Multiple FWSM in Catalyst 6513

Hi,
where can i found the informations about using multiple FWSM-Modules in one Cat6513 to increase the throughput rate.
Best regards.

Hi,
I will recomend you that check the following field notice:
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_field_notice09186a00804093ee.shtml
It could force you to use bus-mode... on the details of the note, you can see that CISCO recomend to check performance on the case of several modules on the same chasis.
Hope this helps (I really sorry, my english is very poor).
Juan.

Similar Messages

Error message on Catalyst 6513 Urgent!!!

Hi the Catalyst 6513 is giving me this message:
Nov 1 21:34:09: %PFREDUN-SP-4-BOOTSTRING_INVALID: The bootfile slaveflash:s720
33-pk9sv-mz.122-17d.SXB1.bin is not present in standby
but it seems to me that everything is Ok bootflash is copy on both supervisors
#sh boot
BOOT variable = flash:s72033-pk9sv-mz.122-17d.SXB1.bin,12
CONFIG_FILE variable does not exist
BOOTLDR variable = bootflash:s72033-pk9sv-mz.122-17d.SXB1.bin
Configuration register is 0x2102
Standby is up
Standby has 458752K/65536K bytes of memory.
Standby BOOT variable = flash:s72033-pk9sv-mz.122-17d.SXB1.bin,12
Standby CONFIG_FILE variable does not exist
Standby BOOTLDR variable = bootflash:s72033-pk9sv-mz.122-17d.SXB1.bin
Standby Configuration register is 0x2102
Can somebody explain to me why it is happening?
Regards
Thanks
Lp

Hello,
here is what the error message decoder says:
1. %PFREDUN-4-BOOTSTRING_INVALID: The bootfile [chars] is not present in standby
This message indicates that the bootfile that is configured is not present on the redundant supervisor engine. If the redundant supervisor engine resets, it will not come up because it will not find the image specified in the bootstring.
Looks like you need to configure the bootfile on the redundant supervisor...
HTH,
GP

Catalyst 6513 - silent reloads ???

Hi all,
we got 9 catalyst 6513 switches in the access-layer. All switches running the same
Hard/Software constellation (c6k_sup2 engine + cat os 6-3-5 + 12 100BaseFX Boards), absolutely no problems so far.
But now, only one of these access-switches shows unexpected relaods at sporadic intervalls. The NVRAM log shows the reloads but no reasons. After a permanent Console-Logging the following event seems
to be the failure :
int status = 00000400, 00000000mistral interrupt status register contents: 00000
400, 00000000
table manage data par err happened.
mistral interrupt_source_status register contents: 00000400, 20000802
timer 0 int happened.
inband int happened.
programmable int 0 int happened.
table manage data par err happened.
mistral interrupt_status_10 register contents: 00000000, 00000000
fatal mistral happened
EPC: 8039607C
Stack content:
sp+00: 86014A00 86014A14 86014A00 86014A14
sp+10: 00000005 803CD0A8 81247BB4 80CE1488
sp+20: 00000006 803CC540 87FB2658 86014A00
sp+30: 00000009 000000C9 02000000 00000000
sp+40: 82C0AB30 0000000F 86014A00 000000C9
sp+50: 02000000 82CFF81A 00000023 82CFF81D
sp+60: 00000001 8063D9E4 00040009 00000000
sp+70: 00000000 00000000 00000000 00000000
sp+80: 00000000 00000000 00000000 811E71F8
sp+90: 00000000 00000000 00000000 00000000
sp+A0: 00000000 000003FF 87FB2638 00000000
sp+B0: 00000000 00000000 00000000 00000001
sp+C0: 8002D63C 3404F822 00000007 00000007
sp+D0: 00000002 00000000 87FB2648 80784B04
sp+E0: 00000007 00000000 00000007 B91237F5
sp+F0: 00040009 000F0000 00000000 00000000
Register content:
Status: 3404F823 Cause: 01000020
AT: 813905D8
V0: 00000001 V1: 00000001
A0: 81247BB4 A1: 80CE1489
A2: 00000006 A3: 00000001
T0: 00000000 T1: 34040021
T2: 00000001 T3: 85E3CC4C
T4: 00000000 T5: 0000000C
T6: 01000000 T7: 00000000
S0: 000000B4 S1: 00000042
S2: 00000042 S3: 87FB2658
S4: 00000003 S5: 00000000
S6: 81247BB4 S7: 81247BBD
T8: 00000000 T9: 85E3CC28
K0: 30419001 K1: 80CAB2E8
GP: 811DE4B0 SP: 87FB2568
S8: 87FB2568 RA: 805B35D4
HIGH: 00000000 LOW: 00000F00
BADVADDR: 82D1291A ERR EPC: 800218B8
The CSCdz65338 Bug Detail discribes a very similar situation, and i realy would like to know what happend there, before updating sw and replace hw ???
Will a sw update truly help or shall i change the complete sup2 ???
What are your experiences ?
THX for your efforts !
Maik

Hi Maik,
Looks like you're hitting a mistral interrupt. In 6.3(5), mistral interrupts were not saved to the NVRAM log. I feel that a software upgrade would definitely help here. The 6.3 train continues into the 6.4 train (it's essentially the same train, but due to hw support for a new blade, we had to change the release name for the sake of consistency), and the latest maintenance release of 6.4 will give you all of the diagnostic enhancements and bug fixes that have been integrated into this train. The latest maintenance release of 6.4 is currently 6.4(21) and is GD code.
HTH,
Bobby
*Please rate helpful posts.

Migrating from Catalyst 6513 to 4507

We are looking to replace both our Catalyst 6513 with two new Catalyst 4510RE. I was looking for some documentation, on the best process to migrate, with minimal down time, but can't get my hands on anything. Can somebody suggest any good documents?

Not sure about any migration documentations, but if you are running HSRP or VRRP between your existing 6513 switches. You can replace the VRRP or HSRP stand-by with a 4510 and make sure to bring it up as stand-by. Once that is done, you can change the priority on the new 4500 so it become the active switch and the other 6500 stand-by. Now you can replace the other 6500 with 4500 and bring it up as stand-by.
Warning: you need to have an outage window to do any of these procedures, as you can never know what may go wrong.
HTH

Missinf FWSM in Catalyst 6509 switch

I have a problem with a Catalyst 6509 switch.The problem initially I had was loggin into the switch.I was always sent to the rommon> anytime I tried logging into the switch until I was told to enter "boot bootflash:". I was able to enter the switch but could not find the FWSM module.The module was there until we tried upgrading the IOS of the MSFC.
When I enter "show module" it does not show the FWSM module.
Is there something anybody can please show me to do other to access the Firewall module.

Thanks for your post.
Below is the result of a sh version and sho module of the switch as well as a report that comes up upon bootup using the "boot bootflash:"
core02>en
Password:
core02#sh ver
Cisco Internetwork Operating System Software
IOS (tm) c6sup2_rp Software (c6sup2_rp-PSV-M), Version 12.1(12c)E4, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Mon 14-Oct-02 12:37 by hqluong
Image text-base: 0x40008980, data-base: 0x41598000
ROM: System Bootstrap, Version 12.1(11r)E1, RELEASE SOFTWARE (fc1)
BOOTLDR: c6sup2_rp Software (c6sup2_rp-PSV-M), Version 12.1(12c)E4, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
core02 uptime is 4 minutes
System returned to ROM by power-on (SP by power-on)
System image file is "sup-bootflash:c6sup22-psv-mz.121-12c.E4.bin"
cisco Catalyst 6000 (R7000) processor with 227328K/34816K bytes of memory.
Processor board ID SAL08144260
R7000 CPU at 300Mhz, Implementation 39, Rev 3.3, 256KB L2, 1024KB L3 Cache
Last reset from power-on
X.25 software, Version 3.0.0.
Bridging software.
8 Ethernet/IEEE 802.3 interface(s)
--More-- 6 Virtual Ethernet/IEEE 802.3 interface(s)
26 Gigabit Ethernet/IEEE 802.3 interface(s)
381K bytes of non-volatile configuration memory.
32768K bytes of Flash internal SIMM (Sector size 512K).
Configuration register is 0x2102
core02#sh module
Mod Ports Card Type Model Serial No.
1 2 Catalyst 6000 supervisor 2 (Active) WS-X6K-SUP2-2GE SAL08154S4S
2 8 unknown FRU type (major = 0x6003, mino WS-XSVC-K+BB-2 SAD081203ZV
3 16 16 port GE RJ45 WS-X6316-GE-TX SAD08140999
4 8 8 port 1000mb GBIC Enhanced QoS WS-X6408A-GBIC SAL081555Q1
Mod MAC addresses Hw Fw Sw Status
1 000f.8f9d.3510 to 000f.8f9d.3511 5.0 6.1(3) 7.2(0.90) Ok
2 000f.8f5b.bd62 to 000f.8f5b.bd69 2.0 Unknown Unknown PwrDowo 0003.feae.f137 1.3 5.4(2) 7.2(0.90) Ok
4 000f.f716.8dd0 to 000f.f716.8dd7 3.1 5.4(2) 7.2(0.90) Ok
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Mon 14-Oct-02 13:00 by hqluong
00:00:54: %SNMP-5-COLDSTART: SNMP agent on host core02 is undergoing a cold star
t
00:00:56: %C6KPWR-SP-4-UNSUPPORTED: unsupported module in slot 2, power not allo
wed: Unknown Card Type.
00:00:56: %C6KPWR-SP-4-ENABLED: power to module in slot 3 set on
00:00:57: %C6KPWR-SP-4-ENABLED: power to module in slot 4 set on
00:00:56: %C6KPWR-SP-4-UNSUPPORTED: unsupported module in slot 2, power not allo
wed: Unknown Card Type.
00:00:56: %C6KPWR-SP-4-ENABLED: power to module in slot 3 set on
00:00:57: %C6KPWR-SP-4-ENABLED: power to module in slot 4 set on
00:01:10: %DIAG-SP-6-RUN_MINIMUM: Module 1: Running Minimum Online Diagnostics..
00:01:14: %DIAG-SP-6-DIAG_OK: Module 1: Passed Online Diagnostics
00:01:14: %OIR-SP-6-INSCARD: Card inserted in slot 1, interfaces are now online
00:01:25: %DIAG-SP-6-RUN_MINIMUM: Module 3: Running Minimum Online Diagnostics..
00:01:28: %DIAG-SP-6-DIAG_OK: Module 3: Passed Online Diagnostics
00:01:28: %OIR-SP-6-INSCARD: Card inserted in slot 3, interfaces are now online
00:01:56: %DIAG-SP-6-RUN_MINIMUM: Module 4: Running Minimum Online Diagnostics..
00:01:57: %DIAG-SP-6-DIAG_OK: Module 4: Passed Online Diagnostics
00:01:57: %OIR-SP-6-INSCARD: Card inserted in slot 4, interfaces are now online
Mod Sub-Module Model Serial

Catalyst 6513-E, what is XDB?

Hello,
I am looking for a description of the following command:show environment temperature xdb
As far as I understand it is Xdaughterboard, but I dont understand a meaning of it..
There are are inlet temperature for Module 1
and also inlet temperature for Module 1 XBD, the temperatures are different, so I am confused of what is XDB?
**VDB for example is a voice daughterboard, which I dont have..
Thanks a lot!!

Hi Kevin
For adding email , you would need to access email accounts section and then Add a new email acocunt.
screencasts.worldsecuresystems.com/Sanju/2013-03-30_0136.png
This document will help you :
http://kb.worldsecuresystems.com/kb/setup-pop-imap-email-accounts.html#main_Creating_email _accounts_for_users
You can contact BC support thorugh Live chat or submitting a support ticket from your support portal ,
http://helpx.adobe.com/contact.html?product=business-catalyst
screencasts.worldsecuresystems.com/Sanju/2013-03-30_0143.png
Thanks,
Sanjit

Catalyst 6513 Newbie

We just received a 6513 with 2 Sup modules and 5 Gigabit switch modules. I wanna get to the web management of the 6513. I assigned an IP address to the default interface using the IOS commands but I still can not get to the web interface. I have looked all over the web on how to do this, but have not found anything.
Does anyone have documentation or a config example for how to setup the switch just enough to get to the web interface.
Thanks

Hi Matt
I would prefer configuring using CLI instead of going for Web Interface.
People tend to make use of web interface if its a simple lower level equipments or entry level equipments.
you can make use of the following link to configure the features/modules which you require to do so .
http://www.cisco.com/en/US/products/hw/switches/ps708/prod_technical_reference_list.html
regds

Cisco Catalyst 6513-E SUP-2T VSS & WiSM2 HA

Hi,
I have around 2000 APs in my network and have 2 x WiSM2 modules and 2 x HA SKU Wism2 with 1000 AP licenses each.
How an I acheive HA for my WLCs for total 2000 APs.?
Can i install both Primary WISM2 in one chassis and both HA WISM2 in second chassis ( in VSS mode )? In this way if whole chassis fails or one WISM2 fails, APs will switchover to second chassis which have standby WISM2 for takeover.? Is it a valid approach?

I have around 2000 APs in my network and have 2*WiSM2 modules with 1000 AP licenses each and my core switch is 65K-Sup2T in VSS.
Ok, here's what WE'VE done with WiSM2 and HA in a VSS environment.
You have two WiSM2's and servicing 2000 APs. So if you want to get HA SSO up and running you need:
1. TWO more WiSM2 with HA SSO license;
2. Four IP addresses;
3. VLANs of your management and redundancy should be bridged across the 2nd pair
4. Make sure you use 7.5.X firmware; and
5. High Availability (AP SSO) Deployment Guide

FWSM user and administrator multi-contexts authentication under ACS radius

Hi,
Im preparing the setup of an ACS radius server for FWSM-related authentication operations.
FWSMs will be in release 2.2, inserted in Catalyst 6500 (MSFC IOS), in routed mode, in multi-switch active / standby setup, with multiple contexts configured.
User and administrator access management will be performed thanks to a radius ACS server.
I intend to install ACS onto an armored windows 2000 server SP4 , using a local database.
PDM 4.0 is needed in order to manage multiple-contexts on FWSMs.
Are there any points I should be aware about such a configuration, especially regarding the user and administrator authentication access management setup ?
The fact is that administrators will have to be defined and restricted to their own context, without privileges onto other contexts. Do you have feedback about such a setup or relevant information to point to me ?
Many thanks in advance for your attention.
Best regards,
Arnaud

Each of the contexts will behave like individual firewalls for your purposes here. So, they each get a AAA config, and you could put them into their own groups for access control. Protect the Admin context especially well, it controls system resources for the others. Depending on how many FWSMs you have, you may want to look into the Pix MC, which is similar to PDM, but works for multiple FWSMs. It is a part of CiscoWorks VMS.
-Paul

About the rule at FWSM

Hi all,
I use FWSM v2.3 + Catalyst 6513. Now, I configure:
nameif vlan10 operation security90
Rule 1:
Source Dest Service Interface
any any IP operation Accept
Rule 2:
Source Dest Service Interface
10.x.x.x/25 any IP operation Accept
I confuse about the rule 1 and rule 2. I don't know the different between rule 1 and rule 2 or the rule 1 and rule 2 will apply the same policy at FWSM?
If you know, please explain to me to see the different between rule 1 and rule 2.
Thank you very much!

hi all,
If you can answer about the different between rule 1 and rule 2, please answer me.
Thank you very much.
Regards,
Khang

Questions about 6500/FWSM/CSM

Hi,
I have some questions regarding FWSM and CSM. Thank you in advance for your feedback.
I am using a pair of 6513 with one fwsm and csm in each. I am setting up a dmz environment with these units. fwsm is the second tier firewall (a pair of PIX 525 are in perimeter).
1. Do I have to use MSFC? I am connecting PIXes to the outside VLAN of the FWSM and two inside routers to inside VLAN of the FWSM. FWSM has a DMZ VLAN as well. I don't see any reason to involve MSFC in the picture. Is this correct? Is there any reason in the future that I may need MSFC (i.e. changing from single context to multiple or using load balancing for DMZ servers)?
2. I am going to extend outside and inside VLANs of FWSM between two 6513 switches. Should I do this for DMZ as well? As I do not use gateway redundancy for my DMZ servers and it is a pure firewall configuration of 6513/FWSM, I don't think it is required.
3. My understanding is with extending outside VLAN, if the link between primary PIX and primary 6513 fails or if primary PIX fails over to secondary for any reason, secondary PIX will have a way to get to the outside interface of primary FWSM. Is this correct? If not, then how I can make sure that PIX fail over will be transparent to primary 6513/FWSM which is not connected to secondary PIX?
4. Any difference in spanning-tree configuration between this environment and a regular dual homed server based config?
Thanks,

Hi
1) No you should be fine if you leave out the MSFC. Certainly you don't want the MSFC between your perimeter pix firewalls and the FWSM's as you could end up routing around the firewalls. You could have the MSFC on the inside of the FSWM's.
Changing to multiple context will not requre that you need the MSFC for the above. It is quite feasible to have a separate context where the MSFC is involved and still have your above setup where you haven't involved the MSFC. You dictate this by how you allocate vlans to the FWSM.
2) You will have to extend the DMZ, or at least you will have to allocate the DMZ vlan on both switches under the "firewall vlan-group .. " command. If you don't allocate the same vlans on each switch to the FWSM your failover will not work properley. If the DMZ servers are physically connecting into the 6500 chassis i would look to dual hone and include the DMZ in failover if you can. Can't see the reason not to use failover between chassis's if you can. (Of course depends on your have 2 NIC's in DMZ servers ).
3)Assuming your 6500's are connected with a layer 2 trunk yes the secondary pix should still be able to get to the outside interface of the FWSM primary.
4) For the FWSM not really. Just make sure you use a dedicated layer 2 trunk/etherchannel for the FWSM between the 2 switches.
Hope this has answered some of your queries
Jon

CS-MANAGER: Catalyst 6500 in VSS mode not supported????

We have recently moved from CSM 3.2 to CSM 3.3.1 Service Pack 3.
We are now trying to add a Cisco Catalyst 6513 configured in VSS mode using 12.2(33)SXI5 software. When we try to add th device from network, it starts Discovering the configurations, and when it reaches the 15%, we got the message "Discovery Failed - Invalid Device: Catalyst in VSS mode is not Supported"
I´ve attached to this post the screenshot showing the error
Any idea of what can i do to manage this device on CSM??
BEst Regards,
Nicolás

Hello Nicolas
VSS is not supported even in the latest CSM release 4.1 AFAIK
http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/4.1/compatibility/information/csmsd410.html
Check with your Cisco account team whether it is going to be added anytime soon.
Please rate if you find the input helpful.
Regards
Farrukh

Using the NAM in a 6513 to monitor RMON on an uplink.

I should be able to gather and monitor rmon statistics using the NAM. When I go into the NAM's monitor mode and look at port stats I get the following error message:
No data available.
Possible reasons:
- Switch community string not configured properly. Test at Setup > Switch Parameters
- RMON Stats not enabled on the switch ports. Check switch configuration
I tested the community string and it was ok.
I configured the port that I wished to monitor with:
"rmon promiscuous"
That seemed like the only option to configure this model with. I tried to configure "rmon collection rmon1", on the interface, to enable all possible collection stats but there is no such command.
In the end I would like to look at port usage, to set up a new ACL on my edge that denys all protocols not currently in use. (and maybe understand those in use better and weed them). A big undertaking....

It worked but it simply provided the same information that I could have got from sh int. CPU or memory utilization didn't go up. The original command from the IOS command lookup tool: This command would keep details from each packet, well beyond traffic summaries. The command does not seem to be available on the Catalyst 6513...
rmon collection rmon1
To enable all possible autoconfigurable Remote Monitoring (RMON) MIB statistic collections on the interface, use the rmon collection rmon1 command in interface configuration mode. To disable these statistic collections on the interface, use the no form of the command.
rmon collection rmon1 controlEntry integer [owner ownername]
no rmon collection rmon1 controlEntry integer [owner ownername]
Syntax Description
controlEntry integer
Specifies an identification number for the RMON group of statistics. The integer can be any number in the range from 1 to 65535.
owner ownername
(Optional) Specifies the name of the owner of the RMON group of statistics.
Defaults
Disabled.
Command Modes
Interface configuration
Command History
Release Modification
12.0(5)T
This command was introduced.
Usage Guidelines
Use the show rmon matrix command to display RMON statistics.
Examples
The following command enables the RMON collection rmon1 group of statistics with an ID number of 30, and specifies "john" as the owner:
Router(config-if)# rmon collection rmon1 controlEntry 30 owner john
Related Commands
Command Description
show rmon matrix
Displays the RMON MIB matrix table.

Catalyst 6500 - outlost counter

Hi,
i'm experiencing performance problems on two ports - both are incrementing the "qos3outlost" counter. (see last row in the attachment)
Unfortunately this counter is not documented in the manual.
Any idea?
Regards,
//Ronald
* Catalyst 6513
* Sup 720
* WS-X6548-GE-TX 10/100/1000mb
* IOS 12.2(17d)SXB4
* QoS globally disabled
switch #show counters interface gigabitEthernet 2/1
32 bit counters:
0. rxCRCAlignErrors = 0
1. rxUndersizedPkts = 0
2. rxOversizedPkts = 0
3. rxFragmentPkts = 0
4. rxJabbers = 0
5. txCollisions = 0
6. ifInErrors = 0
7. ifOutErrors = 0
8. ifInDiscards = 0
9. ifInUnknownProtos = 0
10. ifOutDiscards = 0
11. txDelayExceededDiscards = 0
12. txCRC = 0
13. linkChange = 1
14. wrongEncapFrames = 0
All Port Counters
1. InPackets = 2579030
2. InOctets = 707154029
3. InUcastPkts = 2575722
4. InMcastPkts = 1
5. InBcastPkts = 3307
6. OutPackets = 576701235
7. OutOctets = 650700777573
8. OutUcastPkts = 553275452
9. OutMcastPkts = 19468528
10. OutBcastPkts = 3957255
11. AlignErr = 0
12. FCSErr = 0
13. XmitErr = 0
14. RcvErr = 0
15. UnderSize = 0
16. SingleCol = 0
17. MultiCol = 0
18. LateCol = 0
19. ExcessiveCol = 0
20. CarrierSense = 0
21. Runts = 0
22. Giants = 0
23. InDiscards = 0
24. OutDiscards = 0
25. InErrors = 0
26. OutErrors = 0
27. TrunkFramesTx = 0
28. TrunkFramesRx = 0
29. WrongEncap = 0
30. Broadcast_suppression_discards = 0
31. Multicast_suppression_discards = 0
32. Unicast_suppression_discards = 0
33. rxTxHCPkts64Octets = 36464454
34. rxTxHCPkts65to127Octets = 55925886
35. rxTxHCPkts128to255Octets = 29765888
36. rxTxHCPkts256to511Octets = 22958237
37. rxTxHCpkts512to1023Octets = 28902202
38. rxTxHCpkts1024to1518Octets = 405263638
39. DropEvents = 0
40. CRCAlignErrors = 0
41. UndersizedPkts = 0
42. OversizedPkts = 0
43. FragmentPkts = 0
44. Jabbers = 0
45. Collisions = 0
46. DelayExceededDiscards = 0
47. bpduOutlost = 0
48. qos0Outlost = 0
49. qos1Outlost = 0
50. qos2Outlost = 0
51. qos3Outlost = 699437194

Hallo Ronald,
Out−Lost Excessive output rate of traffic. Increments in this counter are more likely to occur when connected to low speed devices. The first step in
troubleshooting Out−Lost increments is to verify
the link partner is running 100 Mbps full−duplex
from www.cisco119.com/down/pds/Troubleshooting_ Cisco_Catalyst_Switches_to_NIC_Compatibility_Issues-46.pdf
"qos3outlost" could be qos queue 3 overrun by traffic.
Liebe Gruesse aus Hamburg!
Martin

Strange FWSM log message

Dear expects,
I have a strange problem with a FWSM on Catalyst 6509, this funny logging message keep generating on the FWSM
%FWSM-3-106011: Deny inbound (No xlate) icmp src fwsm_212:10.10.212.30 dst fwsm_212:10.10.212.14 (type 8, code 0)
%FWSM-3-106011: Deny inbound (No xlate) icmp src fwsm_212:10.10.212.30 dst fwsm_212:10.10.212.12 (type 8, code 0)
Was it mean that a icmp packet source from 10.10.212.30 to 10.10.212.14 being denied in the FWSM in the first statement? it suppose to be on a same subnet (10.10.212.0/24), not sure why it being detected and logged in the FWSM gateway
I have surf some info from the Internet, in the CISCO FWSM log documentation mention this code of log message can typically be ignored, it's recommend to prevent this system log message from getting logged to the syslog server by entering the "no logging message 106011" command. But I have read also this log could be generated by various worms or trojans attempting to connect to known hosts, it may also indicate a port scaning
Could someone explain to me what actually mean by the message log ? what is the best way to investigte this log, shoud I drill down focus and check on the host machine itself or can ignored this system log ?
Thanks in advance.

Other than what you are calling a "message", is the preview functioning as desired?

Multiple FWSM in Catalyst 6513

Similar Messages

Maybe you are looking for