Cisco Switching/Routing :: 3560 - Basics Of DHCP Snooping

Jan 18, 2013

I am trying to understand the basics of DHCP snooping.  I have a just a 3560 switch and a laptop ( to get a DHCP address) and my DSL router which has a DHCP server running.  On the switch I have enabled "IP DHCP Snooping" and "IP DHCP Snooping VLAN 1" plugged the laptop and DSL router in and the laptop gets and IP address, should it? 

I thought all ports were untrusted by default so the DHCP server should be blocked at offering IP addresses? If I wanted the DHCP server to be allowed to offer IP's I thought I should need to trust the port.

View 3 Replies


ADVERTISEMENT

Cisco Switching/Routing :: 3560 Implement DHCP Snooping

Oct 12, 2011

I have attempted to implement DHCP snooping and have been having some strange issues. I have 5 3560s taht I use for my edge and when I attempt to implement on all five, the VLAN that houses my voice data appears to no longer be able to recieve DHCP lease renewals so after the 24 expiration all of my phones lose their configs. Once I roll back the changes the voice VLAN comes back. The other VLANs seem to function correctly as theya re able to renew their DHCP addresses.
 
The 3560s tie into each other using GIG Ports 1 & 2 and the top and bottom switches tie into our core switch, a 4507. The config that I use is below, failry simple and straightforward.

4 of the 5 switches feed our general office vlans for voice and data however the 5th switch is there for expansion and not in use. As such I have left the config changes in place on it and have tied myself and a colleague into it and have been operating fine for over a week now. So the config that I use seems sound in theory and should work on the other 4 switches with no issue.

View 14 Replies View Related

Cisco Switching/Routing :: IGMP Snooping On 3560

Nov 28, 2012

how to configure igmp snooping on a 3560.
 
I have a pure L2 switching network and 2 hosts on the same vlan that want to communicate a protocol between each other using multicast packets.
 
I wanted to configure ip snooping only on this vlan and create a multicast group limited to only these 2 host ir order to make sure that the multicast traffic is only between both of them.
 
Since both are sender and receiver I´m not quite sure on how to configure this. In theory I also need to set an IP Multicast Address on the switch to where the hosts will send their multicast packets.
 
This is basically the network:
 
HOST_A---|SWITCH_A|==|SWITCH_B|---HOST_B

View 11 Replies View Related

Cisco Switching/Routing :: ME 3400 - DHCP Snooping

Sep 27, 2012

I have a problem at a place where 5 ME3400 switches are connected in a straight line. I can't do much about the topology of that place, but the problem is they are all DHCP Snooping, but uni cast replies from the dhcp server further up the hierarchy gets eaten by the first switch! I can't really see why it not only inspects in and whines about it not being for itself - it then drops the message.
 
What have we done wrong (apart from the actual layout of that place, which I can't really change)?
 
Sep 28 13:49:29: DHCP_SNOOPING: received new DHCP packet from input interface (GigabitEthernet0/1)
Sep 28 13:49:29: DHCP_SNOOPING: process new DHCP packet, message type: DHCPOFFER, input interface: Gi0/1, MAC da: 7444.012d.debd, MAC sa: 0013.1a4a.65c7, IP da: XX.YY.186.7, IP sa: XX.YY.186.1, DHCP ciaddr: 0.0.0.0, DHCP yiaddr: XX.YY.186.7, DHCP siaddr: 0.0.0.0, DHCP giaddr: 0.0.0.0, DHCP chaddr: 7444.012d.debd
Sep 28 13:49:29: DHCP_SNOOPING: binary dump of option 82, length: 20 data:
[Code] ......
 
It really should just send it on, as with any uni cast not on the switch itself - it should go out Gi0/2 really. Why isn't it?
 
[core] -- [sw1] -- [sw2] -- [sw3] -- [sw4] -- [sw5]
 
All the trunks are trusted, DAI is on (I've tried shutting it off, as well), port-security is used but it's actually not dying on the switch having the client computer, but the first one in the chain with dhcp snooping. 

View 6 Replies View Related

Cisco Switching/Routing :: DHCP Snooping On 6506

Mar 2, 2013

I have a problem with high CPU load by DHCP Snooping process on Catalyst 6506 (WS-SUP720-3B, soft: s72033-ipservices_wan-mz.122-18.SXF11.bin). I have it enabled on 15 VLANS, in which there are subscriber devices residing, and sending DHCP requests through Cisco to DHCP server (Cisco acts as DHCP relay, and it's collecting the snooping database, I also use DAI).
 
Snooping database contains 6962 bindings now.
 
CPU load goes high only sometimes, and I don't have a clue, why it's going so high. It can load as high as 45-47% of CPU, like this:

PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process
116    81471244 322596368        252 42.95% 43.48% 36.06%   0 DHCP Snooping 

When the load is high, the command: show ip dhcp snooping statistics is showing, that the overall quantity of
Packets Processed by DHCP Snooping is increasing rapidly. In normal situations, it's like 10-20 packets per second, but when the load is high, it's 1000-10000 pps.
 
But when I look at SPAN from my subscriber's VLANS, I don't really see any flood of DHCP requests, or something like that - everything looks as usual. Maybe, some of subscriber's devices are sending incorrect DHCP requests, that are causing packets to loop inside RP, or something like that? How can I detect that thing?
 
Also I thought, that if I enable the ip dhcp snooping trust mode on all of the Catalyst interfaces, the DHCP snooping will not process the subscribers DHCP packets, and I can, by exclusion of interfaces from one to one, detect, from which interface the problem is originating. But this seems to be incorrect, I turned the ip dhcsp snooping trust on all interfaces, and I still get spikes of CPU load by DHCP snooping process. Why it's still examining packets, even on trusted interfaces, is it ok?
 
And one more question - if I disable the ip dhcp snooping globally, will it clear all my existing bindings in snooping database?

View 3 Replies View Related

Cisco Switching/Routing :: 6500 IP DHCP Snooping Over L3 Links

Apr 9, 2012

I am working in a environment that is classed as collapssed Layer 3 environment.  We have a core 6500 with routed links to 3560's which are access switches.
 
We have layer 3 vlans on the access switches, one for data one for voice.On the layer 3 vlans we have ip helper addresses that are used for DHCP.  The DHCP servers are located on the 6500.
 
I recently had a incident where someone plugged a netgear router into a desk point because they thought they could use it for a switch.  This router then started to dish out IP addresses to people in the morning for those who came in and docked their laptops.  99% of people weren't affected because they have desktop PC's are their leases hadn't expired.
 
Now we have bpduguard, bpdufilter to prevent people from plugging in switches that send out BPDU's.  However this doesn't prevent the above senario where someone plugs a router or a 'dumb' switch that doesn't send BPDU's.Because of the above senario I started looking at DHCP Snooping, but I am unsure on a couple of things.
 
With the topology of our network I understand that I don't need to configure IP DHCP Snooping Trust on the L3 uplinks to our core switch.  From what I understand I just need to enable IP DHCP Snooping globaly and then on the VLAN's on the access switch (because of the L3 topology VLAN's are local to the access switches).  Only if I had L2 uplinks to the core would I need to configure IP DHCP Snooping Trust on the trunk links.

View 2 Replies View Related

Cisco Switching/Routing :: Dhcp Snooping Without Effect In Catalyst 2960-PST-S

Apr 17, 2012

I have a new catalyst 2960,and i want to enable DHCP SNOOPING,but,it doesn't work,the server is stilling offert addresses IP and it's not connected  in a trusted port,the schema is very simple:1 switch catalyst 2960 PST-S,1 server dhcp and 1 pc client,the PC and the server are in VLAN 10,DHCP SNOOPING is enabled in all ports and no port is trusted,but the client get addresse IP after retyping ipconfig /release  and ipconfig /renew in dos commande.the configuration and the version of the switch are in the file attached.I tested the same configuration in a catalyst C3560-24PS and DHCP SNOOPING work normally,i tested in other catalyst 2960-PST-S,but the same probléme:DHCP SNOOPING without effect,the commands typed is:

-ip dhcp snnoping

-ip dhcp snooping vlan 10

View 5 Replies View Related

Cisco Switching/Routing :: 4500 - Enabling DHCP Snooping On 1 VLan?

Nov 24, 2011

I got some problem with  enabling dhcp snooping on 4500 (cat4500e-lanbasek9-mz.122-54.SG.bin) the topology is as below: dhcp snooping enabled only on CORE (with interface trusted to dhcp server)the problem is that I put these 2 commands

ip dhcp snooping
ip dhcp snooping vlan 1
 
but it is not enabled on any vlan
  
SW-CORE#sh ip dhcp snooping
Switch DHCP snooping is enabled
DHCP snooping is configured on following VLANs:
none
DHCP snooping is operational on following VLANs:

[Code]...
 
On B1 if I turn it on there is a "1" in the section " DHCP snooping is configured on following VLANs:" but on core no.As you can see I did put the trusted on the interface in the direction to the dhcp.First I thought it can be a problem with option 82, I've read a lot about the issues with that, but the problem would be explicable if the client did receive IP address, but it does.

View 3 Replies View Related

Cisco Switching/Routing :: WS C6509 E - DHCP Snooping Command On CatOS

Nov 14, 2012

I am trying to find a command for dhcp snooping rate-limiting on a CatOS. The PFC card is PFC. PFC3B is said to support that command. But there seems no this command.
 
-6k> (enable) sh ver
   
WS-C6509-E Software, Version NmpSW: 8.4(5)
Copyright (c) 1995-2005 by Cisco Systems
NMP S/W compiled on Aug  3 2005, 13:26:46
 
[Code] ......
 
Up time is 1183 days, 1 hour, 41 minutes

View 3 Replies View Related

Cisco Switching/Routing :: 3750v2 DHCP Snooping Not Working Dropping Packets

Jan 9, 2013

I recently installed DHCP snooping on a 3750v2 switch (Version 12.2(55)SE4) and configured the uplink(Po2) as a trusted port. The problem is that clients cannot receive an IP address. When I disable DHCP snooping it is working properly. DHCP snooping is configured correctly but I don't have an idea how to resolve it. [code]I tested the solution on the same kind of hardware switch and firmware and it worked out fine. What is causing the clients not to receive an IP address from the DHCP server?

View 10 Replies View Related

Cisco Switching/Routing :: WS-C3560G-24PS Configuring Ip Dhcp Snooping Database With Scp

Feb 10, 2011

Just spoke to the TAC and didn't get the information needed.  When configuring ip dhcp snooping database I am adding this to my configuration:ip dhcp snooping database scp://dhcpsec@192.168.1.50/home/dhcpsec/switch1.dhcp.database.txt..I assumed that to do this I would either specify the password on the command line, similar to the way its done when using ftp/http, or that I would need to create a public/private key.I have enabled scp and can manually copy a file from the switch to the linux server. So I believe I have all the aaa commands correct. Cisco WS-C3560G-24PS System image file is "flash:/c3560-ipservicesk9-mz.122-55.SE.bin".

View 3 Replies View Related

Cisco Switching/Routing :: Does 2600 Series Switch Support 802.1x And DHCP Snooping

Feb 14, 2012

does Cisco 2600 series switch support 802.1x and DHCP snooping?

View 6 Replies View Related

Cisco Switching/Routing :: C3550 Is DHCP Snooping Needed For Port Sec To Work

Oct 8, 2012

i have a strange problem in my campus network.im trying to run port security on my access switches which they are 3550 with ios c3550-ipservicesk9-mz.122-52.SE when i run the port security with Sticky option, even i put 1000 mac address for just learning on the port but when i issue the switchport port-security command every pc connected to that port loses its connection with network UNTIL i enable dhcp snooping!!! all my client are getting they ip address from DHCP server but strange thing is that how on earth i have to enable DHCP snooping to port security work properly? also when i check the configuration under the interface when dhcp snooping is not yet enabled switch doesnt add any mac address under the interface so no one can work until i enable snooping and then switch adds mac addresses under the interface configuration.is this Bug on this version of IOS?[code]

View 4 Replies View Related

Cisco Switching/Routing :: Cat3750G / DHCP Snooping With IPSourceGuard And DAI On Access Port

Sep 24, 2012

we've an infrastructure were the Access is based on Cat3750G Stacks connected to both Cores using L3 connections.On the Access Switches are implemented the following features DHCP Snooping, IP Source Guard and Dynamic ARP Inspection and all is working fine since years...the DHCP Servers are on a dedicated stack which act as a SFarm.
 
On the Access Switches the port configuration is the following:the Uplink Ports to both of the Cores are configured in TRUST for DHCP Snooping and ARP Inspection the Access Ports, where the end-device are connected, are UNTRUST for DHCP and ARP Inspection with IP Source Guard Active Right now I've to add a new L2 switch on one of the Access Port and I'm wondering if this is possible since I've to keep on the Stack Access Ports all the security feature active and I've also to implement DHCP Snooping on the new L2 switch to avoid rouge DHCP Server...
 
I suppose that the uplink to the L2 switch on the Stack Access Switch should be left as it is connected to an end device...but the uplink port on the L2 switch should be set up as TRUST...isn'it? Keeping in mind that I want to implement DHCP Snooping also on this L2 switch to avoid that Rogue DHCP Servers will impact the end-device connected to this L2 switch...is this scenario possible??? or I can't do that and should leave DHCP Snooping only on the Access Stack.

View 2 Replies View Related

Cisco Switching/Routing :: 2960 - DHCP Snooping Multiple Switches AP Autonomous

May 7, 2013

I have a problem with DHCP. I have two 2960 connected with a port channel on ports 47 and 48 as trunk with native vlan 10. I only have this one vlan. In port 1 of sw 1, I have a C800 as DHCP server.
 
I have an AP autonomous with single ssid on vlan 10. When I connect the AP to sw1, I receive dhcp with no problems.When I connect the AP to sw 2, I’m not getting IP by DHCP.I have DHCP snooping working on vlan 10 on both devices.
 
The ports where I connect the AP are access ports on vlan 10 config as trusted.The trunk ports are also configured as trusted.The port 1 of ws 1 that goes to the C800 is also configured as trusted.
 
figure out why I’m not getting IP by DHCP when I connect the AP to the SW 2.The only I notice is that when I connect the AP to sw 2, I get on SW 1 the message of packet drop by option 82, but even after configuring ip dhcp snooping information option allow-untrusted on both switches, the problem persists.

View 5 Replies View Related

Cisco Switching/Routing :: Nexus 7000 - Ip Dhcp Snooping Binding Table Is Empty?

Sep 14, 2010

I've configured ip dhcp snooping on several vlans I want to monitor and the binding table doesn't seem to be building.eature DHCP is on, global ip dhcp snooping is enabled, VLAN snooping is enabled on the vlan's I want to monitor and my trusted interfaces are also configured. Alas no binding entries in the table! 7K is running 4.2(6).

View 1 Replies View Related

Cisco Switching/Routing :: Router Is Connected To Switch 2960 Configured As DHCP SNOOPING

Sep 3, 2012

We have a DHCP SERVER implemented in a cisco router 2610.This router is connected to a switch cisco 2960 configured as DHCP SNOOPING. At the switch appear the next log message: [code] The ip address: 10.100.200.1 belongs to DHCP SERVER configured at router cisco 2610. What to do so these log messages does not appear any more? Do I need to do some configuration changes at some switch or router?

View 11 Replies View Related

Cisco Switching/Routing :: Apply DHCP Snooping On 4500 Series Switches Working As L2 In Network

Sep 25, 2012

I need to apply DHCP snooping on 4500 series switches working as L2 in my Network. We have external DHCL Server in another location connected with 6500 series switch.   
 
Running EIGRP                                                      Configured Voice & Data Vlan both
DHCP Server -------- 6509 switch<----------------------------------->6509 Switch -------- 4500 switch ----------------------------------------------------------Ip Phones.               
(ving Redundant)                                  (ving Redundant)   
 
I need to know whether the configuration which I mentioned in scenario is enough for apply DHCP snooping in my network.

View 4 Replies View Related

Cisco Switching/Routing :: DHCP Relay On 3560

Apr 12, 2012

Would like to impliment VLAN's on Cisco IOS Software, C3560 Software (C3560-IPSERVICES-M), Version 12.2(25)SEB4...But I need a DHCP Realy to my Windows Based DHCP Server.  How do I enable DHCP Relay on the 3560?

View 8 Replies View Related

Cisco Switching/Routing :: 3560 DHCP In Layer 3 Switch

May 25, 2012

I have made a topology by using one 3560 switch and 2 2950 switches. I have also made 2 vlans name Clients and other Servers and vlan 1 is for anagement purposes. The left 2950 switch is for clients and the right is for servers. Clients is vlan 2 and servers is vlan3 . Now what i want is that my dhcp is should assign ips to clients in vlans 2 provided that servers are in vlan 3. I am also using a border router and i have introduced a default route on the 3560 to the border router.
 
Now when i assign static ips to my clients pc and server dhcp then i can ping between vlans but when i try to assign ip through dhcp then it wont work. Also the default route on the switch to the border router doesnt seem to work. I can ping only the border router when i put a default route on the border router instead of the 3560 switch.

View 3 Replies View Related

Cisco Switching/Routing :: 3560 DHCP Between Switch And Router

Jul 23, 2012

I have a cisco 3560 24PS and its connected to two ADSL broard band routers.one is a personal broadband line using a Billion ADSL broadband router, and the other is a business broardband line using BT's 2wire broadband line.on the Billion routers i have various things attached like a NAS and a printers, both wired connections. then i have laptops and phones that connect over wifi, so its configured to act as a DHCP server
 
the only thing conncted to my 2wire router is my company's laptop (wired or wifi depending on where i'm working from), so again i have it working as a dhcp server.The switch is configured with multiple vlans, with dhcp scopes assigned for each vlan.I have a static route pointing all traffic to my Billion ADSL for internet connectivity.
 
The problem i'm having is that when i turn on the cisco switch, all wifi conected devices loose their conection. only 2 things get it working again, a reboot of the router, or disabling then enabling the DHCP service on the router.upon further analysis i was able to find out that the devices were not able to pick up an address from the router. again i looked deeper into this and i can see the following on logs of my router: [code]
 
so it seems that the router tuns off its DHCP capabilities because it detects that my Cisco switch is running DHCP services. I need to figure out how to keep the billion routers DHCP running when ever the switch is turned on.is there a way of filtering out any DHCP chat from the switch to the router?

View 7 Replies View Related

Cisco Switching/Routing :: 3560 Switch Responsible For Not Passing DHCP To AP

Jan 16, 2013

I have two WAP4410N plugged into my Catylist 3560 switches.One of these switches is my Default Gateway for the LAN.The only way I can get a device to connect to the WAP4410N is by assigning it a static IP.  Then it works perfectly.

View 10 Replies View Related

Cisco Switching/Routing :: Port / MAC Based DHCP For 2960 And 3560

Jan 3, 2012

I want to implement port-based and MAC-based in these two switches: 2960 & 3560 (both of them have this IOS version: 12.2(55)SE1). And I haven't found a way to implement both of them at the same time. This is what I got:
 
ip dhcp use subscriber-id client-id
ip dhcp subscriber-id interface-name
ip dhcp excluded-address 192.168.0.0 192.168.0.2
ip dhcp excluded-address 192.168.0.251 192.168.0.255

[code]....
 
With this configuration I can use port-based, but not MAC based. If I remove the first two lines and change the last line for this one:

address 192.168.0.7 client-id 0112.ae1d.af58.60

Then, the computer with that MAC address got the correct IP, but then the port-based doesn't work. Also, I got this line in the interface what I want to use MAC-based: 

ip dhcp server use subscriber-id client-id

View 3 Replies View Related

Cisco Switching/Routing :: Enable Dhcp Service On 3560 Switch

Mar 19, 2012

can you enable dhcp service on a 3560 switch.

View 3 Replies View Related

Cisco Switching/Routing :: Catalyst 3560-X Switch To Act As DHCP Server

Apr 26, 2012

I'm attempting to configure a Catalyst 3560-X Switch to act as a DHCP Server. There is documentation that supports this feature. Below is my config procedure however after the completed procedue no IPs are handed out to clients. [code]

View 1 Replies View Related

Cisco Switching/Routing :: 3560 - Dhcp - Excluded Address Range

Apr 29, 2012

we have a 3560 switch configured with EIGRP with dhcp.  We have a user that we cannot ping, however the interface show up / up and no errors on interface. the ip address is 10.2.0.199 - however we have dhcp configured to exclude the range from dhcp ip dhcp excluded-address 10.22.0.1 10.22.0.200 how can this work station get a dhcp address if we have that ip range excluded from the dhcp pool?
 
The user is off a different switch that is a uplink to this distribution switch. Traceroutes shows that the problem is with the distribution switch.

View 4 Replies View Related

Cisco Switching/Routing :: 3560 G - Static DHCP Client Drops Connection

May 31, 2012

i am not sure if this is something with my DHCP setup or not, but it certainly seems to be the culprit.  I am running a 3560G and using it as DHCP and to do V LAN routing (Geiger protocol).  I have 10 pools configured with a few static addresses per pool.  Now to get down to the problem.  I have a computer (and this problem seems to be a gremlin as it changes what computer is affected quite often) that will connect, get its IP, immediately disconnect, then send out a DHCP req again.  The computer has a static assignment in the pool, and for the brief second that it connects, it gets the right address.  If i move the computer to another v lan, all works right.  If i delete the static entry it will get an address in the right v lan no problem.  The command i have been using to add static entries is:

address xxx.xxx.xxx.xxx client-id 01xx.xxxx.xxxx.xx
 
That seems to have been working on all my static routes except for a bank of computers in vlan3.  I have went as far as to delete the pool and recreate it, heck i even recreated the v lan and i am still having issues.   Below are some snippets of the running config for review.
 
The DHCP Pool for the affected LAN:
ip dhcp pool Dev3
network 192.168.3.0 255.255.255.0
boot file bootx86wdsnbp.com
next-server 192.168.1.78
dns- server 192.168.1.8 192.168.1.78
 [Code] .....

View 4 Replies View Related

Cisco Switching/Routing :: 3560 / Administrative Control On L3 Switch For DHCP Service

Sep 25, 2012

My Network Layout is as,  Firewall (with Routing)------>Cisco 3560 Switch (L3)------> connected 8 Cisco 2960 switch (L2)----> all users I have configured 20 VLAN's on cisco 3560 switch with Dynamic Pool and Static, Means, 5 Vlan's are Dynamic and remaining are Static Our Company process provides only internet access to existing clients computers. Problem is that, I configured Static VLAN 5 for one of our Client in their seperate room, mean to say, i activated all ports of their room with Static VLAN 5. one day they configured own DHCP server on Windows 2003 Server with same subnet (Same as VLAN5) in their room without any information and now their all computer/ Laptop acquiring ip address Dynamically.
 
If i have configured Static vlan on that port's then how it is get Dynamic ip from same port's.How to restrict to permit another DHCP server/Service in our premises. I Do not want to give administrative control to Clients to do such kind of thing with LAN.

View 8 Replies View Related

Cisco Switching/Routing :: Configure 3560 To Force Client To Get IP By DHCP Relay Server?

Jul 30, 2012

How to configure cisco 3560 to force the client only can get ip by dhcp-relay server ?
 
The company i am working in has 5 vlans which have been set an lay-3 switch(3560), uses the dhcp-relay server .(in svi configuration: ip helper-address X.X.X.X) well , that works ok~
 
Now , I got my problem: I need to force the client only can get ip by dhcp-relay server, that means if anyone set static IP manunally , he can't really access to anywhere (to provent anyone set static IP with malignancy )
 
I know if a h3c router , how to set this configuration n svi configuration : dhcp relay security address-check enable )
the how to configure on a cisco 3560 ?

View 1 Replies View Related

Cisco Switching/Routing :: 4500 / 3560 - DHCP Redundancy - IP Helper Address Point To HSRP?

Jan 5, 2012

My actual Scenario
 
1 x 4500 and 1 x 3560?They are gateways of 8 Vlans?They are doing HSRP in each of those Vlans?The 4500 is the Active?There is a DHCP Pool for each of those Vlans on both gateways using "ip dhcp excluded-address" I ensured that the range of provided ips by each DHCP server will not be overlapped Obs.: Reducing the lease time, I ended with the calls bringing related problems.
 
OK, every thing is blue, every thing is fine.But the network diagram is realy complex(41 switchs, 89 uplinks), and depending of how is the network flow, one or other server answer first or latter.
 
For many reasons I would like that the secondary DHCP server would answer only if the primary DHCP server goes down.To me, the bigger reason is that DHCP database would be only in one DHCP server.But there is other reasons.
 
I passed by many frustrated solutions:Try to force a delay on the answer on one of the servers. - Impossible.Try to disable DHCP server, and, using EEM, enable it only if router became active in HSRP. - I couldn't do It.
 
What I'm thinking now is use the HSRP resource to resolve it.On both routers I would put a "ip helper-address" pointing to an Virtual_HSRP_IP.And depending on which router is the active, him will answer the request.
 
My first doubt is:Would it work?The second doubt is:Could I use the same Virtual_HSRP_IP that exists on that Vlan(see example 1),or I would need to point it to a Virtual_HSRP_IP in a different Vlan(see example 2)?

Example 1
        -----------------------------------
        |              4500               |
        -----------------------------------
        interface Vlan1
         ip address 10.10.0.2 255.255.0.0
         ip helper-address 10.10.0.1
         standby 1 ip 10.10.0.1

[code]....

View 3 Replies View Related

Cisco Switching/Routing :: 861 Do Not Use IGMP Snooping?

Nov 21, 2011

I useing Cisco861  : C861-universalk9-mz.124-24.T3.bin on my Cisco861 the command "ip pim dense-mode","ip igmp static-group "command does not exist,
 
router(config)# ip p?
port-map    prefix-list
router(config)#

[Code]....

View 4 Replies View Related

Cisco LAN :: C2950 IOS For DHCP Snooping And DAI

Oct 10, 2012

What image i would need for my 2950 to enable DHCP snooping and DAI features (just for lab purpose)?
 
or are these features just available on the bigger modular switches (4500 and 6500)?
 
>sh ver
Cisco Internetwork Operating System Software
IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22)EA8a, RELEASE SOFTWARE (fc1)

[Code].....

View 4 Replies View Related

Cisco Switching/Routing :: IGMP Snooping On The Cat3560?

Oct 10, 2012

In the following topology
 
R1(f0/0)------------(f0/1)SW1(f0/2)------------R2
  
R1 is configured as host (no ip routing) with ip igmp join 239.10.10.10 on fa0/0 and R2 with ip pim sparse-mode on f0/0. SW1 is a Catalyst 3560 running IOS 12.2(25)SEE4 working at Layer 2 only in this topology (VLAN 1).
 
I configured SW1 for igmp snooping:
 
ip igmp snooping
ip igmp snooping vlan 1
  
Basically, I can see 'snooped' muticast group (via IGMP reports sent by R1)
 
SW1#sh ip igmp snooping group
Vlan      Group             Type        Version     Port List
----------------------------------------------------------------
1         224.0.1.40        igmp        v2          Fa0/2
1         239.10.10.10      igmp        v2          Fa0/1, Fa0/2
SW1#
SW1#
SW1#

[code]....

View 4 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved