I've run into an odd problem - I have connected two 2960s together with copper on FastEthernet interfaces, and STP on the new switch immediately puts that port into blocking mode. I don't understand why this would be, since there is only one connection between the two, in fact, there is only one connection at all on the switch that is blocking.
View 6 RepliesI have a number of 2960 switches that have crashed without any reason
Under show version System returned to ROM by address error at PC 0x108971C, address 0x0
Just installed a DIR-615, not impressed so far I have 3 clients, a Windoze 7 laptop, a Kubuntu workstation (wireless N) and a wireless HP printer. When I enable DHCP reservations and reserve the addresses then save settings the router reboots and when I go back in all info is gone and nothing is reserved. I have been having weird disconnection issues - I lose my internet periodically for no apparent reason so I increased the lease time and am trying to reserve addresses.
View 3 Replies View RelatedRecently lost the setup for my newly installed ea6500 for no apparent reason. had to restart from the ground.I have the latest upgrade but wonder about the differences between the linksys coonect to the online version vs stand along versions. DO nor like expensive software that losses its setup for no good reason.I also irritated that I am unable to access my cable box. I own it and cable box and lynkiys has no right to block me from it. 192.168.100.1. I was able to accessed it with my Belkin router and I should be able to access with this expensive ea6500 box!!
We NEED a non-gui version. The gui is great for simple networks and people who do not want to know anything about their network. it's ment to be use to deliver additional services to us at a cost. duplicated or generates random users with ip or mac addresses complicating the parental control.
Region : Spain
Model : TL-WR1042ND
Hardware Version : v1
Firmware Version : 3.15.1 Build 120618 Rel.41178n
ISP : ONO
I have a wired connection to 12 MBs and is very stable.My problem is that the download speed becomes 12MBs to 2MBs without apparent reason.It is fixes if you restart the router.Here will show you the optimal speed of connection.
[URL]
When this happens again i'll show you the speed.
I have a cisco2960 with c2960-lanbasek9-mz.122-50.SE4 imagebase.This switch is connected with 3 unmanaged switches.Though 2960 is managed and only a single vlan is given accessed to connected other unmanaged switches.Problem is this, if at user end, a laptop is connected ( Microsoft Vista OS) and its IPv6 is checked in the LAN properties settings then the laptop's IP address changed from our VLAN to 192.168.100.x series and due to this other connected user's DNS addresses become changed.Hence I want to block this IP or its MAC on Cisco 2960.
View 1 Replies View RelatedI've previously used trunkports and vlans between my ASA and accesspoints, connected directly. Now I want to put a 2960S-24PS-L bewteen. Where should i define the vlans (in the switch or in th ASA?) and what ports to put in trunk mode? (the ones on the switch or the one between the switch and the ASA?)
View 1 Replies View RelatedOn a low-end switch like a 2960 the maximum VLANs is 255, as shown in the output of VTP status:
Maximum VLANs supported locally : 255
Number of existing VLANs : 245
When the VTP mode is changed to transparent, VLANs from the extended range can be added without increasing the number of existing VLANs - e.g. if I create VLANs 3000 - 4000 the number of existing VLANs is still listed as 245.
If MST is used to cut down on the number of spanning-tree instances - and assuming propagation of VLAN configuration via VTP is not required - is there any downside to using transparent-mode VTP to increase the number of available VLANs? It does feel like I'm cheating the maximum listed in the datasheet.
I'm not entirely sure what's going on. I run 4 computers on this network, 2 Windows Xp, 1 Windows 7, and 1 Linux. All of which cannot access AIM, Gchat, and Minecraft(lol). I have no idea what would cause this, I run DD-WRT on my router(Linksys WRT-54G). I've checked all ports and I don't have anything blocked. I seriously need to fix this because I use AIM for my work. I can't even get into AIM Express which is web-based(tells me to check my network connection.
View 3 Replies View Relatedwe have configured VpC between two Nexus 5596, for Vpc-Keep-alive-link we configured L3 interface with 1G (GLC-T) ,it shows the below status message "L3 not Ready" with interface LED glows in Yellow in color. is this a physical layer problem
Ethernet VLAN Type Mode Status Reason Speed Po Ch
Eth1/17 -- eth routed down L3 not ready 1000(D) --
Eth1/18 1 eth access down SFP not inserted 10G(D) --
Eth1/19 1 eth access down SFP not inserted 10G(D) --
Eth1/20 1 eth access down SFP not inserted 10G(D) --
Eth1/21 1 eth access down SFP not inserted 10G(D) --
[code].....
I have a 3845 router which got reloaded immediately and need to know the reason for the reload .Router have created crash info detail .
View 3 Replies View RelatedWe have some AP keep on disassociating. All together we have 21 APs in the building but only this 7 APs keep on disassociating in every hours.
Below is the log i grab from our 5508 controller.
Last reset reason: operator changed 11g mode
Our controller code is 7.0.116.
One switch of our stack of 8 3750 have reboot with no reason. Nobody was in the room server when it appears et there was'nt any electrical problem at this moment.
View 4 Replies View RelatedSwitch automatically restarts for no reason , I have upgraded the software.can not find fault. more crashinfo, see the following output:
HKZ-SSL-4-NAN-4506#more crashinfo:data
Current Time: 5/27/2013 10:28:10
Last Power Failure: 05/08/2013 16:55:28
Last Reload Status: 00000000
Last Software Reset State: 00000301
[code]...
A 4506 Switch reboot several times a day for no reason, I have been trying to upgrade the software . Normal operation of more than ten days , Still there reason to restart . CPU and memory usage is normal
Switch output information below:
HKZ-SSL-4-NAN-4506#sh ver
Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500e-ENTSERVICES-M), Version 12.2(54)SG1, RELEASE SOFTWARE (fc1) [ code].....
I have an existing stack of 4 x 2960-S switches connected by stack cables.I would like to add another 2960-S switch to the stack but am unable to as the 2960-S will only allow 4 x 2960-S switches per stack.how I would add the 5th 2960-S switch to the existing stack of 4 x 2960-S switches.
View 12 Replies View RelatedI have a 24 port 2960-S that is not communicating with a 2960-LST that it is directly connected to over fiber. The link is up on the LST but will not come up on the -S. What command should I use to bring up this link? I have tried no shut from the (Config-if)# prompt.
View 3 Replies View RelatedI received the following info from Cisco's TAC and wanted to inquire further before I start reconfiguring the switch:
In a redundant Sup-6E setup, the following configuration is supported :
- 1 TenGig uplink on Active Sup and 1 TenGig uplink on Standby Sup
- 1 TenGig uplink on Active Sup and 2 Gig uplinks on Standby Sup
- 2 Gig uplinks on Active Sup and 1 TenGig uplink on Standby Sup
- 2 Gig uplink on Active Sup and 2 Gig uplinks on Standby Sup
If you invoke shared backplane mode, the following configuration can also be supported:
- 2 TenGig uplinks(blocking) on Active Sup and 2 TenGig uplinks on Standby Sup
- 2 TenGig uplink(blocking) on Active Sup and 4 Gig uplinks on Standby Sup
- 4 Gig uplinks on Active Sup and 2 TenGig uplinks(blocking) on Standby Sup
- 4 Gig uplink on Active Sup and 4 Gig uplinks on Standby Sup
Here's the command and information about the "shared-backplane" mode :- [URL]
Currently, we have 2 SUP 6-Es(Module 5 - Active and Module 6 - Stand-by) setup in a redundent mode. I am planning on changing the redundent mode to the shared backplane mode so I can use 2 TenGig converters to uplink 2 access-switches. We purchased 2 TenGig converters and here is how I am planning on using them:
1- One will be used to uplink to two 3750 switches(stacked)
2- One will be used to uplink to a 2960 using a Gig SFP
My questions are:
1- Do I have to install the 2 TenGig converters(4-Gig Uplinks) in the same Module? Or can I use one one in module 5 and the second one in module 6?
2- Will changing the redundant mode to the shared backplane mode require rebooting the switch or disrupt the funtionality of the other linecards?
I am using 1841 LAN router. Recently some broadcast is happening in our network when some users are connected. I need to block them automatically by detecting who are they.
I can block them manually but i want router to detect them and block.
I have a 1921 K9 with a 4 port 10/100/1000 EHWIC switch.
Interface 0/1 = 192.168.1.0
EHWIC = 192.168.5.0
I have Active Directory setup on the 192.168.1.0 network. When I attempt to join the domain from 192.168.5.0 it joins but I get errors. After some troubleshooting using portqry I have found that the services related to class map DomainTrafficUDP are being reported by portqry as being filtered regardless of policy map settings (currently set to allow).
Building configuration...
Current configuration : 18833 bytes
!
! Last configuration change at 11:20:25 NewYork Thu Apr 19 2012 by dave
! NVRAM config last updated at 13:56:45 NewYork Wed Apr 18 2012 by dave
!
[Code].....
We have a group of computers on their own VLAN. A router allows internet access while keeping them sandboxed. We don't want them accidentally connect to our production network. We blocked their wireless MACs in unauthorized WAPs. I'd like to do the same thing for their ethernet MACs on our switches, (a mixture of 2950,2960 and 2960G currently testing on C2960-LANBASE-M, Version 12.2(25)SEE2). I've been unable to locate the correct method on google, by searching these boards or in the command reference.
What is the best practice for blocking a group of MACs from accessing a particular VLAN on a network consisting of several Layer 2 Switches?
Blocking Ports don´t send BPDUs, but they can receive them from designated ports.Blocking ports, can it hold BPDUs?
I think that Blocking Ports only receive, analyse and then discard the BPDU.But, what happen if the blocking port receive a better o worse BPDU? in this case, must be the bpdu stored?
i am using asa5540 with 7.0(8). firewall was configured in transparent mode.
now i am looking for block ip phone communication from site to site and head office. i am using cucm 7.1.2b.
all site was connected through ofc. no nat was using.
We've got 5 remote offices with cisco 881 routers, Win Clients behind them and all routers connected via vpn site-to-site to central software router.
Mostly all clients recieve ip addresses from routers in their subnets 192.168.x.024
We have Win DHCP Server in subnet 192.168.181.024
The problem is that some of clients,physically sutuated in 192.168.10.024 subnet, recieve ip addresses from Win DHCP server from 192.168.181.024 subnet.
Here's part of cisco cfg:
interface FastEthernet0
no ip address
!
interface FastEthernet1
[Code].....
I inherited a Cisco ASA 5505 and am trying to piggy back the device off of an established Network. Here is the basic layout:
192.168.10.1 (Core Router - Handles DHCP/DNS)
192.168.10.9 (ASA 5505 - Piggy backing off of Network)
192.168.40.x (ASA 5505 - VLAN)
I'm able to get onto the Internet without any problems. Devices from the 192.168.10x Network can not ping the inside VLAN1 (192.168.40.x). However, I would like traffic going from the inside VLAN to the Outside VLAN to be blocked, except for 192.168.10.1 and 192.168.10.9. I've tried using ACL's but end up killing my Internet connection. 192.168.10.1 is the default route and is how I get out to the Internet. Is this possible? Essentially, I'm trying to set up a small Network that guests can connect to. The idea is that they can get to the Internet, but that is it. They can't get to internal resources on the 192.168.10.x Network
Here is the config:
ASA Version 8.2(1)
!
hostname ciscoasa
enable password EeCsulrpu.9LalEE encrypted
[Code].....
SG-300 52 native VLAN blocking network packets
View 3 Replies View RelatedI have a strange issue where spanning-tree is blocking vlans through a mesh network.Here is my set up.
2-Cisco 3560's that have two trunk ports set with do1q and a native vlan of 2. I'm allowing a client vlan (2) and a voice vlan (103) to come over the trunk. They have a native vlan of 2 so the mesh APs can get an address through DHCP. Spanning-tree loop guard is also enabled.
When connected to the mesh network, the voice vlan is being blocked by spanning-tree. I get the following erros:
000129: *Feb 28 19:24:58.289 EST: %SPANTREE-2-LOOPGUARD_BLOCK: Loop guard blocking port FastEthernet0/1 on VLAN0103.000130: *Feb 28 19:24:58.448 EST: %SPANTREE-2-LOOPGUARD_UNBLOCK: Loop guard unblocking port FastEthernet0/1 on VLAN0103.
Eventually the loop is cleared and the port is set back to a forwarding state from a blocking state. I don't want to disabled spanning-tree loopguard since I don't want to create a loop. The mesh network is supposed to act as a P2P connection between two switches. As a test I disconnected the APs from their trunk ports. I then used a cross over cable to connect the switches and no spanning tree loops occured. The mesh doesn't have STP enabled on it and should just be acting as an over-the-air connection from one switch to another.
We have a Cisco 2911 router in our company. I didn't set it up myself nor I was involved. I only started working here recently, bit over 3 months ago. I have been given ongoing task which other IT Technicians been struggling for almost a year with a idea that maybe because I'm fresh person in the company I will find a original idea why could this thing not work.
Our router have a problem with blocking a single IP address, but not completely It's hard to explain but I will try my best. Company is hosting their website externally and accessing the host and FTP on the host on daily bases. It is important for the website to work on the internal network in company. It does work sometimes, but from time-to-time the website showing time-out error 118 on any point before Cisco router using both http and https, have tried putting just the IP address( doesn't matter is it on the general network or last ISA server on DMZ ). I am able to connect to the website using any of proxy gates but not directly to the website. I have also tested the connection past the router and I was able to connect to the website without any problems. I am also able to ping the host's address from the router and internal network.
I have eliminated the possibility of not correctly setup proxy or firewall on the network as problem also occur on the DMZ. I have also checked access-lists on the router and firewall rules for Any possibilities and I can't really see a way why would the router do this.
I have a connection between switches, There are a 3560 (Gi0/37) and a 2960 (Gi0/1), the problem is in the port Gi0/37 of the 3560 switch and this is the log. [code]
I dont understand what is the problem, actually i have added the command power inline never on the port and the problem is solved, but we haven´t changed configuration.
I have a stack of Catalyst 3750E switches.
IOS image :c3750e-ipbasek9-mz.122-55.SE3.bin
I have been seeing multiple occurance of the below message in the switch logs.
"Failed to send hrpc non blocking message"
I could not find a relevant reference for this message in the Cisco.com.
We had a core switch (Cisco 4503), distribution switches(Cisco 3750) and access switches in our network and consists of many vlans. Almost all vlans uses DHCP Pools. But for few vlans DHCP is not yet configured due to initial design poblems. Recently one of the rogue user in vlan 1 connected to one of the access switch send rogue arp packets to the network (suspecting arp packet with interface vlan 1 ip of core switch with wrong mac-address (gateway ip of vlan 1)) and resulted in a prolonged network outage for the vlan 1. Any way we are going to seggregate vlan 1 into different vlans, but before that we need a temporary plan to block such kinds of attack like enabling DAI in the switch. I have checked the DAI implemenation feasibility with my knowledge and found that it is not possible to configure to the access switches(Cisco 2960) in which the user directly connected. But found that Distribution switch connected to that particular access switch seems to be able to configure since DAI commands are available to configure in switch.
Is it possible to block ARP packets with the interface vlan 1 IP Address with rogue mac-address by configuring DAI in the above mentioned Distribution switch and the port connected to the mentioned access switch?
Why the below configuration does not work? BGP exchanges routes without a problem all the time the distribute list is removed from the config. When I apply the distribute list it blocks all routes, not just those intended in the prefix list.
[CODE]....
My management has tasked me to give them a high level overview of the different switching we can choose for our new building.
This is what I know so far.4 Closets, each closet has 450 ports,One MDF room that is will contain one UCS Chassis and a Nimble iSCSI SAN.
I am working on the spreadsheet and it looks like this (Not totally filled):
2960s3560x3750x45064510Approx cost (Each, 48PORT, POE+, 10G uplink, Dual PS, IP BASE)
6K7K8K45K75KMax Capacity192432432192384Backplane speed206464520520ProLeast ExpensiveStackable to 9Stackable to 9ProDual PSDual PSDual PSDual PSDual PSProLayer 3 opt
Layer 3 optDual SupsDual SupsConExpensiveExpensiveConNo Dual PSConLayer 2 OnlyCannot stack more than 4
For the MDF I would like to use 2 Nexus 5548's with FEX's, and the layer 3 daughter board. For the IDF's I was thinking of two 4010's.