Cisco Switching/Routing :: 1941 Port-Security With Router Switch Module
Feb 29, 2012
I have a 1941 that I am going to deploy with a HWIC-D-9ESW switch module (I only need 3 switch ports but need the PoE). I am going to hang a 1262 autonomous AP off one of the ports but I need to configure MAC address port-security so that only that AP can pass traffic. I know the switch modules are 'almost' exactly like a switch for commands but I can't seem to enable or configure any port-security settings. Is port-security no available on the switch modules?
My questions is can a 4 port PoE switch module (EHWIC-4ESG-P) and a 8 port switch module (EHWIC-D-8ESG) be used at the same time in a Cisco 1941 router?
Can you configure a Cisco 1941 to use an 8 port EHWic module and the 2 onboard GE ports in a single LAN?
I've discovered you can't have the on GE ports associated with a VLan, and I'm when I've previously researched for a solution, bridging was mentioned but I cannot seem to get it to work (or completely understand it)The reason I would like to use all 10 ports on for the LAN is becuase I have 10 devices I need to connect to the 1941?
I have a Cisco 1941 K9 Router. I want to add POE functionaltiy to it. Specifically I want a 4 port EHWIC POE switch to power a couple of AP's.
This is what I understand I need; Upgrade/replace the internal power supply with PWR-1941-POE power supply, This is supplied with a fan replacement also (not yet purchased).buy 1 x EHWIC-4ESG (4 port switch)buy 1 x ILPM-4 (inline daughter card / power supply board) I think the real question here is the 4 port switch... there are two types available one is EHWIC-4ESG=the other is EHWIC-4ESG-P=
Is there any difference between these two switch modules? or are they the same and the more expensive "P" version is simply supplied with the ILPM-4 daughter card for POE?
I have recieved via courier today 1 x EHWIC-4ESG, and found a ILPM-4 on ebay for a good price. WIll this provide POE through the switch EHWIC-4ESG?
I have a cisco 1941 router. Stock standard vanilla hardware, no extras. Standard universal image. Data and Security not enabled.I would like to add a 4 gigabit port POE switch (EHWIC) module to the router..The 4 port POE switch module will be used to power and connect 2 x Areonet AP's for my home. I'm replacing a Apple Airport Extreeme and Express setup. I'll possibly later use the two remaining POE ports for security cameras.My question is, what extra hardware and or IOS version do I need for the POE swtich module to function on the 1941? [URL] I think this is the model I want EHWIC-4ESG-P #4 port 10/100/1000 Enhanced High-Speed WAN Interface Gigabit Ethernet switch with Power over Ethernet?
I have a laptop with a single physical NIC which I have used the advanced management tools to create two virtual NICs (say vlan 10 and vlan 20) and both are on the same subnet (say 192.168.4.x). One NIC is for normal TCP/IP traffic and one is for broadcast/multicast traffic (I have some custom software that requires this to be the case and works fine on an older laptops with built-in physical NIC and PCMCIA XIRCOM NIC). The dual NIC laptop communicates with a dual NIC server via a Cisco 2811 router (which has a 16 port switch module at the back) and has vlans set up so.
What I want is for the single NIC laptop (with two virtual NICs) to be able to also communicate with the server. Basically, one NIC is for normal traffic and one is for multicast/broadcast traffic. All three machines need to be able to talk to each other using the NIC for normal traffic and both laptops must be able to receive broadcasts from the server. What is the best way to configure the router to handle the trunking/tagging? Most configuration documentation I read has two complete subnets for the two virtual NICs. Note that all three machines use static IPs and are part of a workgroup so no DNS and domain servers etc.
I have a 3925 Router with a 48 port switch module (part number SM-D-ES3G-48-P). I have no problem accessing the 3925 Router, but when I go into the 48 port, I get an error that reads
Error Hardware not supported by firmware. Try loading a newer software instead. System Resetting...
I know that the wrong IOS is installed on the switch, but the problem is that this is an endless loop. The switch resets then comes back to the same error. How to get the switch out of this loop so that I can load the correct IOS.
I have a cisco router 1941 and i have uploaded before evaluation license , now i have already bought cisco security license .I have already installed on cisco router , but the problem the router is still using the evaluation license not the new license .
I Have a Cisco 1941 router which had its GE0/1 port burnt out and we have since plugged in a module with 4 fast ethernet ports. I need to reconfigure the router such that at least one of the Fast ethernet ports can server the purpose of the GE0/1. GE0/0 connects to our Service provider and GE0/1 connected to the inside network.Currently, while connected to one of the ethernet ports, i can telnet into the router on the address 192.168.29.1. when i'm on the router, i can ping our remote site, network address 192.168.24.0 with no problem, but when i use the command "Ping 192.168.24.0 source 192.168.29.1" there is no response.
I have a strange issue that I am having an issue figuring out. I am trying to login to the 1941 router through the console port. When I enter the username and password, which I just set, it fails. I am able to login under a different login but when I try to enter the enable mode the enable password doesn't work, which I just set as well. I can login with the TACACS+ login from a SSH session. Here is the line config:
how this switch module works in 2911 router? I have two 2911 routers in HSRP configuration for redundancy with crossover cable between switch modules. OSPF running on routers.If active router loses its power and then comes back again, it boots first, its internal link to switch module comes up and it starts to forward packets to switch module. The switch module starts to boot only after router is ready. So I have outage of about 3-4 minutes. For our real-time applications it is way too long.
any way to start booting of the switch module before router gets ready?I understand I can boot it manually, but it is only after router is ready. Only way to get around it I found is to disable internal link and use router interface to connect to the switch module.
On the supervisor card of a cisco 6500 series, according to the following link, [URL] it only has 2 uplink ports on the card. Would I be correct in assuming that I only have those to ports that I can configure IP addresses on?
The cisco that is being devlivere is coming with a 48 port switch and 24 port fibre switch. Could I change any of those ports into a router port and configure IP addresses on those?
The supervisor card is a ws-sup-720-3b the 48 port switch is a ws-x6748-ge-tx the 24 port fibre switch is ws-x6724-sfp
I'm fairly new to Cisco products am in the process of developing my network knowledge on a deeper level. I have a 3825 with a HWIC-4ESW and I'm struggling to fully understand how the two "see" each other. I've setup a V LAN with a layer 3 address on the HWIC and added the switch ports to it. This seemed to allow devices connected to the switch ports to talk to the built-in router ports. I thought this was all making sense until i applied an access-list to the router port. It's a simple ACL i'm just using for testing and the only thing it does is blocks telnet from anywhere. I know the ACL is setup properly because if I connect a device directly to the router port i cannot telnet to the port. However, if i connect a device to one of the switch ports, i am able to telnet to the router port successfully.
It seems that I'm missing something with how traffic flows from the switch port to the router ports and how the two "see" each other.
I was looking for a way to connect an AUX port from a 1700 router to a 6500 switch module console port, to see the output of the Switch's on the 1700 router, in case there is a network downtime, I could see what's going on in the switch, what cable should I use ? Also, is there is any kind of documentation for this type of config what have I seen is very few info.
One of branch locations has a Cisco 1941 Router . The port details are as follows
-Gi0/0 - ISP line -Gi0/1 - Inside Network ( To a 2960 Switch)
Now they have procurred another line from ISP through which MPLS based VPN to the Main location is configured. What are the options I have , to terminate it on the Router ? As all the On board LAN ports are filled I guess I wont be able to do anything with the current setup .Are Switching modules available ? What is the Embedded-Service-Engine0/0 port that I see on #sh ip int b output ?
Here's my problem. I'm going to be using Cisco 1941 routers at a bunch of remote sites. All of these sites have 2 comm paths out. Some of them have 2 IP/VHF radios and some have 1 IP/VHF radio and a copper link using Patton ethernet extenders. From the VHF radios the data hit our MPLS network back to our HQ and the sites with copper go directly back to our HQ. Everything ends up at a Cisco 4948 switch. The problem I'm having is that I want the routers at the remote site to use one ethernet port (G0/0) as the primary and the other (G0/1) as the backup interface. I've tried the backup interface command but the problem is that depending on where an outage occurs the ethernet link to either the radio or Patton stays up so it never switches over. We're using OSPF as our routing protocol and I'm sure there's something that can be done with it but I'm not sure what.
Suffered a big outage on the network, the fix was to reload the module 3 on the 6509 switch, we had these errors on the log %CONST_DIAG-SW1_SP-3-HM_PORT_TEST_FAIL: Switch 1 Module 3 TestUnusedPortLoopback Port(s)[24,46] failed. System operation continues.in the end, we reloaded the card and it was all ok. is there anything I can do to check the card / or any deeper logs? would that error cause the card to crash?
I'm trying to set up a 2951 with a 24 port switch module. I want the ports to act similiarly to the ports on an 881 router - where I assign the VLANs on the router and I set the VLANs to the switchport interfaces.I would like to be able to create the VLANs on the router portion of the 2951 and then, enter the switch module and configure the Ports to the VLANs but, how do I logically connect router to the switch? Is it an internal logical interface - meaning how are the VLANs getting from the router to the switch?
We have supplied Cisco Swtch 2960 with gig SFP modules. It is working fine. However, when I do a show inventory it show proper part no. for the switch chassis but for the GLC T module it shows as unspecified in the PID column.
I have a problem with a newly bought ws-x4548-rj45v+ i've plugged in the module but when i do show modules all , it show as unsupport
Power consumed by backplane : 0 Watts Mod Ports Card Type Model Serial No.---+-----+--------------------------------------+------------------+-----------1 2 Supervisor IV 1000BaseX (GBIC) WS-X4515 JAE1048GAXQ2 48 10/100/1000BaseT (RJ45) WS-X4448-GB-RJ45 JAB064806WN3 48 10/100/1000BaseT (RJ45) WS-X4448-GB-RJ45 JAB063005DB4 0 Unsupported module WS-X4548-RJ45V+ JAE1545056U M MAC addresses Hw Fw Sw Status--+--------------------------------+---+------------+----------------+---------1 0007.0e64.f880 to 0007.0e64.f881 5.2 12.2(20r)EW1 12.2(46)SG Ok2 000b.5fa4.da20 to 000b.5fa4.da4f 1.0 Ok3 0009.e844.d760 to 0009.e844.d78f 1.0 Ok4 ccef.4815.9bf0 to ccef.4815.9c1f 2.0 Unsupport
Trying to find some documentation as to whether there are any other steps for inserting this new module in our N7K. We have 2 blades in already and 2 Sups in 5 & 6. I'm assuming its like the 6500s, where we just slide it in and the OS configures the global parms for it and the default VLAN.
We having a VSS switch (9 slot chasis) with ios "s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXI4", slot 7-9 are currently free. We wanted to install WS-X6708-10G-3C module on slot 7. Once we installed the module it didnt come, after waiting for 15-20min again we removed and inserted, but module didnt come up and we could see following logs on the console:
Jan 12 08:57:40.146: %ISSU-SW2_CFC2-3-ERP_AGENT_SEND_MSG: client/entity send failed; error code is timeout *Jan 12 08:57:40.330: %ISSU-SW2_SPSTBY-3-ERP_AGENT_SEND_MSG: client/entity send failed; error code is timeout Jan 12 08:57:40.146: %ISSU_ERROR-SW2_CFC2-3-START_NEGO_FAILED: ISSU NTI Client(2040): failed to start negotiation (ISSU_RC_CLIENT_ENTITY_DOES_NOT_EXIST_IN_PEER)
[code]....
Afer some time VSS switch didnt response to console commands and all the users in access switches were not able to reach the gateway (VSS). Then the problem disappeared once we rebooted both the switches in VSS.why the VSS switch become non-responsive?
can i use any downlink port of the C4500-X switch as uplink without the need of the network module?i need to connect that switch to C6500E backbone without getting the network module, is that OK or i must get the network module?
I've got a pair of N7010's in a vPC domain with some FEX's attach running NX-OS 6.0.2. I am experiencing port failures on my N7K-M132XP-12L module the port got shut down due to internal errors with Error Disabled status and I am not able to bring the port back up. I am getting the following errors when I try to reset it. I am hoping is not hardware related as my vPC peer-link is on this module and I only have a single N7K-M1 32 XP-12L in each N7010. Replacing the module will be painful. [code]
i have 4507R with dual supervisors (WS-X4013+10GE) with IOS cat4500-ipbasek9-mz.122-46.SG.bin the supervisor module are in 3 and 4, and I want to connection port 5, but i have interface and line protocol down "inactive" error.
So I realized to use command "hw-module" to change the module to GE port. However, I am not able to use the command as" I cannot use the command "hw-module uplink" as well.
We have recently purchased a Cisco 4506 that has several Gigabit Ethernet modules installed.One of the Ethernet Gigabit modules - a WS-X4424-GB-RJ45 - is being picky with who it talks to at Gigabit Ethernet.
If I plug a laptop into one of it's RJ45 ports using a Cat 6 cable, nothing happens. No link light, no notification of link up or down on port statistics, absolutely nothing.If I plug a server into the same port it works fine at Gigabit Ethernet (even using the same Cat 6 cable).I can get the module to recognize a laptop if I fix the speed/duplex on the laptop to 100Mb/Full. I have tried this with other staff laptops from different vendors (HP / Dell / etc.) all with the same result.
The module directly underneath this module - a WS-X4448-GB-RJ45 - works fine for both laptops and servers. We have tried swapping the module positions but to no avail.
I'm trying to enable port security on several 4507R's. When I try to configure a range of ports the switch will randomly put 1 or 2 in err-disable. It's different every time I apply the config to the same group of ports. However if I do them one at a time it seems to work. But I really don't want to configure 6 fully populated switches one port at a time. We also have a lot of 3750's and they gave me no problem using a port range. [code]
I am trying to research the possiblity of backing up IOS and configurations from an Etherswitch module, and being able to store the files onto the Host Router's flash (3925 ISR). and then being able to recover that IOS and configuration, in case I have to replace the Etherswitch Module.
