Cisco Switching/Routing :: SFP-10G-SR With Multi - Mode Fiber?
Jul 10, 2012Can I use the SFP-10G-SR 10g interface woth Multi - Mode fiber?
View 3 RepliesCan I use the SFP-10G-SR 10g interface woth Multi - Mode fiber?
View 3 RepliesI am doing an small project, I have to connect 4 cisco switches SF 302-08 (1 GBIC each one) to a core switch SGE 2000 (4 GBICs). Because of cable length I have go connect all 5 switches with fiber. The fiber termination is multimode LC duplex. My confusion is on the mini GBICs. There is compatibilities issues i been reading. [code]
View 3 Replies View RelatedThe module WS-X4306, support fibber fiber single mode ó fiber multi mode? what GBIC is for fiber single mode or fiber multi mode?
View 1 Replies View RelatedI have a new building to add to our campus and I have been encouraged to run single mode fiber. All of my other buildings are connected with multi-mode fiber. I just want to make sure i will not have an issue if I run single mode to the new building with SM SFP's.
View 2 Replies View RelatedI need to support a bunch of security cameras mounted on poles in our parking lot and an IP intercom system mounted on some gates. Because of environmental factors the switches at the poles need to be hardened and the spec from the vendor installing the gear is for GarretCom Industrial unmanaged switches which would make sense.
However when Information Security got wind of this scheme they (probably correctly) are requiring me to secure the ports that these unmanaged switches connect to. I have 2 choices: port security w/ MAC filtering or 802.1x. Because all the devices at the poles and gates support 802.1x and because I may need to go out there to troubleshoot stuff (and will invariably forget to add the MAC of whatever device I am using) I would prefer 802.1X multi-auth mode.
Problem:
When I ran a quick test on a test 3560 running some 15.0.1 code I could get a laptop to connect via 802.1x EAP-TLS successfully if it was directly connected but when I connected the same laptop via a dumb Netgear switch I confiscated from a luser it would not connect. The 3560 error said that the laptop never responded.
Question:
Before I spend a whole lot of time on this, is this something that should work? I don't see any practical use for the feature if it won't however the documentation I am using specifically mentions downstream hubs but I am not sure if they mean real hubs (which I don't think are even made anymore) or if they mean unmanaged switches.
I plan to try a couple of different unmanaged switches tomorrow and digg a little but I would like to know if I am wasting my time on something that will never work or if there is a little gotcha somewhere.
Using SFP-10G-LRM with single mode fiber? We have 1310nm.
View 2 Replies View RelatedI'm looking for switches that support single mode fiber connections and would like to know if "WS-C3750-FS-S Catalyst 3750 24 100BaseFX + 2 SFP" and "WS-C3750G-12S-S Catalyst 3750 12 SFP" can serve the purpose?
View 6 Replies View Related I'm having a problem with some new gear and can't seem to figure it out. I have a 3750X-48P-S with a C3KX-10G-NM using SFP-10G-LR transceivers and I'm trying to trunk that with a 6509 that has a X2-10G-LR transceiver over single mode fiber. This is not working. Cisco TAC says the SFP+'s that we just got brand new are both bad and we need to order new ones. I find that hard to believe but who knows.
The switch recognized the module and I tested all 4 ports in gigabit mode using GLC-SX-MM transceivers, all worked great. I have the SFP+'s in tengig1/1/1 and 1/1/2 as they should be. There are no other SFP's in the module either.
When I do a sho int tengig1/1/1 and 1/1/2 the media type doesn't show the transceiver that is installed like it does for the GLC-SX-MM ones. Maybe it's not supposed to or maybe it just doesn't recognize them and it's a hardware issue.
We've just purchased a WS-C3750-24FS-S, only to find that the 100baseFX ports will not work over Single Mode fibre, backhaul links. Any way or a device that convert from MM to SM?
View 2 Replies View Relatedconnecting a Cisco 3945 Router to an Ethernet WAN Link. The service provider has provided a 100M Ethernet Single Mode Fiber handoff to the customer premises with SC Connector. The CPE configuration proposed for this setup is like this. [code]
Since the SFP has LC Connector, i suppose i need to have an SC-LC Cable for connecting the Ethernet link. Do i need anything else, apart from above?
I got an ASA 5510 system currently in single context mode, with CSC SSM installed. Single ISP uplink to internet, no VPN. And now customer would like add another ISP uplink, without invest another box for HA.What come across my mind is make the current box into multi context. There's some area i need to concern and also need yours perspective on it.
Question 1: For making the firewall into multi context, am i need to do it from scratch, issue mode multiple command. Then rebuilt the current production config into one of the context, then another context meant for the new IPS uplink, and one admin context?
Question 2: For CSC -SSM licensing requirement, model ASA 5510 with security plus license is able to support 2 context. So if i split my firewall like what i mention in question, what exactly number of context do i own (admin, context A, context B)?
Question 3: For CSC-SSM module in multi context mode, so the management port of CSC SSM must attach at admin context?
Question 4: After configured all the policy and traffic to scan, how exactly i should do in order apply this policy to the interface? Should i only enable at admin context, then firewall service-policy rules, and apply it global, OR should i also do the same action on context A and Context B?
Prior we only had 62.5u multi mode.I've got 3750x switches and new SM SFP and yellow fiber patch cables. None of my links show connected. No lights and trunk port interfaces show down/down.
Is there a special command you have to do on a port when using SM fiber? Do you think I need cross over fibers?
Also, should I be able to see a laser signal light like MM or is SM a different frequency so it's not as visible as MM?
I have a network with several catalyst 2960 switches and one catalyst 3750. I have created two VLAN and set up the proper routing and everything is working fine there. I have a client/server application that used multicast in the initial start up for the client to determine available servers, the issue is one of my clients is on a different VLAN then the server. I am able to route the multicast using MVR as long as both the server and the client are plugged into the 3750 by creating a static route, making the server a source port and the client a receive port. Unfortunately I need the client and the server plugged in to different 2960s. My question is how do I establish multicast routing between the two and perferably do it dynamically (always route multicast traffic from one VLAN to another).
View 2 Replies View RelatedIs it possible to install LMS 4.2 in multiserver mode but with possibility to select installed components/applications? I'm talking about Solaris version. I can't see such an option. It will install all the components on every server which I don't want to. We have LMS 3.2 working in such setup: one server with most major components, other running just DFM and third one with only HUM installed.
View 3 Replies View RelatedRecently i have configured ASA5550 with 2 Contexts in Transparent mode. Traffic can pass through a single Firewall context but through both contexts it couldn't.
View 0 Replies View RelatedI have a 3750 switch with IP routing enabled and have lots of VLANs configured on this switch.What is the best way to prevent VLANs from talking to each other?At the same time, hosts inside their respective VLANs should not be blocked from reaching any private networks as they could be doing some L2L with another site.Blocking the VLANs from accessing/telnetting the switch was very simple as I was able to do this in the VTY line section. However blocking VLANs from accessing the other VLANs on the switch seem to be hard and I think there has to be a recommended way of doing this. For example, if hosts in one of my VLANs, in this case VLAN-204 (10.10.10.0/24) want to hack or scan hosts on one of my other VLANs, in this case VLAN-330 (10.20.20.0/24), how can I accomplish this without blocking VLAN-204 hosts from accessing another network they have a site to site tunnel with with the same destination address of 10.20.20.0????
View 2 Replies View RelatedOn ASA 5515 it shows it is in transparent mode and it has multi context.As in transparent ASA we know it has single Management IP address.This ASA is connected to one switch on two ports gi2 and gi3.One port carries vlan say 800 to the ASA.Other port carries vlan 500 from the ASA to switch But when i log onto ASA and do sh run it shows no VLan info there.
View 3 Replies View Relatedwe are moving to different providers. We currently have multiple sites that have MLP bundles going to our current provider. We are trying to limit our network disruptions by creating a new MLP bundle group and connect it to the new provider, but are having no luck. In a GNS3 lab I have setup I am able to keep my existing MLP bundle up/up over the current provider network. When I attempt to bring up a new MLP group to the other provider my MLP does not come up and keeps going up/up then down/down and shows inactive. Is it possible to have one MLP group go to current vendor router, then create another MLP group and go to the other router?
View 6 Replies View RelatedA client I have just taken on wishes to provide internet data and VoIP for multiple tenants in their new office they move to in a few weeks.
they currently have a Cisco 2811 router with a 24 port Catalyst 2960 PoE managed switch serving just their staff and one tenant company who is plugged into a single port on the switch. I dont know what the tenant has the other side of that at this time.
when they move they currently will provide single port access points on the switch for each tenant, so the tenant can deal with their own network LAN. The client will provide phones to all the tenants using VoIP phones on a single subnet and hosted on an external PBX the phones all plug into the Catalyst and use the PoE. the WAN is a 20mbps fibre connection.
The client has 16 staff, the tenants are 3 companies with 3,6 and 9 staff. They may all increase or decrease in size to a total size of about 30 or 40 people.
I have a few questions
1. should I look at Vlan setup for this instead of the current basic routing setup or is that overkill since they only use one port access point per tenant as gateway.
2. can the cisco 2811 handle this or is it a bit old.
3. what router replacement would be recommended for this task given the above info especially if I went with Vlan solution.
4. any thoughts on the current switch's capability for this task.
5. managing bandwidth solutions? is there any router designed with this in mind. the ASA maybe or something like it with nice visual webgui management capabilities for monitoring and controlling bandwidth use of tenants?
Mark
I received the following info from Cisco's TAC and wanted to inquire further before I start reconfiguring the switch:
In a redundant Sup-6E setup, the following configuration is supported :
- 1 TenGig uplink on Active Sup and 1 TenGig uplink on Standby Sup
- 1 TenGig uplink on Active Sup and 2 Gig uplinks on Standby Sup
- 2 Gig uplinks on Active Sup and 1 TenGig uplink on Standby Sup
- 2 Gig uplink on Active Sup and 2 Gig uplinks on Standby Sup
If you invoke shared backplane mode, the following configuration can also be supported:
- 2 TenGig uplinks(blocking) on Active Sup and 2 TenGig uplinks on Standby Sup
- 2 TenGig uplink(blocking) on Active Sup and 4 Gig uplinks on Standby Sup
- 4 Gig uplinks on Active Sup and 2 TenGig uplinks(blocking) on Standby Sup
- 4 Gig uplink on Active Sup and 4 Gig uplinks on Standby Sup
Here's the command and information about the "shared-backplane" mode :- [URL]
Currently, we have 2 SUP 6-Es(Module 5 - Active and Module 6 - Stand-by) setup in a redundent mode. I am planning on changing the redundent mode to the shared backplane mode so I can use 2 TenGig converters to uplink 2 access-switches. We purchased 2 TenGig converters and here is how I am planning on using them:
1- One will be used to uplink to two 3750 switches(stacked)
2- One will be used to uplink to a 2960 using a Gig SFP
My questions are:
1- Do I have to install the 2 TenGig converters(4-Gig Uplinks) in the same Module? Or can I use one one in module 5 and the second one in module 6?
2- Will changing the redundant mode to the shared backplane mode require rebooting the switch or disrupt the funtionality of the other linecards?
We have a 5585X running in multi context mode, and we are getting log entries for scanning threat detection, such as:
%ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current burst rate is 2 per second, max configured rate is 10; Current average rate is 5 per second, max configured rate is 5; Cumulative total count is 3116
Threat detection is not supported in multi context mode so I cannot tune the thresholds, is there any way that I can get rid of this outside of messing about with logging levels/message IDs?
I have two ospf processes running on a single 3570 edge router that has a dedicated transport circuit back to our network core. We are adding an additional "transport" only circuit into a new location that is also apart of the second ospf process backbone which will connect back to our core. There will also be a 3750 for this new circuit termination. Currently we are only redistributing ospf process 2 into ospf process 1 (1 = core backbone).
#router ospf 1
#redistribute ospf 2 subnet
We have no need to have ospf process 1 redistributed into the process 2 tables. That being said, when we add an additional transport ciruit, or path back to our core backbone, will this configuration present any issues with the redistribution process and failover.
Possible to configure multichassis port-channel between a VSS and 3750X (Port-channel not in the same switch on the 3750X stack). I got it using LACP but I need Pagp to get VSL redundancy “dual-active detection pagp trust channel-group 1”. I am using the last VSS IOS version 15.0(1)SY. I can’t get the option “switch 1 preempt”, has it changed with other option?
View 2 Replies View RelatedI have an 891W that I initially configured using CCP Express (2.5). So it has a WAN IP set, and through CCP Express I had enabled via the checkboxes the various default settings for security. This includes zone-based firewall. I then added a number of NAT entries in the setup wizard.
What never occured to me at the time was that I should have added entries that allow for remote access. So it seems I've locked myself out of accessing the router via the WAN interface even though I know it's IP. I'm sure it's just a matter of adding port exceptions for SSH and/or whatever port(s) CCP uses.
So I"m wondering what the proces woudl be. In the IOS while showing the running config., I see pages and pages of class-map stuff which at present I don't know enough about to risk editing anything directly. But maybe I don't have to? What would be the best way to, for example, enable SSH access through the firewall? I already have transport input ssh set on the interface itself so I believe it's ready to allow the connection, just that I can't get to it via WAN int. so I assume it's the firewall.
I have setup a 5515-X in transparent multi-mode and setup 5 security contexts with inside and outside ports, one admin and 4 others. The problem I have run into is setting up a management IP for each context. On one of my other transparent firewalls in production we were able to apply an IP to the security context (not interface) however the new firewall is running the latest software and this same functionality is not available. The only options for IP in context mode is IP AUDIT. So my next plan was to create sub-interfaces of the management interface and assign one to each context however the 5515-x does not allow sub-interfaces on the management interface. How I setup a management IP on each context?
Another interesting thing i read is that the managment IP assigned to a context (if i could figure out how to set it up), has to be in the same subnet as the data interface which if fine but it also says that the management interface should not be connected to the same switch as the data interface because of MAC address table update issues, meaning that i could not use a sub-interface of one of the already configured context ports.
Do the cisco 4503 switches support virtual clustering feature ? I have a requirement where switch ports on two different 4503 switches need to combined in the same Link aggregation group . This is needed because the firewall notes say that the aggregated interfaces need to be conected to a single switch and combined in the same LAG . So according to the diagram below , the interfaces marked RED need to be in the same LAG in the switches , same for the interfaces marked BLUE . I have done the same setup using Juniper switches where it uses VIRTUAL CLUSTERING to group the different switch ports in the same LAG.
View 2 Replies View RelatedSomeone had told me the 6500 switches can be stacked via fiber. This feature is available for the 3750s?
View 7 Replies View RelatedWe have Three locations (A,B,C) across campus. Location A is Main Location, While B & C are remote locations. Distance among all locations approx. 2 miles.
I want 10G Fiber among these three locations. I am taking 4510+E with SUP 7E with Redundant SUP & 10G Fiber line card(X2 10G) at Location A.At Location B & C, i need Max. 2 Nos. of 10G uplink. i am taking 4507r+E with redundant SUP 7LE. Can i terminate 10G Fiber UPLINK from Location A in to Redundant SUP 7L-E(10G SFP+) at location B & C ??
At one time, Primary SUP 10G uplink should be active & Redundant SUP 10G uplink should be standby. When primary SUP fail, redundant SUP 10G uplink will be active. Is that Possible with this scenario?Is that possible that at same time, 10G Uplink on both SUP 7L-E be Active?
I came across this Multichassis EtherChannel Features when read about information from Cisco Smart Business Architecture.After checking further, knowing that Cataly stwitch 6500 supports this feature.provide information that beside Catalyst 6500, is there any other model of Catalyst switch can support this feature?
View 4 Replies View RelatedWhen you aggregate multiple fiber GBICs together on the 3508G, do you configure it as an etherchannel, or as fibre-channel? I've looked around online for hours, but can't find it mentioned anywhere.
View 3 Replies View RelatedI am trying to connect a 6509 switch to a 4503-E switch using single mode dark fiber over a distance of less than half a mile. Although a routine task, it does not work..We have a care 6509 switch where we concentrate all of our dark fiber connections for our remote sites. The 6509 switch already has 30 remote sites, most of them with 4503-E switches, connected in this way therefore it is a tested scenario. For the connections we use the GLC-LH-SM SFPs on both switches. Out of these 30 sites we had a similar problem with two of them, which we solved with the use of CWDM SFPs. With the CWDMs the fiber came up right away. However, I cannot keep using this solution because it is way too expensive! I had the losses of the fiber measured end-to-end and they are negligible (>0.5 dB).
In this latest case, like I said, we could not bring the connection up between the core 6509 switch and the 4503-E switch using the GLC-LH-SM SFPs. I then replaced the 4503-E switch with a 3560 and the link came up! Then I tried using a CWDM-SFP in the 4503-E, while keeping the GLC-LH-SM SFP in the 6509 and the link came alive again! Of course we already tried replacing the fiber patch cords with no luck. [code] I find it very weird for the link to work with the 3560 or with a CWDM in the 4503 but NOT with the SFP in the 4503!
Company I work for just moved into a new location. We have two data closets which are patched as independent entities, with no Ethernet tie connection. These closets are roughly 100 feet apart.
There is a fiber connection that runs between both closets, that the previous tenant used to connect the switches. I have placed a Cisco 2960 switch in each location, and added one mini SFP gbic's to each switch. After attaching both sides, neither light up. I do a sh inter gig1/0/49 on each and shows 'down down' (not admin down).
What is the trick on getting these to communciate, do I need to configure these ports, and are they supposed to light up?
What I am trying to accomplish is to get the one closet that is completely cut off, communicating by logically stacking, or 'daisy chaining' via fiber.
I turned off the lights and popped the fiber out, and I do see a faint red light (I did not look straight into it), so I think the fiber is active.
I am working on a project to connect 2 switch stacks via 10 Gb fiber. I am told that the 3750Xs do not natively receive the 10 GB SFPs. What part numbers do i need to order to make this work? Is there any IOS image requirements?
View 14 Replies View Related