Apparently on older switches you could just enter the "management" command under the new VLAN interface and it would pull the config from the old one, apparently that feature isn't around anymore. I've tried establishing a trunk to the damned thing and trying to switch over that way, but it doesn't seem to work.
View 4 RepliesWe've got a SG200-18 switch that is to be used as a workgroup switch in our environment (SW Version 1.1.1.8). Working with CLI on big and mid-range Cisco-gear over the past two decades I'm having a hard time figuring out the following on the SG200:
o) I want to change the Management-VLAN from the default "1" to the management-VLAN used in our environment. Sure enough I created that vlan in the SG200-config, however when it comes to assigning the management-IP and VLAN for the management interface in the corresponding pulldown under "IPv4 interface -> Management VLAN" the only thing selectable is the default "1". (see screenshots enclosed)So how do I set a management VLAN different from 1?
o) How do I enable telnet/ssh-access to the SG200-18 - I'd be far more comfortable with a CLI-environment?
when I was using image 1.0.0.27, I was able to move the management VLAN from 1 to which ever VLAN I wanted. For some reason, after switching the image to 1.1.1.8, I no longer have that function.
View 1 Replies View RelatedI have a Netgear GSM7248R switch with 5 different Vlans including th management Vlan. Each of the vlans are connected to my layer 3 switch for routing. I want to access the management vlan form any of my Vlans so my layer two switch can be detected by my snmp manager.
View 3 Replies View RelatedI have a client whom has asked me to enable web management on some of his 2960 switches. I did not think this was going to be an issue, and so I told the customer I would set this up for him.
Much to my dismay, I have been able to get http and https enabled, and then authenticating locally for the HTTP access. I then come to the screen once authenticated which is shown below:
The issue is that when I select "Web Console", it gives me a "Web Page Cannot be found".
I have stack of 2960 S switches.I can console only from Master not from memember switches is this default behaviour?
View 1 Replies View RelatedI have 2960 switch and i can't access it using my console cable .I can access other switches in my network ( 3560 & 2960 ) but i can't access only this switch.may be the console port in the switch damaged? or it's a bug ?? !!! although the switch is worked normally.
View 11 Replies View RelatedI want to configure my switch via console cable, the switch boots up normally, and there are no configurations present on the switch. However, anything I type does not appear on the terminal client. I used several terminal clients (TeraTerm, PuTTY, HyperTerminal), all latest versions as well as different PCs. I even forced the switch to rommon mode, still, anything I type does not appear on the terminal client.
Here's the output of TeraTerm:
Boot Sector Filesystem (bs) installed, fsid: 2
Base ethernet MAC Address: e8:40:40:06:f0:80
Xmodem file system is available.
The password-recovery mechanism is enabled.
Initializing Flash...
[code]....
After the last line, I can not type any command at all. I encountered this on three 2960 switches that we have here in our laboratory.
I have a set-up with multiple C2960 and C3750 switches. All these devices are being managed remotely. So basically I login to C2901, which is used as a Terminal Server, and reverse SSH to the console of each device. That's - I have assigned an IP to each port of the terminal server so that I can SSH directly to the desired device through via the mapped IP.
Now, recently I had to restart couple of switches - one C2960 and C3750. I initiated the reboot via console connection remotely. I could see the device logs for some time and then the logs stopped and there was no reaction from the console irrespective of any command I tried to enter.
I tried resetting the line on the terminal server, but that didn't work.
Now when I try to SSH the IP mapped to console of that particular device - i dont get any login prompt and there is no effect on device after giving any command. Although i can see the logs on the console session - but cant do anything.
I have a second way of connecting the device via inband- management, and checked the device config found it correct. It is same as other devices which are working correctly.
Both C3750 and C2960 are behaving exactly same - can see logs on console but see effect of even pressing enter - not getting login prompt as well.
I planed to configure a new catalyst 2960 switch with console cable.
During the boot, all seems ok. but from my terminal client, I can't have access to configuration mode.Keyboard or Terminal client is not sending commands to the switch.
The terminal is blocked on this line Compiled Tue 28-Sep-10 13:44 by prod_rel_team.what can I do to get access to the switch? [code]
We are looking at putting in a solution at a hotel for Free Guest WiFI.The solution would cover 4 floors and about 120 rooms and some open areas .In short the hardware would look as follows
-2500 controller
-1142LAP
-2960 PoE switch
-878 Adsl router for internet connectivity (20Mbps/1Mbps internet ADSL feed)
One of the concerns raised by the client is that they would like to make sure that no single user could eat up too much bandwidth creating problems for the rest of the users . Can the above KIT or something similar achieve this objective? As far as I can think of we would require a Proxy server .
I want to change the management IP of our wireless controller, I have 5 LAP1142N connected to this controller.
I have a few questions before I will do this task.
1. If I change the management IP, will the controller need a reboot?
2. Will the AP's automatically sync with the new management IP?
3. Do I need additional configuration on the AP's?
4. What else do I need to consider.
I'm trying to change the management IP for ACS 5.2 in GUI, but failed to find it.
Is there any way to change the IP address in ACS GUI?
We have a 2960 switch (switch2), whose Management IP cannot be reached/Ping'd. Could not Ping . We have checked the following, but still no clue on the root cause. Haven't tried a reboot yet.
Topology.
All switches are cascaded through trunk and allows all v lan's.
L3switch1 <-> switch1 <-> switch2 <-> switch3 <-> L3switch2
Switch 2 has correct ARP entries for the other switches that we try to ping.Mac address table is fine.Switches other than Switch 2 has proper ARP and Mac entries.This Mgmt v lan is not pruned across any trunks. (we are able to ping switch3 crossing switch2 when tried from switch1)Switches are running PVST and convergence is fine.No access list to deny the traffic.Tried sut/no shut on the V lan interface.
But still switch 2 could not be reached.
I just purchased 2 SF-300 48 port units for 2 customers. I want to be able to remotely manage them over the Internet with my browser. BUT, customer sites already use port 80 for web servers. So, how do I configure this switch to use some other port than 80?
I called support, and much to my surprise he said it cannot be changed. How bizarre that a device with many hundreds of configuration settings does not have one of the most basic settings...
At one customer site I can configure port forwarding and translation to get around this problem, but the other site's router does not offer port translation..
We have quite a few 3560 & 2960 on our edge network - what I have been looking at was to access switches via web-interface i.e. web-browser. Only problem with this is it always gives you access on privilige level 15 which is not ideal as not all who we decide to give access to these switches will be admin and allowed to configure these swicthes - In the 3560/2960 data-sheet states:
"Alternatively, a local username and password database can be configured on the switch itself. Fifteen levels of authorization on the switch console and two levels on the Web-based management interface provide the ability to give different levels of configuration capabilities to different administrators"
Where as there is no mention of how to configure these two levels of Web-based management in the configuration guide.
What is VLAN Management
View 4 Replies View RelatedI have two 5508 and one WCS server, the controllers are in one mobility group.Now I have to change the management IP addresses on the controllers. What are the correct steps to do this?
View 9 Replies View RelatedI am planning to change the management IP (VLAN 5) to one of my Cisco 2950 switch, Here I am creating a new VLAN101 and assign new IP
When I am doing this VLAN 2 is going admin down.
Can I change the untagged vlan on a 1131 to a new vlan. I need to move my management vlan from 10.1.1.1 on vlan 1 , to 172.16.0.1 on vlan 200. I attempted several configuration options including removing the vlan1 ip, changing my new vlan200 to untagged and mirroring it on the switch, and adding my new ip to vlan 1 untagged and then untagging the switch with access vlan 200 on the connected port. Nothing worked.
Below is a sample of what I changed:
interface Dot11Radio1
no ip address
no ip route-cache
[Code]....
We are installing a 2504 with management on VLAN2. The management port is on interface 1 which is attached to a layer 3 3750. From other VLANs in the network we cannot manage the 2504 controller with the web manager. We are running the latest code, 7.2.103.0, since we are using 3600 APs. We have a TAC case open, but spent 3 hrs with them and they can't figure out the problem. TAC did some debugging and saw that the 2504 is ARPing for the address of the PC on the other VLAN instead of sending the packet to its default gateway. How to get success with the management interface on a VLAN and managing the controller from another VLAN?
View 2 Replies View RelatedIn one of my client location I have deployed one Cisco 3560X (core switch) and one SG-200-18 (access switch). I’ve configured three vlans (vlan 2, vlan 3 and management vlan 1), relevant trunking and I’ve connected two pc to the access switch to vlan 2 and 3 respectively. So far everything (including inter-vlan communication) works fine, except that I couldn’t reach the vlan 1 (management vlan) devices (access switch and core switch) from any pc which is connected to either vlan 2 or 3.
I’ve configured the “port VLAN membership” settings in SG-300 as follows,
Interface mode Administrative vlans Operational vlans
GE 2 Access 2UP
[Code].....
It seems like the 4-ports switch in the 2504 can only one port can be used for management VLAN at a time ? I need all 4 ports to be untagged in the managment VLAN.
View 7 Replies View RelatedI'm having some problems with a D-Link switch. I believe it's filtering the management VLAN frames, which is really strange. If you look at the graph, you can see that the D-Link is connected to three switches by trunk links. I'll just use the numbers set in red on the graph to explain what's going on, it's simpler to see.So when I'm connected either to switch 4 or switch 5 (or the others on 5's level) I can use the management VLAN (ID = 1) to connect to all switches above number 3 (including number 3) but I can't get to switches numbers 1 and 2.The only way to connect to those switches is to either connect directly to one of their ports attributed to VLAN 1 or by connecting directly to switch 3. So that's why I concluded that switch 3 filters VLAN 1 frames. It's not switch 4 cause I can get from 5 to 3. But at 3, the frames stop.Also, this only happens for VLAN 1. We have some VoIP phones connected to switches 1 and 2 and their frames can communicate anywhere in the network.
View 12 Replies View RelatedI have a WAP321 I am trying to set up. It's connected to gi1/23 and the switch system mode is set to router. The rest of the network works just fine.I have an SG500-28p and the port. [code] On the WAP321 wizard, configured IP address on my management vlan and also configured the default SSID on that vlan. That works. (I plan to remove that one) Then I add the two SSIDs for vlan 20 and 22 (private and public access) and I can't associate to either of the two additional SSIDs. I haven't configured any other settings beyond the wizard and adding the other two SSIDs. I do want cisco mobile ios (jabber) to work on the private network and also do have a couple spa525g2s that need to connect wireless.
View 1 Replies View RelatedI am working to configure AP541n AP, is able to connect to the AP wired, assign AP static IP with proper subnet mask & default gateway, when it's done, everything looks perfectly, but since I changed the management VLAN ID from 1 to 2, I can't even connect to the AP wired from the PC, why does the change matter?
View 2 Replies View RelatedI got question about Cisco SF300-24P- is it possible to have management vlan in other vlan than in default vlan?I have default vlan 10 and voice vlan 20, I need to reach switch through voice vlan so I need to set up, interface vlan 20 with ip address. I ask these, because in gui, under Management Interface, IPv4 interface,under Management VLAN, I can only choose vlan 10, which is my default vlan, I dont have option to set ,up, in this case, vlan 20 as management vlan.
View 2 Replies View Relatedi have a small network with Polycom phones connected to the sf300 switch and have the pc's daisy chained via the second switch port on each phone. i have the pc traffic running on the default vlan 1 and the voice traffic running on the voice vlan 100. can i do bandwidth management on a vlan/port basis or is that not necessary. i want to ensure that the voice traffic is never impacted by the pc traffic on the same cable.
View 2 Replies View Related spam up the boards with the same basic CCNA level stuff, but I have a couple of questions about ios differences, limitations, and references. I have the following three switches. One appears to be considerably dated in regard to software version. My confusion/ignorance stems from managing VTP settings.
2924XL 12.0 5 WC8
2950 12.1 22 EA6
2950 12.1 22 EA6
When I set either 2950 switch as the VTP server, and the other as a client, the client inherits the server settings as expected. However the 2924 requires that I go into the vlan database from priv exec and manually set vtp client. That's pretty similar to setting any switch to client mode. The problem I am observing is that after setting the 2924 to client, it still doesn't inherit vtp version settings or pruning settings. I still have to manually configure those. Additionally, if I copy run start the 2924 after making these manual settings, and then reload the switch, all the settings are lost and it defaults back to server mode with all features disabled. From my searches, it looks like vlan information is stored in vlan.dat, but all the documentation I've found is on 12.1 ios which doesn't appear to use vlan database for vtp setup, meaning it might still be an issue, but not one I'm focused on at the moment.
Is the vlan database dumped at reload? I've read vlan.dat is stored in nvram and should be saved after a copy run start, but that is not the case for me.I have since set the 2924 as the server, manually configured the server from vlan database, executed copy run start, and reloaded the switch. Oddly, my manual settings saved from the reload, meaning I only lose settings when the switch is in client mode.Am I missing additional necessary client commands to save the config, or is this just a limitation of either the 2924XL or the 12.0 ios?On a related but completed out of scope topic, without a cisco service contract, how am I supposed to make heads or tails of all the different versions of ios, along with the letter-based features and what-not? I can't even find my 2924 in the list of platforms when searching for ios upgrades.
I have an HA ACE deployment and all seemed to be working well until I tried to access the ACE via the management VLAN in the one non-system context, no go.The ACE is in one-armed mode with an Admin/System context and one user context (named Messaging). Source NAT has been set up in the user context. All VLANs are in a port channel back to the core switches.I can access the ACE via the Management VLAN in the system context, all OK. I can access the load-balanced servers via the VIP in the user/Messaging context, all OK. I CANNOT acccess the managment VLAN other than ping it (resonds to ping, but telnet, ssh, https, etc. fails).The system/Admin context has a default route to the Management VLAN on the core. The User/Messaging context has a default route to the core switches on VLAN 5, which is the VLAN where the VIP resides.If I change the default route in the User/Messaging context to the Management interface on the core switches then I can access both contexts for management, but then the load-balancing falls over and I cannot access the serverfarm (via the VIP). Traces on the rservers show that NAT is being hit on the ACE and the requests are coming from the real IP of the clients. Put the default route back to the User/Messaging VLAN on the core and NAT is back to what it would be expected to be, and then remote/management access to the ACE is gone.
ACE02/Admin# sh run
Generating configuration....
logging enable
logging standby
logging timestamp
logging buffered 4
logging device-id context-name
[code]....
I have a new 5508 that I am setting up. My first one from scratch.
Interfaces:
managment -> 10.10.10.10 ->dhcp 10.10.10.1
voice -> 10.10.7.1 ->dhcp 10.10.10.1
guest -> 192.168.1.2 ->dhcp 192.168.1.2
Local DHCP (via the 5508) is for the guest network while the management and voice use the Windows DHCP server.
My problem, Voice and guest work fine. I have two SSID's (one 802.1X and the other PSK) that use the management interface that will not get an IP. I have enabled dhcp proxy from the cli on the controller. I tried with the management VLAN tagged and untagged.
I'm trying to figure out how to (or if I can) setup the management interfaces (fa1) on a couple of new 4500X switches. My issue is that the 4500X's themselves are the gateway for my management VLAN (.1 HSRP virtual, .2 and .3 SVIs on the pair of switches).
I would like to assign addresses from the management VLAN to the router Fa1 management interfaces but the software configuration guide seems to note this is not supported (and indeed it doesn't seem to work).
Physically I have Fa1 from core-1 into a port on an adjacent switch. Fa1 from core-2 also goes into a port on that adjacent switch. Both are in my management VLAN, whose SVIs are on the cores themselves.
We have a small cisco 1800 series workgroup router that seperates our network from the outside world. The data coming into our network goes into the router on interface fa0/1 and comes out on interface fa0/0. fa0/0 is split into 2 sub-interfaces (fa0/0.2 and 0/0.3). These sub-interfaces correspond to a desktop and server vlan on our network. The workgroup router is connected to a 3560G trunk port (we'll call it switch 1) and switch 1 connects to another 3560G (we'll call it switch 2). Recently I was asked to add another layer of security to our network by installing an ASA 5510 firewall and forcing certain types of traffic to authenticate using their domain credentials for our network. The firewall was set up between the router and switch 1 in transparent, multi-context mode. There are 2 security contexts, 1 for the desktop vlan and 1 for the server. Both have the same security settings applied to them since we want the same behavior regardless of whether they are trying to access the servers or the workstations.
View 2 Replies View Related