Cisco ASA: How To Create A Port-Channel On A 5512 Running Version 9.1(2)

I was asked here recently to bond two ports on an ASA 5512 (version 9.1(2)) for added throughput and also redundancy to the ASA from the stacked core switch.  Turns out that Cisco will do that, and its not to shabby either.  Just add a port-channel and do the config under it.  I think I had to go on the two individual interfaces first and put the channel-group command, if I recall correctly.  Then go into the port-channel interface to do the three commands:  nameif, security-level, and ip address.  See below.

interface GigabitEthernet0/1
 channel-group 1 mode on
 no nameif
 no security-level
 no ip address
!
interface GigabitEthernet0/2
 channel-group 1 mode on
 no nameif
 no security-level
 no ip address

interface Port-channel1
 nameif Inside
 security-level 100
 ip address 10.10.1.1 255.255.255.0 

Brocade ICX6610 Switch Stacking Cables: A Visual Connection Diagram

I think I did this with one side before, but here is a reminder on how to connect both sides of stacking in a pair of ICX6610s.  It goes like this below.  Just follow the colors.

Dont Be Hate'n

Matthew 5:22.
Maybe if we follow the 'love your neighbor as yourself' a little closer, Jesus would not have said this.  I guess it does get back to loving people.
I don't mean the sin people do, or the lies that are believed by people.  I just mean people.

Pic Of The Week: Nexus7K

Check Point: Power Switch Inconsistancy

Check Point makes a good firewall, but I dont understand this below.  I came up on a customer with two 4200s and a management station.  That management station is pictured first, then the two 4200s.  Why do they do the power switch to look differently?  These two units are in the "ON" position...  Seems odd to me.

Just What It Takes Sometimes

Sometimes when you are on the road, you just have to work after hours and in the hotel room.  I'm no different.  My hotel/lab setup for getting a small core ready.  Again, stacked Brocade 6610s for this one.

The "Definately Alabama" Section Of The Blog

Just FYI, I did decide to do the  "Definately Alabama" section of this blog. It's on the right side along with all the other vendors and such. For all the good, bad and funny here in Alabama.

Brocade Switch: How To Put On A Premium License On A Stacked ICX6610

In order to do some of the advanced features on the ICX6610 switch, you have to have a Premium license.  In my case, I needed PBR (policy based routing).  So, I get the .xml license file and here is how I put it on.  First, lets look at a show version:

Company6610#sh ver
  Copyright (c) 1996-2014 Brocade Communications Systems, Inc. All rights reserved.
    UNIT 1: compiled on Jun 13 2014 at 16:33:11 labeled as FCXR08010c1
                (9642047 bytes) from Primary FCXR08010c1.bin
        SW: Version 08.0.10c1T7f3
    UNIT 2: compiled on Jun 13 2014 at 16:33:11 labeled as FCXR08010c1
                (9642047 bytes) from Primary FCXR08010c1.bin
        SW: Version 08.0.10c1T7f3
  Boot-Monitor Image size = 370695, Version:10.1.00T7f5 (grz10100)
  HW: Stackable ICX6610-24
==========================================================================
UNIT 1: SL 1: ICX6610-24 24-port Management Module
         Serial  #: BXXXXXXXXX
         License: ICX6610_BASE_ROUTER_SOFT_PACKAGE   (LID: XXXXXXXX)
         P-ENGINE  0: type E02B, rev 01
==========================================================================
UNIT 1: SL 2: ICX6610-QSFP 10-port 160G Module
==========================================================================
UNIT 1: SL 3: ICX6610-8-port Dual Mode(SFP/SFP+) Module
==========================================================================
UNIT 2: SL 1: ICX6610-24 24-port Management Module
         Serial  #: BXXXXXXXXX
         License: ICX6610_BASE_ROUTER_SOFT_PACKAGE   (LID: XXXXXXXX)
         P-ENGINE  0: type E02B, rev 01
==========================================================================
UNIT 2: SL 2: ICX6610-QSFP 10-port 160G Module
==========================================================================
UNIT 2: SL 3: ICX6610-8-port Dual Mode(SFP/SFP+) Module
==========================================================================
  800 MHz Power PC processor 8544E (version 0021/0023) 400 MHz bus
65536 KB flash memory
  512 MB DRAM
STACKID 1  system uptime is 1 days 16 hours 7 minutes 14 seconds
STACKID 2  system uptime is 1 days 16 hours 7 minutes 13 seconds
The system : started=warm start  reloaded=by "reload"
My stack unit ID = 1, bootup role = active


Notice above the highlighted.  Now lets upgrade the license.

Company6610#copy tftp license 10.241.6.150 XXXXXXXXXXXXXXXXXXXXXx.xml unit 2
Company6610#Flash Memory Write (8192 bytes per dot) .
Copy Software License from TFTP to Flash Done.

Copy software license to stack unit 2 success
Flash Memory Write (8192 bytes per dot) .
U2-MSG: U2 triggers an election due to license change
T=1d16h5m49.2: Election, was active, no change, ID=1, pri=255, 2U(1-2), A=u1, nbr#=1 1, reason: u2: license-chg, ,

Company6610#sh ver
  Copyright (c) 1996-2014 Brocade Communications Systems, Inc. All rights reserved.
    UNIT 1: compiled on Jun 13 2014 at 16:33:11 labeled as FCXR08010c1
                (9642047 bytes) from Primary FCXR08010c1.bin
        SW: Version 08.0.10c1T7f3
    UNIT 2: compiled on Jun 13 2014 at 16:33:11 labeled as FCXR08010c1
                (9642047 bytes) from Primary FCXR08010c1.bin
        SW: Version 08.0.10c1T7f3
  Boot-Monitor Image size = 370695, Version:10.1.00T7f5 (grz10100)
  HW: Stackable ICX6610-24
==========================================================================
UNIT 1: SL 1: ICX6610-24 24-port Management Module
         Serial  #: BXXXXXXXXX
         License: ICX6610_BASE_ROUTER_SOFT_PACKAGE   (LID: XXXXXXXX)
         P-ENGINE  0: type E02B, rev 01
==========================================================================
UNIT 1: SL 2: ICX6610-QSFP 10-port 160G Module
==========================================================================
UNIT 1: SL 3: ICX6610-8-port Dual Mode(SFP/SFP+) Module
==========================================================================
UNIT 2: SL 1: ICX6610-24 24-port Management Module
         Serial  #: BXXXXXXXXX
         License: ICX6610_PREM_ROUTER_SOFT_PACKAGE   (LID: XXXXXXXX)
         P-ENGINE  0: type E02B, rev 01
==========================================================================
UNIT 2: SL 2: ICX6610-QSFP 10-port 160G Module
==========================================================================
UNIT 2: SL 3: ICX6610-8-port Dual Mode(SFP/SFP+) Module
==========================================================================

Again, notice the highlighted text for unit 2.  Done.  Now lets do unit 1.
Company6610#copy tftp license 10.241.6.150 XXXXXXXXXXXXXXXXXXXXXx.xml unit 1
Company6610#Flash Memory Write (8192 bytes per dot) .
Copy Software License from TFTP to Flash Done.
U1 triggers an election due to license change
T=1d16h7m55.2: Election, was active, no change, ID=1, pri=255, 2U(1-2), A=u1, nbr#=1 1, reason: u1: license-chg, ,

Now lets do the show version:
Company6610#sh ver
  Copyright (c) 1996-2014 Brocade Communications Systems, Inc. All rights reserved.
    UNIT 1: compiled on Jun 13 2014 at 16:33:11 labeled as FCXR08010c1
                (9642047 bytes) from Primary FCXR08010c1.bin
        SW: Version 08.0.10c1T7f3
    UNIT 2: compiled on Jun 13 2014 at 16:33:11 labeled as FCXR08010c1
                (9642047 bytes) from Primary FCXR08010c1.bin
        SW: Version 08.0.10c1T7f3
  Boot-Monitor Image size = 370695, Version:10.1.00T7f5 (grz10100)
  HW: Stackable ICX6610-24
==========================================================================
UNIT 1: SL 1: ICX6610-24 24-port Management Module
         Serial  #: BXXXXXXXXX
         License: ICX6610_PREM_ROUTER_SOFT_PACKAGE   (LID: XXXXXXXX)
         P-ENGINE  0: type E02B, rev 01
==========================================================================
UNIT 1: SL 2: ICX6610-QSFP 10-port 160G Module
==========================================================================
UNIT 1: SL 3: ICX6610-8-port Dual Mode(SFP/SFP+) Module
==========================================================================
UNIT 2: SL 1: ICX6610-24 24-port Management Module
         Serial  #: BXXXXXXXXX
         License: ICX6610_PREM_ROUTER_SOFT_PACKAGE   (LID: XXXXXXXX)
         P-ENGINE  0: type E02B, rev 01
==========================================================================
UNIT 2: SL 2: ICX6610-QSFP 10-port 160G Module
==========================================================================
UNIT 2: SL 3: ICX6610-8-port Dual Mode(SFP/SFP+) Module
==========================================================================


Done!

This Is A Little Thought Provoking...

This will make you think a little:
Zephaniah 1:12-18

“I will search with lanterns in Jerusalem’s darkest corners to punish those who sit complacent in their sins. They think the Lordwill do nothing to them, either good or bad. So their property will be plundered, their homes will be ransacked. They will build new homes but never live in them. They will plant vineyards but never drink wine from them.

“That terrible day of theLord is near. Swiftly it comes—a day of bitter tears, a day when even strong men will cry out. It will be a day when theLord’s anger is poured out—a day of terrible distress and anguish, a day of ruin and desolation, a day of darkness and gloom, a day of clouds and blackness, a day of trumpet calls and battle cries. Down go the walled cities and the strongest battlements!

“Because you have sinned against the Lord, I will make you grope around like the blind. Your blood will be poured into the dust, and your bodies will lie rotting on the ground.”

Your silver and gold will not save you on that day of theLord’s anger. For the whole land will be devoured by the fire of his jealousy. He will make a terrifying end of all the people on earth.
(Zephaniah 1:12-18)

Cool Pic Of The Week

Anyone know where this is?

Cisco Switch: Verifying MTU/Jumbo Frames

I had a situation today where a server guy came to the network department and said that something was wrong with the network.  He could not get jumbo frames to pass from one server to another.  I think the network guys had been through it already with this server guy, but essentially the network guys had told him (and verified) that jumbo frames where enabled already on the Cisco 3750-X switches.  When I was asked to get involved in this, I verified exactly what the network guy had told the server guy.  Doing a 'show system mtu" proved it.
One other place you can do this is on the interface of the Gig connection.  Below, you can see where I look at the interface where the server is connected (there are more in this case, just one for this post) and you can see what the MTU is set to for that interface.  Its a good place to look when verifying the network side of things.
ESXstack#sh int gig 1/0/35
GigabitEthernet1/0/35 is up, line protocol is up (connected)
  Hardware is Gigabit Ethernet, address is 9c4e.2061.XXXX (bia 9c4e.2061.XXXX)
  MTU 9000 bytes, BW 1000000 Kbit, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX
  input flow-control is off, output flow-control is unsupported
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input never, output 00:00:25, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 1000 bits/sec, 1 packets/sec
     45275885 packets input, 13859407503 bytes, 0 no buffer
     Received 85734 broadcasts (33608 multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 33608 multicast, 0 pause input
     0 input packets with dribble condition detected
     144105562 packets output, 37412846063 bytes, 0 underruns
     0 output errors, 0 collisions, 1 interface resets
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 PAUSE output
     0 output buffer failures, 0 output buffers swapped out

Definitely Alabama, Probably Mississippi Too

My wife showed me this and I couldn't pass this up sharing with y'all.  I think I could do a whole section of "only in Alabama" with some of the things I come across. Everyone has heard of a "chest of drawers", right?

Stacking More Cisco 3750-X Switches For More Port Density

These are pretty cool.  You just add the stacking cables in and plug in switch 2.  The stack builds itself.  Pretty nifty.  I'm not a fan of the performance specs of this switch, but Cisco does do some things right.

This Neat Little Tool...

I'm not sure what this thing is called, but I have only ever seen two of them in my career.  They don't seem to be as common as I think they should be, but this little tool pictured below will help you get those pesky little clips in so that you screw your network gear into the racks.  Literally, it takes less than a second to get these clips in.  All it is really is just a piece of metal shaped in such a way to slip in between the rack post and clip to where is pinches the clip brace for you.  Really good idea by someone.  Someone who got tired of trying to deal with those clips no doubt.

These are the clips Im talking about:

Ok, so I couldn't demonstrate this by myself, but I'm trying to convey how this thing works in the below picture.  Just pull the tool through.

Worship, In Song

Take 5 minutes.  Look, and listen carefully.
https://www.youtube.com/watch?v=QGlTzH9xkXQ

Peanut Pic Of The Week

Who Came Up With This Design???

I really dislike these ends, pictured below, on these patch cables.  When they are plugged into a switch, they are nearly impossible to get out, especially in tight rack spaces.  The end opposite the tab are hard plastic, that does not bend.  Terrible design...

Hypervisor: "Hyper-V cannot be installed: The hypervisor is already running." --By Babak Hoseini

Another great posting by my friend Babak Hoseini below.  Thank you for contributing Babak.  ~~Shane Killen

There is a module in Windows 2008 and 2012 that called hypervisor. The hypervisor is responsible for abstracting the computer’s hardware and creating multiple virtualized hardware environments, called VMs (Virtual Machine). You can install and run an operating system on each VM and each VM has its own hardware configuration. If you want to install Hyper-V on virtual environments such as VMware Workstation, the following message appears preventing you from continuing the process: Hyper-V cannot be installed: The hypervisor is already running.

It’s important to know that Hyper-V doesn’t work fine on virtual environments such as VMware Workstation. I recommend you to install Windows 2008 or 2012 on a physical server then add Hyper-V role.

There is a solution for fixing this problem that isn’t a good idea because it’s not supported by Microsoft, but it‘s appropriate for learning Hyper-V.

Open Power Shell and type this command:

Enable-WindowsOptionalFeature –Online -FeatureName Microsoft-Hyper-V –All –NoRestart

Do not restart server and run the following command:

Install-WindowsFeature RSAT-Hyper-V-Tools –IncludeAllSubFeature

If you want to install Cluster Service, run::

Install-WindowsFeature RSAT-Clustering -IncludeAllSubFeature

Installing Multipath I/O is optional. If you want to install it, run the following command:

Install-WindowsFeature Multipath-IO

Then restart the server. Now you can open Hyper-V console from Server Manager Console.

In the next post that I present, I will write about how to install Hyper-V on a physical server on GUI interface and creating VMs.

To be continued…

Cisco Voice: A Look Inside The MCS Business Edition Server

Just thought I would post what the inside looks like of this Business Edition server.

A Llittle Bit...

Galatians 5:9
It seems you can apply this verse to just about anything.  "A little yeast works through the whole batch of dough." I guess in this case, I'm thinking a little bit of sin works into the life of a person, probably more that we know.
Just like if you have a gallon of white paint, and you put just a single drop of another color in and stir it up. It's no longer white after that.
Any thoughts on this?

Car Stacking

I have decided to change the "IT pic of the week" to just the "pic of the week". I'll still do IT related pictures, I just want to be open to other cool things like below.

Happy July 4th USA

The United States is off from work today. Cisco obviously did not make this in the States.

Added note***

At the 9/11 memorial today. I can't describe the emotions this brings back. 

When Buying That New Switch...

Have you ever seen, or been, those companies that will be looking for new switching gear?  Have you ever noticed the things that they look for in a switch?  From my experience, the #1 thing that 'most' (not all) companies look for is price.  I have seen many companies in the past purchase a new switch based solely on the price, simply because they do not know what else to consider when purchasing a new switch.  I recall one point in the past where a customer had two switch quotes in front of them.  One of them was $600 and the other was $5,500.  I remember his saying "They do the same thing, don't they?"  Open mouth and puke.  Well, if you mean only a connection point in the network, then I guess you are right.  However, there is much more to looking at switches than it being a "connection point" in the network.  I have four primary things I tell my customers they need to look at:
1.  Performance of the switch
2.  Features of the switch
3.  Price of the switch
4.  Five year future use of the switch

What are the performance specs of the switches you are comparing?  Have you compared the switches that are competing with each other in hardware performance specs?  Do the switches have the features you need for voice?  For security?  For special network configuration options?  In five years from now, will that switch serve your needs for the company?  NOW tell me that price should be your only consideration, and go home and rest easy knowing you did your company good service.

Another Cool Blog...

I just found this guy's blog the other day. It's worth looking at for the IT guy for sure. This is the kind of IT blogger I look for.
http://mishinevpa.blogspot.com
 by Pavel Mishinev
I'm adding this blog to my other "Other IT Blogs" page.

Brocade Switch: NTP Config

NTP is a good idea.  Here is how I configured it on a Brocade 6610 switch.

6610#config t
6610(config)#ntp
6610(config-ntp)#server 10.0.0.254