Thursday, April 7, 2011

Catalyst 2950 Storm Control Quick Shot

C2950#sh run int fa0/1
Building configuration...

Current configuration : 159 bytes
!
interface FastEthernet0/1
 switchport access vlan 11
 switchport mode access
 load-interval 30
 spanning-tree portfast
 spanning-tree bpdufilter enable
end

C2950#
C2950#sh run int fa0/2
Building configuration...

Current configuration : 159 bytes
!
interface FastEthernet0/2
 switchport access vlan 11
 switchport mode access
 load-interval 30
 spanning-tree portfast
 spanning-tree bpdufilter enable
end

C2950#
C2950#sh int fa0/1
FastEthernet0/1 is up, line protocol is up (connected)
  Hardware is Fast Ethernet, address is 0011.2029.6801 (bia 0011.2029.6801)
  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
     reliability 255/255, txload 225/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 100Mb/s, media type is 100BaseTX
  input flow-control is unsupported output flow-control is unsupported
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:21, output 00:00:01, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  30 second input rate 0 bits/sec, 0 packets/sec
  30 second output rate 88591000 bits/sec, 32007 packets/sec
     3643 packets input, 1255516 bytes, 0 no buffer
     Received 3623 broadcasts (6 multicast)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 6 multicast, 0 pause input
     0 input packets with dribble condition detected
     3866309 packets output, 1337737606 bytes, 0 underruns
     0 output errors, 0 collisions, 2 interface resets
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 PAUSE output
     0 output buffer failures, 0 output buffers swapped out
C2950#
C2950#sh int fa0/2
FastEthernet0/2 is up, line protocol is up (connected)
  Hardware is Fast Ethernet, address is 0011.2029.6802 (bia 0011.2029.6802)
  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 226/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 100Mb/s, media type is 100BaseTX
  input flow-control is unsupported output flow-control is unsupported
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:24, output 00:00:04, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  30 second input rate 88904000 bits/sec, 32120 packets/sec
  30 second output rate 0 bits/sec, 0 packets/sec
     3931679 packets input, 1360355626 bytes, 0 no buffer
     Received 3931658 broadcasts (6 multicast)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 6 multicast, 0 pause input
     0 input packets with dribble condition detected
     3643 packets output, 1255516 bytes, 0 underruns
     0 output errors, 0 collisions, 2 interface resets
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 PAUSE output
     0 output buffer failures, 0 output buffers swapped out
C2950#
C2950#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
C2950(config)#int fa0/2
C2950(config-if)#storm-control ?
  action     Action to take for storm-control
  broadcast  Broadcast address storm control
  multicast  Multicast address storm control
  unicast    Unicast address storm control

C2950(config-if)#storm-control action ?
  shutdown  Shutdown this interface if a storm occurs
  trap      Send SNMP trap if a storm occurs

C2950(config-if)#storm-control action shutdown
C2950(config-if)#storm-control broadcast ?
  level  Set storm suppression level on this interface

C2950(config-if)#storm-control broadcast level ?
  pps  Enter suppression level in packets per second
  <0 - 100>  Enter Integer part of level as percentage of bandwidth

C2950(config-if)#storm-control broadcast level 15
C2950(config-if)#
00:18:53: %STORM_CONTROL-2-SHUTDOWN: Storm control shut down FastEthernet0/2
00:18:54: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
00:18:55: %LINK-5-CHANGED: Interface FastEthernet0/2, changed state to administratively down
00:18:55: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to down
00:18:56: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down
C2950(config-if)#end
C2950#
C2950#sh run int fa0/2
Building configuration...

Current configuration : 237 bytes
!
interface FastEthernet0/2
 switchport access vlan 11
 switchport mode access
 load-interval 30
 shutdown
 storm-control broadcast level 15.00
 storm-control action shutdown
 spanning-tree portfast
 spanning-tree bpdufilter enable
end

C2950#
C2950#sh storm-control ?
  FastEthernet     FastEthernet IEEE 802.3
  GigabitEthernet  GigabitEthernet IEEE 802.3z
  broadcast        Broadcast storm control
  history          Show interface storm history
  multicast        Multicast storm control
  unicast          Unicast storm control
  |                Output modifiers
  

C2950#sh storm-control
Interface  Filter State   Trap State     Upper    Lower    Current  Traps Sent
---------  -------------  -------------  -------  -------  -------  ----------
Fa0/1      inactive       inactive      100.00%  100.00%      N/A           0
Fa0/2      Shutdown       inactive       15.00%   15.00%    0.00%           0
Fa0/3      inactive       inactive      100.00%  100.00%      N/A           0
Fa0/4      inactive       inactive      100.00%  100.00%      N/A           0
Fa0/5      inactive       inactive      100.00%  100.00%      N/A           0
Fa0/6      inactive       inactive      100.00%  100.00%      N/A           0
Fa0/7      inactive       inactive      100.00%  100.00%      N/A           0
Fa0/8      inactive       inactive      100.00%  100.00%      N/A           0
Fa0/9      inactive       inactive      100.00%  100.00%      N/A           0
Fa0/10     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/11     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/12     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/13     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/14     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/15     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/16     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/17     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/18     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/19     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/20     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/21     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/22     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/23     inactive       inactive      100.00%  100.00%      N/A           0
Fa0/24     inactive       inactive      100.00%  100.00%      N/A           0
Gi0/1      inactive       inactive      100.00%  100.00%      N/A           0
Gi0/2      inactive       inactive      100.00%  100.00%      N/A           0
C2950#

4 comments:

  1. Yap, how they calculate the 'storm-control broadcast level 15', "15 percent" over?
    (3931658 / 88904000 )* 100% = 4.42?

    ReplyDelete
  2. hi min, 15 percent means 15Mbps over 100Mbps. As long as we are hitting 15Mbps, storm control will kick in. Thanks. :-)

    ReplyDelete
  3. Sorry min, the value actually is referring to the "rising threshold" instead of the packet rate. I will need to spend some more time reading about it.

    C3750(config-if)#storm-control broadcast level ?
    <0.00 - 100.00> Enter rising threshold
    bps Enter suppression level in bits per second
    pps Enter suppression level in packets per second

    C3750(config-if)#storm-control broadcast level

    ReplyDelete
  4. hi min, I have done a better storm control testing using a Catalyst 3750 based on the 'packets per second' rate, happy reading! :-)

    http://www.itcertnotes.com/2011/04/catalyst-3750-storm-control-quick-shot.html

    ReplyDelete