David, It appears that I might have misunderstood the original question since it was only pertaining to traffic from the FWSM. My apologies. Thanks, Nick
From: David White, Jr. (dwhitejr) [mailto:dwhit...@cisco.com] Sent: Tuesday, October 27, 2009 10:32 PM To: Nicholas Maio Cc: j4b...@gmail.com; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] FWSM traffic distribution across internal etherchannel Hi Nick, Changing the SUP's load-balancing algorithm (which is what is described in the link provided) only affects the traffic that egresses the switch and ingresses the FWSM. It does not impact the packet distribution in the reverse direction (egress the FWSM and ingress on the switch). I didn't indicate that I would need to know the traffic profile to determine the correct SUP load-balancing algorithm, but rather to explain why ports 3 and 6 were mainly utilized for traffic egressing the FWSM - which was Jack's original question. Sincerely, David. nm...@guesswho.com<mailto:nm...@guesswho.com> wrote: David, The section named "Customizing the FWSM Internal Interface" in the following page http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/configuration/guide/switch_f.html would be helpful. As you stated you would need to know the traffic profile to detemine the correct algorithm but why would you say that there aren't any commands to change this? The command is not run in the fwsm but rather the switch/router. Nick ________________________________________ From: cisco-nsp-boun...@puck.nether.net<mailto:cisco-nsp-boun...@puck.nether.net> [cisco-nsp-boun...@puck.nether.net<mailto:cisco-nsp-boun...@puck.nether.net>] On Behalf Of David White, Jr. (dwhitejr) [dwhit...@cisco.com<mailto:dwhit...@cisco.com>] Sent: Tuesday, October 27, 2009 8:29 PM To: jack b Cc: cisco-nsp@puck.nether.net<mailto:cisco-nsp@puck.nether.net> Subject: Re: [c-nsp] FWSM traffic distribution across internal etherchannel Hi Jack, Yes, it is most likely that this is normal. There are no CLI commands on the FWSM to adjust this. I would have to understand your traffic profile along with your config to tell you why the given profile is almost exclusively utilizing ports 3 and 6. Sincerely, David. jack b wrote: I have a FWSM running 2.3(4)11 in slot 4 of a 6509. I have noticed that I am getting unequal traffic distribution on the links that make up the ether channel bundle between the FWSM and 6509. Here is a snapshot of the traffic distribution 4/1 in 28.99mbps out 458.10mbps 4/2 in 12.37mbps out 248.31mbps 4/3 in 960.86mbps out 294.95mbps 4/4 in 34.07mbps out 505.22mbps 4/5 in 15.08mbps out 243.10mbps 4/6 in 950.63mbps out 262.68mbps In is traffic from the FWSM to the switch and out is traffic from the switch to the FWSM. Is this normal operation, or is there a way to distribute the traffic from the FWSM to the switch more evenly? _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net<mailto:cisco-nsp@puck.nether.net> https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net<mailto:cisco-nsp@puck.nether.net> https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
