Any "best practices" or recommendations on how to migrate from a fixed router (3745) to vlan routing on Catalyst 4507 switches in order to minimize the disruption to the network.
View 4 Replies
I need to create several VLans on my switch.After reading the admin guide pdf, i still don't understand how to create any simple VLan.some tutorial or steps (with IE or Mozilla browser) how to create and use VLan, and to connect one VLan to another.For example,i need to create 3 VLans.
First Vlan consist of 5 ports (Vlan Name = Red)
Second Vlan consist of 15 ports (Vlan Name = Green)
Last Vlan consist of the rest of the ports (VLan Name = White)
I have a requirement to monitor all traffic going from the internal LAN to the cloud. The LAN is a layer 2 VLAN which spans multiple Cisco 4507 switched and other smaller switches.
The VLAN has an IP address which the hosts use as the default gateway.
The exit port is on a Cisco 3600X switch connecrted to 4507 #1 via a 10G fiber link. 4507 #1 connects the rest of the LAN. Those switches interconnect via 10G fiber and 1G copper links.
Currently the monitor host is connected to a 1G copper port, configured as a monitor port, on one of the backside 4507s The switch manager says he has the switches configured so that I can see all traffic on the VLAN.
We have a number of 4507s. Most are managed via VLAN 1 address. All have multiple VLANS for traffic control. When I do a show ARP or show IP ARP the command only shows VLAN 1 info. No entries for any of the other VLANS on the switch.
View 2 Replies View RelatedWe are trying to setup a new configuration with 2960S as access switchs and a 4507 as a core switch.I want to protect the management IP VLAN of the swich using vrf on the 4507 so we :
SHUT VLAN 1 on every switch (2960 + 4507)
CREATE A NEW VLAN 289 (management vlan) -> IP network : 10.32.126.192/26
L3 VLAN on every switch
VLAN 289 in the VRF XXX on the 4507
create tunk between the switch and the 4507 :
switch mode trunk allowed vlan 200-230
sw trunk native vlan 289
so with this configuration on the 2960 the vlan 289 is UP/DOWN and UP/UP on the 4507 I can access to the 4507 using the IP in the VLAN 289 but i cannot access to the 2960 behind the 4507 CDP connectivity is ok?
I am tring to configure ssh in cisco 4507.After doing so Ican see ssh connection establish from default vlan but getting failed from other vlan.rectify the ssh configuration so that connection estabnlish from any vlan.
View 1 Replies View RelatedOn a 4507 v12.2(20)EW, the connected subnets which are declared in the ospf instance are not propagated to the MPLS carrier router.Only the static routes which are redistributed in the ospf instance are propagated to the MPLS carrier router.
View 1 Replies View RelatedOur organization currently has a Cisco 4507 acting as our core switch and 2 ASA525 firewalls.
Our existing ISP runs into our 4507. Here is the port config.
interface GigabitEthernet7/1
description ISP-DSL
switchport access vlan 10
[Code].....
We have recently purchased a 5Mbit line with a second ISP and will have the line activated tomorrow. In addition, we recently obtained our AS number through ARIN. How would I configure the second ISP to be used for load balancing/failover?
When I read Nexus 5K install guide , I found the follow :The Cisco Nexus 5596UP switch has the following features: # •48 fixed 1- and 10-Gigabit Ethernet server connection ports on the back of the switch AND The 48 fixed ports support 8-, 4-, 2-, or 1-Gbps Fibre Channel transceivers and 1- or 10-Gigabit Ethernet transceivers. Does these is a conflict ?The 48 fixed port on this switch support only 1- and 10-Gigabit Ethernet or 8-, 4-, 2-, or 1-Gbps Fibre Channel and 1- or 10-Gigabit simultaneously ？
View 2 Replies View RelatedIs the onboard interfaces on an ASR router (4x on ASAR1002, 6x on ASR1002-X) are fixed gigabit or are they 10/100/1000 ?
I assume the interfaces on the 8port Gigabit SPA module are fixed gigabit speed ports (why otherwise sell a 10/100 8port SPA module also ?) no ?
i want to create a trunk between 4507 & 3945E router & route two vlans from router 3945E
4507# vlan 99 & 51
# int vlan 99
# ip add 10.22.100.1/24
#int vlan 51
# ip add 10.22.103.1/24
[code].....
4507 version : IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSAL-M), Version 03.02.00.SG RELEASE SOFTWARE (fc4)
3945E: 15.1(2)T4 what I am missing?
Currently have a pair of 6509 chassis setup with VSS. Only have the Sup and two line cards in each chassis. Would like to replace with a new pair of 6504E chassis. Is it possible to fail one chassis at a time and migrate to the new 6504E?
View 3 Replies View RelatedI try to remplace WLC because the old wlc (7.0) is capacity full.but the AP (3502) do not "registered" to new WLC (7.3),If you have a idea, without make a reset factory to AP.
View 1 Replies View RelatedI try to replace WLC because the old wlc (7.0) is capacity full. but the AP (3502) do not "registered" to new WLC (7.3). Don't want to make a reset factory to AP..
View 3 Replies View RelatedI am little confused about the location of FIB table and adjacency table in both cisco 6500 series and fixed ports switches .In case of 6500 series switches
"Central CEF mode:The CEF FIB and adjacency tables reside on the route processor,and the route processor performs the express forwarding. Use this CEF mode when line cards are not available for CEF switching, or when features are not compatible with distributed CEF."
If line cards do no support CEF, then FIB and adjacency tables are built and are located on route processor( control plane ). Data plane operations are implemented in software and route processor performs those operations.
Some Cisco switches actually use different hardware to control the different planes. For example, the Cisco Catalyst 6500 is a modular switch that uses the Multilayer Switch.Feature Card (MSFC) for control-plane operations, and the supervisor Policy Feature Card (PFC) for the data-plane operations.
Supervisor module has has MSFC and PFC. MSFC implements control plane operation where as PFC implements data plane operation.But the first paragraph says in Central cef mode, both data plane and control plane operations are implemented by route processor. [code]
Do these switches implement the Central mode cef in same way as mentioned above. i.e
"Central CEF mode:The CEF FIB and adjacency tables reside on the route processor and the route processor performs the express forwarding. Use this CEF mode whenline cards are not available for CEF switching, or when features are not compatible with distributed CEF."Or fixed ports switches such as 3750 implement data plane operation in hardware where FIB tabe and adjacency table are maintained on Data plane.
I have a Cisco 2811 with fa 0/0 as my bearer, and a switch module for internal clients.
I have an issue with my fa 0/0 flapping, I want to move that ip configuration to fa 0/1
as this is a branch office I am reliant on the bearer port to give me coms so changing the IP addresses is difficult.
Has any one tried this with a TCL script?
I have an environment of 3 X 3560G of which I have 1st switch-CORE(f0/10) connecting to the VPN router(CE) interface-f0/0. Remaining 2 Cisco 3560's(Access) are connected to Gi0/1 and Gi0/2 on the 1st switch-CORE via gi0/1 . On all three switches I have created multiple VLANs and assigned ports to these VLAN. The switch to switch connection is trunk allowing all VLANs created on all these 3 switches. Now the issue is how I am going to have all these VLANs routed through single interface on the routeri-e f0/0, as all these subnets will communicating to remote site over VPN. What should be default gateway on the 2 Access switches and the CORE switch, also what static route should be on router to reach all subnets(VLANs) created on these 3 switches.
I have read inter-VLAN routing i-e creating sub interfaces on router but dont want to proceed with that and looking for any other way to have my VLANs talk on all three switches and then are accessible to remote site ove VPN?
How do I enable SSH on 4507. I do not see "ip ssh ..." commands config#ip ssh (I do not see "ip ssh " commnd)
Do i need to enable something else?
Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSAL-M), Version 03.02.00.SG RELEASE SOFTWARE (fc4)
I am having a Cisco 4507 switch. The CPU on the switch is running between 50% to 60% constantly. To troubleshoot I collected some logs using debugs & show commands.
debug platform packet all receive buffer
show platform cpu packet buffered
debug platform packet all count
show platform cpu packet statistics
show processes cpu sorted | exc 0.00
show platform health
show platform cpu packet statistics
show platform health output shows the below process crossing the target value.
%CPU %CPU RunTimeMax Priority Average %CPU Total
Target Actual Target Actual Fg Bg 5Sec Min Hour CPU
Stub-JobEventSchedul 10.00 13.41 10 47 100 500 13 13 10 5462:52
K2PortMan Review 3.00 5.35 15 11 100 500 4 4 3 1799:47
What I need to know is, though these process are running in Low Priority, will there be any issue if the CPU goes high due to these process.
Could not find a valid file in BOOT environment variable. BOOT variable can be set from IOS. To find currently setRom Monitor variables, type 'set' command.
Choosing a boot method, type 'confreg' command.rommon 1
>setPS1=rommon ! >RommonVer=15.0(1r)SG5SupportedFeatures=1ConsecPostPassedCnt=2DiagMonitorAction=NormalCONFIG_FILE=bootflash:cat4500e-
[Code].....
4507 Went To Romon During IOS upgrade.
View 3 Replies View RelatedWe will deploy several 4507 with 2xsup7 as a L2 access switches for our office.Does LAN_Base IOS version support SSO or we need purchase IP_Base IOS (L3)?
View 1 Replies View RelatedSSH has been enabled on our one and only 4507 switch for several months and working fine. A few weeks ago the switch had to be reloaded and when it was back online I couldn't SSH to it. When I connected via the console and typed "show ip ssh" it came back saying I needed to generate the keys. Did that and it starting working again. The same switch had to turned off and on the other day due to a power down in the server room and when it came back the same thing happened again!!
The version of IOS is: cat4000-i5k91s-mz.122.20.EW
Is there any option to configure cisco 4507 to genrate log alert when cpu utilization or port utilization reaches above certain percentage.
View 2 Replies View RelatedI need to configure a port channel between two sw 4507R. with port Giga, but those port are in different modules.
Sw-1
interface GigabitEthernet5/48
description **** Conexion Switch-2*****
[Code].....
I have 4507 switch and I got the error of fan sensor which is mention below [code] What the meaning of FAN Sensor both are Bad/off ?
View 4 Replies View RelatedQoS design problem that I have. I have a client that is deploying new 4507 series switches with SUP6Es. The client will be running lots of voice, streaming video, and video conferencing over the LAN and want to base QoS on Cisco Media net recommendations.
I need to design a new QoS policy with focus on the above media services with basic queuing for critical data services. I have read the Media net design guide and the suggested 12-class model will be too complex to start with but I have seen references to start with a 8-class model with the ability to easily migrate to 12-class in the future. The 8-class model meets all of our requirements but I need to understand how this will work with the 4507 queuing model? [URL]
we have a core switch 4507RE at the data center and 2 departments that connect to it via 10Gig fiber using X2-LRM modules. Each department has a 3 switch stack and both locations are identical w.r.t type and setup scenario.the stack comprises of 1 x 3750E and 2 x 3750G . uplink is from X2 port tengig3/0/1 from the 3750E switch.
All of a sudden dept B started facing problem , where the ping would break and throughput comes around 6 - 7 mbps from that dept to the server behind the core switch. we also noted CRC error on both sides preodically.
we replaced the multimode fiber patch cords, re did the splicing , which stopped the CRC errors to appear.now since morning the uplink port on the 3750E (3/0/1) would suddenly be in "down" state with (err-disabled) as the status when i run sh int ten 3/0/1
and i can also see CRC errors and input errors on the same interface.. if i do shut / no shut .. the port is up and active again.. but this has happned 3 times today.the core swith side is still OK and no CRC / input / output errors are seen..
now on the 3750E i have swapped the 10gig module from 3/0/1 to 3/0/2 . the port is still up but i can see 400 CRC and 500 Input errrors.the module is also OK as i had replaced it with dept 1's module.
I am in the process of migrating our existing server farm subnets to our new Nexus server farm and I discovered something I wasn’t expecting. My intention is to migrate our existing legacy server farm which is comprised of for paired 3750 switches off of our core 6509s and onto the Nexus and connect them to the 2232s via multi gig port-channel connections, two port channels per switch stack.
NOTE this is expected to be a temporary move as next year we intend to install additional N2Ks and move servers over to these directly. But to minimize the outage/downtime it will be better to move the subnets and switchs all at once.
These connections would be grouped 1 gig connections as port channels, one from each switch into one of the two 2232s.
Problem I discovered is Cisco does not intend to have switches connected to the Nexus and it immediately disables the ports when they see BPDUs.
I found a config that does work and it does fail over from one port-channel connection to the other but with the limitation that when the original port channel comes back online it does not fail back over to the original one, an acceptable situation for us. But I am wondering if Cisco would support this design if we did experience issues down the road.
The only issue I really see is to get it to work the config is different on the two N5Ks, see the pert config below for the connections. Both are running the same OS
augs1-ba-ar17# sh ver
Cisco Nexus Operating System (NX-OS) Software
TAC support: [URL]
[Code].....
For some unknown reason our NMS cannot validate SNMP string configured on catalyst switch 4507. SNMP version is 2c
snmp-server community Cisco RO
snmp-server community Cisco RW
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps entity
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps config
snmp-server enable traps hsrp
snmp-server enable traps syslog
There is Reach ability between NMS server and switch but snmp string is not validating.
Is there a way I can find out the amount of bandwidth i'm using on a particular interface on a 4507 cisco multi-layer switch? It is a gig port and I have it setup for monitoring (spanning) and I see packets being dropped in the "Total Output Drops" area. To me it looks like it must be exceeding the 1gig limit but I don't know a way to check to make sure. I also have the queueing strategy set to FIFO.
View 3 Replies View RelatedI have a 4507 cisco switch loaded with two sup-modules.. [code]
View 5 Replies View RelatedWe have 4507 distribution switch in our network.I am trying to enable ssh in those switches but seems that ssh command is not supporting. IOS version - cat4500e-universal.SPA.03.03.00.SG.151-1.SG.bin
View 1 Replies View Related
