SPAN / Monitor Ports - packet switched on Line Card

Hi Forum,
I got a quick SPAN / Monitor question. I need to create a monitor session where the source is a VLAN. The question is if the L2 source and destination are switched internally on a different linecard to the the monitor destination, then does the SPAN port know about it.
I was wondering as in theory, the packet does not go on the backplane, then how does the switch monitor session know about it ??
Graham

Hi,
In the Catalyst 6500 Series, it is important to note that egress SPAN is done on the supervisor. This allows all traffic subject to egress SPAN to be sent across the fabric to the supervisor and then to the SPAN destination port, which can use significant system resources and affect user traffic. Ingress SPAN will be done on ingress modules so SPAN performance would be the sum of all participating replication engines. The performance of the SPAN feature depends on the packet size and the type of ASIC available in the replication engine.
See this link below that contains details about the SPAN on different platforms.
http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml#topic6
Regards,

Similar Messages

7k vPC best practice with multiple line cards?

I have a pair of 7k's that have a single line card with a 2 port vPC linked to a pair of 5k's, another 2 port vPC linked to the layer 3 VDC and a 4 port vPC used for peer link. I recently added an additional line card to the 7k’s and want to add redundancy for the new line card.  Would it be best to simply remove one of the existing ports from each vPC on line card 1 and then include a port from the new line card? For the peer link, my thought was to remove two ports from the existing port channel and then add back 2 ports from the new line card. This way line card 1 and 2 will share the ports that make up the vPC’s instead of all of the vPC ports being on line card 1. Does that make sense or is there a better way to implement line card redundancy after adding a new line card?
Also, if I want to add some of the ports on line card 2 to the layer 3 VDC. Can I run the allocate interface command without the fear of it removing any existing allocated ports?  I understand that the ports being moved/allocated to a different VDC will lose their current configuration.  I had a bad experience years ago using "switchport trunk vlan allowed" vs. "switchport trunk vlan allowed add" command so I just want to make sure the allocate interface doesn't require the "add" option! :)
Thanks!

Hi,
For adding new interface to port-channel:
1. you can shutdown the new physical interface and put all the configure as existing member interface.
2. add as port-channal member.
3. Unshut the physical interfaces (new interface- module 2).
4. Shutdown the physical interfaces (module 1) which you wanted to remove from the port-channel
Moving interface from one VDC another VDC will erase the configuration on that  interface . you could use allocate interface command to add new interface to the VDC but all the interface should be in same port group. Adding new interface to vdc will not affect existing interface configuration .
HTH
Regards,
VS.Suresh.
*Plz rate the usefull posts *

High response time on one line card in Cisco 6513 Catalyst Switch

I am facing a wierd issue with one of the line card in the Cisco 6513 switch. All the servers, desktops and trunks connected to this line card are showing high response time (>500ms) locally. But those IP phones connected to the same line card is working fine and the repsonse time is always 1ms. I am unable to find any root cause as i am not seeing any errors or logs, please help me to fidn the root cause.
Anyway i ahve a plan to reboot the line card and test it, but i am just looking for a fix that would help us to avoid the reboot.
The affected module is WS-X6548-GE-TX.
No errors for the following commands.
#sh fabric status
#sh fabric error
#sh module all
#sh module <slot>
#sh interface counter errors
#sh version:
Cisco Internetwork Operating System Software IOS (tm) s72033_rp Software (s72033_rp-IPSERVICESK9_WAN-M), Version 12.2(18)SXF11, RELEASE SOFTWARE (fc1)
Compiled Fri 14-Sep-07 21:50 by kellythw
Image text-base: 0x40101040, data-base: 0x42DB89D0
ROM: System Bootstrap, Version 12.2(17r)SX5, RELEASE SOFTWARE (fc1)
BOOTLDR: s72033_rp Software (s72033_rp-IPSERVICESK9_WAN-M), Version 12.2(18)SXF11, RELEASE SOFTWARE (fc1)
CISCOCORE-6513 uptime is 4 weeks, 4 days, 18 hours, 35 minutes
Time since CISCOCORE-6513 switched to active is 4 weeks, 4 days, 18 hours, 34 minutes
System returned to ROM by reload at 04:33:29 UTC Fri Feb 22 2013 (SP by reload)
System image file is "sup-bootdisk:s72033-ipservicesk9_wan-mz.122-18.SXF11.bin"
cisco WS-C6513 (R7000) processor (revision 1.0) with 458720K/65536K bytes of memory.
Processor board ID SAL09507GV9
SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache
Last reset from s/w reset
SuperLAT software (copyright 1990 by Meridian Technology Corp).
X.25 software, Version 3.0.0.
Bridging software.
TN3270 Emulation software.
15 Virtual Ethernet/IEEE 802.3 interfaces
172 Gigabit Ethernet/IEEE 802.3 interfaces
4 Ten Gigabit Ethernet/IEEE 802.3 interfaces
1917K bytes of non-volatile configuration memory.
8192K bytes of packet buffer memory.
65536K bytes of Flash internal SIMM (Sector size 512K).
Configuration register is 0x2102

What supervisor are you running ?
Be aware that the 6548 module is quite heavily oversubscribed and you could be running into this ie. servers will definitely be sending a lot more data than an IP phone.
The 6548 has an 8Gbps connection the switch fabric (note this is assuming a sup 720). So you have 48 1Gbps ports going in (in = from end devices) and only 8Gbps going out (out = to the switch fabric). Each group of 6 ports shares a 1Gbps connection the switch fabric. So lets says on one of those groupings you had 6 servers with 1Gbps connections. If only three of these servers were sending out 400Mbps of data each you have contention because 3 x 400Mbps = 1.2Gbps and you only have 1Gbps to the switch fabric.
If this is the problem there are a couple of solutions -
1) you can look into how the devices are spread across the port groupings and maybe you could move things around to make the traffic more even among port groupings. However you mention servers and trunks so you could just end up with the same problem but also the phones are not working either.
2) you can look to migrate some connections off that module onto another but this supposes you have spare capacity elsewhere. If those trunk links are connected to other switches then you would defintely want to look into moving these as the 6548 was never intended to be used as an uplink module between switches.
3) you could upgrade the module to something like a 6748 (or whatever the latest is as they keep introducing new ones) which has a much better connection to the switch fabric. Again this assumes a sup720 as the 6748 would't work with a sup32.
However don't just rush into 3) without first doing some investigation work eg. what do the servers do, how much traffic are they churning out etc. Have you looked at the interface stats for each connection to see if you are getting drops etc ?
Jon

What is the difference between Service Edge Optimized line cards and Packet Transport line cards in the ASR 9000

Hi Folks,
What is the deep dive difference between the service edge optimized cards and the packet transport line cards in the ASR 9000?
I know that QoS is the difference in general, for example, the service edge optimized has advanced QoS features while the Packet Transport line cards has basic QoS features but I want to know some more details please.
Thanks

There are four main deiffences (unfortunately don't have a reference link).
L3 Interfaces:
TR: 8k/LC, SE: 20k/LC
L2 Interfaces:
TR: 16k/LC, SE: 64k/LC
QoS:
TR: only 8 Queues per port, 8k policers per Network Processor
SE: 256k Queues per port, 256k policers per NP
ACL:
TR: 24k ACE
SE: 96k ACE
Number of FIB/mFIB/MAC etries, L3 VRFs, PWs available per TR/SE linecard are the same.

Supervisory engine, backplane switching,line cards

Hello,
i have a couple of questions and they are thus:
1.Is the line card a module or are they different parts of the switch. What is the function of the line card ?
2.From my understanding the supervisory engine is like the brain of the device. It controls all or most of the software related functionality of the device. Am I correct?
3.What is the difference between the SUP720 and SUP32?
4.Is the CatOS solely for layer 2 switching while the IOS is for routing?
5. when we refer to backplane does that mean how fast a switch switches packets ?
Best Regards,
DJ.

Hello,
Please find below answers inline,
1.Is the line card a module or are they different parts of the switch. What is the function of the line card ?
Yes, Linecards/Modules are different part of the switch. You can insert multiple cards into the Chassis. You can also have service moduels like Wism/FWSM/ACE
depends upon the business needs.
2.From my understanding the supervisory engine is like the brain of the device. It controls all or most of the software related functionality of the device. Am I correct?
Yes, Supervisor is the brain of the switch controls each function. A typical Supervisor consists of PFC which has TCAM L2/L3 Engines and RP/SP Processor and A replication engine (Hyperion) for Multicast. TCAM is the area where the RP/SP programmes the switch. There are multiple things that get programmed in TCAM like QoS/ACL/Netflow etc.
They have their respective hardware entries in the TCAM. If the entry is not found that is when the packet gets punted to CPU. If the linecard has a DFC on it then it can download the information from L2/L3 Engines from TCAM and switching gets fast as everytime the lookup happens in the Linecard instead of the Supervisor.
3.What is the difference between the SUP720 and SUP32?
SUp 32 : 32Gb backplane supporting hardware accelerated Layer 2 and 3, QoS and Security policies up to 15Mpps…
Sup 720: 720Gb backplane supporting hardware accelerated Layer 2 and 3, QoS and Security policies up to 400Mpps…
4.Is the CatOS solely for layer 2 switching while the IOS is for routing?
If you have a hybrid switch with CATOS/MSFC(IOS) CATos represents the switching part and MSFC represents the Routing part of the network.
5. when we refer to backplane does that mean how fast a switch switches packets ?
Backplane is used for communication between SUP - LC's.The area divided into three subsections,
1) D-bus - Used for data flow
2) R-bus - Used for result lookups
3) EOBC - Control communications like IPC/ScP which is helps the Supervisor to maintain the other line cards.
Depends on the line card the backplane can work in three different modes,
1) Flowthrough
Between non fabric modules and between a non fabric and a fabric enabled linecard
Throughput – 15 Mpps (@ 64 byte frames)
Bandwidth – 16 Gbps of bandwidth shared throughout
Data Bus frame size is variable; min of 4 cycles (64B Data) on the DBus for every frame +1 wait cycle
2) compact
When only ALL fabric enabled linecards in a chassis
Throughput – 30 Mpps (@ any frame size)
Bandwidth – 8 G CEF256; 20 G/channel CEF720
Data Bus frame size is constant (compact header); 2 cycles (32 B Data) on the DBus for every frame + no wait cycle
3) truncated
Between fabric linecards when a non fabric linecard is in the chassis.
Throughput – 15 Mpps (@ 64 byte frames); independent of frame size for CEF256 and CEF720
Bandwidth – 16 G shared for classic; 8 G per CEF256; 20 G/channel CEF720.
Data Bus frame size is variable; min of 4 cycles (64 Bytes Data) on the Data Bus for every frame.
Thanks,
Ricky Micky
*Rate Useful posts

ASR9K 8-Port 100G Ethernet Line Card

Hi,
ASR9K platform now has 8 Port 100G Ethernet line card available. The datasheet for this line card is available on the below mentioned link.
http://www.cisco.com/c/en/us/products/collateral/routers/asr-9000-series-aggregation-services-routers/datasheet-c78-733790.html?mdfid=282414851
This link card requires CPAK pluggable interface optics. However the weblink for A9K transceiver modules is not giving any information for the CPAK. It does talks about 1 port and 2 port 100G line card optical CFP modules.
http://www.cisco.com/c/en/us/products/collateral/routers/asr-9000-series-aggregation-services-routers/data_sheet_c78-624747.html
Can we have the document updated to reflect information on Cisco CPAK(s).
//Anand

Hello Anand,
8x100 card supports: CPAK-100G-SR10, CPAK-100G-LR4, CPAK-10X10G-LR
Data Sheet
http://www.cisco.com/c/en/us/products/collateral/routers/carrier-routing-system/data_sheet_c78-728110.html
Regards,
/A

Monitoring Line card Memory and CPU utlization

Hi,
Please help me to configure CPU and Memory utlization of Line card modules using HP NNM tool.
I need MIB values to configure the same.

Hi,
Is there any utility in solaris similar to nmon,
found in AIX, to monitor the server resources like
memory and CPU ? Could you describe the features of nmon that you're looking for?
Is "sar" the only command to monitor ?Other commands might be vmstat, prstat, iostat, mpstat. There's also "orca" which can be run to collect and graph data from a system.
Darren

POE Line Cards for 6807 Core Switch

Folks,
Could you please advise, if there is any line card specific for 6807 Core Switch , that provides 10/100/1000 POE Ethernet . I have only seen in datasheet as non - poe ..
Thanks for your support.
Regards,
Aaron

Hi Aaron,
If you need a switch that can provide gigabit ethernet POE, you might want to consider having a stand alone switch, like Cisco Catalyst 3560. Kindly refer to this link for more information.
http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3560-series-switches/product_data_sheet09186a00801f3d7d.html
Hope this helps!
Kind regards.

Mid-2012 RMBPro 10.9.4: Is it possible to switch between graphic cards? Activity monitor shows the high perf card always active even through no running apps need it.

How does one switch between graphics cards on a RMB Pro that has both a regular and high performance card installed?

There's no control built into OS X to manually switch between them (that I know of). But in your Energy Saver preferences, there is setting called Automatic Graphics Switching that will either keep the discrete GPU on all the time, or automatically switch it off when not in use. Do you already have this preference turned on?
It might keep the high performance graphics card on if it's plugged into AC power, since there is no battery life penalty in that case.

Vlan tag preservation span monitoring

Hi
I am spanning multiple vlans as source with the destination as a single ethernet port, though I am able to see the traffic from the VLANs, I am not able to see the VLAN tag in the packet which is a key requirement for me for monitoring.
Does anyone know why the VLAN tagging is stripped or how to preserve it in the monitor session?
Your help is much appreciated.
- Balaji

While I appreciate your response Najaf, we have been monitoring the SVIs on our current CAT6500 switches without any problems as we can "preserve" the vlan tags on the destination monitoring port.
However, we have found a way to see the VLAN tags on the monitoring destination port but we are still carrying out some tests to confirm our findings.
Will keep this thread updated.
-Balaji

7600 / SUP720-3BXL - mixing fabric and non-fabric enabled line cards

Dear All,
I am having to mix fabric and non-fabric enabled line cards on a single chassis.
These are my line cards:
WS-X6704-10GE
WS-X6408A-GBIC
WS-X6148-GE-TX
What's the maximum expected throughput in running with mix fabric line cards ?
Also, what will be the optimal and the recommended switching mode to run (truncated vs. bus-mode) ?
Any inputs will be greatly appreciated.
egards,
ZH

hi!
The maximum throughput will depend on the ingress and the egress card for the traffic. i.e. If the traffic is coming on the fabric enabled card and going out on the same, then the throughput is would be equal to the fabric card ( 20 gbps duplex). But if there is a non fabric card either in the ingress or egress path, then the throughput would be limited by the non-fabric card.
As for the mode to run in, I dont think you would have to worry on that as a fabric card would default to truncated mode where-as the non-fabric cards would run in the bus mode. This works fine, as if the ingress to egress is a fabric card, only the header is sent to the superviser for processing using the tuncated mode and the packet is just sent on the fabric directly to the egress port.
If there is a communication between fabric-non-fabric cards, then the fabric card still uses truncated mode to get the packet processed by the L2/L3 engines on Superviser and then if the egress is a non fabric card, then the packet is sent over the fabric to the superviser. From there the packet is sent to the egress over the bus.

Docsis 2.0 and 1.1 cable modems are not detected via UBR-MC20X20V-5D line card

Hi All,
We have uBR10K series CMTS and recently installed UBR-MC20X20V-5D line card, requirement is to configure this line card to support docsis 1.1 and 2.0. Problem is after finished the configurations modems (Hitron and Motorola) are not detected by the system. means no modem mac address listing under "Show cable modem" command.
Our CMTS has the following components
ESR-PRE2: x1
ESR-PRE-MEM-FD128: x1
UBR10-DTCC: x2
UBR-MC20X20V-5D: x1
iOS version: 12.2(33)SCE3
Part of running-config as follows
cable spectrum-group 13 band 22800000 26600000
controller Integrated-Cable 8/0/0
rf-channel 0 cable downstream channel-id 145
rf-channel 0 frequency 501012500 annex B modulation 256qam interleave 32
rf-channel 0 rf-power 59.0
no rf-channel 0 rf-shutdown
interface Cable8/0/0
no cable packet-cache
cable bundle 1
cable upstream max-ports 4
cable upstream 0 connector 0
cable upstream 0 spectrum-group 13
cable upstream 0 channel-width 3200000 3200000
cable upstream 0 docsis-mode tdma
cable upstream 0 minislot-size 2
cable upstream 0 range-backoff 3 6
cable upstream 0 modulation-profile 21
no cable upstream 0 shutdown
diag output attached herewith. Please any one advice on how to resolve this issue.
Thanks in advance.

Hi All,
We have uBR10K series CMTS and recently installed UBR-MC20X20V-5D line card, requirement is to configure this line card to support docsis 1.1 and 2.0. Problem is after finished the configurations modems (Hitron and Motorola) are not detected by the system. means no modem mac address listing under "Show cable modem" command.
Our CMTS has the following components
ESR-PRE2: x1
ESR-PRE-MEM-FD128: x1
UBR10-DTCC: x2
UBR-MC20X20V-5D: x1
iOS version: 12.2(33)SCE3
Part of running-config as follows
cable spectrum-group 13 band 22800000 26600000
controller Integrated-Cable 8/0/0
rf-channel 0 cable downstream channel-id 145
rf-channel 0 frequency 501012500 annex B modulation 256qam interleave 32
rf-channel 0 rf-power 59.0
no rf-channel 0 rf-shutdown
interface Cable8/0/0
no cable packet-cache
cable bundle 1
cable upstream max-ports 4
cable upstream 0 connector 0
cable upstream 0 spectrum-group 13
cable upstream 0 channel-width 3200000 3200000
cable upstream 0 docsis-mode tdma
cable upstream 0 minislot-size 2
cable upstream 0 range-backoff 3 6
cable upstream 0 modulation-profile 21
no cable upstream 0 shutdown
diag output attached herewith. Please any one advice on how to resolve this issue.
Thanks in advance.

Catalyst 4510R-E and Line Card Options

I am considering purchasing the following 4510R-E switch items for installation in a new building that will go online shortly.
a) 1 x 4510R-E Chassis (WS-C4510R-E)
b) 1 x Supervisor Engine 6-E (WS-X45-Sup6E)
c) 1 x 24-Port 10/100/1000 Module (WS-X4424-GB-RJ45)
d) 6 x 48-Port PoE 803.3af 10/100 (WS-X4248-RJ45V)
We are purchasing classic line cards for item c and d initially due to budget restrictions.
Three questions:
1) What power supply should I purchase to power this configuration?
2) The 4510 will connect to two Catalyst Blade 3020 switch, each using 4gig etherchannels. Can we do this connecting to item c or do we need an additional card (the only other things attached to item c are probably a Windows storage server and domain controller)
3) Does this sound like it will give us good performance or have I missed anything?
Many thanks for any advice
Mark

1:) Do you plan to use PoE with your line cards? Make sure you plan accordingly. I would recommend using the power calculator for this.
2:)This can be done no problem. No additional equipment required.
3:) You should be fine performance wise. This is a pretty standard setup.
Cisco Power Calculator
http://tools.cisco.com/cpc/launch.jsp
HTH,
Mark

Monitor is displaying flickering pink lines

Hi,
My monitor suddenly started flicking pick and green lines all across the monitor. I believe it's a problem with the monitor sincr when it's connected to a tv it's normal. Is there something that can be done to fix it or is it a goner? I would upload a picture but I don't know how to on here.
Thank you.

Hello lin09,
There could be a few reasons why its flickering colors and it does not necessarily mean the monitor is bad.
You did make sure the cable is tightly attatched, correct?
Can you test the monitor on another computer to rule that out? That would help narrow down the troubleshooting process.
Test with the same cable. If it still flickers, test with a different cable. If it still does not work, the monitor is bad.
If it works fine on another computer with the same cable, The problem lies in your computer.
Even though the TV works on one port, the other port on the video card the monitor is hooked to could be bad.
Using another monitor to test the same video card port would help.
Driver corruption is slightly possible and you could try uninstalling and reinstalling / updating.
That should give you a good place to start.

Catalyst 2950 Series - Monitoring Port

Do the catalyst 2950 series have a port that can be used to connect a device that is designed to monitor all traffic on the switch - we are looking to install Webspy to track network & internet usage. The Sentinal product would best be connected to the switch where it can record all traffic - it needs a monitor port or some such equivalent.

Hi,
The 2950 does indeed support that - the functionality is called Switch Port Analyzer (SPAN). The following link has details on how to configure it:
http://www.cisco.com/en/US/products/hw/switches/ps628/products_configuration_guide_chapter09186a00800d84c5.html
Hope that helps - pls rate the post if it does.
Paresh

SPAN / Monitor Ports - packet switched on Line Card

Similar Messages

Maybe you are looking for