I have created a management vlan on my network of 2950 and 3750 switches. One 3750 has a trunk to each of the 2950 switches which includes the management VLAN. On that 3750 the vlan and line protocol are both up even though there is no specific port assigned to the vlan; I believe the trunk connections allow the vlan line protocol to come up. On another 3750 stack I have my VLAN defined with no ports designated or trunks; the VLAN is up however the line protocol is down.
I have a stack of 3750-X that are used to both switch traffic inside V LAN and also to route a couple of WAN ranges from our up link provider to the DMZ v LAN.Now I'd like to have a SVI Vlan1 with an IP in the "management v LAN", but I'd like that SVI not to be rout able.
More exactly :
- no traffic should ever exit that interface that's not the generated by the router itself (ssh/snmp/...) - no incoming traffic on that interface should be forwarded anywhere - I'd also like to have a different default gw to be used by traffic generated by the switch itself. (for eg, ssh traffic coming from any another sub net like 10.2.0.0/24 to the switch SVI Vlan1 ip 10.1.0.1/24 should be routed back through the Vlan1 gw and not through out up link ptp gateway)
I think I can achieve the first two with ACLs on the SVI. But not sure about the last one ...
I've got a 3750X, IOS 15.0 IP Base license, reset to factory defaults, and I want to use the FastEthernet0 out-of-band management port on the backside next to the console port. The idea is that this port should provide a management interface that does not participate in the routing table. Problem is, contrary to the documentation, that configuring an IP address on the interface does make it show up in 'show ip route'. So it's still part of the routing table. Also, I'm unable to find the commands to change this and set a default gateway for just the management interface. I'm pretty sure this has to be possible, I remember seeing something similar on an ASA once. The 3750 configuration guide on Cisco.com does not seem to mention it.I considered using VRF but it's an IP Base license, no VRF.
What is the point of it? It is not a remote console. If i reboot the switch i cannot get back to the out of band management port unless the switch is fully running. Is this only for security purposees? so all telnet/ssh is from an Out of band network?
I'm trying to get an IP_ADDR set on the management port in SWITCH: mode but for some reason the port seems disabled. PC shows connection unplugged. MGMT_INIT is not a valid command (not listed under '?' ). Bootloader version is 12.2(53R)SE2 FC1.
we have two AP541n APs that were clustered togehter. They are powered using PoE. The other day I discovered one of them wasn't working properly. I couldn't log into it from the web interface so I unplugged it and plugged it back in from the PoE switch. That didn't work. Since then I have taken it off the network and have tried to reset it and I still can't access it. I've tried connecting to it from the default IP, which according to the admin guide is 192.168.10.10, and that doesn't work. I have tried using Telnet and SSH to connect to it using the default IP and the static IP we had set for it. I have set up a little linksys router and plugged the AP and a laptop into it in hopes it might get DHCP, but that hasn't worked either. I have also noticed the WLAN 2.4G and WLAN 5G lights are not coming on. The PWR, SPEED, and LAN lights all come on. The DIAG light comes on when it's furst plugged in and then turns off. Right now it is not plugged into PoE so that light is off too. We had both APs plugged into an ESW-520 that was plugged into a UC560 which had recently been updated to the latest firmware: 8.6.1. The short story is I don't have any connectivity to my AP541n, even after being reset. No wireless, no Web GUI, no ping, nothing. Has this thing become a large paperweight?
Randomly when I try to access to 2950 from management tools, switch is unreachable, I have to access from other switch and reload 2950.
Problem only is from managemt tool to managament vlan 1 2950.
The strange thing is that management interface is encountering a very fast increase of throttles, broadcast and ignored packets:
2950#show interfaces vlan 1 Vlan1 is up, line protocol is up Hardware is CPU Interface, address is 0023.3488.fd65 (bia 0023.3488.fd65) Internet address is xxxxxxxxxx MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, reliability 255/255, txload 1/255, rxload 1/255
[code]....
It could be a hardware problem?, IOS has been upgraded.
I try to connect 3750X (15.0.1(SE3)) with PC or router that is interface card is fixed to 100Full on 3750X-12S-E I plug a SFP-T, this SFP is ok: [code]
But with Speed and duplex fixed the interface is up arround 1-4s and move to down and errer-disable.
I have multiple remote sites connected back into my infrastructure via satellite. I'm building a GRE tunnel accross this satellite infrustructure to my user's routers. I'm using EIGRP through these tunnels and everything is working great as far as connectivity to my users is concerned. However, with each of these packages, I would like to be able to remotely manage the satellite modem. My problem is that these modems all have the same web management IP address (192.168.1.1:80) and I can't change them. I thought to myself, "too easy, this sounds like an excellant case for NAT!" Either I'm tackling this thing all wrong or something because I can't seem to get it to work. Here is what I've so far (IPs modified and extra info cut[CODE]
A small remote site is going to need a dedicated 10mb connection to our Main Campus. Probably an 10mb ELAN connection(not decided as of yet). The site will be small - no bigger than 2500 sq feet with small walls possibly. Only one VLAN will be needed and we won't need any voice applications or back-up WAN ports. The site will provide connectivity for approximately 15 people. I've been looking at the 800 series routers for a solution. Do you think the 860 with the built-in 802.11 AP will suffice? I have a couple of concerns:
Does the 860 have CLI management?Will I be able to create a secure, encrypted tunnel between the 860 and a 2811 router on our Main Campus side? The 2811 has a 10mb ELAN secure tunnel on one interface already. I will purchase another interface card for this new, remote site VPN connection.Will the built-in AP give me coverage for the sq footage? I understand that there are extenuating circumstances to be concidered but, generally speaking?
From the video spec I viewed, the presenter said it had "basic security". What does that actually mean? This concerns me, as I want to built a secure WAN connection.Finally, does the 800 series fit this application or are there other Cisco products I should consider?
I have installed successfully installed and configured LMS 4.0 and every thing was okay until the customer decided to change the server IP address without notifying any one.
so i have returned the server to its original ip address since nothing worked after they changed the IP, but even after restoring the old IP address the device descovery is okay, but when i navigate to the devices management nothing appears in the all devices drop down menu and the remaining menues also.
i have tried to restart and to start a new device discovery also i have tried to run a data collection but nothing changed.
still stck on the devices are not appearing in the device management tab.
I have two dinasour APs that I need to fix. They are configured in bridge mode to bridge a few VLANs between two sites. Right now the management IP on BVI 3 interface doesn't work. Does it have to be on BVI1 for it to work? When I say "work" I mean I am able to ping it and use SNMP to monitor it.
I'm using LMS 4.0.1 (current patches and device packages)
There is a problem with the configuration fetch.There are some 2503 routers with IOS 11.3(6) and the message on LMS is: Couldnot enter ENABLE Mode from USER Mode on Device
The devices arn't configured with username, only telnet pw and enable pw; no access-lists or other limitations configured
The credential check is ok ... multiple checks done ... devices deleted, new discovery ... devices deleted and manually added .... with the link //serverip:1741/rme/rmedevices.do I've changed the timeouts multiple times (up to 60 seconds for TFTP, SNMP) .... all these have had no effect of the config fetch
I have a 3750X-24T in our production environment that is showing very high number of OQD's in the 'show int sum' output for 4 of the Gigabit interfaces; the interfaces are each in a seperate port channel and there are no OQD's for the relevant port channel and there are no output drops showing in the output for the 'sh int' command for each interface.
The following are the OQD's for the relenvant interfaces Gi1/1/1: 0 Gi1/1/2: 0 Gi1/1/3: 0 Gi1/1/4: 0 Gi2/1/1: 4252879251 Gi2/1/2: 4251090833 Gi2/1/3: 4251754140 Gi2/1/4: 4294942102 Po1: 0 Po2: 0 Po3: 0 P04: 0
Gi1/1/1 and Gi2/1/2 assigned to Po1, and so on. IOS version: C3750E-IPBASEK9-M 12.2(58)SE2
I have a Catalyst 3750X and 3750G configured in a stack. I need to break up the stack for failover reasons. My question is how do you determine what license's is on each of the switches. From the below print out. I assume the 3750X has the ip base license and the 3750G has the ipservices license. Is there a command that clearly shows which license's is installed on each switch in the stack? [code]
Why does my 3750x-12s switch say it's not supported in CNA??? I upgraded to CNA 5.7.1 and still says unsupported. This device is supported or I'm just missing something.I use CNA heavily to manage our MANY vlans.
What I have is two Cisco 3750X switches, 10 bridges, and 10 routers. What I'm doing is throughput testing. The problem is all of the routers have identical subnets because in the real world there won't be two of them in the same place. The 10 bridges were the easy part. I have one switch dedicated to LAN side and one dedicated to WAN side. Since the bridges themselves allow any traffic through because they are bridges I set all of the individual ports to essentially be their own subnet by making them L3 ports. Then, I set the switch to route the traffic based on subnet through the correct port using the ip route command in the CLI. I'm using a Spirent to generate traffic and the spirent lets me wrap traffic on different streams in different IP addresses. I made the uplink have a subnet of 10.0.28.0 and I made every port have a subnet starting with 10.0.5.0 being incremented by 1. This allowed me to send traffic from source address 10.0.5.5 to destination address 10.0.28.5 and vice versa by telling the switch to route any traffic with a 10.0.5.0 subnet to port 1 (first device) and any traffic with a 10.0.28.0 address to port 24 (uplink). The reason this works is because bridges don't care what the traffic is or where it is going so everybody is fine and happy. Now I have to introduce 10 new devices that are all routers while maintaining the previous set up and I'm stumped. I've tried everything I can think of, different Vlans, trunking, routing, L3 ports, etc. If i try to isolate everything by Vlan they can't talk to each other. If i try to isolate everything by Vlan and trunk the uplink port it won't work because you need to do Vlan tagging and my device doesn't do that and I don't think the switch can do that for you. The routing doesn't work because the uplink port has to be it's own subnet and when that subnet tries to send traffic to the router it's considered foreign and gets dropped. With L3 ports you run in to the same problem, you can isolate all of the individual ports with their own subnet but the uplink port has to have a different subnet which automatically causes the router to drop the packets. The only configuration that works is a completely default dumb switch configuration and that is unacceptable because I need all of this traffic to be isolated because of the bridges. Without the isolation, all of the data will go through the nearest easy hop which will be one of the bridges, even if that isn't the right path the switch doesn't know any better. I can change the subnet on the routers but I can't deviate too far from the original subnet which is 192.168.0.0. I tried setting up different subnets by incrementing the third octet by 1 every time, 192.168.0.1, 192.168.1.1, 192.168.2.1, etc. and think this setup will work I just don't know how to set the switch up. Setting up the switch to route the traffic properly without changing the subnet on any of the devices would be ideal.
I have WS-C3750X-24T-S switch with C3KX-NM-1G and now i want to put a transceiver GLC-EX-SMD= in the switch SFP port, is this GLC-EX-SMD= compatable with that switch ?. i thoroughly check the product datasheet and compatible chart but their i don't have seen ?
I have 3750x with existing small business server and all computers on one vlan. This vlan connects to other switches with fibre trunk sfp's.I want build a new forest utilising vlans in the normal way, what is the easiest way to segregate this vlan?The site is running 24/7.
I need to connect two switches with each have different Vlans and wants to Connect the users of These Switches to Existing Network of Company(Vlan 1 ; showing Right in the picture).
I have created Vlans and able to route packets from Two Vlans (10,20) to VLAN 1 but i am unable to get access to Users existing in vlan 10,20.
Internet is working fine from VLAN1 and existing network did not have any router ,it is just a DSL modem and did not have Static /Default Route option,NAT.
What Option should i choose for it. 3750x have 12 Mini Gbic Slots and 1 Routed port and did not have any NAT options in it.
I just bought 2 Cisco3750 X Switches, After I open the box, there are too many numbers lables on the switch.
1. Which number is for product registration ? 2. Can any give me the link for product registration ?
BTW, can explain to me what is PAK, is it come with the switch ? Where I can find it ? I can find serial number but I don't know how to use it and connect with PAK.
I want to confirm this is a licensing issue. On a 3750X with ipbase, I cannot create a vrf. So I would need the universal image, and that is a seperate license, correct?Is there a link that describes the difference bewteen ipbase and univeral images?
we have an issue with user who says that he is unable to connect to AP and he need to re-boot it everytime to re-connect to it.But when i check from WLC all the AP uptime is more than 150 days and the AP associate time of respective AP's is also more than 150 days.we are using cisco AIR-CT2504-K9 wlc and all the AP's are connected to Cisco 3750X and cisco4510R+E. [code]
PC---2960---3750(One Routed Port and All Switched Port)------------------------ 3750(One Routed Port and All Switched Port)-----2960------Internet
I have many Vlans on left side of image , Right Side of Image is having internet connection via Modem, and local connectivity between VLAN works fine but Other Vlans Except Vlan1 is able to Access Internet.Note that 3750X did not have NAT Feature ,How should I able to get Internet on Other Vlans (10,20)
Does the Network Module "C3KX-NM-1G" and "C3KX-NM-10G" for Cisco Catalyst Switch 3750X Comes with a transciever like GLC-SX-MM or SFP-10G-SR or do I need to order in seperately.
There seems to be a lot of conflicting information on what can and can't stack together in the 3750X range.
I know that LAN Base can only stack with other LAN Base switches.
Can IP Base stack with IP services in 3750X? I have also heard that the 15.x.x IOS restricts mixed feature set stacks?
I know that Cisco recommends that all switches in a stack have the same IOS and feature set but having all IP Services in a stack can get too expensive.
I'm trying to review a QoS setup, and I'd like to make sure I fully understand the current setup before I change anything. I'm seeing output drops on two different queue-thresholds, but not sure how packets are making it to one of the queues.
Switch Version CORE#show ver Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 15.0(2)SE, RELEASE SOFTWARE (fc1) System image file is "flash:/c3750e-universalk9-mz.150-2.SE/c3750e-universalk9-mz.150-2.SE.bin" cisco WS-C3750X-24 (PowerPC405) processor (revision A0) with 262144K bytes of memory. Switch Ports Model SW Version(code)
I can find queue4-threshold3 in the mappings, but how are packets getting mapped to queue2-threshold1? The priority queue is disabled for this interface, so I'm not sure how this queue is dropping packets, according to the maps nothing is mapped to 02-01.
I am building a switch stack using 4 48 port 3750X switches that will also have the power stacked. If I install a single 715W power supply in each switch will the stack support 802.3af accross all 48 ports on each switch? My calculations are 48 ports x 15.4W which gives me almost 740W needed which is over hte 715W power supply. I was reading somewhere were it mentioned that in a powerstack additional power can be drawn from the stack. I know this will not work if you are trying to support power on all switches accross all ports but would it if say 2 of the 4 switches are needing to provide PoE accross all 48 ports? If I say we can only use 24 ports per switch for PoE that drops the power need down to 370W which I believe should work. Just trying to get a better understanding of PoE consumption. Would the best solution be to just add a second power supply to each switch?
Any possibility remotely manage cisco 876? Remotelly I mean by connecting to WAN IP (DSL interface) from outside. It could be via CCP, telnet or ssh doesn't matter.
