Cisco Switches :: Port Mirroring Limit Of 8 Ports On SGE2010P
Jan 24, 2013
Recently our company purchased 3 Lynksys SGE2010p, At the moment they work as a stack but as we are implementing UCCX we need to mirror 15 ports but during the provisioning i've noticed that the limit is 8 ports per stack. I'm wondering whether this is a known issue or just a known limitation . I believe that most probably i'll need to move back to stand alone mode so i could configure 8 mirrored ports per switch.
I have been told there is a limit (8) on the number of source ports that can be mirrored to a given destination port. I can find no specifications or other documentation to corroborate this claim. Any factual data to confirm or refute this claim?
i was able to configure (via SF200 web interface) a port mirroring from port FE17 to FE7.i have supressed this port mirroring.when i try to reconfigure a port mirroring from port FE17 to FE3. The SF200 web interface crash. the SF200 seems to reboot.
i have updated the SF200 firmware from V18.104.22.168 to V22.214.171.124.44 when i was able to configure (via SF200 web interface) a port mirroring from port FE17 to FE7.But after having suppressed this port mirroring again, i was not able to reconfigure a new port mirroring from port FE1 to FE3 (the SF200 hangs).
i have also tried to return to default factory setting but this does not solve the issue.i am working on SF200-24P
I have a Cisco Catalyst 3750X switch, and I have configured port mirroring on it. Traffic from 12 of the 1G ports will be mirrored to both 10G ports, and I have connected both 10G ports to a server that captures the traffic.
Currently, I have one of the 12 1G ports connected to another server that replays a pcap file once at maximum speed (i.e. option -t in tcpreplay). I thought that this setup means I should get twice the number of packets (and rate) from the two 10G ports. However, I noticed that although the original pcap file contains 4288 packets, the number of packets from the two 10G ports varies between 31000 to 34000 packets, which is about 7 to 8 times the original number of packets. Why am I getting more than twice the amount of traffic, and why does the output vary?
I have created a mirror to copy all packets from Interface gi1 to interface gi28. I don't see any port 80 traffic, or 443 or any revelant traffic. I see mostly broadcast from other devices. I have a security device that is logging all the copied packets from my firewall for malware/IPS, etc inspection.Right now I have it monitoring vlan 1 in the hope that it would resolve this issue but I see no change.
I'm troubleshooting a LAN issue I have, and I wanted to hook up wireshark to record traffic over the course of a couple of hours for later diagnostics. I went into the web administration interface, clicked Administration > Diagnostics > Port and VLAN Mirroring, and added a port mirror from the port I wanted to watch to a port to which I had connected a laptop. I picked the Tx and Rx options, and clicked Apply.I did receive lots of traffic in wireshark, but I noticed immediately that the server on the port I had mirrored was suddenly unavailable on the network -- pings timed out. This lasted until I removed the mirror, then the server was suddenly reachable once again.Does this feature not work the way I had thought it does? What I saw looked more like a forward than what I would call a mirror. The documentation leads me to believe mirroring is intended to be used in just the way I was attempting to use it.
We are upgrading out internal office network. I have setup 4 switches and 1 router using the following config.
-2 SGE2010p's are stacked together forming vlan 30 (to be used for phones)
-2 SGE2010's stacked for workstation's under vlan 20
Both switches are apart of vlan 1 (the default)Ports 1 on each stack are connected to a Cisco 890 (port fe2 and fe3) in trunk mode. Ports 2 and 3 are in an LAG group and connected to the neighboring stack (I have attached a diagram), and are also in trunk mode).At this point one port (port 1 on either stack) goes into blocking mode, and I get why ,it's a physical loop.I need more than a 100mb link between switches (which is what pulling the LAG between switches gets me), but I don't want to route phone traffic through my workstation switches to get out of the LAN.Is it possible using these switches and router to have a LAG between stacks and a link to the router for traffic to 0.0.0.0 ?
I'm the administrator of a system composed of seven SGE2010P switches in stack configuration.I developed a script to update the ACL at regular time intervals.
ACLs work well unless one or more switches in the stack is turned off. In this case it would seem that once, which switches off will restart, they do not synchronize ACLs assigned to interfaces.
Currently the only solution I've found to restore functionality, it is cold restart of the entire stack.I was wondering if there is a command to propagate the acl switches that I can recall in the event of a restart of any of these.
I recently changed jobs and am now supporting a small(but rapidly growing) environment as follows:
35 PoE phones with a switchport going to a workstation 8 PoE cameras 7 servers(2 NICs each with link aggregation) Various racked network hardware
I currently have an Enterasys 10/100 48p PoE switch powering all of the PoE devices, but the switch is getting old and I'd like to start converting over to pure gigabit. There's also an HP Procurve 2810-48G that all of the servers and other racked network hardware are plugged into. That switch is fine, but doesn't have PoE, so its uses are limited to the rack.
Just a few other things to keep in mind... Whomever setup this network failed to separate the voice and data traffic into their own VLANs + QoS, so that needs to be done as well. Expandability is key as the company is growing at a rapid pace- Stacking is certainly desirable, but not an absolute requirement.
I'd like to keep the price point bellow $2000 if I can get a good product. Cisco would be cool, but the price point is way too high for the features that I need. Any great recommendations? Here's some that I've been looking at:
I have a Cisco Calayst C3560G core switch with 4 x SGE2010P Switches which are invidually linked/trunked via 2x CAT6 Cables for each SGE switch so im not stacking them. First problem is i cant seem to trunk/bond the 2 cables to the SGE LAGs i created, I can only use 1 cable per SGE switch. Yes the Core switch is configured correctly and have the proper Port Channel config (below is an example of a config) how do i get this working!?
I run POE Voip phones and PC's of 1 cable that is vlan'd on the phones, so each port on the SGE's are trunk'd
The other issue and more troublesome is that I have random reboots on all of the SGE's the LOGs tell me nothing! I cant seem to figure it out even had the units swapped out! Jumbo Frames are enabled but still happens even if disabled. Got some STP/RSTP settings but nothing works.
SGE Hardware Version 00.00.01 SGE Software Version 3.0.018 SGE Boot Version 2.0.0.03
I have 5 VLANs, I assign VLANs to its ports and make them all Untagged.I created ACLs and a ACE rules for each ACL, and then assigned to the ports.So what i am trying to do is to deny access to from one port to other 4 ports and granted access to any other ports. But it is not working, without last rule "allow any any" it has no access to any ports, with the last rule it grants access to every port even to those I denied.Router in Layer 3 mode, all VLANs have their IP's.
At some moment I was able to work it properly but without using any rules, I just tagged my untagged VLANs to those ports which I wanna get access to. As you can see I want allow ports GE1 - GE4 communicate with 1 to 24 ports but not to each other.
I have configured stack with 2 sge2010p switches. I want to connect this stack to the HP procurve switch using port agregation (LAG) technique. I want to use one ge port on each sge switch.How to configure it? Will it work witch port agregation on procurve?
I have configured 2 Vlans on the network. 1 - native Untagged for data traffic and 100 Tagged for VoIP.I have 4 SGE2010p switches 2- of them in stack working in L3 mode and 2 connected to the stack via single ethernet links in L2 mode.I have IP phones with trunked ports -Vlan100 tagged and 1 untagged. I have set CoS 5 for Voice Vlan 100 on the phones and CoS 5 to queue 3 mapping (in basic mode) on all switches.But it seems to not work at all.Should I use Advanced QoS mode?Where Can I find some QoS configuration example for Voice Vlan on SGE2010p switches?
Originally I was happy just set them all up in a stacked ring configuration. However I've become aware that my back bone fibre links are contantly pushed to their max.
So I've decided that I should change this configuration and unstack the switches and make them all stand-alone units. and I'll configure 2 cable LAG links between all my switches Theorically I should now get 2GIGs between each switch and to complete the ring in my network for redundancy I'll turn on Spanning tree.
However I've tested the speed and I just can not seem to get a LAG connection with 2 x 1gig cables to push more data than a single link 1gig link cable would.
My test enviroment(not using fibre optic cables just cat5e copper cabling): 4 x pc's(all gigabit network cards) 2 x sge2000p switches PC1 ---(1G eth)--- /---(1G eth)--- PC2 [SGE2000P]===(LAG1 2x1G cables)===[SGE2000P] PC3 ---(1G eth)---/ ---(1G eth)--- PC4
If I send files from PC1 & PC3 simultaneously to PC2 & PC4 They don't transfer faster than if I I just use a single 1GIG Link cable
looking at the LAG configuration it shows both cables are connected & the LAG looks like it's working. But it really doesn't seem to be running at the expected 2GIG?
The LAG fail over seems to work fine if I remove either of the 2 cables from the LAG the link continues to work. (sometimes it will drop a ping when removing or readding a LAG cable)
I just purchased two Cisco switches (SGE2010P) for the new Mitel 5000 Phone System. The Mitel vendor programmed and setup the phone system for us, but they couldn’t figure out the VLAN setup on the my switch. So now I have everything on one network and I am stuck on my own to figure the VLAN on my own. So please, some step by step on the settings on the switches, the router and the server (DHCP).
Here is what I have now: 2 floors building with a Cisco SGE2010P switch for each floor.Sonicwall TZ 210 routerWindows 2008 R2 server for DHCPMitel 5000I have the switch on Layer 2 at this moment, but I can switch it to Layer 3 if that makes the process easier and less steps.My network as follows: Router: 192.168.123.254Windows Server: 192.168.123.9Switches: 192.168.123.5 and 192.168.123.6Mitel 5000 server: 192.168.123.7 (has to be changed)The PCs are connected to the phones.
I'm trying to setup port mirroring on a Cisco ASA 5510, but when I try to use the switchport monitor command, that command is not recognized.I've selected what interface I want to configure (conf-if), but the switchport command seems to not be part of the IOS.I'm running ASA version 8.2(1)
I have switche SGE2010P, router 871 and 3 cisco ip phone 7920. If cisco ip phone 7920 connected to switche SGE2010P then link is down. But if cisco ip phone 7920 connected to router 871 then link is up. In the log switche SGE2010P is not event about this.Why are cisco ip phone 7920 not work with switche SGE2010P?
When I try to apply an ACL to a port on my SGE2010P, I get the following error:Can't bind acl/policy-map to an interface when the security suite is enabled in a per-port mode.I don't see an option where I can set the security suite mode.
I've just installed 2 of these in my workplace on a PLC network.I'm now looking to set one of the ports up as my diagnostic port and would like to be able to mirror any of the other ports to this port.I believe it is called SPAN on Cisco switches.The only reference I can find to it is configuring via Telnet which I haven't got a clue about.On my old Wiedmuller switches it was just a few clicks away.
I have just downloaded new software for sge2010p. I had tried to made an upgrade on some switches, but switches still boot with the old software.I have installed software 126.96.36.199 and boot 2.0.0.03. I have downloaded software 3.0.1 from cisco, put it on tftp and started an upgrade via switch web interface. I have checked that the active image is set to 1, and started the upgrade.Switch has downloaded soft from tftp, and reported that process has been finished without errors.After the restart switch have 188.8.131.52 software again. I have try to do this same on 4 different switches working in L3 and L2 mode - always with the same effect.Should I upgrade both images in the same time to get this work?
I have noticed, that the new firmware is located on image 2.
# show bootvar Image Filename Version Date Status ----- --------- --------- --------------------- ----------- 1 image-1 184.108.40.206 08-Nov-2009 16:21:37 Active 2 image-2 220.127.116.11 19-May-2011 13:05:53 Not active* [Code] ...
So I try to set active image via console command: # boot system image-2
and again... a# show bootvar Image Filename Version Date Status ----- --------- --------- --------------------- ----------- 1 image-1 18.104.22.168 08-Nov-2009 16:21:37 Active* 2 image-2 22.214.171.124 19-May-2011 13:05:53 Not active
"*" designates that the image was selected for the next boot
Finally i have tried to set the active image to "2" using console menu: I have set it like this:
Active Image ============
Unit ID Active Image Active Image after Reset ======= ============ ======================== 1 Image 1 Image 2
and save.. [Code]
Where is the right place to set active image for 2. Is the "active image" settings only sets the firmware image which switch uses or configuration files too?
Just got a new SGE2010P layer 3 switch. I'm trying to configure Vlan to reach a few subnet. I have the original 192.168.1.0/24 as vlan1. I want to reach our WiFi subnet 192.168.10.0/24. The WIFI router is directly connected. It's new for me as the previous Job i was sorking with a ws-3750-48.
i did from console change my switch to layer 3 mode... ( i want it as the DGW for each Vlan)from the web interface, i create a vlan4 for our WIFI Next i go to ipv4 to add an IP address to vlan 4 like 192.168.10.254 /24 As soon as I apply the IP the switch stop responding, Ping request time out.. i need to reboot the switch..