is it possible to prevent the users with static IP's to connect the Network?We use Cisco sw 4500 series as an access and distribution switches.Is there any features on the switches that fit my request?
View 3 Repliesi just need to know is is there any way to prevent network from MACflap.The best way will be when switch will disable the interface where the macflap was detected.I need to set this security feature on 2960s.
View 7 Replies View RelatedI've tried a few things to get around this, some kids where I work keep changing the wallpaper, sometimes to quite disgusting things. Since groups of them all use the same login with roaming profiles, everyone gets to look and laugh at the annoying wallpaper.
I've tried enabling active desktop local policy and preventing users changing wallpaper but as far as I could tell active desktop didn't even come on, I refereshed the policy.
Does anyone know a good efficient way of simply setting a wallpaper for all users in an ad ou and preventing them changing it? I've got rid of all ways to set a desktop wallpaper apart from the right click menu on an image which has the "set as backgound" option, that's what they are using to do it.
I don't really mind how it's done, could be a registry hack to remove that option from the right click context menu when clicking on an image, I could then deploy it with group policy.
I'm looking at provisioning a Catalyst 4500 with a WS-X4712-SFP+E module to allow for future 10Gb connectivity via 10Gb SFP+ interfaces. These cards are backwards compatible with standard 1Gb SFP interfaces but I'm wondering about the other way around; ie. can you populate these blades with 10Gb SFP+ interfaces when they connect to Catalysts with only 1Gb SFP interfaces at the other end?
The data sheets don't really explain this. It seems pointless getting 10Gb SFP+ interfaces for the 4500 when it's only 1Gb at the access layer end, but these access switches will be replaced in the near future (~12 months) and if the 10Gb SFP+ interfaces support connections at 1Gb speeds upfront, it would mean I could retain these interfaces when the access switches upgrade to 10Gb connectivity capabilities down the track. Does the 10Gb SFP+ interfaces are compatible with 1Gb SFP's or only other 10Gb SFP+ interfaces?
I have c3750 and c4500 switches. I want to cross connect 2 v LAN so I need connection 2 different v LAN s. Can you provide example configurations?
Whatever other case, I want to cross connect between c7200 and c3750 2 different v LAN. It's possible?
Could I connect a WS-G5484 (4500) to X2-10GB-SR (6500)?These two transceivers modules have 850 wavelenght, so it should work right?
View 2 Replies View Relatedi am trying to configure my HP 420 access point. I have configure different SSID on it, This access point is connected to cisco 4500 switch, i have configure trunk on up link to access point.my problem is the client are not able to get an IP address form the correct vlan if i tagged the SSID to it.
in the following the output of show run int in cisco 4500 switch:
interface GigabitEthernet3/13
description ==== HP ACCess point ====
switchport trunk allowed vlan 99,130,132
switchport mode trunk
[code]....
Our network feels slow and trying to find the best way to investigate this properly. We have Cisco chassis 4500 with mix of 3560/2950 Edge switches 1GB backbones and WLC/WCS in place. The network is broken into multiple V LANS and IOS on our switches haven't been updated in 3-4 years.
On a wireless laptop (G) with get throughput of 1-2MB/s transfer speed with usually 10 clients per AP and LAN we get anywhere between 7-15 MB/s transfer. Using wire shark on a wireless laptop we see a lot broadcast traffic from other clients and the same for LAN. What is the best way to troubleshoot performance issues on the network and where do I start?
I have a SG 300-28 switch with the latest firmware installed running in Layer 3 mode.
I configured this router with 4 VLAN's where VLAN 1 is connected to the network router. All VLAN's call all communitcate with one another. How do I go about configuring VLAN's so that they can only communicate with the router and the internet and not each other?
I need to apply DHCP snooping on 4500 series switches working as L2 in my Network. We have external DHCL Server in another location connected with 6500 series switch.
Running EIGRP Configured Voice & Data Vlan both
DHCP Server -------- 6509 switch<----------------------------------->6509 Switch -------- 4500 switch ----------------------------------------------------------Ip Phones.
(ving Redundant) (ving Redundant)
I need to know whether the configuration which I mentioned in scenario is enough for apply DHCP snooping in my network.
Recently we got a cisco catalyst 4500 and six 2960 access switches. I need assistance on configure spanning-tree and faster convergence on my network to avoid loop.
[code]....
We have a couple of switches with a L3 Vlan 238 interface which runs PIM SM and OSPF, and HSRP. We have connected to this same segment telemetry processors which have raw socket interfaces configured - which means it picks up all IP packets which hit the interface and forwards them along.So we dont want the processor to recevie any of the 224.x.x.x switch housekeeping traffic? is there anyway to prevent that ?
View 1 Replies View RelatedAt the core of my network I have two Nexus 5548's with the routing/L3 daughter installed. They have a default route that points to my ASA 5520 for Internet access. I have configured a VLAN that I do not want to have access to the Internet. What is the best way of preventing this access? ACL on the Nexus or Firewall rules on the ASA?
View 1 Replies View RelatedI want to know what is the best way to black traffic inside the same VLAN, this VLAN is a user VLAN, it means that I am talking about access layer.I wanted to use private vlan, but C2960S doesn't support this feature. Any other way to prevent any to any traffic in the user vlan, this vlan only have to speak at the Layer 3.
View 2 Replies View RelatedWe have one core switch and we are planning to add a 6509. Both are none VSS.All the access switches are Catalyst 3560 series.
We plan to have all 3560s to have a link to each of the core. Without VSS, it is not possible to etherchannel to both core switches correct?What protocol should I configure to prevent in case one core fails? HSRP, VRRP, GLBP?
Do I need to run spanning tree protocol? if so which one?What is the best way to connect from each Catalyst 3560 for load balancing and redundancy? One to each core?
Wondering if this switch is capable of being a backbone switch for a network of about 1000+ users and if the switch can handle a sustained 30Meg of data going across it?
View 3 Replies View RelatedI need to know if Catalyst 4500-X does PBR in hardware?
View 1 Replies View RelatedDoes the 4500 support VSS (Virtual Switching System) ? On the official product overview page it says: 1.6 Terabits capacity with Virtual Switching System (hardware-ready)What means Hardware ready ? Does it mean that it supports VSS in the same manner as the 6500 ? The reason I'm asking this question is that I didn't find any info on the Internet about this. We would like to upgrade our network by interconnecting the 2 sites with Layer 2 redundant links (Layer 2 extension), but I'd like to use the both links in a load-balancing manner, which can be a real pain in the *** with STP. The choice is between 4500 and 3750 stackable core switches. The 6500s are very expensive.
View 6 Replies View Relatedquestion on 4500 SUP-7LE, this documentation is not 100% clear:
[URL]
When in single sup mode, can I have the following combinations?
1 SFP+ and 1 SFP << pretty sure this is supported
1 SFP+ and 2 SFP << think it's supported
1 SFP+ and 3 SFP << doubtful
2 SFP+ and 2 SFP << think it's supported
3 SFP+ and 1 SFP << doubtful
I'm seeing the following error on a 4500 running 12.2(46)SG
C4K_IOSMODPORTMAN-4-INLINEPOWEROVERWARNING: Module 5 inline power exceeds threshold: status changed to 'Pwr Over'
All the ports on module 5 have "power inline never" applied, in fact the whole switch has POE disabled.
I've attached a txt file with the show power detail output.
How to know 4500 SUP7-E's MIB ?Our customer use MS SCOM 2012 SP1 get the OID are 1.3.6.1.4.1.9.1.1286, but we use IOS MIB locator, we can not find this MIB id.
below are the IOS sh version information :
Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSAL-M), Version 03.02.00.SG RELEASE SOFTWARE (fc4)
Technical Support: [URL]
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Tue 26-Apr-11 18:09 by prod_rel_team
[code]....
What is the correct way to lic VSS on a 4500 SUP7L-E ? url... Under Table 5 - Support by Image Type; VSS is listed as available on IP Base (SUP7E only) and a plain Yes under Enterprise Services, inferring that you need Enterprise Services lic on SUP7L-E to get VSS? url...Under Table 1 - Minimum License for VSS; IP Base or higher (7-E) or special license (7-LE and Catalyst 4500-X)Can find no option on CCO / configuration tools to list a 'special' VSS license for 4500R+E chasiss with dual SUP7L-E and IP Base.How are you meant to purchase/license VSS on 4500E Chassis + SUP7L-E ?
View 6 Replies View RelatedWhy Cisco 4500 R switch PBR tracking Command not working , I found just route-map next-hop ?
View 3 Replies View RelatedMy 4500 core always in 60 % cpu utility , and when i run #sh proc cpu sorted i find that
55 29725041543795572214 0 39.43% 41.40% 41.39% 0 Cat4k Mgmt LoPri
Which mean that this process is the top one , and when i run #sh platform health i found that Stub-JobEventSchedul
10.00 15.98 10 64 100 500 20 17 12 29269:55 K2 CpuMan Review
30.00 35.60 30 48 100 500 49 46 32 52390:52
Those two process are the top and they already exceed their maximum rang and when i run #sh platform cpu packet statistics i can find that Packets Received by Packet Queue
Queue Total 5 sec avg 1 min avg 5 min avg 1 hour avg
---------------------- --------------- --------- --------- --------- ----------
Esmp 5053121950 475 462 340 326
L2/L3Control 244395185 17 8 5 11
Host Learning 67315739 0 0 0 0
L3 Fwd Low 346689615 73 23 14 13
L2 Fwd Low 5336180603 1180 1129 831 804
L3 Rx Low 2287913 0 0 0 0
RPF Failure 7510829 1 0 0 0
How i can configure the SFP Ports on my 4500 SERIES CHASSIS with other SFP ports on the connecting switch. I want to connect 15 switches via GLC=SX=MM to my 4506E sfp card.
View 4 Replies View RelatedI am getting a very strange problem where 4500 switch is remarking the packet with dscp 1 to 0.
Let me explaint the setup. I have two PCs connected on same switch but on different modules. PC1 is conencted to Gi4/19 and PC2 is connected to
Gi2/43. Both the ports has been configured to trust the dscp. Below are the configuration:
interface GigabitEthernet4/19
switchport access vlan 6
switchport mode access
[Code].....
I am trying to setup the WOL for our enterprise. We have a C4500 setup with mutliple Vlans. We are using Microsoft SCCM server to wake up workstations for security update. The workstations are on vlan190 and the Microsoft server is on vlan 441
Here's my config
the config below
interface Vlan190ip directed-broadcast 100 (Enables the translation of a directed broadcast to physical broadcasts)
access-list 100 remark ====== Wake-On-LAN ======no access-list 100 permit udp host 10.4.40.98 any eq 9 logaccess-list 100 remark ====== End of ACL 100 ======
[Code].....
We have 3 layer LAN architecture, layer 1 of 6500(IP routing), layer 2 of 4500(L2 switch only), layer 3 of 2960(L2 Switch)In a Single (2960 and 4500) Switch Port Avaya IP phone and PC are connected.Now, the requirement is that, Qos need to be configured for Voice traffic and Data traffic should be in default class of service.We plan to use COS value in Switch 4500 and 2960. We made a sample configuration as below
### For 4500 Switch
class-map match-all VOIP-Access-2MB
match cos 3 5
class-map match-all VOIP-Uplink-20MB
match cos 3 5
[code].....
check these configurations are correct as per standard and if there is any other method of configuration?What need to be configured in L3 Switch(6500)??In 2960, it doesn't support ingress QoS, what impact it will make when compare to 4500? do users experiance any difference?
read the posts regarding vlans that are administratively down, they suggested that they are down if no ports are assigned to them, however I do have a switchport assigned, and the interface is still down. This is on the vtp server and on the clients. The vlan is not listed when issuing show vlan brief. Other vlans configured in a similar way do show and their interfaces are up. These are two Catalyst 4948-10G.Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500-IPBASEK9-M), Version 12.2(53)SG5, RELEASE SOFTWARE (fc1).
View 5 Replies View RelatedI have installed a WS-X4448-GB-RJ45 on a 4503 chasis. I could not get input or output rate, just shows 0 bit/seg wether or not is forwarding traffic. I would like to know if I have to make any configuration or workaround. The IOS version is 12.2(37)SG1.
View 1 Replies View RelatedWhen I connect two 4500-x switches in a VSS setup, do I need to have both 4500-x switches equiped with Enterprise Services, or can I mix IP Base with Enterprise Services in one VSS setup in order to save on licensing costs?
View 1 Replies View RelatedI have a Cisco 4500 Sup 6 engine and I have two 48 port fiber line cards installed. When I do a show interfaces I do not see any of the Fiber cards. This is a new out of the box 4500 and I installed the Sup 6 Line card in Slot #1, And the two 48 port Fiber cards in Slots 2 and 3. Am I missing something, is there a command or set up procidure for the line cards. I just assumed they were plug and play
View 2 Replies View RelatedI have a 4510R-E chassis which currently has a single supervisor 5 installed.
We are now looking at upgrading the supervisor to a Sup6. Now the question is this, can I install the Sup6 into the redundant cpu slot and then perform a failover to get the new switch working without any noticable downtime.
I'm not sure what having a Sup V and a Sup 6 in at the same time will do to the backplane.
Otherwise I have to take the switch down and then install the card and software manually.