I have a simple question: In 6500 CatOS, we had that feature of image synchronization, which added the ability to download the image from the active supervisor to the standby via internal TFTP of the CatOS. Can this be done on IOS? I was looking fot this over the Internet and couldn't find anything.
View 1 Replies1 week ago, I got a call from a client that reported a network outage, the client told me that, 3 switch has crashed he try to console but it just hang. I ask him, did you change something? he said he didn't change anything, he just pluged a nortelswitch to the cisco switch number 9, but that switch doesn't crash like the others (3,4,8). I check the uptime, and yes the switch never been powered off..
the topology look like this
____ 6500 ____
/ / |
1 2 3 4 5 ...... 9
the vlan is end to end vlan, so vlan span between all those switches. transparant. this is collapsed topology, core and distribution is the 6500 itself all of the 1-9 access switch are in the same rack, with no loopguard, and bpdu guard configured. and connected to the core using etherchannel. the problem is there is no log available to start the troubleshooting/investigation.
how to convert configuration catos on 6500 to IOS image.
View 3 Replies View RelatedI have a Cisco Nexus Datacenter solution with this design:Every Nexus 5K is connected with every Nexus 2K with a Port-Channel and vPC.
What is the best way,to keep the configurations of the nexus switches synchronous? I have no DCNM (Mgmt.-Tool).
My problem is if I configure for example a Nexus2K-host port on one Nexus 5K, the change has no effect. Only when I make the same change on the second N5K the port-config really changes.
I've beating my head against the the above said problem for a quite a while. Our client has a very strict security policy and they require all standard protocol to comply with the expected behaviour. It was discovered that their 3750 switch running c3750-ipservicesk9-mz.122-25.SEE3 software and configured to sync its time with an external public NTP server triggers IPS signature - DNS Info leak. The problem is that the switch initiates the packet on UDP port 53 and not as I would expect on port 123 for NTP. Of course I can tune the IPS sensor and make it not to fire this signature but the client needs to know why it is happening and if it is faulty IOS software that doesn't comply to the rules.
View 2 Replies View RelatedI'm looking at adding a Cisco 3750-X switch running c3750e-universalk9-mz.122-55.SE1 (IP base license) into a stack of 3750-G switches running c3750-ipbasek9-mz.122-55.SE1.bin Given that the version and feature sets are the same I don't forsee any compatibility issues. Would there be any reason why a universal image wouldn't stack correctly with other switches running the single .bin file?
View 9 Replies View RelatedIn our network environment, we have a 2960 switch sitting behind our router. Off of this we have a lot of external connections, like our external DNS, firewall, and VPN concentrators. I've configured a VLAN other than the default, moved everything into it and then shut VLAN 1. In this hardening guide it says that your native VLAN should be something other than the user VLAN, but if I am not using any trunk links, wouldn't I not really have a native VLAN? I attempted to make the link to our firewall a trunk link and then set the native VLAN to something else.
View 5 Replies View Relatedif i have this config:
switch port mode trunk
trunk aloved vlan 50
will travel over this trunk untagged packets? For eg the V LAN 1 is by default native V LAN without tag. If i have created a bog ring with catalyst 3560x switches with no spanning tree on V LAN 1 can be the case of this config a loop ???
I am using upper config on interfaces that are connected the switches together in ring.
Other interfaces on switch have this config:
int range 0/1-4
switchport mode acc
switchport acc vlan1
int range 0/5-24
switchport mode acc
switchport acc vlan50
I am using vlan1 just for local switching without connection to internet! I am asking just because i have this king of messages in logs:
%CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet1/0/27 (1), with SW3560x_BR8874 GigabitEthernet1/0/19 (50).
GI 1/0/27 and GI 1/0/19 have this config:
switchport mode trunk
trunk aloved vlan 50
SG-300 52 native VLAN blocking network packets
View 3 Replies View RelatedI am having trouble after creating a management vlan (99) on a 3550 switch.I have configured the vlan (99) and given it an IP (192.168.1.100) and a default gateway (my router address - 192.168.1.99).I can ping to the switch from a PC and vice versa. The management VLAN IP is fine but now I cannot ping to the router from either the PC or the switch.It seems that just by adding VLAN 99 with it's own IP address has now prevented pings from the switch/ PC to the router ?Due to the fact that I have created a new switch management VLAN with an IP, does this mean I have set up the router as a 'router on a stick' scenario ? [code]
View 4 Replies View RelatedI am planning on inserting a second Sup720 in my 6506 running in native mode. Here is how I have redundancy configured:
redundancy
mode sso
main-cpu
auto-sync running-config
The IOS version is:
s72033-ipservices_wan-mz.122-18.SXF8
We are trying to setup a new configuration with 2960S as access switchs and a 4507 as a core switch.I want to protect the management IP VLAN of the swich using vrf on the 4507 so we :
SHUT VLAN 1 on every switch (2960 + 4507)
CREATE A NEW VLAN 289 (management vlan) -> IP network : 10.32.126.192/26
L3 VLAN on every switch
VLAN 289 in the VRF XXX on the 4507
create tunk between the switch and the 4507 :
switch mode trunk allowed vlan 200-230
sw trunk native vlan 289
so with this configuration on the 2960 the vlan 289 is UP/DOWN and UP/UP on the 4507 I can access to the 4507 using the IP in the VLAN 289 but i cannot access to the 2960 behind the 4507 CDP connectivity is ok?
I have a small home network currently using a cisco 841 which is working great. Host a web site and Exchange plus all 10 computers access the net using Verizon FIOS all works. I can even VPN in to my newtwork remotely.I can only VPN using the Cisco client. I would like to use the Native Windows Client and Ipads and Iphones. I believe they use PPTP and the Cisco client is using IPSEC.Which Cisco router can I get that would support all the above?
View 14 Replies View RelatedI am migrating an existing LAN from 3550 to 3750X-12S. In the existing configuation, I´ve got some trunks with native VLAN <> 1. The native VLAN is also used for user data transport. With IOS 15.0(1)SE3 on 3750X I recognized, that per default behavior PVST is not active for a VLAN defined as native, even if the corresponding trunk is up and trunking. My current workaround is to add a "switchport access vlan" command on the trunk even this one never should become an access port. With this statement only the switch is activating the PVST for the native VLAN. For all other vlans PVST works as exspected. [code]
View 6 Replies View RelatedI have several closets with Cisco 3560 on the edge that I'd like to change the vlan that's used for the management vlan on each. In the core I have a Cisco 6509 with Sup720's.
I'd like to do this by changing the native vlan on the trunk port on the core 6509 interface that connects to the 3560. and leave the management vlan on the 3560 as vlan 1.
Seems trivial but what I tried didn't work and I didn't have the window to troubleshoot. I'll paste the simplified configs for the interfaces below
!
6509 configs:
!
interface Vlan50ip address 172.16.50.2 255.255.255.0!interface FastEthernet
[Code]....
We have a problem with CDP packets on sent by our Cisco 6509's. Unlike our other Cisco switches (4948G, 5020, etc.), the 6509 tags administrative traffic on the native vlan. As a result the CDP packets are sent with an 802.1Q header with a tag of 1. The other switches send the CDP packets untagged on the native vlan. This causes problems because we have non-Cisco devices in our lab that also receive and send CDP, but they do not process the packets that are tagged by the 6509. They see the packets from the 4948 and 5020 just fine.
How can I disable the administrative native vlan tagging on the 6509? Here is the current setup:
nwkdev-6509-1#show vlan dot1q tag native
dot1q native vlan tagging is disabled globally
nwkdev-6509-1#show interfaces gigabitEthernet 1/9/1 switchport
[Code].....
how can we upgrade 6500 non modular ios to normal 6500 ios?
View 5 Replies View RelatedI've been experimenting with the 'vlan dot1q tag native' command on a switch and it seems as though tagging the native vlan breaks vty access to my access point.With the 'vlan dot1q tag native' commnand applied, I lose management connectivity to the AP with 'no vlan dot1q tag native' applied, connectivity is restored. Why is this? Is it safe to say that one can access the AP via vty lines using ONLY untagged packets?
SWITCH
Model: WS-C3560G-24PS
Code: c3560-advipservicesk9-mz.122-46.SE
--Abbreviated CONF
vlan dot1q tag native
[code]....
How can we know that 6500 and 7600 series switch and router are running in native mode or in hybrid mode.
View 2 Replies View RelatedI am position to migrate from CatOS 6509 switch to native IOS 6509 switch. long time ago, there was some site to convert automatically based on copy and paste onto the tool, but i can not find.
Does anybody know how to convert CatOS configuration to Native IOS configuration ? It is not IOS change, but it is configuration convert.
how to copy a cisco ios image from a 3750 to my pc so that i can use it to upgrade a switch on my desk.
View 3 Replies View RelatedWhen I config BGP on my 3750X Switch, it show error as below:
protocol not in this image
should I need to upgrade the IOS or Where I can found a supported image (support BGP)
I am going to upgrade the IOS image on 6509-E SUP 2T from 15.1 to s2t54-adventerprisek9-mz.SPA.150-1.SY3.bin switch and i would like to know whether i would need to upgrade the boot loader image as well.
View 4 Replies View RelatedI'm not able to find in all the datasheets what's the default (out-of-the-box) IOS image of a WS-C4900M.When I buy a WS-C4900M I know that there is an IP-BASE IOS but which version?
On the datasheet there is a 12.2SG but is an IPBASE with SSH? W/O SSH? UPGRADE SSH? I'm trying to make a comparison between this image and a cat4500e-entservices-mz.150-2.SG2.bin (Advanced Enterprise Services) on the feature navigator to make sure the our customer need this last IOS Upgrade.
I have 4948E module switch at customer site and below is the show version output. Image on the switch is not supporting 'AUTO QoS' as i need to enable Auto Qos on it to prioritize Voice traffic. Which image supports Auto QoS feature . Image should have L3 functionality also i mean it should support Routing protocols. I tried to enable auto QoS using by configuring "QoS' globally but no luck...with existing image.
{ URL}
ROM: 12.2(44r)SG9
Hobgoblin Revision 20, Fortooine Revision 1.22
Switch up time is 12 hours, 1 minute
System returned to ROM by reload
[ code]...
Configuration register is 0x2012
Switch#sh boot flash:
-#- --length-- -----date/time------ path
1 25793234 May 31 2011 15:20:20 cat4500e-entservicesk9-mz.122-54.SG.bin
2 25005209 Mar 08 2013 09:53:18 cat4500e-entservices-mz.122-54.SG1.bin
70033408 bytes available (58249216 bytes used)
I wanted to upload image having .tar extension in Cisco 3560 switch. What are the steps to upload.
View 1 Replies View Relatedi want to check if cisco2911-sec/k9 can support IP service image? what PAK(license) can be bought to activate the IP service feature set?
View 1 Replies View RelatedWe've ordered a 4500 core switch and 4948 Server Farm switch for our client, but the switch box does not include a IOS image CD or anything related to IOS image and now the client is asking us why is this item missing as the IOS
-S45UK9-32-1502SGCAT4500e SUP7e Universal Crypto Image
-S49IPB-12253SGCisco CAT4900 IOS IP BASE W/O CRYPTO
A customer wants to upgrade an IOS Base (cat4500-ipbasek9-mz.122-25.SG4.bin) of a WS-C4507R Cisco, for a IOS that have a enterprices functionalities.We install an IOS cat4500e-entservicesk9-mz.122-53.SG5.bin, but we had the following results:
config-register = 0x2102
Autobooting specified file using Variable BOOT .....
Current BOOT file is --- bootflash: cat4500e-entservicesk9-mz.122-53.SG5.bin
[Code].....
I own the Cisco switch,2950-24.When power on,it says Crash fault with information showed below: [code] Then I search google.com and found the resolution of upgrating IOS.I push mode button before power.Then I access into the CLI.I checked the files in the flash: and got these. [code]
View 8 Replies View RelatedI have a cisco 6503 - e series switch which runs c6sup22-psv-mz.121-26.E4.bin. Both superviser engine and MSFC2 card run the same IOS image i guess. In my boot flash their is another image c6msfc2-jsv-mz.121-4.E1. o what is the difference between these images c6msfc2-jsv-mz.121-4.E1 and c6msfc-boot-mz.121-4.E1.
View 5 Replies View RelatedI'm having difficult getting this switch to boot from flash. I do not understand why it is trying to load "b1" from "bs1" instead of something from flash. [code]
View 2 Replies View RelatedI have L3 switch 3560 v2 cisco switch. If i connect the switch via the console cable in XP system i am not getting any responce. I think i need to install via XY mode.
how can i install the ISO iamge via XY mode in cisco switch 3560 v2.Cisco Model: WS-C3560v2-48tS-S.