VOIP VLAN using 802.1q frames causing massive dropped packets

I have a MBP 2.16 connected via 1Gbps Ethernet to my corporate network. I also have a Cisco 7960 VOIP phone and it seems that 802.1q VOIP VLANs are causing the MBPro's Marvell Yukon Gigabit Ethernet adapter to drop 1326 packets out of 3559. It's absolutely unusable at my office, where my laptop is my main machine. I'm having to use my Compaq N610c to browse the Internet and read e-mail. Apple, please update the driver and save me!!!

I'd check a few things, are you sure the switch that you are connected to is really at 1000Base-T? If it is a Cisco switch I've seen all sorts of probems with auto-negotiation, I'd try to get your network administrator to "fix" the port at the speed you wish to run your network at (ie 100/1000) make sure the duplex is set correctly on the MacBook Pro (make sure it is set to the same as the switch). Also ensure that jumbo frames are enabled on the Cisco switch and make sure the MTU is set correctly for your network. This involves some tweaking of the ethernet interface in the network preferences of OS X.
Of course if there are indeed 802.1q problems with the onboard NIC then you could get your network administrator to disable .1q frames on the port that your MBP is connected to, you won't be able to use a "loop through" port on a VoIP phone if the phone relies on .1q trunking, so you'll need a port for the phone and a seperate .1q clean port for the MBP.

Similar Messages

The upgrade to Firefox 4 is causing massive problems with my computer. How do I uninstall it and go back to using the previous version?

Firefox 4 is absolutely awful - it is causing massive problems with my computer. How do I uninstall Firefox 4 and go back to the previous version of Firefox?

According to the instructions given on the Norton Community forum under "Other Norton Products/Comcast-Customers - Norton Toolbar Problem in Firefox 10", I have done everything necessary. And I do have a Norton toolbar (Safe Web and Identity Safe) when I open Firefox 10. As was mentioned in the previous posts here, you need to run manual LiveUpdate then reboot until you have version 5.2.0.13. Then reboot and run manual LiveUpdate again and reboot once more. One thing that I noticed is that Norton never told me that it had updated the patch for Firefox 10, so I didn't know. I guess if you have the toolbar when you run Firefox 10, then you have done it all.

Windows 7 / 2008 duplicate static address when using 802.1x / MAB - ISE

Hi all!
ISE 1.1.3
Cisco 3750 switches
Windows XP / 7 / 2008 clients
I'm having some weird issues were if a client connects to a switchport and happens to be using a static IP address then the client warns of a duplicate address problem. Also the client will then only show the default gateway within ipconfig even though the IP address / mask is still in the GUI network properties of the adaptor. This is happening with Windows 7 and Windows 2008 devices.
Windows XP clients don't get the issue.
Some clients will use 802.1x native supplicant and some will be authenticated based on MAB. Not noticed the problem with 802.1x clients but it always occurs on MAB.
I came across a similar issue here:
http://networkingblog.vvlabs.com/2012/07/cisco-ise-duplicate-ip-address-windows-7.html
Going of that blog I tried using the "ip device tracking delay probe delay" command but the switches don't recognise the "delay" keyword.
The switches are 3750 switches running version 12.2(58)SE2.
All I have is "count, interval, use-svi" as extra options.
Catalyst 4500 switch guide has "delay" option but no "count, interval or use-svi".
The only way I have managed to avoid the problem is using the second solution which is a registry hack on each client. This is fine for the odd server but not realistic when there will be hundreds of other clients.
Any ideas?

Hi
We are doing 802.1x for clients using the Windows supplicant. For clients not using supplicants we are using MAB. So the print servers and printers use MAB.
Extract of config...
aaa new-model
aaa authentication login default local
aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa authorization auth-proxy default group radius
aaa accounting update periodic 5
aaa accounting dot1x default start-stop group radius
aaa accounting system default start-stop group radius
aaa server radius dynamic-author
client x server-key 7 x
client x server-key 7 x
aaa session-id common
clock summer-time BST recurring last Sun Mar 23:00 last Sun Oct 23:00
system mtu routing 1500
vtp mode transparent
authentication mac-move permit
ip routing
no ip domain-lookup
ip device tracking
dot1x system-auth-control
dot1x critical eapol
spanning-tree mode pvst
spanning-tree extend system-id
vlan internal allocation policy ascending
interface FastEthernet1/0/1
description ### Dot1x with MAB fallback ###
switchport mode access
switchport voice vlan 2
ip access-group ACL-DEFAULT in
srr-queue bandwidth share 10 10 60 20
priority-queue out
authentication event fail action next-method
authentication event server dead action authorize vlan 1
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer restart 0
authentication timer reauthenticate server
authentication violation restrict
mab
mls qos trust device cisco-phone
mls qos trust cos
auto qos voip cisco-phone
dot1x pae authenticator
dot1x timeout tx-period 5
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
ip http server
ip http secure-server
ip access-list extended ACL-DEFAULT
remark Deny access to new network
deny ip any 172.x.x.x 0.0.0.255 log
remark Allow everything else to other networks
permit ip any any
ip radius source-interface Vlan2
logging esm config
logging host x transport udp port 20514
logging host x transport udp port 20514
radius-server attribute 6 on-for-login-auth
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server dead-criteria time 30 tries 3
radius-server vsa send accounting
radius-server vsa send authentication
radius server ISE-1
address ipv4 x auth-port 1645 acct-port 1646
key 7 x
radius server ISE-2
address ipv4 x auth-port 1645 acct-port 1646
key 7 x

3-bit priority field in the 802.1P or 802.1Q frame

Hi,
How does the switch differentiation based on the 3-bit priority field in the 802.1P or 802.1Q frame?
Regards
M

Hi,
Basically 802.1q specifies the VLAN tag and 802.1p describes the specific 3 bit priority field
inside that 4 octet tag.
Some useful info:
http://www.javvin.com/protocolVLAN.html
" VID : VLAN ID is the identification of the VLAN, which is basically used by the standard 802.1Q. It has 12 bits and allow the identification of 4096 (2^12) VLANs. Of the 4096 possible VIDs, a VID of 0 is used to identify priority frames .. "
Priority frames means 802.1p frames.
Regards.

Vlans and 802.1q

I would like to understand the flow of frames through a switch when using vlans.
1. Are the frames tagged with VLan I.D everytime they arrive at the port from the attached end device and before being processed/forwarded by the switch?
Or are the frames only ever tagged if they are to be forwarded to a 802.1Q device such as a trunk port to another switch or IP Phone?
2. I thought the switch uses a forwarding decision based on Dest Mac address. How does the vlan tag help in a forwarding decision?
Is it only ever used in the case of a broadcast packet?

Hello Paul,
when a switch knows out which port a MAC address X is it will forward the frame with destination MAC address X out it.
This doesn't change if the vlan extends over multiple switches:
the outgoing interface becomes an uplink or trunk port.
A switch knows how to send traffic with a destination that has spoken in the last 300 seconds (default aging time).
If a frame has an unknown unicast destination Y it is treated like a broadcast: sent out all ports in vlan
As soon as that Y MAC address starts to talk again the association MAC Y, vlan id, port is made and frames are processed as unicast traffic.
You could recognize a switch uplink because multiple MAC addresses are associated with the port (if the vlan spans over multiple switches)
This MAC filtering capability is one of the greatest advantages of LAN switches over simple signal repeaters like hubs: they save bandwidth making each collision domain confined at each switch port
Hope to help
Giuseppe

Some pages use master text frame, others don't. Fix?

It turns out in my document, some of my pages have a master text frame and others don't. Many don't. It must be the way I created the frames, accidentally creating independent frames. Is there a fool proof way not to accieentally create independent frames and is there a good way to make sure all these pages with independent frames are turned back into master text frames?
What I can do is delete the independent frame, then link the previous frame to the inside of the master text frame (I think I used to drop the link on a ruler too often and that creates an independent frame that is in most cases indistinguishable from a master text frame). This is tedious to do for the entire document. Is there an easier way?

It sounds like you understand what happened. Clicking the place gun cusror on any type of guide will ignore your master frames. Overriding a master text frame before placing the text and Shift-clicking in the overridden frame will also ignore the master frames on subsequent pages.
The bes thing you can do is keep your eyse open to watch the shape of the cursor. If ID is going to use an existing frame the cursor will be surrounded by parentheses and a new frame will use a cursor with a square upper left corner. You should also develop the habit of clicking in empty areas away from guides if you are using existing frames -- you don't need to click at the top of these frames.
It's also possible that you did everything correctly and you are working in a facing pages file and at some point added or deleted a single page somewhere other than the end. That would cause all following pages to switch sides and master objects would be reapplied behind any overridden frames.
There is no easy way to deal with extra frames. If they are not causing a problem you may be able to simply ignore them.

Using 802.1x and 2 hosts (one physical and one virtual) on the same port

Hello,
We trying to utilize the following scenario:
BYOD with users' windows based laptops and Apple Mac Books
Virtual machines within each of the physical machines: For Windows, the VMs will be Windows 7 VMs running within VM Workstation. For Macs, users will be running Windows 7 VMs within Fusion.
802.1x set for multi-host
Using 802.1x, we have a guest network that places the user's physical machine in once it fails authentication. The virtual machine runs the corporate image, and we'd like to have this VM connected to our corporate VLAN.
We have been running into this scenario though:
1.     User plugs his BYOD laptop from into the network. His laptop gets attached to the guest network because it fails the 802.1x check.
2.      The VM is powered on. It successfully is connected to the corporate network.
3.      Now, the user unplugs his network cable from his host machine and waits 10 seconds.
4.      He then re-plugs the network cable to his host machine.
5.      The VM is the first to authenticate to the 802.1x network and it gains access to the corporate network.
       6.      Due to the VM being the first to authenticate on 802.1x, the host network connection piggybacks off of the VM, and therefore the host gains access to the corporate network
Obviously this represents a no-go if the user's BYOD computer is able to access the corporate network. Is there is any specific way that 802.1x can be configured to prevent this from happening?
Thanks,
Mooge

Multi-Host is not the right option for you. In this Multi-Host only one device has to successfully authenticate to authenticate all device on that port.
You need to set host-mode to "multi-auth"

ACPI.sys, NDIS.sys, and TCPIP.sys causing massive DPC latency spikes

I am running Win 7 Ultimate. I recently reinstalled my OS. Using LatencyMon and DPCLatency checker, I've noticed that these three drivers are causing massive spikes. How do I replace these files with non-problematic files?
(Originally, my computer was on Home Prem, I did an anytime upgrade to Ultimate, this time I did a clean install)
Thanks.

Dear all,
I am also doing home recording with my computer, via firewire and I also see latency spikes.
Its for an advanced home user difficult to judge, what is causing issues.
Audio clicks and drops were mainly caused on my (high performance system) by non optimal combination of Firewire Card/Chipset, Windows 7 Firewire driver and driver of the audio Interface, but which I could finally solve.
My Solution for my system:
- 1st I had to buy a new firewire card with recommended chipset of audio interface vendor
- Additionally I had to use the Win7 Firewire "legacy" driver
-> Then my audio clicks and drops went away.
Month later the vendor releases a new version of his Mixer/driver for the audio interface (Saffire mix control).
And what shall I tell:
- the normal Win7 firewire driver could be chosen (which seems to be more optimized in terms of latency)
- under Cubase (with setting "optimize cubase for windows") the firewire latency went down from 200us to even 76-90us on average.
Of course Microsoft shall work on optimizing their OS, I want an optimized OS as good base for everything.
But all my problems went away in terms of recording, at least on my system, when I optimized things around Mircrosoft.
With a Laptop this might be a different issue ..
LatencyMon v3.0: CONCLUSION
Your system seems to have difficulty handling real-time audio and other tasks. You may experience drop outs, clicks or pops due to buffer underruns. One or more DPC routines belonging to a driver running in your system appear to be executing for too long. At
least one detected problem appears to be network related. You may have to disable wireless adapters to get better results.
OS version:
Windows 7 Service Pack 1, 6.1, build: 7601
CPU:
GenuineIntel Intel(R) Core(TM) i7 CPU         860 @ 2.80GHz
Logical processors:                                   8
RAM:
17170518016 total
VM:
2147352576, free: 1916923904
Reported CPU speed:                                   2807 MHz
Measured CPU speed:                                   2722 MHz
Highest measured kernel timer latency (µs):           1289.9413
Highest measured SMI routine or CPU stall (µs)        98.8614
Highest DPC routine execution time (µs):              1978.9440
Driver with highest DPC routine execution time:       ndis.sys - NDIS 6.20-Treiber, Microsoft Corporation
Highest reported total DPC routine time (%):          0.9446
Driver with highest DPC total execution time:         Wdf01000.sys - Kernelmodustreiber-Frameworklaufzeit, Microsoft Corporation
Total time spent in DPCs (%)                          1.7380
DPC count (execution time <250 µs):                   3443062
DPC count (execution time 250-500 µs):                0
DPC count (execution time 500-999 µs):                68
DPC count (execution time 1000-1999 µs):              6
DPC count (execution time 2000-3999 µs):              0
DPC count (execution time >=4000 µs):                 0

FabricPath vlan on 802.1q Trunk link

Hello Fellas.
Is it possible to carry FabricPath vlan on 802.1q Trunk link on N7k ? If I would configure one interface in Fabricpath mode, other one in Trunk. Will I be able to forward traffic between this two ports?
vlan 10
mode FabricPath
Interface x/x
switchport mode trunk
switchport trunk alloved vlan 10
Interface y/y
switchport mode Fabricpath
thanks in advance.

That would not be possible.
Think of it this way, 802.1q among other things is an encapsulation mechanism so is Fabricpath. You cannot pass frames between 2 disparate encapsulation techniques.

Configuration Help 1130AG-VoIP-Vlans-Switch Configuration

1130AG running c1130-k9w7-tar.124-3g.JA1, in autonomous mode.
VoIP - Call manager 6x, Cisco phones only,
Vlans - Open, secure data using WPA2, VoIP Vlan is using pre shared keys.
Switch Configuration - C3548xl's, C356048ps, 6509 cores
I have been looking for configuration examples to help me configure the interfaces from the 3546xl and the C356048ps switched to the 1130AG.
Configuration between the C3548xl's, C356048ps, and 6509 cores on the trunk ports for QoS.
The call Manager is on Vlan 210 and the Vlan for the wireless voice is 202.
Any suggested links would be grate, I think I have found most of it but want to be sure.
Thanks

Just to expound upon the commands that were not working, I did use the /? switch to see available commands, so for example, the mls qos trust dscp command, I entered mls qos trust /? and the only option was cos.
I globally configured the switches with:
lldp run
no lldp tlv-select power-management
mls qos
network-policy profile 50
voice vlan 50 dscp 46
All of these commands worked fine. I was going to assign the network-policy 50 on each access port along with the commands of mls qos trust dscp, auto qos voip trust too, but did not get to that step.

Verizon/Actiontec forces people to use 802.11b on GT704WGB modems

Verizon recently sent me an Actiontec GT704WGB as a replacement for my GT704WG. When I tried to turn off the mixed mode wireless support (802.11b and 802.11g), the modem wouldn't show "802.11g only" on the status screen.
I rebooted the modem remotely only to find that every custom setting except for my PPPoE login had been reset. Thinking that I had hit the "Restore Factory Settings" link by default, I changed all of the other settings back to the way they were and rebooted the modem. Again, everything was set back to factory defaults. Since the mixed mode setting was one of the last things I changed, I left it alone and changed everything else and rebooted. The settings were remembered, so it's obvious that turning off 802.11b causes the factory reset. However, there is no factory reset if you only want to turn off 801.11g. For some reason, the Actiontec modem/gateways have no way to back up the settings, even to the modem itself as with the Westell 7500, so you are foced to re-enter every custom setting, password and rule every time factory settings are restored.
I emailed tech support, but they were clueless, so either the firmware is defective and no one reported it, or they are forcing you to use 802.11b. I didn't have this problem with my GT704WG with the newest firmware, which btw isn't what's on Verizon's website and Actiontec has taken it down.
It may seem like it doesn't matter that 802.11b is broadcasting, but if you are in a 802.11g only environment, you can turn off the "Mixed Mode Protection" setting in your adapters. That way the adapters only need to perform CTS-to-self instead of RTS/CTS checks, which should improve performance.

voyager62 wrote:
Even then I'd lose the ability to manage the Actiontec wirelessly.
Really? I would not be so sure of that, if I were you.
I know that you do not have a Linksys, but as an example I point to:
http://www.dslreports.com/faq/7267
* Especailly the recommended method that they talk about.
voyager62 wrote:
The best solution is to simply fix the firmware so that 802.11b can be turned off properly.
Yes, I guess that would be nice.
If you are the original poster (OP) and your issue is solved, please remember to click the "Solution?" button so that others can more easily find it. If anyone has been helpful to you, please show your appreciation by clicking the "Kudos" button.

Error while Accessing Smart Card using Open Card Frame Work

HI
Using Open Card Frame work I am trying to access GemAlto provided Smart Card (java card). I downloaded the Open Card Frame work from http://www.openscdp.org/ocf/download.html.
I am executing a basic program to access the data stored in smart card.
public static void main(String[] args)
                    System.out.println("reading smartcard file...");
                    try {
                    SmartCard.start();
                    CardRequest cr = (FileAccessCardService.class);
                    System.out.println("calling waitforCard");
                    SmartCard sc = SmartCard.waitForCard(cr); //Error comes after this line
                    System.out.println("After waitForCard called");
                    FileAccessCardService facs = (FileAccessCardService)
                    sc.getCardService(FileAccessCardService.class, true);
                    CardFile root = new CardFile(facs);
                    CardFile file = new CardFile(root, ":c009");
                    byte[] data = facs.read(file.getPath(), 0,
                    file.getLength() );
                    sc.close();
                    String entry = new String(data);
                    entry = entry.trim();
                    System.out.println(entry);
                    } catch (Exception e) {
                         e.printStackTrace(System.err);
                    System.exit(0);
The content of the opencard.properties are :
          OpenCard.services = opencard.opt.util.PassThruCardServiceFactory
OpenCard.terminals = com.ibm.opencard.terminal.pcsc10.Pcsc10CardTerminalFactory
OpenCard.trace = opencard:5 com.ibm:4 opencard.opt.database:6
After the line SmartCard sc = SmartCard.waitForCard(cr);
the program is expecting a card to be inserted but while inserting Smartcard the following error message come :
          calling waitforCard
          [ERROR    ] com.ibm.opencard.terminal.pcsc10.OCFPCSC1.OCFPCSC1.SCardConnect
--- message
--- thread Thread[Thread-0,5,main]
--- source com.ibm.opencard.terminal.pcsc10.OCFPCSC1@2e7263
[ERROR    ] com.ibm.opencard.terminal.pcsc10.OCFPCSC1.OCFPCSC1.SCardConnect
--- message Protocol = 0
--- thread Thread[Thread-0,5,main
--- source com.ibm.opencard.terminal.pcsc10.OCFPCSC1@2e7263
Basically the error is coming from the SCardConnect function of OCFPCSC1.cpp file.
Please reply to my mail id if any body has any idea how to resolve this issue.
MAIL-ID : [email protected]
With Regards
Swarup
Finacle Archie
Infosys Technologies Limited,Bhubaneswar,India

Sounds like an issue that has to do with JavaScript Origin policy. You'll have to use Domain Relaxing for this. Read all about it here:
http://help.sap.com/saphelp_nw04/helpdata/en/59/87b54064c2742ae10000000a155106/frameset.htm
here:
http://help.sap.com/saphelp_nw04/helpdata/en/5e/473d4124b08739e10000000a1550b0/frameset.htm
and here:
http://help.sap.com/saphelp_nw04/helpdata/en/cb/f8751d8c6b254dac189f4029c76112/frameset.htm

Where is Use Google Chrome Frame for IE, 6,7,8. in Adobe Edge Animate CC 2014 ?

Hi everybody, I can't find Use Google Chrome Frame for IE, 6,7,8. in new Adobe Edge Animate CC 2014
Please help me
Thanks in advance

Sorry, but Google discontinued the Google Chrome Frame service:
https://www.google.com/chromeframe/about/
Chromium Blog: Retiring Chrome Frame
Regards,
Joe

Wont connect using 802.11N

My imac can see the name of the network but refuses to connect to it using 802.11N. Its really odd because my Apple TV has no problem connecting to the router using 802.11N

I have the exact same problem but haven't been able to figure it out. My problem is that my C2D iMac 24 (white) will see 802.11n only network, but will not attach to it. Monitoring the network attachment process on Network Utility shows a few seconds of trying, then eventually gives me a small "instruction" saying "See Administrator". That's not so helpful.
If you were having the same problem and had figured it out, I'd love to hear it.
My wireless AP has no WEP or any Mac filtering enabled.

Is it possible to use a still frame as a picture from a video you have recorded on an iphone 4?

Is it possible to use a still frame as a picture from a video you have recorded on an iphone 4?
Message was edited by: derekfromco kildare

Might need a little more information here. Are you trying to obtain screen captures? If all you're wanting to do is take stills from your videos then the answer is yes, you can but you'll have to transfer your videos from your iPhone to your computer first (unless you can find an APP on the iTunes store to help you to do it on your iPhone).
There are a few ways to do it. The first is that you can use the button on your keyboard called "Prt Scr" or "Print Screen". This takes a shot of your screen which you can then "paste" into a program like paint, or photoshop or even Word to then save as a jpeg image. When using this option a good trick is to use "Alt" + "Prt Scr" to only capture the current window rather than your entire desktop.
The other way to obtain screenshots is to download and install a program designed to do this for you. A great site to find something free to help you out is www.tucows.com. Try this link: http://www.tucows.com/search.html?search_scope=win&search_terms=screenshot&searc h_type=all
Also, some DVD programs have this function in built in them so it's a good idea to explore what's already installed on your computer.
Hope this helps!

VOIP VLAN using 802.1q frames causing massive dropped packets

Similar Messages

Maybe you are looking for