I notice that NAT is not possible Cisco Catalyst 4500e series. Is there any other ways to configure NAT? Currently we have 2x Catalyst 6509 and we're migrating to the 4510e and there's NAT in the 6509s. I was thinking of re-using the 6509s and connect to the 2 new 4510e in a meshed trunking layout with MST (Layer 2) and OSPF/EIGRP (Layer 3) protocols turned on.
View 1 RepliesI am trying to figure out the Flexible Net-flow on Cat 4510R+E Switch running IOS-XE code. My Neflow flow software is manageengine 7.X. I am able to see the netflow interfaces but the traffic itself is not displayed. On the Switch I can see the netflow exporter statistics counter being incremented thereby confirming as being exported.
View 2 Replies View RelatedWe have a new building, and I told the cable company run OM3 cable from second floor to 1st FL data closet because we have 4510R SupV-10G at each floor.However, the cable company ran a regular fiber cable instead of OM3 mistakenly. My questions, can I still use OM3 patch cable?? Second questions, can I still have the 10Gig performance??
View 3 Replies View RelatedI have a two Cisco 4510R each with two sup V-10GE redundant. The code on these sup modules are 12.2(31r)SG3. I need some assistance in getting this setup worked out. I have all four of the 10GE populated with appropriate optics. I setup a link from one 4510R to the other using these interfaces. From the documentation I found I had to use Tengi1/1 and Tengi2/2 as the redundant pair. I plugged the up link into these ports. The Tengi1/1 (active supervisor) links up and works fine. But when I look at the ports port Tengi2/2 it isn't showing link or active. Now port 2/1 (nothing plugged into it) is showing as active.
Now is the redundancy supposed to be 1/1 and 2/1? If so, the switch is in production, when I move the connection over from 2/2 to 2/1 will it cause a outage? The reason for this is I now have a system with a 10G port and would like to utilize one of the other 10G ports. Is that possible? Or does it have to be a lag/redundant up link to work (say to another switch)?
I'm working on deploying a new 4510R+E for our organization. This is my first experience with a modular switch. I'm trying to enable SSO, however in the redundancy configuration mode, the sso command is not available. Is SSO only available with certain software images / licensing levels? [code]
View 2 Replies View RelatedWe have cisco 4510R+E switch with IOS-XE Software Version 03.01.01.SG RELEASE SOFTWARE (fc1).Our this switch is having two core & one core is always going to about 90% to 98% cpu utilization while other core is showing normal (about 5% to 10%),we check with-This switch is gateway of our LAN.
View 6 Replies View RelatedWe have recently purchased Catalyst 4510R-E with two PoE line cards. When we connected Cisco Wireless APs to Cat4510 PoE ports it did not come up. These WAPs are working fine on other Cisco switch with PoE ports so there is no issue with WAP. We have received two CAT4510 and on both two slots are populated with PoE line cards and on both switches WAPs are not coming up. PC/desktops are working fine on these ports.Is there any configuration required on Cat4510 to enable PoE feature.
View 15 Replies View RelatedWe need to move some line cards around on our 4510. The top slots have a 24Gbps backplane while the lower slots are limited to 6Gbps. Poor planning on our part has left us with installing a 10Gb line card in one of the bottom slots. I'd like to move a couple of the cards up top, to the bottom.
My question is simply will the switch magically preserve the configuration for those cards and change the slot number for me or will I need to reconfigure the interfaces for those cards I move?
We have CORE switch model : Cisco WS-C4510R-E with dual SUP 5 - 2 10GE. [code] Now We want to upgrade this IOS to the upgraded version.
View 3 Replies View RelatedI have a requirement to upgrade some line cards in our 4510R-E chassis to ease some oversubscription due to the 6Gbps limit.
At the moment my plan is to upgrade three cards from WS-X4548-GB-RJ45 to X4648 to get the 24Gbps per card.
Supervisors are 6-E
1. Is this a viable plan?
2. If so can the cards be hot-swapped?
3. Would the new cards retain the existing interface settings of the previous cards?
4. Any gotchas to look out for?
We have one switch 4510R which could have total 300 cisco GE color phone connected. That means 300x15.4=4620W. Considering the 89% effiency for the PoE line cards, that means each line card needs 5191W input power from chasis power supply. Based on the 6000W power supply specs, only up to 4800W is allocated for PoE purpose. But we need 5191W from power supply which redundant mode can't offer. We don't want to go with combined mode. So should we add external power shelf to add more power?Another question will be how much power we need from utility or UPS. For example, the efficency of cisco power supply is 75% and we use two 6000W power supplies in redudant mode. Then we need 8000W. The voltage is 220V. Then the AMP we need is 36.4A from UPS or utility power.
View 2 Replies View RelatedWe have a problem of igh CPU Utilization in Cisco 4510R-with dual SUP V-10G modules.
Cisco 4510R switch is the CORE switch and have 30 no's of VLans. It was running PVST/PVST+ previously. But Now we have migrated to MST. But after upgradation the CPU utilization reached alomst 98%.
We have some 4510R+E with dual sup 7e that have experienced problems recently. One of the sup 7e's crashed with a "critical software exception":
#show verCisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 03.01.01.SG RELEASE SOFTWARE (fc1)
<snip>
ROM: 15.0(1r)SG1
<snip> Last reload reason: Critical software exception, check bootflash:crashinfo_iosd
So I thought I'd upgrade to IOS-XE 3.2.0SG to hopefully resolve the issue. I was reading the software release notes and it says:
If you are upgrading to 3.2.0SG, you must upgrade your ROMMON to 15.0(1r)SG2.If they have dual supervisors, first upgrade your software to 3.2.0SG, then upgrade your ROMMON to15.0(1r)SG2 to avoid the resets uplinks issue (CSCtj54375).
And from the ROMMON release notes it says:
Download the cat4500+e-promupgrade-150_1r_SG2 program from Cisco.com, and place it on a TFTPserver in a directory that is accessible from the switch that is upgraded.The cat4500+e-promupgrade-150_1r_SG2 program is available on Cisco.com at the same location from which Catalyst 4500 system images are downloaded.
So I have several questions:
The only promupgrade file I can find is cat4500-e-ios-promupgrade-150-1r-SG2 (which doesn't appear to be the same as cat4500+e-promupgrade-150_1r_SG2 ). Where the correct file is?Since I have dual supervisors, it says I should upgrade the software, then the ROMMON. If I can do that (run the new software with the old ROMMON) why am I bothering to upgrade the ROMMON in the first place? (update, ok, I see the new ROMMON gives me enhanced crash info and will allow future upgrades without bringing down both supervisors at the same time).When these were ordered/installed, the licenses were all mixed up (I wasn't involved with that ). So the MDFs have dual sup 7e with ipbase and the IDFs have single sup 7e with enterprise services. Obviously, we want the enterprise services in the MDF so we can run OSPF and the ipbase in the IDF. But, OSPF seems to be running just fine in the MDF on ipbase. Are the licenses not enforced on these platforms? The release notes for 3.2.0 say ipbase doesn't support OSPF. So if I upgrade the MDF switches, will OSPF suddenly stop working?
The IP Base image does not support enhanced routing features such as Nonstop Forwarding (NSF) , BGP, Enhanced Interior Gateway Routing Protocol (EIGRP), Open Shortest Path First (OSPF), Intermediate System-to-Intermediate System (IS-IS), Virtual Routing Forwarding (VRF-lite) and policy-based routing (PBR).
I have cisco 4510R L3 switch with installed 2 Sup on slot 5 and 6. the current active Sup is in Slot5 i want to make active Sup6 in slot 6 which is currently standby sup in chassis. Is there any way to make standby Sup to ACTIVE without reloading any of the Supervisor. however there is two way as per my understanding -
1. we can reload the active Sup so that standby Sup will take charge. - (redundancy reload shelf)
2. we can focefully switchover the state of Sup's by (redundancy forcefully swithover) but in above both cases reload will be performed by one of the supervisor. which i don't want.
I came across an interesting issue and thought I would see if anyone else has encountered it before contacting TAC.I have two Cisco Catalyst WS-4510R-E switches with a single Supervisor V module in each chassis. Both Sup cards are now running 12.2(54) SG1; ipbasek9 firmware; yes, I plan to move both switches to 15 code but that's another story. Anyways, prior to the upgrade the one switch was running 12.2 (33) code; I suspect the code was never upgraded; running ipbase non - K9 code. The other switch was running 12.2(44) with K9 prior to upgrade to 12.2(54).
View 2 Replies View RelatedI have two Cisco Catalyst WS-4510R-E switches with a single Supervisor V module in each chassis. Both Sup cards are now running 12.2(54) SG1; ipbasek9 firmware; yes, I plan to move both switches to 15 code but that's another story. Anyways, prior to the upgrade the one switch was running 12.2 (33) code; I suspect the code was never upgraded; running ipbase non - K9 code. The other switch was running 12.2(44) with K9 prior to upgrade to 12.2(54). With the background set, one switch reports the following:SwitchA (config)#r?radius-server redundancy regexp represourc rmon route-map router.
View 4 Replies View RelatedI have a 4510R-E chassis with SUP7-E running IOS XE version 3.01.01.SG. I am unable to create a port-channel and apply auto-qos for VOIP.If I configure auto-qos on the physical interfaces, I get this message when I try adding them to the port channel:
"The attached policymap is not suitable for member either due to non-queuing actions or due to type of classmap filters."
Auto-qos is not an available command in the port-channel interface configuration, but if I try adding the service policies that were created by auto-qos to the port channel manually, it lets me apply the input policy but on the output policy I get this message:
"A service-policy with queuing actions can be attached in output direction only on physical ports."
With the input policy applied to the port-channel interface, I tried addign the output policy to the physical ports and I got this message:
"A service-policy with non-queuing actions should be attached to the port-channel associated with this physical port."
Is there a way to get the auot-qos policies applied to the port-channel properly?
upgrading our small office network. We currently have about 75 employees with probably 125 devices on the network. I'd like to create about 10 vlans for the different departments and then configure intervlan routing as needed. Currently we have all unmanaged switches and it's just a huge broadcast storm on the network. We are upgrading our Cisco 800 router to an ASA5505 sec. Plus license. I need some recommendations on switches. Of course, this needs to be done as cheap as possible.... Is there a way to use the ASA to configure all the vlans and intervlan routing and access lists and use a cheaper switch to provide the access layer to hosts?
View 4 Replies View RelatedIn our datacenter we have a 3750 stack with IP base image. I have enabled PBR and reloaded the switch. Show sdm prefer says i am using default template. The reason i want to use PBR is that we have 2 firewalls on the same work and want to be able to have granular control over which gateway out of the network they use but still be able to access all internal resouces accross wan and locally.
Created access list to identify traffic:
access-list 10 permit 10.2.3.59 (test workstation on vlan 3)
Created policy:
route-map TestASA permit 10
match ip address 10
set ip next-hop 10.2.0.3
Assigned policy to the user vlan3:
ip policy route-map TestASA
Results:It changed the default gateway to the above gateway but i could not access any resources on any other vlan, could not access resouces accross wan.
The layer 2 switches are connected to layer 3 Switch via trunks, and routing between layer 2 switch ports with configured SVI's on 3550. All working fine. Now I'm trying to configure routing between 2800 and 3550, I tried connecting both Straight Throught and Crossover cables to the 2800 Fa0/0 and Fa0/1 ports as well as the switchports on 3550
No switchport commands are configured however, the lights do not go on for both straight through or crossover cables. I tried connecting 1750 routers but same result. My goal is to have all the VLANS routed to the internet with configuring NAT translation the router.
how do i configure the new asa 5505 to be as a router as shown in the diagram note: the isps' routers placed in head office. but i cannot change the configurations of the isp's routers.
View 9 Replies View Relatedi try to configure DNS on cisco 800 , it's worked , but after 24 hours the command ip domain-lookup change to disable, and it stop work
i'm not understanding why it's happen ,
that's the configuration
ip domain name XXXXXX.CC.CC
ip host XXX-RR-FF.com 2.2.2.2
ip name-server 1.1.1.1
[Code]....
If I have an ASA 5520 with an INSIDE interface, a DMZ interface and a WAN interface what would be the best way to configure NAT? If I configure nat-control and a nat (inside) 1 0.0.0.0 0.0.0.0 this will configure everything to be NAT'd when passing from the INSIDE interface out.My question is what about the devices I want to access in the DMZ from the inside for management etc? I'm guessing the ASA isn't smart enough to realise you're accessing hosts in it's DMZ interface so do you have to configure a nat 0 rule for every subnet within the DMZ you want to access or is there an easier way to do it? It's worth noting that the same devices will be accessing the OUTSIDE network and the DMZ network from the INSIDE network.
View 6 Replies View RelatedI have a customer who is on thr 192.168.254.x subnet and is using a Cisco 881 as their gateway.
They wish to create a second VLAN for the 192.168.253.x subnet.
The Cisco has Dialer0 configured for an ADSL connection.
I have partly configured the router but need some info regarding router a device on the 192.168.253.x subnet to the internet.
configure routing to the internet on the new VLAN and assist in setting up a DHCP server on that vlan. I have attached a copy of the current config.
I configured following command to implement QoS on Cisco 3560.
class-map match-any IND
match access-group name Lync
policy-map LyncAV
class IND
set ip precedence 4
[code]....
how to apply this QoS on interface?
I am attempting to configure a Cisco 2901 router using IOS 15 to properly perform NAT/PAT translation between LAN and the internet connection.
My Configuration:
interface GigabitEthernet0/0
ip address dhcp
ip nat outside
ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
no cdp enable
no mop enabled(code)
I've been trying to configure a connection which requires NAT translation but my devices are too old and seems that the configurations I tried doesn't work or I don't know how to implement it properly.Firstly, I will introduce my router to you, it is a Cisco C3640-JS-M Version 12.2(1), so I found many ways to solve my problem, but none of them are supported by it.
To continue,the connection I am trying to configure is the following one:
10.1.1.0/24(My LAN) --- (My ROUTER) --- 192.168.9.1/25 <-----> 192.168.9.126/25 --- (OTHER ROUTER) --- 172.22.1.0/24 (Their LAN)
So one host from 172.22.1.0/24 needs to connect to a server in my LAN (10.1.1.20) but they can´t use the real IP and we need to configure a NAT rule to translate traffic from them to 192.168.6.10 to 10.1.1.20, but only for this connection (there are other "WAN" interfaces.
These are my failed attempts:
interface FastEthernet0/0.302
ip nat outside
ip nat inside source static 10.1.1.20 192.168.9.10
PROBLEM: Works for this connection, but other connections are affected and no one can reach 10.1.1.20 apart from LAN and incoming traffic to F0/0.302
[code]....
But as I said before, some configurations are not supported by my device.
How to configure a nexus 5K?
View 3 Replies View RelatedI believe I have the steps done at the IOS to config the WAN port for SSH, but I still can't connect to it. I have "logging console 7" on so I am able to see that the router is dropping my TCP session requests. I figure this is just the built-in zone-based firewall at work.
Is there a very straightforward process, via the IOS, to allow SSH inbound on the WAN port? I'm not very familiar with the IOS other than basics so while I know how to do things like "transport input ssh" and "login local" and such on the vty 0 4 line, I have no idea whatsoever on what I should do with the firewall stuff. I believce the WAN interface is already a member of the outside zone though so I imagine one just has to somehow include ssh (preferably on a non-standard port) in the exceptions on the firewall somehow.
I have been poking around for a step-by-step IOS guide for this but only find info on configuring SSH itself but not how to open the firewall to allow the connection for it through.
I have a Cisco 881 VPN Router (TX) which connects to the Concentrator at our corporate office (NY). The TX subnet is 10.16.x.x. The corporate subnet is 10.1.x.x, 10.2.x.x, 10.9.x.x.Right now, the 881 router is only used for VPN to corporate, but, I would like to use it our primary router. We have to ISP's, and I would like to allow traffic to come in on either interface to our internal LAN to a few servers.
LAN - 10.16.1.3 / 255.255.0.0 ISP1 - 175.15.110.242 / 255.255.255.240: Gateway: 175.15.110.254ISP2 - 211.106.234.114 255.255.255.240, Gateway: 211.106.234.113Required NAT / port forwarding:211.106.234.115 -> 10.16.9.104 /
[Code]....
I got one SF 300-48 layer 3 switch I tried to configure to use it in the office network.Unfortunately I'm unable to configure the VLAN settings.I need port one for input(VLAN2),port 7-15 for another vlan(vlan3) also need to connect with the vlan 4.port 15 is another vlan(vlan4) this is for wireless.Other ports are static.It doesn't get any connections with other vlans.I wish to know how to configure vlans in GUI mode.I tried , But I can't get the Vlan setting correctly.Also,I need to know how to communicate both vlans in GUI mode.
View 8 Replies View RelatedWhen I try to add an IP address to a port-channel interface on a 3845 ISR I am getting an error that seems to imply that only L2 etherchanneling is possible. Am I missing something?Cisco IOS Software, 3800 Software (C3845-ADVIPSERVICESK9-M), Version 12.4(24)T8,
sfo-c3845-1#sho run int port-channel 1
Building configuration...
Current configuration : 31 bytes
!
interface Port-channel1
end
[code].....
how to configure an IPaddress for a PWR-RPS 2300?.I tried finding info on the website but no luck as yet. RPS 2300 will be used on stack of 3750E series switches.
View 3 Replies View Related