PA-2050 connected to Cisco 4000-series switch

[ahtiakel]

Hello,

We had a problem when we connected PA-2050 appliance (PanOS 3.x) to Cisco 4000-series switch. There was simply about 30% packet loss in traffic and it wasn't usable. Then we just put some dummy switch between PA and Cisco and everything works fine.

Now we discovered the problem disappeared when we replaced Cisco switch module hardware revison 1.0 to hardware revison 1.5.

Does anybody else experienced such a problem?

Thanks!

[jnguyen]

We do not recall any similar issues with older software versions from cisco. while on the older software version did you recall if the interfaces were statically set or configured for auto? also do you recall if the interface came up 100 full or 1000 full?

[djmac]

Personally I've had lots of issues with 500s / 2000s port miss-matching with Cisco / HP and others.  As part of the basic install I check the ports via CLI before proceeding - I also fix the speed and duplex setting - this fixes most throughput problems!

[ahtiakel]

Hello,

I was talking about hardware version. I realize it's quite hard to test it on your side, cause it needs specific hardware module.

Br!

[dagibbs]

As has been suggested, this is almost always caused by a duplex/speed mis-match.

Early Cisco switches were notorious for not auto-negotiating connection speed properly.

The simplest solution to this is to hard-set the port on the Cisco with the following commands

conf t

interface <id>

speed 1000

duplex full

end

copy run start

If your switch is running CatOS rather than IOS, then the commands are something like this

set port speed 3/1 1000

set port duplex 3/1 full

Can't remember how to save on CatOS, sorry.

You can also hard-set the port onth e PA through the GUI, although you shouldn't need to do it at both ends.

Cheers