topic PA-2050 connected to Cisco 4000-series switch in General Topics

PA-2050 connected to Cisco 4000-series switch

ahtiakel — Thu, 25 Nov 2010 14:35:18 GMT

Hello,

We had a problem when we connected PA-2050 appliance (PanOS 3.x) to Cisco 4000-series switch. There was simply about 30% packet loss in traffic and it wasn't usable. Then we just put some dummy switch between PA and Cisco and everything works fine.

Now we discovered the problem disappeared when we replaced Cisco switch module hardware revison 1.0 to hardware revison 1.5.

Does anybody else experienced such a problem?

Thanks!

Re: PA-2050 connected to Cisco 4000-series switch

jnguyen — Mon, 29 Nov 2010 17:11:00 GMT

We do not recall any similar issues with older software versions from cisco. while on the older software version did you recall if the interfaces were statically set or configured for auto? also do you recall if the interface came up 100 full or 1000 full?

Re: PA-2050 connected to Cisco 4000-series switch

djmac — Wed, 01 Dec 2010 17:49:56 GMT

Personally I've had lots of issues with 500s / 2000s port miss-matching with Cisco / HP and others. As part of the basic install I check the ports via CLI before proceeding - I also fix the speed and duplex setting - this fixes most throughput problems!

Re: PA-2050 connected to Cisco 4000-series switch

ahtiakel — Sat, 04 Dec 2010 17:39:43 GMT

Hello,

I was talking about hardware version. I realize it's quite hard to test it on your side, cause it needs specific hardware module.

Br!

Re: PA-2050 connected to Cisco 4000-series switch

dagibbs — Mon, 06 Dec 2010 03:53:42 GMT

As has been suggested, this is almost always caused by a duplex/speed mis-match.

Early Cisco switches were notorious for not auto-negotiating connection speed properly.

The simplest solution to this is to hard-set the port on the Cisco with the following commands

conf t

interface <id>

speed 1000

duplex full

end

copy run start

If your switch is running CatOS rather than IOS, then the commands are something like this

set port speed 3/1 1000

set port duplex 3/1 full

Can't remember how to save on CatOS, sorry.

You can also hard-set the port onth e PA through the GUI, although you shouldn't need to do it at both ends.

Cheers