Netboot kills switch traffic

Hi there, I have an interesting issue. I set up netboot, and tested it on a dell swich, worked great, imaged two New iMacs with leopard. I them moved the server to the proper location, and got it up and running. I can netboot to it no problem, and even managed to image a machine...the problem is, during a certain portion of the Netbooting of my Netinstall set, every other machine connected to this switch looses complete network connectivity...Netboot kills all traffic to the other machines on the DLINK 10/100 dumb switch. I tested it several times, No netboot=constant network connectivity on the switch, If even one machine netboots, traffic ceases to flow on the switch, if I stop netbooting from a MacOSx client on the switch, Packets begin to flow again. I can reproduce this problem everytime, by netbooting either from a netboot image, or a netinstall set. It always happend on the same point of the netboot process, traffic on the switch collapses.
Has anyone experianced this provblem? I am running MacOSx Leopard, and Leopard server. Does anyone know a solution to this, or have you experainced the same pheonomenon.

Is your switch really a switch or is it just a hub? If it's a hub, then the amount of traffic generated by netboot could be preventing anyone else from talking.
On a managed switch it is important that the +Rapid Spanning Tree Protocol+ (RTSP) aka Port-Fast on Cisco be enabled. There is some info on the bombich.com forums under network troubeshooting that has some further info. If it is a dumb switch, it should work.
I've been running NetBoot on a Tiger 10.4.11 server, with a Leopard Universal Netinstall image and have had no problems. Except when I had a machine hang partway through the imaging process. The result was almost like the NetBoot server started screaming at the client since it wasn't listening. That barrage of NFS traffic brought our entire network down, until we realized it was being caused by the hung client. We imaged other machines after that, and as long as they don't hang during the imaging process, the rest of the network performs exactly as it should.
You may NOT want to use multicast ASR on your production network. It also has the potential to cause major headaches. If you want to do multicast you would be better off buying an inexpensive switch and creating a separate network for imaging.
Running WireShark on a machine attached to the network before you start NetBooting might give you some insight into what is happening.

Similar Messages

Problems with Comodo Kill Switch, Windows Services & Bitlocker Encryption on Asus N56VZ

Hi All,
So recently I found myself stuck in a different scenario than before, and after many hours researching and efforts to fix this I still find myself stuck yet with a few options still to fix.
What is the problem?
So as a security cautious user when i first got to Windows 8.1 Pro 64Bit I encrypted both the C and D drive (Split the main disk) to protect myself and my family. Unfortunately that has not been very helpful with the way in which booting and running from
either external USB devices or CD/DVD works, not allowing myself to at all.
My usual security suit I use is Comodo Internet Security, which additionally comes with Comodo Kill Switch. Whilst using the application instead of stopping one of the TCP connections I was meant to I accidently stopped an Windows Explorer connection.
For some reason since then Windows Explorer, nor most windows apps or services themselves will run. For example msconfig will run but sfc /scannow or mmc will not, whether in safe mode or normal mode.
What Caused the Problem?
Cannot 100% say
What I Think Caused the Problem?
Myself running Comodo Kill Switch stopping a vital server connection with Windows Explorer that messed up alot. Or a potential Virus unknown how cannot fully scan system as wont boot externally or run many apps.
Additional Info
Asus Webcam is Disabled on Purpose
Laptop was fully customized to run latest games full graphics minus Anti Aliasing, works with Evolve + CoD Advanced Warfare
Laptop does not boot if USB Keyboard plugged in, works with everything else normal (had this on other systems no problem for me)
Ask me for more info if required to add here, braindead again
Specifications of my system
Intel® Core™ i7 3610QM Processor
Windows 8.1 Pro 64Bit
Intel® HM76 Chipset
DDR3 1600 MHz SDRAM, 2 x SO-DIMM 8GB
15.6" HD (1366x768)/Full HD (1920x1080)/Wide View Angle LED Backlight
NVIDIA® GeForce® GT 650M with 2GB DDR3 VRAM
1TB 5400RPM OR 750GB 5400/7200RPM (Cannot remember off top of head, braindead)
Super-Multi DVD
Kensington lock (Security Feature)
LoJack (Security Feature)
BIOS Booting User Password Protection (Security Feature)
HDD User Password Protection and Security (Security Feature)
Pre-OS Authentication by programmable key code (Security Feature)
What Can Run and Won't Run?
ON BOOT:
Bitlocker Encryption Password & Advanced Settings are accessible
Bios (password protected) is accessible
Windows Recovery Mode is accessible (Think it is F9 or F10)
Windows Logon Password Screen is accessible
ON NORMAL/SAFE-MODE START UP:
After Log-In Windows Explorer will not run
Task Manager will run, also allows me to browse the files when trying to start new task
Can run Command prompt
Cannot run any control panel items
Cannot run services.msc
Cannot run mmc
Cannot run sfc
Every time it metions windows drive is locked
Start Error's when running certain applications (Will post codes soon)
Rufus USB Tool does run
Cannot boot Kali Linux off USB
Cannot boot Windows 8.1 off USB
Cannot boot Windows 8.1 off DVDRW
Fixwin2 will not run
Apps either work or don't whether in safe mode or normal
Cannot use Windows Installer
What Fixes I Have Tried So Far
Ok so like any normal user I don't want to lose my files. So here are what I have tried so far:
Repair MBR (Repair Completed, No Luck)
SFC /SCANNOW (Returns Error 'Windows Resource Protection could not start the repair service')
Tried sfc /SCANNOW /OFFBOOTDIR=c:\ /OFFWINDIR=c:\windows (Could not access drive)
Fixwin2 (Will not run in either normal or safe mode)
Booting using Windows 8.1 via USB (Cannot boot from extermal devices due to Bitlocker Encryption)
Booting using Kali Linux Via DVD & USB (Cannot boot from external devices due to Bitlocker Encrytption)
How do I know it is because of Bitlocker, because last time I disabled it, I could run from external devices
Tried to run bitlocker to change settings (Will not run)
Have used both password and recovery keys to unlock driver, they work but when applications are running on windows the drive is still locked?
Tried windows Automatic Diagnostic and Repair (Could not repair anything, did make a log I am still to extract from the syste)
There are No System Restore Points
I'm sure there is much more information I could post however I will leave it on an ask to know basis, apart from the log files and further information to gather. Below is my list of trial and error fixes to try for today (need more ideas and help please!):
Hiren's 15.2 Boot CD via DVD (NOT ABLE TO BOOT)
Hiren's 15.2 Boot CD via USB (NOT ABLE TO BOOT)
Research into the Bios and Possible Update in-case of implementation of Virus, can access flash utility (STILL NOT TESTED)
Try and get a portable version or a working version of windows installer to try and re-install Comodo Internet Security (STILL NOT TESTED)
Another way to disable Bitlocker
Anti-Malware / Anti-Virus Scan If Possible to Run One
Bitlocker Repair Tool, will try this also
I have posted this as have not found much info online, usually find it and crack on but this time things are a little more tricky, my priority task I really need to do is remove the Bitlocker Encryption, but if the application will not run... what do I do
then?
Thanks for your time reading all, Sorry for any poor formatting or spelling.
Update 1: MMC.exe Error Code
Ok so now have the computer in safe mode, still same as before, no explorer.exe, no services etc... Just went into the Task Manager > Services (Tab) > Open Services (Option at bottom)
This is the error I get:
'The Instruction at 0x785a746c referenced memory at 0x000000a8. The memory could not be read.
Any Ideas on what this error is and why?
Update 2: CHKDSK Works with no Fix
Update 3: Hiren's 15.2 Boot CD - USB Boot still no luck booting around Bitlocker Encryption
Just to explain again, I already have unlocked the drive with correct bitlocker password or recovery key yet the drive remains locked not allowing windows refresh of files of complete install from the windows recovery menu as keeps saying drive is locked

Ok so attempt number two to write this update via bloody phone! (Just refreshed page whilst writing!)
Update 4:
Problem - cannot run from bootable devices (DVD/USB)
Cause - bitlocker fully encrypted drive stops this working
Repair - Boot up holding F9 to enter windows recovery Input Bitlocker recovery keys to unlock drives
Navigate to Command Prompt in advanced settings Execute following code:
Repair-bde c: d: -rp 000111-222333-444555-etc...
(Code found from https://technet.microsoft.com/en-us/library/ee523219%28v=ws.10%29.aspx)
Note for those using this: It is common while unlocking certain drives to get errors such as: Quote from http://www.benjaminathawes.com/2013/03/17/resolving-partial-encryption-problems-with-bitlocker/
"LOG INFO: 0x0000002aValid metadata at offset 8832512000 found at scan level
1.LOG INFO: 0x0000002b Successfully created repair context.
LOG ERROR: 0xc0000037 Failed to read sector at offset 9211592704.
(0×00000017) LOG ERROR: 0xc0000037 Failed to read sector at offset 9211593216.
(0×00000017) …followed by around 20 similar entries that differed only by the offset value"
Repair Status for Update 4: COMPLETED - However over wrote D drive data so now need to recover that
Problem 2 - windows services corrupted along with windows files
Cause - Unknown
Repair - wait until system is fully decrypted Once fully decrypted ensure boot from USB/DVD
Re-do fixes that would not work before if this has fixed boot issue Confirm fix / update post Hope anything I put here helps others also

Design a kill switch

Hey, I am trying to incorporate a kill switch into this VI. I have made an attempt but it will not exit the wait time in the wait function when I want to turn all of the values to false immediately instead of waiting for the wait time to expire. Can anyone help me with this?
Attachments:
Project.vi ‏58 KB

That's because the value of the switch is read immediately upon starting the loop. So you have to wait almost 60 seconds for that loop iteration to end. Then the loop will begin its next iteration at which time the now False state of the button will be read (logic seems kind of backwards). But then you have to wait another 60 seconds because that iteraiton of the loop needs to complete.
What you need to do is put a while loop inside of there that continually reads the state of the Kill button with a small wait statement to keep from eating up CPU cycles. Use the Elapsed Time express VI. Now have that inner while loop stop when either the Elapsed Time Timer goes true, OR the Kill button goes to its False Kill state. Now the Kill button will be read very frequently and will seem to respond immediately.

IPhone 'kill switch' does it exist?

I don't mean the Kill Switch app currently offered by HubApps which is just a force quit application.
I mean an actual kill switch that will shut down the phone and make it inoperable in case it is stolen.
There is a lot of debate in the media over this right now. A NYTimes article on Sunday says that it is available, but I can't find it.
Does it really exist?

Yes.
iCloud: Find My iPhone Activation Lock in iOS 7

[WAS SOLVED FOR FEW HOURS] ipw3945: Radio Frequency Kill Switch is On

Hi,
Just got a new machine (Lenovo Y410). I was trying to set up wireless but the wifi card never showed up. Looking at dmesg showed:
ipw3945: Radio Frequency Kill Switch is On:
Kill switch must be turned off for wireless networking to work.
Ok fine.
But, the problem is that the switch is on the correct position...
Any help/suggestions highly appreciated.
Thanks in advance.
Last edited by bangkok_manouel (2007-11-02 04:04:38)

Thanks again for your help.
Should anyone have this problem, you can also try:
http://ubuntuforums.org/showthread.php?t=303897
http://ubuntuforums.org/showthread.php?t=427222
None of these worked for me unfortunately. The only thing that finally solved this problem was to install windows temporary. Needless to say that this really sucks. But works.

Core Sync kills LAN traffic on Mac

Hi,
why core sync process for 1 mac generates a lot of traffic, killing navigation on whole lan?
If I stop process, i get 27ms time response ping, if I restart process "Core Sync", time increase to 2200ms - 3000ms and the entire lan users come to me a bit angry.
Note that all files on my Creative Clouds folder are already syncronized, also fonts and Apps are updated.
ps. working on iMac OSX 9.0.2, Adobe Creative Cloud 1.5.0.3.367.
thank you. Luca.

Moving this discussion to the File and Font Sync Early access forum.
Aculine I would recommend contacting our support team For the best assistance, I recommend our chat support at http://adobe.ly/yxj0t6. Our chat representatives can provide a personalized experience to resolve the issues you have described.
If you could also have your CoreSync logs available it would be beneficial. They are located at ~/Library/Application Support/Adobe/CoreSync/CoreSync-yyyy-mm-dd.log. for Mac OS.
If you have Windows user experiencing the same difficulty then the CoreSync logs can be found at %USERPROFILE%\AppData\Roaming\Adobe\CoreSync\CoreSync-yyyy-MM-dd.log.

Switch traffic stopped until console cable plugged in.

Hi All,
I'm working on an odd problem investigation with one of our switches at a remote site. Two days ago an alert was fired for Gigabit Ethernet/0/3 reporting a status as down for over 2 minutes. An engineer was sent to site and confirmed that the device had power but there was no activity on the ports connecting two of the clients buildings. The engineer attempted a reset of the SFP and fibre port which did not resolve the issue, and also connected the fibre cable to another port to confirm there were no issues with the cable. The engineer then attempted to connect a console cable to the switch and the fibre port came back up of its own accord. The switch was also rebooted to confirm it was working as expected.
I'm in a junior role here but i've no idea why the switch would have issues until a console cable was attached.
Any help would be greatly appreciated! :)
Gareth.

I've had this issue since I had to reinstall windows 7. The best solution I found was creating a shotcut for PSOFF on the desktop or somewhere and setting it to run on startup. I keep my shortcut on the desktop because if the computer ever dies and enters windows backup, when you turn your computer back on it will not automatically start psoff again. If that ever happens I just click the shortcut

MPLS TE: Fastreroute traffic switching to primary tunnel

I have the following question regarding MPLS-TE fastreroute.
In my scenario I have Fastreroute working perfectly, when the protected link fails traffic gets switched to the backup tunnel and when the link gets up traffic comes back to the primary tunnel. The question is... is it possible to delay the return of traffic to the primary tunnel after the protected link is up again? or even if is it possible to manually switch traffic back to the primary tunnel?
Many thanks for your support.

Hi,
There is a command to do this "mpls traffic-eng tunnels reoptimize timers frequency", if you set this timer to 0 it will never reoptimize the Tunnels even after Primary link is up. The default reoptimization timer is 3600 seconds, or one hour.
You can use "mpls traffic-engineering reoptimize" to reoptimize manually. You can either do all at once or select tunnel at a time.
Hope this was your query...
Edit:
You can use "mpls traffic-eng reoptimize" to reoptimize manually. :-)
Thanks
Cheers
~sultan

SG 500X Switch VRRP Issue

HI all.
I have 2 SG500x's that i am trying to establish VRRP over.
When i kill the master switch, the backup seems to take over but the Ip address of the Virtual router cant be accessed.
Could anybody point me in the right direction?
Switch 1:
interface vlan 1
ip address 192.168.84.1 255.255.255.0
no ip address dhcp
vrrp 2 ip 192.168.84.1
vrrp 2 source-ip 0.0.0.0
no vrrp 2 shutdown
vrrp 2 description 2
Switch2:
interface vlan 1
ip address 192.168.84.2 255.255.255.0
no ip address dhcp
vrrp 2 ip 192.168.84.1
vrrp 2 source-ip 0.0.0.0
no vrrp 2 shutdown
vrrp 2 description 2
Any help would be greatly appreciated.
Thanks
Brett

Hello Brett,
When you say the IP cannot be accessed what do you mean?
Does traffic still flow properly, or does something go wrong?
I don't think you'll be able to access the switch at the virtual IP, since when the backup is acting as the forwarder it is just using that IP to respond to default gateway requests.
What happens if you kill switch 2? Can you still access the virtual IP address then?
Christopher Ebert
Network Support Engineer - Cisco Small Business Support Center
*please mark/rate helpful posts*

Internal and external switches on server 2012 r2

this is driving me nuts.
I have a vm with an internal and external switch.
I am trying to get backups to route to the host machine using the internal switch only.
I've gone all over priorities and the routes are all fine but the data will constantly go over the external switch.
If i disable external switch traffic goes over internal switch just fine.
I've read about the automatic detection of least cost routing on the internal switch but just can not get it to run correctly.
please help
Doug

All settings below.
backup traffic should run from 192.168.200.4 > 192.168.200.2 over internal NIC
VM Settings
Ethernet adapter Ethernet 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Hyper-V Network Adapter #3
Physical Address. . . . . . . . . : 00-15-5D-37-0E-04
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.200.4(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.240
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Hyper-V Network Adapter
Physical Address. . . . . . . . . : 00-15-5D-37-0E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.100.4(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.100.1
DNS Servers . . . . . . . . . . . : 192.168.100.3
NetBIOS over Tcpip. . . . . . . . : Enabled
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.100.1 192.168.100.4 261
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.100.0 255.255.255.0 On-link 192.168.100.4 261
192.168.100.4 255.255.255.255 On-link 192.168.100.4 261
192.168.100.255 255.255.255.255 On-link 192.168.100.4 261
192.168.200.0 255.255.255.240 On-link 192.168.200.4 276
192.168.200.4 255.255.255.255 On-link 192.168.200.4 276
192.168.200.15 255.255.255.255 On-link 192.168.200.4 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.100.4 261
224.0.0.0 240.0.0.0 On-link 192.168.200.4 276
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.100.4 261
255.255.255.255 255.255.255.255 On-link 192.168.200.4 276
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
0.0.0.0 0.0.0.0 192.168.100.1 Default
===========================================================================
HOST Settings
Ethernet adapter vEthernet (Internal-NIC):
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Hyper-V Virtual Ethernet Adapter #2
Physical Address. . . . . . . . . : 00-15-5D-37-0E-02
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::744b:bbc1:e067:5592%48(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.200.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.240
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 805311837
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-15-79-97-A0-D3-C1-05-24-BF
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Ethernet Host:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP Ethernet 1Gb 4-port 331FLR Adapter #4
Physical Address. . . . . . . . . : A0-D3-C1-05-24-BF
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::3412:1255:61dc:3e3c%12(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.100.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.100.1
DHCPv6 IAID . . . . . . . . . . . : 211866561
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-15-79-97-A0-D3-C1-05-24-BF
DNS Servers . . . . . . . . . . . : 8.8.8.8
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Ethernet Host:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP Ethernet 1Gb 4-port 331FLR Adapter #4
Physical Address. . . . . . . . . : A0-D3-C1-05-24-BF
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::3412:1255:61dc:3e3c%12(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.100.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.100.1
DHCPv6 IAID . . . . . . . . . . . : 211866561
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-15-79-97-A0-D3-C1-05-24-BF
DNS Servers . . . . . . . . . . . : 8.8.8.8
NetBIOS over Tcpip. . . . . . . . : Enabled
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.100.1 192.168.100.2 276
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
169.254.0.0 255.255.0.0 On-link 169.254.45.46 276
169.254.45.46 255.255.255.255 On-link 169.254.45.46 276
169.254.255.255 255.255.255.255 On-link 169.254.45.46 276
192.168.100.0 255.255.255.0 On-link 192.168.100.2 276
192.168.100.2 255.255.255.255 On-link 192.168.100.2 276
192.168.100.255 255.255.255.255 On-link 192.168.100.2 276
192.168.200.0 255.255.255.240 On-link 192.168.200.2 261
192.168.200.2 255.255.255.255 On-link 192.168.200.2 261
192.168.200.15 255.255.255.255 On-link 192.168.200.2 261
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 169.254.45.46 276
224.0.0.0 240.0.0.0 On-link 192.168.100.2 276
224.0.0.0 240.0.0.0 On-link 192.168.200.2 261
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 169.254.45.46 276
255.255.255.255 255.255.255.255 On-link 192.168.100.2 276
255.255.255.255 255.255.255.255 On-link 192.168.200.2 261
===========================================================================
Persistent Routes:
Network Address Netmask Gateway Address Metric
0.0.0.0 0.0.0.0 192.168.100.1 Default
Doug Hardy

ISE works with Local-switch Mode

Hi guys,
My AP is configured to work as Flexconnect mode with my WLC, that means that my wireless data will be switched locally without getting through my WLC, is that ok for my ISE to controll my wireless access?
Regards,

Yes; FlexConnect supports central authentication with both locally and centrally switched traffic models.
Lots of info about FlexConnect here;
http://www.cisco.com/en/US/docs/wireless/controller/7.4/configuration/guides/flexconnect/config_flexconnect_chapter_01.html

Redirect / Block non https traffic

I have a quick question. Today I setup teaming 2.0 on SLES10.
After customizing the SuSE firewall per the instructions everything is perfect. I then cut off non-secure port 80 traffic. Looked OK. I found that the email that teaming sends out is http://server, since I killed http traffic it's now broken. I tried changing the firewall rule to FW_REDIRECT="0/0,10.0.100.100,tcp,80,8443 to see if it would just redirect the port 80 traffic to 8443 on the server - but that did not work. Is their a place I can simply change the email to link to https://server?
Any other thoughts?
Cool product by the way!
Tha
Dennis

Dennis,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Campus LAN Access Switch recommendation

Hi all,
I am looking at the specs of 2960X switches and 3750v2 switches as possible replacements for some old 3750 switches which are approaching End OF Support.
Am I right in understanding that the performance (both packet switching & backplane bandwidth) is better on the 2960X's than the 3750v2's? Although it looks like the 3750v2's are a lot more feature rich and also have dCEF.
The datacheets for the 2960X report 80gig Stacking bandwidth, and 216Gbps backplane bandwidth and at least 70mpps whereas the 3750v2's are only 32gig switching fabric bandwidth and a maximum forwarding rate of 13mpps! Is there something I am missing here??
I have no idea of costs, but just looking at getting the best value for money out of our Access Switches.
The 3650's and 3850's look good too but I imagine they are pretty costly compared to the 2960's and I do not think we need integrated WLCs in our access switches as the AP's we have in our building are minimal.
Any advice appreciated!
Thanks
Mario

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
BTW, you realize, 3750v2s are end-of-sale?
Correct, a 2960X might have higher fabric bandwidth and PPS ratings than a 3750v2, but that doesn't mean it's faster or better. For fabric bandwidths and PPSs, you need to look at the needs of the ports on the device.
A 3750v2 with 48 copper FE ports, and 4 SFP gig ports, has 8.8 Gbps of port bandwidth. So a non-blocking fabric needs to support 17.6 Gbps. As you note, the 3750v2 fabric is listed as 32 Gbps, so you're covered there.
The same 8.8 Gbps of port bandwidth needs up to 13.0944 Mpps (1.488 Mpps per gig) for wire-rate for minimum size Ethernet. Your noted 13 Mpps seems to cover that too.
So, basically, a 3750v2 switch is wire-rate capable.
When you get into stack bandwidth, even more that other switch parameters, there's lies, dam lies, and device performance specifications. Trying to judge one stack architecture against the other, gets very complicated very quickly.
On the 2960 series, I believe Cisco is "adding" each switch to switch ring link to an aggregate total. In an ideal situation, if traffic only needed to go from switch 1 to switch 2, and from switch 2 to switch 3, then the aggregate summation does have a bandwidth advantage over StackWise "bus" like ring usage. If traffic needs to go from between all 3 switches, traffic to from switch 1 to switch 3 will need to share the bandwidth also being used by traffic from switch 1 to switch 2.
I.e. a 2960 80 Gbps doesn't mean you get 80 Gbps between just two switches, or the advantage of all 80 Gbps found within a maximum member 2960 stack.
(As an aside, compare StackWise vs. StackWise Plus. The latter has twice the physical bandwidth, but it also operates much "smarter". Again, unwinding how stacks work, and their impact to your needs, is complicated.)
There's also more to a switch's performance than raw bandwidths and PPS rates. The switch's architecture, and other switch specifications, can make a big difference in real-world performance. You'll find 3560/3750s with the fabric bandwidths and PPS rates same as some 49xx switches, but the latter often will deal with busy servers much, much better, due to different port buffering.
All the above, also means, without some real analysis of both your needs and devices being considered, anyone's recommendations should be taken with a large grain of salt; including mine. ;)
That said, for simple L2 edge port usage, the less expensive 2960 series might be just fine for you. If you want to reduce costs even more, you might also look at Cisco's SMB switches, some I think are also now stackable.

Switch settings for adapter teaming.

I have an Intel Pro 1000 MT nic in my server that is set up as an adaptive load balancing team. Do I need to do any config on my 2950 Catalyst (version 12.1.20) to make use of this feature? How about if it was moved to a 3550 with the same IOS version?

From Intel's description of ALB:
# Intel's Adaptive Load Balancing (ALB) ?also known as asymmetric port aggregation?is a method of ensuring consistent high server throughput and transparent backup connections by using multiple network interface cards and balancing the data transmissions across them. As many as four Intel? server adapters, connected to a switch, can be configured to work together as a "team" for an aggregate throughput of up to 400 Mbps with Fast Ethernet adapters or 8 Gbps with Gigabit Ethernet Adapters.
# Cisco's Fast EtherChannel* (FEC) and Gigabit EtherChannel (GEC) similarly provides fault tolerance and load balancing across multiple adapters, with one difference ? through the addition of an FEC or GEC-enabled switch, traffic loads are balanced in both directions, boosting throughput for data from and to the server (instead of just from the server), enabling bandwidth to scale up to 800 Mbps with 4 Fast Ethernet adapters or 4 Gbps with 4 Gigabit Ethernet adapters.
That sounds to me like a FEC or GEC on Cisco, if my understanding is corerct then you need to configured channeling on the ports of the 2950 that connects to the Intel's ALB NICs. you will do the same to teh other cisco switches should you decide to move the connection.
Cisco channeling configuration guide:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12122ea7/scg/swethchl.htm
Please rate helpful posts.

Qos- I want to apply limit on FTP traffic

I want to apply Qos on ftp traffic on cisco 6500. Ftp traffic should use only 512 kbps bandwidth. Please any one suggest how should i establish this and any study document will be welcome.
Thanks in advance

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
How would depend very much on the QoS features of the device. Even 6500 QoS features depend on line cards.
Most, but not all, Cisco switches support 4 egress queue which you can provide different bandwidth allocations. Such allocations usually provide a minimum, but more bandwidth might be used if its otherwise not being used.
For example, you might define four queues that one is a priority queue for real-time traffic; one is a foreground queue with a large bandwidth allocation (not that such traffic should be bandwidth intensive, but to insure high priority for dequeuing; one is a background queue with minimum bandwidth allocation (often where you might want to direct FTP); and the last is a middle allocation for everything else, i.e. your default.
Also on switches, traffic is often placed into a particular egress queue based on L2 CoS or L3 ToS. So, what this means, you'll want to mark your FTP traffic differently than your other traffic, perhaps with CoS 1 or DSCP CS1 or AF1x.
Cisco has some great guides on how to configure QoS for their different platforms although their 11 class model is often overly complex.

Netboot kills switch traffic

Similar Messages

Maybe you are looking for