Cisco Switching/Routing :: 3560 Goes To Error-disable
Jun 25, 2012I have port on cisco 3560 goes to error-disable,what is the cause of this issue,pls be noted this interface has BPDU Guard enable
View 3 Replies
ADVERTISEMENT
Cisco Switching/Routing :: WSC 2960S / 3560 - UDLD Err-disable On Copper Wire
Jun 9, 2013I have a problem between two switches with ether channel configured:
Model number : WS-C2960S-24TS-L
System image file is "flash:/c2960s-universalk9-mz.122-58.SE2/c2960s-universalk9-mz.122-58.SE2.bin"
Gi1/0/23 ETH-CH_1_SW-EDGE01 err-disabled trunk auto auto 10/100/1000BaseTX
Gi1/0/24 ETH-CH_2_SW-EDGE01 connected trunk a-full a-1000 10/100/1000BaseTX
Po1 Trunk_SW-EDGE01 connected trunk a-full a-1000
[code]...
I already change the wire without success, and already restart sw-edge02. With "u dld port disable" the link is working correctly.
I have two another switches working with SFP Cable:
Gi0/25 ETH-CH_1_SW-CORE02 connected trunk a-full a-1000 1000BaseCX SFP Cable
Gi0/27 ETH-CH_2_SW-CORE02 connected trunk a-full a-1000 1000BaseCX SFP Cable
Po1 Trunk_SW-CORE02 connected trunk a-full a-1000
Model number : WS-C3560G-24TS-S
System image file is "flash:c3560-ipbase-mz.122-50.SE1/c3560-ipbase-mz.122-50.SE1.bin"
Cisco Switching/Routing :: Port Goes Into Error Disable State 3750
Jun 29, 2012We have a number of 3750 stacks used as access layer switches connecting Siemens VOIP phones and then a PC that connects to the phone.
For example if I plug PC A to the phone that connects to port 13 I pick up an IP addressand all works as predicted now if I plug in PC A to any other VOIP phone that connect to another port on the same switch it goes in error disable state ITs like the switch is holding my PC mac address and locks it down with the port which in my case is Gi2/0/13.
interface GigabitEthernet2/0/13
switchport access vlan 726
switchport mode access
[Code].....
Cisco Switching/Routing :: Catalyst 2950G - Putting Fa0/2 In Error-disable State
Mar 28, 2012I have a Catalyst 2950G when I activate the switchport port-security, but I want to empty the black list of mac address because every time I connect a device, the port is automatically désacative, here is the port configuration:
!
interface FastEthernet0 / 2
switchport access vlan 17
switchport mode access
switchport voice vlan 51
[code]....
I tried the following commands to clear the blacklist mac address of that port, but the problem is still relevant:
# Clear mac-address-table dynamic int fa0 / 2
# clear port-security all int fastethernet 0/2
# clear errdisable interface fa0 / 2 vlan
Cisco Switching/Routing :: 3560 - Gi Ports Have Outdiscads Error
May 15, 2012 have problem with switch. 3560, Some of gi ports have outdiscards errors and switching is very slow.
ServerSwitch>show int counters errors
Port Align-Err FCS-Err Xmit-Err Rcv-Err UnderSize OutDiscards
Gi0/1 0 0 0 0 0 8722
Gi0/2 0 0 0 0 0 157
Gi0/3 0 0 0 0 0 0
Gi0/4 0 0 0 0 0 0
Gi0/5 0 0 0 0 0 0
Gi0/6 0 0 0 0 0 446
Gi0/7 0 0 0 0 0 0
Gi0/8 0 0 0 0 0 0
Gi0/9 0 0 0 0 0 0
Gi0/10 0 0 0 0 0 0
Gi0/11 0 0 0 0 0 0
Gi0/12 0 0 0 0 0 1705658
Gi0/13 0 0 0 0 0 9
Gi0/14 0 0 0 0 0 74
Gi0/15 0 0 0 0 0 0
Gi0/16 0 0 0 0 0 0
Gi0/17 0 0 0 0 0 9
Gi0/18 0 0 0 0 0 0
Gi0/19 0 0 0 0 0 0
Gi0/20 0 0 0 0 0 0
Gi0/21 0 0 0 0 0 0
Gi0/22 0 0 0 0 0 0
Gi0/23 0 0 0 0 0 922
Gi0/24 0 0 0 0 0 0
But in monitoring i see only 80 Mbit max bandwith utilization on gigabit links.
Cisco Switching/Routing :: 3560 - System Returned To ROM By Error
Dec 16, 2011My switch is getting restarted and the error shown is : System returned to ROM by error - Debug Exception (Could be NULL pointer dereference)
View 4 Replies View RelatedCisco Switching/Routing :: Monitoring Port-Security Error-Disable And HSRP With 1921 And 2960
Aug 1, 2012I am looking to simply monitor Port-Security , Error-Disable and HSRP. I would like to receive an email when any of these are triggered.
Port Security - Port Is shut down
Err-Disable - Port goes into err-disable state (securedown)
HSRP - When HSRP standyby changes are detected
I need to receive emails with any of the able are triggered. What is the easiest way to do this? I know SNMP is the main option but I have never worked with SNMP and dont understand it too much.
Equipment:
2x Cisco 1921 series routers
3x Cisco 2960 POE switches stacked
Cisco Switching/Routing :: 3560 - System Returned To ROM By Address Error At PC 0x0
Jun 7, 2012We have observed that one of the 3560 switch was rebooted with "System returned to ROM by address error at PC 0x0, address 0x0"
View 1 Replies View RelatedCisco Switching/Routing :: 3750 And 3560 - IP ARP Inspection Error In Windows 7
Jun 14, 2010We have ip arp inspection and dhcp snooping enable in couple of 3750 and 3560 switches. Everything works fine, excepted few case that DAI packet rate trigger and errdisable the port. Later on we found out that most of computer that trigger DAI is Windows 7 and especially when they are in sleep mode. Not sure if anyone experiencing it with Windows 7. Also we have it rate limit at 64.
View 2 Replies View RelatedCisco Switching/Routing :: Input Error And CRC Error On Router 1841?
Mar 12, 2013The router 1841 is connected directly to the layer switch. the network diagram is below:
Office A --> Switch (L3) --> Router 1841 --> Internet --> Office B
However, when I transfer the file from Office A to office B, the speed very slow ( only around 40 kb/second), and there are an input error and CRC error:
Cisco-R1841#sh interfaces FA0/1
FastEthernet0/1 is up, line protocol is up
Hardware is Gt96k FE, address is 0019.e02f.03dd (bia 0019.e02f.03dd)
[Code]......
Cisco :: 802.1X And Error Disable?
Apr 10, 2013I have implemented 802.1X with ACS 5.3 and switches 2960 without problem.The thing is that one port transitioned into err-disabled and I dont know why.I dont have any logs to see what caused this.Is there a command to see why this happenedWhat do you think could cause this?
View 4 Replies View RelatedCisco :: Port Put In Error Disable?
Apr 1, 2013What could cause this log message and put the port in errdisable?
15w2d: %ETHCNTR-3-LOOP_BACK_DETECTED: Loop-back detected on FastEthernet0/22.
15w2d: %PM-4-ERR_DISABLE: loopback error detected on Fa0/22, putting Fa0/22 in err-disable state
15w2d: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/22, changed state to down
Cisco Switching/Routing :: C3560 / Can't Disable Telnet For Vty Lines
Oct 24, 2012#sh run | inc user
!
username USER0 secret 5 $1$passwordusername USER1 privilege 15 secret 5 $1$passwordusername USER2 privilege 15 secret 5 $1$password
!
#sh run | inc aaa
!
aaa new-modelaaa authentication login local_authen localaaa authentication login radius_authen group radius localaaa authorization consoleaaa authorization exec local_author localaaa authorization exec radius_author group radius localaaa session-id common
!
#sh run | begin line vty
!
line vty 0 4access-class 3 inexec-timeout 15 0authorization exec radius_authorlogging synchronouslogin authentication radius_authentransport input sshline vty 5 15!sh verCisco IOS Software, C3560 Software (C3560-IPSERVICESK9-M), Version 12.2(55)SE6, RELEASE SOFTWARE (fc1)
the intent of the above is that management connections will only be accepted via SSH, and all of those will be authenticated via RADIUS, unless it's down, then it will use the local username/pw combinations, most of which are given Privledge level 15. Telnet should never work.SSH works as expected (authenticates via RADIUS), but the problem is that Telnet also works, will ONLY use the local database (never RADIUS), and, for some reason, leaves the users at Privledge level 1, instead of the configured 15.Essentially, it seems that at every point I have told it to do something that isn't the default with regards to telnet, it ignores me.Prior to a recent IOS upgrade, the switch didn't support SSH, so the previous config was Telnet with RADIUS, and that worked fine.
Cisco Switching/Routing :: SF300 - Port Security / Possible To Disable?
Aug 2, 2012I have several SF300 switches deployed (SF300-08, SF300-24P). They are connected to IP Telephones (NEC) which communicate with the switch for auto voice VLAN on LLDP. The problem I am experiencing is that periodically the IP telephones are rebooted by the telephone vendor and when they do the switch puts that port into "Locked" port security mode and discards all traffic to the port. The IP telephones of course do not work. In other switch models, I have seen the ability to enable / disable port security switch wide or on a port by port basis. This model does not appear to have this feature. How to disable or why the phones would cause the switch ports to "lock"? There is usually one PC attached to each phone.
View 1 Replies View RelatedCisco Switching/Routing :: 4500 - How To Disable Dhcp Pool
May 21, 2012Can you confirm that if I want to disable temporarily a dhcp pool on a 4500, I need just to shutdown the interface VLAN corresponding to a specific dhcp pool?
ip dhcp pool test
network 10.X.27.0 255.255.255.0
default-router 10.15.27.250
[Code].....
Cisco Switching/Routing :: 4500 Standby Sup In Disable Mode
Aug 3, 2012I have a Cisco 4500 as my core switch and there are two sup eng in this core. However, I noticed that the redundant sup is in diable mode rather than Hot Standby.
I have tired to enable the module but I am not able to do that.
The sup of my core is: WS-X45-SUP6L-E
Cisco Switching/Routing :: 2960 - Disable Ports Looping?
May 10, 2013Disable ports looping Users connect the network cable at two points in the network generating looping. which command to disable two ports of a Cisco 2960 when they are connected at the same time with the same network cable?
View 2 Replies View RelatedCisco Switching/Routing :: 2960 - Disable Password Authentication In SSH?
Nov 16, 2011I have configured ssh on a 2960 to use public key authentication. Now that I can securely log into ssh without a password Is it possible to disable password authentication so that it is impossible to login without the key?
View 2 Replies View RelatedCisco Switching/Routing :: 2960 - Disable TCP Port 4786
Mar 1, 2010I have upgraded a couple of 2960G switches to 12.2.52SE and now discovered that TCP port 4786 is open on the switches.
I have looked in the document{URL}, trying to find a way to disable this function/port, but didn't find anything useful. Any way to disable this function/port?
Cisco Switching/Routing :: 6500 - How To Set Up SSH In CatOS And Disable Telnet
May 27, 2013I am trying to Disable Telnet and enable SSH in CatOS for 6500 .
View 12 Replies View RelatedCisco Switching/Routing :: 3560 Policy Based Routing Verify-availability
Apr 19, 2012Cisco 3560 does not support "set ip next-hop verify-availabilty". I need this command in my config. "set ip next-hop" do not do the same job.
View 8 Replies View RelatedCisco Switching/Routing :: Cat 3560 No Switchport Command Test Out Routing With Switch
Dec 8, 2011The last few days I've been exploring options in getting rid of some old routers accross a wan connections. I have a cat 3560 to play with and I thought I would try and use the no switchport command test out routing with switch. I've got some type of route issue and I tried a few things which I thought would fix the issue but had no effect. I'll post the config and a few commands so you can see what the basic setup is.
Here we can see in the arp that it knows about both 10.7.1.2 (PC unable to ping 10.3.3.254) as well as 10.3.3.254 (ASA).I tried adding in a ip route of 10.7.0.0 255.255.0.0 10.3.3.110 as well as 10.3.3.254. Neither produced the results I wanted allowing 10.7.1.2 (PC) to ping the ASA (10.3.3.254). [code]
Cisco Switching/Routing :: 3560 VLAN Routing Between Switch And Router
May 8, 2012I have an environment of 3 X 3560G of which I have 1st switch-CORE(f0/10) connecting to the VPN router(CE) interface-f0/0. Remaining 2 Cisco 3560's(Access) are connected to Gi0/1 and Gi0/2 on the 1st switch-CORE via gi0/1 . On all three switches I have created multiple VLANs and assigned ports to these VLAN. The switch to switch connection is trunk allowing all VLANs created on all these 3 switches. Now the issue is how I am going to have all these VLANs routed through single interface on the routeri-e f0/0, as all these subnets will communicating to remote site over VPN. What should be default gateway on the 2 Access switches and the CORE switch, also what static route should be on router to reach all subnets(VLANs) created on these 3 switches.
I have read inter-VLAN routing i-e creating sub interfaces on router but dont want to proceed with that and looking for any other way to have my VLANs talk on all three switches and then are accessible to remote site ove VPN?
Cisco Switching/Routing :: Make Policy Based Routing On 3560?
Apr 17, 2012I have tried to make policy based routing on Cisco 3560. I use ipservices ios (SW version 12.2.(50)SE3 and SW-IMAGE C3560-IPSERVICESK9-M) For below configuration there is no problem and pbr is working.
“Access-list 100 permit ip host 1.1.1.1 host 2.2.2.2
Access-list 101 permit ip host 1.1.1.1 host 3.3.3.3
Route-map pbr1 permit 10
Match ip address 100
Set ip next-hop verify-availability 1.1.1.2 1 track 11
interface fasthethernet 0/1
ip policy route-map pbr1”
But when i add another sequence to the "pbr1" with another sequence number like that.
“Route-map pbr1 permit 11
Match ip address 101
Set ip next-hop verify-availability 1.1.1.3 1 track 12”
pbr is not working. Switch gives message "PLATFORM_PBR-3-UNSUPPORTTED_RMP:Route-map pbr1 not supported for Policy Based Routing”"ip policy route-map pbr1" command not shown in the running config. And "show ip policy" output is blank.Configuration guide says you have insert many sequence to the route-map with the same name. And also this command is not in the unsupported command list.
Cisco Switching/Routing :: Routing Secondary Network On 3560 Switch
Jun 4, 2013I am trying to get my workstation to talk to a workstation on a different sub-net through a Cisco 3560 switch. The switch is running the following IOS version: [code]
My primary network is 172.16.0.0 and I am trying to connect to a device on a 192.168.111.0 sub-net. [code]
What would be the best way to get the two workstations talking via the switch?
Cisco Switching/Routing :: 3560 - Access List On InterVLan Routing
Dec 11, 2012I implemented access list on cisco 3560 switch but it never works. I want to block access from network B to Network A and allow from Ato B
Network A. 10.0.12.0/24
Network B 10.0.24.0/24
The configuration is
interface Vlan1
description Data VLAN
[Code].....
Cisco Switching/Routing :: 3560 - Unable To Perform VLAN Routing
Apr 28, 2012We recently purchased Cisco 3560X Layer3 Switch. We need to perform simple Inter VLAN routing. We have configured VLAN1 (name-server_vlan) and VLAN2 (name- user_vlan). We have also assigned the Ports and IP address to both the VLANs. After assiging this if we plug Laptop A into VLAN1 then it doesnt communicates with Laptop B (btw, Laptop A is able to Ping VLAN2 Gateway ) in VLAN2 but on the other hand Laptop B is able to communicate with Laptop A and ping everything i.e. Gateway of VLAN1.
View 17 Replies View RelatedCisco Switching/Routing :: Catalyst 3560 - Routing Enabled With / Without Default Gateway Or IP Route Command
Feb 25, 2013We have two catalyst 3560 switches running c3560-ipbasek9-mz.122-58.SE2.bin They are connected using etherchannel using gi 0/21 - 24 interfaces.
on 3560-1 switch, there isn't any ip-default gateway or ip route configured. It only have 1 interface vlan configured.
on 3560-2 switch, there is ip default gateway configured along with 1 interface vlan.
What i dont understand here is that, i can reach out to other subnets from 3560-1 switch in which the routing is not enabled?
Cisco Switching/Routing :: 2504 WLC / 3560 Catalyst Routing
Oct 21, 2012 I have a 2504 WLC connected to a Catalyst 3560 which has multiple vlans and is connected to a 2800 series router. I know the catalyst is L3 but I am needing nat functions to get outside to the internet. From my 2800 series router I am able to ping out to the internet, also I am able to ping the vlan interfaces on the catalyst switch. Problem is from the catalyst switch I can ping the inside and outside address of the 2800 but I cannot get any further then that. I cannot ping the 2800 router gateway. Not sure what I am doing wrong as far as routing.
I've attached my 2800 and 3560 configs.
Cisco Switching/Routing :: 6513 - Disable Logging On Specific Port
Jan 18, 2012Ask this question, if someone came across a 6513, one of the RJ45 ports are constantly falling.The question is how to disable logging on a specific portno logging event link-status does not work.
View 1 Replies View RelatedCisco Switching/Routing :: Enable / Disable OID's In Catalyst 3750-X Switch
Feb 19, 2013In my ongoing project i need to monitor cisco 3750-X port status (uplink/downlink) i.e. whenever there is some problem at a specific port. I need to monitor it through an OPC server and right now what i am doing is as follows: i am using Kepserver and i have added SNMP driver in it for that purpose i am not a networking expert but what i have learnt till now is that SNMP agent (that resides in switch) delivers the status of MIBs to SNMP manager ( which in my case is kepserver (opc server)) for the above purpose i am adding IF-MIB to monitor OID 1.3.6.1.2.1.2.2.1.8 (which shows port statuses) but when i add that in OPC server then it indicated that this OID is not available in the Switch ( it might be disabled) so i need to ask if there is any way to enable OID's in a switch,
View 0 Replies View RelatedCisco Switching/Routing :: 2960G Disable Srr-queue On Switch Port
Jun 20, 2012I have a Cisco 2960G switch and one of the ports was configured with srr-queue bandwidth limit 90 - I need to remove this bandwidth limiting from this interface. [code]
View 2 Replies View RelatedCisco Switching/Routing :: Catalyst 2950 Disable Login Password
Aug 30, 2012I have a customers Catalsyt 2950 switch come in for the configuration to be cleaned to factoy default, using the link below removed the customers banner and login information whitch worked
[URL]
When i restart the switch and enter Enable mode I'm prompted with the password which i used when following the link above,
I want to remove all passwords so when the switch is redeployed to the next site who ever the engineer is that is going to be reconfiguring the switch is able to access privlage mode with out the password promt.