I'm new and just entered in the world of studying my certification for Cisco, since I'm curious I see that there are switches that can perform task depending on the layer? I see some with specifics for Layer 2, some other for layer 3 and even some others with router capabilities!I know this is a rookie question but how do I know what the best switch for a network? or how can I identify them?
View 3 Replies
I want to setup VLAN with the switches SG300 and SLM2024. What is the suggestion to connect these 2 switches. We have the Juniper net screen.
View 1 Replies View RelatedI connect to the internet through a Thomson TG585 v8 modem. When I log in to the modem's IP (192.168.1.254?) through a browser, I only get one task available, that is "Check connectivity for this internet service". As far as I know, I should have some management options, like for example to block websites, to limit internet service for certain devices etc... Does anybody knows why I don't have these options? Could it be a restriction from the Internet Service Provider?
View 2 Replies View Relatednow we have 2 switches: SF300-24..on one SF300-24 we config it at layer 3 mode with VLAN configuration same as following [code] And we use port 26 on 2 switches SF300-24 is trunk mode then we connect both SF300-24 switches.But on SF300-24 layer 2 cann't inderstand VLAN from Sf300-24 layer 3..How to config VLAN on 2 switches SF300-24 Layer 3 and SF300-24 layer 2?
View 2 Replies View RelatedWe have several of the SG300 Serices switches. We use them to route VLAN traffic to Remote Offices, Internet Connections, and WiFi Access Points.In one remote office we have a SG300-10 setup to route the HQ Network and the remote Office Subnet. The SG300 is Connected to HQ via Fiber and has multiple Tagged VLANs on it. If I do speed tests over the Fiber Link on the Incoming Tagged Netwotk I get Decent performance, 80Mbs. If I switch to a networtk that is not priginating from HQ, and have the SG300-10 route packet, I get dismal performance. 15-20Mbs.
I Fireded up a New SG300-28P FW v1.2.7.76. Added a the HQ VLAN 101 and new VLAN 1025 . Mapped some Tagged and untagged ports for each. Switch was connected to HQ Network as untagged VLAN 101. I put a laptop on an Untagged VLAN 101 port. Ran some tests, cam back with 750-850Mbs. Great. Put the same laptop on a Tagged 101 Port, Configured the NIC for Tagged VLAN 101, Same test, same Speeds, 750-850Mbs.I then Configured laptop for Tagged VLAN 1025. Connected to tagged VLAN 1025 port. Ran speed tests, resuts were 15-20Mbs!
I then Configured laptop for Untagged VLAN 1025. Connected to unagged VLAN 1025 port. Ran speed tests, resuts were 15-20Mbs!It was only the Laptop and the Connection to the HQ net on the SG300-28P. Why is the performance of this unit soooooo poor when it needs to route?Other Switches have FW v1.0.0.27 or FW v1.1.2.0. They have Similar speed issues. All Configured for Layer 3.
I have a situation where I have ethernet traffic from two separate networks/ip subnets (Subnet A and Subnet B) on a single ethernet connection. I have the need to separate the traffic into two separate networks and two isolated broadcast domains. I thought this could easily be accomplished with a Cisco 300 Layer 3 switch, but I can't get it to work correctly. I have the switch set to IP routing mode. I have three VLANs configured. VLAN 1 sees the combined Layer 2 & 3 ethernet traffic for both subnet A and subnet B. VLAN 10 has an IP address assigned from subnet A and is the gateway for devices within that subnet. VLAN 20 has an IP address assigned from subnet B and is the gateway for devices within that subnet. IP proxy arp is on by default and should be active.Devices in VLAN 10 can ping devices in VLAN 20 and devices in VLAN 20 can ping devices in VLAN 10. This appears to be working only because the switch is the default gateway for those components.
No devices or servers in VLAN 1 can ping VLAN 10 or VLAN 20 components, and VLAN 10 and VLAN 20 components can not ping VLAN 1. I analyzed the ARP traffic on VLAN 1 and the switch is not responding with its own MAC address for requests for IPs for active devices connected to VLAN 10 or VLAN 20. The Cisco documentation says that the device should be responding and acting as a router.I can not physically connect everthing on VLAN 1 directly to the switch, I can not make the switch the default gaeway for all devices on VLAN 1, and I can not create static routes directly to the VLAN 1 switch IP address for all devices that are part of VLAN 1, so I am stuck. I need the switch to let VLAN 1 components automatically know what is connected to VLAN 10 and VLAN 20.
I am willing to scrap this approach entirely if there is an easier way to do this. Put simply, I have a few devices in Subnet A that need to be isolated from Layer 2 & 3 traffic destined for a few devices in Subnet B, but I can't reconfigure my entire network to create these isolated broadcast domains.
We have a potential new customer who is wanting to deploy a guest WLAN. I am happy doing this via a VLAN on the WAP4410N series AP’s. I would then create the relevant VLAN’s on the switch. Can each VLAN be assigned an IP address and allowing me to be able to add a static route on the router pointing the traffic for the Guest VLAN back to the switch?
View 1 Replies View RelatedWhy layer 2 switches need its mac address, even it does not have any interface ? (does not have stp and etc)
View 8 Replies View Relatedi've a problem with my SF300-24 routing. That's my network configuration:
Port 1 to 12 assigned to VLAN 10
Port 13 to 23 assigned to VLAN 20
Port 24 has an ip 10.17.7.254 to connect with my deafult route, beacuse I've also a Linksys RV042 router, connected in turn with my ISP router, having an ip 10.17.7.1.
If there is C6509E as core switches and C3750 Switches running layer 3 at the User dept uplink to the C6509E Switches, what will be the multicast command that should be implemented at both end? CGMP or IGMP or do not need to implement this snooping as well?
Users (IPTV) -> C3750 (Access Switch) -> C6509E (Core Switch) -> C6509E (Server Farm Switch) -> IPTV Servers
Do we need to configure multicast at C3750 Switches (Access Level) at the User dept? Let's say the IPTV Mulitcast is 239.1.1.1. How can we build up this multicast configuration based on this scenario?
I have a project I am working on that will require routing over a MetroE circuit to connect a few sites together back to HQ. Although, I know this can be accomplished several ways, I have come up with a solution that I think will work, but would like you all's input as to whether this is adequate and if my thoughts on how to properly "organize" the network are right.
I have been working with the SG300 line in Layer 3 mode and have not had any issues in a test setup I have here in the office. Basically my thought is to have a single VLAN/subnet allocated for each physical site. That will handle the basic interoffice connectivity etc. I also have a need to prioritize voice/video traffic throughout the entire network. My plan was to create an additional VLAN/subnet to house the teleconferencing equipment. Thats pretty much the jist of the setup. My only question is how to properly prioritize the voice/video VLAN.
I would like to ask if it is possibe to stack a 3Com 3cr17161-91 to a layer 3 Cisco Switch? The two will be stacked using the avaialble SFP modules.
View 4 Replies View RelatedConnecting ASA 5520 to two Catalyst 3560G layer 3 switches. What's the best practice to connect the asa-5520 at the edge, to the core of my network? What I'm looking to do is connect two routed gigabit ports (gi0/2 and gi03) to two seperate layer 3 routed ports on catalyst 3560G. I'm wondering how to do it, or if there's any type of failover method? I'm running EIGRP in the network and the link to the first core switch has a /30 point to point connection. Everything works fine, I'm just not sure how to connect the second switch to the firewall. Should I use the a different /30 for the point to point connection to csw02 gi0/48? (See attachment) How would this affect traffic flowing through this interface? Would I have to duplicate rules I have on my inside (gi0/2) interface? Is there a way to make the inside2 interface standby some how? I want to know the best way to set this up, so in the event csw01 goes down I don't loose internet. Will EIGRP work it's magic and only use 1 path to the ASA? Should I even be using routed interfaces on the ASA and just use trunked mode?Running ASA 8.4?
View 1 Replies View RelatedMy SF300-24 switch has been working 100% as a backup switch for a client of mine. At my clients premises it was running 3 Vlan's and doing inter VLAN routing. When my client received their original switch back, I obviously brought my SF300-24 back to the workshop, reset it back to Factory defaults and tried to do a fresh installation on it. I can not get it to change from Layer 2 to Layer 3! I installed the latest firmware but still no go.
Everything works a 100% via the console, but when I go to the System Mode menu and try and edit it, it justs sits at layer 2 and will not chage to layer 3!
I am migrating an a group of workstations that run a fire system from one software to another. The current workstations run the following info:123.123.123.xxx 255.255.255.0The new workstations run:100.100.100.xxx 255.255.255.0There is a central switch location using a GE-DSG-244 Layer 2+ Managed switch. There are two remote location using GE-DS-82 Managed Switches.The two networks must remain isolated, yet use the same fiber communications. The central switch connects to the two location using MM Fiber. From my research I believe I need to use the 802.1q standard to allow port trunking between the two switches.
View 7 Replies View RelatedI've been conducting research on configuring 3 distribution switches in my network which are Cisco Catalyst 4507's to communicate with our core over layer 3. Our core switch which is already configured at Layer 3 for intervlan routing is a Cisco Catalyst 6509.
I've got the configuration portion complete and all devices are able to communicate my only question is about QoS. Do I have to configure QoS at the layer 3 interfaces for voice, if so how is that completed. We have several vlans and separate the vlans for each building by voice and data. We only configure ports on the access switches with voice vlans for QoS and we use the auto qos option on these interfaces.
How to set the management interface on a SG300 Switch in Layer 3 mode? I've some vlans configured on the switch with interfaces in each of them:
Vlan 100 (10.0.1.254 /24)
Vlan 200 (10.0.2.254 /24)
Vlan 300 (10.0.3.254 /24)
...
Vlan 900 (10.0.9.254 /24)
Now, the management interface is listening on all interfaces (IPs). But I would like to configure the switch to only listen on 10.0.9.254. What I need to configure or whether it is possible?
I have a SG300-28P switch. I just read in the Administration Guide that, when in Layer 3 mode, the switch doesn't support MAC-based VLAN or Dynamic VLAN Assignment.
So, in order to assign a client to a VLAN based on their MAC or based on the response of a RADIUS server, we have to disable layer 3 features. Without layer 3 switching, the switch is unable to act as a default gateway and forward packets between VLANs. As a result, the VLANs can't communicate in any way, or access the internet, unless a separate router is connected to every VLAN. Right? Doesn't this limitation significantly reduce the usefulness of the DVA feature?
I've been taught/under the impression that vlans and stp stay in the access layer to prevent bridging loops and broadcast storms from taking down the whole network. Well I was reading about backbonefast and how it "Enables fast convergence in the networkbackbone or core layer switches after a spanning-tree topology change occurs." Now I thought that from the distribution layer up we use a routing protocol.
View 9 Replies View RelatedWe are currently designing Layer 3 to the edge EIGRP solution for our customers. The network is a hybrid of collapsed core (Core to access) as well as a three layer design (Core/Distro/Access) for connectivity to the Data Centre, Internet, Wireless Blocks etc.The core of the network contains two 6509-E switches interconnected on a Layer 3 Port channel (no VSS). Access Layer switches (3750-X series running Stackwiseplus protocol) connect to the core switches over p2p routed links and Distribution layer switches (3750X stackwiseplus) provide connectivity to the Data centre, Internet, wireless blocks etc.
The access and distribution switch stacks(Cisco 3750-X) are set up with two or three member switches with uplinks multihomed to the primary and secondary core switch with each uplink included in EIGRP. In each of the stacks, one of the switches controls the operation of the stack, which will be the stack master.As the Cisco Stackwise architecture is not SSO-capable but NSF aware, all Layer 3 fuctions must be re-established during a master switch outage. To minimize control plane impact and improve Layer3 convergence, uplinks should be diverse and originate from the member switches instead of the Master switches in the respective stack. This is as per Cisco recommended design solution.The above solution can be setup if there are more than two switches in the stack. i.e. uplinks are configured on the backup member switch modules.
1.But what about stack with two switches..Which switch should be set up as the Master for a two member stack with uplinks to the core primary and secondary from each switch(Master and Backup)
2. For Layer 3 routing, does the routing takes precedene over switch failures? Say for eg. In a two member stack, the master switch with uplink to primary fails, does EIGRP provide a fast convergence to route traffic via backup secondary and does not wait for the control plane on the switch stack to converge? All the access to core links will be set up for ECMP.
I have a question if I Stack a Catalyst 3750 L3 with a Catalyst just L2, will we able to use all L3 capabilities?
Switches are
WS-C3750G-24TS-E1U
WS-C3750V2-24PS-S
I am trying to access a government jobs page to apply for an internship. When I access the page from my home network (using multiple browsers and multiple computers) I get a result that references the job opening from last year, and doesn't have an application button. When I access the site using my 3G connection on my phone, or when accessed from any other internet connection, I get the new page which includes information about the 2013 job opening, and has an application button. When I try to enter the URL for the application page on my home network, I get a 404 error. If I turn my wifi off on my phone and reload the same page, it resolves to the correct page.
View 17 Replies View RelatedI configure 3750 stack switch as core and 2960 stack switches as access layer switches.I connected my laptop to one of my core stack in VLAN 10 and I am pinging to one of my server in VLAN 1. What will be the minimum latency at the time of inter VALN routing
View 2 Replies View RelatedMy dlink wireless has a WEP consisting of 40 numbers (or 4 lines of 10 numbers)When I connected a PC to the dlink it asked for the key and I entered all 40 numbers and it connected without problemI also had to enter all 40 digits for my Wii to connect to it.But when I connected my PS3 I only entered in the first 10 digits and it connectedI have connected various devices to the dLink and some ask for the first 10, some 20 and some require all 40.I have just bought a new phone Samsung Galaxy Ace and trying to connect to the dlink is impossible. I have entered all 40 digits and it wont connect, it just says "authenticating" then "disabled". I have tried the first 10, then 20, then 30 and it still says disabled.The problem then is I don't know whether the phone is faulty or the dlink just wants a particular line of my key.
View 14 Replies View RelatedI'm at my brother's house and I'm trying to connect to hs wireless network. I know the password but whenever I try to enter it it gives me a message that says, "The network password needs to be 128bits or 256 bits depending on your network configuration. This can be entered as 8 to 63 characters or 64 hexadecimal characters." From other forums I've looked at it says that I need to get to the router settings page. It gives me an IP adress to paste into the web browser but it doesn't come up as anything. What the heck?
View 4 Replies View RelatedI'm running an ISE 1.1.1 and i need to authenticate guest users.The goal is apply different Authorization profile to the same guest user based on the thevice he use to connect to the guest wlan.
I.E.:
if guest user "user1" connect to the guest WLAN using a windows laptop, than apply "Guest" authorization profile
if guest user "user1" connect to the guest WLAN using an Apple iPad, than apply "Mobile" authorization profile
I've tried to deployed the following 2 authorization policy:
1)if "Apple-Device" and "IdentityGroup:Name EQUALS Guest" then "Mobile"
2)if "Guest" then "Guest"
but the first rule never match and even if I use and iPad to access the guest network the "Guest" authorization Profile is matched
I've verified that the iPad is correctly recognized as an Apple-Device changing for test purposes the rule table in
1)if "Apple-Device" then "Mobile"
2)if "Guest" then "Guest"
I have a wireless setup with a linksys router hooked up. I mainly connect with my laptop but now I'm trying to test out a Dell Inspirion 3000 Windows XP. The Dell picks up the signal of my connection that is secure when I have the proxim router connected. When I go to put in my password I get this message : "The network password needs to be 40bits or 104bits depending on your network configuration. This can be entered as 5 or 13 ascii characters or 10 or 26 hexadecimal characters." Otherwise if I direction plug in the Ethernet cord it 'connects' but I can't do anything. I'm set up as a WPA Personal in security mode when I got into my linksys account.
View 2 Replies View RelatedSo I have an issue with getting a laptop hooked onto the router signal. The router is a brand spankin new Linksys EA4500 and the laptop is an IBM which is running Win XP (not sure of SP version as it is a customer's comp. at a hotel I run). Anyway, the error message I am encountering is:The network password needs to be 40 bits r 104 bits depending on your network configuration. This can be entered as 5 or 13 ascii characters or 10 or 26 hexadecimal charactersAt first I thought is was my router password since it contained a $ symbol so I changed it to only letters and numbers but still didn't work. I have never encountered this error message on any laptops and no other rooms have been affected.
View 2 Replies View RelatedActually I have a lab with ACS 5.3 running with 802.1x, but when when the user is successfully authenticated, it's assigned and IP address from the DHCP server, is there a way to assign a static IP address depending of login username??
View 13 Replies View RelatedEveryday 04:00 AM, I set repeatly configuration sync. But, Since 04/16/11 04:00:00, Background tsak is not working. So, I was wcs stop -> start (04/18/11 08:30) this situation is randomly occurrenced. I found similar symptom, bug CSCtf23192. This bug fixed 6.0.202. But, I used 7.0.164. I want to know that this bug occurence 7.x and fix in 7.0.172.
04/16/11 03:55:37.774 INFO [monitor] [PollSerializationLock-1] SiAqStatspostNetwork Ending updateServiceDomainNodes for Area 165.243.138.6-12603442904884/GSIDC_12F, elapsed = 0 04/16/11 03:55:37.837 INFO [monitor] [PollSerializationLock-1] SiAqStatspostNetwork Ending updateServiceDomainNodes for Area 165.243.138.6-12603443248315/GSIDC_13F, elapsed = 0 04/16/11 03:55:37.837 INFO [monitor] (code)
create a scheduled task in LMS. In this task I would like to regularly check time on all network devices in LMS and generate a rapport about this that would be sent to e-mail. All network devices have the same NTP server. How can I create this task? LMS version is 3.2 SP1.
View 4 Replies View RelatedI was wondering what this command that appears in default configuration of cisco routers: scheduler max-task-time 5000.I did some research in forums but did not find anything apart from the "scheduler" command with other options.
View 2 Replies View RelatedI've been tasked with designing a network consisting of 3 separate broadcast domains with each one representing a separate business accross 3 separate floors. None of the companies should be able to communicate with each other.I've been told that the design should only represent the first 3 layers of the OSI model so I'm only looking at Cabling, Switching and Routing.
I don't expect you all to tell me exactly how I should do this, however I just need a starting point. My main issue is with routing. I'm aware that each port on a router represents a broadcast domain so if I use one router, 3 broadcast domains, does that means that none of the domains will be able to communicate with each other? Should I use more than one router or can i get away with one? Also just so you are aware I've been told not to use VLans and each broadcast domain must have its own ip address schema.
