[c-nsp] =?utf-7?B?UkU6ICtBRnMtYy1uc3ArQUYwLSBQSVggNTE1RSBFdGhlcm5ldCBNRA==?= =?utf-7?B?SS9NRElYIHRyb3VibGVzaG9vdGluZw==?=

[Michael K. Smith - Adhost]

Hello Jason:

> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-
> bounces at puck.nether.net] On Behalf Of Jason Gurtz
> Sent: Friday, June 27, 2008 12:10 PM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] PIX 515E Ethernet MDI/MDIX troubleshooting
> 
> Is there a way to manually select MDI/MDIX mode on the Ethernet interfaces of
> the PIX 515E?  Is there any debugging capability?  From my looks about at
> cisco.com it would appear that they're standard MDI ports and no debugging
> commands seem applicable... :(  Some background:
> 
> We've had a problem with an IPS device (layer7 bump in the wire) deployed at
> the edge outside the PIX device and have received a replacement box.
> The Ethernet ports on the IPS feature Auto-MDIX capability or can be manually
> set to either MDI or MDIX mode.  Previously, we left the IPS in its default
> Auto setting and statically configured speed and duplex.  This worked fine
> with standard patch cables.  On the replacement box I could not get the ports
> to link between it and the PIX no matter if I set the IPS ports manually at
> MDIX or MDI mode or left it at auto.  I just discovered that cross-over cables
> make the PIX<->IPS link up (crossover cable works no matter if manually
> configured or auto). OK, so I figure the replacement has semi-borked ports.
> But...
> 
> More bizarrely, the replacement IPS links just fine using regular or crossover
> patch cables to a 3Com 5500 series switch or to an old ThinkPad G40 laptop
> with a 10/100 port.  I dunno maybe I'm just wasting time here but it would
> make me feel better if I could see some debugging errors and not feel crazy.
> 

The PIX 515e doesn't have a configurable setting for MDI/MDIX.  It's just MDI.  It makes sense that the crossover cable works because you are going device to device from the 515 to the IPS.  Also, the 3Com may autosense as well, so it will accept either a straight-through or crossover cable.

Regards,

Mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 475 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20080627/07c6968f/attachment.bin>