I'm trying to allow 2 users to access as 2955 switch.
-admin privilege 15
-eousers privilege 2
When they both log in they just get to the user exec mode, how can I get them to go to their respective modes? [code]
I'm on a Cisco 2955 switch and need to get ssh working which I have done on another 2955 (but don't have near me), what am I doing wrong?
2955-02-PJ-CamdT.LU#sh run Building configuration...
Current configuration : 4061 bytes!version 12.1no service padservice timestamps debug datetime msec [code]....
I have installed Cisco 2955 Switch which already have x.x.x.x EA12 IOS and I copied x.x.x.x.EA13 into the flash: with intention to have EA13 enabled for IOS. I set the Global config for boot system by 'boot system (no falsh)x.x.EA13;x.x.EA12' but then also no luck and was showing EA12 in 'sh ver'. I then deleted the EA12 IOS and set the 'boot system flash:x.x.EA13'. I also had varified IOS EA13 by 'verify flash:IOS Filename', it verified the IOS.
But when I reloaded my switch, I'm unable to login and its in 'switch:' prompt (ROMmon mode - I believe). I then tried for flash_init, load_helper, dir flash: (showing me EA13 there) and finally boot flash:IOS Image file but no good news here... Output like this
Error loading "flash:IOS Image File EA13" Interrupt within 5 seconds to abort boot process. Error loading "flash:c2950-i6q4l2-mz.121-12c.EA1.bin"Interrupt within 5 seconds to abort boot process.
My guessing is that the IOS is corrupted (but its not showing me Error loading Image blabla...) I'm trying with EA14 of 4MB and I have 3 MB free spare and decided to remove EA13 first then through XModem try to upload EA14.
Any useful way and recommend me deleting EA13 and upgrading EA14... Also option to set boot image with having two IOS at the same time for permanent use.
I have found that the Catalyst 2955 series switches do not use an external MODE button for getting a switch into the switch: prompt, but they use a break sequence like routers do to get into Rommon state URL
So I was wondering if there is a similar mecanism that applies to other kind of Catalyst switches, like 2960, 3560 or 3750.
I'm been telnetting onto a 2955 and then upgraded the IOS and enabled ssh version 2 and then issues a "write", when I came back the exec-timeout had been issued and I was logged out of the router and now it is asking for a username and password and not just a password liek it did before enabling ssh. I havent yet put a username and password on yet, just the telnet.What would the username be if I havent set one?
View 12 Replies View RelatedI'm trying to decide what switch to use as a core for 500 users. I'm currently looking at either 2 x 3750X stacks or 2 x 4500s with dual SUPs and PSUs, both options will provide the number of switchports required without the need for additonal access layer swiches. Which switch option is best to go for here? All of our services will be located in our data centre which will be connected using 2 1000Mbps MPLS circuits. I wont need any advanced L3 features and we are not likley to scale over 450 users. Also is it ok to use the dual switch stacks or chassis to provide the collapsed core/access layer or is it best to have a dedicated core (using one of the above options with less switchports) and having a dedicated accesss layer using 2960Gs for example. Our structured cabling terminates in a single comms room so we wont need to distribute switches throughout the office.
View 3 Replies View RelatedI'm about to configure radius on a 2960 and 2955 switch as I have been testing this on a 1841 router and to my dismay I can't see the options to configure radius, do these L2 switches not supoprt radius?
edit - apoligies I forgot the "aaa new-model" all ok now
Although when I added:
radius-server host 10.1.1.1 auth-port 1645 acct-port 1646 key 123456789
radius-server host 10.1.1.2 auth-port 1645 acct-port 1646 key 123456789
radius-server vsa send accountingradius-server vsa send authentication
I got this:
Warning: This CLI will be deprecated soon. Please move to radius server <name> CLI.
And what woudl the above look like if I configured it that way?
I can't seem to send config changes to our syslog server on a 2950, I'm fine with 2960's and 3750's. The Cisco 2955 is using the latest IOS c2955-i6k2l2q4-mz.121-22.EA14.bin.
Here is what I have added:
logging buffered 64000 debugging
logging console informational
logging monitor informational
[Code].....
The only sylog message I get is "Configured from console by username on vty0 (10.1.1.35)
I come across to use the Catalyst Switch 2955 and it has two Relay Connector with one Major (MAJ) and one Minor (MIN) as below picture.There is command line to trigger these two Relay Connectors. As below command to set the Relay Connector to minor for monitoring the power supply: alarm facility power-supply relay minor
1. My questions are when there is power-supply faulty, the Minor Relay Connctor (right picture) will be short-circuited, right?
2. If we connector the two ports (ports 4 & 5 at the left picture) with a normal cable to drive an Alram Bell (in short-circuiled or closed loop situation), do we need an external power supply to the Alram Bell? Or there will be power supply from Catalyst 2955 to the Alram Bell as well?
I am having an issue with this device after setting the ip address and rebooting. I have tried renaming the config.text file without success. I have also tried the steps mentioned here: [URL]
View 1 Replies View RelatedI need to only allow 5 Mac Addresses on a range of ports on a 2955 switch. If I do the following it only changes the first port in the range:
interface range fastEthernet 0/5 - 10
no spanning-tree portfastswitchport port-securityswitchport port-security maximum 5switchport port-security violation restrictswitchport port-security mac-address 00:1D:24:25:F7:AA
[Code].....
One of my clients is using Cisco catalyst 2955 industrial switch.I am doing the configuration for them and come across one setting of FCS Error Hysterasis Threshold. I know FCS is Frame Check Sequence.
I do not understand is what is the meaning the setting of Hysteresis in term of percentage stand for what purpose?For example, the default is 10 percent. If I set the value to be lower 5% and what is the impact on that? Is this more stringent than default of 10% or less stringent than default of 10%?
Wondering if this switch is capable of being a backbone switch for a network of about 1000+ users and if the switch can handle a sustained 30Meg of data going across it?
View 3 Replies View RelatedI'm currently undergoing CCNa academy so I got a "job" from my boss to configure Cisco 871 router. Unfortunately we just finished first semester at academy so there are some things that I'm still having hard time to understand. I managed to configure router so it connect to internet or to be exact it has internet access through another adsl modem that is in bridge mode. url...The problem is that users are not able to use internet when connected to this router. I'm able to access router through telnet ( ip 192.168.13.10) but that's it.192.168.13.0 255.255.255.128 is network that we use at work. 192.168.13.5 is IP address that is assigned to zyxel adsl modem ( If I'm correct, we could have used any address here since we are connecting this directly to router ? ) Zyxel adsl modem is connected to FA4 port on Cisco router. LAN cable is connected to FA0 port and from there it goes to switch ( it's some asus switch with 50 ports). [code]
If I ping google dns from router e.g. ping 8.8.8.8 it works. If I ping url... it doesn't work. Also I'm able to access router via 192.168.13.10 but if I use router as default gateway then I'm not able to access the internet.
We have a Cisco 3750 stack connecting to the MPLS router, able to ping 8.8.8.8 - [URL], the internal users on their own Vlan can ping the default gateway the 3750 switch but no further, trace route from the PC/Servers stops at the 3750 stack.We have the switch configured to ip route 0.0.0.0 0.0.0.0 to the public interface in the MPLS router, from the switch I'm able to ping the internet.
View 17 Replies View RelatedI wish to block some url that users have access through my LAN .That's i wish to block icmp,access towards such sites, i wish to block icmp because dns will resolve the domain and they can access through ip address.what i have in place is a cisco 2800 series routers,
View 7 Replies View RelatedI'm a networking newbie, but I bought the SG 200-08 switch to do Link Aggregation with and I can't access the web interface. I'm on a mac running 10.7.3, and I've tried Firefox and Safari. I've also tried on a friends PC with Internet Explorer 8.On the mac, I can go into the terminal and can see that the switch has the correct IP address and is seen on both ethernet ports.
View 2 Replies View RelatedI'm a networking newbie, but I bought the SG 200-08 switch to do Link Aggregation with and I can't access the web interface. I'm on a mac running 10.7.3, and I've tried Firefox and Safari. I've also tried on a friends PC with Internet Explorer 8.
On the mac, I can go into the terminal and can see that the switch has the correct IP address and is seen on both ethernet ports:
? (192.168.1.254) at 2c:36:f8:4f:fc:8 on en0 ifscope [ethernet]
? (192.168.1.254) at 2c:36:f8:4f:fc:8 on en1 ifscope [ethernet]
either accessing the web interface or with setting up the Link Aggregation on the switch some other way.
we have a class based qos scheme (see attached file) on our 4500 series access switches and we have a access 3560-48 switch runing IOS Version 12.2(44)SE3 my question is can I use the same QOS scheme for the 3560 switch?
View 3 Replies View RelatedI've got a C2960 (sw01) and a C2948. (sw02) The sw02 switch is trunked with sw01, and is meant to serve as an extension to the VLANs (1-4) that exist on sw01. It is trunking properly, however, how would I go about giving the sw02 an IP so that I can access it via SSH? Would I have to create a VLAN specifically on sw02 with an ip and switchport an interface to use it? I know that a VLAN can only have a single IP, but I'd like sw02 to have an IP on VLAN1 (192.168.1.0 subnet), is that possible?
View 5 Replies View RelatedI upgraded a Catalyst 2950 switch and there wasn't enough room so I deleted the flash. The upgraded went well using tftp. It booted up fine. The I0S version includes crypto. But, I can't access switch via web browser or CNA. Port scan shows port 80 0pen. What am I missing?
Here is the flash.
Directory of flash:/
2 -rwx 112 Mar 01 1993 01:00:48 +00:00 info 3 -rwx 3722814 Mar 01 1993 01:02:58 +00:00 c2950-i6k2l2q4-mz.121-22.EA14.bin 4 drwx 4416 Mar 01 1993 01:03:45 +00:00 html 331 -rwx 112 Mar 01 1993 01:04:19 +00:00 info.ver 332 -rwx [code]....
My access switches LED is start blinking very fast suddenly,it has single up link from the Core switch.access switch is 3560.what can be the possible problem.
View 1 Replies View RelatedUnable to access switch from outside the local network. Can get to all routers and PC's
View 2 Replies View RelatedIf I dual connect my access switch to my 6509s running vss, what will happen, will spanning tree still block one of the ports if I don't set up an etherchannel?
View 1 Replies View RelatedI have 2960 switch and i can't access it using my console cable .I can access other switches in my network ( 3560 & 2960 ) but i can't access only this switch.may be the console port in the switch damaged? or it's a bug ?? !!! although the switch is worked normally.
View 11 Replies View Relatedi am trying to configure my HP 420 access point. I have configure different SSID on it, This access point is connected to cisco 4500 switch, i have configure trunk on up link to access point.my problem is the client are not able to get an IP address form the correct vlan if i tagged the SSID to it.
in the following the output of show run int in cisco 4500 switch:
interface GigabitEthernet3/13
description ==== HP ACCess point ====
switchport trunk allowed vlan 99,130,132
switchport mode trunk
[code]....
I have a LIII Switch Cisco 3750x ,with diffrent Vlans , Some users are in Vlan 102 (10.10.2.0) and Some Users are in Vlan1 (10.10.1.0) , now i want to restrict the Vlan102 users to access Vlan1 , i am pasting my configuration below , how to create a access list .
interface Vlan1
ip address 10.10.1.36 255.255.255.0
ip helper-address 10.10.1.36
[Code].....
I have a small cisco switch cluster (seven different 2924, 3524cisco switches) with 3550 as a cluster control which does all the inter vlan routing that works fine.
This cluster is in semi production PBX interop testing lab. This is a closed network without internet access and not connected to our corporate network.However now I have to add this capability so some equipment in the lab can get Microsoft updates over the internet.
I've created a port on a 3550 (fa0/19) and connected it to another network that has internet access. It picked an ip address and when I'm logged in to the 3550 I can ping hosts on the outside network. However I can't ping any hosts on that network from any hosts that are connected to my vlans.I've tried a few different things, but still can't make it to work.
Here is a short version of my 3550 configuration:
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log datetime
no service password-encryption
[code]....
We have a network of 30 VLANS and currently all the vlans have access to everything. We are using Cisco 6509 switch for Layer3 routing.I would like to prevent some VLANs accessing the server VLANs. How can I restrict access to the server VLANs?Do i need to implement access-lists on the 6500 switch? or do i need to create VLANS on the firewall so that all traffic i filtered ?
View 9 Replies View RelatedThe field engineer has a stand alone 24 port 2900 series switch that he has different equipment connected to and are segmented using VLANs. So for example, he's got ports 1-4 assigned to VLAN 10, 5-12 assigned to VLAN 20, 13-19 assigned to VLAN 30 and 20-24 assigned to VLAN 40. He would like all the gear on VLAN 30 to have the ablity to talk to all of the other VLANS, but VLAN 40 should not be allowed to talk with any other VLAN. Trunking would do no good here since the switch isn't connected to anything and you can only assign one VLAN per port.
Is there a way to do this within the stand alone switch? The only possible way I could think of would be to ensure that each VLAN has an assigned IP number (subnet) and doing this through access lists.
I am unable to access a series of switches connected together through a management vlan. I receive the message "The server xx.xx.xx.xx at level_15_access requires a username and password." Entering the username and password fails and the same username and password message returns. I am able to ssh into the switch with the username and password that fails trying to access the switch with the browser.
How can I check the username and password for access with the browser?
I am trying to monitor switch performance. Is there a good way to monitor switch performance with the command line interface?
cant assign cisco switch 3560G port g0/1to access vlan 10
main-switch(config-if)#switchport access vlan 10 Command rejected: Gi0/1 not a switching port.
I am trying to configure a 3500XL switch (and I know its old). I get to the int fa 0/1 line and thats where it all stops working.
switch#(config-if)#switch port mode access
switch#copy run start
or
switch#(config-if)#switch port mode access
switch#sh run int fa 0/1
It will show the configuration for port fa 0/1 as if I hadn't entered the "switch port mode access" command. Or any other command for that matter. Why the switch is not holding configuration and seemingly loses it as soon as you exit out of each interface?