Cisco Switching/Routing :: Two Subnets Through Pair Of SG200-08 Switches
Mar 21, 2012
I have two separate companys both with staff at two locations and thier own networks connected with a wireless antenna which provides a high speed LAN connection between offices. I only have a single path through this antenna bridge. I have an SG200-08 switch at each end. What I am attempting to do is utlise the switches to take the two subnets at one office, combine them to one for transfer through the antenna bridge, and then resolve them into the two separate networks again at the other end.
We have a pair of N7K distribution switches connected to a pair of N7K Aggregation switches.We run vPC on both pairs of n7k's.
-n7k-d1 has two interfaces in a Port-Channel connecting to n7k-a1 & n7k-a2. (PC1) -n7k-d2 also has two interfaces in a Port-Channel connecting to n7k-a1 & n7k-a2. (PC2)
My problem is that Spanning-Tree is blocking PC2 and all traffic from n7k-d2 is traversing the Peer-Link before reaching the Aggregation layer. Is this the best design for connecting two pairs of n7k's with vPC or if a better design would be to connect all 4 links into the same Port-Channel and vPC?
There are two Cisco 4900M L3 switches and two Cisco 2960 L2 switches. I need to configure the two L3 switches to operate as a redundant pair, as the servers connecting to them are connecting using bonded interfaces, which can only have one default gateway. So these two L3 switches need to have the same Vlan interface 1, 2 and 3 IP's set onto them.How are the two L3 switches made aware of each other? via a normal trunk? Is there some special configration for configuring a mated/redundant pair of switches? or are they both just configured as though they were the same switch, but linked?
connecting a 5548 pair to our core 6509s. Just want to be sure we don't introduce any issues into the network.The 6509's are connected and perform all the routing. Essentially, we're moving away from a 3750 stack in the data center and the 5548s are the replacement. We'd want to limit the vlans to the specific server network vlans. Our current setup is a port channel between the 3750 and each of the 2 6509s for redundancy. I'd like to use the same functionality when we connect the 5548's but I'm looking for what the config should look like to ensure no spanning tree loops are introduced and that it is configured optimally.
I am in the process of migrating our existing server farm subnets to our new Nexus server farm and I discovered something I wasn’t expecting. My intention is to migrate our existing legacy server farm which is comprised of for paired 3750 switches off of our core 6509s and onto the Nexus and connect them to the 2232s via multi gig port-channel connections, two port channels per switch stack.
NOTE this is expected to be a temporary move as next year we intend to install additional N2Ks and move servers over to these directly. But to minimize the outage/downtime it will be better to move the subnets and switchs all at once.
These connections would be grouped 1 gig connections as port channels, one from each switch into one of the two 2232s.
Problem I discovered is Cisco does not intend to have switches connected to the Nexus and it immediately disables the ports when they see BPDUs.
I found a config that does work and it does fail over from one port-channel connection to the other but with the limitation that when the original port channel comes back online it does not fail back over to the original one, an acceptable situation for us. But I am wondering if Cisco would support this design if we did experience issues down the road.
The only issue I really see is to get it to work the config is different on the two N5Ks, see the pert config below for the connections. Both are running the same OS
augs1-ba-ar17# sh ver Cisco Nexus Operating System (NX-OS) Software TAC support: [URL]
I am setting up my home lab to practice and play around.I have VMWARE ESXi environment with two workstations as my servers.I would like to setup two domains with two domain controllers but i want each domain to have its own subnet.So this is my setup. I have Cable modem from cablevision , thay connects to my router which is Apple Airport which acts as the DHCP server. DNS server and default gateway. The network on the router is 10.0.1.xThen i have two switches . One is a 5 port unmanaged switch that connects to the three physical desktops .Then i have a Cisco small business switch SG200-08 that connects to my ESX servers and NAS. Now currently all is good and working but like i said all my machines physical or virtual get an IP that is 10.0.1.x and they get all this from the router. And i think i can setup two domains with two domain controllers without an issue and they will all get an IP address of 10.0.1.x. This is all good but i want to have one domain on one subnet and other on another so for example one domain will have 10.0.1.x and other 10.0.2.x. I am just not sure what i need to to get this setup like this. I know my SG200-08 supports vlans and i am pretty sure on the apple router you can only have one subnet i think. So can i do this with my current setup by setting up a DHCP server with two scopes ?
SG200-08 and SG200-08P fail to hold or update Date/Time.(New installation for a UC320 setup.)I've got both an SG200-08 and SG200-08P that are failing to maintain date/time when set with "Use Local Settings". Every restart/powercycle causes them to reset to Dec 31 1969. Other settings save fine.I first tried to set time via SNTP Unicast using a variety of public time server addresses including the 3 hard coded to the SG200-08 firmware:
Sadly though it always just shows "Active Server Server Host Address: 0.0.0.0" and continues having 12/31/1969 as the date. Both after a config save and a reboot.I can ping the NTP servers just fine from the switches either by IP or by hostname.At this point I've decided that I must be missing something simple. At least I hope so... otherwise it's a firmware bug which means waiting for a fix.Other devices behind the same firewall/gateway (RVS4000) are updating NTP
On the SG200-side I've set the IP-address and default-gateway accordingly, however:From the SG200 I can't ping any other host on the same IP-subnet as the switchFrom the SG200 can't ping the default-gatewaycan't ping from any other host or the default-gateway *to* the switch But:On the SG200 I've got plenty of MAC-addresses under "Dynamic Address Table" - however only MAC-addresses that belong to the management-VLAN of the SG200 (i.e. VLAN9 in my case)The MAC-address table on the SG200 even includes the MAC-addresses of hosts on the same VLAN I tried to ping without success. For example: I tried a PING from a host having a MAC-address of 00:19:bb:31:91:30. This MAC shows up in the arp table of the SG200. To cross check I connected a dedicated PC to the SG200 and assign it an IP-address out of the management-LAN-range of the SG200 - in this case I can access the switch (i.e. PING, WEB etc.)So to summarize: Connectivity is OK when going from directly connected devices to the SG200. No connectivity from devices that are behind the C2960S towards the SG200 and vice versa. (The problem is definitely not with the C2960S-side since we've got plenty of them hooked together without problems.) I'm enclosing the screenshots of the corresponding definitions on the SG200.
My organization wishes to host a LAN gaming event. The setup I have in mind involves a 24-port switch for connecting all the player computers and having that switch connected to a smaller "core" switch which has the the game server and router connected to it. I'd like to know if I can set things up as follows...
SG200-26 with ports 1-24 on seperate VLANs so they cannot talk to eachother. I'd then like ports 25 and 26 to be an aggregated (for bandwidth and redundancy) trunk port to carry all 24 VLANs plus an additional management VLAN (ex. VLAN 100) that will be used for accessing the switch. I'd like those aggregated trunk ports to connect to an SG300-10 "core" switch which will be connected to the game server and to a router for internet access.
I'd like the ability to have two network connections from the game server to the switch, one on the management VLAN and one on a different VLAN (ex. VLAN 50) that will be accessed by the players (ports 1-24 on the SG200-26). The core switch needs the ability to perform restricted inter-VLAN routing, in that it doesn't allow VLANs 1-24 to talk to eachother but they can talk to the server's VLAN but only through specific service ports (ex. port 12345, 12346). Is this possible?
Furthermore how would I configure the SG300-10 to allow VLANs 1-24 to talk to VLAN 50, but not themselves or VLAN 100. As well, I'll probably have the router on it's own VLAN (ex. VLAN 60) and allow VLANs 1-24 to access it but only through HTTP port 80 for web access.
I already know that there is an option using Patton Copper Link Ethernet extender to interconnect a remote LAN with this device. Do you know if this is possible using Cisco 888-K9 or any other Cisco Device ?
We are running 4x n5k and started with the vPC feature. So my question is, if i can connect a vpc-pair to another vpc-pair?In the cisco docs i can find examples for connecting a vpc-pair to a single switch, or server (with and without fex)But there is nothing about how to connect 4 n5k via vPC feature.
We have HSRP between NexusA and NexusB with access layer switches connecting to the core using VPC, We are trying to setup a VAM server Voice recording for Siemens phones. We need to span all voice vlan and point it to the VAM server the VAM server connects to a 3750 Stack considering the amount of traffic multiple span session can generate I plan to move the server to the Nexus directly and run a Local Span Session.
1- As we have two Nexus running HSRP and VAM server only connects physically to one NexusA (I can run local span on that nexusA) the Second NexusB is not directly connected to the VAM server I plan to run ERSPAN so if this is the best design and which path will the span traffic take from Nexus B to NexusA will it go through the access layer switches depending on the vlans allowed on the uplinks or will it go through the 20 Gig uplink between the two Nexus allowing all vlans (VPN peer links) ? WE have approximately 10 voice vlans, Do we an example config for ERSPAN session where the source are vlans (As I am for fimilliar with RSPAN) ?
My Data Center has one single core switch where is connected several servers, one port is the link to the router wan and other port is the link to the FW, my boss wants to install 2 nexus in order to replace the single switch. All my network has only one address, for example 192.168.10.0/24 if I connect two nexus 7010 in VPC and Domain, each nexus is going to has 2 modules with 48 port 10/100/1000 rj45 and i wan to connect servers directly to each nexus, with this figure i'm going to have a group of servers connected in two different nexus, Do they can have the same network 192.168.10.0/24 considering that the nexus are in the same vdc and vlan and have only one gateway for both groups? If the answer is positive, which nexus would be the gate way for that address, the primary or secondary? Or i must have a different address for both group of servers, i mean for example 192.168.10.0/24 and 192.168.12.0/24?thus each nexus would be the gateway for that new address?
To have two nexus connected by VPC in a Domain mean that one computer connected to one nexus can share the same address or vlan with other computer connected to the other nexus????
I currently have two Nexus 5548UP switches in my environment running the latest code (n5000-uk184.108.40.206.N1.1a.bin). Both of these switches are connected via a VPC Peer Link (two ports on each switch in an Ether Channel) and a VPC-Keep Alive Link (a dedicated port). Hosts connect to each switch via a VPC for both IPV4 and FCOE.
As of right now, everything works. I currently have a stack of two 3750 switches that each Nexus is connected to. This stack is doing all the Intra-VLAN Layer 3 Routing for the Nexus Switches. However, I plan to get rid of the 3750s, and move the Layer 3 Routing the Nexus 5548's, so the backplane is 10 Gig instead of 1 Gig.. I have the Layer 3 Daughter Card installed in both switches, as well as the LAN_BASE license.
So, at the moment, I am trying to find the best way to accomplish Layer 3 Routing on these two switches. Since the Nexus switches are not stacked, and the FCOE portion of HA is taking care of by the Multipathing agent on each host, I believe am just concerned with providing Intra-VLAN routing in an HA build where if one switch goes down, VLANs still route through the other switch.
Again, since the Nexus switches are not stacked, I am guessing the best way to handle this is with HSRP, but my experience with that has always been with routers that have a switch in the middle. Can I make HSRP work without having a switch between the Nexus switches? Can I track the VPC peer link, or how do I do it? I guess I am looking for a sample config.
Let's pretend I had two VLANs:
VLAN 20: 10.20.20.254 - GW and 10.20.20.0/24 VLAN 40 10.40.40.254 - GW and 10.40.40.0/24
And I wanted the Nexus switches to route these VLANs regardless of which switch was up / down..
We have a project in which we are using 34 Cisco SG200-18's each with a MGBLX1 (LC Single Mode Fiber) SFP mini-GBIC.All the fiber's come back to one building where we must "bridge" all 34 fiber connections. What hardware should be used to accomplish this? A L2 switch? For example, a 12 port SFP Switch with Fiber SFP's accepting the first 12 fiber connections, then other switch with SFP for the next 12 and so on, until there is a overall capacity of 36 and having patch cables between the 3 switches?
what cisco or non cisco hardware would work with these SF200-18's to accomplish this?
I’ve been trying a few days now to implement multicast routing on my home network in order to make airplay work between subnets. Specifically between an iphone and a hifi separated by different vlans. Failed, as I have no experience in multicast routing. we have a clean configuration and simple network which consists of two SVIs
I currently work in the IT field part-time as a end-user support technician while I am finishing my Bachelor's Degree in Network Administration. I'm not completely new to networking at this point, but I am by no means a master of it either. The basics of small networks (less than 10 PCs) and the lower-end of small business grade Cisco equipment are not unfamiliar to me. Up until this point however, I have had very little experience with any higher-end Cisco networking equipment.
Now on to the questions, which may seem like the answers should be obvious, but let's face it, I do not have the resources to own much equipment myself at this time for experimentation purposes, nor does the school I am attending have a lot of financial resources to provide us with recent hardware to learn on. What I want to know are a few things about PoE as implemented on Cisco devices, specifically the SG200-50P small business series switch. According to the technical documentation, the switch supports PoE on 24 of its 48 ports, specifically 1 - 12 and 24 - 36; simple enough. The switch is currently installed in an office that has less than 24 connected devices, but that is currently expanding. None of the PoE ports are utilized as of yet, but going forward, there will be more than 24 connected devices. Will another switch need to be installed if the additional connected devices (PCs and printers) are not using PoE, or is the PoE an auto-sensing feature that will simply remain disabled if a device that does not require power over the network cable is connected? Is there some setting that needs to be changed through the management interface to keep devices that should not be drawing power from doing so?
There will likely be some additional questions generated by my inquiry, and I fully understand if these are completely novice questions, but I admittedly do not know the answer. When I Googled it, I was greeted by a few hundred thousand results, the first dozen or so pages of results all being for places to purchase this particular type of switch, so I thought I would try my luck on the forums of the place that made it.
We are replacing some netgear switches with the Cisco SG200. The situation is relatively straightforward. We have a series of VLAN's coming in on a trunk from a service provider for our Metro Ethernet locations. These trunks then get cross-connect to various location for connectivity. The problem we have is there are two VLAN's that need to go to the same switch which provides access to our public IP block.
I set up the two VLAN's on the SG200 with the trunk port VLAN tagging on the service provider port. Then I set up a separate port for untagging the traffic with the PVID of the respective VLANS's as follows: [code] The public switch has no VLAN's configured (it is an SG200 too). If I connect GE2 to the public switch everything works fine. When I connect GE3 to the public switch, things die. I thought this might be caused by STP although STP should not be detecting issues like this across separate VLAN's. Disabled STP, no change.The same configuration with the Netgear worked without an issue. FYI, the VLAN's cannot be changed...they are defined by the service provider in this particular case. otherwise we'd just make them the same..
I need to purchase a few Gigabit PoE switches for a small business and I am thinking that SG200 or SG300 switches are perfect for this purpose.
Layer 3 functionality in SG300 switches is not great - HSRP or any other next-hop redundancy protocol is not supported, dynamic routing protocols are not supported, policy-based routing is not supported, etc. I may get one SG300 switch for inter-VLAN routing so that I do not have to send traffic to a Layer 3 device for this purpose, especially because my Layer 3 device (ASA5505) has only 10/100 Mbps interfaces. All other switches in the network don't have to be Layer 3 switches, and I am thinking of perhaps getting SG200 instead of SG300 swithces. However, because I am a long-time Cisco engineer, and know ins and outs of the IOS CLI, I would much rather administer the switches with CLI rather than GUI. So, do SG200 switches provide CLI (even if it is not officially supported) or is the only Small Business switch platform that supports CLI SG300? I do realize that the OS running on these switches is not IOS, but after having reviewed the CLI manual for SG300, I would say that 90+% of commands are identical to IOS CLI commands.
After rebooting a pair of 6504's configured for vss, both switches show active on the sup modules. A show switch virtual redundancy however shows the pair working in an active/standby mode. We have 6509's in vss pairs and they show active on switch1 and standby on switch2 led's. For the 6504's switch 1 was booted first and then the second switch about 30 seconds later. Is there something different with the 6504's? [code]
My SG200-50P Switch Log appears as follows with Random ports going up and down. I am trying to find out if this links to another problem I'm having with a Client Server software locking up on the client end. The hardware, thin clients and desktops, are working and have checked all sleep and power settings. All items in working order, now I'm wondering about the switch
I bought a CISCO SG200-18 switch. I added the Switch to my LAN and started the Switch (as described in the manual). The Switch starts the booting procedure (green blinking status LED) After a while, the LED starts to blink orange and green, instead of steady green.
In generally the Switch seems to work. I can access my whole network, but not the web interface of the switch itself. I also can't see the switch in the ADSL / DHCP rooter.
I also tried to boot the switch only connected to the PC. But ping on 220.127.116.11 is not working. The switch is in the same subnet like my other LAN components.
The school I work at upgraded to Cisco Catalyst 2960-S switches, all connected to each other via fiber. I am seeing a problem with one such connection. Cisco Network Assistant showed a "4-Warning" regarding the fiber link port: port was disabled because it was fluctuating between up and down too rapidly. Possible hardware problem, resolve and re-enable. (I'm paraphasing the message...it was 'acknowledged', and I can't bring it back up.)
This message was only showing on our "SV-Copy-Rm" switch's port 49. The other end, on "SV-Maint-Rm" port 49 showed a normal green link status.
Using Internet Explorer, I logged onto SV-Copy-Rm switch's Device Manager, and I first tried disabling/re-enabling port 49 on SV-Copy-Rm. It came back up blinking yellow and showing "port has bad link" when I cursor hovered over port 49. This continued for a few minutes, followed by port 49 being disabled again.
The current thing I'm trying is swapping the connection on both ends to a spare pair of fibers. I'm pretty certain I've swapped to the same pair on both ends, however, now neither switch shows an active link. I've disabled/enabled the ports on both ends, but still no link.
Question: How do I re-establish the above link? (The active connection has 'fallen back' to the designated ethernet Cat 5e connection and is currently running with that connection.)
I was configuring link aggregation between a Cisco3750 and Cisco SG200 and the switched network went down just a few minutes after the port channel came on.I rebooted the SG200 and all hosts came back up for a minute before I lost them again. The etherchannel was between two trunking ports. I never set link aggregation on the SG200, could that be the reason? All machines are connected to the SG200. The 3750 is only being used as a layer 3 device for inter vlan traffic.
Can a Cisco SG300-10P switch power a Cisco SG200-08 switch over POE? Or an SG200-08P power an SG200-08 via POE? I have an area where I'd like to put a small switch, but would like to avoid having to have electrical power run to it. Or will the SG300 and SG200 POE switches only power endpoint devices such as cameras and IP phones?
I manually set an IP address in my new SG200-26, and turned off the dhcp client. I cannot access the webpage or ping the switch at the statically set IP. I have also run a network scan and tried accessing the switch at all of the IP addresses in my DHCP Pool that were being used, it is not available there either.
I just picked up a pair of 18-port SG200s, and I'm trying to figure out of there's some secret trick to getting CLI access to them? I've upgraded to the latest version of firmware (18.104.22.168) hoping that may work, but no luck.I can tell the guts to support a CLI are there, because writing the config out to a TFTP server shows identical an identical config style to the SG500 I have here.Is there some way to enable it?
I am trying to set up three vlans across two switches. The switches are Cisco SG200 and SG 300 series. There are 20 devices connected to the two switches including a router for Internet. Among these devices are five wireless access points all hardwired to the LAN. If I understand correctly the first thing I have to do is aggregate the two switches. I ran two cat5 cables to ports 1 and 2 of each switch. As I understand it all I need to do is to create SAG with the two ports on each switch. I think I need to use tagging but I don't really understand how to do this. Once I get the trunking set up correctly I want to create one vlan to which all devices will belong for Internet access. The other two would be for data and VoIP. Do I create vlans with the same name on both switches? When I assign the devices (by port) do I need to enable tagging? Which type of port setting should I use? I am assuming that by including the acess points in the vlans will mean that any wireless device connected to them will have acess to the Internet and the devices in the same vlan.