Cisco Switching/Routing :: 2960 / QoS Tagging And Dot1q Trunking?
Nov 9, 2011
If you have a router with multiple direct vanilla FE (non trunked) interfaces on a switch trying to send QOS tagged packets to a wifi bridge several switches away does the trunking in the switched infrastructure mess with the qos tags if no qos is configured on the switches.
Does it depend on the switch? We have new 2960's running 12.2 and a few older 2950's running 12.1
I have a 2960 switch connected to another. The I need to verify that vlan0010 on one switch is forwarding tagged traffic between the other switch it is hooked up to through the Gi0/1 port. How do I verify this? I have a server that's multihomed (Broadcom) on the other side an it is supposed to be on this vlan with one of it's network interfaces. We had a pwer outage and now it cannot communicate on this vlan. However, everything else on the vlan can reach all the other nodes accept this server in the front of my building. All the devices in the same room are linked to the same switch which has one port (fa0/17) on vlan0010 and can ping eachother just fine. The server is hooked to port 24 on my server room switch and Gigabit port one goes to a fiber converter all the way to the back. It then gets converted from fiber to cat5e again and links into the switch (2960) in the backroom.
Having an issue getting my DMZ vlan working. Running my ASA5505 and i have configured e0/2 for DMZ w/ VLAN ID 3. Connected to my 2716 on port2.Inside e0/1 w/ VLAN ID 1. Connected to my 2716 on port1.
I am trying to get my DMZ Vlan to ports3&4 (LAG1) but when i assign the LAG group to PVID 3 i lose connectivity on VLAN1. I want to send both VLANs to that host because the teamed adaptor is used for Hyper-v Network Switch.
Is it possible to do dot1q-tunneling on the new Cisco Calalyst 2960 Compact series switches? I know that the 3560 series support it, but im unable to find any information about the 2960C series, personally i doubt it as the standard 2960 series don't support it.
i'm desperately trying to get LACP working over a dot1q Tunnel. The "Service Provider" Switches are two 4506-E Switches with SUP7-E connected via a 10G Link, running on cat4500e-universalk9.SPA.03.03.00.SG.151-1.SG
sample config:
dot1q tag vlan native interface GigabitEthernet3/1 switchport access vlan 2001
enable dot1q encapsulation on two ethernet ports on a 1721 router. I am able to configure it on the built in fastethernet port, but not on any interface provided by a WIC-1ENET or a WIC-4ESW. I have an application that requires two physical ethernet ports that support dot1q encapsulation.
I have a Catalyst 4500 L3 Switch Software (cat4500e UNIVERSAL-M), Version 03.02.00.XO RELEASE SOFTWARE (fc2). So I just wanted to verify that the switch only does dot1q encapsulation because the switchport trunk encapsulation dot1q command does not work.
In fact i receive traffic on a one client per vlan basis (traffic is PPPoE), i receive all this traffic on a router, collecting all these vlan on a bridge where the pppoe packets are treated.When I use a transeiver to convert operator fiber arrival to my router copper media interface, i have no problem....
When I use dot1q-tunnel to make the same on my 3750, packets seems to be corrupted.I get PPPoE timeouts and packet loss, not regulary, totally stochastic...
I made dozen of tests and different settings, without success I first thougt of MTU issues. [code] I made tests with system MTU and/or system jumbo MTU above 1500, without success.I didn't found any known caveats on 3750 running Version 12.2(25r)SEE4 related to dot1q-tunnel.
I'm setting up a new 4900m running cat4500e-ipbase-mz.122-53.SG5.bin. I'm attempting to create Port-Channels as a Trunk for uplink to a 4503 running cat4500-ipbase-mz.122-37.SG1.bin.When I attempt the command "switchport trunk encapsulation dot1q" it errors out.
I am trying to configure a 4507 R chassis with Dual SUP but i cannot see teh switchpot mode trunk encapsulation dot1q?
I have typed:
interface GigabitEthernet5/1 description DOWNLINK toxxxxxx switchport mode trunk channel-group 11 mode on ! I have have searched all other commands and sub-commands but could only find dot1q-tunnel which I beleive is for QINQ or some QoS featues and lot for L2 encapsulations?
the puzzling is:
XXX-Core4507#sh int gi5/1 trunk
Port Mode Encapsulation Status Native vlan Gi5/1 off 802.1q notrnk-bndl 1 (Po11)
when I connect the dostribution switch a 3507 to this int gi 5/1, both interfaces do come up?
We are trying to replace the CSS between our firewall and DMZ with a BigIP. Among it's other functions, it will act as the router between the firewall and the DMZ. To make this work, I need to assign vlan tags values for the vlans I create on the BigIP box and these must match the tags on the cisco switches (3550's) How do I find this information on the switch?
Our enviornment includes 3560 switches and 2800 routers. We have a few remote offices using an application on TCP port 1677 that use far to much bandwidth. Our WAN provider can throttle and police this for us, if I can TAG this traffic, for example all Traffic from Florida using the Groupwise app on TCP uses TCP port 1677 and I want it tagged with CoS 3.
I want to know if there is way to tag traffic with DCSP tags without having to do all the other requirments of QOS setup. All i want to do is just tag traffic at different DCSP values via source and destination IPs. We do not have a need to be priortizing traffic on out internal switches. We just want to tag the traffic so our MPLS provider can distinguish the different types of traffic.
Our environments is primarily 3750s in all offices.
We have a problem with CDP packets on sent by our Cisco 6509's. Unlike our other Cisco switches (4948G, 5020, etc.), the 6509 tags administrative traffic on the native vlan. As a result the CDP packets are sent with an 802.1Q header with a tag of 1. The other switches send the CDP packets untagged on the native vlan. This causes problems because we have non-Cisco devices in our lab that also receive and send CDP, but they do not process the packets that are tagged by the 6509. They see the packets from the 4948 and 5020 just fine.
How can I disable the administrative native vlan tagging on the 6509? Here is the current setup:
nwkdev-6509-1#show vlan dot1q tag native dot1q native vlan tagging is disabled globally nwkdev-6509-1#show interfaces gigabitEthernet 1/9/1 switchport
I've been experimenting with the 'vlan dot1q tag native' command on a switch and it seems as though tagging the native vlan breaks vty access to my access point.With the 'vlan dot1q tag native' commnand applied, I lose management connectivity to the AP with 'no vlan dot1q tag native' applied, connectivity is restored. Why is this? Is it safe to say that one can access the AP via vty lines using ONLY untagged packets?
some of our switches have the switchport mode trunk command configured between the 3750 switches but other 3750 switches connected to our 6509 core switch do not have the switchport mode trunk command to permit Vlans from going across the swtiches instead it has an ip address and says no switchport what is the difference between does two. Is trunking used only for Layer 2 and L3 is used to route interface vlans?
I am very new at this, but we have a 2801 router running 12.4, a 3560 that acts as the "Core" switch, and a bunch of remote 2960G's that connect via fiber to different buildings.
I am tasked to VLAN this network to reduce broadcast traffic. I started by setting up a VLAN 169 on the "3560" named the VTP domain, changed to version 2, and no password. THe Core switch and remote switch can share the VTP info, I HAD the Router seeing it too (able to ping 192.168.169.1) until I changed the "Domain" and "VTP Version"
The switches see each other fine, my problem is the Router sub interface 0/0.169 I cannot get to see the VTP domain. I imagine because I don't have a "Trunk port" set on the Router, but the option is not there. Meaning I cannot do a "switchport mode trunk" on it. The only thing I see is to make it:
But, my "int fas 0/0" is used now as the main interface for our "only" network 192.168.0.0, do I need to turn this over to a subinterface and make it "Native" then the difference of the subinterfaces will advertise? Here is some of my conf:
Core SW: TCCoreSW#sh vtp status VTP Version : running VTP2 Configuration Revision: 8 Maximum VLANs supported locally : 1005 [Code]....
I have a number of class-'c's as a hand-off from my data center fiber to my 2960, which then sprawls the racks with about many 2950 switches, mostly 20 machines per switch. To allow machines on one 2950 to push data to another 2950 without routing back to my ISP's router(which costs money for bandwidth) isn't is possible to trunk one port on each 2950 to another 2950 and adding a addititional vlan8 to them. Then data jumps from 2950 to 2950 without going back to the 2960 or mainly not going back to my ISP's router. Is this the correct way to accoplish this with extra vlan and trunking the 2950's to each other or am I looking at this all wrong?
Attempting to trunk an Avaya POE switch to a Cisco 3750X switch. Here's the Cisco port config: [code]
Cannot PING Avaya switch at 10.89.0.5. I have Cisco switches at .1,.2 and .3. I can PING those and access them. Any additional config needed on Cisco trunk port?
We purchased two new 4948 with two 10GE uplink ports and upgraded the devices to run IOS 15. My 6506 is running Sup 720 with s77233-adventerprisek0_wan-mz.122-33.SXI9. Currently we have 4948's connected to the same 6506's with no problems. Today I tried to add the new switches with new IOS and it caused of of my 6506 core switches to failover. I can't explain why because it was close to start of business and couldn't do much troubleshooting. Currently we have four 4948 (running IOS 12.2(14) switches running Layer2 connecting dually to each of the two 6506 cores via 10GE fiber uplinks. I tried to add two more to the scenario, again running layer2 and dual-honing them to each of te 6506 switches. there are two 6506 core switches and they run HSRP and spanning tree is manually set to give priority to even vlans on one 6506 and odds on the other 6506. Also the new switches I tried to add did had rootguard applied as well as the uplinks.
We have to get this working and have no test environment to work with. We need to do this late this evening after close of business.
On another note, I have had problems upgrading some of my older 4948's to IOS 15. I followed Cisco's suggestion and upgraded the EPROM first and then the IOS upgrade took on three of the switches that were ordered rather recently. The four that were ordered in one batch will not take the upgrade even following Cisco's instruction and lots of other tricks. Nothing works. Having problems with IOS 15, in general?
I currently have 5 3750s connected via Stackwise. This stack is connected back to my core (6509s) via fiber (1Gig to Core1 & 1Gig to Core2). I want to move the 5th 3750 to another closet due to an addition of a new patch panel. Due to max length of 10 ft. for stackwise, my plan is to connect this 5th switch back to the stack using trunked fiber ports, with them being an etherchannel (2Gig). Also plan to use single fiber port form 2 different switches in the stack to provide some redundancy for the 5th switch. Should I be alert of any issues with this connection design? Do I need to properly remove the 5th switch from the stack using, no sw 5 provison sw-model or can I just disconnect stackwise and connect back with fiber?
We're trying to configure our Cisco 4507 (Supervisor Engine IV) to allow a new Dell server with a pair of Broadcom 5708 GigE NIC's to aggregate its NIC's to give us a 2gbps link to the switch.
So far we seem to have got the team and LACP up and enabled, but the adaptor that the Broadcom Admin Util creates for the team is only showing a 1gbps connection where I would have expected it to show as 2gbps.
The individual NICs show as connected at 1gbps. We're not Cisco experts so are struggling on how to get the 2 NICs to aggregate.
On the server side we've done nothing other than create a team using 802.3ad LINk Aggregation using LACP.
This is what I think the relevent output from "sho conf" is, more available if needed.
version 12.2 boot system flash bootflash:cat4000-i9s-mz.122-18.EW1.bin ! interface Port-channel2
I am trying to trunk between a 3Com 4800g and a Cisco 3500xl. I can get the a PC that connects to a vlan 1 port on thecisco switch to connect to the 3com switch and get connectivity. However, I cannot get anthing on the cisco switch that is on vlan 2 to connect and get dhcp. I am not a 3com guy, so I am not familiar with the command and configs.We have 2 vlans on both switches: Vlan 1 is Admin and Vlan 2 is Student.
Imagine I am designing a small network with a C2900 router running OSPF and in the future BGP with service provider. Please see attached diagram.The router is connected to (2) C3750 Layer 3 distribution switches. Then one C3560 layer 2 switch to serve future IP phone users and desktops.
Question:
a)If I connect the router interface to the (2) 3750 switches, if I make the router interface fa0/0 and fa0/1 as a trunk to accomodate VLAN 200 and other future VLANs, don't I have a problem with overlapping networks between router interface fa0/0 and fa0/1?
b)Alternatively, I could make the Router1 fa0/0 and fa0/1 configured with IP addresses and advertised in OSPF. Then the SW1 fa0/24 and and SW2 fa0/24 I could make as 'no switchport and create a routed interface port' with IP addresses, also running OSPF. Question is, from a scalable design perspectie, would you create 2 management networks and use those when assigning the IP addresses for Router1 fa0/1 and fa0/2? Because again Router1 fa0/1 and fa0/2 obviously need to be placed on different networks to avoid overlapping. So my question is more about proper network planning design to make this scalable to accomodate future VLANs in the future.Using trunks between the Router1 and SW1 option:
Router1 int fa0/0 description connection to SW1 no ip add int fa0/0.200
I have a 3560 8 port switch. Int gi0/9 is trunked to another switch downstream. When I try to configure int gi0/10 to trunk to a switch upstream the interface on the switch goes down and I have to either reboot the switch or plug directly into the switch and telnet into it to turn off trunking on the interface. When I configure trunking on the interface on the upstream switch that connects to this interface the same happens on that switch. The upstream switch is a 3750 with 12 sfp ports. Several interfaces are trunking to other switches from this switch. Spanning tree is not configured on the 3750 at all , and is not configured on either gi0/10 or gi0/9 on the 3560. I was consoled into the 3560 during a reboot after the interface went down, a message came up that said something like "Spanning Tree returning gigabit ethernet 10 to constant state" Why would I get this message if spanning tree is not enabled on the gig ports on either end of the trunk? There is no loop to require spanning tree to shut down an interface. I have several other 3560's configured as I would like to configure this switch and they are trunking without issue.
have setup a small lab as per CBTNuggets. Everything was going well until I introduced a second switch to create a trunk. Now I cannot ping between my two switches. Both show operational mode as down:
I have tried to allow all vlans or vlan 1 specifically and the output of the above doesn't seem to change. I am wondering if there is something in the config-register that is preventing trunking, but I don't really know enough yet!
The output of my second switch is identical to this one, the only difference is that I have it configured as a vtp client.
Im having problems changing a connection between a Cisco3560 and Cisco IBM Blade switch 3012 actually the configuration is access in Cisco 3560 and trunk int Cisco 3012 when i change the connection to trunk i lose conecctivity to the servers connected in the 3012, i have changed the access from vlan 1 to the respective vlan in the access port of the servers
We have been facing a problem at my company ! We have a Cisco Router 1921 with one HWIC-4ESW in trunking with a RuggedCom switch RSG2100.When I use the GigabitEthernet port to make a trunk, I create 2 sub-interfaces (one for each Vlan) and configure the Port on Switch as Trunk, the inter-VLan routing works with no problem.But now I need to use this configuration using the HWIC-4ESW on Router, and I can't do this work. I try creat interface Vlan for each vlan, and try creating the VLans at Router Vlans database, but no way. At router I enter in interface and try to do the switchport trunk command to add a Vlan, but doesn't work.
I've run into an issue with this type switch. I've a 2611xm router connected to a C2924-XL switch ((C2900XL-C3H2S-M), Version 12.0(5)WC17) Basically i configured the router as a RoTS with two sub interfaces setup with encapsulation dot1q.
I have been assigned the task of trunking VLAN between a Nexus 3048 and a Force10 S4810. This would seem easy enough but I am really having a bear of a time getting it to work. I have devices configured on VLAN 602 on both sides but they just are not talking.