This is another question I see getting asked a lot in forums!
You see something like the following;
[box]
000032: *Sep 28 09:35:32.507 UTC: %PHY-4-SFP_NOT_SUPPORTED: The SFP in Gi3/0/50 is not supported (PNL-3750-Stack)
000033: *Sep 28 09:35:32.507 UTC: %PM-4-ERR_DISABLE: gbic-invalid error detected on Gi3/0/50, putting Gi3/0/50 in err-disable state (PNL-3750-Stack)
[/box]
The usual response is ‘Enable unsupported SFP’s’, and while that sometimes is the answer, it’s not always the answer!
Solution
1. Firstly Check the Modules and the Switches, Are you tying to plug a 10GB SFP+ into a slot that only supports SFP, (that includes plugging a twinax cable into an old switch!) In your ‘show run’ you should see TenGigabitEthernet (if your using SFP+ modules). Some switches with network modules list the same interface twice (once as 10GB interfaces and once at 1GB modules, I’ve blogged about that before see THIS ARTICLE, and to confuse things even further, the four interface versions, are grouped as two pairs with each pair consisting of one SFP slot and one SFP+ slot.)
2. Make sure your cable is NOT a CAB-SFP-50CM, (unless you are connecting a 3560 to ANOTHER 3560).
3. Are you using a 2960-S? If so you may need to update the IOS to use SFP+ (assuming your model supports SFP+ not all 2960-S models do).
4. Are you plugging into a Nexus switch with a 1GB connection? If so check the other end for the following error;
Description: Gi1/1/15: This port has been disabled because Non Compliant Gigabit Interface Converter (GBIC) connector detected.
If so, you may need to Manually set the speed on the 5K to 1000, (it wont auto-sense).
5. Is it a non-cisco branded SFP? If so it may still work, (but you will get no joy if you log a TAC call) with the following commands;
[box]
Petes-SW(config)#service internal
Petes-SW(config)#no errdisable detect cause gbic-invalid
Petes-SW(config)#service unsupported-transceiver
Before you create your logon banner it’s important to understand;
Where you want it to appear.
What the underlying file is actually called (on ESXi).
For access to the vSphere Web client (including the Flash client), the setting you want is ”Login Banner’ (Note: vCenter 6.0.Update2 or higher is required);
Using this you CAN FORCE, (but you don’t have to) a user to tick “I Agree..” to your banner before they can login.
This does not mean that vCenter does not have ‘Message of the Day’, it does, it just behaves a little differently, i.e.
With the ESXi hosts there are essentially TWO files we are concerned with, the etc/issue file and the etc/motd* file, and they display in two subtly different places.
*Note: MOTD stands for message of the day.
The ‘Issue‘ File
The ‘motd‘ file
You can use either one, (or both) to suit your requirements.
Solution
Logon Banner Text Example
What you actually put in the banners is up to you, here are a couple of examples I’ve used in the past, feel free to copy and adapt them to suit your own requirements.
Example 1
[box]
/-------------------------------------------------------------\
| ! WARNING ! |
| Notice to All Users (Both Authorised or Unauthorised) |
| |
| You have accessed a private computer network. |
| Unauthorised access or use of this system is prohibited. |
| |
| If you are not authorised to use this system |
| please terminate access immediately. |
| |
| Any or all uses of this system and all data on this |
| system may be intercepted, monitored, recorded, copied, |
| audited, inspected, and disclosed to authorised sites |
| and law enforcement personnel, as well as authorised |
| officials of other agencies. By using this system, the |
| user consent to such disclosure at the discretion of |
| authorised site personnel. Unauthorised or improper use |
| of this system may result in administrative disciplinary |
| action, civil and criminal penalties. By continuing to |
| use this system you indicate your awareness of and |
| consent to these terms and conditions of use. STOP |
| IMMEDIATELY!!! if you do not agree to the conditions |
| stated in this warning. |
\-------------------------------------------------------------/
[/box]
Example 2
[box]
**********************************************
*** You are responsible for all activity ***
*** Performed on this device ***
*** All config changes are logged ***
*** ***
*** For further Information ***
*** Please Contact either ***
*** IT Manager ***
*** or ***
*** Pete Long ***
**********************************************
[/box]
Adding the vSphere Web Client Banner/Terms and Conditions
To get access to these settings you need to log into your PSC (Platform Services Controller).
https://{FQDN of vCenter or PSC}/psc
Configuration > Login Banner > Edit > Tick ‘Enabled‘ > Tick ‘Checkbox Consent‘, (to force them to tick “I Agree..”) > Enter a Title and the message/banner test to display > OK.
Adding the vSphere Web Client MOTD
Log into vSphere Select the vCenter> Configuration >Message of the Day > Edit > Type in the text.
Note: Remember this displays as a popup for users logged into vCenter, but as a ‘nag-message’ for anyone login in in future.
Changing the ESX ‘Issue’ Banner
Log onto the ESX server > issue the following command ‘vi /etc/issue‘ > Paste in your text > Save and exit the file > Restart the SSH daemon with the following command ‘/etc/init.d/SSH restart’.
Changing the ESX ‘MOTD’ Banner
Log onto the ESX server > issue the following command ‘vi /etc/motd‘ > Paste in your text > Save and exit the file > Restart the SSH daemon with the following command ‘/etc/init.d/SSH restart’.
Changing Issue and MOTD banners from the vSphere Client
Yes you can do this in the vSphere client, the problem is, you can only paste on a block of text, so the fancy formatting I put in above will be lost. If that’s not a problem for you, then open the vSphere Client > Hosts and Clusters > Select the Host > Configure > Advanced System Settings > Edit > Search for ‘Config.etc’ > Chang the Config.etc.issue and/or Config.etc.motd files as required.
Related Articles, References, Credits, or External Links
