IDSM-2 Logical interface up/down

Hello!
IDSM-2 from my customers are using.
Questions before we work with CPU1 HIGH issue, now on SPAN monitoring is set to TX.
IDSM-2 of the g07, 08 with the INTERFACE UP / DOWN is repeated.
For the uplink traffic in / out total 80 ~ 200mbps & show intrura module 9 data-port 1 traffic in the 80 ~ 100mbps can see the traffic.
traffic and whether you're related to span? or h / w failure is
What the hell do not know.

Thank you.
However, i do not understand.
Why, promiscious interface is up / down repeated.
Customers are very concerned that.
up / down repeatedly since the interface is down, since there will not be up.
reset after the interface is up.
promiscious interface need to be aware that you have?

Similar Messages

IDSM-2 -Sensing Interfaces go down and up continously

Hi there.
Apparently the sensing interfaces of our Cisco IDSM-2 are having issues with link status.
Recently I've getting these events
in the console of the catalyst switch where IDSM-2 is installed:
%LINK-SP-3-UPDOWN: Interface GigabitEthernet2/7, changed state to down
%LINK-SP-3-UPDOWN: Interface GigabitEthernet2/7, changed state to up
Not getting too much information with that led me to look into the IDS logs and we got:
GigabitEthernet0/7 : Link is down.
Inline data bypass has started
A few milliseconds later:
Inline data bypass has stopped
We are getting this up and down link status messages every two hours.I've already checked on possible attacks on time ranges around the time we get these messages and there seems not to be any that pose a risk of shutting down a gigabit interface.
Could this be a normal behavior every now and then?
Thanks

There's nothing you can do to speed it up. It just has to run and finish. Don't interrupt it.
Regards
TD

Logical interface in solaris 10

Hi there,
I need to configure logical interface in a solaris 10 3/05 server. After reading the Solaris 10 IP services manual, I am not quite sure what to do. All the examples and explanation are about using the new subcommand addif of ifconfig. It was not clear in the documentation if the setting logical interfaces via addif will persist across boot.
Can one still configure logical interface in Solaris 10 in a more traditional way like in Solaris 8? In an Solaris 8 server I will do the following.
Let's assume I want to configure in a solaris 8 server a logical interface named hme0:1 with IP address 192.168.20.28 with netmask 255.255.255.0 for hostname host001
# cat /etc/hostname.hme0:1
host001
^D
# echo "192.168.20.28 host001" >> /etc/inet/hosts
# echo "192.168.20.0 255.255.255.0" >> /etc/inet/netmasks
# reboot -- -r
Can one still do that in solaris 10 3/05 server?

Hi there,
I need to configure logical interface in a solaris 10
3/05 server. After reading the Solaris 10 IP services
manual, I am not quite sure what to do. All the
examples and explanation are about using the new
subcommand addif of ifconfig. It was not clear in the
documentation if the setting logical interfaces via
addif will persist across boot.No. No 'ifconfig' command is persistent.
Can one still configure logical interface in Solaris
10 in a more traditional way like in Solaris 8? In an
Solaris 8 server I will do the following.
Let's assume I want to configure in a solaris 8
server a logical interface named hme0:1 with IP
address 192.168.20.28 with netmask 255.255.255.0 for
hostname host001
# cat /etc/hostname.hme0:1
host001
^D
# echo "192.168.20.28 host001" >> /etc/inet/hosts
# echo "192.168.20.0 255.255.255.0" >>
/etc/inet/netmasks
# reboot -- -r
Can one still do that in solaris 10 3/05 server?Absolutely.
You don't need to reboot (you can run ifconfig for this boot and let the files do the work next time) and the -r doesn't do anything with interfaces (expecially virtual interfaces) anyway.
Darren

Solaris 10 ip address of outgoing packets on logical interfaces

Hi there.
I have a Sun here with Solaris 10 and one physical interface e0 and one logical interface on it e0:1.
e0 has address 1.2.3.4
e0:1 has address 1.2.3.5
gateway is 1.2.3.254
To every ip address I bind a sendmail deamon.
For incoming connection the ip packtes come out with the right ip address
from the interface to which the connection was established.
But for outgoing packets it seems that only the ip address of e0 is used even if the sendmail on e0:1 makes an outgoing connection.
On Solaris 9 every app that binds to an logigical interface uses that ip for outgoing connection, but on Solaris 10 it looks, that only the ip address of the primary (physical) interface (e0) is used.
Is there a way to make outgoing connections of apps binding e0:1 to use the ip address of the e0:1 interface?
I dont use zones, both interfaces are in the global zone.

I'm not that familiar with postfix, but thats where the solution should be. As I mentioned earlier in this thread, the application has full control here and should be the place to set it. I'll bet postfix has a setting for what outbound IP address to use.
Trying to coerce this at the OS level is much more difficult.
Especially with your phrase about "if packet enters..." There's two possible things you might mean by that.
#1 is if the packet coming in starts a TCP session. That session sets the two IP addresses, and the OS can't override that address for outbound packets. The usesrc setting is only valid for TCP sessions started by your machine.
#2 is if the "packet coming in" you refer to really means an email in (which gets completed), and then your machine sends an email back out. But then there's no association (in the OS) between the two emails, so it doesn't know that this mail "should" go out that interface.
In both cases, I think you'll want postfix to handle this.
Darren

Need assistance in creating a logical interface in PIX 7.2

Hi,
I've recently upgraded my pix 525 from 6.3 to 7.2. Now I need to take a spare interface (ethernet4) enable this interface and create sub interfaces to use to communicate to my inside network by mapping to inside vlans.
In 6.3, I would do the following (example)
niterface ethernet4 vlan240 logical
nameif vlan240 PROD security 25
ip address PROD 192.168.1.2 255.255.255.0
Now that the 7.2 command set is really different and I do not have a test PIX to test with, I'm hoping that someone would have an example for me.
Goal: My remote location (VPN/GRE) needs to communicate to my local networlk. But, I am not advertising this subnet in ospf. I want to map an advertised IP to this inside non-advertised IP. Setting up a logical interface is how I can achieve this.
Please advise with samples.
Regards
jeff

Hi,
I think this will help :-
http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_2/conf_gd/general/intrface.htm#wp1044006
Regards,
Vivek

IOS XR Interface up/down trap

For interface up/down trap
In IOS it used to be:
Generic: 2; Specific: 0; Enterprise: .1.3.6.1.6.3.1.1.5;
Variables:
[1] mgmt.mib-2.interfaces.ifTable.ifEntry.ifIndex.34 (Integer): 34
[2] mgmt.mib-2.interfaces.ifTable.ifEntry.ifDescr.34 (OctetString): POS2/1/0
[3] mgmt.mib-2.interfaces.ifTable.ifEntry.ifType.34 (Integer): 171[4] private.enterprises.cisco.local.linterfaces.lifTable.lifEntry.locIfReason.34 (OctetString): Keepalive failed
Annotations:
In IOS XR we are missing ifDescr

Thanks Joe.
This solves the problem.
One more question. we do not see LDP traps coming from the XR router.
here is the config; when i enable LDP traps it just does not show up in the config:
snmp-server host 10.10.141.253 traps ovadmin
snmp-server view N ip included
snmp-server view N system included
snmp-server view N cpwVcMIB included
snmp-server view N entityMIB included
snmp-server view N interfaces included
snmp-server view N cpwVcMplsMIB included
snmp-server view N mplsTeStdMIB included
snmp-server view N ciscoCBQosMIB included
snmp-server view N ciscoPingEntry included
snmp-server view N ciscoProcessMIB included
snmp-server view N ciscoMemoryPoolEntry included
snmp-server view N ciscoEnhancedMemPoolMIB included
snmp-server community admin RO
snmp-server community admirw RW
snmp-server traps snmp
snmp-server traps config
snmp-server traps entity
snmp-server location Y
snmp-server trap-source MgmtEth0/8/CPU0/0
Tried to enable it:
RP/0/8/CPU0:P1(config)#snmp-server traps mpls ?
frr          Enable MPLS FRR traps
l3vpn        Enable MPLS L3VPN traps
ldp          Enable MPLS LDP traps
traffic-eng Enable MPLS TE traps
RP/0/8/CPU0:P1(config)#snmp-server traps mpls ldp ?
down       Enable MPLS LDP session down traps
threshold Enable MPLS LDP threshold traps
up         Enable MPLS LDP session up traps
RP/0/8/CPU0:P1(config)#snmp-server traps mpls ldp ?
down       Enable MPLS LDP session down traps
threshold Enable MPLS LDP threshold traps
up         Enable MPLS LDP session up traps
RP/0/8/CPU0:P1(config)#snmp-server traps mpls ldp down ?
RP/0/8/CPU0:P1(config)#snmp-server traps mpls ldp down
RP/0/8/CPU0:P1(config)#snmp-server traps mpls ldp up
RP/0/8/CPU0:P1(config)#commit
RP/0/8/CPU0:P1(config)#end
does not show up in the config.

Zone with multiple logical interfaces

Hi,
How can multiple logical network interfaces be added to a running zone?
I have configured and installed a whole root zone with one shared-ip network interface.
Now, I need to add more logical interfaces to the same zone.
On a physical server with a bge interface, I would create a /etc/hostname file for each logical interface such as
$ ls /etc | grep host
hostname.bge0
hostname.bge0:1
hostname.bge0:2
hostname.bge0:3
hostname.bge0:4
hostname.bge1
hostname.bge1:1
hostname.bge1:2
hostname.bge1:3
hostname.bge3
hosts
$How can the above be done for a zone?

Hi
This requires 2 steps. Firstly update your zone configuration to add the logical interface and its associated IP address.
Assuming from below you want the logical interface to be added to bge0 then do the following replacing the zonename and ip address for whatever is appropriate for you.
# zonecfg -z itchyzone
zonecfg:itchyzone1> add net
zonecfg:itchyzone1:net> set address=192.168.1.21
zonecfg:itchyzone1:net> set physical=bge0
zonecfg:itchyzone1:net> end
zonecfg:itchyzone1> exitYou can do the above as many times as you like to create multiple logical interfaces for the zone.
After doing the above you will need to reboot the zone to get the new logical interface.
However if you cant reboot the zone you can plumb a logical interface into the zone by running something similar to the following (change for your zonename, IP etc) from the global zone:
# ifconfig bge0 addif 192.168.1.21 netmask + broadcast + zone itchyzone1 upyou will now have an extra interface in the zone (in this case called itchyzone1). To verify, login to the zone and run ifconfig -a and you will see your new interface.
# zlogin itchyzone1
[Connected to zone 'itchyzone1' pts/4]
Last login: Mon Oct 5 22:24:15 on pts/4
Sun Microsystems Inc.   SunOS 5.10      Generic January 2005
# ifconfig -a
lo0:1: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
        inet 127.0.0.1 netmask ff000000
bge0:2: flags=201000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4,CoS> mtu 1500 index 2
        inet 192.168.1.20 netmask ffffff00 broadcast 192.168.1.255
bge0:3: flags=201000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4,CoS> mtu 1500 index 2
        inet 192.168.1.21 netmask ffffff00 broadcast 192.168.1.255Hope this helps
Martin

Number of logical interface

Hi all,
How can i programatically get the total number of logical interfaces that are added to a particular interface ???
thanks,
rakesh

Hi,
Yes i am talking about the Logical interface. Considering that my n/w interface is "le0", i want to programatically determine what are the locial interfaces that are attached to it (i.e le0:1, le0:5.....etc)
thanks,
rakesh

MARS - IOS interface up down, AD securuty entries

Our MARS appliance is running V4.2.1. We have about 40 or 50 IOS switches sending their entries to it. We see interface up and down transitions all the time as expected.
It seems that for many of the entries in MARS, the interesting data, such as the actual port number that went up or down, is nowhere to be found. Am I simply drilling wrong?
We have the same problem with Windows Active Directory security entries - we can see user account changes, but not who made them or which account was changed.

Seymour,
We see similar events on our MARS appliance too. We have nearly 300 switches logging to it now so you can imagine the up/down alerts that we have generated! You are correct that MARS does not provide complete information in the incident view. You are doing nothing incorrect. Keep in mind that the MARS appliance is aggregating a massive amount of security/system data and needs to normalize it to data fields that are most important when it comes to attack information. To view full messages keep in mind that you can view the "Raw Data" directly from the incident screen. In the case of interface up/down messages this would show you the exact port (it's found directly next to the "Reporting Device" name). Keep in mind that Cisco now has enchanced notifications using XML. This exported data contains the raw message that could be included as part of a notification like this:
# Incident Details #
Incident: 1428252525
Start: Oct 3, 2006 8:46:18 AM EDT
End: Oct 3, 2006 8:50:20 AM EDT
Severity: LOW
Rule: Cisco IOS AP wireless MAXRETRIES
Descript: This rule will detect and alert of a Warning on the wireless network for {DOT11-4-MAXRETRIES: Packet to client [mac] reached max retries, removeing the client} errors.
# Session Details #
Session ID: 1428578861
Device: AP12_Freezer.company.com
Event: Generic IOS syslog
Source: 0.0.0.0
Destination: 0.0.0.0
Raw Message: <188>6032: Oct 3 08:49:30: %DOT11-4-MAXRETRIES: Packet to client 00a0.f123.23f7 reached max retries, removing the client
Anything else I can help with let me know.
-Mike
http://cs-mars.blogspot.com

STP Logical Interfaces, virtual ports

As you probably know one have to take in account the max available numbers of virtual ports and logical interfaces for Spanning Tree when designing a switched network based on catalyst 6500's. Does somebody know if you also have these parameters if you're designing a network based on 4500's or 3750 stacks? And where to find it on the Cisco site
Rgrds

My issue deals with Spanning Tree Protocol or better the scalability of STP. see the following document:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/122sx/ol_4164.htm#wp26366
For choosing the right spanning tree protocol (RPVST+ or MST) you have to take logical interfaces and virtual ports into account on the 6500 platform. But what if you decide to use a different platform, for instance a 3750 stack.
Rgrds
Aad

Interface goes down with mds9140

Hi
I've a problem with both MDS 9140. The fc interface goes down and don't go up when I reboot a device connected to them with a fiber. To solved the problem I need to remove the gbic and plug it back again. I use the following version of software
Software
BIOS: version 1.0.8
loader: version 1.1(2)
kickstart: version 1.2(1a)
system: version 1.2(1a)
Fabrice

It is probably a software defect where if a port is up for over 248 days, Once link is lost, it will not come back w/o a shut/no shut or manual intervention as you describe. This issue is resolved in the 1.3.4b and above code. For a 91xx, this would be a disruptive upgrade. Or, simply issue a shut/no shut on an affected port and you'll be good for another 248 days.

6807-XL - Control plane interface showing down in logs and NMS

Getting the below logs on the switch and NMS station is also showing the CPP interface is down.
Jul 01 12:09:55: %LINEPROTO-5-UPDOWN: Line protocol on Interface Control Plane Interface, changed state to down
Any thoughts?

Getting the below logs on the switch and NMS station is also showing the CPP interface is down.
Jul 01 12:09:55: %LINEPROTO-5-UPDOWN: Line protocol on Interface Control Plane Interface, changed state to down
Any thoughts?

Best way to disconnect firewire audio interface (power down apogee duet)

This may seem like a really naive question, but I am brand new to firewire as well as Macs, so forgive me.
It doesn't seem healthy to just leave my Apogee Duet powered via the firewire connection when I'm not using it for a length of time (ie - doing graphics rather than music). With any and all software that had been using it closed down, and my system prefs for audio back to non-duet input/output for audio, can the firewire cable to it just be disconnected, cutting power to it? Or should I power down the computer, then disconnect, and power back up?
Uh, and I guess I'm posting this question here because it seems more likely for there to be a number of Duet and/or audio firewire interface people here...
Thanks,
Apple

hi,
you can leave it active.
won't damage anything.
in fact, it might stop damage.
only thing i find is, if i switch the mac off totally, i get a ground loop (or lack of)occurring to my pwr amp/monitors.
you could yank the FW cable but it'll produce the loop (hum).
if your are using small; speakers, you might not hear this, because it's low, but it's still there.
DR9.

How to tell when the interface is down and was last active.

Is there a function within Cisco Prime Infrastructure 2.0 (2.0.0.0.294) that will display the last time that an interface was active? Our end switch hardware is as follows C2960s-48fps and C3750-48PS-S.
See below for command and command output from the console of one of our switches.
C2960s-48fps#show int gi1/0/6 | include Last | proto
GigabitEthernet1/0/6 is down, line protocol is down (notconnect)
Last input never, output 1w6d, output hang never
Above is an example of one interface but can this be accomplished for all interfaces on the said switch?
Thanks
Message was edited by: Bobby Sasser The following is the response that Cisco TAC sent. Not happy with this answer! Unfortunately , Prime doesn’t collect those precise information. So apparently you won’t be able to poll that information from the device.

You have not posted to code for Stopper, so it's impossible to reason about that
1. How can I tell when thread is finished?
Use Thread.Join() or Thread.isAlive()
2. How do I kill this thread once it is finished?
You can't and you don't. Just let the method the thread is running exit normally. Sometimes that means putting in a boolean variable to control a loop, and then exiting when the boolean is false.
Another thought - you could set the thread as a Daemon thread - when you don't have any non-daemon threads running, java will exit.

Logical Standby Database Down

I am new to the Data Guard process and i wanted to know the following:
I have a 9i Primary DB that ships to a Logical Standby Database, however if the logical standby database goes down for whatever reason, (hardware failure) it is unreachable, what can I configure to alert me that the has occurred?
Is it something on the Primary DB that alerts me that the redo logs are perhaps not being processed? Does one use the Dead Connection Detection parameter SQLNET.EXPIRE? How do I identify the Primary to Standby connection is down amongst so many user connections?
Many Thanks
AM

You will have an error for the archive log destiantion that is for your standby
For like 10g or 11g using a SYNC or ASYC the logwr reports the issue the archiver process will report same as well.
LGWR: Error 1041 disconnecting from destination LOG_ARCHIVE_DEST_2 standby host 'testsb'
so for your archive destination for you standby look for errors to the destination and then alert.

IDSM-2 Logical interface up/down

Similar Messages

Maybe you are looking for