UNI-DIRECTIONAL normal/aggressive with several neighbors

Hello

We lack 4 c4500 switches to 2 sites linked together through the layer 2 cryptographic boxes and VPLS in a point-to-multipoint configuration which is completely transparent (it's more or less like connecting them via a Hub - each switch sees the other 3 as neighbours).

Our basic configs have Uni-directional globally active in aggressive mode.

I wanted to only disable interfaces (routed ports) to crypto boxes, because I don't want their ErrDisabled for 5 minutes if there is connectivity problems in the VPLS-cloud (each switch also had 3 UNI-DIRECTIONAL due to the P2MP configuration neighbors).

Mode config-if I could do it simply with 'disable the port Uni-Directional', but I thougt it would be better (not aggressive) normal mode execution for the chance to use UNI-DIRECTIONAL-show commands. So, I have configured 'Uni-directional port' for the affected interfaces.

interface GigabitEthernet1/2

Uni-directional port

!

Parts of the show command:

! P2MP port to crypto-box

Interface item in gi1/2

Port enable the administrative configuration setting: enabled

Port enable operational state: enabled

(...)

! standard port with the default configuration

Gi2/1 interface

Port enable the setting of administrative configuration: default of the unit follows

Port enable operational state: active / aggressive mode

(...)

I was very surprised to discover that a single interface will still in State of ErrDisable after discovering an error UNI-DIRECTIONAL:

% UNI-DIRECTIONAL-4-UDLD_PORT_DISABLED: UNI-DIRECTIONAL disabled interface item in gi1/2, detected one-way binding

% Of PM-4-ERR_DISABLE: Uni-directional error detected on item in gi1/2, by putting the gi1/2 item in condition of err - disable

Now, I'm stumped: have I misunderstood the difference between normal and aggressive mode? Or something wrong with my setup?

IOS version: 12.2 (54) SG

Thank you

Rolf

What I don't understand is why it ends up in errdisable state when it's configured in normal mode.

You have configured UNI-DIRECTIONAL on BOTH sides right?

If the answer is Yes, then I recommend that you enable the record link "enable connection logging" on the interface to determine if you have a potential problem with this link.

Furthermore, this link is the fiber optic, no?

If this is not the case, UNI-DIRECTIONAL is good if you have fiber.  I would recommend not UNI-DIRECTIONAL on a link of copper.

Tags: Cisco Network

Similar Questions

  • ASA EzVPN with several remote subnets

    Hello world

    I'll have the challenge of EasyVPN installation based on ASA 5520, and ASA 5505 (with the ASA5505 as the vpnclient) with several networks behind the ASA 5505.

    Access by the network directly connected on the 5505 to the central site works very well.

    But the second network segment (which is behind a router on the directly connected network) cannot connect to the central site.

    I guess I need to specify that some sort of acl's to be able to do that.

    BTW we do not use tunneling split, because all traffic moves through the tunnel (no local internet access).

    The layout looks like this

    (--LAN--)-5520---5505-(--LAN1--)-ROUTER-(--LAN2--)-(WAN)-

    LAN1 and LAN connection works great through the EZVPN Tunnel.

    LAN2 connection to the LAN does not work through the Tunnel of EZVPN.

    Here is the configuration used so far (outside the normal SHEEP, groups of objects and stuff ISAKMP crypto):

    Client:

    vpnclient Server 10.x.x.x

    extension-mode network mode vpnclient

    EzVPN vpngroup vpnclient password *.

    vpnclient username user1 password *.

    vpnclient enable

    Crypto ipsec df - bit clear-df outdoors

    Server:

    internal EzVPN group strategy

    Group Policy attributes EzVPN

    allow to NEM

    allow password-storage

    tunnel-group EzVPN type ipsec-ra

    General characteristics of tunnel-group EzVPN

    Group Policy - by default-EzVPN

    IPSec-attributes tunnel-group EzVPN

    pre-shared key *.

    user user1 password *.

    I hope you can help

    Best regards

    Jarle

    Unfortunately, it is not supported on the platform of the SAA. With EasyVPN on the SAA, only the connected networks can be advertised. To accomplish what you want to do, you need to configure a static IPSec tunnel and announce local networks via ACL interesting traffic. You can also use an IOS device that does not have the capabilities of "multiple subnet" with EasyVPN.

    http://www.Cisco.com/en/us/docs/iOS/sec_secure_connectivity/configuration/guide/sec_easy_vpn_rem.html#wp1098057

  • Interfacing with several unknown USB devices; all producing NMEA strings

    Hi all

    Question about the peripheral USB interface and their associated drivers.

    I have the obligation to build an application that interacts with the USB devices that produce NMEA strings. I have the library to parse NMEA strings, but I fight with interfacing with several unknown USB devices. When deploying applications, I know not all possible USB devices to use.

    Is it possible to produce one driver who will accept any USB device strings?

    Or, more likely, is there a way to get the LV to recognize a connected USB device and automatically find / install the driver like windows does and is it possible to do in a deployed application?

    I had a trawl of the forums, but I've not found anything that specific.

    Thanks, I really appreciate the help.

    About the VI "set up the serial port", my problem is that the choice of COM port is in a separate menu (not directly related to the VI) and it allows all possible COM ports to be selected. That can be addressed.

    I am not expecting an all-in-one solution but asked the question in case it was possible.

    What I realized, is that for my specific condition to read strings from a USB device. It is likely to be sent over a serial connection. LV can handle this well and easily assuming the device has the installed driver / settings are available.

    LV (and indeed any other program) will not work without a device driver / settings. In this case, parameters set must be found (error) / a USB RAW driver would need to be developed. Devices requirng a RAW USB driver would need a serious review to continue due to the time and effort required. All this effort is work inherited from the AIDS to navigation

    I appreciate any help and I think I got the answer I was looking for! Thank you very much

  • Closure of a state machine in queue event with several parallel loops

    I am trying to find the best way to stop a program that consists of an architecture of State machine in line waiting for event with several parallel loops. Can anyone recommend the best way to achieve this in my attached VI? (To browse the forum, this seems to be a frequently asked question, but I have not found a solution that works for me.)

    I look forward to any comments on my as well code, if someone is willing to offer it.

    My program needs:

    If the user press the 'Stop' button, the program should prompt the user with "are you sure you want to stop the program?" and then return to a State of rest or move forward to stop the program. In addition if there is an error, the program should prompt the user to ' clear the error and continue, or stop the program. Then back to the idle state or move forward to stop the program.

    Architectural details:

    The program consists of 3 parallel loops: (1) a loop of event management that places different States of a queue of the State, (2) a State Machine that enters the State that is removed from the queue of the State and (3) a loop error/Shutdown, which deals with errors in the error queue management.

    During normal shutdown, where running handling loop in the case of event 'Program.Shutdown' and 'Shutdown' and the 'Idle' States are added to the queue of the State. In the state machine, the State of 'Stop' is invoked. Special "5000" error code is added to the queue of the error. In the loop of error handling and stopping, "5000" error triggered a prompt that asks the user if they want to stop the program. If the user chooses not to stop, a notifier StopNotif is sent to the State of 'Stop' and 'Program.Shutdown' event case with notification 'Go '. If the user decides to stop, the Notifier sends the notification "Stop". Loop and event management State Machine ends when they receive the notification "Stop".

    In case of error, the program behaves in the same way: If the user chooses to clear the error and continue, the program returns to the status "pending".

    HOWEVER - if the user chooses to stop the program, the program crashes. The author of the notification that is sent to stop the loop of events and State Machine management cannot be read because event Program.Shutdown and the stop State (which contain the function "Waiting to notify") are not active.

    I was able to activate the stop State by Queuing in the loop of error/Shutdown management. But I don't know how to activate the "Program.Shutdown" event by program and thus access the function "Waiting to notify" inside.

    I tried to put the function "Waiting to notify" outside the structure of the event, so the event-handling loop never ends. Placing timeouts on the "wait for declaring" and the structure of the event makes the programme of work, but I want to avoid using timeouts because I don't want to turn my event program into a program of polling stations. I would also avoid using variables or nodes property to stop loops, because that requires the creation of a control/indicator for something that the user does not need to interact with.

    Thank you!

    First of all, close the notifier outside loops with your queues.  Second, you must use a user event to send the message to the event structure loop so that it stop in the case of the stop on an error.

  • UNI-DIRECTIONAL on 1001 ASR feature

    Hello

    I have a router ASR 1001 last 3.9.2S current execution code.

    The Uni-directional feature was introduced in 3.9 S

    However...

    With the license of IPBase the Uni-directional command does not appear in configuration mode.

    But when I activate the trial license AdvancedIPServices and restart, the UNI-DIRECTIONAL command appears now in Setup mode.

    I don't see that it documented anywhere in the reference command/notes version IOS XE etc. you need to have the Advanced IP Services feature set allowed to use UNI-DIRECTIONAL on the ASR feature 1001. Anyone know if this is correct or is it an error or a bug?

    See you soon

    Hello

    Which can be seen in the browser functionality. If you select s 3.9 and Ip Base you want to see the unidirectional link detection section (you can filter by function name using like match stringUniDir). If you select Advanced featureset Services - you will find in the list.

    Niko

  • UNI-DIRECTIONAL press UCS 6248 interconnections of fabric?

    Hello

    If possible, I'd like to see a UNI-DIRECTIONAL between my 5548 neighbor was cheating Nexus and my 6248 interconnection fabric.

    UNI-DIRECTIONAL feature is supported by the 5548 s and easily activated.

    However, I can't find any information on how to activate on the UCS FI ports uplink ethernet. Is this possible?

    Thank you.

    Hello

    UNI-DIRECTIONAL UCS FINANCIAL support will be available in the next version major i.e UCSM 2.2

    UNI-DIRECTIONAL feature is currently not available on the FI.

    HTH

    Padma

  • SA520W VPN from Site to Site with several VLANs

    Hello

    I have a customer here with several VLANS in their places who wants to set up a VPN from Site to site between 2 devices SA520W. Unfortunately I can not find a way to set it up. In the VPN policy, I can choose between everything (which is not what I want, I want only traffict between subnets the routed via VPN), IP address unique, a beach (in a subnet) and a subnet itself - but only one. I don't find a way to configure several subnets in the selection of local traffic and remotely. Adding another IKE policy between the 2 sites does not either (which is good normally).

    Any ideas? Anything I'm doing wrong?

    Thank you for your help.

    Best regards

    Thomas

    I know that if you have an ASA or a router, you can define as VLANS to pass through the tunnel.

    Do not have access to a SA520W to test...

    A recommendation might be to post the question on the SMB community where they answered questions related to this product, just to check what other people did.

    Federico.

  • I've just updated to Photoshop, CC 2015.0.1, and I can't do 'Quick export in PNG' with several plans to work more? Any ideas?

    Update Photoshop CC 2015.0.1, I can do is no longer the 'Quick export in PNG' with several work plans more.

    I currently work with about 10 + work plans and I normally ' file > export > rapid export in PNG ", I had no problem in the previous version of Photoshop, but since I updated yesterday to the latest version, is no longer shows the pop-up asking where I want to save the png and instead" does nothing?

    Any ideas?

    Thank you

    Rob

    Please try and reset the default Photoshop preferences, if you do not customize your Photoshop after the last update.

    Steps to follow:

    To re-create the Photoshop preferences files, start the application while pressing Ctrl + Alt + Shift (Windows) or command + Option + shift (Mac OS). Then, click Yes to the message, "Delete the Adobe Photoshop settings file?"

    Let us know if that helps.

    Kind regards

    ~ Mohit

  • Workflow with several collaborators

    Workflow have version control using increment of the version that you are making changes.  Is there something analogous to the branches of the function in the VCO world?  The possibility to merge the changes in?

    If we have several people working on a workflow, im, trying to figure out the best way to present the new changes without replace directly the workflow with the new print (which could break him other tasks dependent on the id)

    I worked on vCO for 8 years, including very large projects and there was very little chance that I had to merge the workflow. Most of the time that could have been avoided by each server in developer of vCO synchronization to a repository Server central vCO.

    And when I needed to do this, the Magnifier tool included in the synchronization of workflow was good enough for me to manage change. Maybe it will work for you as well (right click / Synchronize).

  • Pop-up window with several point

    Hello

    I want to create a pop with several point window when I click on the button.
    I want to insert the value into the table using this pop up window.


    How can I do that.




    Thank you

    Ed

    Hello

    1. create a normal page with multiple elements and process page to insert the value in the table. (Assume that it comes from page 10)
    Edit this page
    Switch to the attribute to display tab.
    Under page template, select popup

    2. now, suppose you have a button on the Page 9 and when you click on this button, page 10 show popup in a pop-up window.
    Edit this button
    Go to the tab URL redirection
    Under target, select URL
    in the target URL text box enter
    JavaScript:popUp2('f?p=&App_ID.:10:&session.',_width_value,height_value);

    Kind regards
    Shijesh

  • Shortcut for the new window with several tabs

    Is it possible to have a shortcut on the desktop to launch a new window with several tabs? For example - home page is set to "www.google.com", but the shortcut opens new window with tabs "www.cnn.com" and "www.youtube.com".

    Then far,.../firefox.exe-nouveau-fenetre followed by the two URL in quotes will open two new windows. Entry - new-window "www.cnn.com" - new-tab 'www.youtube.com' will open two new windows if no instance of firefox is open, but if another window is already open, youtube will add a tab to the already open window, rather than the new window with cnn.com

    In reply to myself... withdrawal-order new window (and-new-tab), now it works.

    Looks like I'm too complicated it.

    shortened final was "C:\Program Files (x 86) \Mozilla ' 'url1'"url2.

  • Functions defined by the user with several parameters

    I set features three following user using "Define."

    UF1 takes a single patameter;

    UF2 takes two parameters;

    and UFX takes two parameters - with the second is 'X' in the definition.

    Œuvres F1.  F2 is the EVAL of F1 version and it works too.  User functions only seem to work fine.

    F3, a function of two user settings, produces a graph of NaN.

    F4 is the EVAL of F3 version.  Note that 'B 'is not replaced by 1'.  Also produces a NaN chart.

    F5 produces a graph of NaN.

    F6 is EVAL of F5.  The 'X' is not replaced (even with the ' B' above), and even if it looks like 'X * X', it also produces a graph of NaN.

    Is it possible to get defined by the user, with several parameters, features work by tracing the curve?

    Hi!, Fortin:

    If you download and install the ultimate Firmware with the version of the software: 2015 6 17 (8151), with the number of Version: 1.1.2 - 11, you can trace your examples of definition of the function, with curves and values, without NaN.

  • Background with several pictures

    How can I create a wallpaper for my iPad, iPhone, MacBook Air with multiple photos?

    (El Capitan, iOS 9.2.1 Photos)

    To create a collage of photos, you can create a photo book project and select a template page with several photos. Fill it with photos of your choice and print the page in PDF format.

    The themes of the book are different according to the terms of the photos and the number of photos per page.

    It's the theme travel plans:

    If you have installed iWork apps try Keynote to create a slide with many photos, arranged freely.

  • WiFi HP ENVY 4500 with several Access Points - same SSIS Configuration

    Hello

    We just got a HP ENVY 4500.  I have a main homenetwork with a wifi Modem/Router and an old router acting as an Access Point to the floor to extend coverage.

    Both have the same SSID and password and are set to different channels.

    My HP ENVY 4500 fails to connect when the Access Point is lit.

    It will connect with it.

    Once connected, I can turn on the PA and all is well.

    The two router an AP using WPA-PSK/WPA2-PSK encriptación

    The router (that it connects to) should have a better sgnal when both are on, so I do not understand why they need the AP to be turned off to connect.

    Any thoughts people?

    Eserim

    I think he has always had problems with several access points.  Try this, what ever AP is closest to the printer, set it to channel 1.  Then try channel 11.  Try now.

  • Carpet * a DVD-Ram UJ - 841S comes with several error messages

    My laptop is relatively new, I've been burning some video files in DVD - RW and all of a sudden my DVD drive has stopped working. It came with several error messages format "failed due to damage media", "format failed due to general failure" and "the inserted disc is READ only".

    I also can't rip music discs.

    Can you see ODD listed in Device Manager, and if so what is the exact status it?

    Sorry, but we discus on ODD, but nobody knows what model of laptop you have and what is the history of this problem. Is replaced the drive? Why are you sure that you are using compatible with your laptop ODD.

    Please more information!

Maybe you are looking for

  • How can I get rid of the white stripes at the top of the screen that covers navagation bar?

    When I opened Firefix, there is a (sometimes blue) white stripe at the top of the screen that hides the navigation bar. I can't intervene except search because I can't click on the arrow invisible return, bookmarks, reduce or close the screen. I have

  • How can I contact hotmail to let them know that I was hacked. Need phone number or e-mail address

    E-mail address is removed from the privacy *. How to find a phone number or e-mail address to inform MSN my hotmail account has been hacked.  I think it must be a secret.  I know it's been hacked because my contacts have sent emails asking for money

  • ACQUISITION OF NETWORK ADDRESS?

    Just bought my daughter a compaq minicq10.  We already have a computer compaq laptop and it connects to the router wireless without any problem.  The mini keeps saying "absorbing the network address" it connects very well using the wire but not wirel

  • OfficeJet J6410 and Windows 8

    I recently did a cleam install windows 8 32-bit. I also downloaded the drivers and full software for my all in one. Printing was not a problem, but when I tried to scan, I got this error message: "Een benodigd component kan niet worden niet goed gein

  • In countries that can buy CC if...

    I live in Argentine abut my credit card is a map of the United States.The price of the CC in Argentina is like $16.00 USD per month for a one year planI prefer to buy it if it's possible with a credit card we.However I need to be avialble in English,