Cisco Switching/Routing :: 891W 10Gbs Multi-Chassis Ether Channel
Mar 15, 2011
I have an 891W that I initially configured using CCP Express (2.5). So it has a WAN IP set, and through CCP Express I had enabled via the checkboxes the various default settings for security. This includes zone-based firewall. I then added a number of NAT entries in the setup wizard.
What never occured to me at the time was that I should have added entries that allow for remote access. So it seems I've locked myself out of accessing the router via the WAN interface even though I know it's IP. I'm sure it's just a matter of adding port exceptions for SSH and/or whatever port(s) CCP uses.
So I"m wondering what the proces woudl be. In the IOS while showing the running config., I see pages and pages of class-map stuff which at present I don't know enough about to risk editing anything directly. But maybe I don't have to? What would be the best way to, for example, enable SSH access through the firewall? I already have transport input ssh set on the interface itself so I believe it's ready to allow the connection, just that I can't get to it via WAN int. so I assume it's the firewall.
View 3 Replies
ADVERTISEMENT
Feb 26, 2012
Possible to configure multichassis port-channel between a VSS and 3750X (Port-channel not in the same switch on the 3750X stack). I got it using LACP but I need Pagp to get VSL redundancy “dual-active detection pagp trust channel-group 1”. I am using the last VSS IOS version 15.0(1)SY. I can’t get the option “switch 1 preempt”, has it changed with other option?
View 2 Replies
View Related
Sep 23, 2012
I was configured ether channel between two cisco 2960s series switches. It is working properly. I was replaced two cables in etherchannel. Now one link working remaining link is down(both cables are working cables only). Below are ether channel details.
View 9 Replies
View Related
Jan 10, 2012
running ether-channel mode on. I have a 3120G Blade Switch (stacked). The blade switch connects to the blade servers (internal). Gi1 /0/1 connects to eth0 and gi2/0/1 connects to eth1 on the blade server. [code]
The issue is when is shutdown eth0 on the server, the corresponding interface on the switch (gi1/0/1) does not go down, show up and running.
View 3 Replies
View Related
Dec 1, 2011
I came across a Catalyst 6509 switch configuration and have noticed some strange thing on the ether channel configuration side, it appears that it have interface port-channel 2 and port-channel 2A, what was that mean? its the ether channel not forming and joined together?
What wrong with the below configuration that cause it to automatic created another port-channel (2A) interface in this case?
[code]...
View 3 Replies
View Related
May 19, 2013
We were going to create a 2 port, layer 3 etherchannel between a 1002 router and a 3750X layer 3 core switch. We wanted to create bunled link between them but, now we are going to be putting a Riverbed device between the router and core switch. Because of this, would it be best to abandon the idea of creating a layer 3 etherchannel and just have 2 links from the router and core switch and have traffic load balance between the 2 links?The Riverbed will have 2 connections into it from the Core switch and 2 connections into it from the 1002 router. I was hoping to keep the layer 3 etherchannel but, do you think it would be best to create 2, /29 nets and have the router/Riverbed and Core Switch/Riverbed load balance.
View 5 Replies
View Related
Feb 22, 2012
i want to realize a 20gb ring stp with 6 3750x stacked by 2. I want to install 2 3750x stacked configured in hsrp mode with other 2 3750 stacked. These 2 different stack are interconnected by a cross-stack ether channel 20Gb fiber. On the other side of the room i want to create a new stack with 2 3750x with cross-stack ether channel 20gb connected with the previous 2 stacks. So, in total 3 different cross-stack ether channel 20Gb stacks interconnected creating a ring stp of 20 Gb.
View 4 Replies
View Related
Aug 6, 2012
I try to connect a cisco blade switch 3020 to Nexus 2232 with etherchannel, but when I connect the second link a obtain flapping on vlans. [code] why the vlans are flapping ? it's something wrong on the config ? [code]
View 7 Replies
View Related
Oct 8, 2012
I have 4 cisco 2960 switches to which many users are connected. No vlans are the only default vlan 1 is there. Now I want to make ether channel on switch 1 whcih has 24 fast etherenet ports. Can I make port 1- 8 as one ether channel which are connected to users or i can only make ethere channel of ports that are connectd to other switchs. If I can, how the other switchs will comnicate with the switch ports bundalled in the ether channel in switch 1.
View 6 Replies
View Related
Sep 26, 2012
I came across this Multichassis EtherChannel Features when read about information from Cisco Smart Business Architecture.After checking further, knowing that Cataly stwitch 6500 supports this feature.provide information that beside Catalyst 6500, is there any other model of Catalyst switch can support this feature?
View 4 Replies
View Related
Sep 24, 2012
A site that i am responsible for has the following equipment installed:
2 x 3750G Switches configured as a stack using Stackwise - Collapsed Core/Distribution Layer
5 x 2960G Switches as Access Layer switches
WAN connections into the Core/Distribution Layer are all Gigabit Ethernet over Fibre.This is a dedicated CCTV Network with 50 Cameras all streaming video into the Core (decoders connected to access switches)Each 2960G has 2 links to the Core/Distribution 3750G Switches, 1 to each switch - Gigabit.I'm running rapid-pvst on all switches, so spanning tree is blocking one of the ports and effectively halving the 2 gig bandwidth. Next year our customer is going to add in a further 50 - 60 cameras.After monitoring the current loading on the ports in use, we have suggested to the customer that the 2 connections to each should be Ether-channeled together. [code]
First interface takes commands no problem, keep getting the message that etherchannel cannot be configured across different switches in a stack when i try to put the second interface commands on.
View 8 Replies
View Related
May 15, 2012
we need to install a line cards (WS-X4548-GB-RJ45, chassis WS-C4510R-E), on a chassis Ws-6504-E.where I can find information about compatibility?
View 2 Replies
View Related
Dec 25, 2012
I have trunk etherchannel ports 47,48 which both have Vlans allowed on trunk 70,71. Everything works pretty fine. Now I am trying to add a new VLAN 72 to these ports.
conf t
interface FastEthernet0/47
switchport trunk allowed vlan add 72
exit
exit
So far so good. But when making the same command for port FastEthernet0/48 my switch stuck.
View 8 Replies
View Related
May 3, 2012
I know there are some line cards on the 6500 that do not play well with each other when trying to setup an etherchannel using two different line cards on the same chassis. I always thought it was line cards of different type, i.e. 6400 with a 6700 but these two line cards are exactly the same model with the same code level.
1) Are the error messages below from this incompatibility between line cards and etherchannel creation?
2) How to fix if the answer to #1 is yes?
3) What line cards work with which for etherchannel creation?
View 11 Replies
View Related
Jan 17, 2013
Is it possible to configure a cross stack etherchannel between 2 SG500 (in stack) and 1 SG200/SG300?
View 13 Replies
View Related
Jun 18, 2011
I have already raised this discussion on "LAN, Switching and Routing" group. But I guess this is the right group for my queries. So I am sending my queries in this group again.
We are using CSS 11503 with one 16FE line card. We have connected 3 servers with redundant link. So FE1-2 in Server1, FE 3-4 in Server2 and FE5-6 in Server3. Our system team has configured APA in their servers as they are using HP-Ux.
1) Do we need to do any configuration at line card.
2) Do we need to do ether-channel at loadbalancer end. if yes, can you share me any cisco doc on how to do it.
View 1 Replies
View Related
Feb 26, 2012
I have a client that that is installing a new network. They have requested the use of an CISCO891W-AGN-A-K9 mostly to be consistent with upgrades perfomed at other sites. I agree with the use of this router, so that's OK. The issue is that they have requested that I use the integrated PoE available on this model. I'm also OK with this as it will make a much neater installation. However, I can't seem to find much information on how to get the integrated PoE. I need clarification as to whether I can get a kit to upgrade this router. I generally purchase from sites like newegg or cdw (I'm an independent contractor) and I can't seem to find one with it. I have found some information on 800-IL-PM-4 and 800-ILPM-4 (who could confuse those ). Are they the same or different? Which one is the correct one and does it include the AC power adapter and can if be retro'ed into a router without the PoE?
View 2 Replies
View Related
Mar 22, 2012
I believe I have the steps done at the IOS to config the WAN port for SSH, but I still can't connect to it. I have "logging console 7" on so I am able to see that the router is dropping my TCP session requests. I figure this is just the built-in zone-based firewall at work.
Is there a very straightforward process, via the IOS, to allow SSH inbound on the WAN port? I'm not very familiar with the IOS other than basics so while I know how to do things like "transport input ssh" and "login local" and such on the vty 0 4 line, I have no idea whatsoever on what I should do with the firewall stuff. I believce the WAN interface is already a member of the outside zone though so I imagine one just has to somehow include ssh (preferably on a non-standard port) in the exceptions on the firewall somehow.
I have been poking around for a step-by-step IOS guide for this but only find info on configuring SSH itself but not how to open the firewall to allow the connection for it through.
View 11 Replies
View Related
Sep 24, 2012
I am trying to allow RDP through my 891w.I have tried a few different yjing to no avail. [code]
View 23 Replies
View Related
Feb 21, 2013
I have an 891w as my edge device for my home office. I have a VLAN for family use (wired and wireless) that routes out to the internet just fine. I have a second VLAN assigned to a VPN tunnel that backhauls traffic to my corporate network (wired and wireless) and all of the traffic gets to the corporate network fine when I am on that VLAN.
However, while I am on the VPN VLAN, no traffic gets to the internet. I believe it is because I have the gateway of last resort (0.0.0.0) set to the WAN IP address provided by my ISP, so DNS is resolving against corporate, but because there is no specific route, it is trying to dump the traffic back out the WAN without traversing the VPN tunnel.
View 4 Replies
View Related
Nov 6, 2011
I'm new to using Cisco Config Professional Express but a lot of things are just "off" with this utility. But my problem for this post is specifically the 891W's internal access point, or initial access to it.
My situation is that I have some 891W's. It's my first time working with them, as well as with CCP Express (2.5). After isolating the router and my PC to their own network, using the IP my PC got via DHCP frmo the router I opened a web broswer and connected to the router. The initiial configuration wizard came up and I went through the various screens. One of those screens had basic config info for the internal wireless AP which I provided. Somewhere in that screen it asked for a Hostname for the AP, and a password. It doesn't askfor a username though. To ensure I wouldn't run into confision, I made sure to set every password I ever get asked to configure as the same thing so the AP's password was also the same.
However after I finish with the wizard, the java-based CCP Express begins prompting me for first the main router credentials which I provide and it gets the router config, then it prompts mefor the username/password for the Access Point. First of all, the initial config wizard had never asked me for the username for the access point, only the hostname, and the password. I had assumed it was just going to use the main router username, or perhaps a blank username.
In any case, nothing I type ever works. I've used cisco/cisco, or a blank username with my new password, or the same username as the main router with the password ---- nothing. This is now the 4th time I have completely Reset the router to factory defaults and while I am learning the use of CCP Express through repetition, I'd also like to get this thing configured and out the door so my customer can use it.
View 3 Replies
View Related
Feb 9, 2012
I am trying to configure the FE8 (WAN port) to connect to the Internet. We're swtiching ISP'ssoon so this router was set up at my office and has since been deployed at the client site. So far it is just plugged in and powered, with a console cable attached but no LAN cabling since this router will replace an existing one using the same addressing (except the WAN settings of course). So for now I am just focused on working on the WAN side since I have the ISP's cable modem attached . I had intiially used CP Express to config the wan port with an IP and mask and the various port forwarding options I intend to use. Now, connected via console cable, I tried pinging the IP of the wan port, which works. Beyond that, can't ping anyting (8.8.8.8 - a Google IP), also can't resovle any DNS names which makes sense with no apparent connectivity. Likely my config is just imcomplete. Nowhere in sh run do I see a Default Gateway, yet this ISP did specify one so I assume I need to enter it. Not sure what's the right way - I get confusing results on searches telling me either to use ip default-gateway or ip default-network. I want to think that it's as simple as entering in the IP but so far I've learned with the IOS that you never do anythign without knowing all the possible implications, which I don't. Also while I am at it, I don't know what I should have for DNS entries. This router will not be a DNS server for any internal systems that function will be managed by the two Windows 2008 R2 DNS machines. The ISP has also provided two IP's for their DNS servers. I thought it would be a simple matter of just adding two entrires via ip name-server command, which I did. So now I have four entries, first the two internal servers (inaccessible currently due to no LAN cabing to this router), and the two ISP servers. Can't ping those either, but again there's no default gateway.
View 39 Replies
View Related
May 27, 2012
I'm working with some 891W's that have the internal 800-series AP. I have this router set up initially using Cisco Config Express, then, using Cisco Config Professional 2.5 I set up the firewall and other featuress that CCE doesn't do. Overall this is a very simple router, meant to be a small business Internet gateway device but is currently in my lab.
The intended WLAN setup is very simple. One SSID, with broadcast enabled, using WPA2-Personal. Auth: open Encryption is both TKIP and AES-CCM.
However no matter what I do I cannot get thhis thing to broadcast . In the past I had sometimes run into issues where if I had more than one AP running independently it would cause a channel conflict and one or both would cancel each other's radio, so I disabled all other AP's in my vicinity.
Also I've had issues in the past where f I enabled both TKIP and AES, sometimes clients can't find the AP as a result. My solution had been to disable one of them leaving just the other - no change here however.
Via the IOS, ssid config shows mbssid guest-mode which I believce is default.
Interestingly, if I do the following:
ap# Config t
ap(config)# dot11 ssid <myssid>
ap(config - ssid)#guest-mode
end
I end up with both "guest-mode" and "mbssid guest-mode" in the sh run for the AP, and voila, my AP broadcasts the SSID. However clients end up joining without any security at all, no prompts for pre-shared key or anything.
View 7 Replies
View Related
Jan 26, 2012
I have an 891W router that requires a firmware update to fix a bug wth the internal AP where all you get when accessing it via the CP Express ("Launch Wireless Application", which is just opening another web browser to your AP) is an Enter button. This issue seems to be common so I found a thread, though for the 881W (but same process) where the fix is to update the AP's firmware.
So I downloaded ap801-rcvk9w8-tar.124-21a.JY.tar from cisco.com, set it up in my tftp server, and at the console ran the following from the router:
Router#service-module wlan-ap 0 session <enter>
This brings me to the AP.
I then type in:
InternalAP#archive download-sw /force-reload /overwrite tftp://192.168.0.71/filename.tar <enter>
It seems to go through the process of re-imaging the fw but the end result now after it is done is that I cannot access the ap at all and the hostname has been screwed up. So now when I go to the AP (via Router#service-module wlan-ap 0 session <enter>), this is what I see:
AP6400.f177.d0ee>
If I type "enable", I get no username prompt but I do get a password prompt, however my pw no longer works. Also the IP address of the AP (192.168.0.2=) is no longe rpingable.
I did save the log of the console session for the (failed??) firmware upgrade process - the only odd thing I recall was that it seemed like it was trying to enter part of the update process commands but instead the router was interpreting them as a DNS lookup or something. Kind of stupid process it seems but anyway I am quite lost. Don't know what it'ssuch a challenge to update firmware.
View 9 Replies
View Related
Oct 12, 2012
I have had trouble to verify the support wireless speed and band that CISCO891W-AGN-A-K9 supports. I saw on a vendor website that it supports a max wireless transmission speed of 54Mbps but this seems low for what is supposed to be the current model wireless router which is supports 802.11n. What the maximum supported wireless speed and whether 5Ghz is supported? Plus I am thinking about purchasing it for my home wireless network (upgrading from an 871W).
View 1 Replies
View Related
Jul 10, 2012
I am trying to research the possiblity of backing up IOS and configurations from an Etherswitch module, and being able to store the files onto the Host Router's flash (3925 ISR). and then being able to recover that IOS and configuration, in case I have to replace the Etherswitch Module.
View 1 Replies
View Related
Jan 6, 2013
I have an 891w that started acting up recently. Radio dot11 0 is reporting its a b radio. When it is actually an n 2.4 radio. Of course that radio is not allowing any clients to connect to it at this time. I have tried updating the firmware to the latest, tried a hardware reset but still a nogo.
sh interface output.
Dot11Radio0 is up, line protocol is down
Hardware is 802.11B Radio, address is 0000.0000.0000 (bia 0000.0000.0000)
MTU 1500 bytes, BW 11000 Kbit/sec, DLY 1000 usec,
[Code].....
View 6 Replies
View Related
Dec 19, 2012
Currently have a pair of 6509 chassis setup with VSS. Only have the Sup and two line cards in each chassis. Would like to replace with a new pair of 6504E chassis. Is it possible to fail one chassis at a time and migrate to the new 6504E?
View 3 Replies
View Related
Aug 30, 2012
I have PAT set up successfully on 6506 chassis - My outside address range is 78.24.112.114 255.255.255.240.Relevant parts of the config below: [code] This works fine but of course is only using the one IP address 78.24.112.114.how I can utilize the other outside addresses available or is this not really necessary? I've browsed through loads of Cisco docs.
View 2 Replies
View Related
Feb 3, 2013
why is not possible to put a WS-X4712-SFP+E - module into an R-E chassis?The module has the same connection to backplane as the WS-X4748-UPOE+E and this one works in a R-E chassis.I know the restriction of Cisco that the 4712 is only supported in 4503-E, 4506-E,4507+E and 4510+E, but why?Are there hardware-restrictions, is the backplane different?
View 2 Replies
View Related
Aug 22, 2012
We are preparing to install a new switching Infrastructure at one of our sites. We have decided that we want to have two separate chassis as a core. My original idea was to purchase 2 - 4500 chassis and install 10Gb and 1GB line cards in each and use STP and HSRP to load balance between the two cores.
We had also contacted a vendor for thier recommendations and they came back with 2 6500 Chassis running VSS. I reviewed what VSS was as I had never heard of it and it looks to me basically to be real close to the same thing as Stacking. I didn't really want to have stacked Cores because I would like to have the flexibility to be able to take one core out and update the software or image, reboot, and such without effecting anything on the network. I can do that with the non-VSS approach but it looks like that would be more of a problem with VSS.
My question is, how to use VSS with the 6500's? How to take one of the VSS pairs off line and not effect normal network operations?
View 7 Replies
View Related
Jan 4, 2012
Configuring a 4507R classic chassis with redundant Sup 6L-E? TAC told me the Supervisor 6LE was only supported on the 4507R+E or 4507R-E chassis but I have found in Cisco documentation several places that indicate that the Sup 6LE is supported in the classic chassis.
View 1 Replies
View Related
Oct 28, 2012
I have a network with several catalyst 2960 switches and one catalyst 3750. I have created two VLAN and set up the proper routing and everything is working fine there. I have a client/server application that used multicast in the initial start up for the client to determine available servers, the issue is one of my clients is on a different VLAN then the server. I am able to route the multicast using MVR as long as both the server and the client are plugged into the 3750 by creating a static route, making the server a source port and the client a receive port. Unfortunately I need the client and the server plugged in to different 2960s. My question is how do I establish multicast routing between the two and perferably do it dynamically (always route multicast traffic from one VLAN to another).
View 2 Replies
View Related
