Cisco Switching/Routing :: Nexus 7010 - Inter-VLAN Routing On Multilayer VPC Environment

Feb 16, 2011

you find attached my network architecture with 2 Nexus 7010 on core layer and 2 Nexus 5020 on distribution layer, each one with 1 N2148T fabric extender switch. PC-A1 and PC-A2 are connected to one N2148T, PC-B1 is connected to the other N2148T. Nexus-7000-1 is HSRP Active for all VLANs, Nexus-7000-2 is HSRP standby. PC-A1 and PC-A2 are connected to VLAN A, PC-B1 is connected to VLAN B. PC-A1 and PC-A2 have the same default gateway correspondent to IP HSRP on VLAN A. It happens that PC-A1 is able to ping PC-B1 while PC-A2 is unable to ping PC-B1. If I issue a traceroute from PC-A2 I see Nexus-7000-2’s physical IP address as the first hop even if Nexus-7000-2 is HSRP standby. After the first hop the traceroute is lost. If I shutdown Port-channel 20 on Nexus-5000-2, PC-A2 starts to ping PC-B1.I can’t understand what’s wrong in this architecture.

View 6 Replies


Cisco Switching/Routing :: Nexus 5010 Support For Inter VLan Routing

Jan 10, 2012

Can nexus 5010 supports inter v lan routing , as there is no core switch and router available in current network.

View 2 Replies View Related

Cisco Switching/Routing :: Nexus 7010 - Unable To Ping Within VLan

Jul 10, 2012

Yesterday I configured the 7010 Nexus switch. I created a VDC and allocated few ports and configured VLAN for testing. After enabling feature interface-​vlan i was allowed to configured L3 interface for the vlan. I assigned ip address and connected few server to check the reachability but it says Destination Host Unreachable.
NX OS Ver : n7000-s1-dk9.5.2.4.bin
Configuration of the VDC below.
feature telnet
feature udld
feature interface-vlan
feature lacp

View 2 Replies View Related

Cisco Switching/Routing :: 2900 - Nexus 7010 Layer 2 VLan 11 Active But Interface Shutdown

Sep 13, 2012

I understand the vlans on the catalyst side of the house on 2900 to 6500 Catalyst switches.
This 7010  running nx-os 5.1(3) I did not setup, but have to manage it.  Hasn't really been a proble till now.
My nexus 7010 has a Layer 2 only vlan 11. It is "Active" but the interface is "shutdown".  Yet, it is passing traffic across the directly connected  ports on the nexus 7010 and to other switches in my network.  Vlan 11 is being set out via VTP to all my switches and things are running fine.
I need to create another L2 only Vlan.  I can't seem to find any docs  that indicate that a Layer2 vlan Interface on nx-os should be in  "shutdown" mode as part of the setup. I do see in the docs where it has  to be set "Active" as part of the process.
Is this the correct way to seutp a L2 only vlan on nex-os? Leave the interface in "shutdown" but make it "Active"?
Mystery Vlan 4 and 6
The mystery deepens.  I have other L2 vlans ,Vlan4&6 that are NOT defined as "Interface Vlan4" in the nexus config, yet it is applied to GigE ports on the nexus and these Vlans 4/6is also being sent out VTP to all switches.  Even weirder is that these vlans have names associated with the numbers.  These are valid Vlans that were configured on the old 6509 before the Nexus was installed.
I have checked all switches, NONE are running in Server mode for VTP, all are in CLIENT. The nexus 7010 is the only device running in VTP Server mode. 

View 2 Replies View Related

Cisco Switching/Routing :: Nexus 7010 / 5510 - Run OSPF As Layer 3 Routing Protocol Between VPC Peer Links

Mar 25, 2012

I have an environment where i have two nexus 7010 switches, along with 2 nexus 5510's. I need to run OSPF as a layer 3 routing protocol between the vpc peer links.  I have 1 link being used as a keep alive link, and 3 other links being used as a VpC link.
1) Is it best to configure a separate Vpc VLAN i.e 1010

2) Is it best to configure a vrf context keep-alive

3) just have the management address as the peer ip's.

View 2 Replies View Related

Cisco Switching/Routing :: 7010 - How To Add Two Nexus 5K In DC

Feb 18, 2013

This is regarding Nexus core switch 7010. We are already running two nexus 7K with ten Nexus 5k. Currently we are going to add two new Nexus 5k in our DC. In the 7K we already running two VDC's.

View 8 Replies View Related

Cisco Switching/Routing :: Does Catalyst 3550 Support Inter Vlan Routing

Jul 24, 2007

Does Catalyst 3550 switch support inter vlan routing ?

View 12 Replies View Related

Cisco Switching/Routing :: Inter VLAN Routing On N5548P Without L3 Daughter Cards

Jun 1, 2013

I have a DC topology based on 2 layers, access and aggregation, based on 2 pairs of N5548Ps, both without L3 Daugher Cards. My intent is to use the aggregation N5K pair as L3 inter VLAN layer, so I configured all the VLAN default GWs there. The 2 layers are interconnected via vPC, in a double-sided vPC topology for some N2Ks and some vSwitches. The point is that, despite connecitivity is working fairly ok, for some applications, like file transfer via either FTP or HTTP, between hosts in different VLANs, the performance is too poor. The file transfer starts ok, but after a while it becomes lower and lower. ICMP is working, but I can see some strange random behaviour, like having some packets taking more that 20 ms (sometimes 40 or more), whilst average is 2 ms.

I read through some articles saying that until you don´t have the L3 license (the one coming with L3 Daughter Cards) you can expect some weird behaviour on L3 level. Is that true?. What can I do apart of purchasing L3 Daughter Cards?. Can I enable L3 Basic license at the moment (I don´t need dynamic routing for now).
Here some excerpts of what I´m saying:
PING results:
10000 packets transmitted, 10000 packets received, 0.00% packet loss
round-trip min/avg/max = 0.809/2.496/57.559 ms
 System version: 5.0(3)N2(1)
License and features on the N5Ks:
switch# sho license usage
Feature                      Ins  Lic   Status Expiry Date Comments
FCOE_NPV_PKG                  No    -   Unused             -
FM_SERVER_PKG                 No    -   Unused             -
ENTERPRISE_PKG                No    -   Unused             -


View 3 Replies View Related

Cisco Switching/Routing :: Inter-VLan Routing On Catalyst 3750 Switch

Dec 17, 2011

I have been looking into this for a while and I can't seem to figure out why my 2nd vlan is not able to connect properly to the net.
My switch has 12 ports where my devices connects directly, they are all on Vlan 1 and they all work perfectly. on Port 12 I have a dlink router that is connected to a cable modem. the dlink router has an Ip address of
I created a second vlan (vlan2) and enabled dhcp relay on it. then I assigned port 9 on the switch to  (vlan2)my laptop which is connected to port 9 seems to get an ip address fine and able to ping only some devices on my network (vlan1) and is not able to go out to the internet.  I think it has to do with the routes. [code]

View 4 Replies View Related

Cisco Switching/Routing :: 5505 Inter-vlan Routing With Multiple Gateways

Feb 15, 2013

We have two Cisco 5505 firewalls connecting to two ISP's . The two internal LAN's on the firewalls are & We also have a Cisco C3560x layer3 switch with vlan interfaces 184.3 & 186.3. We have two DGS-3100 Dlink layer 2 switches connecting our users to the Layer 3. Ip routing is enabled for intervlan communication & I can reach the Switch interfaces & firewall gateways from machines on both on the vlans.We have pbr enabled on the 3560 & users only on the .186 network can get to the internet. The switch is running the ipservices license & the sdm template is "desktop routing" .

Users on the .184 cannot access the internet but we can ping the layer3 interface & the firewall gateway. [code]

View 20 Replies View Related

Cisco Switching/Routing :: 3750 Inter Vlan Routing Configuration

Mar 24, 2013

In 3750 switch,I have configured intervlan routing.I have three vlans Vlan 10,vlan 20,Vlan 30 and I have assigned IP address for that Vlan.In vlan 10,I have connected one systen gigabitethernet 0/1 interface.From my system I am able to ping vlan 10 ip address but I can't able to ping other vlan ip address (vlan 20,vlan 30).Is it possible to up the protocol for all that time.

View 2 Replies View Related

Cisco Switching/Routing :: Inter-VLAN Routing Using 877 And SG300-10 Switch

Feb 5, 2012

I recently set up a small photography business and am trying to get a Cisco 877 and Cisco SG300-10 switch to talk to each other.
What I want is for the Cisco 877 to handle the internet and the SG300-10 to handle the local network,
I have set up 2 vlans in trunk mode on the switch and want vlan2 to manage local traffic and vlan3 to handle the internet.
I have got the 877 connecting to the internet what I dont have, traffic going to vlan2 on the switch from the 877
Look at the running configs for the switch and the router and tell me how to get the vlan on the router to pass traffic to the switch. In a nutshell I am inserting the internet into the switch but am not sure how to progress. I have the c870-advipservicesk9 image file on the router. 

Switch Config
interface  gi2
description connection-to-data-vlan
interface  gi3
description connection-to-internet-vlan
vlan database (code )

View 11 Replies View Related

Cisco Switching/Routing :: ASA 5520 / Preventing Inter VLAN Routing?

Mar 28, 2013

I am working for a large campus network. The network has more than 70 VLANS in a Layer 3 Switch(Catalyst 4503). Customer wants to stop intervlan routing between all vlans except 2 vlans. How will i do that? I have also a Firewall (ASA 5520) & a Router (2811) in up of the switch. Besides this, I have run HSRP in Layer 3 Switches for will i stop intervlan routing between VLANS except 2, with ACL or any other process has?

View 10 Replies View Related

Cisco Switching/Routing :: 6500 / Restricting Inter-VLAN Routing?

May 9, 2013

I'm looking to restrict Inter-VLAN routing through L3 switch (cisco 6500) and wanted to know best possible way to do it. I used VACL and achieved success to some extent, but my config is making clients take up to 5-6 mins to authenticate IP address from the DNS (bootps).My VACL config was as follows:
Subnet to restrict is (VLAN 15)
 STEP 1: Created extended ACL to allow bootpc/bootps through DNS
ip access-list extended EACL_DNS
permit udp any eq bootps any
permit udp any eq bootpc any
STEP 2: Created standard ACLs to allow only relevant subnet, server VLANs & some IPs from other subnets for printers/scanners etc.

ip access-list standard SACL_VLAN_15
permit (the subnet I'm restricting)
permit (server VLANs)
permit (printer in another VLAN which has to have access in VLAN 15)
STEP 3: Created VLAN access list

vlan access-map VACL_15 10
match ip address EACL_DNS
action forward
 vlan access-map VACL_15 20
match ip address SACL_15
action forward
STEP 4: Applying VLAN Access list on VLAN 15 vlan filter VACL_15 vlan-list 15 Though the above works, below is noted:

1. I'm still able to PING (the switch virtual interface) from outside the subnet, which I don't intend to do so. Howeve all cients in the subnet have no connectivity from outside the VLAN 15.
2. As mentioned its taking quiet some time to negotiate with the DNS server at system boot time.

View 3 Replies View Related

Cisco Switching/Routing :: 2821 Inter-Vlan Routing And IP NAT To ISP?

Jun 25, 2012

I have just bought myself a Cisco 2821 ISR.At present in my home I have a Cisco 2621XM. Fast Ethernet 0/0 is connected to a 3524XL as a trunk to provide my LAN with inter-vlan routing. it works great. Fast Ethernet 0/1 is connected to my ISP's cable modem and uses the command "Ip address dhcp" to get an IP and all other info from my ISP.FA 0/1 is Ip nat outside and the FA 0/0 and all sub interface like 0/0.1 .24 .168 etc all ip nat inside.I get intervlan routing and access to the internet via this router.I have this 2821 to replace the 2621XM as I plan to run CME on it and want gigabit routing on my vlans as at the moment on the 2621 routing between vlans it at half duplex or seems to be.I have configured the 2821 to ip nat outside on  gig 0/0 and ip nat inside on gig 0/1 and all of the sub interfaces (same setup as my 2621 but with gig ethernet)I have no access to the internet at all but I can ping and other domain names from the terminal session when I am connected to the 2821 via the console or telnet/SSH. the gig 0/0 has an IP assigned from my ISP too but no other nodes on the network can ping outside.Am I missing something here? the version of IOS is V 15.
My access list goes someting like
access-list 1 permit
access-list 1 permit
access-list 100 permit ip any
access-list 100 permit ip any
 and so on
I still cannot access the internet.....

View 5 Replies View Related

Cisco Switching/Routing :: SG 300-28 How To Prevent Inter VLAN Routing

Mar 18, 2013

I have a SG 300-28 switch with the latest firmware installed running in Layer 3 mode.
I configured this router with 4 VLAN's where VLAN 1 is connected to the network router. All VLAN's call all communitcate with one another. How do I go about configuring VLAN's so that they can only communicate with the router and the internet and not each other?             

View 1 Replies View Related

Cisco Switching/Routing :: Inter-Vlan Routing With 2851

Nov 27, 2012

I have one cisco 3750G-48 switch, one cisco 3560G-PS switch, Cisco UC520, cisco 2851 and cisco wireless access point.i have setup up intervlan routing between the two cisco switches and the uc520 with a total of four VLANS, the problem i'm having is with the 2851 router, I have created a trunk between the 3750 switch and the 2851 router. should I create subinterfaces on the 2851 router for the four vlans by doing gigabieethernet 0/0.1, 0/0.100 and so on or should I create BVI subinterfaces.
reason I ask is I created four vlans on the vtp server switch which is the 3750 and I connected the uc520 to the 3750 switch via a trunk interface and set up vtp client on the uc520, after I setup p the vtp on the uc520 the vlans were automatically created on the uc520 with each vlan having its own BVI interface.
So I am not sure how to configure the 2851 router to interact with the four vlans. also the 2851 router have two hwic 1adsl wics installed which will have two adsl connections coming to set up the 2851.

View 3 Replies View Related

Cisco Switching/Routing :: WS-C2960S Inter VLAN Routing

Dec 9, 2012

I am looking for a reasonable switch but it has do do inter-VLAN Routing. I know I could go with a 3560/3750 with IP Services but I am also thinking the 2960S with IP Base IOS might do?
I have looked up the IP Base IOS and it does list IP Routing but how to actually configure inter-VLAN Routing on a 2960S with IP Base?

View 2 Replies View Related

Cisco Switching/Routing :: Connecting Nexus 7010 VDC With VPC

Jan 29, 2013

In our LAN network design, we have two Nexus 7010 switches on the core connected via vPC. Then LAN access switches are directly connected to the Core Nexus switches  via  regular port channels on the 3750's  and vPC on Nexus. The core Nexus switches will be linked to an existing LAN network and the applications will be progressively migrated from the old to the new network.In this scenario, three VDCs are planned to be configured on the Nexus -  One for the Interconnect (and WAN at a later stage), one for the LAN/local services and one for the building facilities/local services.

View 5 Replies View Related

Cisco Switching/Routing :: Upgrade Nexus 7010 From 4.2(4) To 6.1(1)

Jun 11, 2013

I'm about to perform an upgrade on two Nexus 7010 switches per above. Can I directly upgrade or, do I need to go from version 4 to 5.x and then to 6??
SA7001# dir bootflash:
        518     Jan 10 00:37:51 2008  TBM14107479_136878179.lic
      15830     Jun 06 11:50:11 2013  dcnm-
      16384     Jan 09 23:25:25 2008  lost+found(code)

View 3 Replies View Related

Cisco Switching/Routing :: Logging In Nexus 7010 6.x?

Sep 19, 2012

We recently replaced our core switch from a non-cisco vendor with a Nexus 7010.  With our old core switch, I had the ability to log changes to the ARP table.  So if there was a dhcp conflict or a vMotion event, it would show up in the "show log" output.  I've not found a way to do that with the Nexus switch - or at least no way to view the log.  I have the command: logging level arp 6

View 8 Replies View Related

Cisco Switching/Routing :: Nexus 7010 Dual Sup ISSU

Aug 7, 2012

I have to upgrade a Nexus 7010 with dual Sup engines from 4.2(4) to 5.2 and am hoping it could be an ISSU. We are fine with an outage window.To upgrade from 4.2(4) to 5.2(5) I'll have to do a multi hop upgrade from 4.2(4) - 4.2(6) - 5.2(5) and each hop would take 40-60 I spend 40-60 minutes for each hop, or just do a disruptive upgrade straight from 4.2(4) to 5.2(5)? Like I said, we are fine with an outage window.

View 2 Replies View Related

Cisco Switching/Routing :: Does Nexus 7010 Supports NAT64

May 1, 2012

Does Cisco Nexus 7010 supports NAT64; the image that I am using is :-
BIOS:     version 3.22.0
kickstart: version 5.2(4)
system:   version 5.2(4)
BIOS compile time:       02/20/10
kickstart image file is: bootflash:///n7000-s1-kickstart.5.2.4.bin
kickstart compile time: 12/25/2020 12:00:00 [03/08/2012 03:58:13]
system image file is:   bootflash:///n7000-s1-dk9.5.2.4.bin

View 1 Replies View Related

Cisco Switching/Routing :: Nexus 7010 Module Failure?

Apr 11, 2012

I'm currently getting a Nexus hardware failure at present.
switch %MODULE-2-MOD_DIAG_FAIL: Module 8 reported failure due to DEVICE POST/DIAG FAILURE in device 48

View 1 Replies View Related

Cisco Switching/Routing :: Surges In Nexus 7010 Latency

Dec 2, 2011

I just deployed a nexus 7010 switch at a server farm. after deployment, it was notices that there are surges in latency across the network. The default gateway was then moved to the nexus, with this pinging from an host on the same subnet there is intermitent burst is latency

Ping of about 80ms and sometimes even times out.
To me, this is strange.
NX-OS Version is 5-02a

View 1 Replies View Related

Cisco Switching/Routing :: Creating VPC On Single Nexus 7010?

Jan 6, 2013

I'm looking to see if it is possible to run a vPC between to vDC's on a single 7010?  We have a Production setup that runs dual 7010's with vPC's between the chassis but in our lab we only have a single 7010 with a 32 port 10gig module.  I was thinking that maybe we could create 4 vDC's on the 7010 and run a vPC between the vDC's.

View 2 Replies View Related

Cisco Switching/Routing :: Nexus 7010 NX-OS 5.2 Netflow FPS Information

May 22, 2012

How to get a summary of netflow statistics on NX-OS? On IOS you could do sh ip cache flow which would show what I need? Can't find a similar command on the Nexus Platform.

View 4 Replies View Related

Cisco Switching/Routing :: Nexus 7010 Install New Supervisor

Sep 20, 2012

We will install a new Supervisor Engine in our Nexus 7010.One Supervisor Engine is already installed an 1Year old.So the Problem is that both Supervisor Engines may have different NX-OS version.Could this lead to a problem?Does the installed Supervisor Engine "udate" the newer Supervisor engine?

View 3 Replies View Related

Cisco Switching/Routing :: Vrf With Hsrp In Nexus 7010 Version 6.0

Nov 24, 2012

i have a big problem because i configure a vlans with vrf and HSRP but, when i do "show hsrp brief", dont show this interfaces and, i can ping virtual IP. it seems hsrp dont work.

 interface Vlan405
  description smsc-fwatlas1
  no shutdown
[Code] ....

View 1 Replies View Related

Cisco Switching/Routing :: Management Interface On Nexus 7010?

Apr 28, 2013

We have a couple of Nexus 7010's split into Core and Distribution VDCs. MGMT0 interfaces on each of the Nexus VDC's (including the Admin VDC) are configured with different IP address, but on the same subnet i.e for admin, for Core and for Distribution. The MGMT 0 physical port on each Nexus is connected to a physical gig port on a 3750 X switch, and the 3750X has uplinks back to the Nexus configured for vPC.
When i ssh to the VDC MGMT0 IPs from the 3750X, i can access each of these VDCs without any problems. But if i enable routing on each of these links(OSPF) and advertise it to the WAN, i cannot see these routes advertised and also cannot see any of these routes in the local routing table.Just wondering if i have to enable these links on a VLAN and then advertise it to the WAN..But if this the case, VLANs cannot be created  on the Admin(default VDC).

View 9 Replies View Related

Cisco Switching/Routing :: Nexus 7010 And Connection With EIGRP

Mar 20, 2012

We have, for nearly 4 years, used EIGRP on our 6513 to  make use of two unequal links to our branch offices.  This worked because we could use the variance command and cause EIGRP to insert two routes into the table, one from each carrier.  Thus it was we could balance the load to each one with a ratio similar to the ratio of the bandwidth of Link A to Link B.
We just purchased 2 Nexus 7010's to replace our single 6513 core.After much consternation we have found from our Ciscio SE that the Nexus 6.0.2 software rendition of EIGRP does not support variance. 
Why would Cisco take their own propriatary protocol and then gut it by removing features?  I'm quite ready to send these Nexus boxes back in favor of a newer 6500 series.  MEC doesn't work like it is supposed to and the show-tech runs for over 24 hours without ever finishing (and this we can repeat on both boxes, multiple times).
We've opened a tac case but I just wondered for any work around for the 'variance' command?

View 5 Replies View Related

Cisco Switching/Routing :: Nexus 7010 Radius Authentication

Jan 19, 2013

I am facing issue with nexus 7010 login authentication by radius server. I have two nexus 7010, one of them is working perfectly. Other taking long time to authenticate. If i use local database to login it works perfectly. It works fine also  if i login from console using radius for authentication.

View 1 Replies View Related

Cisco Switching/Routing :: Nexus 7010 - How To Block SSH Access On SVI Interfaces

Jun 4, 2012

I use Nexus 7010 as our layer 3 router.I have ssh feature turned on so I can manage it from the management interface. I just found out that users can use putty to ssh to the local SVI interface of the NEXUS. Although they still need username and password to login but we dont want them even able to bring up the welcome screen.Example, user's IP is : , they can ssh to which is the NX SVI interface.

View 1 Replies View Related

Copyrights 2005-15, All rights reserved