Is there a way to configure a VACL capture on 3560-x, we need more than 2 SPAN sessions. Feature navigator indicates that this feature is supported but it seems like it's not implemented in the IOS yet.
View 1 RepliesIf the 3560 or 3750 "X" series support GRE.I am pretty certain the older 3750-E does not support GRE (both in hardware and software)Was hoping the new super duper X series do. If not, it could get expensive
View 5 Replies View RelatedI acquired a 3560X-24P-L Switch which I wanted to use at our datacenter. However, I need a switch that supports OSPF. It came with a Universal IOS but there was no "Router" command under conf t. I downloaded and applied the latest "IP Base" IOS, but still no Router OSPF. Based on the matrix here > [URL] I thought "IP Base" supported OSPF, but what exactly is "OSPF for routed access" ? Do I actually need an "IP Services" IOS? From my download options, I do not see an IP Services IOS for the 3560X-24P-L so I'm left to assume that the switch does not support L3 / OSPF. So my question is this particular switch supports L3 / OSPF and what is Universal IOS?
View 5 Replies View RelatedI would like to know cisco 3560X-24P-S will support LLDP & DHCP relay .If it support which IOS feature is required to enbale these features.
View 1 Replies View RelatedNeed to clarify if ip sla icmp echo operation is supported in catalyst 3kx switches (ip services)? on the configuration guide, commands are available, but on the feature navigator, i can't find the feature, only ip sla video operation. i don't have a device to test on here.
View 2 Replies View RelatedI have switch Cisco 3560 and I would like to filter multicast traffic. Short explanation. This are multicast addresses from provider on VLAN 888 :
I expect that streams from acl Streamfrom888 will be dropped and the rest of streams will be forwarded. Unfortunately traffic from all streams passs through.how to configure VACL or where in my configuration is mistake?
We have a Nexus 7018 with NX OS 5.2(1), and we were trying to understand somehow the steps to do a VACL, we know that in IOS it would be:
interface GigabitEthernet9/33
description Puerto. Captura
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 19,20
[Code]...
I´m facing to one issue with VACL. i have a network lan with 10.40.X.X/16 . in this network i have a Production v LAN 10 with 10.40.10.X/24 and i have created one vlan103 for Guest´ user as 10.40.103.X/24
My goals is to restrict the v LAN 103 to reach or access the v LAN 10, better to restrict Guest user access to the production v LAN. So i try to put this script with VACL method, but does n´t work.
Extended IP access list Restriction-Guest
10 permit ip 10.40.103.0 0.0.0.255 any
vlan access-map Guest 10
action drop match ip address Restriction-Guest
vlan filter Guest vlan-list 10
After that i still able to ping or access to the v LAN 10 form v LAN 103.
i have a catalyst 3750, in this switch i have 3 vlan, i need to secure trafic between vlans but im confused ,should i use ACL or VACL to secure ?which is the best ?if i use ACL to secure and limit ports between vlan, which is the best practice to apply the acl ( on th inside or outside of interface)
View 2 Replies View RelatedI have used stack wise 3750 for a long time. Now,I have a new stack of 3750. Both of them are trunking together. If I have a VACL running in the old stack, do I need also implement in the new one.
View 1 Replies View RelatedDoes one can use a Vacl to monitor network traffic on a nexus 3064 much like you can on the 6500s? If so, any performance tradeoffs or caveats to be aware of ?
View 2 Replies View RelatedI operate between c6509-E, what did you flooding? its just packet capture gi1/3 but i dont know it and is it attack?also same seq no switch gots it?what is problem?
View 2 Replies View RelatedI have Cisco Prime 4.2 and several 3560X switches. I want to enable energywise on then but after doing the Readiness Assessment they apper like "Hardware not Capable". As far as I know the 3560X do support energywise.
The switches details:
WS-C3560X-48T-S running IOS 15.0(1)SE3 (C3560E-UNIVERSALK9-M).
Does those switches do not support energywise?
I have always done my port monitoring (SPAN) on Cisco layer 3 switches with no issues. This time I am trying to do this on a Cisco 2901 router:
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M2, RELEASE SOFTWARE (fc1)
System image file is "flash0:c2900-universalk9-mz.SPA.151-4.M2.bin
I need to have the source port gig0/0 and destination port gig0/1. There is something about the gig port enumeration (slot/port#) that makes the command rejected. It is self explanatory:
#sh ip int brie
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES NVRAM administratively down down
GigabitEthernet0/0 xxx.xxx.xxx.xxx YES NVRAM up up
GigabitEthernet0/1 unassigned YES NVRAM up up
Serial0/0/0:0 unassigned YES unset up up
[code]....
It doesn't matter what slot or port number I use, it is always rejected. The command is rejected for Both destination and source gig interfaces. I tried a wide variety of slot/port numbers. To my best understanding the complete port names are: GigabitEthernet0/0 and GigabitEthernet0/1, so why does it think there has to be another digit after 0/0 or 0/1? Does it have anything to do with the Embedded-Service-Engine0/0 being administratively down?
I know that an ELAM can be setup on a 6500 running ipservices 12.2(33)SXJ, however I noticed that following commands are not available on a 6500 router running advipservices 12.2(33)SXJ:show platform capture elam asic etc
So I wanted to know if there is an alternate way to setup an ELAM for troubleshooting purposes?
We are running in our DC one of the CISCO 2911 terminal server which is connected with HP ARC sight logger.
it is possible to capture user who execute ‘Telnet” or “show line” in the log, I mean all the command entries by user.
How to enable any config on 2911.
Basically I am trying to use Wireshark to do a packet capture on a Nexus 5010. I want to do a monitor session on on the switch so I can capture from a source port to a destination port on the same switch. I can configure the source port but when I go to configure the destination port I get "ERROR: Eth102/1/4: Configuration not allowed on fex interface". I have tried to reconfigure this port as a switchport but "switchport mode access" command does not take. I don't want to make any changes to any other ports but this one.
View 1 Replies View RelatedMy management has tasked me to give them a high level overview of the different switching we can choose for our new building.
This is what I know so far.4 Closets, each closet has 450 ports,One MDF room that is will contain one UCS Chassis and a Nimble iSCSI SAN.
I am working on the spreadsheet and it looks like this (Not totally filled):
2960s3560x3750x45064510Approx cost (Each, 48PORT, POE+, 10G uplink, Dual PS, IP BASE)
6K7K8K45K75KMax Capacity192432432192384Backplane speed206464520520ProLeast ExpensiveStackable to 9Stackable to 9ProDual PSDual PSDual PSDual PSDual PSProLayer 3 opt
Layer 3 optDual SupsDual SupsConExpensiveExpensiveConNo Dual PSConLayer 2 OnlyCannot stack more than 4
For the MDF I would like to use 2 Nexus 5548's with FEX's, and the layer 3 daughter board. For the IDF's I was thinking of two 4010's.
i cant find any difference in these two devices when i am trying to compare throughput.I need upgrade our new POP and there will be around 4900 MAC adresses in VLAN 150 and 130 MAC adresses in vlan 200.Uplink is 1 gig routed internet connection and there is 14 downlinks to separate villages.i found a few differences for eg stack interface on 3750x but i dont need it.
View 2 Replies View RelatedI unpacked a new 3560x and went to put our standard code version on it c3560e-ipbasek9-mz.122-53.SE2. Everything seemed to upgraded fine but it won't boot to a console prompt. It seems like it loads the IOS image fine but can't get passed the Front-end Microcode IMG MGR: Programming device 0. [code]
View 4 Replies View RelatedWe have a small site that has an Avaya voice switch connected to a c3560x switch.The avaya tech told us to set this on our ports to which the phone and the desktop are connected.
View 4 Replies View RelatedI have seen a similar post here from last year about a 10/half connection, but this is different. I have a provider using a 2950 switch (they left CDP on so we can see it). And we have to be set to 10/full to make this connection (as you know 10/half connected here would be or is horrible). I have had this connection running on my 2921 router w/o issue but when I connect it to my 3560X, then I get no link light (shows down/down, not connected).
What else to know about what has been tried: Connecting link to switch with switch set to auto/auto (sp/dup). Speed is 10 (as it should be) but of course w/o the other side pulsing the voltage to know what to auto to, it defaults to half so this is unacceptabel, but, I do get a link light and can pass traffic, it's just a horrible experience.
Also tried the same setting speed and duplex vs. auto disco speed and duplex on other ports of the switch, no difference, same results. Also different patch cables, same results.
My current work around is to connect the providers 2950 (10/full) to my 2921 router @ (10/full) with a BVI to another port on the router which continues on to my 3560X at 1G/full. And this works just fine. Here's more info from my 3560X and the providers 2950:
3560X:
License Level: ipservices
License Type: Permanent
Next reload license Level: ipservices
[Code].....
I have a 3560X switch with interfaces 36-48 on the same LAN. All interfaces are switchports. Hosts on 38, 39 and 40 are multicast senders: all sending to the same single multicast address. Hosts on 36 and 37 are receivers, having joined that multicast group. I created an SVI for the LAN and put it in ip pim passive. (That is the only PIM mode allowed for an SVI with my IOS.) Show ip igmp snooping groups shows that 36 and 37 are the only interfaces in this group. I attach a laptop to interface 42 and Wireshark, and the laptop is receiving the multicast traffic. The laptop does not join the group. I expect it would not see the traffic.
View 4 Replies View Relatedlast week we have changed the connection of small town from licensed radio to direct fiber with clasic 1gig sfp.After that we have connected the new fiber , we can see 5 min outages of customer internet connection. If we are conncted on the same subnet anywhere on network, we can ping the customer all the time. But if we try to ping the customers public IP it is each 5 min for 5 min unreachable. I have tryed to sho logg in all switches but there are no mesasages. I just see, when comunication have lost, the MAC and IP of customer will disapear from routers ARP tabbel. What is going on?When i enter sho mac address-table i can see customers MAC address in all switches. There are exactly 5 min outages. 5min it runs ok, 5 min outage and it repeats agan.
I looks like the swith blocks the ARP packets from customers to their default gateway.The routers are connected to catalyst 3560x lan base ios, This switch is connected to another 3560x lan base ios and it is connected with fiber to ME3400 where are customers connected.
I have 3560X-24T-S switches with IP Services loaded at remote sites that I have been having troubles with. Originally, they had IOS 12.2(58)SE1 on them. I have up to four diverse paths via point-to-point microwave at the remote sites. The Microwave equipment is by Microwave Networks and is a Prodeus M series which Ethernet support. The original issue manifested itself as hardware loopback errors on some of the ports that were connected to the microwave links.
My experience in the past has been that when a hardware loopback error occurred it is usually a bad switch port. In this case however, if I disconnected all of the microwave Ethernet links and rebooted the switch and then connected the Ethernet connections to the microwave links again, everything works fine. No hardware loopback errors. That is, until the next switch reboot. Then the hardware loopback error would return. Interestingly, it would come back on different ports connected to the microwave links every time. So if a reboot was done without disconnecting the microwave Ethernet links the hardware loopback error would change from one microwave link to another after each reboot.
I then went through and read the lengthy release notes for IOS version 15.0(2)SE and found several fixes that I thought could fix my issue. So I downloaded it and updated a couple of the offending switches (not all of them were having this problem). After going through the second update required to resolve the 'open file error' that happens going between 12.2(58)SE1 and 15.0(2)SE the problem seemed to be resolved on the offending switches. So, I went ahead and updated the IOS on all of the switches with point-to-point microwave connections.
I now have one switch that was updated that is crashing and rebooting continuously when the Ethernet links for the point-to-point microwave are connected. Again, if I disconnect all the microwave links and reboot, it comes up fine ands stays fine when the microwave links are connected back up. It will work fine until the next reboot and then the crash and reboot loop starts over again. Below is a portion of the putty log when the crash occurs:
----------------------------------------------------------------------------------------------------------------------
previous memory block, bp = 0x59BF838,
memorypool type is Processor
data check, ptr = 0x59BF860
========= Dump bp = 0x59BF87C ======================
59BF77C: 0 0 0 FD0110DF AB1234CD FFFE0000 56 383FDB4
59BF79C: 212AC68 59BF838 59BF6F4 80000042 1 0 A504F53 543A2050
59BF7BC: 6F727441 53494320 506F7274 204C6F6F 70626163 6B205465 73747320 3A20456E
[code].....
It would be so easy but failed to upgrade 3560X switch to ip services licence is bought and paid for mail and log from the CLI and tftp server attached
View 17 Replies View RelatedIm going to be ordering a new 3560X L3 switch (ws-3560x-48pf-s). We currently have a 3560 V2 switch and I've read it supports stacking, but looking at the back I just see a console port. Is there an extra card I have to get for this 3560V2 to make it stakable with the 3560X?
View 3 Replies View RelatedI was viewing the 3560x switch datasheet and i need network module C3KX-NM-10G. I have dark fiber with over 12 km distance to i guess i will be needing SFP EX for single mode.
View 3 Replies View RelatedI currently use L3 switches as edge routers to my WAN. I want to use a pair of 3560x switches with IPbase to provide a failover path to my WAN using HSRP at one location but had some problems testing the configuration. My plan is use a virtual address on the LAN interface (VLANx which port gi0/1 accesses) and the WAN interface (VLANy which port gi0/24 accesses). I want switch 1 to be primary since it will have an IPS attached to it, and switch 2 will be backup and used only when switch 1 or the IPS requires maintenance. On both the LAN and WAN sides there is no advanced routing going on, the various hosts just depend on the availability of their respective default gateways, so HSRP should be sufficient to provide a failover in either direction.
In my testing I got 1 or the other link to fail over but not the entire switch. What should my config look like to achieve failover of the entire switch in the event 1 or the other interface goes down, and fail back when the primary links are again available?
I am stuck at a very early stage in the configuration of 3560x switch. It seemed very unusual and that is the reason, I configured basic config for line con 0 with login local. And then I had just put "enable secret xxxxxx."
Now I simply logged out and when i tried logging in, it is asking for a username. Now the thing is that I had not programmed any username. I tried using just "." followed by my secret password, but it did not work.
we just got brand new 3560X with LANBASE license installed. Wanted to confirm with a "show license"
To my surprice (output below) I hav IP Services evaluation. I tried to test with an "show ip route" and "ip route..." in configuration mode with no success. How do I use the trial license?
Switch#show license
Index 1 Feature: ipservices
Period left: 8 weeks 4 days
License Type: Evaluation
License State: Active, Not in Use, EULA not accepted
License Priority: None
[Code]...
if a connect to the switch via Internet Explorer or every other browser I can't enter configuration because I receive a screen as you can view in image below. And I can view those errors:
message: 're_preFlt_txt33' is not defined
Linea: 31
Carattere: 1
Codice: 0
URI:
[URL]
If I connect in HTTPS with IE8 in compatibility mode I view the image as in attachment with_https.jpg.
why Cisco make 3560x switches with Lan Base(no routing functions)? What happen if I load an Image L3, previously downloaded? my device lost the warranty? or it doesn matter?
View 1 Replies View Related