Cisco Switching/Routing :: Catalyst 2960 Logical Link Control
Feb 16, 2013
I have 2 devices which need to communicate through Logical Link Control. Each device functions like this: they have a built in network switch that allows their internal components to communicate with TCP/IP which is then encapsulated inside LLC frames and sent out a special port. The LLC frames from each device all come from a single source MAC address and are broadcast out the network. The receiving deivce receives the LLC frames, unencapsulates the data and uses it directly.
Using it this way through a single 2960 (such that device 1 is connected to fa0/2 and device 2 is connected to fa0/23) with its own dedicated VLAN and no other traffic on the switch (all other ports shutdown), the two devices are unable to "connect". Using a SPAN session, I can clearly see them exchanging LLC frames, but if I connect my computer to the internal device switch and try to ping the other device through the LLC encapsulated link, I get anywhere from a 25% to 100% loss with response times between 2ms and 15ms.
When I connect the special ports of each device together directly with a straight through cat-5e cable, they can connect and I can successfully ping through the link with sub-millisecond response times. The same goes if I connect them through an old unmanaged Linksys switch. I have toggled everything on the 2960 I can think of, including STP, CDP, LLDP, storm control, keepalives, IGMP snooping, management interface VLAN1, and QoS. In general, the more of those that I turned off, the faster the ping responses became, but nothing seems to stop the data loss.
We have around a dozen Catalyst 3560 and 2960 switches in a ring topology. We are considering adding storm control to our trunk ports. Up until now we have only used it on edge ports with default values and without error-disable.I am proposing that we also add storm control to trunk ports at a lower level and that we error-disable only the redundant links that make up our loops.
In a storm all links will restrict broadcast which should work accessing remote switches, but the redundant links should errdisable and block the redundant path. It is important that the action line is not applied to links that are not redundant as we could isolate parts of the network. Any reason not to use storm control on trunks?
I have Catalyst 2960 S (WS-C2960S-48FPS-L) Switch. I have plugged in SFP module but still interface is down and line protocol down. Is there any configuration to enable SFP module and make the interface up?
i try to implement layer 2 qos in 2960. when i complete to configure the switch, i want to test the qos.PC1 conect to switch port 1,PC2 conect to switch port 2 . PC1 is source teminal. i use skydata.exe and FTP for the test.
when use the skydata ,the PC2 speed can reach 10mbps.when use the FTP , the PC2 only can reach 1.2mbps. why?
I can use Putty to SSH into my new switch (Directly connected to my laptop with ethernet cable), but I cant log into my switch.
Sent username "admin" admin@192.168.251.1's password: Access denied
It doesnt like my password, but I have only set 1 password (king) on this switch. I've configured 3 other switches with SSH and had no problem. Been trouble shooting for awhile and It'd be great if I could have a 2nd set of eyes take a peek, Also, my running config is attached.
How would I go about stacking 4 Cisco Catalyst 2960-48PST-L switches? The one switch needs to accept a fiber connection from a distribution switch. Do I have to buy flexstack module and cables? If so where does the module go on the switch? If this switch cannot do this set up, any other switch I should look at.
I need to upgrade a Catalyst IOS, but I got a bit confused. The catalyst is currently running "c2960-lanbase-mz.122-35.SE5.bin", but I want to upgrade to "c2960-lanbasek9-mz.122-35.SE5.bin", in order to enable ssh. [code] What are the appropriate steps in order to upgrade to "c2960-lanbasek9-mz. 122- 35. SE5.bin". I have downloaded the tar file (c2960-lanbasek9-tar.122-35.SE5.tar)
1) Do I have to delete the old directory (drwx 192 Mar 1 1993 02:07:21 +02:00 c2960-lanbase-mz.122-35.SE5)? 2) Are these the correct steps to download and extract the IOS? 3) Where will the tar files be extracted? Will an new directory be made or do I have to make one manually?
I have packet loss with QoS configured and I was wondering is it somehow connected with the QoS configured on the switch.The traffic is passing through fa0/19 and gi0/1 interfaces.
I have 4 Catalyst 2960 connected via Etherchannel to each other. If I plug in my notebook in one port, I see the traffic from the neighbor port. So my switch acts like a hub.. I had a look at my MAC table and saw it isn't full.
We are about to share a 10 MBit ISP connection with 2 others companies, and they are going to split the bill up into 3,3 and 4 Mbit, so we where thinking that we could setup a switch before their and ours router and provide them with a static IP from our ISP. But is it possible to set a bandwidth limit on the ports of a Cisco Catalyst 2960-8TC, so that we can set a limit of 3,3 and 4 on 3 ports.
I have a Catalyst 2960-S switch and a pre-standard IP Phone (Cisco 7960). When I connect the phone to the switch the switch recognizes the phone and supplies power. I would like to prevent this behaviour. ie. I would like to disable detection of pre-standard equipment. Is there a command I can issue on the 2960-S to do this? For example, on a switch from a different vendor I can issue the command: no power pre-std-detect to prevent it from detecting the 7960 phone, is there an equivalent command on the Catalyst 2960-S ?
I have two 2960's in this new environment that I am administering. I am receiving a message on one unit (Designate it 2960-2) of %IP-4-DUPADDR: Duplicate address 192.168.168.8 on Vlan1, sourced by 3037.a63e.540. The "sourced by" address is the 2960-1. I do not know how these units were originally set up. How can I determine where the duplicate address is originating from.When I perform an ARP -a the address that corresponds to the 192.168.168.8 is the mac address of the ethersvi interface on the 2960-1. I
I followed the 3-switch Redundant stacking diagram and now when I boot up the stack Switch 2 is acutally Member 3 and Switch 3 is Member 2.
We plan on having Port-Channels spanning across Switch 1 - Master and Switch 2 (Member 3) of identical port types. Switch 3 (Member 2) is going to have 2 10GIG port channel created.
Is there going to be a problem renumbering the stack as they physically sit or should I just configure the devices based on thier logical member numbers.
I have CISCO RPS 600 (PWR-AC-RPS) is it support Catalyst 2960 and 3560 ? and which type of cable require since i have cable 22-18 pin and on my switch require 22-14 pin.
At one of my sites, I have a 100mbit TLS. For this connection to work properly, the port on my end needs to be setup for 100mbit, full duplex. When I connect the TLS to an interface on my Cisco 2821, configured at 100/full, it works perfectly. Now the confusing part, I'm trying to connect the TLS to a Catalyst 2960. I configure the necessary port for 100/full, and get 'notconnect' on that interface. I set the interface to auto/auto, and it negotiates at 100/half and causes collisions and packet loss.
I have a customer with Cisco 7940 and 7960 IP phones that they do not plan to replace. They do want a new LAN and are looking at the Catalyst WS-C2960S-48FPD-L and WS-C2960S-24PD-L as access layer devices.
these switches support the Cisco pre-standard PoE required by the 7940 and 7960 IP phones.
I have a new catalyst 2960,and i want to enable DHCP SNOOPING,but,it doesn't work,the server is stilling offert addresses IP and it's not connected in a trusted port,the schema is very simple:1 switch catalyst 2960 PST-S,1 server dhcp and 1 pc client,the PC and the server are in VLAN 10,DHCP SNOOPING is enabled in all ports and no port is trusted,but the client get addresse IP after retyping ipconfig /release and ipconfig /renew in dos commande.the configuration and the version of the switch are in the file attached.I tested the same configuration in a catalyst C3560-24PS and DHCP SNOOPING work normally,i tested in other catalyst 2960-PST-S,but the same probléme:DHCP SNOOPING without effect,the commands typed is:
we have currently a configuration with 3 bonded (link aggregation) channels, each delivering 1 Gb/s uplink, providing a total of 3 Gb/s uplink. Due to a recent network upgrade, we can now add more channels to the same group in order to have a total of 9 Gb/s uplink, meaning that we should bond toegether 9 channels. When we tried to change the old configuration in order to include six new channels to the bondend group we noticed 2 things: one channel was left in standby (blinking orange led),no increase in the uplink bandwidth semmed to happen,By looking around it looks like the channel group is limited to a maximum of 8 channels [*].
why the QoS deployment causes ports on 2960 switches to drop packets although there is no bandwidth contension? (output bit/second of the interface)packet drops at threshold 1, queue 2 ( queue 3 in config)
We are using Catalyst 2960 switches and are experiencing issues with QoS. After the QoS, we experience a lot of packet drops and it make the network slow. It appears that the slow performance relates to the egress queuing of each port.
Cisco IOS Software, C2960 Software (C2960-LANBASEK9-M), Version 12.2(50)SE5 WS-C2960-48TT-L
switch_06#show inter fa0/1 | in drops|queue|output input flow-control is off, output flow-control is unsupported Last input never, output 00:00:01, output hang never
I have a Catalyst Switch that is been used as a SAN switch providing ISCSI connection for servers.The total output drops of the interfaces connected to the SAN and some connected to the servers keep increasing.
Example below:
SWESAN1-1#sh interfaces gigabitEthernet 0/1 GigabitEthernet0/1 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is ec44.763c.8f01 (bia ec44.763c.8f01)MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, reliability 255/255, txload 1/255, rxload 5/255Encapsulation ARPA, loopback not setKeepalive set (10 sec)Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTXinput flow-control is off, output flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00Last input never, output 00:00:08, output hang neverLast clearing of "show interface" counters 03:25:04Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 78Queueing strategy: fifoOutput queue: 0/40 (size/max)5 minute input rate 22322000 bits/sec, 2171 packets/sec5 minute output rate 5155000 bits/sec, 1487 packets/sec20441503 packets input, 23941254166 bytes, 0 no bufferReceived 0 broadcasts (0 multicasts)0 runts, 0 giants, 0 throttles0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored0 watchdog, 0 multicast, 0 pause input0 input packets with dribble condition detected16323602 packets output, 9608971046 bytes, 0 underruns0 output errors, 0 collisions, 0 interface resets0 babbles, 0 late collision, 0 deferred0 lost carrier, 0 no carrier, 0 PAUSE output0 output buffer failures, 0 output buffers swapped out
I want to configure my switch via console cable, the switch boots up normally, and there are no configurations present on the switch. However, anything I type does not appear on the terminal client. I used several terminal clients (TeraTerm, PuTTY, HyperTerminal), all latest versions as well as different PCs. I even forced the switch to rommon mode, still, anything I type does not appear on the terminal client.
Here's the output of TeraTerm:
Boot Sector Filesystem (bs) installed, fsid: 2 Base ethernet MAC Address: e8:40:40:06:f0:80 Xmodem file system is available. The password-recovery mechanism is enabled. Initializing Flash...
[code]....
After the last line, I can not type any command at all. I encountered this on three 2960 switches that we have here in our laboratory.
We have quite a few 3560 & 2960 on our edge network - what I have been looking at was to access switches via web-interface i.e. web-browser. Only problem with this is it always gives you access on privilige level 15 which is not ideal as not all who we decide to give access to these switches will be admin and allowed to configure these swicthes - In the 3560/2960 data-sheet states:
"Alternatively, a local username and password database can be configured on the switch itself. Fifteen levels of authorization on the switch console and two levels on the Web-based management interface provide the ability to give different levels of configuration capabilities to different administrators"
Where as there is no mention of how to configure these two levels of Web-based management in the configuration guide.
On first floor, I have two stack switches and each stack has got 4 switches. they all are working fine.Now the client would like to add one more stack on the 2nd floor. But the second floor switches are different when compared to the 1st floor switches.
can you have differnt IOS among different stacks. I knew in a stack we need all the switches should have same IOS version. But in between two stacks to communicate do we need same IOS or they can be on differnet IOS?
1st floor switches have 15.0 version and 2nd floor new switches has 12.2.58. Is this ok ?
1st floor switches are 3500 series ( Note: only one one Vlan 20 we are using on the both stack switches and we would like add same Vlan 20 on to the new stack)
2nd floor switches aew 2 catalyst 2960 switches.
Note: on the second floor switches one is 24 port switch and the other one is 48 port switch. so can i make them as a stack?
We have already done cabling from 1st floor to second floor. So no problem with that at all.
I have two Cisco 48 port Catalyst 2960-S series SI. Instead of buying the pricy stack modules can I only use the SFP+cable to connect them as stack? which type of SFP+cable should I buy? do I need any license to use those SFP ports?
I want to configure switch port bandwidth limit for my Catalyst 2960-48, is there any hardware / ios limitation? can I configure it at all 48 switch ports?
