Cisco Switching/Routing :: WS-3550-12G Using Existing Equipment To Build Distribution Layer
Aug 29, 2012
I have some questions in regards to network equipment I want re-utilize for my distribution layer in one of my buildings.The choices at the moment are:
OPTION 1.) 2x WS-3550-12G's (HSRP)
OPTION 2.) 1x WS-6509 with cards:
What option would be better from a performance aspect? We want to have network, voice, and wireless data go through this distribution layer switch(es).This is exisiting equipment I already have and can not buy anything else at the moment.
vlan 10 ports 1-10 vlan 21 ports 11-20 vlan 30 port 21-30 vlan 40 ports 31-40 default vlan should be vlan 21
I have the servers, switch and router connected to vlan 21. Vlan 21 works great I can browse the internet, but I cannot ping any other vlans. router is connected to fa0/19
[code] Building configuration... Current configuration : 4833 bytes ! version 12.2 no service pad
i am using Cisco ASA5510 Firewall on my network at the distrubution Layer . The Private IP Address is in the network for Users and PAT is use.I have a client who has configured the RDP on port2000. when the Users behind the Firewall in my Network tried RDP it does not work it shows configuring remote Desktop only. i am able to telnet the Client said server with port 2000 but unable RDP.Is any changes required on my firewall as a tesult the RDP works.
I have been working on redesign of our network which was very challenging but almost there.We have a limited budget of around £20k(32k Dollor) Max. The cabling has been done before my time and it is very messy and cheap so you can not do a proper cisco hierarchical model at all.I can not have multiple links from each access layer switch to the core/distribution and as a result i had to connect some access switches together to introduces redundancy in a nutshell,we have two buildings, main building which has the server room in it and the other building which is just bunch of office. i have introduced a partial mesh on the normal building and have tried to introduce full mesh on the main building .
I have broadband connection on a wired DSL Modem. Now I want to create a wireless networking environment at my home so to work with my laptop and WLAN enabled phone. I do not like to buy a new Wireless router.
Is is possible to deploy my existing modem/router with some extra equipments to build a wifi hotspot?
i am trying to monitor some UPS equipment,for that i am using a cisco 2960 switch and when the UPS is down it sends a L1 loop.when the switch detects the loop the int in which the UPS is conected to will get a link and go up.now my problem is this, as you probeblly know the switch has a protocol which protects it from getting loops and cuasing all kinds of problems.i need to remove this protocol and allow the switch to get L1 loops?
P.si have tryed to use UDLD, KEEPALIVE, BPDU guard, down-when-looped and errdisable commands with no success?
A client I have just taken on wishes to provide internet data and VoIP for multiple tenants in their new office they move to in a few weeks.
they currently have a Cisco 2811 router with a 24 port Catalyst 2960 PoE managed switch serving just their staff and one tenant company who is plugged into a single port on the switch. I dont know what the tenant has the other side of that at this time.
when they move they currently will provide single port access points on the switch for each tenant, so the tenant can deal with their own network LAN. The client will provide phones to all the tenants using VoIP phones on a single subnet and hosted on an external PBX the phones all plug into the Catalyst and use the PoE. the WAN is a 20mbps fibre connection.
The client has 16 staff, the tenants are 3 companies with 3,6 and 9 staff. They may all increase or decrease in size to a total size of about 30 or 40 people.
I have a few questions
1. should I look at Vlan setup for this instead of the current basic routing setup or is that overkill since they only use one port access point per tenant as gateway.
2. can the cisco 2811 handle this or is it a bit old.
3. what router replacement would be recommended for this task given the above info especially if I went with Vlan solution.
4. any thoughts on the current switch's capability for this task.
5. managing bandwidth solutions? is there any router designed with this in mind. the ASA maybe or something like it with nice visual webgui management capabilities for monitoring and controlling bandwidth use of tenants? Mark
using the 55xx as a L3 Distribution switch or even as a Core. By enabling the L3 features does it allow you enabled L3 SVI's for VLAN interfaces or are there interfaces on the daughter card that are used for routing instead?
We have 4507 distribution switch in our network.I am trying to enable ssh in those switches but seems that ssh command is not supporting. IOS version - cat4500e-universal.SPA.03.03.00.SG.151-1.SG.bin
Imagine I am designing a small network with a C2900 router running OSPF and in the future BGP with service provider. Please see attached diagram.The router is connected to (2) C3750 Layer 3 distribution switches. Then one C3560 layer 2 switch to serve future IP phone users and desktops.
Question:
a)If I connect the router interface to the (2) 3750 switches, if I make the router interface fa0/0 and fa0/1 as a trunk to accomodate VLAN 200 and other future VLANs, don't I have a problem with overlapping networks between router interface fa0/0 and fa0/1?
b)Alternatively, I could make the Router1 fa0/0 and fa0/1 configured with IP addresses and advertised in OSPF. Then the SW1 fa0/24 and and SW2 fa0/24 I could make as 'no switchport and create a routed interface port' with IP addresses, also running OSPF. Question is, from a scalable design perspectie, would you create 2 management networks and use those when assigning the IP addresses for Router1 fa0/1 and fa0/2? Because again Router1 fa0/1 and fa0/2 obviously need to be placed on different networks to avoid overlapping. So my question is more about proper network planning design to make this scalable to accomodate future VLANs in the future.Using trunks between the Router1 and SW1 option:
Router1 int fa0/0 description connection to SW1 no ip add int fa0/0.200
I'm looking at implementing a cisco 3550 Layer 3 switch and would like to know if i can forward ports down to all of my different Subnet Servers/Pc's.
For example. See attached image.10.0.3.5 is a mail server. 4.2.2.2 is our public IP.
I would like to forward TCP port 25 down to our Mail servers IP. Any reason this will not work by using the cisco 3550? Currently we have a flat network (1 subnet) and port forwarding works fine.
The two stacked Cisco 3750G Access switches on a particular floor in my coy just lost connectivity to the distribution Switch this morning. This meant that all Users connected to it couldnt connect to the Internet nor access local network resources.I couldn't ping the Switch IP, I couldn't also access the Switch via Console port. Each time I tried to gain access via the console port, I keep getting "Authentication Failed" message.What should I do next? How do I gain access to the Switch?
This is existing network diagram and find attached file for configuration of Router and L3 Switch:ISP provided 6 Mbps internet access link with ethernet Handoff which is terminated over Cisco 1841.ISP also provided pool of 30 Public ip's 125.63.74.33 /27 , range from 125.63.74.34 to 125.63.74.62.In my current setup, all Inside to ouside traffic going out through 125.63.74.34 public ip because this public-ip NAT overload with Router F0/1 interface.
1) I want to divide 6 Mbps link physically into three parts 2Mbps, 2Mbps, 2Mbps for three VLANs.
2) I want to also configure each vlan IN/OUT traffic with different Public ip. is it possible or not ?
Vlan2 = 172.25.162.0 /24 => Inside to outside / Outside to inside traffic through 125.63.74.40 Vlan3 = 172.25.163.0 /24 => Inside to outside / Outside to inside traffic through 125.63.74.41 Vlan4 = 172.25 164.0 /24 => Inside to outside / Outside to inside traffic through 125.63.74.42
How can i configure above desired setup with CBWFQ
I had a lot of questions when I began planning a pair of Nexus 7000 switches as a replacement for our 6500. How to publish my design and config. This is a medium sized network. I would have loved to see somone's configs for a similar implementation.
Any configuration example to build a vpc b/w 5ks and 7ks? i have total 4 links between them . If not, I am assuming to have the following config for the port-channels:- (Provided the vpc domain is configured).
N5k1 and 2: int eth1/10-11 channel-group 10 mode active switchport mode trunk int po10 switchport mode trunk switchport trunk allowed vlan a-d
[code]....
So, its basically vpc 10 that has 4 physical links b/w the vpc domain of 7ks and vpc domain of 5ks.
To setup SG300-20 as CORE switch and SF100-48 as Distribution switch.SG300-20 will have 2 VLAN(DATA and VOICE)
-192.168.14.1/24 DATA -172.168.0.1/24 VOICE
SF100-48 will also have 2 VLAN(DATA and VOICE)
-192.168.14.1/24 Desktop/Laptops -172.168.0.1/24 IP phones
Problem is when I tried to assign IP to any VLAN's the switch will just hang and loose my connection the light will stop blinking it will steady and i unable to access the switch until i turn off again?
I am trying to setup my 3550 layer 3 switch to do hand out dhcp addresses for different vlans. It is connected to my router address 192.168.1.1. I setup a new vlan 3 and the dhcp pool.. The client gets a 192.168.3.2 address but am not able to ping the router and other clients and get out to the internet.
Here is the config that I have. I deleted the other ports because I am not using them. The vlan 3 client is on port fast Ethernet 0/17 and the router is connected to the fastethernet 0/1.
version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption
I have to use 9 Cisco 300 series switches to build a new network. I will use one of them (core switch) in L3 for routing between Vlans (3 Vlans) and the others in L2. Is there a software to centralized all switches configuration, operation and monitoring?
I plan to build improved redundancy in to my LAN by stacking two 3750s and teaming pairs of NICs on my Dell PowerEdge servers, with each cable of the pair going to a different switch.In my mind this provides redundancy for the NICs and the switches. Does this configuration will work, and also what type of teaming is supported, as I was planning to have one NIC active and one standby, but can I run this configuration with both NICs in the team as active with load balancing?
when try to build etherchannel trunk in between this unit C4510 with the other C4506 Physically can see that the slot 2 shows red light. I had tried reinsert the line card of slot 2 still show same error below when show log,
after swap current line card at slot 2 with new line card show me need to "try reinserting module" ? What happening on this? If this what we did now is we already assume line card is not an issue, could this be a chassis proble? Hope to get your feedback sooner possible.
%C4K_CHASISS-3-LINECARDSEEPROMREADFAILED : FAILED TO READ module 2's serial eeprom , try reinserting module
I'm looking at the possibility of purchasing a few 3750 to build a switch stack to replace my current core and access switches. I'd like for the stack to support server, SAN, and user traffic, as well as provide simple switch management, redundancy, and failover. I've also been looking at the 4500, 6500, and Nexus series switches (although the Nexus switches maybe a bit too much for my network).
My current environment consists of 3560's as the core/distribution/access switches, a mixture of Hyper-V and VMWare environments (although we're slowly migrating to Hyper-V), an HP SAN (P4500), and about 100 users. Any issues going with the 3750's or have an alternative, more efficient solution?
I have a site that is very dense, but not high throughput. I have 4x48 port switches all 3560 and 1 2851 router. The switches are pretty much full to the brim but the site is never completly lit, they just like to move around a lot. However i wanted to provide this site with as much redundnace as possible. So my first thought was to build redundant pathing with the switches so that they could loose a switch and not have a single point of failure. So therefore I built a ring. SW1 to SW2, SW2 to SW3, SW3 to SW4, SW4 to SW1. To make this even more redundant against port hardware failure, i used two uplinks for each and built an etherchannel. is it good practice to use Etherchannel and Spanning Tree together?So i now have a good redundant LAN switching topology. I have multiple VLANs at the site so I am using Rapid-PVST. I did not set priorities on the switches as I don't think that is really truly necessary, but correct me if I am wrong!Ok so next step is to make sure that my WAN connection for all of these switches is redundant. I have a 2851 router, with 1 of the built in interfaces dedicated to our ethernet hand-off WAN connection (MPLS in this case using BGP routing). The other would be used as an uplink. I also got an additional card for the Router so that i can have redudant local LAN connections. I then built up some IRB bridges so that I could uplink the Router to SW1 and SW3. Is it good practice to use IRB Bridging on a Router to provide redundancy?So at this site i have the first part running, and it works pretty well but I have had 1 strage issue, which has to do with after a failure and re-convergence of spanning-tree, it seems that DHCP starts failing to work. I actually had to go into each of my switches make a dummy VLAN interface and put on helper-addresses to get them to work. They are not L3 switches (programatically speaking) so they should just forward the broadcast packet onto the router, which DOES have the helper-addresses programmed,Also at another site I have the bridge router setup configured, just without so many switches, and no etherchannel between the switches. This seems to work flawlessly, but the site is very small so performance issues would be difficult to spot since they are just thin-clients coming back to a Citrix server over a single T1.
I have a collapsed core design with routed ports between all components. Access layer switches, data center switches, core/aggregation. All routed (no spanning-tree at all).Now...I have to add an IBM BladeCenter with a BNT layer 3 switch to my topology. However, those nasties don't seem to support routed ports.How can I have a routed port on my cisco switch and a standard access port on the BNT and still establish an adjacency with an SVI? I am running OSPF, but I am labbing this in my home lab with 2 x 3550s and EIGRP.
On SW2: *Mar 1 00:57:00.711: EIGRP: Received HELLO on Vlan100 nbr 10.1.1.1 *Mar 1 00:57:00.711: AS 999, Flags 0x0, Seq 0/0 interfaceQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/1 *Mar 1 00:57:02.303: EIGRP: Sending UPDATE on Vlan100 nbr 10.1.1.1, retry 9, RTO 5000 tid 0 *Mar 1 00:57:02.303: AS 999, Flags 0x1, Seq 17/0 interfaceQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/1
Is L3 ip routing on by default in 3550s? If so is the "ip routing" command visible in the config file? If no - I assume that one would enable L3 routing with that config command.In general terms are there any IOS devices where ip routing is enabled and one would not see the "ip routing" command in config. I.E. if that command is not visible in the config could you assume there is no L3 capablity in that device?
The layer 2 switches are connected to layer 3 Switch via trunks, and routing between layer 2 switch ports with configured SVI's on 3550. All working fine. Now I'm trying to configure routing between 2800 and 3550, I tried connecting both Straight Throught and Crossover cables to the 2800 Fa0/0 and Fa0/1 ports as well as the switchports on 3550
No switchport commands are configured however, the lights do not go on for both straight through or crossover cables. I tried connecting 1750 routers but same result. My goal is to have all the VLANS routed to the internet with configuring NAT translation the router.
I'm having some problems setting up vlans to talk to each other on a 3550-12T switch. Its quite a simple setup I have, but I need to split my network up.
Currently I have a network of 192.168.25.0 255.255.255.0 I want to create a new vlan network of 192.168.30.0 255.255.255.0 So I have configured my vlan1 (default vlan) to have an ip of 192.168.25.250 for getting to the management page
I have created a vlan2 of 192.168.30.1 255.255.255.0 ?I have a port 10 linked to one of my 3560G's?In port 9 which is on vlan2 I have my pc plugged in with a static ip of 192.168.30.50 from the router I can ping any device on 192.168.25.x.
I can not ping 192.168.30.1 (which is my vlan2) nor can i ping the PC.
I have enabled ip routing But I dont have a default route, this is becase we don't have a router on the network.
I've been working with these two Cisco devices in my home off and on for several months now but I just can't take it anymore, I'm about to throw them away and go back to Linksys router.
I have a Cisco 2600 Router with only one Ethernet card in it so I have to trunk from my 3550 Switch to that device. I'd like to have my ISP and all users plug into switch and all trunk back to the router's sub interfaces. Currently, I have started over...again, and am unable to simply get the router and switch to ping each other if I put sub-interfaces on the router. See my configs:
2600 ROUTER: Router#sho run Building configuration... Current configuration : 555 bytes [code]......
3550 SWITCH: Switch#sho run Building configuration... Current configuration : 2302 bytes ! version 12.2 [code]..........
Port F0/24 is in VLAN 1, as are all ports but Port F0/1 which is my desktop PC. I mocked it up in Packet Tracer and it works just fine. This is just a simple setup and I'm making sure I can ping between switch and router before I move to each next step.
It is understood that sub-50 ms ERPS convergence can be achieved with certain HW/SW combinations.
1) What are the platforms supported (and with what FW/SW) has this been tested ?any results that can be shared?
2) Link failure detection in GigE on Copper is slower compared to GigE over "pure" Fibre; so no sub-50ms would be possible with Copper ring ports.is sub-50ms convergence achievable with "combo SFP ports" ?
My management has tasked me to give them a high level overview of the different switching we can choose for our new building.
This is what I know so far.4 Closets, each closet has 450 ports,One MDF room that is will contain one UCS Chassis and a Nimble iSCSI SAN.
I am working on the spreadsheet and it looks like this (Not totally filled):
2960s3560x3750x45064510Approx cost (Each, 48PORT, POE+, 10G uplink, Dual PS, IP BASE) 6K7K8K45K75KMax Capacity192432432192384Backplane speed206464520520ProLeast ExpensiveStackable to 9Stackable to 9ProDual PSDual PSDual PSDual PSDual PSProLayer 3 opt Layer 3 optDual SupsDual SupsConExpensiveExpensiveConNo Dual PSConLayer 2 OnlyCannot stack more than 4 For the MDF I would like to use 2 Nexus 5548's with FEX's, and the layer 3 daughter board. For the IDF's I was thinking of two 4010's.
We are setting up a test lab in our DMZ. The path to the internet is basically like this. Anything past the firewall is irrelevant. For this lab lets assume it is vlan 300.
LAB SW ---> DMZ-SW ---> ASA FW ---> INTERNET LAB IP Range = 172.16.300.0 /24 GW = 172.16.300.1 (On FW int) Trunked all the way through.
I have an int vlan set up on the LAB SW. It is being trunked to DMZ SW. DMZ trunks it to ASA FW where there is a failover with a redundant switch.On the ASA the interface 0/2 is a subinterface 0/2.300 being used as the default gateway.
I have DHCP running in a specific range on the LAB SW and do get an ip address when plugged in. I cannot ping the default gateway on the ASA FW.The GW is defined using default-router command for 172.16.300.1 i.e. default-router 172.16.300.1?
We are running ospf on the firewall. There appears to be a pattern with ospf and a similar subnet setup elsewhere. I was wondering based off of this info would configuring ospf for 172.16.300.0/24 allow me to ping the GW from a client on the LAB SW.Secondly. I trunked 300 on the DMZ SW but I didnt add the vlan to the configuration. i.e. conf t <enter> vlan 300 <enter> Does this really matter? Or is having the vlan in the configuration only pertain to access mode on interfaces?
The situation include 2 cisco routers an 2 switch 3550
so we have Router A in Vlan x access ----->Sw1----Trunk----Sw2<------Vlan y Access Router B I 've to enable rip1 on guys A and B ONLY !!! Avoiding any kind of tunnel I though it was all around fallBAck bridging ... but after days of tries ...
