PT to version 6.1.1.

  • 4 wifi bridges vs EtherChannel on switches

    he environment:
    L2 SWITCH
    | |
    AP AP
    AP AP
    | |
    L2 SWITCH
    I've configured load-balancing src-mac on 1st side (pc lan) and dst-mac on the other side (router lan).
    "The default is to use the source MAC address. This default means that all packets that the switch receives on a non-Fast EtherChannel port with the same MAC source address that have a destination of the MAC addresses on the other side of the channel take the same link in the channel. Use source-based forwarding when many stations that are attached to the Catalyst 2900XL/3500XL send to a few stations, such as a single router, on the other side of the Fast EtherChannel"
    Need to know which EtherChannel L2 protocol (on switches catalyst 2950) use for combine 4 54Mbps Wireless AP (AIR-BR1310G-E-K9) to increase
    wireless bandwidth, load sharing, load balancing and redundancy the L2 protocol.
    I know that with EtherChannel solution I can't manage the bridges, but if I use EtherChannel on switches and only 1 bridge go down (maybe only the radio) the etherchannel is "aware of that L2 failure" (the port-channel check the other side)?
    It's better to use "Link Aggregation Control Protocol (LACP) / 802.3ad" or "Port Aggregation Protocol (PAgP)" ?
    Regards
    Roberto Taccon

    HelloI have a couple of uc520s2 - esw - 520-24p 2 - esw - 520-48p1 - 3560x switchthe 3560x is our core switch. my uplinks between the core and the 4 esw. i was able to get the etherchannels configured and "working" however the fact that the vlan 1 on the esw is the native vlan, i change the native vlan to be vlan 20 and i'm really struggling with thisI have 5 vlans configured on the 4 esw switches data, voice, management, servers, guest. i can't get the intervlan routing to work properly on the esw. If i configure any vlan on the 3560 i have access to the management vlanhowever if i connect my pc to any port on the esw switches i don't have access to the management vlan at all. for some reason intervlan routing isn't properly working. if i want to have access to the management vlan on the esw switches i need to assign a port on the esw to be on the management vlanif i use the common scenario, all the ports being voice + data, i can't manage any of the switches at allwhat else should i do to get this fixed ?is it something on the ether channels or am i missing something else ?thanks
    Hi,
    Can you put up your network in diagramtic representation view, do that it will be helpful for more understanding.
    Ganesh.H

  • How to install packet tracer on mac os x 10.7.5

    Hi, I nedd to install the cisco packet tracer on my mac

    Hi everyone, I found this new version of Packet Tracer 6.0.1 and packaged native for mac, just unzip, mount the dmg and drag and drop to your Applications.
    Greetings to everyone.
    Please share: D
    http://rafavg77.wordpress.com/2013/09/06/cisco-packet-tracer-6-0-1-para-mac-os-x /

  • Package Packet Tracer 6.0.1.exe for native for Mac OS X

    Hello everyone, share a way to package Packet Tracer.exe possibly any .exe to a native app on Mac OS X with WineSkin.
    You can download the Packet Tracer 6.0.1 for windows and WineSkin from here:
    Download Packet Tacer 6.0.1
    Download WineSkin
    After download and install WineSkin is necessary to download certain Engines and Wrappers that allow you to run windows on mac and itself packaging libraries. The Engines that must install are:
    WS9Wine1.5.27
    WS9Wine1.5.2AMDSpeedHack
    The Wrapper that we will use is:
    WineSkin-2.5.12
    For the following steps you can follow this tutorial video made by my
    http://rafavg77.wordpress.com/2013/09/07/como-empaquetar-packet-tracer-exe-a-una -app-nativa-en-mac-os-x/
    Any question or observation I am open to comments. Best regards.

    hi,
    i have already followed all your instructions and after after many times, i was stuck at the same place.
    i want to click the icon so that i can "install this software" but the dialog box opened and "Cisco Packet Tracer 6.0.1 can't be open"
    i really hope you saw my message and please guide me on how to proceed.
    thanks!

  • Dynamic NAT ASA 8.4 Packet Tracer not working

    Hi guys,
    I've tried to ping and go to a site from 192.168.1.6 to 10.10.10.12, but it's not working. I've followed a couple dynamic NAT tutorials, but I can't figure out what I'm missing. The config is below, and I'd appreciate any help.
    Thanks!
    ASA Version 8.4(2)
    hostname ciscoasa
    names
    interface Ethernet0/0
    switchport access vlan 2
    interface Ethernet0/1
    interface Ethernet0/2
    interface Ethernet0/3
    interface Ethernet0/4
    interface Ethernet0/5
    interface Ethernet0/6
    interface Ethernet0/7
    interface Vlan1
    nameif inside
    security-level 100
    ip address 192.168.1.2 255.255.255.0
    interface Vlan2
    nameif outside
    security-level 0
    ip address 10.10.10.2 255.0.0.0
    object network inside-subnet
    subnet 192.168.1.0 255.255.255.0
    object network inside-subnet
    nat (inside,outside) dynamic interface
    telnet timeout 5
    ssh timeout 5
    dhcpd address 192.168.1.5-192.168.1.35 inside
    dhcpd auto_config outside

    Thanks guys. I'm one step closer. I can ping from 192.168.1.0 to 10.0.0.0, but I can't open a webpage. I try visiting 10.0.0.6/index.html in packet tracer and get a "Request time out" message. I tried to mirror the ACL for www, but it's not working. 
    Does anyone have a suggestion? My updated config is below.
    Thanks!
    ASA Version 8.4(2)
    hostname ciscoasa
    names
    interface Ethernet0/0
    switchport access vlan 2
    interface Ethernet0/1
    interface Ethernet0/2
    interface Ethernet0/3
    interface Ethernet0/4
    interface Ethernet0/5
    interface Ethernet0/6
    interface Ethernet0/7
    interface Vlan1
    nameif inside
    security-level 100
    ip address 192.168.1.1 255.255.255.0
    interface Vlan2
    nameif outside
    security-level 0
    ip address 10.0.0.1 255.0.0.0
    object network inside-subnet
    subnet 192.168.1.0 255.255.255.0
    object network outside-subnet
    subnet 10.0.0.0 255.0.0.0
    access-list TEST extended permit icmp any any echo-reply
    access-list TEST extended permit tcp any any eq www
    access-list http extended permit tcp any any eq www
    access-list http2 extended permit udp any any eq www
    access-group TEST in interface outside
    object network inside-subnet
    nat (inside,outside) dynamic interface
    telnet timeout 5
    ssh timeout 5
    dhcpd auto_config outside
    dhcpd address 192.168.1.5-192.168.1.35 inside
    dhcpd enable inside

  • Trying to troubleshoot with Packet Trace

    Hi Folks,
    Having a bit of issues, i am trying to access a http/https server from the Guest interface (10.10.10.0/24) to the Inside interface (192.168.190.0/24)
    I can ping the server, but when i try to access it with http/https.. no luck
    So when i am on the 192.168.190.0/24 network i have no problem using http/https to the server.
    Inside: Security level 100  (VLAN1)
    Guest: Security level 40    (VLAN23)
    ASA version: 8.0(4)
    ASDM version: 6.1(5)57
    I have attached an image when trying to troubleshoot the access list entry from the 10.10.10.1 to 192.168.190.1.
    But for some reason the packet is dropped..So i am wondering if i am able to ping the server  when i am on the 10 network. Well then the rule shouldn't be wrong right?
    Any tips and tricks, i prob missed something
    Thanks
    Shane

    Yes sorry about that, you were right the output in the CLI is much better
    Yeah and your were right about the .1, my bad Feel stupid..
    I tried with 10.10.10.10 to 192.168.190.27 and the packet was allowed
    Here is the output from
    # packet-tracer input inside tcp 10.10.10.10 12345 192.168.190.27 443
    Phase: 1
    Type: CAPTURE
    Subtype:
    Result: ALLOW
    Config:
    Additional Information:
    MAC Access list
    Phase: 2
    Type: ACCESS-LIST
    Subtype:
    Result: ALLOW
    Config:
    Implicit Rule
    Additional Information:
    MAC Access list
    Phase: 3
    Type: FLOW-LOOKUP
    Subtype:
    Result: ALLOW
    Config:
    Additional Information:
    Found no matching flow, creating a new flow
    Phase: 4
    Type: ROUTE-LOOKUP
    Subtype: input
    Result: ALLOW
    Config:
    Additional Information:
    in   192.168.190.0   255.255.255.0   inside
    Phase: 5
    Type: ACCESS-LIST
    Subtype:
    Result: DROP
    Config:
    Implicit Rule
    Additional Information:
    Result:
    input-interface: inside
    input-status: up
    input-line-status: up
    output-interface: inside
    output-status: up
    output-line-status: up
    Action: drop
    Drop-reason: (acl-drop) Flow is denied by configured rule
    So i see that its drop at Phase 5..
    I added another rule on the inside interface
    Allow packet from the guest network to 192.168.190.27 which is the https server.
    Get the output:
    Phase: 1
    Type: CAPTURE
    Subtype:
    Result: ALLOW
    Config:
    Additional Information:
    MAC Access list
    Phase: 2
    Type: ACCESS-LIST
    Subtype:
    Result: ALLOW
    Config:
    Implicit Rule
    Additional Information:
    MAC Access list
    Phase: 3
    Type: FLOW-LOOKUP
    Subtype:
    Result: ALLOW
    Config:
    Additional Information:
    Found no matching flow, creating a new flow
    Phase: 4
    Type: ROUTE-LOOKUP
    Subtype: input
    Result: ALLOW
    Config:
    Additional Information:
    in   192.168.190.0   255.255.255.0   inside
    Phase: 5
    Type: ACCESS-LIST
    Subtype: log
    Result: ALLOW
    Config:
    access-group Outgoing in interface inside
    access-list Outgoing extended permit tcp 10.10.10.0 255.255.255.0 host 192.168.190.27 object-group DM_INLINE_TCP_4
    object-group service DM_INLINE_TCP_4 tcp
    port-object eq www
    port-object eq https
    Additional Information:
    Phase: 6
    Type: IP-OPTIONS
    Subtype:
    Result: ALLOW
    Config:
    Additional Information:
    Phase: 7
    Type: NAT-EXEMPT
    Subtype: rpf-check
    Result: ALLOW
    Config:
      match ip inside 192.168.190.0 255.255.255.0 inside 10.10.10.0 255.255.255.0
        NAT exempt
        translate_hits = 0, untranslate_hits = 1
    Additional Information:
    Phase: 8
    Type: NAT
    Subtype: rpf-check
    Result: ALLOW
    Config:
    nat (inside) 1 192.168.190.0 255.255.255.0
      match ip inside 192.168.190.0 255.255.255.0 inside any
        dynamic translation to pool 1 (No matching global)
        translate_hits = 0, untranslate_hits = 0
    Additional Information:
    Phase: 9
    Type: NAT
    Subtype: host-limits
    Result: ALLOW
    Config:
    static (inside,outside) x.x.x.x 192.168.190.27 netmask 255.255.255.255
      match ip inside host 192.168.190.27 outside any
        static translation to x.x.x.x
        translate_hits = 739399, untranslate_hits = 2012692
    Additional Information:
    Phase: 10
    Type: IP-OPTIONS
    Subtype:
    Result: ALLOW
    Config:
    Additional Information:
    Phase: 11
    Type: FLOW-CREATION
    Subtype:
    Result: ALLOW
    Config:
    Additional Information:
    New flow created with id 36837297, packet dispatched to next module
    Phase: 12
    Type: ROUTE-LOOKUP
    Subtype: output and adjacency
    Result: ALLOW
    Config:
    Additional Information:
    found next-hop 192.168.190.27 using egress ifc inside
    adjacency Active
    next-hop mac address 000c.2946.f8e5 hits 85
    Result:
    input-interface: inside
    input-status: up
    input-line-status: up
    output-interface: inside
    output-status: up
    output-line-status: up
    Action: allow

  • I can't find and stet up the Cisco packet tracer program in my Macbook , i need help?

    i can't find and stet up the Cisco packet tracer program in my Macbook , i need help?

    Check my post
    http://rafavg77.wordpress.com/2013/09/07/como-empaquetar-packet-tracer-exe-a-una -app-nativa-en-mac-os-x/
    I think it will help, sorry for my english

  • Packet Tracer 6.0.1 for mac

    hello
    here is simple and best way to use packet tracer 6.0.1 on your mac machine
    I found this new version of Packet Tracer 6.0.1 and packaged native for mac, just unzip, mount the dmg and drag and drop to your Applications.
    CiscoPacketTracer601.tar.gz (247.0 MB)
    https://mega.co.nz/#!tlghxQoZ!I0VV1Th9pgiFMQagfG7LbHLvT8xT5uyKo8CrPAX5f9U
    hope this will help and if still not working
    then install
    Wineskin Winery 1.7

    Looks like this is using wineskin, I couldn't get it to work.
    I'm using parallels though, so I just installed the exe provided by Totamann77.
    Look at his guide here, it explains what you have to do to run the package.
    https://discussions.apple.com/message/22917652#22917652

  • Troubleshooting Public Servers with packet-trace.

    Hi, I'm new to Cisco, I've tried googling my problem but cannot find anything.
    I am trying to setup Public Servers and my config looks great, but it doesn't work. I tried to packet-trace my config and I get an ALLOW when I use the same port from my source, but if I try with a different port, I get a DROP. I can't find where I can tell it to use any port from the source. Did I missed something?
    ASA5510, Firmware : 9.1, ASDM : 7.5
    SAME SOURCE PORT (Port 88 to Port 88)
    Result of the command: "packet-tracer input outside tcp 123.123.123.1 88 W.W.W.13 88 detailed"
    Phase: 1
    Type: UN-NAT
    Subtype: static
    Result: ALLOW
    Config:
    object network MYOFFICE-PVR-PRIVATE-IP
     nat (inside,outside) static MYOFFICE-PVR-PUBLIC-IP
    Additional Information:
    NAT divert to egress interface inside
    Untranslate W.W.W.13/88 to A.A.A.254/88
    Phase: 2
    Type: ACCESS-LIST
    Subtype: log
    Result: ALLOW
    Config:
    access-group outside_access_in in interface outside
    access-list outside_access_in extended permit object-group DM_INLINE_SERVICE_0 any object MYOFFICE-PVR-PRIVATE-IP 
    object-group service DM_INLINE_SERVICE_0
     service-object object MYOFFICE-PVR-88 
     service-object object MYOFFICE-PVR-9000 
    Additional Information:
     Forward Flow based lookup yields rule:
     in  id=0xacefb350, priority=13, domain=permit, deny=false
        hits=3, user_data=0xaa490880, cs_id=0x0, use_real_addr, flags=0x0, protocol=6
        src ip/id=0.0.0.0, mask=0.0.0.0, port=88, tag=0
        dst ip/id=A.A.A.254, mask=255.255.255.255, port=88, tag=0, dscp=0x0
        input_ifc=outside, output_ifc=any
    Phase: 3
    Type: NAT
    Subtype: per-session
    Result: ALLOW
    Config:
    Additional Information:
     Forward Flow based lookup yields rule:
     in  id=0xaca012b8, priority=1, domain=nat-per-session, deny=true
        hits=10478473, user_data=0x0, cs_id=0x0, reverse, use_real_addr, flags=0x0, protocol=6
        src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0
        dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0, dscp=0x0
        input_ifc=any, output_ifc=any
    Phase: 4
    Type: IP-OPTIONS
    Subtype: 
    Result: ALLOW
    Config:
    Additional Information:
     Forward Flow based lookup yields rule:
     in  id=0xace37850, priority=0, domain=inspect-ip-options, deny=true
        hits=7278021, user_data=0x0, cs_id=0x0, reverse, flags=0x0, protocol=0
        src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0
        dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0, dscp=0x0
        input_ifc=outside, output_ifc=any
    Phase: 5
    Type: INSPECT
    Subtype: np-inspect
    Result: ALLOW
    Config:
    class-map class-default
     match any
    policy-map global_policy
     class class-default
      inspect icmp 
    service-policy global_policy global
    Additional Information:
     Forward Flow based lookup yields rule:
     in  id=0xad53bef0, priority=70, domain=inspect-icmp, deny=false
        hits=214393, user_data=0xad53b418, cs_id=0x0, use_real_addr, flags=0x0, protocol=0
        src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0
        dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0, dscp=0x0
        input_ifc=outside, output_ifc=any
    Phase: 6
    Type: VPN
    Subtype: ipsec-tunnel-flow
    Result: ALLOW
    Config:
    Additional Information:
     Forward Flow based lookup yields rule:
     in  id=0xad4981d0, priority=13, domain=ipsec-tunnel-flow, deny=true
        hits=65468, user_data=0x0, cs_id=0x0, flags=0x0, protocol=0
        src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0
        dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0, dscp=0x0
        input_ifc=outside, output_ifc=any
    Phase: 7
    Type: NAT
    Subtype: rpf-check
    Result: ALLOW
    Config:
    nat (inside,outside) source dynamic any interface
    Additional Information:
     Forward Flow based lookup yields rule:
     out id=0xacef3c40, priority=6, domain=nat-reverse, deny=false
        hits=4577, user_data=0xacef2a38, cs_id=0x0, use_real_addr, flags=0x0, protocol=0
        src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0
        dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0, dscp=0x0
        input_ifc=outside, output_ifc=inside
    Phase: 8
    Type: NAT
    Subtype: per-session
    Result: ALLOW
    Config:
    Additional Information:
     Reverse Flow based lookup yields rule:
     in  id=0xaca012b8, priority=1, domain=nat-per-session, deny=true
        hits=10478475, user_data=0x0, cs_id=0x0, reverse, use_real_addr, flags=0x0, protocol=6
        src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0
        dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0, dscp=0x0
        input_ifc=any, output_ifc=any
    Phase: 9
    Type: IP-OPTIONS
    Subtype: 
    Result: ALLOW
    Config:
    Additional Information:
     Reverse Flow based lookup yields rule:
     in  id=0xace84c40, priority=0, domain=inspect-ip-options, deny=true
        hits=6598652, user_data=0x0, cs_id=0x0, reverse, flags=0x0, protocol=0
        src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0
        dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0, dscp=0x0
        input_ifc=inside, output_ifc=any
    Phase: 10
    Type: FLOW-CREATION
    Subtype: 
    Result: ALLOW
    Config:
    Additional Information:
    New flow created with id 6654364, packet dispatched to next module
    Module information for forward flow ...
    snp_fp_tracer_drop
    snp_fp_inspect_ip_options
    snp_fp_tcp_normalizer
    snp_fp_inspect_icmp
    snp_fp_translate
    snp_fp_adjacency
    snp_fp_fragment
    snp_ifc_stat
    Module information for reverse flow ...
    snp_fp_tracer_drop
    snp_fp_inspect_ip_options
    snp_fp_translate
    snp_fp_tcp_normalizer
    snp_fp_inspect_icmp
    snp_fp_adjacency
    snp_fp_fragment
    snp_ifc_stat
    Result:
    input-interface: outside
    input-status: up
    input-line-status: up
    output-interface: inside
    output-status: up
    output-line-status: up
    Action: allow
    DIFFERENT SOURCE PORT (Port 6000 to Port 88)
    Result of the command: "packet-tracer input outside tcp 123.123.123.1 6000 W.W.W.13 88 detailed"
    Phase: 1
    Type: UN-NAT
    Subtype: static
    Result: ALLOW
    Config:
    object network MYOFFICE-PVR-PRIVATE-IP
     nat (inside,outside) static MYOFFICE-PVR-PUBLIC-IP
    Additional Information:
    NAT divert to egress interface inside
    Untranslate W.W.W.13/88 to A.A.A.254/88
    Phase: 2
    Type: ACCESS-LIST
    Subtype: 
    Result: DROP
    Config:
    Implicit Rule
    Additional Information:
     Forward Flow based lookup yields rule:
     in  id=0xacefccb0, priority=11, domain=permit, deny=true
        hits=307712, user_data=0x5, cs_id=0x0, use_real_addr, flags=0x0, protocol=0
        src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0
        dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=0, dscp=0x0
        input_ifc=outside, output_ifc=any
    Result:
    input-interface: outside
    input-status: up
    input-line-status: up
    output-interface: inside
    output-status: up
    output-line-status: up
    Action: drop
    Drop-reason: (acl-drop) Flow is denied by configured rule

    Never mind, I got it
    object service MYOFFICE-PVR-88
    service tcp source range 1 65535 destination eq 88

  • How to install cisco packet tracer on mac os x?

    I do not know to start for installing the cisco packet tracer on mac os x. please teach me. I need to use packet tracer for my styding in the class room

    Hi
    download " PlayOnMac " Application ==> http://www.playonmac.com/en  and  then install "Cisco Packet Tracer"
    Kind Regards

Maybe you are looking for