CISCO / BushNET Troubleshooting Guide

Common issues and solutions for the CISCO / BushNET.

Table of Contents

  1. Connection Issues
  2. Interface Problems
  3. VLAN Issues
  4. Spanning Tree Issues
  5. Routing Issues
  6. Performance Problems
  7. Security Issues
  8. Environmental Issues
  9. Recovery Procedures

Connection Issues

Cannot Connect to Console Port

Symptoms:

  • No output in terminal
  • Garbled characters
  • No response to keystrokes

Solutions:

  1. Verify cable connections
- Check cable is fully seated
- Try different console port (RJ-45 vs USB)
- Try different cable
  1. Verify terminal settings
Baud: 9600
Data bits: 8
Parity: None
Stop bits: 1
Flow control: None
  1. Check COM port assignment
# Linux
ls /dev/ttyUSB* /dev/ttyACM*
dmesg | tail -20

# Windows
# Device Manager → Ports (COM & LPT)
  1. Linux permission issue
sudo usermod -a -G dialout $USER
# Log out and back in

Cannot SSH to Switch

Symptoms:

  • Connection refused
  • Connection timeout
  • Authentication failure

Diagnostic Commands:

show ip interface brief
show ip ssh
show line vty 0 15
show access-lists

Solutions:

  1. Verify IP connectivity
# From PC
ping <switch-ip>
  1. Verify SSH is enabled
show ip ssh

# If not enabled:
ip domain-name company.local
crypto key generate rsa modulus 2048
ip ssh version 2
  1. Verify VTY configuration
show run | section line vty

# Fix:
line vty 0 15
 transport input ssh
 login local
  1. Check ACL blocking SSH
show access-lists

# If ACL applied to VTY:
line vty 0 15
 no access-class <acl-name> in
  1. Verify user credentials
show run | include username

# Add user:
username admin privilege 15 secret Password123!

Interface Problems

Interface Down

Diagnostic Commands:

show interfaces status
show interfaces GigabitEthernet1/1
show logging | include Gi1/1

Common Causes & Solutions:

  1. Administratively Down
interface GigabitEthernet1/1
 no shutdown
  1. No Link (down/down)
  2. Check cable connection
  3. Verify remote device is powered
  4. Check cable type (straight vs crossover)
  5. Try different port

  6. Speed/Duplex Mismatch

show interfaces GigabitEthernet1/1 | include duplex

# Fix - set to auto:
interface GigabitEthernet1/1
 speed auto
 duplex auto
  1. err-disabled State
show interfaces status err-disabled
show errdisable recovery

# View cause:
show logging | include err-disable

# Re-enable:
interface GigabitEthernet1/1
 shutdown
 no shutdown

# Enable auto-recovery:
errdisable recovery cause all
errdisable recovery interval 300

High Interface Errors

Diagnostic Commands:

show interfaces GigabitEthernet1/1 | include error|CRC|collision
show interfaces counters errors

Common Causes:

Error Type Cause Solution
CRC errors Bad cable, EMI Replace cable, check routing
Collisions Duplex mismatch Set duplex auto/full
Input errors Various Check cable, speed/duplex
Output drops Congestion Check QoS, upgrade link
Giants MTU mismatch Match MTU settings
Runts Collisions/bad NIC Check duplex, replace NIC

Clear Counters (for testing):

clear counters GigabitEthernet1/1

VLAN Issues

Device Cannot Reach Other VLAN

Diagnostic Commands:

show vlan brief
show interfaces trunk
show interfaces switchport
show mac address-table

Solutions:

  1. Verify VLAN exists
show vlan id 10

# Create if missing:
vlan 10
 name Production
  1. Verify port VLAN assignment
show interfaces GigabitEthernet1/1 switchport

# Fix:
interface GigabitEthernet1/1
 switchport access vlan 10
  1. Verify trunk allows VLAN
show interfaces trunk

# Fix:
interface GigabitEthernet1/9
 switchport trunk allowed vlan add 10
  1. Verify routing between VLANs
show ip route
show ip interface brief

# Need L3 switch or router for inter-VLAN routing

Native VLAN Mismatch

Symptoms:

  • CDP/LLDP shows native VLAN mismatch
  • Intermittent connectivity

Diagnostic:

show interfaces trunk
show cdp neighbors detail | include Native

Solution:

interface GigabitEthernet1/9
 switchport trunk native vlan 99

Spanning Tree Issues

Unexpected Topology Changes

Diagnostic Commands:

show spanning-tree
show spanning-tree detail
show logging | include SPANTREE

Solutions:

  1. Enable PortFast on access ports
interface range GigabitEthernet1/1-8
 spanning-tree portfast
  1. Enable BPDU Guard
interface range GigabitEthernet1/1-8
 spanning-tree bpduguard enable
  1. Verify root bridge
show spanning-tree root

# Set as root:
spanning-tree vlan 10 root primary

Port in Blocking State

Diagnostic:

show spanning-tree interface GigabitEthernet1/1

Solutions:

  1. Expected behavior - STP blocks redundant paths
  2. Incorrect root bridge - Set proper root priorities
  3. Loop detected - Check physical cabling

Routing Issues

No Route to Destination

Diagnostic Commands:

show ip route
show ip route <destination>
show ip protocols
ping <destination>
traceroute <destination>

Solutions:

  1. Missing default gateway
ip default-gateway 192.168.1.1
  1. Missing static route
ip route 10.0.0.0 255.0.0.0 192.168.1.2
  1. OSPF neighbor not forming
show ip ospf neighbor
show ip ospf interface

# Check:
# - Matching area IDs
# - Matching network types
# - Hello/dead timers
# - Authentication

Performance Problems

High CPU Usage

Diagnostic Commands:

show processes cpu sorted
show processes cpu history

Common Causes:

Process Cause Solution
IP Input High traffic, ACL Optimize ACLs
Hulc LED Normal Usually OK
Spanning Tree Topology changes Stabilize STP
SNMP Engine Polling Reduce poll frequency
Logger Excessive logging Tune logging levels

High Memory Usage

Diagnostic:

show memory statistics
show processes memory sorted

Solutions:

  • Clear unused sessions
  • Reduce logging buffer
  • Upgrade IOS if memory leak

Slow Network Performance

Diagnostic:

show interfaces counters
show interfaces | include drops|error
show qos interface

Solutions:

  1. Check for errors
show interfaces GigabitEthernet1/1 | include error|CRC|drop
  1. Check QoS
show qos interface GigabitEthernet1/1 statistics
  1. Check for congestion
show interfaces GigabitEthernet1/1 | include output drops

Security Issues

Port Security Violation

Diagnostic:

show port-security
show port-security interface GigabitEthernet1/1
show port-security address

Recovery:

interface GigabitEthernet1/1
 shutdown
 no shutdown

Or enable auto-recovery:

errdisable recovery cause psecure-violation
errdisable recovery interval 300

Locked Out of Switch

Solutions:

  1. Console access available:
  2. Connect via console
  3. Reset password (see Recovery Procedures)

  4. No console access:

  5. Physical access to switch required
  6. Follow password recovery procedure

Environmental Issues

Temperature Warnings

Diagnostic:

show environment temperature
show logging | include TEMPERATURE

Solutions:

  • Check ambient temperature
  • Verify ventilation
  • Check fan operation
  • Clean dust from vents

Power Supply Issues

Diagnostic:

show environment power
show power inline (for PoE)

Solutions:

  • Verify power connections
  • Check power supply LED
  • Verify input voltage

Recovery Procedures

Password Recovery

  1. Connect via console
  2. Power cycle switch
  3. Press MODE button for 15 seconds during boot
  4. Follow prompts in ROMMON:
switch: flash_init
switch: dir flash:
switch: rename flash:config.text flash:config.bak
switch: boot
  1. After boot:
Switch> enable
Switch# rename flash:config.bak flash:config.text
Switch# copy flash:config.text running-config
Switch# configure terminal
Switch(config)# enable secret NewPassword
Switch(config)# end
Switch# write memory

Factory Reset

Switch# write erase
Switch# delete flash:vlan.dat
Switch# reload

IOS Recovery via TFTP

From ROMMON:

rommon 1 > set IP_ADDRESS=192.168.1.10
rommon 2 > set IP_SUBNET_MASK=255.255.255.0
rommon 3 > set DEFAULT_GATEWAY=192.168.1.1
rommon 4 > set TFTP_SERVER=192.168.1.100
rommon 5 > set TFTP_FILE=ie3300-universalk9.bin
rommon 6 > tftpdnld
rommon 7 > boot

Emergency Installation

See: Emergency Recovery Installation


Diagnostic Command Summary

Issue Commands
General health show version, show environment all
Interfaces show interfaces status, show interfaces counters errors
VLANs show vlan brief, show interfaces trunk
Spanning Tree show spanning-tree, show spanning-tree root
Routing show ip route, show ip interface brief
MAC addresses show mac address-table
CDP/LLDP show cdp neighbors, show lldp neighbors
Logs show logging, show logging | include error
CPU/Memory show processes cpu sorted, show memory statistics

References