I just recently purchased an SG300 10 port switch. After reading through many of the threads here, I was finally able to get the different VLANs to route properly. However, I'm having a unique issue that I'm not sure if it's related to the switch or not. I currently have 2 VLANs configured on the switch.ports 1-4 are native vlan 1 (192.168.1.X) ports 5-7 are VLAN 10 192.168.10.X (Trunk Port with VLAN 1 tagged and VLAN 10 untagged)I have a Hyper-V server connected to both of these networks. The VMs are running on both VLANs on port 5. I have the following problem:When I have a domain controller VM on VLAN 10, I notice that many of the DC communications failed. I took a network trace and noticed that many of the RPC port ranges were failing. I am able to ping all of the hosts on VLAN1 and vice versa. My question is as follows:Does this switch have some type of security option that blocks high range ports? I can't seem to find the menu option indicating that this is the case. I have already set-up a NETBIOS UDP proxy, but this hasn't worked much. I still have problems connecting to machines on this VLAN range.
So, I spent some time this weekend troubleshooting the issues I've had with the new SG300-28P switch and POE to many of my devices in the office. As a recap, I cannot utilize all of the 24 POE ports on the switch for POE purposes. Really only every other port [with a few odd combinations thrown in between]. In addition, the SG300-28P switch, on occasion, is sending POE to non-POE devices [e.g. my Ruckus Zone Director 1106].
Here are my POE devices [all 802.3 af-compliant]: 3 Ruckus 7982 access points1 Pakedge access point2 home-automation controllers2 Polycom voip phones I called Cisco support several times in regards to this problem, and they figured it was a hardware issue - a faulty switch. So, Cisco sent me a replacement SG300-28P, which I hooked up today. The exact problem still occurs. Default configuration [fresh out of the box]. No way I can land, for example, the 3 Ruckus 7982 AP's on ports 1, 2, and 3 [or ports 1,13, and 2]. I have to put them on ports 1, 3, and 5 in order for them to power up. In addition, I can't plug any other POE devices on the ports either between or below them. I had to skip another port bay. This is very odd behavior!! Two Cisco SG300-28P's in a row with the same problem.
However, I also had one of the new Cisco SG300-10P switches in my possession for a recent project of ours. I decided to hook up the same POE devices to this switch. ALL POE devices were recognized and worked! No need to skip a port. And it didn't matter what device was plugged in first or not. I am now convinced that it is either a hardware issue [bad power supply/transformer?] inside all of the SG300-28P switches, or a firmware issue.
Both of the SG300-28P switches were running firmware 1.1.2 [the latest on Cisco's website]. So, I decided to install an older firmware version on the SG300-28P switch that I'm returning [installed 126.96.36.199]. Here's what I found out. I could then plug 2 POE devices [e.g. two Ruckus AP's] in adjacent horizontal ports, but not three in a row. In addition, not all adjacent ports. It's funky. For example, I could plug an access point in ports 20 and 21, but not in 21 and 22. No rhyme or reason in how it worked. And I still couldn't plug an access point in adjacent vertical ports [e.g. ports 1 and 13]. BUT...
It's interesting that the same exact switch that would not initially allow 2 horizontally-adjacent POE ports to be utilized WOULD allow 2 horizontally-adjacent POE ports to be utilized when running a different firmware version. It's also interesting to note that when plugged into a "non-working" POE port, the SG300-28P would actually make a small whining noise. Very subtle noise; I could hear it when approx. 1ft away from the switch. The noise was not noticeable when ports were skipped [and POE actually worked]. Therefore, I believe that Cisco has some SG300-28P firmware bugs [at least in the last two versions of firmware] that is not truly allowing all 24 ports to utilize POE correctly. This problem does not exist with the SG300-10P switch.
In addition, I'd like to know when they think a solution could be created if it's firmware-related. If hardware-related, I don't think I'll be recommending any 28P switches in our projects. Perhaps just the regular SG300-28 with a separate SG300-10P. It's a shame because the SG300-28P is more of a bargain when compared to the two separate components.
Essentially, not all ports on our brand new SG300-28P switches provide Inline Power to our older 7900 series phones. I can connect the phone a couple ports down and it usually powers up, but not always. Often I can also connect an 802.3af device to one of the troublesome ports and it will received power, however I am noticing there are some ports that now refuse to supply PoE at all?
This is equipment that has been running perfectly fine for several years now, on C3524 PWR XL switches. I can also tell you that this is not isolated to one switch, but all 5 of our SG300 access switches. And, yes, the firmware has been updated to 188.8.131.52.
I recently purchased an SG300-10 switch. Is it possible to change the TCP port numbers for the administrative services on this device? For example, if I wanted to change the web admin port from being availble on port 80 to port 8080, or move the SSH port from 22 to 2022, how would I do this?
I've looked over the web admin interface, and the Security > TCP/UDP services option looks like what I want, but I see no way to change a service's listening port. Is this possible?
We had a number of Linksys SRW2048 / SRW2024 switches that had the "bloated capacitor issue" or "bad capacitor issue".These units would basically disconnect/connect their ports.Applications would sometimes crash on workstations.These were all located at different client sites.These were replaced under warranty with the SG300-52 units.When we implemented the SG300-52 units at several sites we noticed the the logs showed disconnect/ connects.We were not seeing apps crash.Support advised they were not aware of any issues.We did a firmware update that was available that made no difference. (184.108.40.206)6 months have now passed.
We noticed at our site very poor throughput one night doing a very heavy file copy data transfer between two computers.It actually ground all other computers on the network to a halt.We inspected the switch.It had "all lights flashing".We thought this strange and shutdown the whole system. Problem still existed.Power cycled the switch. Problem still existed.Noticed their was a new firmware update. (220.127.116.11)We implemented this.The lights on the switch stopped "all lights flashing".Throughput was back to normal. (ie didnt grind all other computers to a halt)
We then had a second site complain of similar issues.Heavy throughput between two computers bought all other computers to a grinding halt.Lights were "all flashing" on switch.Workstation would disconnect/connect in a loop during heavy file copy.We implemented the firmware update thinking this would solve the issue.It now still has the issue of disconnect/connect however and apps sometime crash.We have now replaced the switch with a HP 2510-48G.This is working properly.I have now since been to other sites that also have these SG300 switches and notice the "all flashing lights".
I have a Cisco SG300 switch on which trunks are configured. I have a server which sits on the switch via a trunk link of four network cables (4 Gbps total)on which LACP is enabled. I'm having trouble connecting to the server using VNC from a computer on the network. It doesn't happen all the time though, it's just random.
On looking at the logs of the switch, I saw something unusual. The trunk that connects the switch to the server is constantly removing all the member ports and adding them back again after a few minutes interval. That causes the trunk link to flip on and off all the time. What could be the reason that's causing it to happen? I know it could be the network cable but I'm using brand new cables and the server also is brand new.
We have 3 SG500-52 switches that are stacked and configured for layer 3 that replaced a couple of SG2010 switches a month ago. Switch units 1 and 2 are for servers and unit 3 for the workstations. The switches are connected with stacking SFP+ copper cables, 1 1M and 2 7M cables. The problems are occurring between the workstations and servers resulting in slow traffic on some links and connection failures. A repeatable failure occurs doing a backup from a PC on unit 3 to a server on unit 1 and 2 (2 port LAG). Moving the workstation to a port on unit 1 results in successful backups every time.
Initially I was able to confirm packet loss between my PC (on unit 3) and the servers using ping (ping -f -c 100000 -s 1460) of about .1%. The iperf program in udp mode also showed some packet loss and in tcp mode showed slow connections. A week ago I then upgraded the switches from v18.104.22.168 to v22.214.171.124 and rebooted. After that the ping and iperf tests show no problems although there are still slow connections to samba shares and the backups still consistently fail.
I suspect there is a problem with the stacking connections and have searched for traffic statistics on the stacking ports to look for errors but have not found anything. Doing a snmpwalk didn't reveal anything that I recognized. There are interface counters for all the ports except the stacking ports.
Am looking into using stacking and NIC teaming to create redunancy for user access to servers. What I am thinking is getting 2 SG500-28 switchs and configuring them in a stack that appears as one logical switch. Now on the servers I would configure 2 NICs to be a team so they appear as 1 logical interface, perferably in an active/active configuration using LACP. In this NIC team take 1 team member to switch A and the other to switch B, so each team member is on seperate switches.
Givent the scenario:
1) Will that work with the 500 series switchs? Reason for the switches is their price point is perfect for my client.
2) Besides the stack link will there also need to be a LAG between the switches or does the stack link do data traffic also?
These are our first switches and seems like GUI is lot different than the online. Out intervlan routing is o not working. I am absolutely sure that I setup the switch in L3 mode since it allows me to create mutiple interfaces. I am hoping that this GUI issue is related to interVLAN routing.
Below is the blog I started for InterVlan issue [URL]
This is the link for online simulator and what I see in its IP tab. I know this switch is not SG300. [URL]
This is what I see on our switch.
Our switch version switchd64684#show version SW version 126.96.36.199 ( date 19-Jun-2011 time 18:10:49 ) Boot version 188.8.131.52 ( date 08-Apr-2010 time 16:37:57 ) HW version V01
I have SG300-28P that I am using as layer-3 switch. Recently I ran in to SG300-52 switch and even though loading same firmware doesn't give me option to do layer-3 switching. For SG-300 I see options in GUI to create vlan interfaces under IP information section, while SG300-52 has IP information option only under the management section.let me know if these are 2 different hardware types and L3 is not possible on SG300-52. If its possible to enable L3 switching on SG300-52?
how can i view the port G27 and G28 in GUI? As based on the GUI Adminstrator - > Port Management - > Port Setting i only can view from port G1 to G26. Or it will only appear when the port is active for stacking.
I have 3 x SG500-52P switches stacked. Vlan 1 is data and Vlan 3 is voice Port to Vlan membership is 1UP and 3T Port security is disabled
The issue I have is that I can have either a phone or a PC plugged into a port but not both. If I plug in both then the phone works and the PC gets an IP address (Broadcast traffic) but PC cannot browse the network.
I have downloaded the new firmware for the SG500. I see there are two files included in the download, a boot file (rfb) and regular firmware image (ros). I have looked and haven't seen anything about the rfb files. I know it is a boot file, but do not know if I should update the boot file first and then the firmware image or vice versa. Also, in my update screen on the SG500, the boot file option is greyed out.
I am setting up a 3 host ESXi cluster. I am using a pair of stacked SG500-28 switches for switching redundancy. Each host has 8 NICs. 4 to each switch. I have successfully setup a 3 NIC LAG with 1 path to one switch and 2 paths to the other. These LAGs work. When I setup a 2NIC LAG via the console for management, and the associated ports on the switches, I lose managment communication with the host. Before setting up the LAG in the ESXi console, I set that vswitch properties to us IPHASH as instructed here bit.ly/VLaTEt I have attempted to follow those instructions as closely as possible. The one thing that I am wondering is whether the SG series supports etherchannel. I can't find any reference. Either way, it works on the other vswitch that is for vMotion. I can vmkping between the hosts over that LAG. But setting up a LAG on the management vSwitch doesn't?
I had connected a computer and NTP to the SG500. i had successfullly sync the internet time on the computer. but when i type 'show clock' on the terminal. The switch did not manage to sync the ntp time.
We have a problem with NLB on a SG500-28P which is a major issue for us.
I am investigating a problem together with Microsoft Support about a download/upload performance issue with a Microsoft Forefront TMG array which is connected to a single SG300-28P. Àpparently this issue exist on every NLB array we implement. I am now at the point we asume the SG500-28P does not handle NLB in unicast mode very well.
We have a network topology as shown below:Please note the actual public IP Addresses are hidden and the internal IP Addresses are diffrent, for security reasons.
Our SG500-28P is configure in L3 mode. It hosts three subnets you see above. The two TMG servers are configured with NLB (in unicast mode) on the Internal Network and External Network interface. It is connected to the internet and our internal network. These TMG Servers are in fact Edge Servers. Our other servers and client are in a different VLAN. The default gateway flows through this NLB Cluster [10.250.0.254].
Problem: When a client uses its default to connect to the internet the performance is very and very slow. With an internet connection of 10/10 we get 10/2. With an internet connection 100/100 we only get 7/1!.
Now we have tried everyting we can imagine. I can't write down all, because that would be a lot. One thing is worth notice; When we move the client to the same VLAN as the NLB Cluster and the client uses 10.250.0.1 as its default gateway, the problem still exists. But... when the client uses 10.250.0.254 as its default gateway the performance is outstanding 95/95! Apparently if traffic for the NLB Cluster is routed through the SG300-28P the performance drops like a rock.
I have never seen this before with SG300 series switches, although this environment is different. Normally I would configure NLB in multicast mode. But the switch does not allow to add static ARP entries for multicast MAC Addresses.I know NLB in unicast mode introduces switch flooding and such. But why does the SG500 not handle this right? Is there anything I can do about it?
Currently, my Cisco DPC3010 cable modem is connected directly to one of the Ethernet ports on my Linux router. All works quite well that way. However, I'm curious to know if there's some what to separate the router and cable modem over 2 switches?
The coax enters the house in my living room and connects to the CM there. The router is also sitting in the living room, and it's connected to a Cisco SG200-18 switch. I have Ethernet running from my living room to my basement, where a Cisco SG500-24 switch sits. The two switches are connected via a 2xGigE port channel.
I want to move the router into the basement. Ideally, I'd like to move the CM down there with it, but I don't have the necessary coax run. So for now, that's out. But... can I go from something like this:
I tried it, complete with a separate VLAN specifically for the CM traffic. And the VLAN was properly trunked between the two switches. But for some reason, the router was unable to communicate via IP to the upstream. I'm not sure if there are config bits I need to set on the SG200 that the CM is connected to? I thought I'd read somewhere that CMs don't like broadcast technology such as LLDP and/or CDP, so I disabled both of those on its port. Did I miss something else perhaps? Or am I trying to do the impossible?
For what it's worth: the IP connectivity is static. There's no DHCP running between my router and the upstream cable provider. The cable modem is literally acting as a L2 coax-->Ethernet convertor, more or less.
I have a switch from SG 500 Series the works as Layer 3 Routing Switch with the Firmeware 184.108.40.206. I have create some diferent VLAN´s and have defined one ACL for each VLAN. Now i try to do a binding from the ACl to a VLAN but i have only the option to bind the ACL to a phys. Interface or a LAG.is the a possibility to bind the ACL to a virtual interface like in other Cisco serieses and how it works ? the Backround is i have connectetd 2 Hyper-V Server where the Guests are in different VLAN´s and the server is connectetd with a 10Gb Trunk to the Switch now the switch routed the different VLAN´s and i must have some restrictions between the VLAN´s.
At our office we have a weird performance problem with the following switches and connectivity:
Internet | SG300-24 (L3) core switch (in our server room) |SG300-10P (L2) access swtich (in our meeting room) | SG500-28P (L3) switch (in our meeting room)
We are building a new computer infrastructure that is connected to the the SG500-28P. As you can see above the SG500-28P in our meeting room has an uplink to the SG300-10P in the same meeting room. And again the SG300-10P has and uplink to the SG300-24 in our server room. From the server room, there is connectivity to internet. The network uses a multiple VLAN's and routeing between them. Bootom line is, the internet VLAN ID 10 is tagged to trunk ports and available on the SG500-28P. So client get connected straight into the internet based VLAN.
The performance on the SG500-28P switch itself from VLAN to VLAN is very fast. But... the uplink connection tot the internet and other VLAN's on the core switch are very and very slow! At least 10 times slower than normal. So if I plug a laptop in the SG500-28P and go from uplink to uplink, it is slow! But... when I connect the same laptop to the SG300-10P the connection with only one uplink it is fast. As if three switches is to much. I can't figure out why.
I have an SG-200-8 which connects to a stacked pair of SG500-28P switches. It is powered by PoE from the SG500. From the SG500 the port appears Up, but at the the SG200 it is disabled and nothing I do re-enables it. I know the cable is good because I had a previous netgear switch hanging off it and working, also the power gets through.I can only connect to the switch if I disable wifi and plugin a manually configured PC - DHCP doesn't get through to it from the SG500 end.I have tried a second SG200 same problem. Have disabled RSTP/ STP thinking it might to relate to the fact that a PC connected to the switch also had a wifi connection to the same LAN, but. Don't know where to go next. looks like a bug?
The swtich is configured and going to operate in L3 mode. All ports are still assigned to the default VLAN ID 1. I have created several new VLAN's. Once I configure and aplly an IP Interface to a certain VLAN the swtich becomes inaccessable right away. I am pretty sure I am not pulling my own VLAN under my connection. Every port is inaccessable. I have to pull the power plug and restart the swtich with its saved configuration. Even when I add another IP interface to the default VLAN 1, same issue. I have tried lot's of things, but can't get it to work properly. I have just upgraded to the latest firmware.
I have configured dozens of SG300 swtiches which is very easy. This one does not work with me.
I have an SG500 that is already deployed with some Access VLANs on it. The PVID is still the default 1. I am trying to change it to 19 with as little interruption as possible. If I just go to the VLAN Management Tab and change the Default VLAN to 19 and reboot the switch, will it migrate my management IP to the default VLAN without any trouble? Would it be less interruption to: Create VLAN 19, assign it an out of subnet IP address, change a port to PVID 19, connect directly to that port, go to that IP address, remove the original management IP from PVID1, change all the ports to PVID19 then change the management IP back to the original?