Cisco Switching/Routing :: 3750x - Aaa Authorization Doesn't Work In 15.0.1-SE
Aug 13, 2011
c3750e-universalk9-tar.150-1.SE on 3750x
username cisco privilege 15 secret cico
aaa new-model
aaa authentication login default local
[Code]....
Console and telnet don't seem to auto authorize to level 15, I end up at level 1, I'm forced to use enable command.
Rolling back to c3750e-universalk9-mz.122-58.SE2 fixes it. Going back to c3750e-universalk9-tar.150-1.SE breaks it again.
is there some new behavior in cat 15 code (couldn't find it in config guide)? maybe a bug (couldn't find one)?
View 9 Replies
ADVERTISEMENT
Jan 5, 2013
scenario A
A site .
PBX --->
Data ---> other brand router ----> 3750X ---> wan
[Code]....
How to know whether QoS work on the 3750X or not ? Is it correct about the config in scenario A ?
View 2 Replies
View Related
Oct 31, 2011
I've 3750X switch that isn't loading email. then I went to rommon mode and accidently for "format flash". after that I loaded 15.0 SE2 s/w on it using tftp server but it doesn't boot up with that image. flash had only .bin file after I loaded it from tftp server.
since it wasn't booting up, I did format flash again and thought to load image again from tftp server but now, it doesn't load image from tftp server.
View 9 Replies
View Related
Apr 22, 2013
Due to a problem with POE+ i have tried to upgrade the IOS to Version15.0.2SE2, from 12.2.58. unfortunatly the Switch doesn't boot up anymore. It starts to decompress and install the IOS 2 Times, after the Second try it displays "unable to boot" and the switch goes in Bootloader-mode. When i look at the version i See that bootloader is still the old version 12.2.58. It seems that the bootloader doesn't geht upgraded and that's why the Switch can't Boot the new Image.
View 8 Replies
View Related
Jan 9, 2013
I created the configuration below to limit the bandwidth, but doesn't work
Qos - 3750
!
mls qosmls qos map policed-dscp 10 to 8!class-map match-all Testmatch access-group name ACL!policy-map QOSdescription Limit 10M set ip dscp af11 police
[Code]....
View 6 Replies
View Related
Apr 16, 2013
I have PC_A and PC_B connected to the same switch, and are put in the same vlan. PC_A is the master (source) and PC_B is the destination (client). IGMP Snooping is enabled by default.
Is there any reason why this should fail? There is no RP or any interface with PIM enabled. Its a flat network with a source and client in the same vlan...
IH-3750-LOADTEST-101#show ip igmp snooping vlan 724
Global IGMP Snooping configuration:
-------------------------------------------
IGMP snooping : Enabled
[Code].....
View 19 Replies
View Related
Apr 22, 2013
my client to setup their network and he want me to limit user access internet bandwidth to 2 Mbps and the topology show below.
Users ---> Switch ---> NAT Router ---> (int gi1/0/24 - qos apply) Edge Switch ---> INTERNET ROUTER (12Mbps) --->> INTERNET
This is my configuration, but it doesn't work, the end user still able to get more than 2Mbps internet speed.
access-list 100 permit ip any any dscp default
class-map match-all QoS_Floor_Limit
match access-group 100
!
!
policy-map QoS_Floor_Limit
[Code]......
View 6 Replies
View Related
Oct 27, 2012
we can't start WS-X6708-10G-3CXL on WS-C6506-E. [code] we did try on conf t mode "power enable module 3" and it didn't work. [code]
View 2 Replies
View Related
May 22, 2012
I'm trying to connect a Cisco 2811 using an octal cable to a Juniper MX480 console port.Since the distance between Cisco 2811 and router is 20ft, im using couplers and a straight-through cable for the lack of slack. This wiring doesnt work, however in another city it works going straight from the Cisco 2811 octal cable to the router since they are in the same rack.
View 4 Replies
View Related
Oct 26, 2011
We have a Cisco Catalyst 4506 running: "Cisco IOS Software, Catalyst 4000 L3 Switch Software (cat4000-I9K91S-M), Version 12.2(25)EWA14, RELEASE SOFTWARE (fc1)" I have configured the default gateway as: ip default-gateway X.Y.116.65, However, when I do, "show ip route", it only shows the 3 connected networks and states "Gateway of last resort is not set". The Command "ip classless" is not set. I read on some blogs that this might explain the issue. However, when I go into config mode (config t), I get the following output.
View 9 Replies
View Related
Sep 10, 2012
we've been using IOS for a long time, but are relatively new to NX-OS. We've got a central syslog server that all our devices log to. No matter what we do, we can't get our Nexus switches to log there. Here's my current attempt:
Nexus 7009, NX-OS 6.0(1)
# sh logging server
Logging server: enabled
{redacted}
server severity: debugging
server facility: local7
server VRF: default
[code].....
The default VRF is working. I see log entries in the logfile, but nothing arrives at the syslog server. It's not a config issue on the server, because tcpdump shows that no packets arrive from the IP for loopback 0.
View 3 Replies
View Related
Feb 22, 2012
I am trying to configerate static switchports on our nexus 5548 (nx-os 5.1(3)N1(1)) over snmp.The support-list url... states that the CISCO- VLAN- MEMBERSHIP- MIB is supported.I can read the information, but if i try to set vmVlan or vmVlanType i get the message: "SET failed. ("ip-address"). Information: Not Writable."I can use set_request in general (e.g. CISCO-CONFIG-COPY-MIB). how to set the vlan and vlan-type over snmp?
View 3 Replies
View Related
Nov 5, 2012
I've got a 3560-X that passes POST according to console, but there are issues nonetheless...USB console doesn't work. RJ45 works just fine. No status lights turn on at any point (e.g. syst, xps...). 10g network module is installed with a 10g LRM SFP. All lights on the module are amber. However, it passes according to POST. Switch passes traffic, obeys config, etc. Link lights on RJ45 ports work fine. This was brand new out of the box. Thinking about trying IOS reload..
View 6 Replies
View Related
Apr 18, 2013
I have a pair of OLD Cat6500's running CatOS:
WS-C6509 Software, Version NmpSW: 7.6(16)
Copyright (c) 1995-2005 by Cisco Systems
NMP S/W compiled on Dec 22 2005, 16:37:19
System Bootstrap Version: 7.1(1)
System Boot Image File is 'bootflash:cat6000-sup2k8.7-6-16.bin'
System Configuration register is 0x2
I know these are no longer supported, but I have to ready them for migration. Recently a problem began with these switches. What happens is that when I telnet to them, I cannot authenitcate via TACACS. This works fine for all our other IOS equipment, just not for these 2 switches. The error is:" % Error in authentication" and then I get kicked back to the login prompt.
The odd thing is that when I connect to the switch via the console port, I can authenticate fine with TACACS.
CMS> /c 14
[Code].....
View 2 Replies
View Related
Jun 23, 2012
I have the following configured on my Nexus switches and works with success.
The problem I have is Once I switch of the ACS server I can log on to the Nexus as I have a admin user configured locally on the Nexus and the ACS server unfortunately can not run commands as it tries to point to the ACS server for auhtorization and the ACS server is turned off is it possible for the Nexus to ignore the authorization command if it can not see the ACS server ?
Feature tacacs+
ip tacacs source-interface vlan 705
tacacs-server host x.x.x.x key 7 "xxxxxx"
aaa group server tacacs+ Test-switch (Test-switch is a group configured on ACS 5.2)
[Code]...
View 1 Replies
View Related
Jan 8, 2013
I am getting Authorisation requests failed log entries for a user however there aren't any successful authentication logs.
The user would never be able to authenticate as it no longer exists in ACS (it was the user for someone who left the company 3-4 month ago)
The other wierd thing is that the caller-id is 0.0.0.0 BTW the NAS is a Cisco ASA firewall running 8.0(3)
View 4 Replies
View Related
Jan 29, 2013
I have a 871W router that works fine.I have 5 static ip addres's and use 2 in a nat pool. One i have mapped staticlly here is the configuration and it works fine:
! No configuration change since last restart
version 15.1
no service pad
service tcp-keepalives-in
[Code].....
View 1 Replies
View Related
Nov 29, 2011
i'm trying to enable command authorization for ssh as well as console access to a Nexus 7010 box (version 5.0). Following is the config:
aaa group server tacacs+ ACS5-1
server 10.12.19.11
server 10.12.19.12
source-interface loopback0
snmp-server enable traps aaa server-state-change
aaa authentication login default group ACS5-1 local
[code]....
As you can see, the default group configuration ACS5-1 for authenticatoin has applied to both defaults and console. But the command authorization does not appear to be applied to the console. As a result, when i login from the console and get authenticated, the command authorization does not trigger and i can run commands I'm not supposed to. In the configuration, I do not see "aaa authorization console" option unlike we have in IOS.
View 2 Replies
View Related
Aug 27, 2011
A month ago my ISP was routing half my subnet (129-254) over DSL. I just moved and routing no longer works without NAT. The issue is probably with the new DSL 'modem,' a zhone 1611-A1, but I am not sure how it should be configured.The 1611 is connected to a WRT610N, which works in NAT mode with the following settings:[code] With the previous settings, networking doesn't work from a workstation, though I can traceroute from the 610. I would like all workstations on the "LAN" to have fully addressable internet addresses like the previous configuration.There is an admin interface on the 1611, but the cursory settings I've tried don't work and I'm not a routing expert. The ISP is kindly routing my network, but they don't provide much support.
View 11 Replies
View Related
Jan 17, 2013
My management has tasked me to give them a high level overview of the different switching we can choose for our new building.
This is what I know so far.4 Closets, each closet has 450 ports,One MDF room that is will contain one UCS Chassis and a Nimble iSCSI SAN.
I am working on the spreadsheet and it looks like this (Not totally filled):
2960s3560x3750x45064510Approx cost (Each, 48PORT, POE+, 10G uplink, Dual PS, IP BASE)
6K7K8K45K75KMax Capacity192432432192384Backplane speed206464520520ProLeast ExpensiveStackable to 9Stackable to 9ProDual PSDual PSDual PSDual PSDual PSProLayer 3 opt
Layer 3 optDual SupsDual SupsConExpensiveExpensiveConNo Dual PSConLayer 2 OnlyCannot stack more than 4
For the MDF I would like to use 2 Nexus 5548's with FEX's, and the layer 3 daughter board. For the IDF's I was thinking of two 4010's.
View 12 Replies
View Related
Mar 6, 2013
i cant find any difference in these two devices when i am trying to compare throughput.I need upgrade our new POP and there will be around 4900 MAC adresses in VLAN 150 and 130 MAC adresses in vlan 200.Uplink is 1 gig routed internet connection and there is 14 downlinks to separate villages.i found a few differences for eg stack interface on 3750x but i dont need it.
View 2 Replies
View Related
Dec 27, 2012
I have a stack of 2 x 3750X switches these are running 12.2(55)SE5. I needed to add some static IP routes and found that the ‘ip routing’ command is not supported. I came across a document that stated “On switches running the LAN base feature, static routing on VLANs is supported only with Cisco IOS Release 12.2(58)SE and later.” So I have upgraded to 12.2(58)SE2, but ‘ip routing’ is still not a valid command.
The release notes state:“On the Cisco Catalyst 3560-X and 3750-X Series, it adds support for 16 static IPv4 routes in the LAN Base image.”
I have read other posts that talk about running the ‘sdm prefer routing’ command which I have done, but I am still unable to add any routes or run the ‘ip routing’ command.
View 4 Replies
View Related
Dec 9, 2012
I have an 1811 with several subnets connected to it.I recently installed a 3750x plant and want to bring my interior routing back to it.
All the routing is handled by the 1811 via secondary interfaces on vlan1?
I have 192 ports, and subnets show up on almost all of them. None of the ports are assigned to any specific vlans. Most ports have several subnets on them.
What is the best approach to getting the 3750x to handle the routing?
View 18 Replies
View Related
May 22, 2013
my company pay a switch 3750 X. WS-C3750X-24T-E. It uses IP services basically but I failed to configure InterVLAN routing. why interVLAN routing doesn't work on my switch?
View 10 Replies
View Related
Jan 24, 2013
I am setting up a vm environment for a customer in my lab off site. I have two stacked 3750-x switches, a san, and threes UCS c220 M3S servers for hosts. I am trying to separate the lan traffic, san iscsi traffic, and san management traffic using vlans. The problem is i'm unable to communicate cross vlan with my current config, which I have attached to this post. The only noteworthy things in my conifg is that the ip route 0.0.0.0 0.0.0.0 192.168.83.6 is referring to a switch stack they have on site, that I will connect this stack to using the first two trunk ports on each switch, that I do not have here in the lab. I don't want to cause any confusion in why I have things set a certain way.
View 1 Replies
View Related
Mar 28, 2012
Why does my 3750x-12s switch say it's not supported in CNA??? I upgraded to CNA 5.7.1 and still says unsupported. This device is supported or I'm just missing something.I use CNA heavily to manage our MANY vlans.
View 1 Replies
View Related
Mar 4, 2013
I want to confirm this is a licensing issue. On a 3750X with ipbase, I cannot create a vrf. So I would need the universal image, and that is a seperate license, correct?Is there a link that describes the difference bewteen ipbase and univeral images?
View 6 Replies
View Related
May 22, 2013
I have a query regarding attached Network Design
PC---2960---3750(One Routed Port and All Switched Port)------------------------ 3750(One Routed Port and All Switched Port)-----2960------Internet
I have many Vlans on left side of image , Right Side of Image is having internet connection via Modem, and local connectivity between VLAN works fine but Other Vlans Except Vlan1 is able to Access Internet.Note that 3750X did not have NAT Feature ,How should I able to get Internet on Other Vlans (10,20)
View 4 Replies
View Related
Feb 3, 2013
I have a one question. I am using Cat3750x-48 switch. Suddenly it has occurred following high CPU log message in Cat3750x-48 switch.
%SYS-1-CPURISINGTHRESHOLD: Threshold: Total CPU Utilization(Total/Intr): 62%/0%, Top 3 processes(Pid/Util): 162/40%, 156/10%, 74/1%
What is meaning of PID 162 ?
View 1 Replies
View Related
Jan 1, 2013
There seems to be a lot of conflicting information on what can and can't stack together in the 3750X range.
I know that LAN Base can only stack with other LAN Base switches.
Can IP Base stack with IP services in 3750X? I have also heard that the 15.x.x IOS restricts mixed feature set stacks?
I know that Cisco recommends that all switches in a stack have the same IOS and feature set but having all IP Services in a stack can get too expensive.
View 6 Replies
View Related
May 7, 2013
I'm trying to review a QoS setup, and I'd like to make sure I fully understand the current setup before I change anything. I'm seeing output drops on two different queue-thresholds, but not sure how packets are making it to one of the queues.
Switch Version
CORE#show ver
Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 15.0(2)SE, RELEASE SOFTWARE (fc1)
System image file is "flash:/c3750e-universalk9-mz.150-2.SE/c3750e-universalk9-mz.150-2.SE.bin"
cisco WS-C3750X-24 (PowerPC405) processor (revision A0) with 262144K bytes of memory.
Switch Ports Model SW Version(code)
I can find queue4-threshold3 in the mappings, but how are packets getting mapped to queue2-threshold1? The priority queue is disabled for this interface, so I'm not sure how this queue is dropping packets, according to the maps nothing is mapped to 02-01.
View 3 Replies
View Related
Mar 21, 2013
I am building a switch stack using 4 48 port 3750X switches that will also have the power stacked. If I install a single 715W power supply in each switch will the stack support 802.3af accross all 48 ports on each switch? My calculations are 48 ports x 15.4W which gives me almost 740W needed which is over hte 715W power supply. I was reading somewhere were it mentioned that in a powerstack additional power can be drawn from the stack. I know this will not work if you are trying to support power on all switches accross all ports but would it if say 2 of the 4 switches are needing to provide PoE accross all 48 ports? If I say we can only use 24 ports per switch for PoE that drops the power need down to 370W which I believe should work. Just trying to get a better understanding of PoE consumption. Would the best solution be to just add a second power supply to each switch?
View 8 Replies
View Related
Nov 24, 2012
I have a switch which is rebooting it self, we bought it a year back,its a new switch, i did not find any error on sh ver after rebooting. I am using OP manager, i did not receive any alerts. I have done all diagnostic test, all are passed, i did not find any problem..
View 2 Replies
View Related
