Cisco Switching/Routing :: How ACL Respond On Normal Switch 6500 When Applied On Respective Vlans
Nov 22, 2011
I am confused on how acl's respond on normal cisco switch (eg.6500) when applied on respective vlans. this is my scenario:on a 6506, i have 2 main vlans in question: Vlan 100 ( vendor1 - 172.16.100.0/24 ) & Vlan 200 ( vendor2 - 172.16.200.0/24 ). the requirement is,
- vendor1 should be able to access/ping vendor2 end points
- vendor2 should not be able to access/ping vendor1 end points
Now, if i ping from a host 172.16.100.11 in vlan 100 to another host 172.16.200.21 in vlan 200, will i be able to get a successful response ?
View 4 Replies
ADVERTISEMENT
Dec 21, 2011
how can we upgrade 6500 non modular ios to normal 6500 ios?
View 5 Replies
View Related
Jun 13, 2013
I have 6500 with this STP configuration:
spanning-tree mode rapid-pvst
no spanning-tree vlan 1-4094
I need to enable STP on vlan 100 and vlan 103.
When I do "spanning-tree vlan 100,103 root primary" and then "show spanning-tree".I see that STP is not enable on these vlans (100,103).
I tried to do "no spanning-tree vlan 1-99,101,102,104-4094" and it is not work.
There is a way to enable STP on vlans 100,103 without to do "spanning-tree vlan 1-4094"
View 1 Replies
View Related
Feb 12, 2013
Setting up NTP. Currently the source for NTP within our network is our core 6500.Currently the NTP source for the 6500 are internet based NTP Servers. I would like to configure the 6500 to respond to NTP messages as the NTP Master. However will the 6500's source remain as the internet based NTP Servers?? In other words if the 6500is configured to be NTP Master, where would it get it's time from?
View 5 Replies
View Related
Mar 13, 2013
I have a customer that has a stack of 3750x switches installed in production and now would like to install the powerstack cables. The switches are in production and downtime would like to be avoided. Can you install the powerstack cables with the switches powered up? I would assume you can, but wanted to verify before doing so.
View 4 Replies
View Related
Jul 24, 2012
I have tried to test copy tftp: numerous time with no success. I believe the reason it is failing is my laptop to Ethernet port is in vlan 62 and the tftp process operates in a different IP space.I am using gig 7/1 and configuring my laptop nic for x.x.x.254 mask 255.255.255.0. I can ping from laptop to gateway) and I can ping from the switch to my laptop using ping vrf production x.x.x.254. Can you tell me what vlan I need to set my laptop connection in or if there is something else I need to change to make tftp work on vlan62?Does TFTP only work in vlan1 or can it be changed?
View 2 Replies
View Related
Apr 24, 2012
I was checking some things on my Cisco 4500 and spot checking some of the ports. Using CNA it says it is at 10. The web browser to the switch says Full-duplex, 1000Mb/s, link type is auto, media type is 10/100/1000-TX on port 6i/18 The CNA says, so what would cause the difference?
View 3 Replies
View Related
Nov 2, 2011
3945 is running c3900e-universalk9-mz.SPA.151-4.M2
3560e is running c3560e-universalk9-mz.150-1.SE
I've got brand new 3945's with onboard 16-port 3560e switches. On the first power up I see that there are several new vlans added that appear to be default vlans..
vlan 2 name fst2
vlan 3 name fst3
vlan 4 name fst4
vlan 5 name fst5
vlan 6 name fst6
vlan 20 name VLAN0020
vlan 21 name VLAN0021
vlan 22 name VLAN0022
vlan 23 name VLAN0023
vlan 99 name VLAN0099
I deleted the vlan.dat and reloaded the switch but these vlans come back. What these vlans are intended for and is there a better way to get rid of them? What does "fst" stand for?
View 4 Replies
View Related
Oct 14, 2012
I am using a catalyst 2970 switch for 2 vlans. Corporate data and a separate VLAN for backups. What I want to do is create an LACP etherchannel to the switch and also trunk these ports so the server is part of both VLANS.Due to fact that some of these servers are on totally separated networks, they really shouldn't be able to talk to the backup server. Creating the VLAN for backups works to achieve this. I plan to create inbound ACLs on each port to allow only the ports and IPs for the backup network and allow everything we need for corporate data.I read somewhere that you can't have ACLs on an etherchannel and I just want to get it all straightened out. I notice I can't add an access group to the port-channel itself but I can on the port- channel member ports. Is this all I need to do or does this not work?
View 1 Replies
View Related
Feb 17, 2013
I am trying to guarantee 100mbps for a vlan across a gig link. I have done some research and found this command for switches
mls qos srr-queue input priority-queue 2 bandwidth 20
However it doesn't seem to work for my 6500. I know the 6500 uses PFC for QOS but I have no idea how it works. how I can guarantee a vlan 100mbps across a 1gig link?
View 3 Replies
View Related
Nov 8, 2011
I'm trying to setup a port on a catalyst 3750 so it will pass traffic for 2 vlans. It connects to a (watchguard) firewall which I've configured with a primary IP (for vlan 27) and a secondary IP (for vlan 29).
However I can't seem to find the correct commands to enter on the cisco switch port (I've tried a variety).
FYI the current configuration is...
interface FastEthernet1/0/38
description ## Connection to WG vlan27 and vlan 29 ##
switchport trunk encapsulation dot1q
[Code].....
View 8 Replies
View Related
Feb 22, 2012
I have a small cisco switch cluster (seven different 2924, 3524cisco switches) with 3550 as a cluster control which does all the inter vlan routing that works fine.
This cluster is in semi production PBX interop testing lab. This is a closed network without internet access and not connected to our corporate network.However now I have to add this capability so some equipment in the lab can get Microsoft updates over the internet.
I've created a port on a 3550 (fa0/19) and connected it to another network that has internet access. It picked an ip address and when I'm logged in to the 3550 I can ping hosts on the outside network. However I can't ping any hosts on that network from any hosts that are connected to my vlans.I've tried a few different things, but still can't make it to work.
Here is a short version of my 3550 configuration:
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log datetime
no service password-encryption
[code]....
View 13 Replies
View Related
Feb 20, 2013
Is it possible to configure both Catalyst WS-C2960-24PC-L and Switch Cisco SG300-28 to work together for VLANs for voice and data ? If yes, can you give me the resources which I can refer to ?
View 4 Replies
View Related
Feb 13, 2013
I have 2 Chassis 6506-E with sup 720. one of them work properly(Switch1) but another(Switc2) not boot form bootdisk and go to ROMMON mode. I Captured IOS from Switch1 with tftp but I cant Copy this image to switch 2 with tftp.
View 4 Replies
View Related
Feb 20, 2012
We have a network of 30 VLANS and currently all the vlans have access to everything. We are using Cisco 6509 switch for Layer3 routing.I would like to prevent some VLANs accessing the server VLANs. How can I restrict access to the server VLANs?Do i need to implement access-lists on the 6500 switch? or do i need to create VLANS on the firewall so that all traffic i filtered ?
View 9 Replies
View Related
Oct 14, 2012
I have a routed interface on a Cisco 6500 Series switch. I am trying to find a way to adjust the tcp mss.To date I have not yet been able to find a way to accomplish this. Is this just not supported?
View 3 Replies
View Related
Jun 9, 2013
ON switch 6500 i have configured an interface vlan x and applied policies on inboud and outbound directions as per below: [code] But the problem i am facing is that the policy outbound works ok , but the policy inbound doesnt work at all. specifically it doesnt match anything. [code]
View 1 Replies
View Related
May 31, 2012
we need to relocate our core switch 6500 with sup 720 to another bldg
what is the command to gracefully shut it down I mean power off
I was told one can just switch off the power
View 4 Replies
View Related
Aug 27, 2012
I am going to change a running 6500 switch. I am missing a best pratice doc for changing a cisco switch configuration. My question is if a startup-config has an error (due to typo mistake, or due to comands not supported on latest IOS) and I do copy tftp startup-config then what will happen ? I want to make sure when I do "reload" the switch then it should boot normally with the latest startup config !
View 3 Replies
View Related
Apr 3, 2013
I tried many different things to get the accurate answer for my issue. I wanted to know, will i face any connectivity or looping issue in the network if i connect Broacade SAN switch on a cisco 6500 switch.Also need to know to maintain a DATA DOMAIN which SAN switch is better? Cisco or other vendor.
View 2 Replies
View Related
Oct 24, 2012
The switch 6500-E is frequently crashing whenever the pm scp process reach 100% .I got it under the command "remote command switch show proce cpu".How to solve the problem. I opened the TAC and the engineer says to upgrade the image12.2(18) sxf.Is there any other work around that would avoid to reimage the switch and reloading.
View 1 Replies
View Related
Mar 29, 2012
I'm in the process of upgrading the IOS of our 6500 switch and unfortunately, the images were messed up by other users. Here's the output of show redundancy. [code] would i have any issues if I reload this slave supervisor engine to load the SXI8 IOS?
View 5 Replies
View Related
Jul 16, 2012
one of the most widely deployed switches in the world. The "Swiss Army knife of network", can do routing, switching, security, wireless and almost everything that you would want your core switch to do. Remember to use the rating system to let Akshay know if you have received an adequate response.
Akshay might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Network Infrastructure sub-community LAN, Switching and Routing discussion forum shortly after the event. This event lasts through July 27, 2012. Visit this forum often to view responses to your questions and the questions of other community members.
View 22 Replies
View Related
Oct 14, 2012
We have two 6500 core switches and one(primary) of them is running in VTP transparesnt mode and the other (secondary) one is running in VTP client mode. I would like to change the VTP mode of the second switch to transparent mode. Would it cause any issue. I guess i have to create VLANs onto the switch.
View 7 Replies
View Related
Jun 5, 2013
I am planning to migrate the core switch from cisco 3750 to Cisco catalysts 6513 switch. What could be the best approach to minimize the downtime or avoid disrupting the production. I have couple of thoughts, one method is to build the core and then replace the existing core, another option is to build the new switch as the second VTP server and once it recieves all the VTP information then disconnect the old server.
View 6 Replies
View Related
Jun 19, 2012
changing the Spanning-tree mode on a live 6500 running in a VSS mode?If so what are the things to watch out?
View 1 Replies
View Related
Jul 7, 2012
One of my customer had a problem with A/C and the room temperature reached almost 50 C. We came to the site and saved the configuration, took a backup and shutdown the switch.
After the A/C problem is resolved, we tried to power-on the switch .. and we found that it is going to the rommon.
I put "boot" command to boot from the bootdisk, but I am getting the following error:
Code...
I tried to search it, But it is resulting in that most probably it is a hardware failure on the SUP.
View 6 Replies
View Related
Feb 2, 2009
Is there any way to clear a single ARP cache entry on the 6500 switch ?
View 8 Replies
View Related
Jul 8, 2012
I need to connect a 6500 switch with a 4948 switch using 10G optics. On 6500, line card used is WS-X6704-10GE and I am aware that WS-X6704-10GE is a xenpak and 4948 ports are X2. What is the way to make the connection between xenpak and X2 work?
View 3 Replies
View Related
May 18, 2012
The following discussion is based on cisco cat 6500 switches with two power supplies: p1 and p2. . Both power supplies are running in combined mode .Each power supplies is rated with 500 watts max( I just picked 500 watts for simplicity)Combined mode In combined mode, each power supply provides approximately 83% of its capacity to the chassis. This allows for greater utilization of the power supplies and potentially increased PoE densities
1) Let say our specific 6500 switch's configuration requires 1000 watts. We have two power supplies p1 and p2 ,each with rated power of 500 watts. Both power supplies must operate in combined mode. Will power supplies be able to meet the total load power requirement of 1000 watts?
Here is my understanding :The maximum power delivered by each power supplies is 83 percent of its rated power, assuming power supplies are running in combined mode.
So Maximum power delivered by power supplies
= 83% of p1+ 83% of p2
= 83% of 500 + 83% of 500
= 415 +415
=830 watts
Thus the required load of 1000 watts can not be met by our power supplies in combined mode.
2 )Suppose our switch's switch configuration needs 500 watts. Again our power supplies each rated with 500 watts, are configured for combined mode. How much power is being delivered by each power supply? Is it 83 percent of the total load i.e 500 watts?
View 4 Replies
View Related
Apr 22, 2012
I have a switch(6500) with 2 vlans(2 SUBNETS) and from the other side of my network i have 2 terminal servers.
I want to have a VIP in my 6500 switch which i have the 2 vlans and when the first vlan(network) try to connect to the VIP
my switch will forward to first terminal.When the second vlan try to connect to VIP the switch will forward to second terminal.
I'd like the switch to decide in wich terminal server will forwared the packet based on source network.
I am not sure how i can do this???I use VIP with SLB???I use NAT???PBR?
View 4 Replies
View Related
Apr 7, 2012
My problem is that I have a Cisco 300 series small business switch with multiple VLANS each one with an IP address and two or three ports assigned to each VLAN. I have an E3200 wireless router that I want to use to use to share internet on the switch. All of the VLANs are reachable from the other VLANs and I've put a static route on the E3200 so that I can reach the VLANs from a machine connected only to the router. But I can't reach machines on the otherside of the router or get to the internet from the switch.
View 3 Replies
View Related
Mar 27, 2012
I have 2 6504's running HSRP as my core. They are each etherchannel'd to my Datacenter switch (3750 Stack) -- see image below.The problem i a having is with the etherchannel status:
Core1 PO11 status w (waiting)
Core2 PO11 status P(bundled)
DC11 PO48 status P -- but only to Core2 - the interfaces to Core1 are suspended. (See attached configuration documents) None of the devices have any information in the logs. I run this same configuration in my central location, but we are running Nexus 7000's. With the 6500's, do I need to split the port channels on the 3750 to allow them to negotiate the etherchannel? If I split the portchannels, are there any concerns? Should I expect to see the etherchannel status as P (Bundled) or H (Hot-Standby)?
View 2 Replies
View Related
