Cisco Switching/Routing :: C3550 - IP SLA Not Recovering After Failover
Jan 9, 2013
Here iis a diagram of my current lab where I am using IP SLA to automatically switch from ISP 1 to ISP 2 should the connection go down (and vice versa)
My switches are C3550 Layer 3 switches. Both ISP's do work so connectivity is not the problem.
If I shutdown the fa0/19 port on SW1 the SLA kicks in and changes my defualt route out 10.0.1.0 without a problem. And when I do a no shut it comes back to tge 192.168.10.0 netowrk just as we would expect. No problem there.
When I disconnect the ISP 1 cell phone the SLA does switch the defualt route to the 10.0.1.0 netowrk. Okay, just fine so far. Here isthe problem, when i reconnect the cell phone the SLA does not come back to the 192.168.10.0 netowrk without first having to delete the SLA and then recresting it (both switches).
View 8 Replies
ADVERTISEMENT
Jan 14, 2013
I am trying to recover a corrupted ios, from rommon after configure all steps of IP_ADDRESS, TFTP_SERVER and so on, copy files correctly, but after it need router 5 minutes to erase flash, or something else....after it i can not boot from ios loaded as i show below:
!!!!!!!!!!!!!!!!!!!!!!
File reception completed.
Copying file /c2600-advsecurityk9-mz.123-11.YZ2.bin to flash.
Erasing flash at 0x61fc0000
program flash location 0x60ea0000
[code].....
View 1 Replies
View Related
Jan 20, 2012
process of upgrading IOS image in this particular switch to c3550-ipservicesk9-mz.122-44.SE6.bin.
SW1#sh version
Cisco Internetwork Operating System Software
IOS (tm) C3550 Software (C3550-I5Q3L2-M), Version 12.1(11)EA1, RELEASE
[Code]......
View 4 Replies
View Related
Oct 20, 2012
it seems that i made a mistake when typing the BAUD rate of a 2960-Switch in rommon.I can't start the switch now, because there is no image on it (because I deleted it before) and the baud-rate has wrong settings. When connecting via console cable i can't see anything (except some strange hieroglyphics) when starting. I tried all the speeds in teraterm... without success.what can i do, to recover the switch back?
View 8 Replies
View Related
Mar 27, 2012
I have purchased these two switches from ebay as a test lab, I plan to connect them up via a gigastack modulecable and enable ip routing on the c3550 and vlans to talk to each other.
I'm very much a procurve person and really need to get into the cisco switching.I will want to trunklacp between the switches - whats the process is setting that up on cisco switches?
View 1 Replies
View Related
Nov 3, 2011
i have a Ws-C3550-24-Emi switch and i need to upgrade its flash memory to 32Mb. I couldn't find any documents in cisco website about the memory upgrade guideline. Possible to upgrade this switch to 32Mb? If so, what's the max of memory i can upgrade? and the part number for this type of memory?
View 4 Replies
View Related
Jan 14, 2013
We have two switches; a WS-C3550-48 and a WS-C3548-XL connected via fiber uplink ports. Both switches are on the same subnet 192.168.1.0 /24. I would like to change the subnet of the second switch, WS-C3548-XL, to be on 192.168.2.0 /24. Would it be possible to assign 192.168.2.x IP addresses to both uplink ports to achive this?
Or would I need to create a separate VLAN and assign both GigabitEthernet0/1 uplink ports to this VLAN?
View 5 Replies
View Related
Nov 19, 2011
I'm trying to configure my C3550 with fast ethernet port 0/48 assigned to vlan 2 in static access mode and SVI vlan 2 configured as dhcp client.
But I see command ip address dhcp is not available on interface vlan 2:
Cat3550(config-if)#ip ad
Cat3550(config-if)#ip address ?
A.B.C.D IP address
Cat3550(config-if)#ip address
Could it be a problem related to the version running on the equipment (see below the output of sh version command not sure of what EA1 stands for)? I read here [URL] that this command was introduced in version 12.1(2)T
If it is a version problem is there any possibility to download upgraded version for free?
Cat3550>sh ve
Cisco Internetwork Operating System Software
IOS (tm) C3550 Software (C3550-I5Q3L2-M), Version 12.1(20)EA1, RELEASE
[Code].....
View 7 Replies
View Related
Oct 8, 2012
i have a strange problem in my campus network.im trying to run port security on my access switches which they are 3550 with ios c3550-ipservicesk9-mz.122-52.SE when i run the port security with Sticky option, even i put 1000 mac address for just learning on the port but when i issue the switchport port-security command every pc connected to that port loses its connection with network UNTIL i enable dhcp snooping!!! all my client are getting they ip address from DHCP server but strange thing is that how on earth i have to enable DHCP snooping to port security work properly? also when i check the configuration under the interface when dhcp snooping is not yet enabled switch doesnt add any mac address under the interface so no one can work until i enable snooping and then switch adds mac addresses under the interface configuration.is this Bug on this version of IOS?[code]
View 4 Replies
View Related
Jul 4, 2011
I notice that my Cisco switches have 2 fiber GBIC ports on them each and while i have been around networking for quite some time i have never dug that much into fiber. So after some quick googlefu i learned that there is lots of different types and compatibility problems.
The 2 switches i would like to connect are a WS-C3550-12T and a WS-C3550-48-EM.From what i have read these are 1000-base-fx?
View 7 Replies
View Related
Sep 14, 2012
I am trying to configure a loop back interface like so: [URL], on the following device:
C3550 Software (C3550-IPSERVICESK9-M), Version 12.2(50)SE, RELEASE SOFTWARE (fc1on port gig0/1 which is using a 1000Base-SX adapter. This is for troubleshooting purposes and it does not appear to be a feasible option. Is there another way to accomplish in the IOS?
View 1 Replies
View Related
Nov 12, 2012
We have two Cisco 3560E layer 3 switches at the core of our network. The switches are configured as an HSRP pair and the clients on our network point to the HSRP address as their default gateway. So if CORE-A dies, then CORE-B will pick up the address and the default route for the clients will continue to be available.We also need to specify a few static routes on the core switch to allow us to get to specific networks. Is there a way to do this so that the routes failover in the same way that the default gateway does?
View 2 Replies
View Related
Apr 2, 2012
We're in the process of swapping in a new pair of ASA5520s and Catalyst 3750s to support two separate business units. We want Firewall A and Switch A to handle traffic for Org A (VLAN 100). Similarly, firewall B and Switch B should handle traffic for Org B (VLAN200). But we want to be able to fail traffic over in case of firewall or switch failure. Traffic between the two Orgs is being routed at the switch level. [code]
The uplink interface on each switch is currently a routed port with a static address on the uplink subnet. This works fine in a normal state. However, when we fail over one of the firewall contexts to the other chassis, this results in the inability to route internal traffic because the internal interface is now physically connected to a different switch with a different IP port address (obvious in hindsight). The question is, rather than a routed port, what would be the proper way to handle traffic between the switches and firewalls in a failover scenario? If I make the uplink ports into trunks, won't this cause all packets destined for either firewall to hit both both? Seems like that's not the way to go either? [code]
View 0 Replies
View Related
Feb 20, 2012
I am trying to configure ISP failover using IP SLA tracking in Cisco 3900 router(C3900-SPE100/K9).
I want to configure below commands:
R1(config)# ip sla 1
R1(config)# icmp-echo 2.2.2.2 source-interface FastEthernet0/0
R1(config)# timeout 1000
[Code].....
configure IP sla static route tracking in Cisco 3900 series router.
View 3 Replies
View Related
Jul 2, 2012
Currently I have a network that looks like this:
ASA5510 - - - Internet - - - ASA5510
| |
EIGRP EIGRP
| |
2821 -----------MPLS----------1841
BGP
The MPLS connection is currently down, I'm trying to run a failover Site-to-Site VPN over the internet. All of the examples I've read have both connections involved in the failover coming out of one device. Since I'm not working that way, what is going to be the best way to failover? Do I need to set up some sort of IP SLA in the config? Or can I somehow weight routes in EIGRP in a way that the connection will failover from Internet to MPLS when the MPLS goes down and vice versa when the MPLS connection comes back up?
View 2 Replies
View Related
Apr 18, 2012
I've two Cisco 4500 running as core switches for huge and complex network. The two 4500 are going to act as dhcp server for several subnets. The easiest solution would be to split each DHCP pool in two, and assign the first half of the pool to one of the core switch and the second half of the pool to the second core switch. This would be a partial solution since if one of the two fails, the second core switch would not have enough dhcp leases available for all the devices connected for each subnet.For such a reason, I'm wondering if it the 4500 switches support a stateful redundant DHCP servers, so that the two switches can synchronize their DHCP lease tables. If this feature is available, I could define the same pools for both the switches without the risk of having duplicate ip addresses within the network.
View 3 Replies
View Related
Jan 19, 2011
I had a problem with a FWSM of 6500 because the FWSM primary change to standby and after back to active.
View 1 Replies
View Related
Jul 27, 2010
IP SLA configuration fails over but cannot ping the 4.2.2.2 via Site B. Here is the output on Cisco 3750...
SW2#show runBuilding configuration...
Current configuration : 2901 bytes!version 12.2no service padservice timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname SW2!boot-start-markerboot-end-marker!!!!no aaa
[Code].....
View 5 Replies
View Related
Sep 8, 2012
Below is a basic image of the HSRP and backup link setup for our LAN.
The virtual IP 192.168.178.50 resides on the primary router and fails over to the backup router. Internal default gateways for the switches are set to 178.50.
Switch1 is Layer3 and has two static default routes configured as:
ip route 0.0.0.0 0.0.0.0 192.168.179.50 track 1 - - - (interface line-protocol track)
ip route 0.0.0.0 0.0.0.0 192.168.178.50 2
And the primary router has a static route out 179.50 which tracks the interface (route goes down if interface is down), and a backup static route.
ip route (internal LAN) Gi0/1 track 1 - - - (interface line-protocol track)
ip route (internal LAN) Gi0/2 2
Everything works fine. If the primary router fails, Switch1 tears down the route across Vlan179, HSRP fails over the IP to the backup router and routing continues as normal. If the link across Vlan179 fails, the routers tear down the primary routes and again, things continue as normal.
The problem comes when the primary WAN link fails but the router remains up. This means the default route is still across Vlan179. Normally, Id set an IP SLA on Switch1 to track the WAN link BUT Switch1 only has the BASE IOS and the company wont pay for the Advanced IP IOS so I dont have IP SLA as an option.
How can I get the static default route to failover in the event that only the primary WAN link goes down?
View 12 Replies
View Related
Jul 16, 2012
Our servers are hosted at the Main site, site office A access to the Main site for Internet and servers. We are thinking NextG to take over when the link between sites goes down.
To start with, what is the configuration for 3750 at Site A and the Main site:
1) Trunking for both switches
2) Routing
3) the automatic failover configuration for the switch at Site A.
View 1 Replies
View Related
Feb 27, 2013
I have two Cisco ASA 5510s that I would like to configure in an active passive failover setup. The ASAs are at the top of our rack and handle all our routing. We have been only using one ASA unit with one line from our ISP connected to the WAN/outside interface of the ASA. We recently had our ISP setup two lines into our rack using HSRP. I do not know what equipment they are running upstream of our ASAs but it is HSRP so it should be a set of Cisco routers/switches. Originally I thought I could just connect the 2nd new line to our 2nd ASAs WAN/outside port and setup failover using a crossover cable between the ASAs. After doing this config I had problems accessing some of our IPs in the subnet that the HSRP is part of. If I disconnected the 2nd ASAs WAN/outside line everything was fine. After talking with my ISP they explained that I need to connect both of my lines into our L2 network and then from there into the ASAs. Currently below the ASAs I have two Catalyst 3560-X switches. They are connected together with an ISL trunk and ASA-1s inside network connects to switch-1 and ASA-2 to switch-2. One idea was to connect each of the HSRP lines to each of my current switches and then from the switches to the ASA's WAN/outside interface. Finally back down from the ASA's to the switches via the inside interface that we have currently. This kind of seems messy and a poor choice. The other idea is to get two switches that would sit above the ASAs and connect the HSRP lines to them with the switches connected together. They would then connect to the ASAs. I like this idea better but I don't like having to buy two more full switches for this. These switches would only use a couple of ports and only handle just the HSRP ISP lines to the ASAs. Putting in two more 3560-Xs would be a big waste of money and space for this. So I was thinking of using two Cisco SG200-08, 8 port gigabit basic managed switches for this.
View 5 Replies
View Related
Apr 2, 2013
I'm a bit perplexed atm with trying to set up multiple failover routes on a 2821 router. Let me say that I have more experieince in a switched network as routing is seldom required where I work atm. Here's my problem. I have a routing table set up as follows but only the primary routes work. The failover routes will not kick in once the primary route is not there.
ip route 10.32.11.0 255.255.255.0 128.32.8.11
ip route 10.32.11.0 255.255.255.0 128.32.24.11 100
ip route 10.32.12.0 255.255.255.0 128.32.8.12
ip route 10.32.12.0 255.255.255.0 128.32.24.12 100
ip route 10.32.14.0 255.255.255.0 128.32.8.14
ip route 10.32.14.0 255.255.255.0 128.32.24.14 100
Ip addresses are not exact but it gets the point across.
Why the failover routes are not failing over? The failover routes work if I remove the primary route from the config.
View 9 Replies
View Related
Sep 25, 2012
Any have experience on triggered failover on VSS deployment with 1 VS-720-10G-3C in each chassis? I tried using "redundancy force-switchover" but after that the 20G VSL is flapping up & down and cannot be up normally, we got 1 FWSM in each chassis, any configuration need to fit in this kind deployment? BTW, if I shutdown the power source of VSS active chassis, both FWSM & VSS can failover normally.
View 3 Replies
View Related
Apr 29, 2012
I have run into a problem testing static route failovers using ECMP. I have an edge device (SUT) that has 2 NIC interfaces to an internal Loopback. Each NIC is a unique Gi port on an 7609 VLAN tagged with unique IP subnets. The 7600 is configured to route the loopback via the 2 NIC. I am using CEF in the network for other traffic performance testing. Using an external sniffer we can verify that when a ping is initiated externall to the SUT loopback a specific path is selected by the router.
Ping host ------Network-----7609 Gi1/21 (172.16.110.9)-----------SUT Nic1 (172.16.110.10)
| |
| -------Loopback 137.168.68.114/32
| |
7609 Gi2/21 (172.16.110.73)------------SUT Nic2 (172.16.110.74)
[code]....
Now, when the selected path is taken out of server (pulling cable for example), the 7609 is not clearing the routing table to indicate that particular path is down and failing over to the secondary path. Other things I have noticed is the show ip cef still shows both peers as well as the arp table but the interface shows down (show interface gi1/21 for example). I am running 15.1. My understanding is that since the ports are directly connected to the router, the ports should be detected as down and any association of the IP for the down port should removed. This should trigger the static route to update the static route for the end destination to use the second path and traffic should continue.
ROM: System Bootstrap, Version 12.2(17r)S2, RELEASE SOFTWARE (fc1)BOOTLDR: Cisco IOS Software, c7600s72033_rp Software (c7600s72033_rp-ADVENTERPRISEK9-M), Version 15.1(1)S1, RELEASE SOFTWARE (fc1)
View 4 Replies
View Related
Jan 27, 2013
One of our customer has 3 ISP Line, out of which Two are Broadband and One is Leased Line. All 3 ISP interfaces are Etherent.
Now, they want Auto Failover with Load balancing among these 3 ISP lines.
Can we do same implementation in Cisco 1941 Router?? What licenses required in router for same?
View 1 Replies
View Related
Feb 20, 2013
I have a 6500 serious switch that one port (portfast enabled) hold a server .This server has sort of a Cluster configured for high availability .
During primary server failure the failover server acquires the cluster IP address (ie virtual IP).
Cluster IP 192.168.10.1
Primary server =192.168.10.2 Failover server =192.168.10.3
when failover happen , i am unable to learn arp. need to reboot the server for arp . After reboot i am getting different mac address(secondary) with cluster IP.
query:-normal clustering how mac address generating(means logicaly any mac address will be created or LAN card mac address)? Is ther any issue with portfast configuration(with out portfast configuration TCN will generate and max age timeout decrease 15 second from 300second) ?
Note : we checked a scenario same ip address with two system(ipconflit) and removed arp learned system from network and same thing happen we need to clear the arp manually in L3switch
View 3 Replies
View Related
Oct 17, 2012
We have Nexus 5K switches at the aggregation layer and VPC domain has been configured on them. VPC domain includes switches at the access layer as an identity.But when primary switch reboots failover didn,t happened. We are attaching architecture diagram for the setup along with show tech for Nexus 5K both switches.
View 2 Replies
View Related
Feb 7, 2013
I have two ospf processes running on a single 3570 edge router that has a dedicated transport circuit back to our network core. We are adding an additional "transport" only circuit into a new location that is also apart of the second ospf process backbone which will connect back to our core. There will also be a 3750 for this new circuit termination. Currently we are only redistributing ospf process 2 into ospf process 1 (1 = core backbone).
#router ospf 1
#redistribute ospf 2 subnet
We have no need to have ospf process 1 redistributed into the process 2 tables. That being said, when we add an additional transport ciruit, or path back to our core backbone, will this configuration present any issues with the redistribution process and failover.
View 2 Replies
View Related
Feb 24, 2013
I have a two fiber connection from our Central Office(6513) to Remote office (6509). I have a requirement that on the remote office if one of the fiber goes down, the second fiber should work as a failover. I am planning to use SUP720-3B SFP to connect to the CO.
Can I connet one fiber to Sup720-3b G5/1 & another fiber connection to G5/2? or Can I connet one fiber to Sup720-3b G5/1 & another fiber connection to G6/2? I am running EIGRP between sites. Any sample config.
sup-bootflash:s72033-pk9sv-mz.122-18.SXD7b.bin"
View 4 Replies
View Related
Jun 11, 2012
I cleared the flash (disk0) on my ASA and now I'm unable to restore it with an IOS.
When I attempt to load it with an IOS, it appears to load just fine. It even proceeds to restart, but when it boots back up it displays the error "No images in / Error 15: File not found. unable to boot an image" and goes to ROMMON.
My computer's IP is 10.0.0.1. I'm assigning the ASA 10.0.0.254. The image filename is asa724-k8.bin. Here's the output of the environmental variables and the attempted loading of the IOS:
View 4 Replies
View Related
Jun 27, 2011
i have a cisco 3640 router that i have deleted the image without saving and the router is in ROMM mode i wish to use tftp to download the image
View 2 Replies
View Related
Mar 1, 2013
Recovering the password for a protected network.It can be difficult sometimes to recover a password for a home wireless network or a small to large business. There are several ways to recover such sensitive data and I would trust you to recover in all honesty for the sake and security of the business you work for or even your home network.So how do I recover the key if I don't know the gateway login to my router? the end user will likely default their router to recover the sensitive data but after defaulting they then realize that the SSID key has now been wiped out. The problem now is that all other trusted devices will be disconnected and the set up for the router; well that's just common sense, you would need to set up your static all over again (if applies) and your security as well. Use other devices in your house, trusted devices that have already been able to connect. Windows 7 is the protagonist in this role. Windows 7 enables the use of wireless profiles to be saved for faster connections to be made within the broadcasted range of the SSID. Btw SSID is the network name you see appear in your Wireless Manager. I.e.Bat_Cave; Starbucks; Barnes & Noble Wifi etc.
TIP #!
SSID - service set identification; two categories apply to SSID
SSID - basic service set identification
This applies to ad hoc wireless networks that do not have access points
SSID - extended service set identification
An infrastructure wireless network that has an access point; however this term can be used either SSID or eSSID. You will see eSSID with Point to Point; backhauls, switches, subscriber modules or comtrols; there are tons others but I won't stress other device types. Rarely will you connect to an AP, likely the type of service you receive depends on what you connect to, radio equipment like Canopy, Ubiquiti and Motorola are technologies you will see that are wireless based. What you are seeing is coming from a smaller device within your home or office network. If you use a Verizon air card, it's likely connecting to a nearby AP or a nearby radio which is pointing to an AP.Back to reality now, in order to locate profiles used in Windows 7 we head to the location by two categories of view in the control panel:
Small Icons Start > Control Panel > Network and Sharing > Manage Wireless Networks (This can be found in the left navigation within the vertical blue strip.)
Category Start > Control Panel > Network and Internet > Network and Sharing > Manage Wireless Networks (This can be found in the left navigation within the vertical blue strip.)
What you will see here may be a small list or a large list of every network you have connected to since you purchased the notebook. Now certificate trusted networks will appear here however they may not contain a key. The company I work for requires certificate of authentication and then the use of password linked to Active Directory as long as my computer is on the domain controller. Each wireless profile you see appear here has its own configuration and each configuration is bound to the SSID or network name. It's like the title of a book with its own story. You can have two (2) books with the same name but a different story. When I say different story, I am referring to a different encryption standard; cipher and wireless password. You can see below I have two (2) wireless networks with the same name but notice the different settings.
Bat_Cave
Standard: WPA2 Personal
Cipher: TKIP
Key: -pass51-
Bat_Cave
Standard: WPA Personal
Cipher: AES
Key: #Off5id35!
The reason I am showing you two (2) configurations is because when you are recovering a key for a network, you want to make sure the configuration is the same or else the door will always be locked until you correct your errors. The network name we have is Bat_Cave and we need to recover the key for the SSID that has a Cipher of TKIP.Right click the profile name and click properties. This will allow you to change SSID configuration on the notebook ONLY; in case changes have been made to the router or a buddy changed his encryption standard on his home network. Yeah it's easy enough just to remove the profile and reconnect; but that would be too easy, you wouldn't learn anything.Once you are in the properties of the wireless profile, click the [Security Tab] up top and you will see: encryption standard, cipher and the key; and as a plus, a check box to show you what the key is. Show the hidden contents and copy or write down the key.By using other trusted device on your network or business, you can utilize the resources that you have, to recover a password on your home or business network so long you have the permission from your superior and a good heart for positive intent.
View 1 Replies
View Related
Mar 19, 2012
I simply need to recover an embeded access point password.
I have the passwords to the 881-w router, but passwords to the embedded access point I don't have.
What is the recovery process for it, or the password reset process for the embedded access point.
View 8 Replies
View Related
