|
|
@@ -0,0 +1,721 @@
|
|
|
+---
|
|
|
+title: Cisco troubleshooting
|
|
|
+description: loveni chyb a zakernosti nejen na switchich Cisco
|
|
|
+published: true
|
|
|
+date: 2024-12-18T13:00:38.232Z
|
|
|
+tags: switch, troubleshooting, cisco, pre-final
|
|
|
+editor: markdown
|
|
|
+dateCreated: 2024-11-19T06:38:09.988Z
|
|
|
+---
|
|
|
+
|
|
|
+# Sériák
|
|
|
+## Moudrý muž si na zakázku kde má Cisco vždycky bere sériák
|
|
|
+
|
|
|
+- téměř každý switch hodný svého jména má sériové rozhraní
|
|
|
+- u Cisca bývá vyveden RS232 na RJ45 pinout
|
|
|
+ - připojíme se modrým kabelem a usb-serial převodníkem
|
|
|
+
|
|
|
+- některé mají rovnou usb-serial převodník v sobě
|
|
|
+ - mini usb
|
|
|
+ - usb c
|
|
|
+- po připojení vyskočí ve Správci zařízení nový COM port
|
|
|
+
|
|
|
+- připojíme se zapomocí terminálu ([putty](https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html) je OK)
|
|
|
+ - všechny switche by měly umět rychlost 9600 bd/s
|
|
|
+ - většina umí víc, například 115200 bd/s
|
|
|
+- dvojím stiskem enteru necháme switch provést auto detekci rychlost
|
|
|
+ - nemusí být zaplá, ale většinou je
|
|
|
+- měl by naskočit login prompt
|
|
|
+- během re/bootu switch vypisuje sám od sebe
|
|
|
+ - většinou nižší rychlostí
|
|
|
+# Low level discovery
|
|
|
+- většina lepších síťových zařízení posílá na Layer 2 / MAC vrstvě packety, kterýma se identifikuje
|
|
|
+| zkratka | celé jméno | popis | |
|
|
|
+|---|---|---|---|---|
|
|
|
+| LLDP | Low level discovery protocol | spíš obecný a stručný |
|
|
|
+| CDP | Cisco Discovery protocol | preferujeme, máme ho puštěný na všech našich Cisco switchích, ale používájí ho i jiní výrobci |
|
|
|
+| MNDP | Mikrotik discovery protocol | ekvivalent výše zmíněných pro Mikrotik |
|
|
|
+## Z počítače
|
|
|
+- zobrazíme například ve Wiresharku
|
|
|
+
|
|
|
+- na obrázku vidíme
|
|
|
+ - Port ID
|
|
|
+ - číslo portu ve kterém jsme zapojení
|
|
|
+ - číslo VLAN
|
|
|
+ - jméno switche
|
|
|
+ - někdy je i popisek portu, managovací adresa switche
|
|
|
+ - ...
|
|
|
+## Z Cisco switche
|
|
|
+### CLI / terminál
|
|
|
+```
|
|
|
+show cdp neighbours
|
|
|
+show cdp neighbours detail
|
|
|
+show lldp neighbours
|
|
|
+```
|
|
|
+- příklad vystupu
|
|
|
+```
|
|
|
+sg350ivanek#sho cdp nei
|
|
|
+Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
|
|
|
+ S - Switch, H - Host, I - IGMP, r - Repeater, P - VoIP Phone
|
|
|
+ M - Remotely-Managed Device, C - CAST Phone Port,
|
|
|
+ W - Two-Port MAC Relay
|
|
|
+
|
|
|
+ Device ID Local Adv Time To Capability Platform Port ID
|
|
|
+ Interface Ver. Live
|
|
|
+------------------ ----------- ---- ------- ---------- ------------ -----------
|
|
|
+c2960x-lopatov.avt gi10 2 157 S I cisco GigabitEthe
|
|
|
+g.cz WS-C2960X-48 rnet1/0/38
|
|
|
+ FPS-L
|
|
|
+```
|
|
|
+- opět vidíme co je na druhé straně kabelu
|
|
|
+- Windows 11 se hlásí zapomocí LLDP, můžeme použít jako sondu
|
|
|
+### GUI / webové rozhraní
|
|
|
+- webové rozhraní nechávám sedět jen na https
|
|
|
+- webové rozhraní se mění, terminál zůstává stále stejný
|
|
|
+
|
|
|
+
|
|
|
+# Zálohy konfigurací
|
|
|
+- všechny switche co projdou IT mají někde zálohovanou konfiguraci
|
|
|
+ - včetně data kdy byla pořízena
|
|
|
+- je to užitečně nejen pro případ obnovy, ale i pro rychlé zorientování
|
|
|
+- v zakázkách to bývá pod realizace a IT
|
|
|
+- nejčastější problém je domnělý versus skutečný stav nastavení portů
|
|
|
+- zjistíme snadno
|
|
|
+## Komentované výňatky ze zálohy konfigurace Cisco Switche
|
|
|
+```
|
|
|
+config-file-header
|
|
|
+cabin-data3
|
|
|
+v3.4.0.17 / RCBS3.4_950_377_325
|
|
|
+```
|
|
|
+- kus vypuštěn
|
|
|
+```
|
|
|
+interface vlan 50
|
|
|
+ name 50control
|
|
|
+ ip address 192.168.50.9 255.255.255.0
|
|
|
+ ip igmp version 2
|
|
|
+```
|
|
|
+- nastavení VLAN
|
|
|
+ - včetně slovního popisu name
|
|
|
+```
|
|
|
+interface GigabitEthernet13
|
|
|
+ description 55dante
|
|
|
+ switchport access vlan 55
|
|
|
+!
|
|
|
+```
|
|
|
+- nastavení jednotlivých portů
|
|
|
+- takto vypadá access port
|
|
|
+ - "platí" to co je na řádku 24
|
|
|
+ - switchport access vlan CISLOVLAN
|
|
|
+ - to co je v description je slovní popis, nemusí "platit", když se stane chyba konfigurace
|
|
|
+```
|
|
|
+interface GigabitEthernet25
|
|
|
+ description trunk
|
|
|
+ switchport mode trunk
|
|
|
+```
|
|
|
+- ukázka trunkovacího portu
|
|
|
+# Spanning tree / smyčky
|
|
|
+- switche se živí, tím že posílají dál packety co jim přijdou
|
|
|
+- když si s packetem neví rady, tak ho pošlo "všude" (metafora)
|
|
|
+- pokud se zapojí "všude" do "vstupu" vznikne hrnečku vař
|
|
|
+- dřív to běžně shodilo celou síť, nyní máme technologie které tomu mají zabránít
|
|
|
+ - Spanning tree
|
|
|
+ - L2 loop protection
|
|
|
+ - ...
|
|
|
+- žádná technologie není všespásná
|
|
|
+ - čím složitější, tím větší prostor pro chybu konfigurace
|
|
|
+ - nebo bugy
|
|
|
+- i dneska lze udělat smyčku, ani se nemusíme moc snažit
|
|
|
+- ve chvíli kdy jsou switche ve smyčce nejde typicky nicmoc vyřešit vzdáleně
|
|
|
+## Jak poznáme smyčku
|
|
|
+- síť má výrazně snížený výkon nebo výpadky
|
|
|
+- přijde nám "divné" DHCP z jiné VLAN
|
|
|
+- většinou se to projeví dost rychle
|
|
|
+## Jak naložit se smyčkou
|
|
|
+### Rychlý způsob
|
|
|
+- protože se smyčka projeví většinou rychle, stačí se zamyslet na posledními změnami
|
|
|
+- postupně je vrátit zpátky
|
|
|
+- smyčka by měla zmizet
|
|
|
+### Pomalý způsob
|
|
|
+- rozděl a panuj
|
|
|
+- vypneme / rozpojíme celou síť
|
|
|
+ - postupně přidáváme
|
|
|
+ - tam kde naskočí potíž můžeme jet jednotlivé porty
|
|
|
+ - odpojíme problematickou část
|
|
|
+# PoE
|
|
|
+- aktivní PoE se první musí vyjednat po LLDP
|
|
|
+- ne všichni klienti rozumí všem switchům
|
|
|
+- někdy zařízení při startu berou příliš velký proud
|
|
|
+ - cisco typicky dává 450 mA
|
|
|
+- někdy Cisco vezme zařízení připojované postupně, ale při re/bootu, když naběhnou všechny najednou tak to nedá a zhodí celý PoE
|
|
|
+## Diagnostika
|
|
|
+- z terminálu
|
|
|
+```
|
|
|
+show power inline
|
|
|
+```
|
|
|
+- ukázka výstupu
|
|
|
+```
|
|
|
+Power-limit mode: Class based
|
|
|
+Usage threshold: 95%
|
|
|
+Trap: Disable
|
|
|
+Legacy Mode: Enable
|
|
|
+Inrush Test: Enable
|
|
|
+Guard-Band Value: Static (2W)
|
|
|
+
|
|
|
+Unit Module Nominal Allocated Temp SW PSE chipset
|
|
|
+ Power (W) Power (W) (C) Version HW Revision
|
|
|
+---- ---------------- --------- ------------ -------- ------------- -----------------
|
|
|
+1 CBS350-48P-4X 370 75 (20%) 41 0.2.0.34 TPS2388 - 0x40C4
|
|
|
+ TPS2388 - 0x40C4
|
|
|
+ TPS2388 - 0x40C4
|
|
|
+ TPS2388 - 0x40C4
|
|
|
+ TPS2388 - 0x40C4
|
|
|
+ TPS2388 - 0x40C4
|
|
|
+
|
|
|
+
|
|
|
+Interface Admin Oper Power (W) Class Device Priority
|
|
|
+---------- ---------- ----------- ----------------- ----- -------------- --------
|
|
|
+gi1/0/1 Never Off 0.0 - low
|
|
|
+gi1/0/2 Auto Searching 0.0 - low
|
|
|
+gi1/0/3 Never Off 0.0 - low
|
|
|
+gi1/0/4 Never Off 0.0 - low
|
|
|
+gi1/0/5 Auto On 1.81 0 low
|
|
|
+gi1/0/6 Never Off 0.0 - low
|
|
|
+...
|
|
|
+gi1/0/10 Auto Fault 0.0 - low
|
|
|
+...
|
|
|
+```
|
|
|
+- případne detail rozhraní (gi1/0/10 je jméno rozhraní, stačí zkopírovat z předchozího kroku)
|
|
|
+```
|
|
|
+show power inline gi1/0/10
|
|
|
+```
|
|
|
+- ukázka výstupu
|
|
|
+```
|
|
|
+
|
|
|
+Interface Admin Oper Power (W) Class Device Priority
|
|
|
+---------- ---------- ----------- ----------------- ----- -------------- --------
|
|
|
+gi1/0/10 Auto Fault 0.0 - low
|
|
|
+
|
|
|
+
|
|
|
+Port Status: Port is off. Short condition
|
|
|
+Port standard: 802.3AT
|
|
|
+Admin power limit (for port power-limit mode): 30.0 watts
|
|
|
+Time range:
|
|
|
+Operational power limit: 30.0 watts
|
|
|
+Negotiated power: 0.0 watts (None)
|
|
|
+Current (mA): 0
|
|
|
+Voltage(V): 0.0
|
|
|
+Overload Counter: 0
|
|
|
+Short Counter: 4597812
|
|
|
+Denied Counter: 0
|
|
|
+Absent Counter: 9
|
|
|
+Invalid Signature Counter: 0
|
|
|
+
|
|
|
+```
|
|
|
+- s tímhle portem je mrzení
|
|
|
+ - je ve zkratu co se týče PoE
|
|
|
+ - je vypnutý co se týče PoE
|
|
|
+## Rešení
|
|
|
+- rozděl a panuj
|
|
|
+ - najít nekompatabilní zařízení a přehodit na injektor
|
|
|
+- zkusit očistit porty po celé trase, jestli se nekde opravdu neděje zkrat
|
|
|
+- injektor má nevýhody
|
|
|
+ - další krabička
|
|
|
+ - zařízení se pak nedá na dálku resetovat
|
|
|
+ - není vidět jestli a kolik bere proudu
|
|
|
+# ukázka komplet low level discovery výstupu
|
|
|
+<details>
|
|
|
+<summary>Ukázky z různých zařízení</summary>
|
|
|
+Link Layer Discovery Protocol
|
|
|
+ Chassis Subtype = Locally assigned, Id: cbs350-it-test
|
|
|
+ 0000 001. .... .... = TLV Type: Chassis Id (1)
|
|
|
+ .... ...0 0000 1111 = TLV Length: 15
|
|
|
+ Chassis Id Subtype: Locally assigned (7)
|
|
|
+ Chassis Id: 6362733335302d69742d74657374
|
|
|
+ Port Subtype = MAC address, Id: a0:0f:37:2b:ca:f9
|
|
|
+ 0000 010. .... .... = TLV Type: Port Id (2)
|
|
|
+ .... ...0 0000 0111 = TLV Length: 7
|
|
|
+ Port Id Subtype: MAC address (3)
|
|
|
+ Port Id: Cisco_2b:ca:f9 (a0:0f:37:2b:ca:f9)
|
|
|
+ Time To Live = 120 sec
|
|
|
+ [Normal LLDPDU]
|
|
|
+ 0000 011. .... .... = TLV Type: Time to Live (3)
|
|
|
+ .... ...0 0000 0010 = TLV Length: 2
|
|
|
+ Seconds: 120
|
|
|
+ Telecommunications Industry Association TR-41 Committee - Media Capabilities
|
|
|
+ 1111 111. .... .... = TLV Type: Organization Specific (127)
|
|
|
+ .... ...0 0000 0111 = TLV Length: 7
|
|
|
+ Organization Unique Code: 00:12:bb (Telecommunications Industry Association TR-41 Committee)
|
|
|
+ Media Subtype: Media Capabilities (0x01)
|
|
|
+ Capabilities: 0x002f
|
|
|
+ .... .... .... ...1 = LLDP-MED Capabilities: Capable
|
|
|
+ .... .... .... ..1. = Network Policy: Capable
|
|
|
+ .... .... .... .1.. = Location Identification: Capable
|
|
|
+ .... .... .... 1... = Extended Power via MDI-PSE: Capable
|
|
|
+ .... .... ...0 .... = Extended Power via MDI-PD: Not capable
|
|
|
+ .... .... ..1. .... = Inventory: Capable
|
|
|
+ Class Type: Network Connectivity (4)
|
|
|
+ Ieee 802.3 - MAC/PHY Configuration/Status
|
|
|
+ 1111 111. .... .... = TLV Type: Organization Specific (127)
|
|
|
+ .... ...0 0000 1001 = TLV Length: 9
|
|
|
+ Organization Unique Code: 00:12:0f (Ieee 802.3)
|
|
|
+ IEEE 802.3 Subtype: MAC/PHY Configuration/Status (0x01)
|
|
|
+ Auto-Negotiation Support/Status: 0x03
|
|
|
+ .... ...1 = Auto-Negotiation: Supported
|
|
|
+ .... ..1. = Auto-Negotiation: Enabled
|
|
|
+ PMD Auto-Negotiation Advertised Capability: 0x6c01
|
|
|
+ .... .... .... ...1 = 1000BASE-T (full duplex mode): Capable
|
|
|
+ .... .... .... ..0. = 1000BASE-T (half duplex mode): Not capable
|
|
|
+ .... .... .... .0.. = 1000BASE-X (-LX, -SX, -CX full duplex mode): Not capable
|
|
|
+ .... .... .... 0... = 1000BASE-X (-LX, -SX, -CX half duplex mode): Not capable
|
|
|
+ .... .... ...0 .... = Asymmetric and Symmetric PAUSE (for full-duplex links): Not capable
|
|
|
+ .... .... ..0. .... = Symmetric PAUSE (for full-duplex links): Not capable
|
|
|
+ .... .... .0.. .... = Asymmetric PAUSE (for full-duplex links): Not capable
|
|
|
+ .... .... 0... .... = PAUSE (for full-duplex links): Not capable
|
|
|
+ .... ...0 .... .... = 100BASE-T2 (full duplex mode): Not capable
|
|
|
+ .... ..0. .... .... = 100BASE-T2 (half duplex mode): Not capable
|
|
|
+ .... .1.. .... .... = 100BASE-TX (full duplex mode): Capable
|
|
|
+ .... 1... .... .... = 100BASE-TX (half duplex mode): Capable
|
|
|
+ ...0 .... .... .... = 100BASE-T4: Not capable
|
|
|
+ ..1. .... .... .... = 10BASE-T (full duplex mode): Capable
|
|
|
+ .1.. .... .... .... = 10BASE-T (half duplex mode): Capable
|
|
|
+ 0... .... .... .... = Other or unknown: Not capable
|
|
|
+ Same in inverse (wrong) bitorder
|
|
|
+ 0... .... .... .... = 1000BASE-T (full duplex mode): Not capable
|
|
|
+ .1.. .... .... .... = 1000BASE-T (half duplex mode): Capable
|
|
|
+ ..1. .... .... .... = 1000BASE-X (-LX, -SX, -CX full duplex mode): Capable
|
|
|
+ ...0 .... .... .... = 1000BASE-X (-LX, -SX, -CX half duplex mode): Not capable
|
|
|
+ .... 1... .... .... = Asymmetric and Symmetric PAUSE (for full-duplex links): Capable
|
|
|
+ .... .1.. .... .... = Symmetric PAUSE (for full-duplex links): Capable
|
|
|
+ .... ..0. .... .... = Asymmetric PAUSE (for full-duplex links): Not capable
|
|
|
+ .... ...0 .... .... = PAUSE (for full-duplex links): Not capable
|
|
|
+ .... .... 0... .... = 100BASE-T2 (full duplex mode): Not capable
|
|
|
+ .... .... .0.. .... = 100BASE-T2 (half duplex mode): Not capable
|
|
|
+ .... .... ..0. .... = 100BASE-TX (full duplex mode): Not capable
|
|
|
+ .... .... ...0 .... = 100BASE-TX (half duplex mode): Not capable
|
|
|
+ .... .... .... 0... = 100BASE-T4: Not capable
|
|
|
+ .... .... .... .0.. = 10BASE-T (full duplex mode): Not capable
|
|
|
+ .... .... .... ..0. = 10BASE-T (half duplex mode): Not capable
|
|
|
+ .... .... .... ...1 = Other or unknown: Capable
|
|
|
+ Operational MAU Type: 1000BaseTFD - Four-pair Category 5 UTP, full duplex mode (0x001e)
|
|
|
+ System Name = cbs350-it-test
|
|
|
+ 0000 101. .... .... = TLV Type: System Name (5)
|
|
|
+ .... ...0 0000 1110 = TLV Length: 14
|
|
|
+ System Name: cbs350-it-test
|
|
|
+ Capabilities
|
|
|
+ 0000 111. .... .... = TLV Type: System Capabilities (7)
|
|
|
+ .... ...0 0000 0100 = TLV Length: 4
|
|
|
+ Capabilities: 0x0004
|
|
|
+ .... .... .... ...0 = Other: Not capable
|
|
|
+ .... .... .... ..0. = Repeater: Not capable
|
|
|
+ .... .... .... .1.. = Bridge: Capable
|
|
|
+ .... .... .... 0... = WLAN access point: Not capable
|
|
|
+ .... .... ...0 .... = Router: Not capable
|
|
|
+ .... .... ..0. .... = Telephone: Not capable
|
|
|
+ .... .... .0.. .... = DOCSIS cable device: Not capable
|
|
|
+ .... .... 0... .... = Station only: Not capable
|
|
|
+ .... ...0 .... .... = C-VLAN component: Not capable
|
|
|
+ .... ..0. .... .... = S-VLAN component: Not capable
|
|
|
+ .... .0.. .... .... = TPMR component: Not capable
|
|
|
+ Enabled Capabilities: 0x0004
|
|
|
+ .... .... .... ...0 = Other: Not capable
|
|
|
+ .... .... .... ..0. = Repeater: Not capable
|
|
|
+ .... .... .... .1.. = Bridge: Capable
|
|
|
+ .... .... .... 0... = WLAN access point: Not capable
|
|
|
+ .... .... ...0 .... = Router: Not capable
|
|
|
+ .... .... ..0. .... = Telephone: Not capable
|
|
|
+ .... .... .0.. .... = DOCSIS cable device: Not capable
|
|
|
+ .... .... 0... .... = Station only: Not capable
|
|
|
+ .... ...0 .... .... = C-VLAN component: Not capable
|
|
|
+ .... ..0. .... .... = S-VLAN component: Not capable
|
|
|
+ .... .0.. .... .... = TPMR component: Not capable
|
|
|
+ Management Address
|
|
|
+ 0001 000. .... .... = TLV Type: Management Address (8)
|
|
|
+ .... ...0 0000 1100 = TLV Length: 12
|
|
|
+ Address String Length: 5
|
|
|
+ Address Subtype: IPv4 (1)
|
|
|
+ Management Address: 10.1.10.174
|
|
|
+ Interface Subtype: ifIndex (2)
|
|
|
+ Interface Number: 100009
|
|
|
+ OID String Length: 0
|
|
|
+ IEEE 802.1 Chair - Port VLAN ID
|
|
|
+ 1111 111. .... .... = TLV Type: Organization Specific (127)
|
|
|
+ .... ...0 0000 0110 = TLV Length: 6
|
|
|
+ Organization Unique Code: 00:80:c2 (IEEE 802.1 Chair)
|
|
|
+ IEEE 802.1 Subtype: Port VLAN ID (0x01)
|
|
|
+ Port VLAN Identifier: 10 (0x000a)
|
|
|
+ End of LLDPDU
|
|
|
+ 0000 000. .... .... = TLV Type: End of LLDPDU (0)
|
|
|
+ .... ...0 0000 0000 = TLV Length: 0
|
|
|
+
|
|
|
+
|
|
|
+Cisco Discovery Protocol
|
|
|
+ Version: 2
|
|
|
+ TTL: 180 seconds
|
|
|
+ Checksum: 0x3b56 [correct]
|
|
|
+ [Checksum Status: Good]
|
|
|
+ Device ID: cbs350-it-test
|
|
|
+ Type: Device ID (0x0001)
|
|
|
+ Length: 18
|
|
|
+ Device ID: cbs350-it-test
|
|
|
+ Addresses
|
|
|
+ Type: Addresses (0x0002)
|
|
|
+ Length: 17
|
|
|
+ Number of addresses: 1
|
|
|
+ IP address: 10.1.10.174
|
|
|
+ Protocol type: NLPID (0x01)
|
|
|
+ Protocol length: 1
|
|
|
+ Protocol: IP
|
|
|
+ Address length: 4
|
|
|
+ IP Address: 10.1.10.174
|
|
|
+ Port ID: gi7
|
|
|
+ Type: Port ID (0x0003)
|
|
|
+ Length: 7
|
|
|
+ Sent through Interface: gi7
|
|
|
+ Capabilities
|
|
|
+ Type: Capabilities (0x0004)
|
|
|
+ Length: 8
|
|
|
+ Capabilities: 0x00000029
|
|
|
+ .... .... .... .... .... .... .... ...1 = Router: Yes
|
|
|
+ .... .... .... .... .... .... .... ..0. = Transparent Bridge: No
|
|
|
+ .... .... .... .... .... .... .... .0.. = Source Route Bridge: No
|
|
|
+ .... .... .... .... .... .... .... 1... = Switch: Yes
|
|
|
+ .... .... .... .... .... .... ...0 .... = Host: No
|
|
|
+ .... .... .... .... .... .... ..1. .... = IGMP capable: Yes
|
|
|
+ .... .... .... .... .... .... .0.. .... = Repeater: No
|
|
|
+ .... .... .... .... .... .... 0... .... = VoIP Phone: No
|
|
|
+ .... .... .... .... .... ...0 .... .... = Remotely Managed Device: No
|
|
|
+ .... .... .... .... .... ..0. .... .... = CVTA/STP Dispute Resolution/Cisco VT Camera: No
|
|
|
+ .... .... .... .... .... .0.. .... .... = Two Port Mac Relay: No
|
|
|
+ Software Version
|
|
|
+ Type: Software version (0x0005)
|
|
|
+ Length: 12
|
|
|
+ Software version: 3.4.0.17
|
|
|
+ Platform: Cisco CBS350-8P-E-2G (PID:CBS350-8P-E-2G)-VSD
|
|
|
+ Type: Platform (0x0006)
|
|
|
+ Length: 49
|
|
|
+ Platform: Cisco CBS350-8P-E-2G (PID:CBS350-8P-E-2G)-VSD
|
|
|
+ Native VLAN: 10
|
|
|
+ Type: Native VLAN (0x000a)
|
|
|
+ Length: 6
|
|
|
+ Native VLAN: 10
|
|
|
+ Duplex: Full
|
|
|
+ Type: Duplex (0x000b)
|
|
|
+ Length: 5
|
|
|
+ Duplex: Full
|
|
|
+ Trust Bitmap: 0x00
|
|
|
+ Type: Trust Bitmap (0x0012)
|
|
|
+ Length: 5
|
|
|
+ Trust Bitmap: 0x00
|
|
|
+ Untrusted port CoS: 0x00
|
|
|
+ Type: Untrusted Port CoS (0x0013)
|
|
|
+ Length: 5
|
|
|
+ Untrusted port CoS: 0x00
|
|
|
+ System Name: cbs350-it-test
|
|
|
+ Type: System Name (0x0014)
|
|
|
+ Length: 18
|
|
|
+ System Name: cbs350-it-test
|
|
|
+ Power Available: 30000 mW, 4294967295 mW
|
|
|
+ Type: Power Available (0x001a)
|
|
|
+ Length: 16
|
|
|
+ Request-ID: 0
|
|
|
+ Management-ID: 956
|
|
|
+ Power Available: 30000mW
|
|
|
+ Power Available: 4294967295mW
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+Mikrotik Neighbor Discovery Protocol
|
|
|
+ Header Unknown: 7cef
|
|
|
+ SeqNo: 0
|
|
|
+ T 1, L 6: MAC-Address
|
|
|
+ TlvType: 1 = MAC-Address
|
|
|
+ TlvLength: 6
|
|
|
+ MAC-Address: VMware_55:13:39 (00:0c:29:55:13:39)
|
|
|
+ T 5, L 10: Identity
|
|
|
+ TlvType: 5 = Identity
|
|
|
+ TlvLength: 10
|
|
|
+ Identity: chr-opatov
|
|
|
+ T 7, L 35: Version
|
|
|
+ TlvType: 7 = Version
|
|
|
+ TlvLength: 35
|
|
|
+ Version: 7.16.1 (stable) 2024-10-10 14:03:32
|
|
|
+ T 8, L 8: Platform
|
|
|
+ TlvType: 8 = Platform
|
|
|
+ TlvLength: 8
|
|
|
+ Platform: MikroTik
|
|
|
+ T 10, L 4: Uptime
|
|
|
+ TlvType: 10 = Uptime
|
|
|
+ TlvLength: 4
|
|
|
+ Uptime: 1832996.000000000 seconds
|
|
|
+ T 11, L 11: Software-ID
|
|
|
+ TlvType: 11 = Software-ID
|
|
|
+ TlvLength: 11
|
|
|
+ Software-ID: Dr+43uz+oDE
|
|
|
+ T 12, L 3: Board
|
|
|
+ TlvType: 12 = Board
|
|
|
+ TlvLength: 3
|
|
|
+ Board: CHR
|
|
|
+ T 14, L 1: Unpack
|
|
|
+ TlvType: 14 = Unpack
|
|
|
+ TlvLength: 1
|
|
|
+ Unpack: None (1)
|
|
|
+ T 15, L 16: IPv6-Address
|
|
|
+ TlvType: 15 = IPv6-Address
|
|
|
+ TlvLength: 16
|
|
|
+ IPv6-Address: fe80::20c:29ff:fe55:1339
|
|
|
+ T 16, L 10: Interface name
|
|
|
+ TlvType: 16 = Interface name
|
|
|
+ TlvLength: 10
|
|
|
+ Interface name: 10pocitaky
|
|
|
+ T 17, L 4: IPv4-Address
|
|
|
+ TlvType: 17 = IPv4-Address
|
|
|
+ TlvLength: 4
|
|
|
+ IPv4-Address: 10.1.10.1
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+Link Layer Discovery Protocol
|
|
|
+ Chassis Subtype = MAC address, Id: 94:18:65:77:33:44
|
|
|
+ 0000 001. .... .... = TLV Type: Chassis Id (1)
|
|
|
+ .... ...0 0000 0111 = TLV Length: 7
|
|
|
+ Chassis Id Subtype: MAC address (4)
|
|
|
+ Chassis Id: Netgear_77:33:44 (94:18:65:77:33:44)
|
|
|
+ Port Subtype = Interface name, Id: 0/7
|
|
|
+ 0000 010. .... .... = TLV Type: Port Id (2)
|
|
|
+ .... ...0 0000 0100 = TLV Length: 4
|
|
|
+ Port Id Subtype: Interface name (5)
|
|
|
+ Port Id: 0/7
|
|
|
+ Time To Live = 120 sec
|
|
|
+ [Normal LLDPDU]
|
|
|
+ 0000 011. .... .... = TLV Type: Time to Live (3)
|
|
|
+ .... ...0 0000 0010 = TLV Length: 2
|
|
|
+ Seconds: 120
|
|
|
+ Port Description = 0/7
|
|
|
+ 0000 100. .... .... = TLV Type: Port Description (4)
|
|
|
+ .... ...0 0000 0011 = TLV Length: 3
|
|
|
+ Port Description: 0/7
|
|
|
+ System Name = m4250-8g2xf-test
|
|
|
+ 0000 101. .... .... = TLV Type: System Name (5)
|
|
|
+ .... ...0 0001 0000 = TLV Length: 16
|
|
|
+ System Name: m4250-8g2xf-test
|
|
|
+ System Description = M4250-8G2XF-PoE+ 8x1G PoE+ 220W and 2xSFP+ Managed Switch, 13.0.4.26, 1.0.0.11
|
|
|
+ 0000 110. .... .... = TLV Type: System Description (6)
|
|
|
+ .... ...0 0100 1110 = TLV Length: 78
|
|
|
+ System Description: M4250-8G2XF-PoE+ 8x1G PoE+ 220W and 2xSFP+ Managed Switch, 13.0.4.26, 1.0.0.11
|
|
|
+ Capabilities
|
|
|
+ 0000 111. .... .... = TLV Type: System Capabilities (7)
|
|
|
+ .... ...0 0000 0100 = TLV Length: 4
|
|
|
+ Capabilities: 0x0014
|
|
|
+ .... .... .... ...0 = Other: Not capable
|
|
|
+ .... .... .... ..0. = Repeater: Not capable
|
|
|
+ .... .... .... .1.. = Bridge: Capable
|
|
|
+ .... .... .... 0... = WLAN access point: Not capable
|
|
|
+ .... .... ...1 .... = Router: Capable
|
|
|
+ .... .... ..0. .... = Telephone: Not capable
|
|
|
+ .... .... .0.. .... = DOCSIS cable device: Not capable
|
|
|
+ .... .... 0... .... = Station only: Not capable
|
|
|
+ .... ...0 .... .... = C-VLAN component: Not capable
|
|
|
+ .... ..0. .... .... = S-VLAN component: Not capable
|
|
|
+ .... .0.. .... .... = TPMR component: Not capable
|
|
|
+ Enabled Capabilities: 0x0014
|
|
|
+ .... .... .... ...0 = Other: Not capable
|
|
|
+ .... .... .... ..0. = Repeater: Not capable
|
|
|
+ .... .... .... .1.. = Bridge: Capable
|
|
|
+ .... .... .... 0... = WLAN access point: Not capable
|
|
|
+ .... .... ...1 .... = Router: Capable
|
|
|
+ .... .... ..0. .... = Telephone: Not capable
|
|
|
+ .... .... .0.. .... = DOCSIS cable device: Not capable
|
|
|
+ .... .... 0... .... = Station only: Not capable
|
|
|
+ .... ...0 .... .... = C-VLAN component: Not capable
|
|
|
+ .... ..0. .... .... = S-VLAN component: Not capable
|
|
|
+ .... .0.. .... .... = TPMR component: Not capable
|
|
|
+ IEEE 802.1 Chair - Port VLAN ID
|
|
|
+ 1111 111. .... .... = TLV Type: Organization Specific (127)
|
|
|
+ .... ...0 0000 0110 = TLV Length: 6
|
|
|
+ Organization Unique Code: 00:80:c2 (IEEE 802.1 Chair)
|
|
|
+ IEEE 802.1 Subtype: Port VLAN ID (0x01)
|
|
|
+ Port VLAN Identifier: 2 (0x0002)
|
|
|
+ Management Address
|
|
|
+ 0001 000. .... .... = TLV Type: Management Address (8)
|
|
|
+ .... ...0 0010 0110 = TLV Length: 38
|
|
|
+ Address String Length: 5
|
|
|
+ Address Subtype: IPv4 (1)
|
|
|
+ Management Address: 10.1.1.110
|
|
|
+ Interface Subtype: ifIndex (2)
|
|
|
+ Interface Number: 17
|
|
|
+ OID String Length: 26
|
|
|
+ Object Identifier: 1.9.46.51.46.54.46.49.46.52.46.49.46.52.53.50.54.46.49.48.48.46.49.49.46.52.48 (iso.9.46.51.46.54.46.49.46.52.46.49.46.52.53.50.54.46.49.48.48.46.49.49.46.52.48)
|
|
|
+ Ieee 802.3 - Power Via MDI
|
|
|
+ 1111 111. .... .... = TLV Type: Organization Specific (127)
|
|
|
+ .... ...0 0000 1100 = TLV Length: 12
|
|
|
+ Organization Unique Code: 00:12:0f (Ieee 802.3)
|
|
|
+ IEEE 802.3 Subtype: Power Via MDI (0x02)
|
|
|
+ MDI Power Support: 0x0f
|
|
|
+ .... ...1 = Port Class: PSE
|
|
|
+ .... ..1. = PSE MDI Power: Supported
|
|
|
+ .... .1.. = PSE MDI Power: Enabled
|
|
|
+ .... 1... = PSE Pairs Control Ability: Yes
|
|
|
+ PSE Power Pair: Signal (1)
|
|
|
+ Power Class: Unknown (0)
|
|
|
+ 00.. .... = Power Type: Type 2 PSE Device (0)
|
|
|
+ ..01 .... = Power Source: 1 Primary Power Source
|
|
|
+ .... .0.. = PD 4PID: Not supported
|
|
|
+ .... ..11 = Power Priority: Low (3)
|
|
|
+ PD Requested Power Value: 0.0. Watt
|
|
|
+ PSE Allocated Power Value: 0.0. Watt
|
|
|
+ Ieee 802.3 - Link Aggregation
|
|
|
+ 1111 111. .... .... = TLV Type: Organization Specific (127)
|
|
|
+ .... ...0 0000 1001 = TLV Length: 9
|
|
|
+ Organization Unique Code: 00:12:0f (Ieee 802.3)
|
|
|
+ IEEE 802.3 Subtype: Link Aggregation (0x03)
|
|
|
+ [Expert Info (Warning/Protocol): TLV has been deprecated]
|
|
|
+ [TLV has been deprecated]
|
|
|
+ [Severity level: Warning]
|
|
|
+ [Group: Protocol]
|
|
|
+ Aggregation Status: 0x01
|
|
|
+ .... ...1 = Aggregation Capability: Yes
|
|
|
+ .... ..0. = Aggregation Status: Disabled
|
|
|
+ Aggregated Port Id: 0
|
|
|
+ Ieee 802.3 - Maximum Frame Size
|
|
|
+ 1111 111. .... .... = TLV Type: Organization Specific (127)
|
|
|
+ .... ...0 0000 0110 = TLV Length: 6
|
|
|
+ Organization Unique Code: 00:12:0f (Ieee 802.3)
|
|
|
+ IEEE 802.3 Subtype: Maximum Frame Size (0x04)
|
|
|
+ Maximum Frame Size: 9216
|
|
|
+ Ieee 802.3 - MAC/PHY Configuration/Status
|
|
|
+ 1111 111. .... .... = TLV Type: Organization Specific (127)
|
|
|
+ .... ...0 0000 1001 = TLV Length: 9
|
|
|
+ Organization Unique Code: 00:12:0f (Ieee 802.3)
|
|
|
+ IEEE 802.3 Subtype: MAC/PHY Configuration/Status (0x01)
|
|
|
+ Auto-Negotiation Support/Status: 0x03
|
|
|
+ .... ...1 = Auto-Negotiation: Supported
|
|
|
+ .... ..1. = Auto-Negotiation: Enabled
|
|
|
+ PMD Auto-Negotiation Advertised Capability: 0x6c03
|
|
|
+ .... .... .... ...1 = 1000BASE-T (full duplex mode): Capable
|
|
|
+ .... .... .... ..1. = 1000BASE-T (half duplex mode): Capable
|
|
|
+ .... .... .... .0.. = 1000BASE-X (-LX, -SX, -CX full duplex mode): Not capable
|
|
|
+ .... .... .... 0... = 1000BASE-X (-LX, -SX, -CX half duplex mode): Not capable
|
|
|
+ .... .... ...0 .... = Asymmetric and Symmetric PAUSE (for full-duplex links): Not capable
|
|
|
+ .... .... ..0. .... = Symmetric PAUSE (for full-duplex links): Not capable
|
|
|
+ .... .... .0.. .... = Asymmetric PAUSE (for full-duplex links): Not capable
|
|
|
+ .... .... 0... .... = PAUSE (for full-duplex links): Not capable
|
|
|
+ .... ...0 .... .... = 100BASE-T2 (full duplex mode): Not capable
|
|
|
+ .... ..0. .... .... = 100BASE-T2 (half duplex mode): Not capable
|
|
|
+ .... .1.. .... .... = 100BASE-TX (full duplex mode): Capable
|
|
|
+ .... 1... .... .... = 100BASE-TX (half duplex mode): Capable
|
|
|
+ ...0 .... .... .... = 100BASE-T4: Not capable
|
|
|
+ ..1. .... .... .... = 10BASE-T (full duplex mode): Capable
|
|
|
+ .1.. .... .... .... = 10BASE-T (half duplex mode): Capable
|
|
|
+ 0... .... .... .... = Other or unknown: Not capable
|
|
|
+ Same in inverse (wrong) bitorder
|
|
|
+ 0... .... .... .... = 1000BASE-T (full duplex mode): Not capable
|
|
|
+ .1.. .... .... .... = 1000BASE-T (half duplex mode): Capable
|
|
|
+ ..1. .... .... .... = 1000BASE-X (-LX, -SX, -CX full duplex mode): Capable
|
|
|
+ ...0 .... .... .... = 1000BASE-X (-LX, -SX, -CX half duplex mode): Not capable
|
|
|
+ .... 1... .... .... = Asymmetric and Symmetric PAUSE (for full-duplex links): Capable
|
|
|
+ .... .1.. .... .... = Symmetric PAUSE (for full-duplex links): Capable
|
|
|
+ .... ..0. .... .... = Asymmetric PAUSE (for full-duplex links): Not capable
|
|
|
+ .... ...0 .... .... = PAUSE (for full-duplex links): Not capable
|
|
|
+ .... .... 0... .... = 100BASE-T2 (full duplex mode): Not capable
|
|
|
+ .... .... .0.. .... = 100BASE-T2 (half duplex mode): Not capable
|
|
|
+ .... .... ..0. .... = 100BASE-TX (full duplex mode): Not capable
|
|
|
+ .... .... ...0 .... = 100BASE-TX (half duplex mode): Not capable
|
|
|
+ .... .... .... 0... = 100BASE-T4: Not capable
|
|
|
+ .... .... .... .0.. = 10BASE-T (full duplex mode): Not capable
|
|
|
+ .... .... .... ..1. = 10BASE-T (half duplex mode): Capable
|
|
|
+ .... .... .... ...1 = Other or unknown: Capable
|
|
|
+ Operational MAU Type: 1000BaseTFD - Four-pair Category 5 UTP, full duplex mode (0x001e)
|
|
|
+ Telecommunications Industry Association TR-41 Committee - Media Capabilities
|
|
|
+ 1111 111. .... .... = TLV Type: Organization Specific (127)
|
|
|
+ .... ...0 0000 0111 = TLV Length: 7
|
|
|
+ Organization Unique Code: 00:12:bb (Telecommunications Industry Association TR-41 Committee)
|
|
|
+ Media Subtype: Media Capabilities (0x01)
|
|
|
+ Capabilities: 0x002f
|
|
|
+ .... .... .... ...1 = LLDP-MED Capabilities: Capable
|
|
|
+ .... .... .... ..1. = Network Policy: Capable
|
|
|
+ .... .... .... .1.. = Location Identification: Capable
|
|
|
+ .... .... .... 1... = Extended Power via MDI-PSE: Capable
|
|
|
+ .... .... ...0 .... = Extended Power via MDI-PD: Not capable
|
|
|
+ .... .... ..1. .... = Inventory: Capable
|
|
|
+ Class Type: Network Connectivity (4)
|
|
|
+ Netgear - Unknown (101)
|
|
|
+ 1111 111. .... .... = TLV Type: Organization Specific (127)
|
|
|
+ .... ...0 0000 1100 = TLV Length: 12
|
|
|
+ Organization Unique Code: 8c:3b:ad (Netgear)
|
|
|
+ Unknown Subtype: 101
|
|
|
+ Unknown Subtype Content: 0000000300000003
|
|
|
+ IEEE 802.1 Chair - VLAN Name
|
|
|
+ 1111 111. .... .... = TLV Type: Organization Specific (127)
|
|
|
+ .... ...0 0000 1111 = TLV Length: 15
|
|
|
+ Organization Unique Code: 00:80:c2 (IEEE 802.1 Chair)
|
|
|
+ IEEE 802.1 Subtype: VLAN Name (0x03)
|
|
|
+ VLAN Identifier: 2 (0x0002)
|
|
|
+ VLAN Name Length: 8
|
|
|
+ VLAN Name: VLAN0002
|
|
|
+ End of LLDPDU
|
|
|
+ 0000 000. .... .... = TLV Type: End of LLDPDU (0)
|
|
|
+ .... ...0 0000 0000 = TLV Length: 0
|
|
|
+
|
|
|
+
|
|
|
+
|
|
|
+Cisco Discovery Protocol
|
|
|
+ Version: 2
|
|
|
+ TTL: 180 seconds
|
|
|
+ Checksum: 0x4235 [correct]
|
|
|
+ [Checksum Status: Good]
|
|
|
+ Device ID: 6YX32953A00C8
|
|
|
+ Type: Device ID (0x0001)
|
|
|
+ Length: 17
|
|
|
+ Device ID: 6YX32953A00C8
|
|
|
+ Platform: M4250-8G2XF-PoE+
|
|
|
+ Type: Platform (0x0006)
|
|
|
+ Length: 20
|
|
|
+ Platform: M4250-8G2XF-PoE+
|
|
|
+ Capabilities
|
|
|
+ Type: Capabilities (0x0004)
|
|
|
+ Length: 8
|
|
|
+ Capabilities: 0x00000001
|
|
|
+ .... .... .... .... .... .... .... ...1 = Router: Yes
|
|
|
+ .... .... .... .... .... .... .... ..0. = Transparent Bridge: No
|
|
|
+ .... .... .... .... .... .... .... .0.. = Source Route Bridge: No
|
|
|
+ .... .... .... .... .... .... .... 0... = Switch: No
|
|
|
+ .... .... .... .... .... .... ...0 .... = Host: No
|
|
|
+ .... .... .... .... .... .... ..0. .... = IGMP capable: No
|
|
|
+ .... .... .... .... .... .... .0.. .... = Repeater: No
|
|
|
+ .... .... .... .... .... .... 0... .... = VoIP Phone: No
|
|
|
+ .... .... .... .... .... ...0 .... .... = Remotely Managed Device: No
|
|
|
+ .... .... .... .... .... ..0. .... .... = CVTA/STP Dispute Resolution/Cisco VT Camera: No
|
|
|
+ .... .... .... .... .... .0.. .... .... = Two Port Mac Relay: No
|
|
|
+ Software Version
|
|
|
+ Type: Software version (0x0005)
|
|
|
+ Length: 13
|
|
|
+ Software version: 13.0.4.26
|
|
|
+ Addresses
|
|
|
+ Type: Addresses (0x0002)
|
|
|
+ Length: 26
|
|
|
+ Number of addresses: 2
|
|
|
+ IP address: 10.1.10.196
|
|
|
+ Protocol type: NLPID (0x01)
|
|
|
+ Protocol length: 1
|
|
|
+ Protocol: IP
|
|
|
+ Address length: 4
|
|
|
+ IP Address: 10.1.10.196
|
|
|
+ IP address: 10.1.1.110
|
|
|
+ Protocol type: NLPID (0x01)
|
|
|
+ Protocol length: 1
|
|
|
+ Protocol: IP
|
|
|
+ Address length: 4
|
|
|
+ IP Address: 10.1.1.110
|
|
|
+ Port ID: 0/7
|
|
|
+ Type: Port ID (0x0003)
|
|
|
+ Length: 7
|
|
|
+ Sent through Interface: 0/7
|
|
|
+ Native VLAN: 2
|
|
|
+ Type: Native VLAN (0x000a)
|
|
|
+ Length: 6
|
|
|
+ Native VLAN: 2
|
|
|
+</details>
|