Cisco 6503 - Catalyst Firewall Security Sys White Paper

Text of Cisco 6503 - Catalyst Firewall Security Sys User Guide:

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 1 of 19 White Paper High Availability for the Cisco Catalyst 6500 Series Switches Figure 1 The Cisco Catalyst 6500 Series WS-6503, WS-C6506, WS-C6509, WS-C6509-NEBS, and WS-C6513 Overview Cisco Catalyst ® 6500 Series multilayer switches have become an essential component of a sound network design in today’s enterprise and service provider environments. Having suc

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 2 of 19 redundancy. For more detail on high-availability network designs, refer to the white paper, Gigabit Campus Design, at: http://www.cisco.com/en/US/partner/netsol/ns340/ns394/ns147/ns17/ networking_solutions_white_paper09186a00800a3e0b.shtml Switch Fabric Module Redundancy Since its introduction, the Cisco Catalyst 6500 Series has been built on a s

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 3 of 19 The changes to the switching mode are done automatically, depending on the hardware installed. No specific configuration is necessary on the SFM for typical operation. The current switching mode of the switch fabric module can be monitored through the Catalyst OS command-line interface (CLI) using the show fabric channel switchmode command. Example 1 shows a completely fabric-enabled system (all compact mode) and Example 2 shows classic and

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 4 of 19 Example 2: Classic and Fabric-Enabled System The following output is from a configuration with dual supervisor engines, one SFM, one classic line card in slot 3, and two fabric-enabled line cards in slots 7 and 9. Sup-A> (enable) show fabric channel switchmode Module Num Fab Chan Fab Chan Switch Mode Channel Status ------ ------------ -------- ------------ -------------- 1 1 0, 0 flow through ok 2 1 0, 1 truncated ok 3 0 n/a n/a n/a 5

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 5 of 19 Redundant Supervisor Engines As previously mentioned, the High Availability feature on the Cisco Catalyst 6500 Series provides low-impact, stateful switchover between redundant supervisor engines. This feature was first available in Cisco Catalyst OS Software Version 5.4. Supervisor Engine Switchover Dual supervisor engines provide hardware redundancy for the forwarding intelligence of the Cisco Catalyst 6500 Series. The Cisco Catalyst 6500 Series can support up to two supervisor engines in slots 1 and 2 only. One is the active supervis

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 6 of 19 disabling port channels (PagP), and turning trunking off for ports to which workstations are directly attached, the fast switchover time can be reduced to approximately 10 seconds. In a live network environment, these switchover times present a major disruption to network operations. Supervisor High Availability Feature The High Availability software feature of Cisco Catalyst OS further enhances the Cisco Catalyst 6500 Series har

• Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 7 of 19 Table 1 shows protocols and features for high availability as of Cisco Catalyst OS version 7.5 that are supported, compatible, and incompatible. For a current list of the features that are supported with the High Av

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 8 of 19 Both supervisor engines run a synchronizing operation to allow for transfer of this data. When a database entry is updated on the active supervisor engine, the synchronizing operation places the update in a first-in, first-out (FIFO) queue. This queue is scheduled to empty periodically for transfer to the standby supervisor. The transfer is a background process and as such, the update interval varies depending on the number of other active processes in the system. The update interval ranges from

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 9 of 19 The image synchronization feature of Cisco Catalyst OS provides software consistency between supervisor engines, but it does not allow for software upgrades without taking the system offline for an extended period of time. To perform the upgrade, the active supervisor engine requires a reset to load the new version of software. It then synchronizes the softw

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 10 of 19 http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/relnotes/ol_1982.htm Cisco Catalyst OS Image Upgrade Procedure Based on the discussion above, the following procedure is recommended for performing a software upgrade with the minimal downtime associated with the High Availability feature. High-availability compatibility between the images will be determined in the middle of the procedure.

• Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 11 of 19 10. Reset the standby supervisor engine. Sup-A> (enable) reset 2 The standby supervisor engine reboots with the new Cisco Catalyst OS image, remains in standby mode, and does not affect the operation of the active supervisor. 11. After the

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 12 of 19 Dual Router Mode DRM is the original MSFC configuration for redundant supervisor engine or MSFC configurations. In this mode, both MSFCs are active routers on the network. Having two active MSFCs in a single chassis does not mean having two separate routers. In fact, both MSFCs must have a nearly identical configuration, as described below in more detail. The main idea for DRM is that each MSFC independently builds an accurate picture of the Layer 3 network. DRM Operation The failover

• Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 13 of 19 The following commands enable MSFC config-sync: MSFC-Sup-15 (config)# redundancy MSFC-Sup-15 (config-r)# high-availability MSFC-Sup-15 (config-r-ha)# config-sync With config-sync, all configurations for the de

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 14 of 19 For these scenarios, SRM is now available. Single Router Mode SRM is provided as an option for customers who wish to implement redundant supervisor engines or MSFCs in a system with only one active router in a chassis. SRM has the ability to use the Layer 2 and Layer 4 redundancy of Cisco Catalyst OS on the supervisor engine as well as a streamlined approach to

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 15 of 19 The same IP and Media Access Control (MAC) addresses are used for the designated router, whether or not the MSFC is the designated router. The MSFC that is chosen as the designated router will communicate its default MAC address to the MSFC that is the nondesignated router. All subsequent interfaces created on the nondesignated router use this MAC address, unless the user explicitly configures a different MAC address. On bootup the two MSFCs per

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 16 of 19 SRM and IP Multicast With SRM, the VLAN interfaces on the nondesignated router are in a down state. Even after a failover, these interfaces will not move into an up state until the supervisor engine verifies that the VLAN has at least one connected physical interface in the forwarding state. This interruption causes the supervisor engine to delete all multicast entries in the PFCx and this disrupts multicast forwarding. As an enhancement to the original SRM implementation, Cisco Catalyst OS releas

• Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 17 of 19 DRM hostname DRM ! redundancy high-availability config-sync ! interface Vlan20 ip address 10.20.1.3 255.255.255.0 alt ip address 10.20.1.2 255.255.255.0 standby ip 10.30.1.4 standby priority 100 alt standby priority 50 no ip red

• Cisco 6503 - Catalyst Firewall Security Sys, Cisco Systems, Inc. All contents are Copyright © 1992–2002 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. Page 18 of 19 disabled, the power available to the system is the combined power of the power supplies. Note that in this configuration, if one supply fails, the system might not have enough power to supply all the modules. To enable or disable power redundancy, the following command is used: Sup-A> (enable) set power redundancy enable | disable Each line card has different

• Cisco 6503 - Catalyst Firewall Security Sys, Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 European Headquarters Cisco Systems International BV Haarlerbergpark Haarlerbergweg 13-19 1101 CH Amsterdam The Netherlands www-europe.cisco.com Tel: 31 0 20 357 1000 Fax: 31 0 20 357 1100 Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA www.cisco.com Tel: 408 526-7660 Fax: 408 527-0883 Asia Pacific Headquarters Cis

More Instructions:

	Cisco 6503 - Catalyst Firewall Security Sys Supplementary manual 06-04-2024 3	DOWNLOAD
	Cisco 6503 - Catalyst Firewall Security Sys Installation manual 19-05-2023 464	DOWNLOAD
	Cisco 6503 - Catalyst Firewall Security Sys Product bulletin 28-04-2023 6	DOWNLOAD

Related Products and Documents (Switch):

Comparable Devices:

Similar Resources:

• NETGEAR MS510TX (31 pages) 8-Port Multi-GigabitSmart Managed Pro Switchwith two 10G PortsHardware Installation GuideModels MS510TX and MS510TXPPJune 2017202-11763-01350 E. Plumeria DriveSan Jose, CA 95134USA …

• Watchguard Ferebox Series (6 pages) www.watchguard.com Page 1 How Modularity Works Technical Brief WatchGuard® Technologies, Inc. Published: February 2016 INTRODUCTION WatchGuard UTM (Unified Threat Management) appliances provide the protection that midsize businesses and distributed enterprises need today to prevent infection from malware, ransomware, and advanced threats. UTM capab …

• Topgreener TDOS5-JM (2 pages) WARNINGFEATURESSPECIFICATIONSINSTALLATION INSTRUCTIONSModel: TDOS5-JMOccupancy/ VacancyCDS Sensor SwitchWIRING DIRECTIONS: Use copper wire only.Turn the POWER OFF at the circuit breaker before installing the Sensor Switch.Read and understand these instructions before installing. This device is intended forinstallation in accordance with the National Electric …

• Cambium Networks cnMatrix EX2010-P (6 pages) cnMatrix Quick Start Guide 1 Thank you for choosing the cnMatrix switch, a Cambium Networks communications device. Before you begin installing the switch, verify you have all the package contents available, and a PC with SSH client, such as PuTTY or OpenSSH SSH Client. Package Contents cnMatrix Switch (8 port or 24 port) Power Cord Quick Start Guide …

• LDG DTS-6 (12 pages) 1LDG DTS-6/6R Desktop Coaxial Switch / Remote LDG Electronics 1445 Parran Road, PO Box 48 St. Leonard MD 20685-2903 USA Phone: 410-586-2177 Fax: 410-586-8475 [email protected] www.ldgelectronics.com …

• Nortel DMS-100 (638 pages) Critical Release Notice Publication number: 297-8351-550 Publication release: Standard 04.02 The content of this customer NTP supports the SN06 (DMS) and ISN06 (TDM) software releases. Bookmarks used in this NTP highlight the changes between the baseline NTP and the current release. The bookmarks provided are color-coded to identify release-specifi …

Comments, Questions and Opinions: