I am attempting to upgrade from a Cisco3945 to a ASR1002. On my Cisco3945, I have interface associated with VLANs. It appears that with the new IOSX, VLAN configuration has changed. Any config to setup a simple VLAN?
View 5 Repliesi have a simple router on a stick config which is providing dhcp to a customer SSID. however i don't want employees to stay on it and eat the band width since its open. the lease is set to an hour, is there anyway that i could set it so that once your lease expired it can't be renewed for 4 about 8 hours? I am using a cisco 2600 router in this setup.
View 1 Replies View RelatedI would like to create 3 x VLANs on an SG 300-28P and have them completely isolated from each other, for example ports 1 - 12 on VLAN 1, ports 13 - 24 on VLAN 2 and ports 25 - 28 on VLAN 3. No communication between any of the VLANs.
Any simplest way to achieve this?
We need to connect several DSLAMs on the 4900 switch, every DSLAM has 4 VLANs configured (VOIP service, MGMT, ADSL Private, ADSL Public), and sends the traffic for each service tagged with appropriate VLAN id according to the table:
VOIP: 608
MGMT: 594
ADSL PRIVATE: 2900
ADSL PUBLIC: 2930
On the DSLAM side it is very simple configuration, just a normal trunk with 4 VLANs transversing the link. On the 4900 I need to isolate the traffic for ADSL PRIVATE & PUBLIC service so DSLAMs connected to the same switch do not have L2 connectivity between them. For VOIP and MGMT they must communicate with each other. DSLAM acts also as a VOIP GW so it must communicate with other DSLAMs for VOIP service. Also VLAN 200 is configured on ME 4900 for switch management traffic.
This 4900 Switch connects to MPLS PE router, which offers L3 VPN service for VOIP & MGMT service, and L2 VPN for ADSL service (PPPoE traffic to BRAS). Fortunately we have ES+ linecard to support many ethernet features. I tried this config:
1) VOIP, DSLAM-MGMT, MPLS-MGMT configured as normal VLANs
2) ADSL PUBLIC & PRIVATE configured as isolated secondary VLANs, primary VLAN for ADSL PRIVATE is 2008, for PUBLIC 2308
3) Configure DSLAM facing ports on ME 4900 as private-vlan trunks
4) Configure ME 4900 uplink port to MPLS PE as a private-vlan promiscous trunk
5) Configure ethernet services on MPLS PE for each tag that comes from ME 4900 (ES+ cards are awesome, i love them:D )
6) Apply L3 VPN service for VOIP and DSLAM-MGMT, and L2 VPN for ADSL service.
But at least this last command should list on spanning tree forwarding state also the ADSL VLANs or not?
Here is the output of the show interface switchport.
I was trying to configure an SF 300-24 for use in my home and obviously did something dumb. It was working fine. The f/w was updated and I had configured 2 VLANs. VLAN2 was ports 1-6+GE1 for IPTV streaming and VLAN3 was ports 7-24+GE2 and GE3 for the rest of my LAN. I was plugged into GE4 and was configuring the switch with a laptop. GE4 was the only port still on the default VLAN1. I chaged the default VLAN to VLAN3, which forced a reboot and the switch never came back up. Attached is what I see when I connect to the console port: [code]
I can't access to GUI using it's static IP or it's default IP on any port and the console never reaches the point where I can log in. The System light is flashing green but the boot sequence never progresses past what's in the screen shot. I tried to do a hard reset using the recessed button on the front panel but it does not seem to have any effect, no matter how long I hold it down.
I am seeing Native VLAN mismatch errors on my 6506 switches as below [code] Will it(VTP Version mismatch) be the issue for getting the VLAN Mismatch Error ?
View 10 Replies View Relatedi have a Catalyst 2960S since 2 days. I am a new user, i like to configure the switch! my first problem is: i have 2 v LAN vlan1/24 and vlan200/24. I'd like to config port1 to be tagged on the 2 v LAN i know from hp port must be tagged. how can i config port 1 to be tagged on vlan1 and vlan200? and port 2 to be untagged in vlan1 and untagged in vlan200?
View 12 Replies View Relatedmy environment:
IE-3000-8TC industry-switch
ios: ies-ipservicesk9-mz.150-2.SE2
if i do
vlan 12
name NextVLAN
state active
in putty, everything is ok. but if i set this lines in a config-file and use them by config net or copy tftp: running-config, then this commands are completely ignored.how to setup VLAN so that this are funktional. i dont need a "interface vlan xx"! in addition manually configured vlan are shown in show vlan command but there are no entries inside a sh running-config output even i user show running-config all.
I`m trying to get a simple VRF and routing setup going.The "routers" are Cisco C3750G-12S-E.What I want to do is separate the management network form all else.The public network is illustrated with private IP ranges, these are really public ranges.
I think the best way to solve this will be using VRF for management, and regular routing for public network, right? Putting the management network in it`s own VRF.
If i connected the latop to brand new out of the box ASA 5505 through consloe cable and i have a config file on this laptop from other ASA5505, is there anyway i can upload that config file into startup-config of this new ASA5505 through console cable, without using TFTP or FTP?
View 5 Replies View RelatedI have a power conncet 6224 with routing enabled with several VLANs setup.VLAN Database: 6,8,10,90-254VLAN 6 is our management vlan10 is for our core network services (DNS, Domain, Exchange etc)90-254 are isolated vlans.What I need to accomplish is to prevent vlans 90-254 from communicating with each other and only allow communication to VLAN 10 and the internet. All internet firewall work will be handled by our Sonicwall. [code]
View 1 Replies View RelatedI'm trying to set up per vlan routing on a 3560G switch but it's not performing as I would expect. I've got a server on the 109 vlan with a 10.1.9.100 address and a default gateway of 10.1.9.1 this address is an HSRP gateway and currently resides on 10.1.9.7. When I traceroute through to my user PC on the internal network it receives a response from 10.1.9.7 However, it is then denied by an ACL on the internal firewall which has been applied to interface Eth0/0. It should arrive at the firewall on Eth0/2.109 as it has the 10.1.9.4 address.
My goal here is to route traffic on the 101 vlan to a seperate interface on the internal firewall from 109 vlan traffic. I'm either doing something wrong or these routing commands aren't designed to work in the way I'm expecting (I couldn't find any documentation on the ip route command where it is followed by different gateways for different vlans)
interface GigabitEthernet0/12
description Internal-FW Eth0/2
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 109
switchport mode trunk(Code )
have some problems with setting up jobs for the backup running config on my switches. Have RW and RO contact with everyone and can change the config in editor, but do not get config.txt
View 1 Replies View RelatedI am trying to set up VLAN on my cisco router, where do i check for the setting for creating a VLAN on my Wireless AP. Is it possible on this model.
View 1 Replies View RelatedI have a Cisco 3845 Integrated Service Router and I have installed a Service Module. I want to use the integrated Gigabit ports as switch ports and put ports in the Service Module and Gigabit port in a VLAN.
Is this possible? can it be done by setting internal Gigabit link as trunk and how? Below is the somewhat the setup i am looking for
Service module
fa0/1 |
fa0/2 | Vlan X
fa0/3 |
[Code]....
I have 2 SG300 switches, in layer3 mode, lag'd together for high availability, serving 2 Dell R815's and a Dell Equallogic 4100 for virtualisation. I have setup a number of vlan's, network traffic, mgmnt traffic, iScsi, vMotion etc and they seem to work.
However, Equallogic unit suddenly became unavailable to view for managment yet maintained iscsi traffic for the servers ok. After much head scratching, noticed that one of my SG300's had the vlan ports assigned to various vlans had *automagically* changed there assignment, ie tagged changed to excluded, but only for one of the iscsi traffic connections and the mgmnt port, both coming from the Equallogic, the other iscsi continued its assignment fine. The other SG300 hasn't changed. Guaranteee no one has been into change it and no changes have been made to Dell servers or Equallogic.
Q. Is there any circumstance where the switch can change the port setup itself? or is there any external circumstance that would trigger that change either?
This has now occured twice. The setup is running as a test lab, not in production until all setup is complete, then it will replace our existing harware.
I need to setup a vlan between the 6509 and 2621 router. This needs to be a VLAN (200) the runs between the devices that uses DOT1Q trunking. The end result is all the networks (vlans) on the 6509 can talk to the LAN on the 2600 (10.133.22.0 / 23) and visa versa.
Device 1
6509 with CatOS / IOS
Config I did on the MSFC:
Interface Vlan 200
ip address 10.10.10.1 255.255.255.248
[code]....
I am trying to setup a network using Cisco 2960 switches with vlans configured. One vlan will handle video coming from four cameras that are connected to another 2960.
We have four cameras feeeding one port each on a 2960, that 2960 in turn feeds one port on the main 2960 which is the video vlan for that site. From the site it goes back to a Cisco 3750 to be sent over to a Sonicwall firewall. If we connect to the 2960 that the camera are connected to we can see the video, but not on the main site 2960.
see the attached diagram to explain the network. I'm trying to do a "port-to-port" layer 2 connection on an ASR that will bi-directionally bridge a physical interface to a sub-interface. I tried using " connect VLAN200 Gig0/1/0 Gig0/0/3.200 interworking ethernet " but I'm not getting traffic through the connection.
I don't think BDI will work because it requires a Layer 3 point. I have to make this Layer 2 switching.
I'm just getting started with cisco kit so you will have to bare with me.I have a cisco 1841.i have a very wierd issue of routing...i cannot ping and browse through this.
View 3 Replies View RelatedRecently we have upgraded from a cisco 7200 environment to an ASR1002 having to migrate the configs as well.The command "ntp update-calendar" is not accepted in the config migration , any reason why ? doesnt the ASR have an internal hardware clock ?
View 2 Replies View RelatedI need to interface an ASR1002 to an ONS-14454 via multimode fiber The ASR1002 will use the 1000Base SFP-GE-S SFP module in one of the built-in Ethernet ports (in 1 of the four ports) The ONS-14454 will use 10/100/1000Base ONS-SI-GE-SX SFP in the Ethernet expansion blade.
Cisco docs indicate each module is supported in specific ASR and ONS but does not indicate interfacing between the two. If these two modules will communicate without error via multimode fiber?
Is the onboard interfaces on an ASR router (4x on ASAR1002, 6x on ASR1002-X) are fixed gigabit or are they 10/100/1000 ?
I assume the interfaces on the 8port Gigabit SPA module are fixed gigabit speed ports (why otherwise sell a 10/100 8port SPA module also ?) no ?
I need to replace an ADSL modem and have a spare 857W. Can I use this to act as a simple bridge between the ADSL PPPoA connection and the FW WAN port?
[ CISCO 857W ]
ISP - PPPoA - BRIDGE - FW WAN
I have a block of Public IP's so the PPPoA Dialer 0 connection would get x.x.x.185/29 I would like to bridge this directly to the FW WAN port and set that to x.x.x.185/29 with a gateway of x.x.x.186/32.Currently I am using it in router mode with no NAT or FW and am losing a Public IP as I need to set the FW WAN as x.x.x.186 with a GW of x.x.x.185 I am setting BVI 1 as x.x.x.185/29 and Dialer0 as IP Unnumbered BVI 1.
A few days ago this was working properly, but I must have changed some things that adjusted some settings because I am unable to ping between 2 devices that are on the same switch, in the same network, in the same VLAN. I am able to ping to the VLAN interface on the switch.
This is my configuration (Catalyst 3560 Layer 3 switch):
ALGSWI01#show vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi0/3, Gi0/4, Gi0/7, Gi0/9
[Code].....
Any simple way of opening ports on a 1841 router.I have a working config for internet traffic. I am looking to boot up my Windows Server and Run IIS.
View 1 Replies View RelatedFor a simple ether channel to work between 2 switches I have configured ports 1 and 2 on both cisco 2960 switches with the channel-group option like this:
interface FastEthernet0/1
channel-group 1 mode on
!
interface FastEthernet0/2
channel-group 1 mode on
I thought the port-channel 1 would get automatically created but it didn't, should it? And under the port-channel interface should I set this as a trunk or do I do this on the 2 fa interfaces on each switch?
I would like to setup a simple VPN on a small network, nothing special, just to provide access to some simple resources on the network from anywhere. Since I'm not a Cisco expert, I was advised to user a 861 router, but I just can't seem to get the VPN working on this device.
I've placed the router behind a modem and did some basic configuration. Hosts who are connected to the modem (on the Vlan side) can access the internet and can setup a VPN connection to the router. A VPN connection from inside the network is worthless, but I just can't get the VPN working on the FastEthernet4 connection.
Any VPN config for a 861 router for this situation? Or how to configure this device as a VPN server?
I have 2 SG300 switches and all I want is to propagate VLAN info from one to other. I do not have computers with GVRP compliant NICs, so I dont want that auto registeration functionality on access ports. I want VLAN prop via trunks and switchport mode access on access ports just like VTP. I have read on cisco docs that this functionality is provided with GVRP Mode fixed, but there are only 2 modes that I can see on SG300 are Normal and Forbidden. Trunk configured correctly, gvrp is enabled globally and on port, ports are up and functional, tried different combinations of checking and unchecking boxes of dynmic vlan creation and enable registeration on both ends but no joy. When I create a vlan from one, it doesnt propogate to other.
View 1 Replies View RelatedThis is my first time trying to configure a WAP for out network. I have an AP1141 connecting to an SG300-28 switch. The subnet for my WAPs is 10.10. 40.0/ 24. The rest of my internal network is 10.10.10.0/24. There are four other WAPs on the 10.10.40.0/24 network that I did not configure. When I assign an IP address - 10.10.40.7 to my WAP with the gateway as 10.10.40.100 (router), I cannot ping anything. If I assign the WAP an IP address - 10.10.10.192 with the gateway 10.10.10.100 (router), I can ping everything.
View 6 Replies View RelatedBetween our hosting and a customer we have an extended vlan, traveling on a fiber, between two cisco 3560 switches.The thing is, that we want to create one or more vlans inside that extended vlan, in some way if possible?
View 3 Replies View RelatedI have two networks at two sites with a dot1q trunk between the two L3 switches at both sites (no routers involved)
SITE A - Cisco 3750 L3 - VLAN ID 50
10.10.50.0/24
SITE B - Cisco 3750 L3 - VLAN ID 50
10.20.50.0/24
I would like to extend the SITE A VLAN to SITE B so that I can move hosts from SITE A to SITE B without needing to change their IP address but the vlan ID is already in use. Obviously the easy solution is to change the VLAN ID for one or other of the sites but both sites contain hosts that run 24/7. Is there a way to join two VLANs with different IDs together.So for example I create a new VLAN 60 at SITE B and associate it with VLAN 50 at SITE A.
i need to solves this little problem on 2960S lan BASE but i dont know if it is possible.
Uplink port config for gi 1/0/28 is:
switchport mode trunk
switchport trunk alloved vlan 10,11
but on interface gi 1/0/1 i want to have data from vlan 10 tagged as VLAN 20.
At this time i have solved this issue very primitively
I have set up gi 1/0/2 as int mode acces, acces vlan 20 and i have connected gi 1/0/2 with gi 1/0/3 with eth cable. int gi 1/0/3 is switchpor mode acces, switchport acces vlan 10