ElderUsr's Blog

This document will outline some basic troubleshooting steps and issues that I have found out over the years about 4500 Series Switches, specifically Supervisors 4-5, but it is mainly relevant for all models. Additional Reading: BRKCRS-3142 - Troubleshooting Cisco 4500 Series Switches Scope The scope of items that are being impacted, such as in an test environment 1 Core Switch, to two Distribution to then two Access switches per Distribution switch always keep in mind of where the issue is occurring and what is being impacted. Some of the situations below I will mention if its common for all devices to be impacted, or only certain ones. Please note that this is not necessarily Cisco's best practice, but it is how I have it setup when testing/experiences was issued. High CPU Process Troubleshooting Typical Causes: a) Multicast Traffic (IGMP) b) Spanning-Tree Traffic c) Consecutive Port Changes (Port-Flapping) Enabling CPU "Output" to a Wireshark Session ...

These files/documents are recommended studying material that I have found and gathered into a single location. This will be a live document, and updated with any new material found. This is for the 300-320 certification. As always, do your own research as some of this may eventually become out of date, and may be outside of the scope of the CCDP Arch certification and more driven towards CCDE. Videos  - Cisco Learning Network - Practical Network Design Fundamentals  - CBT Nuggets - Even though it says that it is 642-784, the bottom section 3.0 has been updated to reflect the most recent changes Books  - Designing for Cisco Network Service Architectures (ARCH) Foundation Learning Guide: CCDP ARCH 300-320 (4th Edition) - This can be purchased from Amazon or Cisco Press  - CCDE Study Guide - This can be purchased from Amazon/Cisco Press Supplementary Materials Campus  - Enterprise Campus 3.0 Architecture Overview  - HA Campus Network Design ...

Below is a set of Random Cisco & FortinetCommands that are common to be used and what it does: #[Cisco] Enabling Mac Filtering on Ports & auto-recovery for the port. switchport port-security switchport port-security mac-address switchport port-security maximum 1 errdisable recovery cause psecure-violation #[Cisco] Checking Hardware/CPU show module more crashinfo:data show processes cpu [history | sorted] show processes memory [sorted]   #[Fortinet] Showing information about Link-Monitoring in redundant links diag sys link-monitor status    

The below image outlines a combination of a few diagrams that was on Cisco's support website and I have taken them and placed them here for my own reference when working on trying to help understand the 802.1X Timers and which fields does what

Implementing 802.1X Using Windows Server 2012R2 & Cisco 4500 Series Switches Overview: This document is to outline how the configuration between Windows Server 2012 R2’s NPS Services and Cisco 4500 Series switches has been implemented. High Level Diagram:   Requirements: Windows Server 2012 R2 with NPS Server installed Windows Server 2012 R2 with CA Services Windows AD Environment Cisco 4500 Series Switches Windows 7-10 Clients to connect NPS Configuration: 1. This assumes the above requirement that the NPS Service has already been installed on Windows Server 2012 R2 2. Disable all existing Policies under Connection Request Policies and Network Policies as you will be making your own, except one that states “Catch All” with the below parameters: 3. You will then need to add in a new Radius Client to have Policies built around. Friendly Name will be used going forward for the Policies for referencing the document. 4. Once completed...

This will be the first post of a bunch outlining a bunch of configurations and setups that I have performed in the past few years since updating this blog. TACACS Configuration: aaa authentication login default group tacacs+ local aaa authentication enable default group tacacs+ enable aaa authorization config-commands aaa authorization commands 0 default group tacacs+ local aaa authorization commands 1 default group tacacs+ local aaa authorization commands 7 default group tacacs+ local aaa authorization commands 15 default group tacacs+ local aaa accounting commands 0 default start-stop group tacacs+ aaa accounting commands 1 default start-stop group tacacs+ aaa accounting commands 7 default start-stop group tacacs+ aaa accounting commands 15 default start-stop group tacacs+ aaa accounting network 0 start-stop group tacacs+ aaa accounting network 15 start-stop group tacacs+ aaa accounting connection 0 start-stop group tacacs+ aaa accounting connection 15 start-stop group tacacs+ t...