I'm trying to update some of my network diagrams, but I can't find an accurate stencil for the 3560G. All of the 24-port 3560 stencils only have 2 GBIC ports on them, and the 3560G has 4. Seems trivial, but I'd like to have my diagrams be accurate, and this makes that difficult.
View 2 RepliesMy issue: I have installed a firewall within my network. Currently all my clients default gateway defaults to GW:192.168.1.1. I would like all my internet traffic to route to the firewall ip 192.168.1.30. My Primary switch ip is 192.168.1.10, which is a 3560G running 12.2(25)SEE2 IPBASE-M.
My main problem is, I do not have access to the gateway, so I am trying to route internet traffic from within my switch to the firewall. I have already tried Route-Map, but seems this version of the OS does not support. I have already tried Policy-Map, but same as above. I have also tried IP ROUT command, but it did not work either.
And remember, I would like to perform the routing from the switch, because I do not have access to the default gateway which is a router to perform forward internet traffic to the firewall.
I have recently had to rebuild the cookie information for a cisco 877 series router due to it being erased by an electrical surge.
I've successfully got it running again by copying the cookies from an identical router (obviously changing the serial numbers and so forth so it passes its verification checks).
The last piece of information I need is the Chassis MAC Address. I don't want to use the one from another router since there will probably be conflicts.
I tried following this Field Note, even though it isn't specifically for my model and it didn't work.
[URL]
how I can get the mac address from the system somehow?
Speedtest.net always says i'm getting around 3 MB.Znet is always higher. Around 3.5MBTestMy.net gives me 5.4MB. On my Netgear router staus page it says my DownStream Connection Speed is 3776 kbps.Also, when i download a game on Steam, it often downloads at 600kbs or above.Which speed is more accurate?
View 2 Replies View Relatedwhere I can get a visio stencil for a asa-5585-x.
View 3 Replies View RelatedWhere I could find an SGE2000 visio stencil? It isnt listed in the Cisco Visio Stencil page?
View 1 Replies View RelatedI have a Cisco 819 router which has a built in GPS capability. GPS recieves a very accurate time from the satellite. Is it possible to use this accurate time source to set the time on the router, and then use it as an NTP server?
View 7 Replies View RelatedI need to find an iOS version that supports BGP, Dot1q, and MPLS for either a 1800 series or 1900 series not sure the best place to find this sort of info out.
View 1 Replies View RelatedI am new in networking. All my knowledge is based on books and no real life experience. At my job I am required to set up the network and configure all apparatus I never worked before with.
We have regular cable internet in the office. Modem is connected to Apple router (time capsule). No trouble. Now we are getting fibre optic in the office. Mngmnt has abought the following Cisco stuff:
Cisco Wireless Controller 2504
Cisco 3501 AP 802.11g/n Ctrlr based AP
Cisco ASA 5510 Firewall appliance
Cisco Power Injector AP3500 Series
According to my understding, the fibre optic point will be connected to ASA which will be further connected to wireless controller and then access point.
I cant find the requird info. The guides available at cisco are for when you use CLI and as a beginner I prefer to use GUI. While trying to config ASA, there are many questions I can't find the answers.
I was trying to get a visio stencil for C3KX-NM-1G module but it doesn't seem to exist. It indeed does not exists or I just can't find it.
View 2 Replies View RelatedLast night, I lost my NetFlix connection. It was no biggy, I just restarted the Cheers episode that I had been watching. This morning, I checked the DIR-655 log and the following is what I had found (date and times aren't accurate).
May 24 03:22:33 info [1076865.190000] device br0 left promiscuous mode
May 24 03:22:29 info [1076861.620000] device br0 entered promiscuous mode
May 24 03:20:20 info [1076732.020000] device br0 left promiscuous mode
May 24 03:20:16 info [1076728.140000] device br0 entered promiscuous mode
May 24 01:45:42 info [1071054.590000] device br0 left promiscuous mode
[code]....
Promiscuous Mode is usually the result of sniffing according to Wiki. Whatever is promiscuous mode. Also, I don't know what device br0 is. I do have my Brother wireless printer connected to the DIR-655 but it's device name is BRW0022581FB096. I was wireless at the time of connection problem, and the wired computer connected to the DIR-655 had been off.
Am not finding the resolution to my infrastucture and getting output drops. Sw1 is connected Sw2 as below stated
Please find the conf:
Sw 2 3750 conf:
interface GigabitEthernet1/0/46
no switchport
ip address 172.16.100.81 255.255.255.248(code )
I've been searching high and low for a "blank" stencil to fill in module and WIC areas of a 2821 router that I'm diagraming. Where I can get a hold of something that will work? It seems that Cisco is somewhat lax lately on their visio stencil offerings.
View 6 Replies View RelatedI have DHCP enabled, but I have assigned a static IP to most of my network devices.When I click on the DHCP Client Table, most of the devices are NOT shown even though I know they are connected and working.One device (a Brother printer) that I have assigned a static IP to actually shows up as having an IP from the DHCP range. A Panasonic TV does not show up at all even though it is connected and woking. I have not been able to assign a static IP to it because it does not show up.
View 3 Replies View RelatedI have cisco 3560G with C3560 Software (C3560-IPSERVICESK9-M), Version 12.2(53)SE1 Image. I want to configure it for EEM feature so that when my Gig 0/7 port goes on it will automatically shutdown the port Gig 0/1.
MPLS_WAN_NET#show event manager versionEmbedded Event Manager Version 3.20Component Versions:eem: (v320_throttle)2.1.50eem-gold: (v320_throttle)1.0.4eem-call-home: (v320_throttle)1.0.4Event
[Code]....
I am facing an issue with setting up dhcp server on a 3750G-24PS-S,IOS : c3560-ipbasek9-mz.122-58.SE.bin,the switch configuration is below,interface Vlan100 description ***Data Segment*** ip address 192.168.102.1 255.255.255.0 no shut!ip dhcp excluded-address 198.168.102.1 198.168.102.10! ,ip dhcp pool datalan network 198.168.102.0 255.255.255.0 default-router 198.168.102.1 dns-server 192.168.40.11,!,interface GigabitEthernet0/1 switchport access vlan 100 switchport mode access spanning-tree portfast.
View 2 Replies View RelatedI am not a network person, but I am not sure our Network Team is qualified either. For a long time we have been using a dying Cisco 2950 100/MB switch for imaging our computers using GhostCast. Multicasting on the 2950 was never an issue other than it was flooding the switch and making all the other ports unusable. But at least the multicast portion was imaging with decent times. We had two Intel Pro NICs teamed to get 200 MB/s and a typical multicast session was about 6.5 minutes. When using only 1 NIC, it takes about 8.5. Running two concurrent unicast or multicast sessions, well that is a different story. It then triples or quadruples the time.
Now we have a 3560G setup. A single session takes a little over 3 minutes. If we multicast off of this switch, the time is about 12.5 minutes. That is 4 minutes longer than the 2950! If I run 3 concurrent unicast sessions, it takes all of them between 3.5 to 4 minutes. So obviously there is an issue with multicasting.
The switch is in a lab separate from the production network. The server with our ghost images is plugged directly into the switch and so are the computers we are imaging. From what I was told from the Network Team is that IGMP snooping is on, but multicasting is off. He said that multicasting does not need to be turned on since all traffic is going through the local switch. Probably true since our old switch didn't have multicast turned on either, but it still imaged using multicast faster.
Below are some screen shots of the imaging. The first one is the 2950 using multicast to 3 laptops. The second one is the 3560 using multicast to 3 laptops. Finally is the 3560 using 3 unicast sessions to the same 3 laptops.
Where can the following information be found?
1. CEF table capacity (maximum)
2. Route table capacity (maximum)
I can issue "show ip cef sum", "show ip route sum" to see the current usage.
I am currently working on my first ASA5510 configuration and am running into some issues. The ASA is running 8.2(5). The network setup is as follows:Layer 3 switch with 4 VLANs with ip routing enabled.All systems are pointing to the 3560 as their default gateway. ip route 0.0.0.0 0.0.0.0 10.20.100.30 (asa)The ASA is directly connected to the L3 switch on one of the VLANs. The other VLANs are not established on the ASA, but static routes have been created for them on the ASA.I am able to ping the ASA from the switches, etc.I am able to ping the switches from the ASA When connected to VPN Client to ASA, I am unable to reach anything behind it. When at the office, I am unable to reach the internet from the ASA.The following NAT configuration is in place on the ASA;
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 0.0.0.0 0.0.0.0
I have IAS set up on my organization's AD domain controller. Multiple policies set up for various authorization scenarios, authenticating based on Windows user groups and client IP, authorizing by passing "shell:priv-lvl=#" where #=desired privilege level. On my IOS devices I have:[code]
This identical configuration operates correctly on a Cisco 3825 and a Catalyst 4506. On the 24 port Cat 3560G PoE running 12.2SE (do not recall exact IOS version, but I know it is in that release train) that I am currently working on, every attempt to login via ssh passes authentication but fails authorization, displaying %Authorization Failed on the terminal and a message stating that "No appropriate privilege level found for user" in the debug statement from RADIUS.I have verified correct server addresses, correct source-interfaces, and that configs between the three devices match exactly with regards to aaa.
I am opening a small branch office in another state and the equipment we purchased is as follows:
ASA5505
3560G.
We'll use a site to site vpn but just in case there's connectivity issues I'd like to use the ASA as DHCP. So far I have a scope defined in the ASA and if I plug a laptop directly in I get an applicable IP address. I trunked the port on the switch that goes to the ASA but not the one on the ASA itself (license restriction) The VLAN that I'm using for my PC's has an ip helper address that is assigned to the inside IP of the ASA.
I want to select catalyst 3560G for my network. But IOS SLB need to be implemented in my network. I only know catalyst 6500 series can support this feature and i am not sure whether 3560G can support this feature. what platform and IOS version i need to implement IOS SLB?
View 1 Replies View RelatedI'm responsible for designing the network for a LAN party that will be held in October. There will be up to 400 participants and 25-30 crew members. 10 table rows, 40 participants and one 48-port gigabit switch on each table. Core network will be a couple of Cisco 3560G or similar. There will be 2xGbit between the table and core switches.So, how to set up VLANs and subnets for a 400+ people network?
1) Everything on one /23 subnet, or
2) Participants on one /23 subnet, separate subnets for servers, crew and wireless, or
3) Participants on two /24 subnets, separate subnets for servers/crew/wireless, or
4) Separate /26 subnets for each table switch and for servers/crew/wireless?
As far as I can see, the main disadvantage of all participants on one subnet is troubleshooting and isolating network problems - and the main disadvantages of separate subnets is more complex setup and that people cannot browse LAN games other than those on the same switch.
Is SSH v2 feature is supported on cisco 3560G switch for below image if no what is the latest image .
c3560-ipbase-mz.122-35.SE5/c3560-ipbase-mz.122-35.SE5.bin)
My environment has a Cisco 3560G switch which does DHCP with a VLAN for wireless clients, connected to this switch is a Cisco WLC4402 to manage all wireless access points which are Cisco 1130 and 1140 series. We recently purchased an HP LaserJet pro CP1525nw color printer which we have connected with an Ethernet cable to the Cisco switch on a port in the same VLAN as the wireless clients. The printer will pick up a valid IP address from the switch and if I connect a laptop with an Ethernet cable to the switch I can ping the IP of the printer and print to it once I install the driver, if I unplug the laptop from the switch and go over the wireless my laptop gets an IP in the same range as the printer and I can ping the printer IP address as well as open the web interface for the printer but cannot print, once I open the print queue on my laptop I see error printing and nothing prints out. I always add the printer as an IP port and supply the IP address when I install the driver to test. I have also gone through the manual for the WLC4402 but did not find anything for printing. There has to be a setting on the controller that is preventing me from printing but I don't know what it could be. On the laptop I use to test I also installed LPR and LPD and I even tried using another printer that I know works fine in its place and still could not print, so I don't think it's the printer.
View 2 Replies View Relateda customer purchased a ESW-520-24p to be used in a VoIP project. Today we had difficulties connecting it to a Catalyst 3650G switch; We've tried setting the port to trunk, general, customer and access and changed all sorts of VLAN settings on the 3560G switch to no avail: the switches just wont interconnect. While sniffing we saw that ARP requests are even not answered, so something is wrong on a low level, probably with VLAN-ing.if these switches should be able to be interconnected and if yes, what needs to be done to do so?
Secondly; voice will be on seperate VLAN and the client will use SPA942 phones, which have an internal switch that allows to connect a PC to it. I've used this phoned successfully with Catalyst Express switches and I didn't have to do anything for VLAN-ing, this worked "out of the box". Can these phones work with the Small Business switches as well?
I have a 3560G switch with c3560-advipservicesk9-mz.122-46.SE and 2 routers. The switch has vlans defined. I want to route all traffic on vlan 25 out of one of the routers exclusively. Here is what I have attempted:
-Set the SDM template to routing & reload
-Define an access-list for the v lan traffic
-Define the route-map
-Apply the route-map to the vlan interface
When I attempt the last step I receive the following syslog error:
%PLATFORM_PBR-3-UNSUPPORTED_RMAP: Route-map RM_IMDGuest not supported for Policy-Based Routing
Also, the route-map is removed from the vlan interface after this error is thrown. Im 99% confident that PBR is supported on this switch (am I wrong?). Here is the relevant show output:...
access-list 125 permit ip 192.168.25.0 0.0.0.255 any
route-map RM_IMDGuest permit 10
match ip address 125
set ip next-hop 192.168.5.3
[code]....
We want to make High Availability between two Cisco 3560G switches. Can you tell how we should proceed?Is there any HA module available for Cisco 3560G?
View 1 Replies View RelatedWe have 2 catalyst 3560g-48-PoE protected by a 1000Va 800Watt tripp-lite and I was cheking to see if that is really sufficient. Looking at the charts from Cisco suppport I would think I should have more, but have not had any issues with a few power outages
View 1 Replies View RelatedWe have a Lan with several multicast routers. Each router handles different multicast groups sent by remote sources to the hosts on the Lan. All the routers are connected to a Cisco 3560G switch. The routers range from 7204s to 2621XM, and even a 6503 switch. We found that each router is constantly bombarded with multicast data from each other router, even though the router did not join any groups. Obviously, we'd rather not have this happen, because it causes each router's CPU to rise to very uncomfortable levels. If I bring a new router onto the Lan, as soon as I enable multicast, the data starts hitting the router's interface. In an attempt to stop the traffic, I protected each router port, so that (supposedly) the router will not be able to communicate with any other protected port.
View 5 Replies View Relatedi facing problem with my switch cisco 3560G, when it power on only System light is green and noting happen. i check with serial cable ( Console) but noting happen no booting.
View 2 Replies View RelatedI'm trying to configure MAB on a Cisco 3560G to work with FreeRADIUS.
I have been assured that my RADIUS configuration is fine and the server is functioning properly.
This is my current switch config:
Header 1
!
version 12.2
no service pad
[Code].....
I am trying to get a NAC demo running and am having some issues with a Layer 2 OOB, Virtual GW configuration. Currently I have 3560G switches and would like to assign ports to a vlan based on user roles.
My Auth VLAN is 110 and maps to VLAN 11
Guest VLAN is 11 (172.16.1.0/24)
Employee VLAN is 1
NAS Mgmt VLAN is 20 - CAS is 10.10.20.5 (this ip is setup on both eth0 and eth1 per documentation for L2 OOB Virtual GW)
NAM Mgmt VLAN is 30 - CAM is 10.10.30.5
Untrusted (Eth1) switchport is setup as a trunk allowing only vlan 110 and has a native vlan 999 to blackhole traffic.
Trusted (Eth0) switchport is setup as a trunk allowing vlan 1, 11, 20 and has a native vlan 998 to blackhole traffic.
I also setup a Managed Subnet on the CAS with IP 172.16.1.254 and VLAN 110.Switchport controlled by NAC is access vlan 110. When a machine connects an snmp trap is sent to CAM and is forced into vlan 110. If I try to put the port in another vlan CAM puts it back to 110 immediately. This all seems to be working well.The machine connected to the port gets a DHCP address from VLAN 11. When I initiate traffic from this machine, everything is blocked. If I open a web browser I do not get an authentication page. I also installed CCA 4.1.10 on the machine but it does not find a discovery host and the Login option is grayed out. The only way to get this machine to send traffic is to add a filter for it and force it to the ALLOW option. I did setup a default web login page but I seem to be missing something to get authentication to work. I am running version 4.1.8 with a demo license. The host running CCA is Windows Vista.