We have sup engine 6L(WS-X45-SUP6L-E) on two 4506 switch. both switches connected in LAN (HSRP primary and Secondary).
We are going to replace it with Sup7LE. What is the best procedure to get this done with minimal outage?Any other important thing to be noted ? Note : We have Lincence for SUP 7LE
I have the task of replicating the router config on a 3825 router on a 3750 switch. Reason is we are taking out the router and replacing it with the switch to make use of the router for other functions.
Below is main part of the router config:
!
ip source-route
ip cef
!
!
multilink bundle-name authenticated
!
license udi pid CISCO3825 sn FCZxxxxxxx
!
vlan internal allocation policy ascending
[code].....
The 3750 switch I have runs C3750E-UNIVERSALK9-M, Version 12.2(55)SE3 on a LAN BASE license.
The first thing I have done is to order for a license upgrade to IP BASE which would give the support for OSPF routing.I do not see much of an issue with the Interface configs, however, I am not too sure about replicating the routing config on the switch.
My question is can I run the commands as shown for the OSPF routing on the switch? If not, can I get suggestions on how best to set this up on the switch?
I'm due to replace a stack of 2 x 3750 switches very soon with 2 x 3750Gs. These 2 current switches are the VTP server for a small domain. I have put the config on the new switches switches and I made it a server and used the same VTP domain and password etc and got the VLAN info ported over.Now I did this a while back and noticed the switches are in transparent mode with a revision number of 0, I need to set this back to server and swap the switches out but the revision will be lower than the client switches (around rev 200), what do I need to do?
View 7 Replies View RelatedYesterday I've faced a Problem that is not letting me boot with the new IOS.
Actually I'm planning upgrade IOS which supports SSH. As part of plan I've downloaded the new IOS image and uploaded via TFTP server to the switch.
After uploading to the switch. I've verified image and MD5 hash also. Everthing is fine. Then after I set the boot variable for the newly uploaded Image.
When I'm rebooting the Device it is not taking the new IOS. It's booting with the OLD image. Even It's not showing any error message while rebooting (ACTIVITY FILE ATTACHED FOR YOUR REFERENCE) I can't take risk by deleting the old IOS.
We want to permit certain mac addresses on the cat 4506 switch wherein only those mac addresses will get access to network.
Configuration Planned: For testing purpose we have created mac access list on cat 4506 and deny laptop mac address in this access list. The mac access group is applied to the port where the laptop is connected to cat 4506.Even after applying the mac access group on the port, the laptop is able to ping the vlan ip of cat 4506 [code]
laptop with ip address 192.168.10.2/24 connected to port 2/1 is able to ping 192.168.10.1 even after applying the mac access-group
Note-we have tested same configuration on cat 3560 and its working fine. We apply the mac access-group command on interface and clear the arp-cache and we are not able to ping vlan interface ip. The moment we remove the mac access-group,ping starts again.
I have three 4506 switches with vlan 4 set as the management vlan. Switch 1 is connected to switch 2 and switch 3.
I can access switch 1 and 2 using telnet from the management vlan and both switches reply to pings. But from switch 1 or 2 I cannot ping or telnet switch 3. If I plug into switch 3 and I can ping and telnet switch 3 but not switches 1 or 2.
It is as if the management vlan 4 is not being passed to/from switch 1 and 3. The configs for the uplinks from switch 1 to 2 and 3 are the same. And the configs for switches 2 and 3 look the same apart from the port settings.
I have over 40 vlans running all that work fine between all the switches.
I have a supervisor blade, (VS-S720-10G-3C), in a 6513 that is faulty and needs replaced. Do I need to replace the IOS on the new supervisor blade to make sure it is the same as the IOS image that is on the Active supervisor module, or will it synchronize automatically?
In the synchronization process, the active supervisor engine checks the standby supervisor engine run-time image to make sure that it matches its own run-time image. The active supervisor engine checks three conditions:
#
•If it needs to copy its boot image to the standby supervisor engine
#
•If the standby supervisor engine bootstring needs to be changed
#
•If the standby supervisor engine needs to be reset
I was reading the above documentation that mentioned the active supervisor should copy the image if it detects a newly installed standby supervisor blade with a different image, is this correct or was it referring to synchronizing the configuration file?
I have a problem with a newly bought ws-x4548-rj45v+ i've plugged in the module but when i do show modules all , it show as unsupport
Power consumed by backplane : 0 Watts
Mod Ports Card Type Model Serial No.---+-----+--------------------------------------+------------------+-----------1 2 Supervisor IV 1000BaseX (GBIC) WS-X4515 JAE1048GAXQ2 48 10/100/1000BaseT (RJ45) WS-X4448-GB-RJ45 JAB064806WN3 48 10/100/1000BaseT (RJ45) WS-X4448-GB-RJ45 JAB063005DB4 0 Unsupported module WS-X4548-RJ45V+ JAE1545056U
M MAC addresses Hw Fw Sw Status--+--------------------------------+---+------------+----------------+---------1 0007.0e64.f880 to 0007.0e64.f881 5.2 12.2(20r)EW1 12.2(46)SG Ok2 000b.5fa4.da20 to 000b.5fa4.da4f 1.0 Ok3 0009.e844.d760 to 0009.e844.d78f 1.0 Ok4 ccef.4815.9bf0 to ccef.4815.9c1f 2.0 Unsupport
A 4506 Switch reboot several times a day for no reason, I have been trying to upgrade the software . Normal operation of more than ten days , Still there reason to restart . CPU and memory usage is normal
Switch output information below:
HKZ-SSL-4-NAN-4506#sh ver
Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500e-ENTSERVICES-M), Version 12.2(54)SG1, RELEASE SOFTWARE (fc1) [ code].....
My management has tasked me to give them a high level overview of the different switching we can choose for our new building.
This is what I know so far.4 Closets, each closet has 450 ports,One MDF room that is will contain one UCS Chassis and a Nimble iSCSI SAN.
I am working on the spreadsheet and it looks like this (Not totally filled):
2960s3560x3750x45064510Approx cost (Each, 48PORT, POE+, 10G uplink, Dual PS, IP BASE)
6K7K8K45K75KMax Capacity192432432192384Backplane speed206464520520ProLeast ExpensiveStackable to 9Stackable to 9ProDual PSDual PSDual PSDual PSDual PSProLayer 3 opt
Layer 3 optDual SupsDual SupsConExpensiveExpensiveConNo Dual PSConLayer 2 OnlyCannot stack more than 4
For the MDF I would like to use 2 Nexus 5548's with FEX's, and the layer 3 daughter board. For the IDF's I was thinking of two 4010's.
How to replace a defective redundant sup. I read on several articles that inserting new redundant sup should not be an issue as the active sup will always send its configuation to the standby. We are running SSO on the Sup720. Should I switch it to RPR before I install the redundant sup? I read a case wherein they switched it to RPR from SSO before inserting the new redundant sup. My concern is the IOS mismatch since Cisco doesn't always send the same IOS on RMAs.What I am planning is this.
1. Save/Backup configuration
2. Remove the redundant sup on slot 8 (since it is a 6513)
3. Insert the new redundant sup on slot 8.
4. Check if all the configurations were synced from slot 7 to slot 8.
5. Copy the IOS from sup-bootflash to slavesup-bootflash. (if the IOS are not the same)
6. Check show bootvar to see if the boot variables are correct.
7. If bootvar is the same, reload slot 8 to boot the new IOS.
Is this a good plan or am I missing something? I am worried with this document if the redundant sup has a different software. If i insert the card in slot8, according to Cisco, it will revert to RPR. If slot 8 boots and it has a different OS, then slot 7 will switch to RPR even if it's active. Would I still be able to access the slavesup-bootflash of slot 8? Is it going to boot 100%? I read that doing a force switchover will cause a flip and RPR would cause the line cards to reinitialize and I don't want that. Well I am not going to do a force switchover since i want slot7 to be active and retain slot 8 as hot.
I am replacing a faulty sup720 on a 6513. It s the backup/hot not the active sup. It has the same IOS on it. Is it correct that all I need to do is remove the faulty and replace it with the new sup and do a wr mem? Fromwat I have read their should be no down time all connectivity should remain stable?
View 6 Replies View RelatedI am implementing a guest wireless network to work alongside my internal network. The guest network will use the existing switching network and will be separated by VLANs. I have the ASA set so that traffic can get to it and out to the Internet. I can set up a workstation on the same VLAN as my guest network and can route inside my network (strictly doing this for testing purposes). Where I am having problems is with the Catalyst 4506 switches and the ip routing. I had two separate "ip route" statements defined on my switches.
ip route 10.200.2.0 255.255.255.0 10.200.2.254
ip route 0.0.0.0 0.0.0.0 10.100.100.254
I have discovered that the traffic is always following the default route despite the fact that my IP address on my test workstation falls in the 10.200.2.x network. I was looking at documentation and found that it is possible to set up policy-based routing on the core switches. Can you have two "ip route" statements defined like this to segreate traffic or do I have to use PBR for routing (or a combination) in this case? If I define PBR then how does that impact my existing routing? I need to make sure that I can still route the existing traffic while I'm configuring this change.
We have 2 sites, each with 2 x 4506 switches which will be connected togther using an etherchannel. The switches will provide access ports for client devices and will be configured with HSRP to provide gateway redundancy. SW1 will be HSRP active.2 metro ethernet links will be installed in each site which will connect back to our HQ sites. OSPF will be used over the backbone to provide resiliency and to allow shortest path routing to each HQ and to prevent traffic over the HQ to HQ link.
The 4506 will be trunked togther with an SVI for providing OSFP adjacency.For the traffic flow from SW2 to HQ2, traffic will hit SW1 and then route back to SW2 and then to HQ2. Is this the best way to do this? Should a second link be connected between switches just for routing or should something like GLBP be used?
CiscoSwitch1(4506) has 3 VLANs(12,13,14) and Switch2(4948) has 3 different VLANs(22,23,24) and IP routing has been enabled in both switches with SVI interfaces for each vlan. intervlan routing is works fine.Now there is a requirement to connect these switches together. Vlan 12 on the Cisco switch 4506 has to be made available from vlan 22 from Switch2(4948). basically Vlan 12 is having a multicast source (225.0.0.0 & 226.0.0.0) which should be accessabile from vlan 22 of cisco switch 4948.I got 2 ideas
1) Create a trunk between these switches and configure L2 vlan(12) in cisco 4948...i know theoritically it should work but what my concern is Ip routing enabled in both switches will it create any issues? is it a gud solution to this requirement?
2) Create a separate IP network on the ports connecting to both switches and set up routes to the networks.ex- console(config)#ip route 192.168.10.10 255.255.255.0 192.168.20.1.
I am configuring multicast in a environment where I have a 4506 at each site (4 total) and a 6506 as the core. Each 4506 is connected via layer 3 to the 6506. I have a mix of 3560s, 3548s, and 2960s connected to the 4506s and the 6506 via layer 2 trunk
I have multiple multicast sources and hosts communicating at a time (multiple cameras sending video / multiple computers receiving video). So this is not a scenario where there is 1 sender and many receivers. This would be many senders (~50) and some receivers (~10)
Sample Diagram:
->3560
|
6506 --> 4506 --> 3548
| |
| --> 2960
|
4506 --> 2960
|
-->3548
I configured ip multicast-routing on each of the 4506s and on the 6506. IGMP snooping is on by default on the 3560 and 2960 switches. CGMP is on by default on the 3548 switches.
I set up PIM sparse-dense mode and IGMP version 3 on each of the layer 3 interfaces for the 4506s and 6506 where they connect and on each VLAN that is sending or receiving multicast. Multicast is working throughout the network, however I am looking to verify the configuration as I scale this out to more clients on the network.
#1 - Is it correct to us sparse-dense mode in this configuration?
#2 - Do I need to configure a rendezvous points using AUTO-RP? (ip pim send-rp-announce INTERFACE scope TTL). Not sure here if I need to designate this and what to choose. Right now I do not have this and it is working, but documentation seems to infer that I need to designate this.
#3 - Is there any other configuration settings I should be considering? I hard to find real world configurations of multicast as examples or people that know multicast routing well.
I decided recently to switch out our border router (1841 12.4 advsecurity) with a shiny new 1941 (15.2 SEC/K9) as the CPU upgrade was needed.The core below acts as a VPN end point to various other remote offices we have, all of which have a similar network design at each end (and all entirely managed by me). All of these are still running 1841's with 12.4 advsecurity on them as well. These are all GRE tunnels with ipsec procection on them (not crypto maps). [code]
Everything else works fine (NAT, route-maps etc), it's just these IPSEC/isakmp tunnels that are not playing ballIt's definitely not an ARP issue (all arps were cleared) and ICMP appears to work fine (ie, I can ping the remote tunnel's public IP endpoint from the core using the loopback for that tunnel as the source). I am suspecting it's something strange with the stateful firewall config, but I did try and apply ipsec and isakmp-msft to the ip inspect list, with no success.
In my MDF I have a 4stack of the WS-3750-48P switches. Is it possible to replace one with a C3750X48PF-S with out causing any issues? Or would it be better to just have 3 stacked and trunk this one to the core 4506. Keeping in mind I bought this one to expand the port number for one of our remote offices.. I would hate to send them the gig switch when there isn't as much usage..Besides if I can get my CFO on this switch he might authorize me to replace the rest... He is reticent to believe it makes really all that much of a difference.
View 2 Replies View RelatedI have a 2801 router that I am replacing with a 2911. I know the ports on the 2911 are Gigabits and the 2801 are Fe. I read where the IOS would not support backup and restore on each other . I am attaching a show ver on both routers. I need to know if backup and restore would work and or what other changes would need to get done.
View 1 Replies View RelatedWe currently have an environment with a 4507 as the core switch connected to four stacks of 3750e's in the wiring closets. A pair of Nexus 5548UP's also hangs off the 4507, but at the moment more or less dedicated to a certain purpose..The 5548UP's have the L3 daughter card installed.
My question is: Can a pair of Nexus 5548UP's do a C4507's job? Would we be able to decomission the 4507 and replace with the existing 5548UP's + FEXes?
We are planning to implement the 6509-E with two Sup 2Ts and a few 48 ports switches. We also want to make this the router for our network and replace the 7206VRX.
View 5 Replies View Relatedwhen replacing a line card on a 6500, i gather there is no config stored on the card, its all held on the sup, so when i put in another card the config will be the same?
View 2 Replies View RelatedI was wondering what general steps might be taken in order to "replace two(2) 3750 (stacked) with one (1) 3750X - Server Access". General steps and what I might have to do configuration wise. I know i'm copy pasting the existing configs into the new switch, but are there any caveats?
View 5 Replies View RelatedI have two 3750X in a stack. Each 3750X has one 10Gb uplink to primary core1 and one 1Gb uplink to backup core2 configured in 2 etherchannel groups. The member switch has bad ports, so I need to replace it. I have spare 3750X unit. Is it possible to connect the spare unit to the stack and then move the RJ-45 cables from the member with bad ports to the new member? That way I can minimize servers downtime to just a few seconds..If that would work, then the last step would be to move the 10Gb networking module from old member to the new one, as well as the secondary PSU. Is it doable? Also according to the documentation, all I need to add new member is matching IOS version, correct?
View 1 Replies View RelatedI have two 3750G switches stacked together however it's not in a full ring configuration:
Stack Ring Speed : 16G
Stack Ring Configuration: Half
Stack Ring Protocol : StackWise
And as shown below it's obvious which cable is not working:
show switch neighbors
Switch # Port 1 Port 2
-------- ------ ------
1 2 None
2 None 1
It's not flapping - it's like the cable isn't there at all. I'm going to try reseating the cable in there and perhaps an all out replacement if necessary. My question - is there any threat of a reboot of the switch stack or of partitioning of the switch stack by trying to get the 2nd cable working?
The stackwise marketing info states that when a failed member is replaced with a new switch the replacement switch "gets the exact configuration of the old device". I would figure it takes a little more than just disconnecting and connecting a new switch in the same spot on the stack. doing this with 3750 family switches? What are the steps to prepare the stack for a new member? what steps need to be taken on the replacement switch before insertion into the stack to make sure it gets configured like the unit it was replacing?
View 5 Replies View RelatedI am currently running a 4506 with a sup V engine. I have purchased a sup 7 engine. Is there a guide on how to perform this task. I am sure I need to do an IOS update as well.
View 2 Replies View RelatedWe are attempting to PXE boot from clients obtaining their DHCP lease information from DHCP pools configured on our 4506. The PXE server, and the client are configured in separate VLANs. We have configured option 66 to point to the PXE server IP address, and the bootfile option to point to the PXE boot configuration filename. On the client side SVI, we also have configured the ip helper-address command to point to the PXE server (which also acts as another DHCP server for redundancy).
The PXE boot continuously fails stating it is unable to find the configuration file. If we remove the DHCP pool from the 4506, and allow the client to receive their DHCP lease info from the secondary server (Windows 2k8 - same server as PXE server), they PXE boot with no issues.
We have no problem obtaining DHCP info, just completion of the PXE process.
Does SUP 7E is comatible with IOS? It came with IOS-XE preloaded and there are no IOS software listed under downloads.
View 3 Replies View RelatedI have 4506 with below sup, my requirement is to enable netfolw , but as i came to know that it is not supported in this sup, is there any additional option which can be explored to get the netflow working without replacing sup.
Card Type Model
-------------------------------------------------------------+-----------------------
Sup 6-E 10GE (X2), 1000BaseX (SFP) WS-X45-SUP6-E
We have just purchased and installed a 4506-E chassis. It contains a supervisor, two POE blades and 3 non-poe blades. Version is 12.2(53)SG1. Anyhoo, one of the ports isn't providing power to an IP phone. We can plug the phone into any of the other POE ports and it works fine. Is there a way to test an idividual port for POE problems? What could the problem be? The port works for normal data but will not provide power.
View 12 Replies View RelatedWe ordered the wrong part number for a Cisco 4506 non-E chassis, the part number is: WS-X4624-SFP-E and the device is showing "Unsupported module"; What would the part number be for the non-E? WS-X4448-GB-SFP,Catalyst 4500 48-Port 1000Base-X (SFPs Optional) ?
View 1 Replies View Relatedi'm desperately trying to get LACP working over a dot1q Tunnel. The "Service Provider" Switches are two 4506-E Switches with SUP7-E connected via a 10G Link, running on cat4500e-universalk9.SPA.03.03.00.SG.151-1.SG
sample config:
dot1q tag vlan native
interface GigabitEthernet3/1
switchport access vlan 2001
[Code].....