Snmp monitoring of errors on ethernet interfaces

//EtherLike-MIB
Align-Err 		1.3.6.1.2.1.10.7.2.1.2
FCS-Err 			1.3.6.1.2.1.10.7.2.1.3          
Single-Col		1.3.6.1.2.1.10.7.2.1.4          
Multi-Col			1.3.6.1.2.1.10.7.2.1.5       
Late-Col      1.3.6.1.2.1.10.7.2.1.8
Excess-Col    1.3.6.1.2.1.10.7.2.1.9
Carri-Sen     1.3.6.1.2.1.10.7.2.1.11          
SQETest-Err		1.3.6.1.2.1.10.7.2.1.6
Deferred-Tx   1.3.6.1.2.1.10.7.2.1.7     
IntMacTx-Err  1.3.6.1.2.1.10.7.2.1.10      
IntMacRx-Err  1.3.6.1.2.1.10.7.2.1.16
Symbol-Err		1.3.6.1.2.1.10.7.2.1.18

Runts         1.3.6.1.4.1.9.9.276.1.1.1.1.4 //CISCO-IF-EXTENSION-MIB
Giants				1.3.6.1.4.1.9.9.276.1.1.1.1.5 //CISCO-IF-EXTENSION-MIB
OutDiscards		1.3.6.1.2.1.2.2.1.19						//IF-MIB
OutDiscards		1.3.6.1.4.1.9.9.276.1.1.1.1.11	//CISCO-IF-EXTENSION-MIB 
Xmit-Err			1.3.6.1.2.1.2.2.1.20 	//IF-MIB

// wanted!
Rcv-Err       1.3.6.1.2.1.2.2.1.14 ?????	//IF-MIB
UnderSize     ???

3750/3560 interface policing/shaping/bandwidth limiting

I assume, that QoS is set up as it is dscribed in my previous .
All traffic is sorted to two different queues: iptv(dscp32) is put into queue1, other traffic is put into queue2. I want to police customers traffic into 20mbps, except iptv packets going towards the customer.
Ingress policing
Create policy map:

policy-map shape-20
  class class-default
    police 20M 400000 exceed-action drop

Assign policy map to interface:

interface FastEthernet1/0/2
 service-policy input shape-20

Egress policing
Unfortunately, policy-map containing police action cannot be attached to interface in egress direction. Egress queue2 is shaped to 20mbps:

interface FastEthernet1/0/2
 srr-queue bandwidth shape  0  10  0  0

10 is bandwidth weight and is calculated this way: [interface speed]/[bw weight] = [policed speed]. 100mbps/5=20mbps.

There is another possibility to limit egress speed in the interface. It will limit all egress queues to 25% of interface speed:

interface FastEthernet1/0/2
 srr-queue bandwidth limit 20
 srr-queue bandwidth shape  0  0  0  0 

Cisco 3500-XL and 2900-XL series commands

Detailed interface statistics including error counters.

show controllers ethernet-controller

Storm control per interface.

interface FastEthernet0/25port 
storm-control broadcast threshold rising 500 falling 50
port storm-control multicast threshold rising 500 falling 50

Catalyst 4500 SUP II-Plus sample qos configuration

Put iptv packets to priority transmit-queue3, all other packets to transmit-queue1
Priority queue can be only queue3. IPTV packets are marked with dscp32(0×20).

qos map dscp 32 to tx-queue 3
qos map dscp 0 1 2 3 4 5 6 7 to tx-queue 1
qos map dscp 8 9 10 11 12 13 14 15 to tx-queue 1
qos map dscp 16 17 18 19 20 21 22 23 to tx-queue 1
qos map dscp 24 25 26 27 28 29 30 31 to tx-queue 1
qos map dscp 33 34 35 36 37 38 39 to tx-queue 1
qos map dscp 40 41 42 43 44 45 46 47 to tx-queue 1
qos map dscp 48 49 50 51 52 53 54 55 to tx-queue 1
qos map dscp 56 57 58 59 60 61 62 63 to tx-queue 1

Полезные cisco oid snmp

1.3.6.1.2.1.4.20.1.2 – позвоялет получить связку ifindex и ip адреса на L3 интерфейсе.

CDP cluster. Управление свитчем по CDP, если через telnet/ssh не попасть

Switch#configure t
Switch(config)#cluster enable test
Switch(config)#do show cluster candidates

MAC Address Name Device Type PortIf FEC Hops SN PortIf FEC
0017.9509.bc80 call_center WS-C2960-48TT-L Gi0/2 1 0 Gi0/2

отсюда смотрим мак адрес
Switch(config)#cluster member 1 mac-address 0017.9509.bc80 password ПАРОЛЬ
Switch(config)#end
Switch#rcommand 1

call_center#
call_center#
call_center#
call_center#exit
И вот мы уже на удаленном свитче.

Выключение кластера:

Switch(config)#no cluster member 1
Switch(config)#no cluster enable
Switch(config)#
Switch#sh cluster
% Not a management cluster member
Switch#

Отправка debug messages в syslog свитчем Cisco

Чтобы включить отправку debug c cisco свитча в syslog севрер:
logging trap debugging

multicast через nat на cisco router

В глобальном конфиге:
ip multicast-routing
ip nat inside source list 100 interface GigabitEthernet0/0 overload
access-list 100 permit ip 192.168.1.0 0.0.0.255 any
access-list 100 deny ip any any

На внешнем интерфейсе:
ip nat outside
ip pim dense-mode

На внутреннем интерфейсе:
ip pim sparse-mode
ip nat inside
ip pim sparse-mode
ip igmp helper-address

Просмотр дропов на cisco

Для большинства свитчей: sh int summary
2950
#sh int g0/1 | i drop
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

2960
sh platform port-asic stats drop gigabitEthernet 0/1

3750, 3560
sh platform port-asic stats drop gigabitEthernet 1/0/1
sh int g0/1 | i drop
Статистика раскладывания пакетов по очередям порта
sh platform port-asic stats enqueue gigabitEthernet 1/0/№

ME-3400
sh platform port-asic stats drop gigabitEthernet 0/1

4900M
sh int g3/9 | i drop

troubleshooting drops on 4900M

show interfaces summary