I have a problem where only the 2950's switches go transperant. They drop VLAN1 thus no CDP snmp packets. The users keep working fine but our NMS center keeps calling me at 3am when this happens.
These are access switches that connect to stacked 3750's. Some of the uplinks are using media converters that i have been trying to get removed. But i doubt that it could be the cause of the vlan1 going down.
The network in my building consists of several 2950s connected back to 3550s using redundant fiber links and MST. Recently one tenant decided they wanted to run their own switch and use the existing building network for VoIP only which is on a dedicated VLAN. I was thinking about creating an access port on the 2950 and setting it to the VoIP VLAN as I do not want to give them a trunk port. The client can take this link and connect to their switch. So far does not seem to be an issue. Now what happens if the client configures spanning-tree on their switch? I have no control over their device and cannot manage it. Is there a way I can protect my edge switch and access port to allow them to run their own spanning tree without it interfearing with my existing MST instances? I was thinking BPDU guard but if they turn on stp and my switch sees a bpdu then the port is disabled and they lose VoIP access. At the same time I dont want them to be able to create a loop on their switch and have it affect mine. But since the is only a single cable from my device to theirs?
View 4 Replies View Relatedthe attached image shows what i am trying to achieve.i need to establish connectivity from subnets 10.30.5.X and 10.30.6.X (in VLAN1 and VLAN2 respectively) to subnet 10.11.35.X
i have a trunk port on my cisco 2960 that is connected to GiE0/0 on my Cisco ASA that has 2 sub-interfaces with IPs in the subnets mentioned above.my problem is i can only connect to 10.30.6.X from 10.11.35.X (and vice versa), but no connectivty to 10.30.5.X
router 1721 with one wic-1adsl ,i have adsl conection with irb static ip. the router connect with mannaged switch through a trunk port. the switch has 2 vlans one for the static IPs and the other for private lan. i need the private lan to be able to go to internet. vlan2 can go to internet because it has the same subnet with provider but vlan 1 canot go internet, so how i can make all vlans go internet(the router has only 1 fastethernet port)
View 4 Replies View Relatedif i have this config:
switch port mode trunk
trunk aloved vlan 50
will travel over this trunk untagged packets? For eg the V LAN 1 is by default native V LAN without tag. If i have created a bog ring with catalyst 3560x switches with no spanning tree on V LAN 1 can be the case of this config a loop ???
I am using upper config on interfaces that are connected the switches together in ring.
Other interfaces on switch have this config:
int range 0/1-4
switchport mode acc
switchport acc vlan1
int range 0/5-24
switchport mode acc
switchport acc vlan50
I am using vlan1 just for local switching without connection to internet! I am asking just because i have this king of messages in logs:
%CDP-4-NATIVE_VLAN_MISMATCH: Native VLAN mismatch discovered on GigabitEthernet1/0/27 (1), with SW3560x_BR8874 GigabitEthernet1/0/19 (50).
GI 1/0/27 and GI 1/0/19 have this config:
switchport mode trunk
trunk aloved vlan 50
I have two locations DC and Corp connected to each other via Point to Point Circuit. I have forced the two core switches setup as GLBP pair to be primary and secondary for certain VLAN's including VLAN1.I have a switch in our Corporate office 3750 which is where the point to point circuit terminates. VLAN1 SVI is manually shut on that switch. Also the priority on VLAN1 is increased manually like this, "spanning-tree vlan 1 priority 28672".
Now the issue is that the Primarey Root Bridge in the DC is the root bridge for VLAN 1. But this other switch 3750 in our corporate office also is a root bridge for VLAN1. [code]
Is there any way to have my Cisco 877W Router alter from using one static route to another static route when another router on the network is reporting destination host unreachable?
Router 1 (192.168.2.253)
Dialer0 -> ppoe to internet
Vlan1 -> local 192.168.2.0/24
Router 2 (192.168.2.254)
Dialer0 -> ppoe to managed VPN (172.16.28.1)
Vlan1 -> local 192.168.2.0/24
Router 2 is connected to another network through a managed VPN and that network also has internet access. I want to be able to have two routes to the internet on Router 2. And when Router 1 internet goes down packets get routed through the VPN instead.
I currently have on Router 2
ip route 0.0.0.0 0.0.0.0 192.168.2.253
ip route 10.0.0.0 255.255.255.0 Dialer0
ip route 0.0.0.0 0.0.0.0 172.16.28.5 250
Which does nothing when Router 1 has its Dialer0 interface shutdown, or goes offline completely.I suspect I could reverse the setup and have everything routed through the VPN by default and then if / when Dialer0 interface goes down it would switch to using Router 2, but if the problem is in the remote network and interface Dialer0 stays up, it would probably do the same thing... nothing.All devices mentioned are Cisco 877W routers with ADSL and a bunch of fast ethernet interfaces.
I have two 3550s and two 2950s. I would like to put these on a rack. Where can I buy a rack? I can't seem to find them on new egg because I'm not sure what the steel frame part is called. And how can I get the steel holders that go on the sides of the Cisco devices to screw them onto the rack?
View 7 Replies View RelatedI have an 1100 series AP and it seems to be configured properly, but every few minutes or so the connection will drop and then come back up again. It is happening on two different laptops. Both using Windows XP. 1 is using a Dell True Mobile wireless card and the other is using a Cisco 350 series wireless card. I am using 128 bit encryption and the signal strength says excellent on both laptops.
View 2 Replies View RelatedI recently bought an alienware mx14 laptop last week and i am having some strange issues with the Ethernet card.The connection seems to drop from time to time at random periods, altough wireless works fine, the wired connection just loses connectivity for brief moment. The only way i notice this if, i am streaming something and it just stops the buffer or if am at the lobby of League of Legends and get timed out or, any http transfer gets cut out.I have an atheros card and w7 64bits installed with the latest drivers from Dell and have uninstalled and reinstalled them a couple of times, and they seem to work for a couple of hours , after a while getting back to the some problem.
View 13 Replies View RelatedI just switched to Cogeco Highspeed ( cable ) and bought a xtreme N gigabit router and it always seems to drop the connection every few hours. The router is set with dynamic IP , I've turned off short GI , it is broadcasting 802.11 N , I've tried changing the channels (currently on ch ,I have 2 wireless phones in the house but they are 20 or more feet from the router it self and also turned off always broadcast DHCP.
View 1 Replies View RelatedWe have a customer who uses about 20 x c2960's switches for access layer and 2 x c3560e for distribution layer. C2960's uses C2960-LANLITEK9-M , Version 12.2(58)SE1. Everything was working fine. Now we got information, that sometimes there are problems with connectivity. Customer tries to reach internet.
SW11#sh int fa0/18
FastEthernet0/18 is up, line protocol is up (connected)
Hardware is Fast Ethernet, address is e8ba.806a.4412 (bia e8ba.806a.4412)
[Code].....
I have nx2000 boxes connected to nx7000 fiber module. There is a intermittent error occuring on nx7000 fiber module.
7000 fiber module drops down and all NX2000 boxes lose connectivity. When 7000 fiber module comes up, some equipment, not all, can not be reached through console port via network. These equipment are datacenter air conditioner console port, storage controller console port (iscsi controller interfaces run fine). It seems that handshake between these equipments and NX2000 ports are not fine.
From the multiplexer 9 ethernet connections are terminating in Cisco 2960G 24 port swith and it is connected through fiber uplink to one Cisco 3560G 48 port switch in first floor, which is connected to server.
How I will configure the 3560G to make communicate with 2960G and bring all these 9 ethernet connections to server. All the 9 connections are from different IP. and server also have different IP.
I have a Win 2003 server set up as my DHCP server. It is connected to port 13 of my SRW2048 switch.
Every port from 1-12 and from 25-36 get a "Limited or No Connectivity" error when I plug an ethernet cable in them from a computer (Win XP). However, all of the other ports receive an IP address and connect to our network just fine. I've noticed that they are all in the two right hand banks of ports,though, so I'm in need of assistance as to how I can get the first two banks of ports to behave the same way. In other words, I want all of the ports on the switch to be able to populate an IP address from the DHCP server attached to port 13.
Is it possible to use 1GB (SFP / Copper) on the built-in 8 x X2-10GB ports without any Network Module of 1/10GB. If so how.
View 2 Replies View RelatedNetworking is not my gig, but it has to be at this very moment. We have an ASA 5505. Let me explain what's going on.
On Tuesday I wanted to be able to use the ASDM since there is less room for error. But we only had a console set up. So I ran the following commands...
in ($config)
http of course didn't do anything incomplete command
http 192.168.1.2 255.255.255.255 didn't anything incomplete command
http 192.168.200.254 255.255.255.255 inside
[Code]....
Everything started working after that. Everything worked fine all of wednesday and thursday. Then this morning it stopped processing again. When I traceroute it gets to the machine that is hooked up to the console and stops. So I'm guessing its actually getting to the ASA router and being swallowed up again...
I have a IBM 6400 printer that is connected to our cisco 3750 switch and the problem is that every 5 to 10 min the printer drops off the network.Testing that I have conducted is the following:
Attached a small unmanaged switch to the port that is connected to the printer and connected the printer as well as a laptop to the unmanaged switch. The printer again loses connection to the network after 5 to 10 min. Connected the printer and the laptop to the unmanaged switch, but this time did not connect it to the network and the printer stayed online.
I have had IBM come in and update the printer firmware, but this has not fixed the issue either.The printer has a static IP and we are not seeing any other issues with devices except for this printer. The IBM techs are scratching their heads and pointing to the network as the problem. While from my testing I have to agree, but I cannot see what is causing the issue. The only other thing I can think of it would have anything to do with is the MAC address time or perhaps the ARP timeout. I am just having a tough time identifying the root issue and further testing.The network is pretty flat and is only a /23. Being that it is all local to the LAN routing should not be a factor, but I am willing to try anything to get this issues addressed.
I have a IBM 6400 printer that is connected to our cisco 3750 switch and the problem is that every 5 to 10 min the printer drops off the network.
Testing that I have conducted is the following: Attached a small unmanaged switch to the port that is connected to the printer and connected the printer as well as a laptop to the unmanaged switch. The printer again loses connection to the network after 5 to 10 min.
Connected the printer and the laptop to the unmanaged switch, but this time did not connect it to the network and the printer stayed online.I have had IBM come in and update the printer firmware, but this has not fixed the issue either.
The printer has a static IP and we are not seeing any other issues with devices except for this printer. The IBM techs are scratching their heads and pointing to the network as the problem. While from my testing I have to agree, but I cannot see what is causing the issue. The only other thing I can think of it would have anything to do with is the MAC address time or perhaps the ARP timeout. I am just having a tough time identifying the root issue but how to do further testing.
The network is pretty flat and is only a /23. Being that it is all local to the LAN routing should not be a factor, but I am willing to try anything to get this issues addressed.
Having an issue with my WLC 5500 and client connectivity. This just started today. Clients will connect for a short period of time and then drop off. WLC appears fine with the exception of a bunch of trap errors. I've rebooted the WLC but this did not clear the issue.
View 3 Replies View RelatedWhat will be the recommended connectivity of stack power cable in 6 number of 3750x switches ?
Is it similar to the stack cable ?
We have two 5548 switches connected to a pair of 6509 running in VSS mode. I am trying to understand the benefit of having bridge assurance on the uplink ports.
If we have the command spanning-tree port type network enabled we cannot do a non disruptive upgrade. If there is bridge assurance on the uplink it warns you of this. Yet if I do not run bridge assurance on the uplinks I can do a upgrade without any disruption.
Why in god would I enable bridge assurance on this VPC link if I cannot do a non disruptive upgrade?
am using GNS3, and have the 16port switching module. I have created a PC instance and connecting to f/0/0 which is a layer 3 port, I can connect via layer 3 IPs. I then reconfigured and connected the PC instance via a layer 2 port f2/0 which is part of the 16port switch module. All 16 ports are by default in vlan 1. I assigned an IP of 10.1.9.1/24 to the VLAN and gave the PC 10.1.9.2/24. I cannot ping and I cannot even ping 10.1.9.1, the VLAN 1 IP. [code]
View 5 Replies View RelatedConfiguration details: I have 2 nexus 5K switches and both 5K is connected to four 2960 access switches in each floor through fiber(shown in the attached picture). I have configured each VPC for each floor and portchannel configuration on 2960s switch to communicate to 5K switches. Now I am not able to communicate PC 1 connected in 1st floor to PC2 connected in 4th Floor.
I have attached topology map of my infra and the configuration files also. 1st floor switch and 4th floor swich have same configuration except IP address and switch name.
We are in the plan of implementing a new 10gig network. For this we have chosen the Nexus 5596 and 2232 pair. What are the transceivers/accesories I should order for connecting 10Gig servers of NC552SFP dual port NICs to the 2232 in High availability (NIC 1 to 2232PP 1 and NIC 2 to 2232PP 2). Should I order the FEX SFP+ uplink conector to conect 5k and 2232 also (or its aded to the Nexus box itself) ? Also, is it fine to have Nexus 2232 in floor 2 and Parent neus in Floor 3 (say seperatd by a max of 400meters)?
View 1 Replies View RelatedCurrently have a setup where we have multiple SVI interfaces in a VRF on a Catalyst 6500 Switch. All these SVI belong to the same VRF. In order to achieve connectivity for hosts within the VRF to access hosts outside the VRF (Hosts reachabe via the Global Routing Table (GRT)) I am thinking I need to configure 2 things
1. Creating a summary route for all the subnets within the VRF in the Global Routing table.
<Config on 6K in Global Routing Table>
Note: 10.10.10.10 is the ip address of loopback 10 and this loopback 10 is in VRF Red
ip route 172.16.0.0 255.255.0.0 loopback10 10.10.10.10
2. Create a couple static routes within the VRF for networks that reside in the Global Routing table but which are not local to this 6K.
<Config on 6K within the VRF Routing Table>
Note: 1.1.1.1 is the ip address of loopback 1 and this loopback 1 is in the GRT or not assigned to a VRF
ip route vrf Red 172.32.32.0 255.255.255.0 loopback1 1.1.1.1 global
ip route vrf Red 172.32.40.0 255.255.255.0 loopback1 1.1.1.1 global
ip route vrf Red 172.32.50.0 255.255.255.0 loopback1 1.1.1.1 global
I have read through some posts and it seems to indicate that I cannot point to a loopback interface as it is not a point to point interface. How this solution can be achieved. The reason I was pointing to a loopback was so that I am not tied to a particular physical interface and for the summary route that was created in step 1 really not sure what L3 interface I could point to since I have multiple SVI's that are in the same VRF. Would I also need to create that same summary within the VRF. I don't intend to since I am assuming that once within the VRF the more specific connected interfaces would take affect and forward respectively.
In addition to the above I also need determining the forwarding behavior when there is a ip helper address configured under the SVI's which are in a VRF but the ip address for that helper is not part of the VRF. I would think if a static route is configured under the VRF for that helper address network pointing it to the Global Routing table it should work. The config for that would be
ip route vrf RED 172.32.52.5 255.255.255.255 loopback1 1.1.1.1 global
I would like to ask about following setup.
Internet --> Cisco ASA 5515X --> 2 Gbits etherchannel --> Cisco 2960T-48 --> 40 customers, each has own VLAN
Cust 1 -- VLAN 10 --port Fa0/1
Cust 2 -- VLAN 20 --port Fa0/2
Cust 3 -- VLAN 30 --port Fa0/3
Cust 4 -- VLAN 40 --port Fa0/4
Cust 5 -- VLAN 50 --port Fa0/5
etc
I have to provide sharing internet connectivity for all customers.Speed is 100 Mbits, I have to garantee 3 Mbit to every customer and max speed will be not limited.ASA do routing, firewalling, nat etc.
I am running those modules in my Cisco 6500 chassis and having lot of connectivity issues. I lose network connectivity every 5-6 day at around the same time. I have (2) C7000 Chassis with HP VC-Flex 10 Modules connected via 20Gb LAB to each Cisco Cisco 6513 Switches. However, the OA Modules on C7000 are connected via 1Gb uplink to either 6548 and 6148 modules. I beleive this is causing the netwok connectivity issues.What modules would be recommended to replace 6548 and 6148 who only meant to be used for 1Gb desktop connectivity, and not for Server Farm.
When you use either the WS-X6548-GE-TX or WS-X6148-GE-TX modules, there is a possibility that individual port utilization can lead to connectivity problems or packet loss on the surrounding interfaces. Especially when you use EtherChannel and Remote Switched Port Analyzer (RSPAN) in these line cards, you can potentially see the slow response due to packet loss. These line cards are oversubscription cards that are designed to extend gigabit to the desktop and might not be ideal for server farm connectivity. On these modules there is a single 1-Gigabit Ethernet uplink from the port ASIC that supports eight ports. These cards share a 1 Mb buffer between a group of ports (1-8, 9-16, 17-24, 25-32, 33-40, and 41-48) since each block of eight ports is 8:1 oversubscribed. The aggregate throughput of each block of eight ports cannot exceed 1 Gbps. Table 4 in the Cisco Catalyst 6500 Series 10/100- & 10/100/1000-Mbps Ethernet Interface Modules shows the different types of Ethernet interface modules and the supported buffer size per port.Over subscription happens due to multiple ports combined into a single Pinnacle ASIC. The Pinnacle ASIC is a direct memory access (DMA) engine that transfers packets between back plane switching bus and the network ports. If any port in this range receives or transmits traffic at a rate that exceeds its bandwidth or utilizes a large amount of buffers to handle bursts of traffic, the other ports in the same range can potentially experience packet loss. The buffer assignment on these modules is documented in Buffers, Queues & Thresholds on Catalyst 6500 Ethernet Modules.A SPAN destination is a very common cause since it is not uncommon to copy traffic from an entire VLAN or multiple ports to a single interface. On a card with individual interface buffers, the packets that exceed the bandwidth of the destination port are silently dropped and no other ports are affected. With a shared buffer, this causes connectivity problems for the other ports on this range. In most scenarios, shared buffers do not result in any problems. Even with eight gigabit attached workstations, it is rare that the provided bandwidth is exceeded.
The switch can experience degradation in services when you configure local SPAN in a switch, especially if it monitors a large amount of source ports.
This problem remains if it monitors certain VLANs and if a large number or ports is assigned to any of these VLANs.Even though SPAN is done in hardware, there is a performance impact since now the switch carries twice as much traffic. Since each linecard replicates the traffic at ingress, whenever a port is monitored, all ingress traffic is doubled when it hits the fabric. The capture of traffic from a large number of busy ports on a linecard can fill up the fabric connection, especially with the WS-6548-GE-TX cards, which only have an 8 Gigabit fabric connection.The WS-X6548-GE-TX, WS-X6548V-GE-TX, WS-X6148-GE-TX, and WS-X6148V-GE-TX modules have a limitation with EtherChannel. For EtherChannel, the data from all links in a bundle goes to the port ASIC, even though the data is destined for another link. This data consumes bandwidth in the 1-Gigabit Ethernet link. For these modules, the sum total of all data on an EtherChannel cannot exceed 1 Gigabit.
Our environment consits of 4 cisco SGE2010 switches (stacked). I have implemented STP BPDUGUARD and Portfast on all client ports (suspected a loop). And our uplink to the Server DMZ recieves almost all of it's BPDU packets back(is that normal?) The issues lies where we have random ports dropping out - across all stacks for seconds at a time. We get errors/warning such as,Pinging between the DMZ network appears to be fine. Pinging from the client/switch network show packets being dropped quite frequently.All devices are on VLAN1 (I've have researched this and this could be the cause of the issue)
View 12 Replies View RelatedWe have a switch that, when configuring auto qos on and edge port facing video equipment, the upstream port channel drops. I was wondering if no auto qos would have to be configured on the member ports of the port channel prior to enabling auto qos on any other ports.
View 2 Replies View RelatedRACK 1 is the old rack and NEW RACK is the rack which is going to be procurred for some new Servers. All the Servers in the RACK 1 has a default gateway as PIX Inside IP. As of now the 3560 Switches acts as Layer 2 and does not have L3 IP routing enabled. How can I enable conenctivity between 192.168.36.0 range and 192.168.57.0 range wihtout making any change to current PIX inside IP address 192.168.57.1?Is it possible that I can enable IP routing on the 3560 Switches , create interface VLAN 36 and since already Switch 2 has it 's default gateway as 192.168.57.1 , Would the traffic from 192.168.36.0 be routed to 192.168.57.1 ? Or do I need to create static route for that ?Since L3 Routing is not enabled and since the 3560 Switches are just acting as L2 , the VLAN 2 - 192.168.57.0 range does not have any interface VLAN configured. When it is changed I would need to create interface VLAN 2 on 3560 Switches?
View 18 Replies View RelatedWe recently had a pair of Nexus 5k switches setup in our network. We had professional services handle the initial configuration but they weren't able to setup config sync for us. Each Fex is connected to each 5k, so we need a switch-profile to maintain a consistent setup on our interfaces. I went through the process in Configuring Switch-Profiles, but when I check the status of the peer, it says not reachable. [code]
View 1 Replies View RelatedI haven't worked with infrastructure much lately but planning on replacing a Dell switch used for a small iSCSI SAN with a Cisco 3560x. Switch is sstorage ONLY, network handled through different switches. I believe I want to disable spanning tree and configure trunking for the 4 GB ports connected to the storage array. The switch is providing connectivity to SAN via multiple GB connections and then also multiple GB connections to 3 Vmware hosts.Can you look over the changes I made to config below and let me know if I am on the right track.
I also plan to add a second switch later with the 10GB modules to interconnect for redundancy (but not worried about that part for now). I do not plan on using jumbo frames.
Here are my questions
1) Is the best way to globally disable spanning tree for the switch?
2) Did I trunk the ports correctly below?
3) Should I apply any specific SmartRoles to the 4 SAN NICs (GE1-4) or to host NICs (GE13-20)?
4) Anything additional I should do to handle iSCSI data?
Here is a copy of the config so far with my changes marked in RED.
storage1#wr tBuilding configuration...
Current configuration : 1696 bytes!version 12.2no service padservice timestamps debug datetime msecservice timestamps log datetime msecno service password-
[Code].....