I have a very basic networking question If I have, say, 3750's (or any L3 switch, capable of routing) at the edge and a 4500 at the core, where should I route? At the edge? At the Core? Both?
View 4 RepliesI've been fighting what seems to be an increased number of outqueue drops on our core stack and edge switches for the last 3 or 4 weeks.(The core consists of a stack of 5 3750s in 32-gig stack mode. The wkgrp switches are 3560s. all are at 12.2.52) The wkgrp switches are directly connected to users. We use Nortel IP phones with the phone inline with the user PC. auto-neg to 100/full. [code] However I have tried turning off QOS on a couple of workgroup switches (no mls qos, but left individual port configurations the same) but am still seeing drops.Since I have disabled qos on the switches in question (no mls qos) (not the core tho) I am presuming these commands have no affect on the switch operation and therefore cannot be related to the problem. With QOS turned off one would presume that it is general congestion - especially at the user edge where busy PC issues might contribute. So I wanted to see if I could see any instances of packets in the output queues building up.
I wrote some scripts and macros that essentially did a snapshot of 'show int' every 20 seconds or so, and looked for instances of 'Queue: x/' where x was greater than zero.What I found after several days of watching the core stack, and a few of the workgroup switches that are most often displaying the behavior, was that I NEVER saw ANY packets in output queues. I often saw packets in Input queues for VLAN1, once in a great while I would see packets on input queues for fa or Gi interfaces, but NEVER on output queues. [ code] Additionally, when I look (via snmp) at interface utilization on interfaces showing queue drops (both core and wkgroup), they are occurring at ridiculously low utilization levels (as low as 4 to 8%). I've tried to look for microbursts between the core and a wkgroup switch where the core interface was experiencing drops, but haven't seen any (using observer suite). [code] While the queue-drop counts aren't critically high at this point, they are happening more frequently than in the past and I would like to understand what is going on... In most cases, no error counters are incrementing for these interfaces. Is there some mechanism besides congestion that could cause output queue drops?
How does the 3550 with enhanced image compare to the 3650 with enhanced image in terms of routing functionality?
View 5 Replies View RelatedI need to make some changes on our network. We currently have two sites 150 miles apart we join both by way of fiber and on each side we have Cisco 3750 stack switches, configure trunking for all V lans on one port in site one then through the the long haul fiber to site two with site one using 10.1.1.30 and site two using 10.1.1.40 as their default gateway, with static routing all V lan sub nets to the other sites default gateway life is good.
My question - seeing how we have sites using the same sub net 10.1.1.x to trunk all data to each site through switches; we need to now change the network and add each site to the MPLS network, site one switch 1 IP address 10.1.1.30 going to MPLS router one with FA0/0/0 using IP 10.1.1.31, site two having switch 1 IP address 10.1.1.40 going to MPLS router one with FA0/0/0 using 10.1.1.41. I need to know will this work.
We have the same sub net in each site 10.1.1.x to the MPLS routers then the external router interface connecting each site to local switches, will this cause any problems by using the same local sub net for each site?
For intervlan routing, Is 'IP routing' command enabled by default on a 6500 series switches based on the IOS?and on 3750 switches, do we need to enable the "ip routing" command manually for intervlan routing?
View 1 Replies View Relatedrecommend a cisco core switch and access switches in IPTV network infrastructure?I was ask to implement a network for IPTV system but i don't have idea what will be the model i will use.
Core Switch = Cisco 4503
Access Switches = Cisco 3560X
On a csico 3750 switch I have ntp server < IP of stratum 1 Time Server> I want the swit to sync to the to time server and provide time to peers on my network. Do I have to be configured for ntp peer < IP of stratum 1 Time Server> for that to work?
View 7 Replies View RelatedAny router (I'm considering ASR 1002 with 10GE SPAs) that can support the following:
-10GE interfaces
-can handle 1.5Gbps but scales up to 5-6Gbps different seasons
-take on full internet routes from 2-3 providers
-will live on the internet edge
I am planning to migrate the core switch from cisco 3750 to Cisco catalysts 6513 switch. What could be the best approach to minimize the downtime or avoid disrupting the production. I have couple of thoughts, one method is to build the core and then replace the existing core, another option is to build the new switch as the second VTP server and once it recieves all the VTP information then disconnect the old server.
View 6 Replies View RelatedI want to upgrade IOS for my production core 3750 switch. Below is Show version/fash output. I have IOS image "c3750-ipservicesk9-mz.122-55.SE7", need to confirm below concerns:-
1-As this is stackable switch do i need to upgrade on all Switch..i can see there are 3 flash while doing show flash?
2-Is above IOS image support with my switch? do i able to enable ssh?
3-is flash memory is enough to succefully upgrade IOS?
4-Any other point which i should keep in mind before upgrading..any special feature which this IOS wont support.
As we know there are three layer in cisco Network Model:
-Core
-Distribution
-Access
So my question is in Core / Distribution layer should i use Etherchannel between switches or use Stacking if switches are stackble.For ex: suppose I have two cisco 3750 switches . so should i use etherchannel between them or use stacking in core layer?What are the advantages and disadv of both.
I'm working designing a switch system for our core/data center.
We have 5 esx hosts, 2 sans with 3 nodes each. We have voice servers, a couple of routers and a few odds and ends. There are 7 other locations aggregating into this data center via 1-2gbps fiber connections. The bandwidth usage on these links is minimal, but there is a total of about 3000 devices aggregating into the system. My main concern right now is the 3560G's are seeing many output drops, due to the small buffer size on those switches. I have been looking at couple of options to resolve this issue, including the 4948E, 4507E, and 3750X switches.
Budget being the biggest factor, I am finding that the 4507 might be out of the price range. So I was leaning towards the 4948E switches for connecting the servers and iscsi san's as the 3750X is not recommended for iscsi. Redundancy is important so I would like to have two. The second concern is that I need to aggregate the fiber connections and for that I was looking at the ME-3600X or possibly the WS-C3750X-12S-E. I'm running eigrp, so this switch would need to have full routing, as it would also serve as the core switch for the 4948E's.
So in the end I was thinking that two 4948E switches up linked to the ME-3600X which would do full routing for the fiber aggregation and any routing needed for the servers and sans.
Servers and Sans_________4948E________ME-3600X_________7 fiber connections
|____________4948E_____________|
I would look at a second ME-3600X in the future for redundancy. This is the lowest cost biggest buffer solution that I could find.
I am planning to upgrade the current core switch(3750) to 6509 series switch. Since we have a production network running we have to plan for an online core switch upgrade.
View 7 Replies View RelatedThe company I work have finally decided to enter the 21st century and invest in a new telephone system (Interactive Intelligence) to replace the legacy system which has served us well for the past 10 years. The project has only just started and involves upgrading sections of CAT3 cabling to CAT6, replacing Cisco 3550 switches in one area of the building with Cisco 4507 switches and upgrading our Core switches with Cisco Nexus 7010's. The area that concerns me most is enabling the network for qos as I have very little experience with it. At the moment Im trying to read as much documentation as I can on QOS to bring myself up to speed.
The access layer switches will consist of a mixture of Cisco 3750 & 4507 switches connected to Cisco Nexus 7010 switches which will form a collapsed aggregation & core layer.
Basically, how I should approach this daunting task of making sure the network will support VOIP.
I need some fiber to run between a Cisco Nexus and an IBM server with Intel NIC. It's 30meters, and LC-LC connectors.What is the difference between 62.5/125 vs 50/125?
View 1 Replies View RelatedI configure 3750 stack switch as core and 2960 stack switches as access layer switches.I connected my laptop to one of my core stack in VLAN 10 and I am pinging to one of my server in VLAN 1. What will be the minimum latency at the time of inter VALN routing
View 2 Replies View RelatedI am looking to implement 25 Cisco 3750 switches with IPBASE image at the edge, across many cabinets. I understand I am limited to EIGRP Stub on the 3750 switches (with IPBase) and cannot acheive funding to upgrade to IPServices. Though I am not fully aware on the limitations, in terms of what I am trying to acheive.
Broadly speaking I want to install 2 x 3750 switches at the edge, with point-to-point links to two 6500 core switches (at the data centre) and then have HSRP interfaces on the 3750's, tracking the up links to the core switches. I am presuming this will be the best solution to ensure reliability.My 6500 switches run EIGRP and have many VLANs and other L3 networks advertised, which will need advertising to the 3750 switches. I would be looking to advertise two or three HSRP networks on the 3750 switches, up to the core switches.At the moment, the entire network is Layer 2 (VLANS + STP).
how to configure EIGRP across the 3750 switches and 6500 switches to allow for the 3750's to see the whole network and also advertise back up it's directly connected (HSRP) networks to the core. At the moment, after configuration, none of the switches see each other as EIGRP neighbours but can ping the L3 addresses on each end.
some of our switches have the switchport mode trunk command configured between the 3750 switches but other 3750 switches connected to our 6509 core switch do not have the switchport mode trunk command to permit Vlans from going across the swtiches instead it has an ip address and says no switchport what is the difference between does two. Is trunking used only for Layer 2 and L3 is used to route interface vlans?
View 2 Replies View RelatedIf I have two stackable switches one switch uplinks to one 6509 core switch and the other connection uplinks to another 6509 core switch, and also the other stackable switch does not connect to the core switches. Because I am using hsrp and also we are not using vss then one uplink to the core is not in used only ones is so then how does creating an etherchannel between does two uplinks to both core switches benefit me in anyway such as more bandwith and using both uplinks at the same time or I'm I wrong?
View 7 Replies View RelatedIf I have two stackable switches were only one stackable switch has two uplinks one uplink goes to one core 6509 switch and the other uplink goes to the other 6509 core switch can a Layer 3 etherchannel be used if each uplink go to a different core switch, by the way hsrp is running between both switches and also can you give an example how data will be routed from the stackable switch through the ethernetchannel to one of the core switch accross the WAN to another core switch?
View 1 Replies View RelatedAny thoughts on Cisco putting a quad core processor in some near future version of this card?, the current versions are simple dual processors that does not give you much to work with if running ESXi 5 on one of the vCPUs.
View 1 Replies View RelatedI have two sites connected to each other using L2 MPLS/1Gbps "provided by the telecom", the link is configured as a 802.1q trunk and terminated on C3750 on both sites. Everything is working fine according to the below configuration. But i am facing QoS limitations on the number of queues, i checked cisco web site and found that the ME3600/3800 has HQoS which will give me advanced QoS features.I am thinking to migrate from the 3750 to ME3800, but i am new to metro switches. if i can apply the same below configuration on ME3800 except the QoS as i will replace it by MQC configuration? So can I consider that the ME3800 has all 3750 features plus MQC QoS?
!
!!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log datetime
[code]....
We just replaced our ancient 6509 dedicated SAN switch with a Nexus 5548UP (with 4 2248 FEXs).Our old SAN 6509 was completely separated from the Core 6509, and that Core 6509 doubled as a Datacenter switch. We've now segmented the "Datacenter" and "Core." The SAN and servers are connected to the Nexus gear rather than the Core. The old SAN had only 3 vlans. One for SAN data (Vlan16), one for management interfaces (Vlan250), and one for switch management (Vlan15).
As part of my cleanup, I want to get rid of that Vlan15 and use vlan250 for switch management. In another building, we have a 3750 that provides SAN (Vlan16) and management (Vlan250) connectivity to a single Equallogic box and a Dell PowerVault tape drive for backup purpose. That 3750 is the only device that still has an address on Vlan15 (other than the core). Refer to the drawing below.
The Core 6509 is the gateway for Vlan250 and Vlan15. I have created an interface for Vlan250 on the 3750. ACLs exist on vty connections of each switch allowing telnet access ONLY from the Mgmt 2960. There are no ACLs on the Vlans themselves.From the Mgmt 2960, I can telnet to the 3750 using either its Vlan250 IP address or its Vlan15 IP address. However, if I shut down Interface Vlan15 on the Core 6509, I can no longer telnet to the 3750, not even using its Vlan250 IP address.
The connection times out. If I attempt to telnet to the 3750 via Vlan250 from the Core 6509, I get connection refused (which I should get due to the ACL on the vty connections). I can still telnet to other devices on Vlan250 (such as the management interfaces on the Nexus 5Ks). Why am I able to telnet to the 3750's Vlan250 Interface only when the Core's Vlan15 Interface is Up?
I'm currently investigating an issue for one of our customers where one of their 3750 Core Switch Stacks crash / becomes unresponsive during a NESSUS Scan.
They've diabled DoS testing and have ensured that safe scanning is enabled. For the test they are port scanning all of their VLANs (around 600 internal addresses).
The network consists of 2x 3750 Switch Stacks connected via fiber, edge switches connect into these cores. Both cores are running HSRP, for VLAN gateway redundancy.
Issue Being faced is as follows:
During the scan, Core 1 becomes unreachable from Core 2. We can telnet to Core 2 and administer as necessary. However we cannot telnet to Core1, a console connection also fails - the switch stack is unresponsive, but does respond to pings.
On Core 2 I've performed a show proc cpu sorted and can see the IP Input process is running at around 60% and the CPU is highly utilised.
Once Core 1 becomes unreachable the network gradually grinds to a halt, almost mimicking some sort of broadcast storm or Spanning Tree loop.
Interestingly Core 1 HSRP is still active, so the hello packets are still being sent.
The only resolution to the issue is to perform a hard reset of the Core to restore service.
Logs from core 1 show the CPU becomes fully utilised. There is also an error logged indiciating:
%FIB-2-FIBDOWN: CEF has been disabled due to a low memory condition. It can be re-enabled by configuring "ip cef [distributed]"
Both cores are running IOS 12.2.(52) SE IPBASE. I've attempted to reproduce the issue in the office here and although a NESSUS scan does increase switch CPU utilisation I couldn't reproduce the failure scenario.
What may be causing the 1st core to become unresponsive? I've found some articles with regard to a 6500 switch rebooting during a NESSUS scan, and also some HP switches exhibiting similar behaviour but nothing that matches the exact scenario I'm investigating.
I am doing an evaluation of LMS 4.0. I have loaded the system on Windows and manually added my core 3750 switch into the system. Device availability is showing the device as available. However, the other pollers like link utilization, error count, etc. all show that there is no data. When I go into the poller config, the pollers for link utilization and errors show 0 devices associated and a status of "instance not found". The CPU and availability pollers show active with my one device added. I have verified the credentials and if I go into Inventory -> Port and module and select my 3750 I do get a list of all the interfaces and the descriptions so LMS is connecting to the switch and pulling data.
So how do I get the pollers for link utilization and errors to start populating data?
Second question, during install I did configure the software update section and it said there was an LMS 4.0.1 available which I told it to download. Now I have a psu_download directory and some more directories like cm, cmf, etc. but I don't see any file on what to do with them. What do I need to do to install the new package files that were downlaoded to psu_download?
I have a requirement to connect two 3750 switch with 10G speed between two sites with 150km distance. We will lay-out our own fiber (48 core) between two sites. I just want to consult the following:
1. Could i use two core switch 6500 with single mode fiber as a transport equipment?
2. Or i need to use SDH equipment because of the distance concern? If so do i need a repeater?Could i use Cisco Metro Core ONS, which one?
3. Any other option to achieve this requirement?
How to successfully implement OER w/ NAT? I will have an 1841 with the 4-port EtherSwitch module that will have 3 cable modems connected and utilizing cisco's OER to utilize all 3 links for outbound Internet traffic. However, I am concerned about NAT. The only other interface used on the 1841 will be the connection to the local LAN (inside). I'm thinking this will require a loopback, but I'm not finding anything on CCO to back me up. Is it possible to just let the CMs do NAT? 1 CM is a static IP and the 2 others are DHCP.
View 2 Replies View RelatedActually i have problem with my connection and i would like to find that problem. i have 3 sites(1,2,3) connected together through fiber multi mode cable. The site 1 having the control room, the maximum distance between site (1 and 3) is 1.8 Km, the other distance(1 and 2) is 1.2 km and i already used 3750X switch and GIBIC GLC-FE 100Fx with support MM cable up to 2 KM.
i have in site (2 and 3) 10 cctv 3 mega pixel cameras and i check for the bandwidth is less than 100Mbps when i connected the 2 switches(2 and 3)to the switch in the site 1 there is a delay i thought maybe because of the bandwidth so i tried to connect only 1 camera but the same problem(delay). i did not make any configuration for the switches.
i have a problem with a cisco cat. 4507 edge switch as when i have a login ssh session to the switch the supervisor engine restart and the redundant Sup. engine becomes the active and so on this problem mainly happen when i have multible SSH session to the switch and it happened very rarely with a single ssh login
the ios version i use is cat4500-entservicesk9-mz.122-54.SG which im using on all my edge switch and they are all working fine excpt this one
Today I'm going to be re-organzing my network, kind of and I just wanted to get a second opinon. Right now I have an ASA 5510 and a Cisco 2911 and a Cisco 2960 (and I have two more 2911s and 2960s that handles our phone network).
Router 2911 is on the edge Gi0/0 has the public IP and Gi0/1 is not used and then I have 5 individual VLANs (Gi0/1.100, 1.200, 1.300, 1.400, 1.500) VLAN 100 is our internal network 10.10.18.1/24 (router is 10.10.18.1)And the 2960 is used for swichport access, the ASA is on the side and only used as a VPN.
What I want to do is put the ASA on the edge so I can dump all the access-lists and everything then 2911 will only be used to route the traffic. Now I know I will have to reconfigure the VPN, which isn't a problem. My question is when putting the ASA on the edge do I just put the public IP on the ASA's e0/0 and then plug the 2911 into the e0/1 of the ASA and give the Gi0/0 of the 2911 the ip address of 10.10.18.1 or do I just shut it down? The reason behind this is because I would actually like to use the ASA for more than just the VPN passthrough.
Having trouble resetting the baud rate to 9600 on a 3750-E. Basically the device cannot be set to anything other than 115200 baud rate. I have changed this via startup-config (which lost connection) reconnected and saved config but after reload was back to 115200. Tried via bootloader to 'set 9600' but the termial program paused for a bit then the switch prompt returned. Tried the same to 'unset baud' but the same thing as above happened. I have erased and reloaded flash etc
View 8 Replies View RelatedI've put a C3KX-NM-1G module into a 3750x but can only get ports 1,3 to stand up, ports 2 and 4 dont operate. ports 2,4 are not shutdown and dont come up with working SFPs etc in another switch.
View 1 Replies View RelatedA customer is expanding their network into another wing, and they have a good number of existing Small Business switches (specifically the SGE-2010P - [URL] that they're interested in possibly deploying. They have a full-blown Cisco infrastructure and voice deployment (Cat 6500 core switches, 3750 switch stacks, Communications Manager w/ over 1,000 phones, etc.).
The general concern is whether there is ANY known issues or concerns with trying to mix/integrate the Small Business equipment with non-SMB infrastructure. Looking at the datasheet for this switch, it's clearly PoE, supports QoS, although it doesn't specifically indicate it can provide a voice/auxiliary VLAN for a phone detected by CDP - that would be a big deal. So basically, "a switch is a switch", and I'm just posing this question to make sure there's no reason (technically or from a support standpoint) that we would not recommend integrating these.