Cisco Catalyst 6500 Series Switches Carlos Nivon 2006

  • Slides: 110
Download presentation
Cisco Catalyst 6500 Series Switches: Carlos Nivon © 2006, Cisco Systems, Inc. CAT 6

Cisco Catalyst 6500 Series Switches: Carlos Nivon © 2006, Cisco Systems, Inc. CAT 6 KS v 2. 0— 2 -1

Comunidad de Sopórte de Cisco – Webcast en vivo Carlos Nivón © 2007 Cisco

Comunidad de Sopórte de Cisco – Webcast en vivo Carlos Nivón © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -2

Gracias por su asistencia el día de hoy La presentación incluirá algunas preguntas a

Gracias por su asistencia el día de hoy La presentación incluirá algunas preguntas a la audiencia. Le invitamos cordialmente a participar activamente en las preguntas que le haremos durante la sesión © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -3

Copia de la presentación Si desea bajar una copia de la presentación de hoy,

Copia de la presentación Si desea bajar una copia de la presentación de hoy, vaya a la liga indicada en el chat o use ésta dirección https: //supportforums. cisco. com/docs/DOC-28341 © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -4

Chassis Overview © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v

Chassis Overview © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -5

Cat 6500 slot Orientation 6513 6509 -NEBS (EOS) 6509 -NEBS-A 6509 6506 6503 Horizontally

Cat 6500 slot Orientation 6513 6509 -NEBS (EOS) 6509 -NEBS-A 6509 6506 6503 Horizontally Aligned Slots © 2007 Cisco Systems, Inc. All rights reserved. Vertically Aligned Slots CAT 6 KS v 2. 0— 2 -6

Supervisors, Line cards and other Modules © 2007 Cisco Systems, Inc. All rights reserved.

Supervisors, Line cards and other Modules © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -7

Supervisor Engine 32 Access Layer Supervisor 32 © 2007 Cisco Systems, Inc. All rights

Supervisor Engine 32 Access Layer Supervisor 32 © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -8

Supervisor Engine 720 Switch Fabric Supervisor 720 with Integrated Switch Fabric © 2007 Cisco

Supervisor Engine 720 Switch Fabric Supervisor 720 with Integrated Switch Fabric © 2007 Cisco Systems, Inc. All rights reserved. Core Layer CAT 6 KS v 2. 0— 2 -9

Ethernet and WAN Line Cards Ethernet Line Cards 10/100 TX and 100 Fiber 10/1000

Ethernet and WAN Line Cards Ethernet Line Cards 10/100 TX and 100 Fiber 10/1000 TX GE SFP GE GBIC 10 GE Inline Power Flex. WAN SIP WAN Line Cards OSM © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -10

Advanced Services Modules Security Firewall Module IPSec VPN Shared Port Adapter Intrusion Detection SSL

Advanced Services Modules Security Firewall Module IPSec VPN Shared Port Adapter Intrusion Detection SSL Application Networking Services CSM © 2007 Cisco Systems, Inc. All rights reserved. CSM-S ACE CAT 6 KS v 2. 0— 2 -11

Advanced Services Modules (Cont. ) Wireless Services WLSM MWAM IP Telephony CMM T 1/E

Advanced Services Modules (Cont. ) Wireless Services WLSM MWAM IP Telephony CMM T 1/E 1 Services Modules CSG Network Monitoring NAM and NAM 2 TAD CMM © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -12

Catalyst 6500 Backplane Architecture © 2007 Cisco Systems, Inc. All rights reserved. CAT 6

Catalyst 6500 Backplane Architecture © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -13

Classic 32 -Gbps Shared-Bus Backplane Multilayer Forwarding Table PFC Switching System Multilayer Switch Feature

Classic 32 -Gbps Shared-Bus Backplane Multilayer Forwarding Table PFC Switching System Multilayer Switch Feature Card Line Card 32 -Gbps Shared Switching Bus Control Bus Results Bus ASIC Fabric Arbitration Port ASIC Network MGMT NMP/MCP Local Buffer Supervisor Engine 10/100 Ethernet © 2007 Cisco Systems, Inc. All rights reserved. Port or Bus ASIC Local Buffer Gigabit Ethernet CAT 6 KS v 2. 0— 2 -14

Crossbar Switch Fabric Multilayer Forwarding Table PFC Switching System Multilayer Switch Feature Card Fabric

Crossbar Switch Fabric Multilayer Forwarding Table PFC Switching System Multilayer Switch Feature Card Fabric Arbitration CEF 256 Fabric ASIC Port ASIC 1 x 8 Gbps Fabric ASIC Port ASIC CEF 720 Fabric ASIC Port ASIC 1 x 8 Gbps C R O S S B A R Network MGMT NMP/MCP d. CEF 256 1 x 8 Gbps 1 x 20 Gbps Supervisor Engine 720 © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -15

Crossbar Switch Fabric Layout Nine-Slot Chassis Slot 1 Slot 2 Slot 3 Slot 4

Crossbar Switch Fabric Layout Nine-Slot Chassis Slot 1 Slot 2 Slot 3 Slot 4 Fabric ASIC Slot 5 Fabric ASIC Slot 5 Slot 6 Fabric ASIC Slot 6 Type of card in slot: = Fabric (SFM/Sup) = Line Card © 2007 Cisco Systems, Inc. All rights reserved. Fabric ASIC Slot 7 Slot 8 Slot 9 CAT 6 KS v 2. 0— 2 -16

Crossbar Switch Fabric 13 -Slot Chassis Slot 1 Slot 2 Slot 3 Slot 4

Crossbar Switch Fabric 13 -Slot Chassis Slot 1 Slot 2 Slot 3 Slot 4 Slot 5 Slot 6 Fabric ASIC Fabric ASIC Slot 7 Slot 8 Fabric ASIC Slot 8 Type of card in slot: = Fabric (SFM/Sup) = Line Card © 2007 Cisco Systems, Inc. All rights reserved. Fabric ASIC Fabric ASIC Slot 9 Slot 10 Slot 11 Slot 12 Slot 13 CAT 6 KS v 2. 0— 2 -17

Introducing the Shared Bus and Switch Fabric Architectures © 2007 Cisco Systems, Inc. All

Introducing the Shared Bus and Switch Fabric Architectures © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -18

CEF Forwarding Architectures Features of CEF forwarding architectures include the following: CEF • Hardware-based

CEF Forwarding Architectures Features of CEF forwarding architectures include the following: CEF • Hardware-based centralized forwarding • PFC on supervisor makes all forwarding decisions • Handles centralized forwarding up to 30 Mpps d. CEF • Hardware-based distributed forwarding • d. CEF engine has a copy of the entire forwarding table at the line card • All traffic is switched at a sustained 48 Mpps (for DFC 3 on CEF 720) © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -19

Supervisor Engine 720 Switch-Fabric Connectivity Supervisor Engine 720 CEF 720 Series MSFC 3 Routing

Supervisor Engine 720 Switch-Fabric Connectivity Supervisor Engine 720 CEF 720 Series MSFC 3 Routing Table PFC 3 Hardware Fwd Tables 30 to 400 Mpps Forwarding Performance d. CEF 720 Series 20 Optional z DFC 3 20 20 32 -Gbps Switching Bus Integrated Switch Fabric 8 CEF 256 Series Classic Series © 2007 Cisco Systems, Inc. All rights reserved. 20 Optional DFC 3 20 8 Integrated DFC 3 8 d. CEF 256 Series Integrated DFC 3 CAT 6 KS v 2. 0— 2 -20

Supervisor Engine 32 with Eight GE Uplinks WS-SUP 32 -GE-3 B Supervisor Engine 32

Supervisor Engine 32 with Eight GE Uplinks WS-SUP 32 -GE-3 B Supervisor Engine 32 with Two 10 -GE Uplinks WS-SUP 32 -10 GE-3 B © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -21

Supervisor Engine 32: Front Panel 8 x SFP based GE Uplink Ports Compact Flash

Supervisor Engine 32: Front Panel 8 x SFP based GE Uplink Ports Compact Flash Slot 2 x USB Ports 1 x 10/1000 GE Uplink Port RS-232 Console Port © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -22

Integrated PFC 3 B Supervisor Engine 32 © 2007 Cisco Systems, Inc. All rights

Integrated PFC 3 B Supervisor Engine 32 © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -23

Integrated MSFC 2 a Supervisor Engine 32 © 2007 Cisco Systems, Inc. All rights

Integrated MSFC 2 a Supervisor Engine 32 © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -24

Supervisor Engine 32 Line Card Compatibility Architecture Supported? Classic YES CEF 256 YES d.

Supervisor Engine 32 Line Card Compatibility Architecture Supported? Classic YES CEF 256 YES d. CEF 256 NO CEF 720 NO d. CEF 720 NO SFM/SFM 2 NO Services Modules YES Any DFC NO OSM* YES SIP YES Flex. WAN YES Supervisor Engine 32 *OSM: Original Storage Manufacturer © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -25

Supervisor Engine 720 Overview Console Port Uplink Ports Removable Storage Slots © 2007 Cisco

Supervisor Engine 720 Overview Console Port Uplink Ports Removable Storage Slots © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -26

Supervisor Engine 720 Options Supervisor Engine 720 -3 BXL Incorporates new PFC 3 B

Supervisor Engine 720 Options Supervisor Engine 720 -3 BXL Incorporates new PFC 3 B to Incorporates new provide the same features PFC 3 BXL, extending as the XL version but not hardware features and as high a capacity for system capacity for routes and flow information © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -27

Catalyst 6500 Supervisor Engine 720 PFC Options Name PFC 3 A PFC 3 B-XL

Catalyst 6500 Supervisor Engine 720 PFC Options Name PFC 3 A PFC 3 B-XL Routes 256, 000 1 million Number of ACLs 512 4000 Net. Flow Entries 128, 000 (64, 000) 128, 000 (115, 000) 256, 000 (230, 000) ACE Counters No Yes MPLS No Yes SP 512 MB + RP 512 MB SP 1 GB + RP 1 GB Default Memory © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -28

Supervisor Engine 720 Switch Fabric • Integrated 720 -Gbps switch fabric. • CEF 256

Supervisor Engine 720 Switch Fabric • Integrated 720 -Gbps switch fabric. • CEF 256 and d. CEF 256 connect in at 8 Gbps per fabric channel. Switch Fabric • CEF 720 and d. CEF 720 connect in at 20 Gbps per fabric channel. © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -29

Supervisor Engine 720 Hardware Features IPv 6 Software Features IPv 6 Hardware Features 128,

Supervisor Engine 720 Hardware Features IPv 6 Software Features IPv 6 Hardware Features 128, 000 FIB entries IPv 6 load sharing up to 16 paths Ether. Channel hash across 48 bits IPv 6 policing/Net. Flow/classification STD and EXT V 6 ACLs IPv 6 Qo. S lookups IPv 6 multicast IPv 6 -to-IPv 4 Tunneling IPv 6 edge over MPLS (6 PE) IPv 6 addressing ICMP for IPv 6 DNS for IPv 6 V 6 MTU path discovery SSH for IPv 6 Telnet IPv 6 traceroute d. CEF for IPv 6 RIP for IPv 6 IS-IS for IPv 6 OSPF v 3 for IPv 6 BGP for IPv 6 function located on PFC 3 © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -30

MPLS Hardware Features MPLS applies to any Ethernet port on the following line cards:

MPLS Hardware Features MPLS applies to any Ethernet port on the following line cards: Classic Ethernet Line Cards MPLS HARDWARE FEATURES Up to 1000 MPLS VPNs MPLS VPN (RFC 2457) on any Ethernet port MPLS multicast VPN MPLS label switch router (LSR) MPLS label edge router (LER) MPLS Traffic Engineering (TE) MPLS Ethernet over MPLS (Eo. MPLS) on PFC 3 B DSCP-to-EXP mapping © 2007 Cisco Systems, Inc. All rights reserved. CEF 256 Ethernet Line Cards d. CEF 256 Ethernet Line Cards CEF 720 Ethernet Line Cards d. CEF 720 Ethernet Line Cards MPLS function located on PFC 3 CAT 6 KS v 2. 0— 2 -31

Catalyst 6500 Architecture Overview Catalyst 6500 Line Cards © 2006, Cisco Systems, Inc. CAT

Catalyst 6500 Architecture Overview Catalyst 6500 Line Cards © 2006, Cisco Systems, Inc. CAT 6 KS v 2. 0— 2 -32

Catalyst 6500 Line Cards C A T A L Y S T 6 5

Catalyst 6500 Line Cards C A T A L Y S T 6 5 0 0 10/100 BASE-TX and 100 BASE-FX GE GBIC Optical Services Modules © 2007 Cisco Systems, Inc. All rights reserved. 10/1000 BASE-TX 10 GE In-line Power Gigabit Ethernet SFP WAN SIP L I N E C A R D S CAT 6 KS v 2. 0— 2 -33

Classic and Crossbar Switch Fabric Line Cards Crossbar Connector Shared Bus Connector Classic ©

Classic and Crossbar Switch Fabric Line Cards Crossbar Connector Shared Bus Connector Classic © 2007 Cisco Systems, Inc. All rights reserved. Shared Bus Connector CEF 256 CAT 6 KS v 2. 0— 2 -34

Line Card Types 32 -Gbps Shared Bus Classic Line Cards CEF 256 Line Cards

Line Card Types 32 -Gbps Shared Bus Classic Line Cards CEF 256 Line Cards Supervisor 8 CEF 720 Line Cards d. CEF 256 Line Cards 8 8 20 20 d. CEF 720 Line Cards 20 20 Switch Fabric Crossbar © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -35

Classic Line Card Architecture Classic line cards support a connection to the 32 Gbps

Classic Line Card Architecture Classic line cards support a connection to the 32 Gbps shared bus only. 32 -Gbps Shared Bus Gigabit Ethernet ASIC 10/100 ASIC Buffer Ports 1– 12 Ports 13– 24 Ports 25– 36 Ports 37– 48 48 -Port 10 - and 100 -MBps Line Card © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -36

CEF 256 Line Card Architecture Crossbar CEF 256 line cards support a connection to

CEF 256 Line Card Architecture Crossbar CEF 256 line cards support a connection to the 32 -Gbps shared bus and an 8 -Gbps connection to the switch fabric. 32 -Gbps Shared Bus 8 Fabric ASIC Optional DFC Daughter Card 32 Gbps Local Switching Bus Port ASIC 512 -KB Buffer Ports 5– 8 Ports 9– 12 Ports 13– 16 Ports 1– 4 16 -Port Gigabit Ethernet Line Card © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -37

d. CEF 256 Line Card Architecture Crossbar 8 Fabric ASIC d. CEF 256 line

d. CEF 256 Line Card Architecture Crossbar 8 Fabric ASIC d. CEF 256 line cards support two 8 -Gbps connections to the switch fabric only. Integrated DFC and DFC 3 32 -Gbps Local Bus 8 Fabric ASIC 32 -Gbps Local Bus Port ASIC 512 -KB Buffer Ports 1– 4 Ports 5– 8 Ports 9– 12 Ports 13– 16 16 -Port Gigabit Ethernet Line Card © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -38

CEF 720 Line Card Architecture Crossbar 32 -Gbps Shared Bus 20 Fabric ASIC Optional

CEF 720 Line Card Architecture Crossbar 32 -Gbps Shared Bus 20 Fabric ASIC Optional DFC 3 Daughter Card 20 Fabric ASIC Port ASIC Ports 1– 12 Ports 13– 24 Ports 25– 36 Ports 37– 48 48 -Port Gigabit Ethernet Line Card © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -39

d. CEF 720 Line Card Architecture Crossbar d. CEF 720 line cards support two

d. CEF 720 Line Card Architecture Crossbar d. CEF 720 line cards support two 20 -Gbps connections to the switch fabric only. 20 Fabric ASIC Integrated DFC Port ASIC Ports 1– 12 Ports 13– 24 Ports 25– 36 Ports 37– 48 48 -Port Gigabit Ethernet Line Card © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -40

Line Card Packet Flow © 2007 Cisco Systems, Inc. All rights reserved. CAT 6

Line Card Packet Flow © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -41

Classic-to-Classic Centralized Forwarding Layer 3 and Layer 4 Engine Supervisor Engine 720 Layer 2

Classic-to-Classic Centralized Forwarding Layer 3 and Layer 4 Engine Supervisor Engine 720 Layer 2 Engine 2 3 PFC 3 720 -Gbps Switch Fabric Red D Classic Module B Port ASIC X 4 Port ASIC DBUS RBUS X Classic Module A Port ASIC 1 Blue S X Port ASIC Source S Destination D Blue VLAN Red VLAN Entire Packet Header © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -42

CEF 256 -to-CEF 256 Centralized Forwarding D Port ASIC Supervisor Engine 720 Layers 3

CEF 256 -to-CEF 256 Centralized Forwarding D Port ASIC Supervisor Engine 720 Layers 3 and 4 Engine Port ASIC LCRBUS LCDBUS L 2 Engine 3 PFC 3 720 -Gbps Switch Fabric 8 Gbps 6 Fabric Interface CEF 256 Module B DBUS RBUS 2 Fabric 5 4 Interface 8 Gbps CEF 256 Module A LCDBUS LCRBUS S Destination D Blue VLAN Red VLAN Entire packet X Port ASIC 1 Blue S © 2007 Cisco Systems, Inc. All rights reserved. Source X Port ASIC Packet header Note: Packet flow for a CEF 256 -to-CEF 720 is similar. The main differences are the CEF 720 module architecture and the speed of the fabric channel to the CEF 720 module. CAT 6 KS v 2. 0— 2 -43

CEF 720 and DFC 3 -to-CEF 720 and DEFC 3 Distributed Forwarding Red D

CEF 720 and DFC 3 -to-CEF 720 and DEFC 3 Distributed Forwarding Red D Supervisor Engine 720 Port ASIC 5 720 -Gbps Fabric Interface and 20 Gbps Replication Switch Engine Fabric 4 Fabric Interface and 2 Replication Engine Port ASIC Layer 2 3 Engine DFC 3 Layers 3 and 4 Engine CEF 720 Module B and DFC 3 Layer 2 Engine 20 Gbps PFC 3 DFC 3 Layers 3 and 4 Engine CEF 720 Module A and DFC 3 Source S Destination D Blue VLAN Red VLAN Entire Packet Header 1 Blue S © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -44

Catalyst 6500 Line Card Options Interface Type Classic CEF 256 d. CEF 256 CEF

Catalyst 6500 Line Card Options Interface Type Classic CEF 256 d. CEF 256 CEF 720 10 BASE-FL √ 10/100 BASE-TX √ √ 100 BASE-FX √ √ 10/1000 BASE-TX √ √ 1000 BASE GBIC √ √ 1000 BASE SFP √ 10 GE XENPAK √ Services Modules √ √ √ SIP Flex. WAN OSMs* √ * OSM: Optical Services Module © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -45

Troubleshooting the Catalyst 6500 © 2006, Cisco Systems, Inc. CAT 6 KS v 2.

Troubleshooting the Catalyst 6500 © 2006, Cisco Systems, Inc. CAT 6 KS v 2. 0— 2 -46

Basic Performance check © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS

Basic Performance check © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -47

show Commands The switch supports two slots for the supervisor engines. A CLI command

show Commands The switch supports two slots for the supervisor engines. A CLI command is provided to allow the administrator to inspect which of the SFMs is active: 6500# show fabric active Active fabric card in slot 5 No backup fabric card in the system The mode of operation in use by the SFM can also be inspected by issuing the following command: 6500# show fabric switching-mode Fabric module is not required for system to operate Modules are allowed to operate in bus mode Truncated mode is not allowed unless threshold is met Threshold for truncated mode operation is 2 SFM-capable cards Module Slot Switching Mode 1 Crossbar 2 Crossbar 3 Crossbar 5 DCEF © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -48

show Commands (Cont. ) The status of the SFM can be inspected by using

show Commands (Cont. ) The status of the SFM can be inspected by using the following command: 6500# show fabric status slot channel speed module fabric status 1 0 8 G OK OK 2 0 8 G OK OK 3 0 8 G OK OK 5 0 20 G OK OK The utilization of the SFM can be inspected by using the following command: 6500# show fabric utilization slot channel speed Ingress % 1 0 8 G 28 0 2 0 8 G 0 0 3 0 8 G 0 25 5 0 20 G 0 0 © 2007 Cisco Systems, Inc. All rights reserved. Egress % CAT 6 KS v 2. 0— 2 -49

show Commands (Cont. ) During troubleshooting, the SFM can be inspected for transmission errors:

show Commands (Cont. ) During troubleshooting, the SFM can be inspected for transmission errors: 6500# show fabric errors Module errors: slot channel crc hbeat 1 0 0 2 0 0 3 0 0 5 0 0 Fabric errors: slot channel 1 0 2 0 3 0 5 0 0 0 sync buffer 0 0 0 0 sync DDR sync 0 0 timeout 6500# © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -50

System Capacity Planning • New CLI command that provides a dashboard view of system

System Capacity Planning • New CLI command that provides a dashboard view of system hardware capacity, as well as the current utilization of the system. © 2007 Cisco Systems, Inc. All rights reserved. C 6500# show platform hardware capacity ? acl Show Qo. S/Security ACL capacity cpu Show CPU resources capacity eobc Show EOBC resources capacity fabric Show Switch Fabric resources capacity flash Show Flash/NVRAM resources capacity forwarding Show forwarding engine capacity interface Show Interface resources capacity monitor Show SPAN resources capacity multicast Show L 3 Multicast resources capacity netflow Show Netflow capacity pfc Show PFC resources capacity power Show Power resources capacity qos Show Qo. S resources capacity rate-limit Show CPU Rate Limiters capacity system Show System resources capacity vlan Show VLAN resources capacity CAT 6 KS v 2. 0— 2 -51

Oversubscription © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2.

Oversubscription © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -52

Simplified Campus Example 2 x 6: 1 WS-X 6548 -GE-TX(CEF 256) WS-X 6548 -GE-TX

Simplified Campus Example 2 x 6: 1 WS-X 6548 -GE-TX(CEF 256) WS-X 6548 -GE-TX 48 ports and 8 -Gb 48 ports, 8 -Gbps backplane 4: 1 oversubscription 8: 1 = 16 Gb Supervisor Engine 720 2 x 1 -Gb uplinks = 2 Gb 8: 1 Access 1 x 1. 2: 1 Aggregation WS-X 6724 -SFP (CEF 720) 24 ports and 20 -Gb backplane 1. 2: 1 oversubscription • Total core-edge oversubscription ≈ 58: 1 • Traffic flows vertically, bidirectional • Low overall bandwidth requirements © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -53

High CPU © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v

High CPU © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -54

High CPU Utilization Why should I be concerned about high CPU usage ? It

High CPU Utilization Why should I be concerned about high CPU usage ? It is very important to protect the control-plane for network stability, as resources (CPU, Memory and buffer) are shared by control-plane and data-plane traffic What are the usual symptoms of high CPU usage ? • • • Control-plane instability e. g. , OSPF flap Traffic loss Reduced switching/forwarding performance Slow response to Telnet / SSH SNMP poll miss At what percentage level at should I start troubleshooting ? It depends on the nature and level of the traffic. It is very essential to find a baseline CPU usage during normal working conditions, and start troubleshooting when it goes above specific threshold. E. g. , Baseline RP CPU usage 25%. Start troubleshooting when the RP CPU usage is consistently at 40% or above. © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -55

High CPU Utilization Commands used to set baseline RP: show process cpu RP: show

High CPU Utilization Commands used to set baseline RP: show process cpu RP: show msfc netint MSFC 3 Flash RP: show ip traffic RP: show interfaces DRAM RP CPU Flash SP CPU DRAM RP: show ibc 1 Gbps Inband C Port ASIC C 1 Gbps Inband Sup 720 SP: show process cpu SP: show msfc netint Monitor the CPU usage in DFCs also using “remote command module <mod#> show process cpu” © 2007 Cisco Systems, Inc. All rights reserved. SP: show ibc C = Controller CAT 6 KS v 2. 0— 2 -56

High CPU Utilization CPU utilization is due to: § Process (e. g. , due

High CPU Utilization CPU utilization is due to: § Process (e. g. , due to recurring events, control-plane process) § Interrupts (e. g. , due to inappropriate switching path) • Investigate CPU utilization via “show proc cpu” and find if the usage is due to process or interrupts Total CPU usage (Process + Interrupt) CPU usage due to Interrupt DUT#show proc cpu CPU utilization for five seconds: 99%/90%; one minute: 9%; five minutes: 8% PID 2 Runtime(ms) 720 © 2007 Cisco Systems, Inc. All rights reserved. Invoked u. Secs 5 Sec 1 Min 88 8181 9. 12% 1. 11% 5 Min TTY Process 0. 23% 18 Virtual Exec CAT 6 KS v 2. 0— 2 -57

High CPU utilization – Process: ARP Input Caused by ARP flooding. Static route configured

High CPU utilization – Process: ARP Input Caused by ARP flooding. Static route configured with interface instead of next-hop IP address. This will generate ARP request for every packet that is not reachable via more specific routes. ip route 0. 0 Gigabit. Ethernet 2/5 DUT#show ip traffic | begin ARP statistics: Incrementing at very high rate Rcvd: 6512 requests, 2092 replies, 0 reverse, 0 other Sent: 258 requests, 707 replies (0 proxy), 0 reverse Drop due to input queue full: 20 <snip> Look for abnormal input rate DUT#show interfaces | include line protocol|rate Vlan 501 is up, line protocol is up 5 minute input rate 23013521 bits/sec, 2535 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -58

High CPU utilization – Process: IP Input Caused by traffic that needs to process-switched

High CPU utilization – Process: IP Input Caused by traffic that needs to process-switched or destined to the CPU Common Reasons: - Traffic with IP-options enabled - Fragmentation (due to MTU mismatch) Configure Optimized ACL Logging (OAL) in PFC 3 onwards - Broadcast storm - Traffic that needs further CPU processing e. g. , ACL Logging - Traffic to which ICMP Redirect or Unreachable required e. g. , TTL=1, ACL Deny etc. © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -59

High CPU utilization – Traffic to RP CPU DUT#show ip traffic IP statistics: Rcvd:

High CPU utilization – Traffic to RP CPU DUT#show ip traffic IP statistics: Rcvd: 81676 total, 20945 local destination 0 format errors, 0 checksum errors, 41031 bad hop count 0 unknown protocol, 19609 not a gateway 0 security failures, 0 bad options, 120 with options Frags: 0 reassembled, 0 timeouts, 0 couldn't reassemble 0 fragmented, 0 couldn't fragment Bcast: 417 received, 0 sent • • TTL<2 IP options Fragmentation Broadcasts ARP not resolved Ping Request Punts to generate ICMP redirect ARPs Mcast: 11423 received, 52655 sent Sent: 61340 generated, 0 forwarded Drop: 0 encapsulation failed, 0 unresolved, 0 no adjacency 0 no route, 0 unicast RPF, 0 forced drop It also displays stats for : BGP, EIGRP, TCP, UDP, PIM, IGMP and OSPF 0 options denied, 0 source IP address zero ICMP statistics: Rcvd: 0 format errors, 0 checksum errors, 17 redirects, 112 unreachable 812 echo, 812 echo reply, 0 mask requests, 0 mask replies, 0 quench 0 parameter, 0 timestamp, 0 info request, 0 other 0 irdp solicitations, 0 irdp advertisements 0 time exceeded, 0 timestamp replies, 0 info replies Do this command few times to find the fastest growing counter ARP statistics: Rcvd: 3518120 requests, 3636408 replies, 0 reverse, 0 other © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -62

High CPU utilization – Traffic to RP CPU Find the interface that's holding most

High CPU utilization – Traffic to RP CPU Find the interface that's holding most of the buffers Commands to see packets getting punted DUT#show buffers assigned Header Data. Area Pool Rcnt 46 FDBC 14 8029784 Small 1 46 FE 0010 802 CBC 4 Small 1. . . Size Link 77 36 Enc 1 1 Flags 200 Input Vl 100 Output None Find the traffic. Please remember that the traffic seen may be normal control-plane traffic, expected to be sent to RP CPU DUT#show buffers input-interface vlan 100 dump Buffer information for Rx. Q 3 buffer at 0 x 378 B 3 BC data_area 0 x 7 C 05 EF 0, refcount 1, next 0 x 0, flags 0 x 200 linktype 7 (IP), enctype 1 (ARPA), encsize 14, rxtype 1 if_input 0 x 46 C 7 C 68 (Vlan 100), if_output 0 x 0 (None) inputtime 2 d 03 h (elapsed 00: 01. 024) outputtime 00: 00. 000 (elapsed never), oqnumber 65535 datagramstart 0 x 7 C 05 F 36, datagramsize 62, maximum size 2196 mac_start 0 x 7 C 05 F 36, addr_start 0 x 7 C 05 F 36, info_start 0 x 0 network_start 0 x 7 C 05 F 44, transport_start 0 x 7 C 05 F 58, caller_pc 0 x 6 C 1564 source: 137. 34. 219. 3, destination: 224. 0. 0. 2, id: 0 x 0000, ttl: 1, TOS: 192 prot: 17, source port 1985, destination port 1985 0: 12: 28: 44: 60: 76: 92: 108: 124: . . . 00000000 00420000 5 E 000002 0000 07 C 1 63697363 AFACEFAD 00000000 CC 43 12 FF 74 D 5 18 A 90518 011174 D 5 001 CECB 4 6 F 00000000 C 0002 0000 00850800 8922 DB 03 00001001 8922 DB 01 00000000 000200 A 0 00000100 45 C 00030 E 0000002 04640100 41920450 Packet details /, o-. . . LC@. . . . B. . t. U. . . . ^. . ). . . E@. 0. . . t. U. "[. `. . A. A. . l 4. . . d. . cisco. . "[. A. . P Remember, this command shows only the process-switched traffic © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -63

High CPU utilization – Interrupt How to troubleshoot high CPU due to interrupts ?

High CPU utilization – Interrupt How to troubleshoot high CPU due to interrupts ? DUT#show proc cpu CPU utilization for five seconds: 99%/90%; one minute: 9%; five minutes: 8% Most of the times, packets punted to CPU has common factors. Packets received on the same vlan / interface or interfaces in the same module or same VRF etc. Packet have specific destination or destination prefixes learnt from a specific neighbor Packet have same L 4 source or destination ports Anything else common ? Details on all supported Packet Capture Tools © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -64

High CPU utilization – Interrupt Verify CEF is enabled globally and on all interfaces

High CPU utilization – Interrupt Verify CEF is enabled globally and on all interfaces DUT#show cef state CEF Status: RP instance common CEF enabled IPv 4 CEF Status: CEF enabled/running Verify if CEF is enabled globally and per interface d. CEF enabled/running CEF switching enabled/running DUT#show ip interfaces | include line pro|CEF switching Vlan 2 is up, line protocol is up IP CEF switching is enabled Vlan 3 is up, line protocol is up IP CEF switching is enabled © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -65

High CPU utilization – Interrupt Switching path statistics – per interface basis DUT#show interface

High CPU utilization – Interrupt Switching path statistics – per interface basis DUT#show interface gig 7/4 stats Gigabit. Ethernet 7/4 Switching path Pkts In Chars In Pkts Out Chars Out Processor 4406750 353281375 32881 12422509 Route cache 74026 4589612 0 0 Distributed cache 0 0 Total 4480776 Hw-switched DUT#show interface switching 357870987 32881 12422509 Process switched SW CEF switched Gigabit. Ethernet 2/2 Protocol Path Pkts In Chars In Pkts Out Chars Out IP Process 11594 717908 16 1838 Cache misses 0 Fast 0 0 Auton/SSE 0 0 Process 94 5640 5 560 Cache misses 0 Fast 0 0 Auton/SSE 0 0 Process name Process switched Distributed switched packets © 2007 Cisco Systems, Inc. All rights reserved. ARP . . CAT 6 KS v 2. 0— 2 -66

Net. Driver (Netdr) Debug DUT#debug netdr capture ? Be as specific as possible; on

Net. Driver (Netdr) Debug DUT#debug netdr capture ? Be as specific as possible; on SP, remote login switch, then same set of commands) acl (11) Capture packets matching an acl and-filter (3) Apply filters in an and function: all must match continuous (1) Capture packets continuously: cyclic overwrite destination-ip-address (10) Capture all packets matching ip dst address dstindex (7) Capture all packets matching destination index ethertype (8) Capture all packets matching ethertype interface (4) Capture packets related to this interface or-filter (3) Apply filters in an or function: only one must match rx (2) Capture incoming packets only source-ip-address (9) Capture all packets matching ip src address srcindex (6) Capture all packets matching source index tx (2) Capture outgoing packets only vlan (5) Capture packets matching this vlan number <cr> This debug should not be service-impacting © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -69

Does the CPU Inband Driver See the Packet? DUT#show netdr captured-packets Example of inbound

Does the CPU Inband Driver See the Packet? DUT#show netdr captured-packets Example of inbound packet on interface VLAN 1000 A total of 289 packets have been captured The capture buffer wrapped 0 times Total capture capacity: 4096 packets ------- dump of incoming inband packet ------- interface Vl 1000, routine mistral_process_rx_packet_inlin dbus info: src_vlan 0 x 3 E 8(1000), src_indx 0 x 45(69), len 0 x 40(64) bpdu 0, index_dir 0, flood 1, dont_lrn 0, dest_indx 0 x 43 E 8(17384) 80000401 03 E 80400 00450000 40800000 E 000000008 43 E 80000 mistral hdr: req_token 0 x 0(0), src_index 0 x 45(69), rx_offset 0 x 76(118) requeue 0, obl_pkt 0, vlan 0 x 3 E 8(1000) ARP packet destmac FF. FF, srcmac 00. A 0. CC. 21. 94. C 4, protocol 0806 layer 3 data: 00010800 06040001 00 A 0 CC 21 94 C 40500 01660000 05000102 00000000 000001 FE 00000006 000003 E 8. . . DUT#undebug netdr DUT#debug netdr clear-capture © 2007 Cisco Systems, Inc. All rights reserved. Make sure to turn it off afterwards Make sure to clear memory used up by captured packets CAT 6 KS v 2. 0— 2 -70

Enhanced crashinfo © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v

Enhanced crashinfo © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -71

Crashes will require TAC involvement Open a TAC service request and collect the following

Crashes will require TAC involvement Open a TAC service request and collect the following info: • Crashinfo file • Core file (if configured so) • Show tech-support • What you were doing that made it crash!! © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -72

Example of Process Crash Output Crashing process ID Crashing process name 00: 05: 29:

Example of Process Crash Output Crashing process ID Crashing process name 00: 05: 29: %DUMPER-3 -PROCINFO: pid = 16427: (sbin/tcp. proc), terminated due to signal SIGTRAP, trace trap (not reset when caught) (Signal from user) 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: zero at v 0 v 1 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: R 0 000000004 0000 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: a 0 a 1 a 2 a 3 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: R 4 7 BC 22298 00000000 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: t 0 t 1 t 2 t 3 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: R 8 00000000 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: t 4 t 5 t 6 t 7 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: R 12 00000000 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: s 0 s 1 s 2 s 3 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: R 16 00 FDDFA 0 00000000 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: s 4 s 5 s 6 s 7 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: R 20 00000000 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: t 8 t 9 k 0 k 1 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: R 24 0000 722 B 3 F 4 C 00000000 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: gp sp s 8 ra 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: R 28 7828 FF 90 00 FDDF 60 0000 72297450 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: sr lo hi bad Crashinfo 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: R 32 1001 FC 73 00000000 78288970 filename 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: cause pc epc and 00: 05: 29: %DUMPER-3 -REGISTERS_INFO: 16427: R 36 00800020 722 B 3 F 5 C 0000 00: 05: 29: %DUMPER-3 -TRACE_BACK_INFO: 16427: (libc. so+0 x 2 EF 5 C) (libc. so+0 x 12450) (s 72033_rp- location adventerprisek 9_wan-58 -dso-p. so+0 x 17 C 00) (libc. so+0 x 127 AC) Core 00: 05: 30: %DUMPER-3 -CRASHINFO_FILE_NAME: 16427: Crashinfo for process sbin/tcp. proc at filename bootflash: /crashinfo_tcp. proc-20050910 -012841 and 00: 05: 30: %DUMPER-3 -CORE_FILE_NAME: 16427: Core for process sbin/tcp. proc at disk 0: /tcp. proc. 012842. dmp. Z 00: 05: 31: %DUMPER-5 -DUMP_SUCCESS: 16427: Core dump success location 00: 05: 31: %SYSMGR-3 -ABNORMTERM: tcp. proc: 1 (jid 91) abnormally terminated, restarted scheduled © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -73

Example of What Files to Collect After Crash For previous slide tcp. process crash

Example of What Files to Collect After Crash For previous slide tcp. process crash you need to collect the following files: Cat 6 K#dir bootflash: Directory of bootflash: / 4 -rw- 139528 Sep 9 2008 19: 28: 42 -06: 00 crashinfo_tcp. proc-20050910 -012841 65536000 bytes total (64979832 bytes free) Cat 6 K#dir disk 0: Directory of disk 0: / 1 -rw 111923344 vz. PP_R 31_INTEG_050829 2 -rw 112078968 vz. pikespeak_r 31_0908_1 3 -rw 107608208 99. SX 1010 4 -rw 131517 Sep 1 2008 10: 26: 54 -06: 00 s 72033 -adventerprisek 9_wan_dbg- Sep 9 2008 14: 50: 54 -06: 00 s 72033 -adventerprisek 9_wan_dbg- Sep 9 2008 18: 50: 04 -06: 00 s 72033 -adventerprisek 9_wan-vz. 122 - Sep 9 2008 19: 28: 42 -06: 00 tcp. proc. 012842. dmp. Z 512040960 bytes total (180281344 bytes free) Both Crashinfo filenames filename encode the and process that location crashed © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -74

Best Practices © 2006, Cisco Systems, Inc. CAT 6 KS v 2. 0— 2

Best Practices © 2006, Cisco Systems, Inc. CAT 6 KS v 2. 0— 2 -75

Overview of Reliability in the Cisco Catalyst 6500 Series Switch © 2007 Cisco Systems,

Overview of Reliability in the Cisco Catalyst 6500 Series Switch © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -76

Cisco 6500 System Reliability Resiliency (Layer 2 or Layer 3): SSO, NSF Fault Detection

Cisco 6500 System Reliability Resiliency (Layer 2 or Layer 3): SSO, NSF Fault Detection GOLD Operations Network Element Redundancy Soft HA OIR of Line Cards Redundancy OIR of Supervisor OIR of PSU, Modules TDR NAIS Network Resilience Operational Processes Switch Fabric Service Modules Clock Fans Power Supplies Protection Schemes: HSRP/GLBP/VRRP, Ether. Channel, 802. 1 s/w, PVST+ © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -77

Using Route Processor Redundancy and RPR+ © 2007 Cisco Systems, Inc. All rights reserved.

Using Route Processor Redundancy and RPR+ © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -78

RPR and RPR+ The Catalyst 6500 supports failover between two supervisors installed in the

RPR and RPR+ The Catalyst 6500 supports failover between two supervisors installed in the switch. Two fault tolerant modes can be configured; Route Processor Redundancy (RPR) and Route Processor Redundancy Plus (RPR+). Catalyst 6500 RPR+ requires both supervisors to be the same, and both must run the same IOS image. RPR provides failover generally within 2 to 4 minutes RPR+ provides failover generally within 30 -60 seconds © 2007 Cisco Systems, Inc. All rights reserved. Sup 720 -A Sup 720 -B PSU CAT 6 KS v 2. 0— 2 -79

Configuring RPR and RPR+ Configuration of RPR and RPR+ is achieved by entering redundancy

Configuring RPR and RPR+ Configuration of RPR and RPR+ is achieved by entering redundancy configuration mode, then choosing the mode you wish to run. 6500# conf t Enter configuration commands, one per line. End with CNTL/Z. 6500(config)# redundancy 6500(config-red)# mode ? rpr Route Processor Redundancy rpr-plus Route Processor Redundancy Plus RPR+ 6500(config-red)# mode rpr-plus © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -80

Confirming RPR, RPR+ Status The redundant configuration status of the switch can be viewed

Confirming RPR, RPR+ Status The redundant configuration status of the switch can be viewed using the following command: 6500# show redundancy states my state = 13 -ACTIVE peer state = 1 -DISABLED Mode = Simplex Unit = Primary Unit ID = 5 Redundant State Configured Redundancy Mode (Operational) = Route Processor Redundancy Plus Redundancy Mode (Configured) = Route Processor Redundancy Plus Split Mode = Disabled Manual Swact = Disabled Reason: Simplex mode Communications = Down Reason: Simplex mode client count = 11 client_notification_TMR = 30000 milliseconds keep_alive TMR = 9000 milliseconds keep_alive count = 0 keep_alive threshold = 18 RF debug mask = 0 x 0 © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -81

Catalyst 6500 Supervisor Redundancy Using SSO and NSF © 2006, Cisco Systems, Inc. CAT

Catalyst 6500 Supervisor Redundancy Using SSO and NSF © 2006, Cisco Systems, Inc. CAT 6 KS v 2. 0— 2 -82

SSO Overview © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v

SSO Overview © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -83

SSO Overview • Active and standby supervisors run in synchronized mode. • Redundant MSFC

SSO Overview • Active and standby supervisors run in synchronized mode. • Redundant MSFC is in hot-standby mode. Sup MSFC PFC Active Supervisor • Switch processors synchronize STP, port and VTP states. • PFCs synchronize Layer 2 and Layer 3 FIB, Netflow and ACL tables. • DFCs are not repopulated with Layer 2 and Layer 3 FIB, Netflow and ACL tables. • Very fast failover (0 to 3 seconds) between supervisors but still need to rebuild routes on external routers. Sup MSFC Standby Supervisor Line Card © 2007 Cisco Systems, Inc. All rights reserved. PFC DFC DFC CAT 6 KS v 2. 0— 2 -84

SRM with SSO Overview Active Standby RP RP SP SP Active STP, Port, VTP

SRM with SSO Overview Active Standby RP RP SP SP Active STP, Port, VTP States PFCx Layer 2 and Layer 3 FIB, Netflow, ACL Tables DFCx Layer 2 and Layer 3 FIB, Netflow, ACL Tables Before Failover © 2007 Cisco Systems, Inc. All rights reserved. New RP builds table and reestablishes neighbor relationships. Layer 3 traffic forwards on last known FIB in hardware. DFCs not affected by supervisor failover Layer 2 and Layer 3 FIB, Netflow, ACL Tables After Failover CAT 6 KS v 2. 0— 2 -85

NSF Overview Catalyst 6500 NSF-aware neighbor Linecard 1 Linecard 3 Failover time: 0 to

NSF Overview Catalyst 6500 NSF-aware neighbor Linecard 1 Linecard 3 Failover time: 0 to 3 seconds NSF-aware neighbor Linecard 3 Linecard 4 Primary Supervisor 720 Redundant Supervisor 720 NSFcapable router Linecard 7 • Predictable traffic path • No route flap Linecard 8 Linecard 9 PSU 1 PSU 2 • NSF-aware neighbors do not reconverge. • NSF-capable router rebuilds Layer 3 routing protocol database from • NSF-aware neighbors help the neighbor. NSF-capable router restart. • Data is forwarded in hardware • NSF-aware neighbors continue based on preswitchover CEF forwarding traffic to the restarting router. information while routing protocols reconverge. © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -86

NSF Configuration To configure SSO to use NSF: 6500(config)# redundancy 6500(config-red)# mode sso To

NSF Configuration To configure SSO to use NSF: 6500(config)# redundancy 6500(config-red)# mode sso To verify the configuration: 6500# show redundancy states © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -87

BGP NSF Configuration To configure BGP NSF: 6500(config)# router bgp as-number 6500(config-router)# bgp graceful-restart

BGP NSF Configuration To configure BGP NSF: 6500(config)# router bgp as-number 6500(config-router)# bgp graceful-restart To verify the configuration: 6500# show ip bgp neighbors x. x © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -88

OSPF NSF Configuration To configure OSPF NSF: 6500(config)# router ospf process. ID 6500(config-router)# nsf

OSPF NSF Configuration To configure OSPF NSF: 6500(config)# router ospf process. ID 6500(config-router)# nsf To verify the configuration: 6500# show ip ospf © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -89

ISIS NSF Configuration To configure ISIS NSF: 6500(config)# router isis tag 6500(config-router)# nsf [cisco

ISIS NSF Configuration To configure ISIS NSF: 6500(config)# router isis tag 6500(config-router)# nsf [cisco | ietf] To verify the configuration: 6500# show running-config 6500# show isis nsf © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -90

EIGRP NSF Configuration To configure EIGRP NSF: 6500(config)# router eigrp as-number 6500(config-router)# nsf To

EIGRP NSF Configuration To configure EIGRP NSF: 6500(config)# router eigrp as-number 6500(config-router)# nsf To verify the configuration: 6500# show running-config 6500# show ip routing © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -91

Redundancy Modes RPR 2 -4 minutes All releases RPR+ 30 -60 seconds All releases

Redundancy Modes RPR 2 -4 minutes All releases RPR+ 30 -60 seconds All releases SRM with SSO 0 -3 seconds 12. 2(17 b)SXA Layer 2 12. 2(17 d)SXB 0 -3 seconds 12. 2(18)SXD NSF with SSO layers 2 -4 © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -92

Reasons to Use Storm Control © 2007 Cisco Systems, Inc. All rights reserved. CAT

Reasons to Use Storm Control © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -93

Do. S Protection: Control Plane Protection High rates of link level broadcast traffic impact

Do. S Protection: Control Plane Protection High rates of link level broadcast traffic impact switch CPU and the stability of the network: CONST_DIAG-SP-6 -HM_MESSAGE: High traffic/CPU util seen on Module 5 [SP=40%, RP=99%, Traffic=0%] • Storm control limits the rate of broadcast traffic received by the distribution switch. • Broadcast traffic within the local switch remains unrestrained. • Local subnet devices may still be affected, but the network remains alive. © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -94

Do. S Protection: Storm Control Storm control is also known as broadcast suppression: Dropped

Do. S Protection: Storm Control Storm control is also known as broadcast suppression: Dropped Packets Quantity • limits the volume of broadcast, multicast and/or unicast traffic Threshold • protects the network from intentional and unintentional flood attacks and STP loops • limits the combined rate of broadcast and multicast traffic to normal peak loads 0 2 1 3 Time Seconds © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -95

Protecting the Distribution Layer Configure storm control on distribution downlinks. Limit broadcast and multicast

Protecting the Distribution Layer Configure storm control on distribution downlinks. Limit broadcast and multicast to 1. 0% of a Gig. E link to ensure distribution CPU remains in the safe zone. ! Enable storm control Broadcast Traffic CPU Impact Conservative Max Sup 720 CPU Load © 2007 Cisco Systems, Inc. All rights reserved. storm-control broadcast level 1. 0 storm-control multicast level 1. 0 CAT 6 KS v 2. 0— 2 -96

Configuring Storm Control Storm control suppression is configured in interface configuration mode as follows:

Configuring Storm Control Storm control suppression is configured in interface configuration mode as follows: 6500(config-if)# storm-control ? broadcast Broadcast address storm control multicast Multicast address storm control unicast Unicast address storm control 6500(config-if)# storm-control broadcast ? level Set storm suppression level on this interface 6500(config-if)# storm-control broadcast level ? <0 - 100> Enter Integer part of storm suppression level 6500(config-if)# storm-control multicast level ? <0 - 100> Enter Integer part of storm suppression level 6500(config-if)# storm-control unicast level ? <0 - 100> Enter Integer part of storm suppression level © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -97

Configuring Storm Control (Cont. ) Statistics for storm control suppression can be displayed as

Configuring Storm Control (Cont. ) Statistics for storm control suppression can be displayed as follows: 6500# show interface g 1/9 counters broadcast Port Gi 1/9 Total. Supp. Discards 1033 6500# show interface g 1/9 counters multicast Port Gi 1/9 Total. Supp. Discards 12 6500# show interface g 1/9 counters unicast Port Total. Supp. Discards Gi 1/9 204 6500# © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -98

Fault Management © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v

Fault Management © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -99

Fault Management on the Catalyst 6500 Improving resiliency in redundant and nonredundant deployments: Fault

Fault Management on the Catalyst 6500 Improving resiliency in redundant and nonredundant deployments: Fault Management Misconfigured system Memory corruption Software inconsistency Hardware faults • • Detection Isolation Correction Enhanced System Stability Enhanced Network Stability Software enhancements for better fault detection Mechanisms to detect and correct soft failures in the system Proactive fault detection and isolation Routines to detect failures that the runtime software may not be able to detect © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -100

Fault Management Framework Reports Faults and Takes Action Call Home, Syslogs, SNMP EEM Automates

Fault Management Framework Reports Faults and Takes Action Call Home, Syslogs, SNMP EEM Automates actions based on events that have occurred; TCL-based configurable fault policy GOLD Detects system problems proactively © 2007 Cisco Systems, Inc. All rights reserved. Soft High Availability Troubleshooting Detects and correct soft failures Provides intelligent troubleshooting and debugging mechanisms CAT 6 KS v 2. 0— 2 -101

Generic Online Diagnostics © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS

Generic Online Diagnostics © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -102

Generic Online Diagnostics GOLD implements a number of health checks both at system startup

Generic Online Diagnostics GOLD implements a number of health checks both at system startup and while the system is running. GOLD complements existing HA features like NSF/SSO running in the background, and alerting HA features when disruption occurs. Bootup Diagnostics Check operational status of components Run Time Diagnostics On-demand diagnostics statically triggered by an administrator Scheduled diagnostics to run at a specific time Non-disruptive health diagnostics running in the background © 2007 Cisco Systems, Inc. All rights reserved. Diagnostic Results SYSLOG Message %DIAG-SP-3 -MAJOR: Module 2: Online Diagnostics detected a Major Error. Please use diagnostic Module 2' to see test results. Diagnostic Action Invoke action to resolve issue i. e. reset component, invoke HA action, Call. Home, etc CAT 6 KS v 2. 0— 2 -103

GOLD Fault Detection Framework for high availability : Proactive diagnostics serve as high availability

GOLD Fault Detection Framework for high availability : Proactive diagnostics serve as high availability triggers and take faulty hardware out of service. Boot Up Diagnostics • Quick go and no-go tests • Disruptive and nondisruptive tests Health Monitoring Diagnostics • Periodic background tests • Nondisruptive tests Troubleshooting Tools: Reactive diagnostics for troubleshooting © 2007 Cisco Systems, Inc. All rights reserved. On-demand Diagnostics and Schedule Diagnostics • Can run all the tests • Include disruptive tests used in manufacturing CAT 6 KS v 2. 0— 2 -104

GOLD Test Suite Bootup Diagnostics: On-demand Diagnostics: • EARL learning tests (Sup & DFC)

GOLD Test Suite Bootup Diagnostics: On-demand Diagnostics: • EARL learning tests (Sup & DFC) • Exhaustive memory test • L 2 tests (channel, BPDU, capture) • Exhaustive TCAM search test • L 3 tests (IPv 4, IPv 6, MPLS) • Stress Testing • Span and multicast tests • All bootup and health monitoring tests can be run on-demand • CAM lookup tests (FIB, Net. Flow, Qo. S CAM) • Port loopback test (all cards) • Fabric snake tests Health Monitoring Diagnostics: • SP-RP inband ping test (Sup’s SP/RP, EARL(L 2&L 3), RW engine) Scheduled Diagnostics: • All bootup and health monitoring tests can be scheduled • Scheduled switch-over • Fabric channel health test (fabric enabled line cards) • Mac. Notification test (DFC line cards) • Non-disruptive loopback test • Scratch registers test (PLD & ASICs) © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -105

Q&A © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2.

Q&A © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -106

Trivia ¿Qué tienen en común la Copa Confederaciones FIFA con los Catalyst Switches de

Trivia ¿Qué tienen en común la Copa Confederaciones FIFA con los Catalyst Switches de Cisco? © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -107

Sesión de Preguntas y Respuestas El experto responderá verbalmente algunas de las preguntas que

Sesión de Preguntas y Respuestas El experto responderá verbalmente algunas de las preguntas que hayan realizado. Use el panel de preguntas y respuestas (Q&A) para preguntar a los expertos ahora © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -108

Nos interesa su opinión!!! Habrá un sorteo con los que llenen el questionario de

Nos interesa su opinión!!! Habrá un sorteo con los que llenen el questionario de evaluación Tres asistentes recibirán un Regalo sorpresa Para llenar la evaluación haga click en el link que está en el chat. También saldrá automáticamente al cerrar el browser de la sesión. © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -109

© 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0—

© 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -110

Próximo Webcast en portugués Tema: Resolución de problemas en el Session Initiation Protocol (SIP)

Próximo Webcast en portugués Tema: Resolución de problemas en el Session Initiation Protocol (SIP) Martes 6 de diciembre 7: 00 a. m. Ciudad de México 8: 30 a. m. Caracas 10: 00 a. m Bs. As. 2: 00 p. m. Madrid Michelle Jardim http: //tools. cisco. com/gems/customer. Site. do? MET HOD=E&LANGUAGE_ID=P&SEMINAR_CODE=S 17480& PRIORITY_CODE= © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -111

© 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0—

© 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -112

Respuesta a la Trivia ¿Qué tienen en común la Copa Confederaciones FIFA con los

Respuesta a la Trivia ¿Qué tienen en común la Copa Confederaciones FIFA con los Catalyst Switches de Cisco? En 1999, Cisco lanzó la familia de switches inteligentes multi-gigabit Cisco Catalyst 6000. Ese mismo año México se convierte en la primera nación que gana la copa confederaciones FIFA en casa. © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -113

Muchas gracias por su asistencia Por favor complete la encuesta de evaluación de este

Muchas gracias por su asistencia Por favor complete la encuesta de evaluación de este evento y gane premios © 2007 Cisco Systems, Inc. All rights reserved. CAT 6 KS v 2. 0— 2 -114