Cisco Switching/Routing :: WS-C3560E-24TD IP SLA Responder And Conflict IP Addresses
Sep 8, 2012
I have a network topology which you can see on image. All routers are Cisco 3745 with IOS (C3745-ADVENTERPRISEK9-M), Version 12.4(12). SW1 is L3- switch Cisco Catalyst WS-C3560E-24TD with IOS (C3560E-UNIVERSALK9-M 12.2(58)SE2). [code] After that I have problem. When PC with OS Windows 7 begins to work in corporate network, it sees "coflict ip addresses" and doesn't work with network. I've used wireshark and seen, when the PC send arp request a SW1 always send arp reply (see attached file). I think problem with command "ip sla responder", but I haven't searched information about it and I want understand this is bug or normal functioning.
View 1 Replies
ADVERTISEMENT
Mar 17, 2013
What is the difference between Operating temperatue & storage temperature of switch C3560E ?
View 2 Replies
View Related
Apr 28, 2013
Two ports in C3560E are grouped together in "active" mode.These ports are connected to a EMC server. When I type as below, the channel is in SD mode. The Server admin told me that this is normal behavior since one port is active and the other is in standby mode of which are teamed together.
Switch#show etherchannel summ
...
Number of channel-groups in use: 1Number of aggregators: 1
Group Port-channel Protocol Ports------+-------------+-----------+-----------------------------------------------1 Po5(SD) LACP Gi0/33(I) Gi0/34(I)
View 2 Replies
View Related
Oct 28, 2012
I have recently split the voice vlan (10) from the data network (1), and am wondering why my catalysts and router do not require an interface Vlan10 statement. In the past I used OpenBSD boxes to do the routing, and I first needed to configure vlan 10 on the interface before I could get inter-vlan communication to work. With these Cisco devices it works, and I am wondering if it is because of VTP, for the fact that the ports maybe just pass all traffic, or is there some other explanation? Below is the setup, and firmware is up-to-date on all of the devices.
When I plug a phone into the POE SGE, the phone turns on, obtains an address on the proper subnet, and conversations are clear (whereas without the ip nat inside on the new subnet the calls had a lot of static). Possibly the reason that it works is because the phones properly create the tcp/ip packet, and it hops over the trunks and creates the states so that traffic routes back properly. I will install wireshark to see exactly what is going on, but is there a simple explanation that I am overlooking?
View 1 Replies
View Related
May 10, 2013
Does GLC-GE-100FX is supported on the WS-C2960S-24TD-L. I don't see this switch listed under the compatibility matrix.URL
But the datasheet for the 2960S says this:
"The Cisco Catalyst 2960-S with SFP+ does not support the GLC-FE-100BX, GLC-FE-100FX, or GLC-FE-100LX." But it provides no reference for the GLC-GE-100FX The easy answer is, no the 2960S-24TD doesn't support it, any clarification if possible.
View 1 Replies
View Related
Apr 22, 2012
Can we stack a 3750G-12S-S switch with a 3750-E-24TD-S switch?
View 4 Replies
View Related
Apr 13, 2011
I have 3560e which doesn't appear to be passing igmp traffic to the upstream router
PC1 ----------- ASA ------------ PC2--------- 3560e ----------- 3825 -------------------- WAN --------------------- Router ------------- Server
My ASA runs SMR, has an igmp forward interface outside command on the inside and has a trunk port to the 3560e (V lans 32 & 48).PC2 is a test pc on the 3560e on vlan32. 3825 is my ISPs router on vlan32.
- if i try to access the stream from PC2 it works.
- if i try to access the stream from PC1, i see the igmp join leave my ASA onto the 3560E (i've captured on the 3560e's link to the ASA).
I've also captured on the ASA and i can see the igmp packet leave the outside interface but the join doesn't reach the 3825 (i've captured on the 3560e port facing the router and there is no join being forwarded).the switch is running in layer 2, 12.2(35r)SE1.
switch#sh ip igmp snooping querierVlan IP Address IGMP Version Port---------Switch#
Global IGMP Snooping configuration:------------------------IGMP snooping : EnabledIGMPv3 snooping (minimal) : Enabled Report suppression : Enabled TCN solicit query : Disabled TCN flood query count : 2Robustness variable : 2Last member query count : 2Last member query interval : 1000
View 2 Replies
View Related
May 6, 2012
Recently I have faced following problem in my office, We have purchased two new Dell Server Power Edge R910 with built-in 10GB FC Network card. Service tag of this two servers are given bellow.
1. 7D94C2S
2. 6D94C2S
You can can Check specification of this two server from dell website{ URL}
We have two CISCO switch and model is given bellow:
Brand: CISCO
Model: WS-C3560E-12SD
We want to connect server to switch through FC cable and both switch have SPF module. But when we connect server to switch, link do not establish even switch and server port light become off.
Then we have tested the following things:
1. Connect server to server through FC cable, it is okay.
2. Connect switch to switch through same FC cable, it is okay.
I don't understand why it is not working.
View 5 Replies
View Related
Nov 30, 2010
Does GLC-GE-100FX is supported on the WS-C2960S-24TD-L. I don't see this switch listed under the compatibiilty matrix.URL,But the datasheet for the 2960S says this:"The Cisco Catalyst 2960-S with SFP+ does not support the GLC-FE-100BX, GLC-FE-100FX, or GLC-FE-100LX."But it provides no reference for the GLC-GE-100FX,The easy answer is, no the 2960S-24TD doesn't support it.
View 1 Replies
View Related
May 2, 2012
I just found out that one of our 10 3750's has been assigned with an IP Address that is in conflict with a PC that has been in production long before this 3750 was deployed in our environment. Good thing it is servicing devices on a separate vlan. The conflict IP Address is assigned to the default vlan of the switch so we can connect to it from the core.If I change the IP Address of the switch, will it reboot and momentarily disconnect the devices connected to it?
View 14 Replies
View Related
Apr 21, 2013
We have VSS configured between Cat-6509 switches (s72033-advipservicesk9-mz.151-1.SY.bin)..For the voice vlans,dhcp scope is configured within VSS and ip addresses are assigned to ip phones from these pools configured within VSS.Cat 3750 stack is connected with dual links to this vss. IP phones are connected to cat 3750 switches and desktop is connected back to IP phone. For data vlans IP addresses are assigned from external dhcp server.
Currently we are facing lot of ip conflicts for ip phones and after clearing the dhcp conflicts, IP phones starting getting IP addresses..(sufficient IP's do available in the dhcp scope for IP address assignment). (What exactly the role of no ip dhcp conflict logging command......)
View 4 Replies
View Related
Jun 3, 2012
I had problem with IP conflit address from cisco router 2911 , all the time the router respond with ARP reply (duplicate use of IP : x.y.z.t with the same Mac Address ) and the IP subject of conflit dosen't appear in any router's interfaces configuration (basic configuration without dhcp) ,the problem was solved problem when I desactivete proxy arp but I can't understand this behavior , why arp proxy respond to all IP address with same Mac even the IP dosen't exist in router ?
View 4 Replies
View Related
Feb 7, 2012
I have switch 2960 and router that connect with one interface to that switch. the link is trunk and Router function is inter vlan routing between 4 vlan. This netwrok has only one ip address space that is 10.10.2.0/24 and work without problem. We connect cisco switch 2960 with optic link to another switch that in stack 3750 which configured as trunk link and allowed only 3 vlan between them. In the other side netwrok which consist the switch 3750 we have different subnet ip address that switch working in layer 3 too. the problem is that when I permit vlan 210 in the switch 2960 only layer 2 between this switch and the 3750 in network that consist th ip address 10.10.2.0/24 devices, if I disconnect and then connect pc to network he says that he has ip conflict and in the log he show mac address of router that has vlan 210 subinterface configured with 10.10.2./24 subnet. But how I gibe back vlan 210 from permited vlan in trunk devices start normaly working. If I again put vlan 210 to permit vlan in that trunk devices again said that there are conflict ip address and show mac address vlan 210 router subinterface.
View 10 Replies
View Related
Apr 13, 2013
I am tryingto add a new VLAN on my C3560E Layer 3 switch for administration purpose.My goal is to make this VLAN for administration only and to let the administrators from 172.17.1.1 connect to any host of the internal network 172.16.0.0 plus exit to the internet via the default gateway 172.16.1.245.
Here an extract of what done so far:
ip routing
spanning-tree mode pvst
spanning-tree extend system-id
vlan internal allocation policy ascending
!
interface GigabitEthernet0/1
[Code]...
What happened is that:
1. The host connected to Vlan30 can correctly ping the interface it is connected to.
2, The internal network can access the internet
3. The host connected to VLAN30 cannot access the internet and cannot connect to any internal server.
Do I have to add a static route? This is a production envuironment and it is my first experiment with a layer3 switching in production, so I cannot mistake
View 19 Replies
View Related
Oct 19, 2011
I have a pair of switches stacked:
Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
1 52 WS-C2960S-48FPS-L 15.0(1)SE C2960S-UNIVERSALK9-M
* 2 52 WS-C2960S-48FPS-L 15.0(1)SE C2960S-UNIVERSALK9-M
When I try to enable ip sla responder on the stack I get:
%SYS-3-HARIKARI: Process IP SLAs Responder top-level routine exited
I have been able to find a bug in the toolkit. Should ip sla responder be supported on the stack as above?
View 6 Replies
View Related
Jan 10, 2013
We have a 3750 running IOS ver 12.2 (44) SE, it has performed great and we have never had a problem with it. However we have noticed that when we had an outage some of our Wireless APs didn't come up as they get DHCP from the 3750. The DHCP scope said IP was depleted although there were IPs to give. We had to delete and recreate the DHCP Pool. However two days later we got the same problem and then had to do the same thing over again.
View 8 Replies
View Related
Jun 12, 2013
I Lease fiber between two locations, My operator limiting number of MAC addresses to 8 macs. Is there any possibility using some feature available in the Cisco 3750 switches to (hide mac addresses) encapsulate traffic witch flowing via operator network ?
I need to send data between locations with 1Gb/s speed. If 3750 switches can't do that, which models of switches 1 or 2U can do it. May Metro switches ?
View 1 Replies
View Related
Feb 16, 2012
I have Catalyst 3750 running IOS version c3750-ipservicesk9-mz.122-55.SE.bin. I have an access port that connects to a Redhat Linux version 5.4 64 bits machine. When I perform a "show mac address-table interface g1/0/3" where the redhat machine is connected to, I see two mac addresses on this access port. One of the mac addresses, 0025.9006.4898, belongs the the redhat machine. the other mac address, I have no idea where it comes from. I tried to perform clear mac address-table dynamic g1/0/3 several times but it does not work either.
View 8 Replies
View Related
Jan 11, 2012
I currently have a the following configuration and am unable to get more than 2 DHCP addresses for the devices connected to the Cisco new SG 100-16 Switch.The AP have no trouble handing out DHCP to the wireless clients, but we are unable to get the SG 100-16 to be able to do the same thing to wired clients. It is currently connected to the 2960-8 in port 1. We can get 2 devices connected without a problem, but the 3rd machine and beyond do not work. Also, setting up a static IP does not work. Using a static will not even allow us to ping or tracer back to any devices beyond the SG 100-16.
View 7 Replies
View Related
Mar 20, 2011
i have an Cisco ASR 1002 Router. I would like to connect our dezentral location to the Router.Unfortunately has this location an standard DSL connection with an dynamic offical IP Address.I have found an Config witch can handle an dynamic IP Addess (enclosed).
Is it possible to works witch the "set responder-only" command togehter with an dynamic crypto map? How I can configure it.
crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 lifetime 300crypto isakmp key xxx address 0.0.0.0 0.0.0.0 no-xauthcrypto isakmp identity hostnamecrypto isakmp keepalive 10 periodic
!
crypto ipsec transform-set dezentral-location esp-3des esp-md5-hmac
!
crypto dynamic-map fil 1 set transform-set dezentral-location set pfs group2 match address 150 reverse-route
!
crypto map Filialen 1 ipsec-isakmp dynamic fil
View 1 Replies
View Related
Feb 21, 2012
we have a 3750 and use dhcp services on the switch. every so often we run out of ip's even though we have much less users than the size of the allocated dhcp pool. I've noticed that the dhcp bind table is full but a ping-sweep only shows very few ip's being assinged and used. It looks like the IP addresses are not being released from the table even though I have decreased the lease time to 8 hours.
View 2 Replies
View Related
Feb 10, 2013
I'm working on my CCNA. I purchased an old router 2610 with two ethernet ports. I configured the IP addresses on the interfaces and added the default gateway. I configured NAT to go out my ATT DSL router to the internet. With the 2610, I'm able to ping the back end or internal DSL router, but I can't ping the front end, external router, or out to any internet site such as google.
View 10 Replies
View Related
Feb 2, 2013
I used to use a CentOS self-made server for intranet for my little office, but I bouth few days ago a Cisco 861 router to replace the linux box.
1. I have 2 public IP classes from my ISP. 1 class is limitted to 80mbit upload, the other to 30mbit upload. So I need some sort of DNAT to be able to know exactly which intranet computer uses big internet and which one limitted internet.
2. I need DHCP server and with static IP addresses (one computer must always have the same IP address, etc).. i have my needs for this.
3. Also I need external access to some servers inside (web, ftp, etc) [code]
So far so good, all looks simple and I can achieve this in 2 hours on a centos linux box (correct routes, ip forwarding enabled and few iptables rules for NAT/SNAT/DNAT).
But on this brand new Centos router well, i'm not even successful in pinging the outside world, nor the inside world I'm tired of reading the forums, the documentation..i want (at first) a simple scenario: vlan+dhcp, fa4 with 1 public ip address and ACCESS to the real world. I wasn't able to achieve not even that much. [code]
View 6 Replies
View Related
May 14, 2013
We want to permit certain mac addresses on the cat 4506 switch wherein only those mac addresses will get access to network.
Configuration Planned: For testing purpose we have created mac access list on cat 4506 and deny laptop mac address in this access list. The mac access group is applied to the port where the laptop is connected to cat 4506.Even after applying the mac access group on the port, the laptop is able to ping the vlan ip of cat 4506 [code]
laptop with ip address 192.168.10.2/24 connected to port 2/1 is able to ping 192.168.10.1 even after applying the mac access-group
Note-we have tested same configuration on cat 3560 and its working fine. We apply the mac access-group command on interface and clear the arp-cache and we are not able to ping vlan interface ip. The moment we remove the mac access-group,ping starts again.
View 4 Replies
View Related
Dec 14, 2012
I have an ASA 5505 with Security Plus License ?I have 5 Static IP Addresses from my ISP?I have the following interfaces. Outside (vlan 2) / Inside (vlan 1) / Guest (vlan 3)For my Vlan3 guest network I have set it up so that DNS must be routed through opendns.org's DNS servers ( for web filtering, etc ) However, its using the static ip that I have plugged into the ASA.
What I would like to accomplish is to put my inside interface (vlan1) on another static ip for outside access if thats possible, so that I can route those clients through opendns.org however however giving them more web privlieges than what the guest network is getting.
View 14 Replies
View Related
Oct 23, 2011
I have a 1941 router tt needs to be setup with the range of WAN ip addresses ip nat inside outside don't allow me to use it..How can i configure on the router to ensure from outside i'm able to access to firewall (129.2.1.2) ?
View 4 Replies
View Related
Oct 7, 2012
I have a customer who has an ASA 5505 that is handling the routing for their internal network. They are running out of available IP addresses on their subnet 192.168.1.0/24. They have dumb switches that don't suppport multiple vlans or trunking & they are only able to connect to one switchport on the ASA. He doesn't not want to purchase any new equipment or rearrange their existing equipment at this time. The customer would like to statically assign IP addesses for 192.168.1.x & 192.168.2.x and have the ASA hand out DHCP addresses for 192.168.3.x addresses. The customer suggested configuring a super subnet. A 192.168.0.0/22 address scheme would provide an ip range 192.168.0.0 - 192.168.3.255 on a single VLAN. I know this is an unconventional way to setup an internal network & I will definitely advise the customer that this should only be considered as a temporary solution until they get more appropriate network equipment.
View 3 Replies
View Related
Nov 2, 2011
Had a problem with a 3750 this morning not handing out DHCP addresses. The following is a sanitized config of what the switch is using. [code] The IOS installed on the switch is c3750-ipbasek9-mz.122-55.SE1.bin. What got my attention was that the sh ip dhcp pool PC showed 180 addresses being excluded. In doing the math from the dhcp excluded addresses, only 64 should be excluded.
My next step was to remove the second dhcp excluded-address line above. Doing a clear ip dhcp binding * started letting the DHCP service hand out addresses but the sh ip dhcp pool PC stil showed 180 addresses excluded.
It finally took removing the dhcp pool and putting it back in to drop the number of excluded addresses down to a value that matches the first excluded-address line. Didnt see a dhcp bug in the bug database that would explain this.
I tried re-entering the second excluded-address line from above and saw the number of excluded addresses rise as expected. When I negated the line, the number of excluded addresses dropped back to its previous value.
View 1 Replies
View Related
Sep 24, 2012
I inherited a Cisco ASA 5505 and am trying to piggy back the device off of an established Network. Here is the basic layout:
192.168.10.1 (Core Router - Handles DHCP/DNS)
192.168.10.9 (ASA 5505 - Piggy backing off of Network)
192.168.40.x (ASA 5505 - VLAN)
I'm able to get onto the Internet without any problems. Devices from the 192.168.10x Network can not ping the inside VLAN1 (192.168.40.x). However, I would like traffic going from the inside VLAN to the Outside VLAN to be blocked, except for 192.168.10.1 and 192.168.10.9. I've tried using ACL's but end up killing my Internet connection. 192.168.10.1 is the default route and is how I get out to the Internet. Is this possible? Essentially, I'm trying to set up a small Network that guests can connect to. The idea is that they can get to the Internet, but that is it. They can't get to internal resources on the 192.168.10.x Network
Here is the config:
ASA Version 8.2(1)
!
hostname ciscoasa
enable password EeCsulrpu.9LalEE encrypted
[Code].....
View 5 Replies
View Related
Oct 15, 2012
I've got a problem with DHCP running on a cisco 1900 series router, 1921 to be precise. The Data VLAN works perfectly, i configured a ip helper address and its working. Problem tough is VLAN 20. This is the voice vlan. As u can see in the config below, this has been configured using VRRP and VRF for failover purposes. I did more of these configurations, and they all worked fine, just not with this particular router!
As u will notice i deleted all the not needed to know information or i X'ed it!
Jan-Aart
version 15.1
service timestamps debug datetime msec
[Code]......
View 3 Replies
View Related
Dec 16, 2011
Had an odd issue that started up last few days.. Have a port on a cisco 2912 XL that keeps dropping (drops all packets) on a certain VLAN, but still passes others. Spanning-tree for that vlan says all ports are in forwarding status. VTP says that VLAN is still active.
This network is a little strange... 2924XL -> MotoPTP -> 2912XL -> Moto Canopy Array -> Some sites with cisco, some without all feed through canopy controller switch to single port (fa0/8) on 2912.
Getting a few of these on terminal monitoring, %RTD-1-ADDR_FLAP: FastEthernet0/8 relearning 5 addrs per min... Sometimes this is fa0/8, fa0/10, or fa0/1.
I'm thinking the switch has just gone nuts, cause fa0/1 is direct connected to a router used for VLAN1. fa0/8 is connected to a dumb switch on a canopy CMM as a trunk which i enabled bpdufilter on because of some spanning tree issues on VLAN1. fa0/10 is connected to canopy PTP back to the 2924 as a trunk. VLAN69s router is off the 2924. So there aren't really any possible alternate packet paths to this switch from another switch.
I also setup SPAN and captured all packets from fa0/8 and fa0/10 (seperately) and never seen packet storms of any kind on either VLAN1 or VLAN69.Further testing with debug, nothing on spanning tree, nothing on vtp, but on ethernet-controller addr I got some interesting results showing one mac moving from fa0/1 to fa0/8 and back to fa0/1 but it never moves, its the routers mac that is connected directly to fa0/1. Same with some macs on the other side of the PTP link saying they are bouncing from fa0/10 to fa0/8 and back to fa0/10 which isn't possible
View 5 Replies
View Related
Feb 12, 2013
- Incoming frames on three of a blade's four switchports are being put into VLAN 1 even though the ports are either in other access VLANs, or are configured as trunks with different VLAN IDs being tagged by the server. - When the ports go down the access VLAN is removed from the port.
Switch stack: 4x WS-CBS3120X-S, 12.2(58)SE1
HP blade: HP BL460c Gen8
This combination has been used successfully elsewhere.
Switchport configuration:
!
interface GigabitEthernet1/0/13 -------> THIS PORT IS OK
switchport mode trunk
[Code].....
View 1 Replies
View Related
Jan 27, 2013
i have to Bridge the AP to VLAN1 which has the DHCP pool. For some reason when I try to do this from iOS console it tells me that gig0 is not a bridgable interface. I am newb to Cisco iOS (24 hours new ). I got the Cisco Configuration Professional working and would like to fix my issue through there if possible? why my AP wont get anything but APIPA addresses?
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
[code]....
View 13 Replies
View Related
