I just bought 4 units of Cisco ESW-520 24Ports switches. I did some testing and found out for PORTS 1 and 12 is in "Suspended" mode and thus not able to use.This not happened to 1 but all 4 switches. Why is this so? How to disable the ports from going into "suspended" mode automatically ? I wouldn't want the ports to be in "Suspension" mode when it goes live and thus block the desktops from having internet access.
View 2 Repliesi have two CSS-11503 in redundant mode running 8.20 code. We had an incident in our network where a layer 2 loop caused some high traffic through the CSS' and had to shutdown some network gear(including the CSS) to clear the problem. When the CSS' were powered back up, the SSL service was suspended, why this would occur? There rest of the config appeared normal. I am the only person on these boxes, the configs were written, and I have never had a reason to suspend the ssl service.
View 1 Replies View RelatedI describe an issue when i need to performe an L2 or L3 Etherchannel from a Catalyst 4948 IOS Enterprise and 2 xCatalyst 6506E bandled with VSS.
From the VSS Side when i plug cables i see on the physicals and Etherchannel that Physical and protocole layer are up. On the 4948 side, I see that physical layer is up and protocol and Etherchannel interfaces are down.
On the Etherchannel port summary i see that the port state is supended.
On the first attempt, i have test with a L3 etherchannel on both side using no switchport with two IP addresses one at each side on etherchannel interfaces.
The etherchannel are bundled with LACP mode active and on the second attempt with PAGP mode ON.
The same configured on VSS 6506E work fine with Catalyst 3560E.
indicate why my ethernet ports are in suspended state for some reason, i need an indication why this may be and what i can do to fix this issue. configuration below. I have a 7010 which i'm using to connect to two 5510's. I have one vPC connecting the two 5510's to the 7010. I have a vPC domain configured between the 5510's. and no issues at all. My Nexus 7010 port channel members are suspended for some reason.
Nexus 7010
vpc domain 100
role priority 100
peer-keepalive destination 192.168.1.2 source 192.168.1.1 vrf vpc-keepalive
!
interface Ethernet 3/1
[code]....
I have 2 switch groups.
2 SGE2010's with VLAN's defined as 10,20 and 30
Vlan 10 is the management VLAN, and it uplinks to our border router.Vlan 20 is the workstation VLAN, and all workstations point to the switch as their default GW? Vlan 30 is the ip phone VLAN, and all phones use this as their gateway.
I would like to put a LAG between said switches, we have some servers on the ip phone switch that need to be accessed by the workstation clients, and the single 100mb link through the router is probably not going to be enough.As I understand it, because the switches have different networks on them, a simple lag will not work. I did create a lag, and assign ip addresses to each side, however in that mode, it doesn't appear I can block vlan 10 from transiting the LAG, and with out that block I will end up with a logical loop, and spanning-tree will block one of the uplinks, or the LAG itself.
i was able to configure (via SF200 web interface) a port mirroring from port FE17 to FE7.i have supressed this port mirroring.when i try to reconfigure a port mirroring from port FE17 to FE3. The SF200 web interface crash. the SF200 seems to reboot.
i have updated the SF200 firmware from V1.1.2.0 to V1.1.2.9.44 when i was able to configure (via SF200 web interface) a port mirroring from port FE17 to FE7.But after having suppressed this port mirroring again, i was not able to reconfigure a new port mirroring from port FE1 to FE3 (the SF200 hangs).
i have also tried to return to default factory setting but this does not solve the issue.i am working on SF200-24P
I have a Cisco Catalyst 3750X switch, and I have configured port mirroring on it. Traffic from 12 of the 1G ports will be mirrored to both 10G ports, and I have connected both 10G ports to a server that captures the traffic.
Currently, I have one of the 12 1G ports connected to another server that replays a pcap file once at maximum speed (i.e. option -t in tcpreplay). I thought that this setup means I should get twice the number of packets (and rate) from the two 10G ports. However, I noticed that although the original pcap file contains 4288 packets, the number of packets from the two 10G ports varies between 31000 to 34000 packets, which is about 7 to 8 times the original number of packets. Why am I getting more than twice the amount of traffic, and why does the output vary?
I connect to switch Access Point, configure port on switch which vlan work on this port. But after reboot AP my config for this port delete and have other config where vlan 1 untagged, and allow all other vlan. But in my cinfig allow 3vlan: untagged 100, and tagged 113, 999.
View 1 Replies View RelatedI have a SG-300-52 port switch configured Layer 3 with mutiple VLANs. I have run out of ports. What is the best way (or easiest) to bring up a second SG-300-52 port switch with the same VLAN configuration?
View 1 Replies View RelatedI have applied port security in one cisco switch and i have enabled port security in one port.I have applied port security as sticky and applied "restrict" on violation of the portsecurity.Now i have connected a PC to that switch port. Later i have connected another PC. The packets got dropped. But when i connected the original PC again, the packets flow started again.So, i have a doubt. Will the packet flow get establish, when the original PC is connected again to a port which is applied with port security violation "Restrict"?
View 2 Replies View Relatedhow can i view the port G27 and G28 in GUI? As based on the GUI Adminstrator - > Port Management - > Port Setting i only can view from port G1 to G26. Or it will only appear when the port is active for stacking.
View 3 Replies View RelatedI want to setup BB to monitor snmptraps with failure. The BB log shows can't connect to all switch ports 161, and I even can't telnet to XXX_17f 161 for example. My switches are Cisco C3550, C2950, ASA etc.
Mon Nov 7 15:43:03 2011 bbnet Can't connect to server XXX_17f on port 161
Mon Nov 7 15:43:03 2011 bbnet Can't connect to server XXX_9f on port 161
Mon Nov 7 15:43:03 2011 bbnet Can't connect to server XXX on port 161
I have created a mirror to copy all packets from Interface gi1 to interface gi28. I don't see any port 80 traffic, or 443 or any revelant traffic. I see mostly broadcast from other devices. I have a security device that is logging all the copied packets from my firewall for malware/IPS, etc inspection.Right now I have it monitoring vlan 1 in the hope that it would resolve this issue but I see no change.
View 1 Replies View RelatedI want to configure port mirroring on SG300 swtich, port monitoring status is "Not Ready" , and i can not monitor the source interface!
View 1 Replies View RelatedI'm troubleshooting a LAN issue I have, and I wanted to hook up wireshark to record traffic over the course of a couple of hours for later diagnostics. I went into the web administration interface, clicked Administration > Diagnostics > Port and VLAN Mirroring, and added a port mirror from the port I wanted to watch to a port to which I had connected a laptop. I picked the Tx and Rx options, and clicked Apply.I did receive lots of traffic in wireshark, but I noticed immediately that the server on the port I had mirrored was suddenly unavailable on the network -- pings timed out. This lasted until I removed the mirror, then the server was suddenly reachable once again.Does this feature not work the way I had thought it does? What I saw looked more like a forward than what I would call a mirror. The documentation leads me to believe mirroring is intended to be used in just the way I was attempting to use it.
View 1 Replies View RelatedIs there a way to set static ip addresses to each port on at sf 300-08?
View 1 Replies View RelatedI used LACP on port 49 and 50.After upgrade firmware from 1.0.0.19 to 1.1.2.0 my LAG1 stay down...all port member stay down, port link is up but LAG stay down...I testtu delete and reconfigure LAG1 but nothing work...
View 3 Replies View Related I have 3 x SG500-52P switches stacked. Vlan 1 is data and Vlan 3 is voice Port to Vlan membership is 1UP and 3T Port security is disabled
The issue I have is that I can have either a phone or a PC plugged into a port but not both. If I plug in both then the phone works and the PC gets an IP address (Broadcast traffic) but PC cannot browse the network.
We just purchased 8 managed switches POE to swap out our existing in preparation for our new phone system. We installed them all after configuring with static IP. Deployed... and all but two work fine. Any tips for troubleshooting why two of them do not work? There are a couple other switches in the building. Could it be that a switch "upstream" from the two non-functioning switches is causing an issue? If so, how do I find out? When we put back the two "dumb" switches all was fine.
View 1 Replies View RelatedI'm having troubles setting up a separate VLAN for wireless on a SG-200-26. My first question is why did Cisco not make the VLAN setup like they have all their other business class switches? Anyways, the Access and General modes on these SG class switches are throwing me for a loop.
Right now I just have one port (g10) on the SG-200 switch that needs to be in VLAN 6, which is our wireless VLAN. All other ports are in their default VLAN, which is 1.
Here's what I've done...
Configured port G1 (trunk to another switch) as the trunk port and Port G10 (attached to WAP) as a general port. All other ports stayed in their default configuration. This is what it looks like now...
Port Mode PVID Operational VLANs
g1 Trunk 1 1U, 6T
g2 Trunk 1 1U
[Code].....
I'm pretty sure port G1 is configured correctly, but I have no idea about what port g10 should look like. Common sense tells me it should be an Access port and assign it to VLAN 6, but apparently you cannot tag the traffic within an Access port on SG switches, which makes it useless because how will other switches recognize what VLAN the packets are in? So the next logical mode would be General mode, which I put in VLAN 6. I switched that port from being 6U (untagged) to 6T (tagged), but neither seemed to work.
VLANs on SG switches, how port g10 should be configured for VLAN 6 traffic.
I have an ESW 520 8-Port switch with a management ip address of 192.168.10.2 /24 After I reboot it, I can successfully ping it from a pc with an ip of 192.168.10.123 for about 50 consecutive times.After that, I get a "Destination host unreachable" (this icmp message is sent by my pinging pc (192.168.10.123).This obviously seems like a bug.Whenever I reboot it, it goes through the same sequence.
View 2 Replies View RelatedI just purchased 2 SF-300 48 port units for 2 customers. I want to be able to remotely manage them over the Internet with my browser. BUT, customer sites already use port 80 for web servers. So, how do I configure this switch to use some other port than 80?
I called support, and much to my surprise he said it cannot be changed. How bizarre that a device with many hundreds of configuration settings does not have one of the most basic settings...
At one customer site I can configure port forwarding and translation to get around this problem, but the other site's router does not offer port translation..
SLM2008T does not have the ability to add Port Description or Login Banner like the SG300's do? I knew there would be some features that the 200 would lack, but I've never seen a smart switch that did not have the capability of labeling the ports via software/web admin. Really makes it easier to keep your head screwed on straight when you are in and out of 14 or more switches during the course of a day.
View 4 Replies View RelatedOur 6509 has seen better days and we know it's past time to replace it... Question is - go with similar or just use multiple 48 port switches? Then we have old Cisco 2800s in our 9 IDFs that would need updated as well.
We have a mixed environment with about 300 active clients along with about 15 servers and an EMC AX4 over 4GB fibre brocades for backup.
Looking to remote access my CCTV DVR, need to port forward. Set up dyndns domain already.
View 1 Replies View RelatedI have 5 VLANs, I assign VLANs to its ports and make them all Untagged.I created ACLs and a ACE rules for each ACL, and then assigned to the ports.So what i am trying to do is to deny access to from one port to other 4 ports and granted access to any other ports. But it is not working, without last rule "allow any any" it has no access to any ports, with the last rule it grants access to every port even to those I denied.Router in Layer 3 mode, all VLANs have their IP's.
At some moment I was able to work it properly but without using any rules, I just tagged my untagged VLANs to those ports which I wanna get access to. As you can see I want allow ports GE1 - GE4 communicate with 1 to 24 ports but not to each other.
I'm administrator of small network. I wish to replace my old switches by new SG300-10 and SG300-16 managed switches. I have big trouble in my network because everyone can assign IP his neighbour (or any IP) to his network card. I have policy that IP is 172.16.1.X with x is home number. Could I do that IP based ACL assigned to port where is cable from home example 29, permit only IP 172.16.1.29 (mas 255.255.254.0) (from specified port only permit packets with specified source IP (LAN user IP) other (if user set not his IP) is denied) ?
I want know that before buying equipment. How to configure that ?
I think IPv4 Based ACE, action: permit, source IP: 172.16.1.x (nr of home), widcard 0.0.0.0, destination: any, protocol: any, source port: any ?
and in ACL Binding, I have to bound this ACL to port where user whose IP is in ALC is connected?
I have a sge 2000 24 port POE switch that won't boot, won't communicate on console or TCP/IP, and all of the port lights are lit up green. Holding down the reset button doesn't fix the issue and there aren't any lights illuminated on the left hand side of the switch.
View 1 Replies View RelatedI have a Cisco SG300-20. I have read the documentation and cannot seem to locate the instructions for port forwarding. I need to forward TCP port 8088 to IP address 192.168.14.110 on the switch.
View 5 Replies View RelatedIs this smart switch possible to do Mac Filtering? how to enable mac filtering on this device?
View 1 Replies View RelatedThe switch has been set to Level 3 Routing. Port 27 has been in use as a Fiber Transceiver with no problems for several weeks. This week I tried connecting a second Fiber Transceiver to Port 28, and it would not work.
Swapped the physical GBIC modules in the ports, and the situation remained exactly the same: Port 27 works, Port 28 would not work.
Connected to the copper-part of the combo Port 28, it immediately connected and worked fine.
Connected an external Fiber Transceiver Box in place of the GBIC in Port 28, and it immediately connected and worked fine.
Swapped the new Fiber jumper (Port 28) with the existing Fiber jumper (Port 27), and the new connection came up immediately and worked fine. The existing connection would not work when connected to Port 28.
By "not working", I am not able to ping across the connection. The link light comes on and blinks. The transmit/receive statistics show as if data is processing on this switch, but on the other side of the Port 28 connection, the switch shows Transmit traffic, but no Recieve traffic.
I have been told there is a limit (8) on the number of source ports that can be mirrored to a given destination port. I can find no specifications or other documentation to corroborate this claim. Any factual data to confirm or refute this claim?
View 7 Replies View Related