I need to configure the C3560-24TS, QoS control by IP or subnet.i tried to study books and videos many times but still feel i am not well known about QOs...
View 1 Replieshow to configure SLA monitorin for Dual Path default route in Layer 3 switches, like C3560?
View 2 Replies View RelatedI can´t configure speed in a giga port on WS-C3560-24PS-S switch(config-if)#speed ? no negotiate Do not negotiate speed
do you know if the port support speed 100??
because I need to connect with 2955C-12 switch in one port: 100BASE-FX (Multimode Fiber) uplinks, this port its only 100mbps?
and the switch C3750G-12S-E can I configure the ports on 100mbps?
We have a Cisco switch in each office and every now and then the port that has the D-Link Wireless AP (DAP-1522) connected to it goes to err-disable state. Actually sometimes even a regular port that has a cisco phone connected may also go to err-disable state (less often). So I have to telnet into the switch and issue shut and no shut command on that interface to get it back to life, then it works for a few days or weeks until it happens again. Any suitable configuraiton for that interface, that would prevent that from happening or a workaround ?
Here's the info:
Model: cisco WS-C3560-24PS and cisco WS-C3560-48PS
Image:c3560-ipbase-mz.122-35.SE5.bin
This is the log from one switch:
31w5d: %PM-4-ERR_DISABLE: psecure-violation error detected on Fa0/2, putting Fa0/2 in err-disable state
31w5d: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address 74e2.f592.f7f2 on port FastEthernet0/2.
31w5d: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down
And from another, which is almost the same:
5d10h: %PM-4-ERR_DISABLE: psecure-violation error detected on Fa0/3, putting Fa0/3 in err-disable state
5d10h: %PORT_SECURITY-2-PSECURE_VIOLATION: Security violation occurred, caused by MAC address d8a2.5e31.2cf6 on port FastEthernet0/3.
5d10h: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to down
5d10h: %LINK-3-UPDOWN: Interface FastEthernet0/3, changed state to down
Here's the configuration of fe interfaces (they are all alike):
interface FastEthernet0/2
description Voice & Data Combo Port
switchport access vlan 11
switchport mode access
switchport voice vlan 15
[code]....
I have some questions about how to configure my Cisco 1941 with a routed subnet from my ISP to forward them to 1 or more servers in my LAN.1 Routed subnet /29 from my ISP (over a fiber connection).In my LAN I have (at the moment) 3 servers, and about 15 clients.I would like to use the first ip address from the routed subnet for internet traffic from all the clients in the LAN.I would like to use the second ip address from the routed subnet for server1 so that server1 accept some allowed connections and that server1 connects to the internet with the second ip address from the routed subnet
I would like to use the thirth ip address from the routed subnet for server2 so that server2 accept some allowed connections and that server2 connects to the internet with the thirth ip address from the routed subnet.I would like to use the fourth ip address from the routed subnet for server3 so that server3 accept some allowed connections and that server3 connects to the internet with the fourth ip address from the routed subnet.[code]
Have our public IP address space masked on /24 at our Internet Router. The router portion of 3845 connects to Internet, while the internal switch connects to my internal network and seeds it with the public address space. The switch had a port configured no switchport (L3) with an ip address with /24 (ie 67.63.145.1 /24) this connects to internal IPS/IDS then to Firewall which NATs to internal, then packet shaper, web filter etc etc etc. I need to test my ISP speed so I need to "break in" to the link between the switch and the IPS/IDS. I figured I could configure another port on the switch on the 3845 but my problem is the port to my network is routed and is masked on entire /24. I tried to configure a port on VLAN 1 and give myself an available address in the L3 address space and this did not work (figured it would not but gave it a try)
Any way to get two ports configured to use the same subnet while one is a L3 routed port and the other is just part of that layer 3 routed network?
I have the following switch:
#show version
Cisco IOS Software, C3750 Software (C3750-IPSERVICES-M), Version 12.2(52)SE, RELEASE SOFTWARE (fc3)
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Image text-base: 0x01000000, data-base: 0x02C00000
ROM: Bootstrap program is C3750 boot loader
BOOTLDR: C3750 Boot Loader (C3750-HBOOT-M) Version 12.2(44)SE5, RELEASE SOFTWARE (fc1)
[code]...
I have downloaded c3750-ipservicesk9-mz.150-1.SE2.bin and I want to upgrade iOS to this image.
I have a few questions related to this:
1. Is my switch model compatible with this iOS version?
2. Do you recommend the upgrade? Does it bring some notable features?
3. Can I upgrade for free or do I need to buy some license?
4. I also want to upgrade/add the crypto image, can I add crypto for free or some license is required?
5. I have remote access to my switch via the console cable which plugged into machine1. But machine1 is connected to network via the same switch. I am accessing machine1 via SSH, and then the switch via console cable (minicom on CentOS). Is there an upgrade procedure for this kind of situation that also has some fall back (like reboot in X minutes and load the previous image) if the upgrade goes wrong?
I'm troubleshooting interface drops. However the output of the following show commands don't match number of drops. Based on the output, can you find out what is causing the drops? the G1/0/28 is the uplink. Is that just the port got overrun by the traffic?
#show int g1/0/28
GigabitEthernet1/0/28 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet, address is 0019.5667.191c (bia 0019.5667.191c)
[Code].....
We have two switches WS-C2960S-24TS-L running in stack with running IOS c2960s-universalk9-mz.122-55.SE3.We have connected two checkpoint devices on Gi1/0/24 and Gi2/0/24 with a simple configuration:
interface range GigabitEthernet1/0/24, gi2/0/24
switchport access vlan x
switchport mode access
spanning-tree portfast
On the devices log we get the following message:
%SW_MATM-4-MACFLAP_NOTIF: Host 0000.0000.fe21 in vlan x is flapping between port Gi2/0/24 and port Gi1/0/24
The mac-address 0000.0000.fe21 is not found on any checkpoint interface. "Show mac-address int gi1/0/24 or gi2/0/24" does not show the correct mac-address of the checkpoint interface connected to the port, but instead shows 0000.0000.fe21.Is there a bug in the IOS, something wrong with the switch config or does it have something to do with the checkpoint config?
getting CPU utilization around 62%
CPU utilization for five seconds: 54%/6%; one minute: 61%; five minutes: 61%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
35 82081 9642 8512 0.31% 0.21% 0.18% 0 Compute load avg
[Code]....
I have problem with my cisco switch 2970.
Initializing flashfs...
flashfs[1]: 5 files, 1 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 15998976
flashfs[1]: Bytes used: 5935616
[Code]...
I have a got a requirement where a 24 Port Switch should have 4 SFP's and all 4 should be used at a time, So I've chosen " WS-C2960S-24TS-L"
The transeiver should be GLC-LH-SM, so kindly let me no whether I would be able to use all 4 ports at a time or not.
how to reset password on WS-C3560G-24TS?
View 1 Replies View RelatedInter-VLAN applications are slow and same VLAN it is working fine.(i.e.VLAN to VLAN applications and File transfer response was Slow).Switch Model number: WS-C3750G-24TS-S1U
View 3 Replies View RelatedI just received three WS-C2960S-24TS-Land three WS-C3560E-48TD-S switches that i entered the Express Setup on as usual. On two of each type of switch i found the default network that is used to facilitate the Express Setup was 10.0.1.1 and the others used an IP range of 10.0.2.1, i realized this is a small negligible at best difference though i need to provide management with an answer as to why there is a difference between the two and can’t find anything online as to why there is a difference or something that proves there should be a difference. All the documentation I find sounding Express Setup notes that the IP range will be 10.0.1.1 not 10.0.2.1
View 3 Replies View RelatedIs there a way I can downgrade the firmware on a C3750 v2 switch 24TS-S v07 to 12.2(35) SE5. I have added this new switch to an existing stack but the FW is not compatable. I believe the answer is to upgrade the rest but I cannot afford any down time as they are used to run a CCTV securiy network 24/7. I have included details below to assist with my problem. Switch 4 is the one with a version miss match.
LNB-SWI3750-CTR-01#show verCisco IOS Software, C3750 Software (C3750-IPBASE-M), Version 12.2(35)SE5, RELEASE SOFTWARE (fc1)Copyright (c) 1986-2007 by Cisco Systems, Inc.Compiled Thu 19-Jul-07 19:15 by nachenImage text-base: 0x00003000, data-base: 0x01080000
ROM: Bootstrap program is C3750 boot loaderBOOTLDR: C3750 Boot Loader (C3750-HBOOT-M) Version 12.2(25r)SEE4, RELEASE SOFTWARE (fc1)
LNB-SWI3750-CTR-01 uptime is 19 weeks, 3 days, 22 hours, 46 minutesSystem returned to ROM by power-onSystem image file is "flash:c3750-ipbase-mz.122-35.SE5/c3750-ipbase-
[code]....
I have a situation. I am running two-switch 3750-stack and it crashed this morning. IOS version the switches is: "flash:c3750-ipservicesk9-mz.150-1.SE.bin"
SRPRSRGBYA#
Log Buffer (10000 bytes):
3:40.840: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan104, changed state to up
Nov 3 13:13:40.840: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan201, changed state to up
Nov 3 13:13:40.840: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan202, changed state to up
M-1-CRASHED: (SRPRSRGBYA-1)
Nov 3 13:18:13.336: %PLATFORM-1-CRASH(code)
I have a 3560-8PC in which the mgt vlan randomly (twice in one day or 2 weeks later) goes into the down state and will return w/o any interventaion 15-20 minutes later. Int G0/1 is the uplink to a 3750. I dont think its a layer1 issue at this time since i have seen it work just fine for over 2 weeks and drop again. I don't see any errors on the 3750 either.
WS-C3560-8PC 15.0(2)SE C3560-IPBASEK9-M
LOG:
----------------------------------------
.Oct 20 19:34:37.533 EDT: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changeds tate to up
[Code].....
I have C3560 switches in my work environment. I want configure ssh on that switch but the IOS what they have 'c3560e-universal-mz.122-58.SE2' not support. As per advised I was triying to upgrade 'c3560e-universalk9-mz.122-58.SE2" for all my access switches.
I successfully upgraded for two switches.
I have two problems now
01. I upgraded the IOS successfully one Switch but the Poe is not working. What is the reason ?
02. After upgrade the IOS, the out put is as follows
Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 30 WS-C3560E-24PD 12.2(35)SE5 C3560E-UNIVERSAL-M
Cisco#sh boot sys
[Code].....
I am confused about some things regarding the different IOS versions and their compatibility with certain switch hardware. I understand the differences between the IPBASE and IPSERVICES ios but am not quite clear as to how you can tell which ios images will work on which Cisco switch model platforms, other than the fact that some switches are designed only to run the IPBASE images and others have advanced hardware to run the advanced images. For instance, if I have a 3750-24TS-E with an IPBASE ios on it, can I load an IPSERVICES ios that came from say a 3750G-24TS-E1U? whether the ios on one platform can be transferred to another?
View 5 Replies View RelatedGot 2 of these switch stacked and there is some changes that we are going to undertake which will require us to utilize the whole 8 or 4 (2 from each switch) SFP ports. Just need some adivce on which particular fiber modules should I procure. Does this switch support 10GB of SFP ?
View 7 Replies View RelatedDevices are 3750-24TS Switches, software version is 12.2(55)SE6. how to troubleshoot this issue, I have a pair of ports which are not bundling, no matter what. Is the same behavior with LACP or PAgP. In this outputs I have only the PAgP case.
Output is similar to:
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
12 Po12(SD) PAgP Fa1/0/23(I) Fa1/0/24(I)
Configuration on ports is simple:
SW1:
interface FastEthernet1/0/24
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 12 mode desirable
[code]....
We have a stack of 4 Cisco WS-3750G-24TS with Sw Version 12.2(52) SE and giving weird errors:-
-Traceback= 17211C8 16FA4C0 16FA4FC 18625E4 18608D4 286A850 283E6FC 282EDF4 2859BBC 1B2EDA8 1B25878
Oct 17 22:26:48 AEDT: %SNMP-3-CPUHOG: Processing GetBulk of lldpRemEntry.7
Oct 17 22:26:50 AEDT: %SYS-3-CPUHOG: Task is running for (2098)msecs, more than (2000)msecs (8/6),process = SNMP ENGINE.
-Traceback= 172108C 17211CC 16FA4C0 16FA4FC 18625E4 18608D4 286A850 283E6FC 282EDF4 2859BBC 1B2EDA8 1B25878
Oct 17 22:26:51 AEDT: %SNMP-3-CPUHOG: Processing GetBulk of lldpRemEntry.7
Oct 17 22:26:53 AEDT: %SNMP-3-CPUHOG: Processing GetBulk of lldpRemEntry.6
Oct 17 22:26:53 AEDT: %SYS-3-CPUHOG: Task is running for (2097)msecs, more than (2000)msecs (1/1),process = SNMP ENGINE.
What are these errors is this a bug in the IOS
We have the following stack configuration:
Switch Ports Model SW Version SW Image------ ----- ----- ---------- ---------- 1 28 WS-C2960S-24TS-L 12.2(55)SE3 C2960S-UNIVERSALK9-M 2 28 WS-C2960S-24TS-L 12.2(55)SE3 C2960S-UNIVERSALK9-M 3 52 WS-C2960S-48TS-L 12.2(55)SE5 C2960S-UNIVERSALK9-M * 4 52 WS-C2960S-48TS-L 12.2(55)SE5 C2960S-UNIVERSALK9-M
we want to record voip telephone?Presently im using wireshark on a laptop to test the rspan session
Here is how it's configured
CORE_SWITCH is
Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 28 WS-C3750G-24TS 12.2(52)SE C3750-IPBASEK9-M
2 52 WS-C3750G-48TS 12.2(52)SE C3750-IPBASEK9-M
[code]....
Ive created the vlan 33 on my core switch and remote SPAN VLANs 133 Core switch is vtp server so i double checked on all switch and vlan 33 and 133 are present When i listen to conversation with wireshark we are only recoding voice of the one who is answering and we don't hear the other person talking?
I am in a doubt if the 3560-12-PC-S supports OSPF. Datasheet says we need IP Services image. But 3560-12PC doesn’t have the option with IP Services. Then I havigate to [URL] how?
So, any clues whether or not this box can run OSPF?
I have a weird situation with some switches.
Switch .55 can ssh into Switch .57 but cannot ssh into Switch .56.
Switch 56 can ssh into Switch 55 and ssh into Switch 57
Switch 57 can ssh into Switch 55 and ssh into Switch 56
The software on .56 is:
C3560 Software (C3560-IPBASEK9-M), Version 12.2(55)SE3, RELEASE SOFTWARE (fc1)
I noticed on .56, when I do a show ip ssh I get: SSH Enabled - version 1.5. It doesn't say version 1.99 like the others even when I configure version 2. Is this a bug I am running into?
WS-C3750G-24TS-S1U switch stack with high CPU utilization. 3 switches are stacked and using PBR on that. I am attaching the show cpu process as an attachment.The current template is "desktop routing" template.The selected template optimizes the resources in the switch to support this level of features for 8 routed interfaces and 1024 VLANs. [code]
View 0 Replies View Relatedfind out which types of fiber optic that i can connect to three types of switches. the setup that i have that there are:8 access switches (WS-C2960S-24TS-S), in each one there is two SFP connections.2 aggregate switches WS-C3750X-24T-S, in each one there is four SFP connections.and one core switches that has SFP card WS-X4624-SFP-E? Note that the fiber optic that we have coming from filed are multimode.
View 2 Replies View Related#sh run | inc user
!
username USER0 secret 5 $1$passwordusername USER1 privilege 15 secret 5 $1$passwordusername USER2 privilege 15 secret 5 $1$password
!
#sh run | inc aaa
!
aaa new-modelaaa authentication login local_authen localaaa authentication login radius_authen group radius localaaa authorization consoleaaa authorization exec local_author localaaa authorization exec radius_author group radius localaaa session-id common
!
#sh run | begin line vty
!
line vty 0 4access-class 3 inexec-timeout 15 0authorization exec radius_authorlogging synchronouslogin authentication radius_authentransport input sshline vty 5 15!sh verCisco IOS Software, C3560 Software (C3560-IPSERVICESK9-M), Version 12.2(55)SE6, RELEASE SOFTWARE (fc1)
the intent of the above is that management connections will only be accepted via SSH, and all of those will be authenticated via RADIUS, unless it's down, then it will use the local username/pw combinations, most of which are given Privledge level 15. Telnet should never work.SSH works as expected (authenticates via RADIUS), but the problem is that Telnet also works, will ONLY use the local database (never RADIUS), and, for some reason, leaves the users at Privledge level 1, instead of the configured 15.Essentially, it seems that at every point I have told it to do something that isn't the default with regards to telnet, it ignores me.Prior to a recent IOS upgrade, the switch didn't support SSH, so the previous config was Telnet with RADIUS, and that worked fine.
Had a switch die over the weekend, a c3560, per our normal procedure I pulled the hardware put a very basic config on it(vlans, portchannel, uplink ports, ip of management vlan, con and vty security, snmp, enable secret, and hostname). Then I use solarwinds orion to upload a copy of the old config to bring the switch back to the same state as the one that failed. Its a system that has worked for us 3 or 4 times in the past. But this time when the base config was on the box it couldnt ping across the network.I have tried clearing the arp cache and the dynamic mac tables, i verified the routing tables and even removed the 10.1.185.128/27 route and re-added it, saw the routing update go across to the other 65k, tried bouncing the edge switch(i cant bounce the 65k's), took down the po between the edge and 65k.
View 2 Replies View RelatedI have a c3560 switch that has two gig fiber modules in it. I need to uplink fiber to one of these at 100mb. This is because this port will be rate limited to 20mb and 10 percent is the lowest you can go with the rate limiting command. Is there a 100mb fiber module i can insert in the 3560
View 1 Replies View RelatedWe are seeing output drops on a C3560 switchport, this port does not have QoS enabled -- application does not need special qos treatment, as long as packets are not droppd, so I suppose all traffic will share the same queue? then how should I read the output of "show platform port-asic stats drop" which indicates that it is queue 3 weight 2 drop? I am wondering what is the best way to fix this? enable mls QoS and increase queue 3 bandwidth share on this interface or just increase the output queue depth?
switch#sh mls qos interface gi0/1
GigabitEthernet0/1
QoS is disabled. When QoS is enabled, following settings will be applied
trust state: not trusted
[Code]......