ISA550 passive Port

Similar Questions

• Trouble connecting Netgear XS748T to Ubiquiti UniFi US-48-750W via Port SFP +.

  We bought a new switch Netgear XS748T and try connecting to our existing network which consists of several switches of Ubiquiti UniFi US-48-750W, and we try to connect using the SFP + 10 GB ports on the two switches. We have a Direct Link SFP + SFP + DAC, passive, 1 m, cable AWG30, we bought at Amazon / 10Gtek and when we try to use this cable between the Ubiquiti switch and the Netgear we get no link activity.

  However if we use the same cable between two of Ubiquiti switches it lights immediately and works very well, the same is true if we use the same SFP + cable between the switch Netgear XS748T and a XS728T that we must also. Its almost as if the switches detect the same manufacturer at the other end and right link up but when its manufacturer another pass on the other end, it does nothing.

  It is very aggravating, and Im going to be obliged to return the new Netgear switches. Can someone make a suggestion or confirm if they should or may not work? Everything simply connecting switches together using a cable of copper works very well but since our current switches don't support 1 GB via copper it provides not enough bandwidth for our use so we really need the port SFP + 10 GB to give us the uplink.

  Here is a link to the modules SFP + cable, we bought:

  https://www.Amazon.com/DP/B01LSGGUOY/ref=twister_B01M0ER4M0?_encoding=UTF8&PSC=1

  It seems that I solved the problem myself. I bought a set of:
  10Gtek for Cisco SFP - 10 G - LR, 10 Gb/s Transceiver SFP + module 1310nm 10km

  And the LR version worked instantly. I honestly don't know what's the difference between a SFP + SR module and a module LR SFP +, but for some reason any LR module has allowed these two switches to connect.

  Here are links to the modules and the cable used in case anyone needs a solution to this:

  LR SFP + Module:
  https://www.Amazon.com/GP/product/B00UMS905G/ref=oh_aui_detailpage_o00_s00?ie=UTF8&PSC=1

  Fiber cable:
  https://www.Amazon.com/GP/product/B00T5796DQ/ref=oh_aui_detailpage_o00_s00?ie=UTF8&PSC=1

• HP 6005: what is port with "" + p ""

  There is a 'port' on the back of the computer that looks like a HDMI connector, but it has two signs (one above the other) and the letter P to the right of them. I tried to plug in an HDMI cable, but it does not quite match. Please help me understand what it is. I need a HDMI connection, so it is this, I'll have to try to put one in.

  Hello

  It refers to a video output, display port.

  A display to HDMI adapter active Port might work work. Passive cards are also available.

  Review of this thread.  If you want audio you can move in a problem area.

  Find out what the return policy is before you buy.

• LasetJet M4555 MFP: 221 ftp port and how to disable

  We have a HP M4555 MFP printer that accepts ftp connections on port 221 anoymous and I can't figure out how to make it stop.  This raises red flags with our network security scanner, so would like to know how I can disable this feature.  We have all other than 9100 off printing protocols (including FTP printing), but this one printer always listens to the port 221.  Interestingly, we have 2 printers of the same model and only 1 done this and, as far as I know, they have identical configs.  However, whoever's doing this has rev firmware 3.7, and the one that is not is still the 3.5.1 then perhaps that it is a feature added to the new rev?

  I can't say how much of a security problem is real, but it makes me very nervous that I can get in places like/Customer/Jobs/StoredJobs without any authentication at all.

  Anyone have any ideas?

  Thank you!

  PS. Here is a demonstration of what I see:

  Ftp $221 _HOSTNAME_
  Connected to _HOSTNAME_.
  220 service ready for new user.
  500 syntax error, command unrecognized.
  Name (_HOSTNAME_:root): anonymous
  331 Anonymous access allowed, send identity (e-mail name) as password.
  Password:
  230 user logged in, proceed.
  Remote system type is Windows_CE.
  FTP > dir
  227 entry Passive Mode (10,56,43,70,78,232).
  125 data connection already open; transfer from.
  01/01/98-05:00

  network
  01/01/98-05:00 PRE-LAUNCH
  01/01/98-05:00 CEKERNEL
  01/01/98-05:00 core
  01/01/98-05:00 MachineData
  01/01/98-05:00 customer
  01/01/98-05:00 extensible
  01/01/98-05:00 DataModel1
  01/01/98-05:00 DataModel2
  01/01/98-05:00 CtbData
  01/01/98-05:00 interrupt
  03/05/16 00:53 23 JediCE.src.revision.txt
  03/05/16 00:53 JediAdds
  03/05/16 00:53 23 Control Panel.lnk
  03/05/16 00:53 My Documents
  03/05/16 00:53 program Files
  03/05/16 00:53 documents and Settings
  03/05/16 00:53 Temp
  03/05/16 00:53 Windows
  226 closing data connection.
  FTP >

  You can disable the port 221 using IPsec/firewall option tab 'network '.

  Steps to follow:

  Access IPsec/firewall. Set the default rule to "allow". Start creating a rule. Choose all the "IP address" for the policy address. In the event of service strategy page, choose Create a new service. Then create a personalized service.

  For personal service, give a name like "port221". Select TCP. Choose ' printer/multifunction Service '. Choose a specific local port. Enter the port 221. Choose "Any" to remote port. A new service is created. Select it and click OK. You return to the page of service strategy. Click on the newly created service 'port221 '. Click "next". Choose the action "Drop." Click "next". Enable the IPsec/Firewall policy. When she returned to the home page, IPsec rules were created and activated.

  Thank you.

  I am an employee of HP support of HP Experts who volunteer their time and expertise to help others. The views expressed are my own and do not necessarily reflect the opinions of HP.

  If this helped sloved question please click on the star to Kudos

• Question of the 6248P fiber port legacy.

  Hello

  I inherited two switches 6248P outgoing Manager (I arrived after his departure) and would like to know if the switch can add a port for a 10GBASE-SR fiber connection.  One of the switches is in place and in the course of execution attached to a 3COM older who manages currently one end of the fiber and the second unit was still in the box but has a Module SFP + 10GE (2-port) plugged into the back of it.

  Is - this module fiber or cable? Is it possible to get the fiber for this device? And what role do we need?

  Any help is appreciated.

  Page 11 of this document shows different switches 62xx expansion modules.

  i.dell.com/.../Expansion-Modules-for-Dell-PowerConnect-Switches-January2012.pdf

  Page 59 of the user guide also talks expansion modules.

  FTP.Dell.com/.../PowerConnect-6248p_User%27s%20Guide_en-US.pdf

  It looks like the module you have.

  accessories.dell.com/.../PopupProductDetail.aspx

  It provides 2 SFP + ports capable of supporting optical transceivers 10 G-BaseSR, BaseLR - 10 G and 10 G - BaseLRM. In addition, it also supports Active and Passive Direct Attach Copper cables SCXI.

  I hope this information helps.

  Thank you

• Issues of access to the port noticed when using wireshark

  1. I noticed CDP on wearing my workstation, I could see how this could be useful in using a sniffer to find out which port on a switch, you are connected to. I discovered running on this port without activating cdp avoid advertisements of cdp on port. Most of you turned it off or they leave?  If so is it a company policy to do?

  2. the next strange package race was spanning tree (BPDU?) packets, I saw.  I thought that this is coelio why would you see protocols spanning tree on an access port?  I used the command spanning tree bpudguard suggests that would prevent me from receiving bpdus on an access port.  This did not work, what order you we just to not receive bpdu?

  3. the last one is the one that I find it extremely odd that I receive eigrp Hello of my main switch this switch of access level. The eigrp should just broadcast to other switches running eigrp?

  Hello

  1, it depends. If you have Cisco phones, you have cdp enabled on the interfaces. If you don't use phones, you can disable cdp on the interfaces.

  2, Spanning-tree is a loop prevention mechanism. you want to use the tree covering all the interfaces where a loop can occur. You can introduce loops on the access port if you connect a switch on that port. A switch will always send packets bpdus on access ports unless you specifically configure the switch does not to do this. Spanning tree bpduguard is used to protect a port of bpdu packets. If a bpdu is received on a port with bpdu guard enabled, the port closes because it is an invalid configuration. BPDU guard does not filter packets bpdus on a port. If you want to filter packets bpdu on an interface, you use spanning tree bpdufilter. spanning tree bpdufilter stop bpdu packets sent on an interface.

  3, Hello Eigrp packet are sent on all interfaces enabled for eigrp. To prevent the eigrp packets out all interfaces running eigrp, use the passive-interface command in eigrp configuration.

  Thank you

  John

• ASR 9001 built in ports can support the Twinax cables?

  Hello

  Can of ASR9001 built in ports support 10Gig using Twinax connection cables:

  SFP-H10GB-CU3M, 5 M, 7 M and 10 M?

  Thank you!

  -Mazzy

  We support only the active cable not the cables (passive) CU ACU.

  Support came in 5.1.1

  Thank you

  Sam

• With an ASA 5520 port forwarding

  Hi all

  I recently bought a Cisco ASA 5520 on eBay for study and I decided to only use it as a firewall between my home LAN and Internet. Wow, what a learning curve! I managed to add my internal networks as objects and create a rule (thanks to youtube) NAT to PAT my internal devices out of the Internet with ASSISTANT Deputy Ministers, but I am really struggling to do the following:-

  -allow all incoming traffic that hits the outside interface for port 38921 and nat at 10.1.10.101:38921

  -allow all incoming traffic that hits the outside interface for port 30392 and nat at 10.1.10.101:30392

  Can someone guide me on how to do it, because I have a couple of services that run behind these ports on a server I want to get when I'm not at home? My (rather messy) config is as follows:-

  hostname FW1

  activate the encrypted password

  encrypted passwd

  names of

  !

  interface GigabitEthernet0/0

  Description * externally facing Internet *.

  nameif outside

  security-level 0

  IP address dhcp setroute

  !

  interface GigabitEthernet0/1

  Description * internal face to 3750 *.

  nameif inside

  security-level 100

  IP 10.1.10.2 255.255.255.0

  !

  interface GigabitEthernet0/2

  Shutdown

  No nameif

  no level of security

  no ip address

  !

  interface GigabitEthernet0/3

  Shutdown

  No nameif

  no level of security

  no ip address

  !

  interface Management0/0

  nameif management

  security-level 100

  IP 192.168.1.1 255.255.255.0

  !

  passive FTP mode

  the VLAN1 object network

  subnet 192.168.1.0 255.255.255.0

  Legacy description

  network of the WiredLAN object

  10.1.10.0 subnet 255.255.255.0

  Wired LAN description

  network of the CorporateWifi object

  10.1.160.0 subnet 255.255.255.0

  Company Description 160 of VLAN wireless

  network of the GuestWifi object

  10.1.165.0 subnet 255.255.255.0

  Description Wireless VLAN 165 comments

  network of the LegacyLAN object

  subnet 192.168.1.0 255.255.255.0

  Description Legacy LAN in place until the change on

  the file server object network

  Home 10.1.10.101

  Description File Server

  service object Service1

  tcp source eq eq 38921 38921 destination service

  1 service Description

  the All_Inside_Networks object-group network

  network-object VLAN1

  network-object, object WiredLAN

  network-object, object CorporateWifi

  network-object, object GuestWifi

  network-object, object LegacyLAN

  object-group service Service2 tcp - udp

  port-object eq 30392

  object-group service DM_INLINE_TCPUDP_1 tcp - udp

  port-object eq 30392

  Group-object Service2

  object-group Protocol TCPUDP

  object-protocol udp

  object-tcp protocol

  Outside_access_in list extended access allowed object-group TCPUDP any inactive FileServer object-group DM_INLINE_TCPUDP_1 object

  Outside_access_in list extended access allowed object Service1 any inactive FileServer object

  pager lines 24

  Enable logging

  asdm of logging of information

  Outside 1500 MTU

  MTU 1500 internal

  management of MTU 1500

  no failover

  ICMP unreachable rate-limit 1 burst-size 1

  ASDM image disk0: / asdm - 714.bin

  don't allow no asdm history

  ARP timeout 14400

  service interface NAT (inside, outside) dynamic source FileServer Service1 inactive Service1

  NAT (all, outside) interface dynamic source All_Inside_Networks

  Access-group Outside_access_in in interface outside

  Internal route 10.1.160.0 255.255.255.0 10.1.10.1 1

  Internal route 10.1.165.0 255.255.255.0 10.1.10.1 1

  Internal route 192.168.1.0 255.255.255.0 10.1.10.1 1

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00

  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00

  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

  timeout tcp-proxy-reassembly 0:01:00

  Floating conn timeout 0:00:00

  dynamic-access-policy-registration DfltAccessPolicy

  identity of the user by default-domain LOCAL

  Enable http server

  http 10.1.160.15 255.255.255.255 internal

  No snmp server location

  No snmp Server contact

  Server enable SNMP traps snmp authentication linkup, linkdown warmstart of cold start

  Telnet 10.1.160.15 255.255.255.255 internal

  Telnet timeout 5

  SSH timeout 5

  Console timeout 0

  interface ID client DHCP-client to the outside

  management of 192.168.1.2 - dhcpd address 192.168.1.254

  enable dhcpd management

  !

  a basic threat threat detection

  Statistics-list of access threat detection

  no statistical threat detection tcp-interception

  WebVPN

  username privilege of encrypted password of Barry 15

  !

  class-map inspection_default

  match default-inspection-traffic

  !

  !

  type of policy-card inspect dns preset_dns_map

  parameters

  maximum message length automatic of customer

  message-length maximum 512

  Policy-map global_policy

  class inspection_default

  inspect the preset_dns_map dns

  inspect the ftp

  inspect h323 h225

  inspect the h323 ras

  inspect the rsh

  inspect the rtsp

  inspect esmtp

  inspect sqlnet

  inspect the skinny

  inspect sunrpc

  inspect xdmcp

  inspect the sip

  inspect the netbios

  inspect the tftp

  Review the ip options

  !

  global service-policy global_policy

  context of prompt hostname

  no remote anonymous reporting call

  Cryptochecksum:19be38edefe8c3fd05e720aedee62c8e

  : end

  1. This is just one example of configuration and another option with to reason and avoid to send us the complete configuration of NAT:

  network of the 10.1.10.101 object

  Home 10.1.10.101

  service object 38921

  tcp source eq 38921 service

  service object 30392

  tcp source eq 30392 service

  NAT (inside, outside) 1 static source 10.1.10.101 38921 38921 service interface

  NAT (inside, outside) 1 static source 10.1.10.101 30392 30392 service interface

  Let me know if it works

• Port Channerl - LACP Mode

  Hello, I defined an Interface Port - channel in LACP mode, in a switch Catalyst 3850:

  !
  Interface Port-Channel 4
  switchport mode access
  end

  To this port-channel interface, I associate two interfaces:

  !
  interface GigabitEthernet1/0/4
  Description - PC03-ADM -.
  switchport mode access
  channel-group mode 4 passive
  end

  YN-NW-GB06-170 #sh run int g2/0/4
  Building configuration...

  Current configuration: 120 bytes
  !
  interface GigabitEthernet2/0/4
  Description - PC03-ADM -.
  switchport mode access
  channel-group mode 4 passive
  end

  When I check the status of the interfaces, I see:

  YN-NW-GB06-170 #sh etherchannel 4 Synt.
  Flags: - Low P - D bundled in port-channel
  I have - autonomous s - suspended
  H Eve (LACP only)
  R - Layer 3 S - Layer2
  U - running f - cannot allocate an aggregator

  M - don't use, minimum contacts not satisfied
  u - unfit to tied selling
  w waiting to be aggregated
  d default port

  Number of channels in use: 4
  Number of aggregators: 4

  Protocol for the Port-Channel port group
  ------+-------------+-----------+-----------------------------------------------
  Po4 (SU) 4, Gi1/0/4 (P) LACP Gi2/0/4 (s)

  YN-NW-GB06-170 #sh int g1/0/4
  GigabitEthernet1/0/4 is up, line protocol is up (connected)
  Equipment is Gigabit Ethernet, the address is f078.16c4.fb04 (bia f078.16c4.fb04)
  Description: - PC03-ADM -.
  MTU 1500 bytes, BW 1000000 Kbit/s, 10 DLY usec,
  reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  KeepAlive set (10 sec)
  Full duplex, 1000 Mbps, media type is 10/100/1000BaseTX
  input stream control is turned off, output flow control is not supported
  Type of the ARP: ARPA, ARP Timeout 04:00
  Last entry from 00:00:12, exit ever, blocking of output never
  Final cleaning of "show interface" counters never
  Input queue: 0/2000/0/0 (size/max/drops/dumps); Total output drops: 0
  Strategy of queues: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 0 bps, 0 packets/s
  5 minute output rate 578000 bps, 489 packets/s
  6345 packets input, 808991 bytes, 0 no buffer
  Received 3591 broadcasts (241 multicasts)
  0 Runts, 0 giants, 0 shifters
  entry 0, 0 CRC errors, frame 0, saturation 0, 0 ignored
  Watchdog 0, 241 multicast, break 0 comments
  entry packets 0 with condition of dribble detected
  1674339 packets output, 183387434 bytes, 0 underruns
  0 output errors, 0 collisions, 3 interface resets
  unknown protocol 0 drops
  0 babbles, collision end 0, 0 deferred
  carrier, 0 no carrier, lost 0 0 interrupt output
  output buffer, the output buffers 0 permuted 0 failures
  YN-NW-GB06-170 #sh int g2/0/4
  GigabitEthernet2/0/4 is up, line protocol is down (suspended)
  Equipment is Gigabit Ethernet, the address is f0b2.e591.d284 (bia f0b2.e591.d284)
  Description: - PC03-ADM -.
  MTU 1500 bytes, BW 1000000 Kbit/s, 10 DLY usec,
  reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  KeepAlive set (10 sec)
  Full duplex, 1000 Mbps, media type is 10/100/1000BaseTX
  input stream control is turned off, output flow control is not supported
  Type of the ARP: ARPA, ARP Timeout 04:00
  Last entry, never, never hang output
  Final cleaning of "show interface" counters never
  Input queue: 0/2000/0/0 (size/max/drops/dumps); Total output drops: 0
  Strategy of queues: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 0 bps, 0 packets/s
  5 minute output rate 0 bps, 0 packets/s
  0 packets input, 0 bytes, 0 no buffer
  Received 0 emissions (0 multicasts)
  0 Runts, 0 giants, 0 shifters
  entry 0, 0 CRC errors, frame 0, saturation 0, 0 ignored
  Watchdog 0, multicast 0, break 0 comments
  entry packets 0 with condition of dribble detected
  138082 packets output, 26616915 bytes, 0 underruns
  0 output errors, 0 collisions, 3 interface resets
  unknown protocol 0 drops
  0 babbles, collision end 0, 0 deferred
  carrier, 0 no carrier, lost 0 0 interrupt output
  output buffer, the output buffers 0 permuted 0 failures
  # YN-NW-GB06-170

  I ask, this is the normal behavior of interfaces in this mode, or I made mistake.

  Please your help in this matter.

  Kind regards.

  Fernando.

  Read this article:

  http://anotheritblog.NET/2014/08/19/Windows-Server-2012-LACP-NIC-teaming-on-Cisco-Catalyst/

  I think that once you change the mode on the Cisco end will be correct.

• PORT-CHANNEL PROBLEM

  I have configured ports-2ch (in18 PO19) linking (CAT6) and 8 interfaces of HP Blade to Catalyst 6509. When configuring noted that the catalyst 6500 created "subinterfaces' as shown below:

  SWCRJ-CORE #show etherchannel summary
  Charge for five seconds: 3% / 10%. a minute: 5%; five minutes: 5%
  Time source is NTP, 14:35:31.640 BRV Tuesday, December 21, 2010

  Flags: - Low P - D bundled in port-channel
  I have - autonomous s - suspended
  H Eve (LACP only)
  R - Layer 3 S - Layer2
  U - N running - is not in service, no aggregation
  f cannot allocate an aggregator

  M not in use, no aggregation due to minimum links has not met
  m don't use, port do not associate due to not meeting minimum links
  u - unfit to tied selling
  d default port

  w waiting to be aggregated
  Number of channels: 33
  Number of aggregators: 39

  Protocol for the Port-Channel port group
  ------+-------------+-----------+-----------------------------------------------
  1 Po1 (SD)-
  2 Po2 (SU) - Gi1/3/14 (P) Gi2/3/14 (D)
  3 Po3 (SU) - Te1/1/1 (P) Te2/1/1 (P)
  4 (SU) Po4 - Te1/1/2 (P) Te2/1/2 (P) Te2/2/3 (D)
  Po5 (SU) 5 - Gi1/3/9 (P) Gi2/3/9 (P)
  Po6 (SU) 6 - Gi1/3/7 (P) Gi2/3/7 (P)
  7 in7 (SU) - Gi1/3/5 (P) Gi2/3/5 (P)
  8 in8 (SU) - Gi1/3/10 (P) Gi2/3/10 (P)
  9 Po9 (SU) - Te1/1/3 (P) Te2/1/3 (P)
  10 Po10 (SU) - Te1/1/4 (P) Te2/1/4 (P) Te2/2/4 (D)
  11 Po11 (SU) - Gi1/3/8 (P) Gi2/3/8 (P)
  12 in12 (SU) - Gi1/3/6 (P) Gi2/3/6 (P)
  13 Po13 (SU) - Gi1/3/11 (P) Gi2/3/11 (P)
  14 Po14 (SU) - Gi1/3/12 (P) Gi2/3/12 (P)
  15 in15 (SU) - Gi1/3/13 (P) Gi2/3/13 (P)
  Po16 (SD) - 16
  Po17 (SD) - 17
  18 in18 (SU) LACP Gi1/9/25 (P)
  18 Po18C (SU) LACP Gi1/9/28 (P)
  18 Po18A (SU) LACP Gi1/9/26 (P)
  18 Po18B (SU) LACP Gi1/9/27 (P)
  Po19 (SU) 19 LACP Te1/1/8 (D) Te2/1/8 (D) Gi2/9/25 (P)
  Po19B (SU) 19 LACP Gi2/9/27 (P)
  Po19C (SU) 19 LACP Gi2/9/28 (P)
  Po19D (SU) 19 LACP Gi2/9/26 (P)
  20 Po20 (SU) - Gi1/3/15 (P) Gi2/3/15 (P)
  50 Po50 (SU) - Te1-2-1 (P) Te1/2/2 (P)
  51 Po51 (SU) - Te2/2/1 (P) Te2/2/2 (P)
  52 Po52 (SU) - Gi1/9/11 (P) Gi2/9/11 (P)
  53 Po53 (SU) - Gi1/9/12 (P) Gi2/9/12 (P)
  54 Po54 (SU) - Gi1/9/13 (P) Gi2/9/13 (P)
  55 in55 (SU) - Gi1/9/14 (P) Gi2/9/14 (P)
  In60 (SU) 60 LACP Gi1/7/31 (P) Gi1/7/33 (P) Gi1/7/34 (P)
  Gi1/7/35 (P)
  Po61 (SU) 61 LACP Gi2/7/31 (P) Gi2/7/32 (P) Gi2/7/33 (P)
  Gi2/7/34 (P)
  62 Po62 (SU) - Gi1/3/16 (P) Gi2/3/16 (P)
  63 Po63 (SU) - Gi1/3/17 (P) Gi2/3/17 (P)
  64 in64 (SU) - Gi1/3/18 (P) Gi2/3/18 (P)
  100 Po100 (RU) - Te1/5/4 (P) Te1/5/5 (P)
  101 Po101 (RU) - Te2/5/4 (P) Te2/5/5 (P)

  I tried a lot of combination but no joy. Currently, it is the configuration of interfaces:

  Interface Port-channel18
  Description blade 3 Modulo1
  switchport
  switchport access vlan 666
  switchport trunk encapsulation dot1q
  switchport trunk vlan native 987
  switchport trunk allowed vlan 505,506,1100-1109,1170
  switchport mode trunk
  switchport nonegotiate
  events-the link status logging
  MLS qos trust cos
  end
  ==============

  interface GigabitEthernet1/9/25
  Description blade 3 Modulo 1 Porta 21
  switchport
  switchport access vlan 666
  switchport trunk encapsulation dot1q
  switchport trunk vlan native 987
  switchport trunk allowed vlan 505,506,1100-1109,1170
  switchport mode trunk
  switchport nonegotiate
  events-the link status logging
  MLS qos trust cos
  passive mode of channel-group 18< already="" tried="">

  spanning tree portfast edge

  ====================

  Interface Port-channel19
  Description blade 3 Modulo2
  switchport
  switchport access vlan 666
  switchport trunk encapsulation dot1q
  switchport trunk vlan native 987
  switchport trunk allowed vlan 505,506,1100-1109,1170
  switchport mode trunk
  switchport nonegotiate
  events-the link status logging
  MLS qos trust cos
  end
  ========================

  Description blade 3 Modulo 2 Porta 21
  switchport
  switchport access vlan 666
  switchport trunk encapsulation dot1q
  switchport trunk vlan native 987
  switchport trunk allowed vlan 505,506,1100-1109,1170
  switchport mode trunk
  switchport nonegotiate
  events-the link status logging
  MLS qos trust cos
  passive mode of channel-group 19< already="" tried="">
  spanning tree portfast edge

  The blade only configured LACP and priority 100 on all interfaces.

  No one knows no measures to remedy this situation?

  Kind regards

  Raphael

  Hello Raphael,.

  When using LACP and you see a port-channelA, B, C, etc., those are called secondary aggregators and this means that LACP is enabled on the remote port, but something is causing it is impossible to combine with the main channel.  This is usually caused by receiving ID system is different from the other side by having the interface cable between multiple devices.

  First thing I would do, is to ensure that all wiring is correct and that all the ports in in18 and po19 go just a switch for each port-channel.

  -Matt

• Remove the port from the channel-group

  I met a strange problem with port aggregation, where I decided to remove a port of a port channel and put it in another, but in my SNMP tool, it still belongs to the old channel of port and the new at the same time.

  Port channel was created using:

  (config) #interface gigabitEthernet 0/1/22

  (config-if) trunk mode #switchport

  (config-if) active in mode #channel-group 1

  Then passes through

  (config) #interface gigabitEthernet 0/1/22

  (config-if) #no active mode channel-group 1
  (config-if) active in mode #channel-group 2

  I have also that when I pull up some information on configuring etherchannel.

  #show interfaces gigabitEthernet 0/1/22 etherchannel

  Port status Up Mstr Assoc in Bndl

  Group of channels = 2 Mode = active = Gcchange-

  Port channel = GC Po2 = - port-channel Pseudo = Po2

  Port index = 0 load = 0 x 00 Protocol = LACP

  Flags: S - device sends slow LACPDUs F - device sends Rapids LACPDUs.

  A - unit is in Active mode.        P - peripheral is in passive mode.

  Local information:

  LACP Admin Oper Port Port port

  Port flags State priority key number

  Item in gi1/0/22 SFT bndl 32768 0 x 2 0 x 2 0 x 117 0x3D

  Partner information:

  LACP Admin Oper Port Port port

  Key priority indicators Dev ID Age port key number status

  Item in gi1/0/22 SFT 32768 0817.35e4.2c80 26 s 0x0 0 x 2 0 x 118 0x3D

  Age of the port in the current state: 164d: 21 h: 32 m: 44s

  This could be a problem with my (observium) snmp tool or are there additional measures to eliminate a port of a group of channels? Reboot of the switch?

  System image file is "flash: c2960s-universalk9 - mz.150 - 2.SE4.bin.

  Hello

  I would say that it is related to the snmp tool, once you remove the port of the chain earlier and added to the new, which will be to the one, it is impossible that an interface will be less than 2 different port channels.

  Also there is no need to restart the switch or something like that, you can use the following commands to verify that the interface is now part of the new channel group:

  Show etherchannel summary

  Show interface execution item in gi1/0/22

  With these commands, you will see that the interface belongs to the Group channel 2, and the order that you set above shows that the interface belongs to po2.

  Hope this helps

• PowerEdge R210 eSata, multiplier support Port?

  Does anyone know if the R210, first step the R210 II, supports the port multiplier eSata port?  Or one of its Sata ports?

  I can't find any mention of the eSATA connection in the manuals or the online form, and nobody seems to know what it supports.

  I have a JBOD with multiplier eSata port that I would use to expand on a four additional drives off the eSata port.  Unfortunately I can't install an eSata to the host card, because the single PCIe location is already in use running a Perc 6/e for a MD1000.

  Thank you!

  CrazyHamSales,

  It seems that the R210 does support port multipliers, as seen on the two bars below.

  Bus Name	Raw bandwidth (Mbit/s)	Transfer speed (MB/s)	Length (m) cable maximum	Power supplied	Devices per channel
  eSATA	3 000	300	2 with eSATA HBA (1 with passive adapter)	NO.	1 (15 with port multiplier)
  SATA 300	3 000	300	1	NO.	1 (15 with port multiplier)

  Hope that clarifies the issue, as well as provides the specifications you are looking for.

• Remove the ' system VLAN "Nexus 1000V port-profile

  We have a Dell M1000e blade chassis with a number of Server Blade M605 ESXi 5.0 using the Nexus 1000V for networking.  We use 10 G Ethernet fabric B and C, for a total of 4 10 cards per server.  We do not use the NIC 1 G on A fabric.  We currently use a NIC of B and C fabrics for the traffic of the virtual machine and the other card NETWORK in each fabric for traffic management/vMotion/iSCSI VM.  We currently use iSCSI EqualLogic PS6010 arrays and have two configuration of port-groups with iSCSI connections (a physical NIC vmnic3 and a vmnic5 of NIC physical).

  We have added a unified EMC VNX 5300 table at our facility and we have configured three VLANs extra on our network - two for iSCSI and other for NFS configuration.  We've added added vEthernet port-profiles for the VLAN of new three, but when we added the new vmk # ports on some of the ESXi servers, they couldn't ping anything.   We got a deal of TAC with Cisco and it was determined that only a single port group with iSCSI connections can be bound to a physical uplink both.

  We decided that we would temporarily add the VLAN again to the list of VLANS allowed on the ports of trunk of physical switch currently only used for the traffic of the VM. We need to delete the new VLAN port ethernet-profile current but facing a problem.

  The Nexus 1000V current profile port that must be changed is:

  The DenverMgmtSanUplinks type ethernet port profile

  VMware-port group

  switchport mode trunk

  switchport trunk allowed vlan 2308-2306, 2311-2315

  passive auto channel-group mode

  no downtime

  System vlan 2308-2306, 2311-2315

  MGMT RISING SAN description

  enabled state

  We must remove the list ' system vlan "vlan 2313-2315 in order to remove them from the list" trunk switchport allowed vlan.

  However, when we try to do, we get an error about the port-profile is currently in use:

  vsm21a # conf t

  Enter configuration commands, one per line.  End with CNTL/Z.

  vsm21a (config) #-port ethernet type DenverMgmtSanUplinks profile

  vsm21a(config-port-Prof) # system vlan 2308-2306, 2311-2312

  ERROR: Cannot delete system VLAN, port-profile in use by Po2 interface

  We have 6 ESXi servers connected to this Nexus 1000V.  Originally they were MEC 3-8 but apparently when we made an update of the firmware, they had re - VEM 9-14 and the old 6 VEM and associates of the Channel ports, are orphans.

  By example, if we look at the port-channel 2 more in detail, we see orphans 3 VEM-related sound and it has no ports associated with it:

  Sho vsm21a(config-port-Prof) # run int port-channel 2

  ! Command: show running-config interface port-canal2

  ! Time: Thu Apr 26 18:59:06 2013

  version 4.2 (1) SV2 (1.1)

  interface port-canal2

  inherit port-profile DenverMgmtSanUplinks

  MEC 3

  vsm21a(config-port-Prof) # sho int port-channel 2

  port-canal2 is stopped (no operational member)

  Material: Port Channel, address: 0000.0000.0000 (bia 0000.0000.0000)

  MTU 1500 bytes, BW 100000 Kbit, DLY 10 usec,

  reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA

  Port mode is trunk

  Auto-duplex, 10 Gb/s

  Lighthouse is off

  Input stream control is turned off, output flow control is disabled

  Switchport monitor is off

  Members in this channel: Eth3/4, Eth3/6

  Final cleaning of "show interface" counters never

  102 interface resets

  We can probably remove the port-channel 2, but assumed that the error message on the port-profile in use is cascading on the other channel ports.  We can delete the other port-channel 4,6,8,10 orphans and 12 as they are associated with the orphan VEM, but we expect wil then also get errors on the channels of port 13,15,17,19,21 and 23 who are associated with the MEC assets.

  We are looking to see if there is an easy way to fix this on the MSM, or if we need to break one of the rising physical on each server, connect to a vSS or vDS and migrate all off us so the Nexus 1000V vmkernel ports can clean number VLAN.

  You will not be able to remove the VLAN from the system until nothing by using this port-profile. We are very protective of any vlan that is designated on the system command line vlan.

  You must clean the canals of old port and the old MEC. You can safely do 'no port-channel int' and "no vem" on devices which are no longer used.

  What you can do is to create a new port to link rising profile with the settings you want. Then invert the interfaces in the new port-profile. It is generally easier to create a new one then to attempt to clean and the old port-profile with control panel vlan.

  I would like to make the following steps.

  Create a new port-profile with the settings you want to

  Put the host in if possible maintenance mode

  Pick a network of former N1Kv eth port-profile card

  Add the network adapter in the new N1Kv eth port-profile

  Pull on the second NIC on the old port-profile of eth

  Add the second network card in the new port-profile

  You will get some duplicated packages, error messages, but it should work.

  The other option is to remove the N1Kv host and add it by using the new profile port eth.

  Another option is to leave it. Unless it's really bother you no VMs will be able to use these ports-profile unless you create a port veth profile on this VLAN.

  Louis

• What is a virtual port storage system

  VMware now supported the harbour active/active, active/passive, and virtual storage system. What is virtual port storage system, you can give me same example?

  in san guide old version, I can see the storage mode, indicate it is active/active or active/passive, find the last guide of san, not to mention that the online guide compat?

  A link to ' [storage virtual port | ]. "[http://virtualgeek.typepad.com/virtual_geek/2009/04/are-you-Stuck-with-a-single-Really-Busy-Array-port-When-using-ESX-script-for-Balancing-Multipathing-in-ESX-3x.html].

• FTP connection refused with FTP client to open the port in the firewall ESX

  Hello.

  I just installed an esx 3.5 U4.    We have an FTP server where we all night to make a copy of all our VM.

  This ESX may not put the files in the FTP server... I open the FTP client port on the 'profile terms' - & gt; Firewall tab without problems and

  I can connect with the FTP server... but... I can't do a LS for example, can I change to a different folder, I try with passive mode works... but

  It does not work.

  FTP server works well because other ESX work with her, and I do my windows XP with the same user/pass login and it works...

  Any idea?

  Thank you very much

  # ftp 192.168.18.15

  Connected to 192.168.18.15 (192.168.18.15).

  Welcome to 220 xxxxxxxx

  Name (192.168.18.15:morado): vmbk

  331 please specify the password.

  Password:

  230 login successful.

  Remote system type is UNIX.

  Using the binary mode to transfer files.

  FTP & gt; Backup CD

  250 changed Directory successfully.

  FTP & gt; LS

  227 entry Passive Mode (192,168,18,15,72,91)

  FTP: connect: connection refused

  FTP & gt;

  Looks like the second TCP connection for file transfer (which is also used in the list of directories) from the client FTP on the server fell. Have you tried completely disabling the firewall with esxcfg-firewall - allowOutgoing (can try esxcfg-firewall - allowIncoming, although it should not be necessary in the passive FTP mode)? This command sets the iptables chains of ENTRY and EXIT to accept instead of the fall.

  I tried esxcfg-firewall - e ftpClient and it worked fine for me.

  You could also post your esxcfg-firewall OUTPUT string parameters - q.