Unexplained Latency Cisco 2960 switch 1

[moonpie0]

We are having a latency problem with a Cisco 2960 switch. The switch is installed in our Desktop support area and is used to download images to new laptops. The imaging took around 12 minutes using the old equipment. Now the support guys say the image downloads take about twice as long-24 minutes. Our company is in the process of moving from a differnt vendor to an all Cisco network and this is one of the first installations. We are running c2960-lanbasek9-mz.122-46.SE.bin IOS with the switch configuration below. Please see if you notice anything in the config or have an idea of the cause.

!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname XXXXXXXXXXXXX
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$Pv.g$/77C46nBaYKrvo0IjBR/Z/
!
username admin password 7 051B0F0833454C5D
aaa new-model
!
!
aaa authentication login default group tacacs+ line enable none
aaa authentication enable default group tacacs+ enable none
aaa authorization exec default group tacacs+ if-authenticated none
aaa authorization commands 1 default group tacacs+ none
aaa authorization commands 15 default group tacacs+ none
!
!
!
aaa session-id common
clock timezone est -5
clock summer-time edt recurring
system mtu routing 1500
vtp mode transparent
ip subnet-zero
!
!
ip domain-list xxxxx.xxxx.xxx
ip domain-list xxxx.xxxx.xxx
ip domain-name xxx.xxxx.
ip name-server xxxx.xxxx.xxxx.xxx
!
!
crypto pki trustpoint TP-self-signed-87538304
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-87538304
revocation-check none
rsakeypair TP-self-signed-87538304
!
!
crypto pki certificate chain TP-self-signed-87538304
certificate self-signed 01
3082024B 308201B4 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
2F312D30 2B060355 04031324 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 38373533 38333034 301E170D 39333033 30313030 30303532
5A170D32 30303130 31303030 3030305A 302F312D 302B0603 55040313 24494F53
2D53656C 662D5369 676E6564 2D436572 74696669 63617465 2D383735 33383330
3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100A2CB
B24E63AE 00B0097C 92ED726F 2A48E15F EDA95BFD A157AC87 46A30132 C39BB0C5
D66B374F B2EF23A9 DE5BD22F 2CEA16C2 2FB52159 DDF17E88 1DB8E2C0 EF5C111E
9B688BCC 866FA4D7 F86BEA51 25F535BB 68100CB1 7CBACD2F 6E7F6AF9 293258C6
97D68346 383E2E66 0169EA6E 7842A730 D72E6926 6C95EFF6 FF12F2FA EE610203
010001A3 77307530 0F060355 1D130101 FF040530 030101FF 30220603 551D1104
1B301982 1777626E 2D776172 65686F75 73652D62 2E747661 2E676F76 301F0603
551D2304 18301680 1454141F 56F9D079 D472957F EA9A98E4 37602161 87301D06
03551D0E 04160414 54141F56 F9D079D4 72957FEA 9A98E437 60216187 300D0609
2A864886 F70D0101 04050003 81810011 D02B6F73 58C8DFC5 AA6AC5CD BFB4CDEE
A47F9BA5 E06C921E F6075A89 68FF5BCC AD003B29 CC11DD26 03CDFA6B BF672565
0E74CC7C 047E4AAE B5338A3A 68D1B344 BE76A686 0D881A0A 1A9CECE6 0DE8386A
126FC6BD DAE10E2E FE8B6728 3F52D504 6530DA4F 2F82EE43 A33EA470 5F5AB17C
E6A33945 9608DA30 A8B54148 DF9B53
quit
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 10
name users
!
ip ssh version 2
!
!
interface FastEthernet0/1
description LAN1
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/2
description LAN2
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/3
description LAN3
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/4
description LAN4
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/5
description LAN5
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/6
description LAN6
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/7
description LAN7
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/8
description LAN8
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/9
description LAN9
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/10
description LAN10
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/11
description LAN11
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/12
description LAN12
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/13
description LAN13
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/14
description LAN14
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/15
description LAN15
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/16
description LAN16
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/17
description LAN17
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/18
description LAN18
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/19
description LAN 19
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/20
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/21
description LAN 21
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/22
description LAN 22
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/23
description LAN 23
switchport access vlan 10
spanning-tree portfast
!
interface FastEthernet0/24
description LAN 24
switchport access vlan 10
spanning-tree portfast
!
interface GigabitEthernet0/1
description Spare
switchport access vlan 10
!
interface GigabitEthernet0/2
description TRK CORE2
switchport access vlan 10
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan10
description XXXXXXXXXXXXXX
ip address XXXXXXXXXXXXXXXx
no ip route-cache
!
ip default-gateway XXX.XXX.XXX.XXX
no ip http server
no ip http secure-server
logging facility local6

tacacs-server host 152.85.50.23
tacacs-server host 152.85.50.22
tacacs-server directed-request
tacacs-server key 7 12170A1B1D0A1F1124
!
control-plane
!
!
line con 0
password 7 071F76451A0E4D
line vty 0 4
password 7 105E5E10511046
transport input ssh
line vty 5 15
!
ntp server XXXX.XXX.XXX.XXX prefer
ntp server XXXX.XXXX.XXXX.XXXX
end

 

[unclerico]

Is everything coming in over the g0/2 interface?? Can you post the output of sh int g0/2?? Post the same output for the uplevel switchport.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[burtsbees]

Why do you even have vlans configured? You're not trunking, no router on a stick...you could really just wipe this config and run it as an unmanaged switch, if it's working with this setup...

Burt

 

[ADB100]

Why do you even have vlans configured?

Eh? Come on Burt I thought you were a bit sharper than to offer that as advice ;o)

You should never use VLAN 1 for any data, end of story. VLAN 1 has special meanings in Cisco switches and you should avoid using it at all costs.
What he has configured should be OK. I think some more investigation should be done - i.e. is the uplink being stressed as unclerico suggested, how is the imaging done - if its a ghost type thing is it using multicast and is this set up correctly. One obvious thing is duplex mismatches, either on client machines (does the laptop imaging image force any speed/duplex settings?) or even the uplink.

Andy

 

[vipergg]

Start at the physical layer . Where is the imaging being done , is it from a device on the 2960 to some other device off the 2960 ? Check speed/duplex of uplinks on both sides . looks like everything is auto which is fine as long as the other end of the link is auto also . Check for errors on any ports "show interface counters errors" . Check for utilization when doing an image with "show controllers utilization " . The config looks fine , looks like a standard switch config .

 

[moonpie0]

Thank you for the responses. This forum has always been a wealth of information.

Burt-Setting up the VLAN instead of using default is standard with our company.

unclerico- All of the traffic is going accross the g0/2. The switch has been temporarily pulled the and replaced with a switch from our previous vendor. I'll post the sho int for the uplink switch and this switch tomorrow. We are setting up a test tomorrow.

ADB100-Desktop uses a flash drive to put a barebones XP image on the new laptop then uses Symantec ghost to download the image from a server located on another swtich on the local LAN. We were going to use some sniffer software to look at the traffice tomorrow. We can also look at hard coding the workstation and switch port to see if the speed and duplex may be mismatched.

 

[vipergg]

If its using ghost multicast then you are going to have to setup multicast routing . I've seen ghost multicast bury a Sup 720 6500 .

 

[moonpie0]

vipergg-Thank you for your suggestion to check multicast. We configured the VLAN on the uplink layer 3 switch for IPmc forwarding. The change appears to have corrected the problem. Desktop sucessfully downloaded a good image after the change.

 

[unclerico]

star the man!!!!

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)