I faced with a strange behavior of ME3600.For testing purposes I linked Cat3550 and ME3600 switches via trunk mode. All interfaces are in Up state. But I couldn't ping SVI200 of Cat switch from ME3600 and vice versa. [cde]
This scheme perfectly works with another L3 swithes. For example Catalist3750. I know that ME doesn't support VTP, DTP and so on. Also, I've tried latest software.
I've previously used trunkports and vlans between my ASA and accesspoints, connected directly. Now I want to put a 2960S-24PS-L bewteen. Where should i define the vlans (in the switch or in th ASA?) and what ports to put in trunk mode? (the ones on the switch or the one between the switch and the ASA?)
View 1 Replies View RelatedI would like to know why Cat3550 SVI's mac address is always same.for example if I configure interface vlan1 and vlan2.mac address is same as like 000d.bdfc.xxxx but Cat3750 is different, each SVI has unique mac address.
View 1 Replies View Relatedwe have a scenario that consists of a Cisco 4507 series core switch with more than 20 vlans which is connected to a C2960G switch( in a nearby building) using a trunk by a fiber connection. Up to this point everyhting is fine . VTP domain is configured on the core switch and we have all of the 20 vlans present correctly on the edge 2960G wich is part of course of this same VTP domain.the fiber connection goes from core switch to a "in the middle location" where we have a fiber patch panel that is connected in a jumper style to another fiber patch panel going to the destination building where the C2960G sits.
Now imagine that Fiber connection from this middle location to the destination C2960 edge switch is down for any possible reason meanwhile the fiber connection from Core switch 4507 to the middle location is still intact.In the same time, in this middle location , we do have a wireless connection which links 1 Cisco 3750G switche ( a different infrastructure and different VTP domain) to another C3560G switch which sits on the same Room in the nearby destination building where we have the edge C2960G, An idea came to me is to connect one of the fiber port (core) in the intact fiber patch panel coming from Core switch 4507 TO an access vlan configured switchport in the 3750G switch ( this switchport will belong to a vlan designed only to trasmit the vlans on the trunk coming from 4507 core switch say VLAN 10) then connect one VLAN 10 access switchport to the destination C2960 edge switch ( the switchport on the c2960G is still a trunk)Will this solution work and all of the 20- 4507 core switch vlans arrive to the destination C2960G ? Or we do need something that tags the 2 VLAN 10 switchports like switchport dot1q tunnel like QinQ
This is regarding VLAN creation on C3750E switch.I want to create new Vlan 94 on this switch and also I want to allowed same interfaces like Vlan 95 & Vlan 96. [code]
View 7 Replies View RelatedI have client who has two distant offices with 3750 L3 as core (do all vlan routing for local office) and multiple L2 access switches with multiple VLAN’s connected to it. First 3750 is hub also connected to internet, second 3750 is spoke and acting as a router on stick. We have eigrp configured on both side ISP provided client 100Mbps link as a trunk with two vlan; vlan10 for voice and vlan20 for data. We assigned two small subnets to these vlans 10.15.17.0/29 and 10.15.17.9/29. Hub addresses are 10.15.17.1 and 10.15.17.9 respectively. How to force voice over VLAN10 and data via vlan20, but still do some load balancing? How to setup default route on second (router on stick) switch?
View 1 Replies View RelatedI've been having a debate with a colleague about QOS COS values. My colleague says I need to use COS values across layer 2 trunk links between access layer switches and core switches. My argument is if phones are marking packets with DSCP values I don't need to be concerned with Cos.The reason I ask is we're implementing a new phone system, the ip phones will mark RTP traffic wih dscp value EF and Call signaling with DSCP value of CS3. If my understanding is correct I can trust the dscp values of the phones. We are using Cisco 4507 switches which I believe automatically trust dscp values so I would just need a class-map to match the dscp values and apply the output policy map on the egress interfaces as follows? [code]
View 3 Replies View RelatedWe have 7 3560's in 7 different locations connected to our providor for wan access. Our provider has given us a copper cable at each point and we have connected it directly to our 3560 switch at each location. Each port is configured the same way at each location. Each switch is running eigrp.All of the switch ports on each switch are configured as a trunk and vlan 299 had the ip address for the eigrp connection: [code] This setup is working as each switch see's all of the other switches as an eigrp neighbor. We have also made sure that the switch at our head office has spanning tree priority for vlan 299.
So the problem is, if there is a change in the topology at one of the locations it usually causes one or more of the other connections to go down for some reason. We just cannot pinpoint what is causing this change. There are no log's or anything other than an eigrp hold time expired message.?
I have a 3750 as a core and have a series of HP Procurve switches that are daisy chained using one port. I have two vlans on the port now (6 &9) and everything works fine, all switches communicate and end devices on the switches are also talking. There is a requirement to add a device towards the end of the chain which requires it to connect using Vlan1. Once I add Vlan1 to the port onthe 3750 I lose connectivity to all the HP switches.
View 4 Replies View Relatedi have some ME-3600x. some of version 12.2 and one of version 15.5. te last one hast same config as all other. but if i check for rstp it sends.i know abount global config commands:
-spanning-tree mode rapid-pvst
-spanning-tree extend system-id
but there is no spanning-tree support. this causes many more problems. so it is important to solve spanning tee at first.is it possible without downgrading this device?
I have a very basic setup here but strange the router is learning RIP routes advertised by the switch but the switch is learning anyRIP routes. Debug shows the switch is sending updates but not receiving any. There is also these error: %MRIB_API-3-ASYNC_ERR: Asynchronous error: failed to register to the MRIB. errno 0xE
I can ping across the gig 0/2 (switch) and GIg 0/2/0 (router)
sw01 - ME 3600
rtr1 - ASR 1001
sw01 config
[Code]......
I use IOS Software, ME360x Software (ME360x-UNIVERSALK9-M), Version 12.2(52)EY2. I not found the command "ipv6" on global and interface configuration.
View 2 Replies View RelatedI am looking into the possibility of using private vlan's for some dmz implementations however I do have what may be some very rudimentary questions. It seems straightforward how to configure the primary/secondary vlan configuration as well as associating them. However in my case I would be looking to configure the PVLAN on a 6500-vss platform acting as the router while all of the hosts which I would desire to have in the isolated vlan would be spread out across a number of older Cisco switches which only support "protected port" setup or Procurve switches all of which I do not have budget to replace with something newer. So in my scenario I would have a 6500 connected by trunk to multiple switches which only support a protected port setup such as a Procurve (top of rack) or a Cisco 2950. As the Procurve or 2950 would not support Private VLAN setup, do I then just configure the secondary vlan to be allowed across the trunk from the 6500, configure that vlan on the Procurve or 2950 (as vtp will not foward the info for the secondary vlan) and assign that vlan to the host port as well as setting it as a protected port and this will communicate just fine across the trunk to the router as well as stopping the protected port in top of rack switch 1 from being able to communicate to a protected port in top of rack 2,3,etc? If the above scenario is what needs to be done, do I just use a regular trunk or do I have to use a PVLAN trunk?
View 2 Replies View Related we recently aquired a managed services job and have to do a overhaul of the vlan configs and have a whole dozen WC2948G's trunk between a set of ports as well as trunk out a LAG channel setup to non cisco equipment. the deal is the lacp-channel works properly on both ends but no routing of vlans between ports and between the lag trunk are working.
theres alot of settings in the config and im planning on clearing it and starting from scratch but before i do i want to know where my problem lies.
[code]...
Which IOS version for me3600 supports 4-byte BGP?
View 1 Replies View RelatedI am trying to get a C2960-8tc-L linked to a sge2000p via the Gbic ports using GLC-SX_MM gbics but having no luck.Are these compatible and should I need to configure anything?
View 1 Replies View RelatedIs there really any reason why you wouldn't use spanning-tree portfast on a trunk port other than a trunk between two switches? We have it enabled on all ports except for the fiber trunk between two non-stacked switches and the trunk ports connected to our Astaro firewall.I'd like to enable it on the ports to the firewall unless that would cause issues.
View 9 Replies View RelatedQuestion: how would STP or RSTP behave in a star topology with a hub in the middle?i.e. you have four switches all linked to the same central hub. Single links, no loops.Each switch would then get BPDUs from everybody.Going by theory, it should be OK since it still sees the root's BPDU and will see the link to the hub as the root port, despite presence of other BPDUs from other switches? No different from receiving an inferior BPDU from an upstream switch and a superior BPDU from a further upstream root switch.I guess I could lab it by turning off spanning tree on a switch to simulate a hub? I've never previously had to deal with STP issues where there are hubs that aren't strictly point to point bridging so to speak (ok they're not bridging but you get the drift).I've got a scenario I'm examining at the moment where this is the topology, except all switches have bpdufilter running hence effectively no spanning tree. I'm curious to know what would happen should I remove the bpdufilter.I realise there is zero benefit in spanning tree in this instance as I don't have any redundant loops to fall back on, but I'm reluctant to turn off STP on those vlans (since obviously theres stuff behind those switches). The BPDUfilter method seems like an elegant solution but I wonder if its actually necessary.(the hub is actually a VPLS mesh, most sites terminate PE to CE router but I'm playing around with switches as the termination points – run our own Q in Q, split vlans off before it gets to layer 3 as separation, etc.)
View 1 Replies View RelatedI have a stack of 8 3750x switches connected via Stackwise. In addition, I have these switches configured as two Powerstacks. When I look at the Powerstacks, they are showing as being in power-sharing mode. When I look at the individual switches, they show as standalone. Right now, I have 1 switch in each powerstack that has two power supplies, and then the other three have a single power supply. Below is the output for "Show stack-power detail" as well as the Powerstack configurations.
Power Stack Stack Stack Total Rsvd Alloc Unused Num NumName Mode Topolgy Pwr(W) Pwr(W) Pwr(W) Pwr(W) SW PS-------------------- ------ ------- ------ ------ ------ ------ --- ---Powerstack_1 SP-PS Ring 2145 45 570 1530 3 3Powerstack_2 SP-PS Ring 2860 60 760 2040 4 4Powerstack_1-1 SP-PS Stndaln 1430 520 190 720 1 2
Power stack name: Powerstack_1 Stack mode: Power sharing Stack topology: Ring Switch 4: Power budget: 700 Power allocated: 190 Low port priority value: 20 High port
[code].....
I'm looking for switches that support single mode fiber connections and would like to know if "WS-C3750-FS-S Catalyst 3750 24 100BaseFX + 2 SFP" and "WS-C3750G-12S-S Catalyst 3750 12 SFP" can serve the purpose?
View 6 Replies View RelatedI am troubleshooting a fiber connectivity issue.Now I have two switches, one is 3750, and another is small biz 300 series switch. Both switch has a single mode smf gbic. Now I have two swtiches face to face and connect with a single mode cable. Do you think if I would get a link light on? Both ports are no shutdown.
View 3 Replies View RelatedI need to support a bunch of security cameras mounted on poles in our parking lot and an IP intercom system mounted on some gates. Because of environmental factors the switches at the poles need to be hardened and the spec from the vendor installing the gear is for GarretCom Industrial unmanaged switches which would make sense.
However when Information Security got wind of this scheme they (probably correctly) are requiring me to secure the ports that these unmanaged switches connect to. I have 2 choices: port security w/ MAC filtering or 802.1x. Because all the devices at the poles and gates support 802.1x and because I may need to go out there to troubleshoot stuff (and will invariably forget to add the MAC of whatever device I am using) I would prefer 802.1X multi-auth mode.
Problem:
When I ran a quick test on a test 3560 running some 15.0.1 code I could get a laptop to connect via 802.1x EAP-TLS successfully if it was directly connected but when I connected the same laptop via a dumb Netgear switch I confiscated from a luser it would not connect. The 3560 error said that the laptop never responded.
Question:
Before I spend a whole lot of time on this, is this something that should work? I don't see any practical use for the feature if it won't however the documentation I am using specifically mentions downstream hubs but I am not sure if they mean real hubs (which I don't think are even made anymore) or if they mean unmanaged switches.
I plan to try a couple of different unmanaged switches tomorrow and digg a little but I would like to know if I am wasting my time on something that will never work or if there is a little gotcha somewhere.
I have two 5548's in sync mode: I have an existing ACL and I want to add a new line to it, but after I do and try to commit it states the verify failed. [code]
I have to add access list to both switches not in config sync mode.
I received the following info from Cisco's TAC and wanted to inquire further before I start reconfiguring the switch:
In a redundant Sup-6E setup, the following configuration is supported :
- 1 TenGig uplink on Active Sup and 1 TenGig uplink on Standby Sup
- 1 TenGig uplink on Active Sup and 2 Gig uplinks on Standby Sup
- 2 Gig uplinks on Active Sup and 1 TenGig uplink on Standby Sup
- 2 Gig uplink on Active Sup and 2 Gig uplinks on Standby Sup
If you invoke shared backplane mode, the following configuration can also be supported:
- 2 TenGig uplinks(blocking) on Active Sup and 2 TenGig uplinks on Standby Sup
- 2 TenGig uplink(blocking) on Active Sup and 4 Gig uplinks on Standby Sup
- 4 Gig uplinks on Active Sup and 2 TenGig uplinks(blocking) on Standby Sup
- 4 Gig uplink on Active Sup and 4 Gig uplinks on Standby Sup
Here's the command and information about the "shared-backplane" mode :- [URL]
Currently, we have 2 SUP 6-Es(Module 5 - Active and Module 6 - Stand-by) setup in a redundent mode. I am planning on changing the redundent mode to the shared backplane mode so I can use 2 TenGig converters to uplink 2 access-switches. We purchased 2 TenGig converters and here is how I am planning on using them:
1- One will be used to uplink to two 3750 switches(stacked)
2- One will be used to uplink to a 2960 using a Gig SFP
My questions are:
1- Do I have to install the 2 TenGig converters(4-Gig Uplinks) in the same Module? Or can I use one one in module 5 and the second one in module 6?
2- Will changing the redundant mode to the shared backplane mode require rebooting the switch or disrupt the funtionality of the other linecards?
I have a Cisco SW ( 3560 ) with one Trunk link to my router ( 7606 ), Trunk link is fully utilized so i need to add 2nd Trunk.Shall all move some customers from old trunk to 2nd one and create a new subterface for them ?I am think if i can create bundle and add subinterfaces under this bundle ?Add two GE ports to be memeber of this bundle ?
View 5 Replies View Relatedrecently i do some lab about trunking protocol using Layer 3 switch C3560 and layer 2 switch C2960, but i face a problem that i cannot configure trunk port on my C3560 using "switchport mode trunk" command, and after looking for the answer from google i found that i have to "remove" the "auto" mode of C3560 using "switchport mode dynamic desirable" and after that we can enter the "switcport mode trunk" command successfully.
and my question are, whether the "auto" trunk mode in switch layer 3 is a default mode or not? and why i should enter "sw mode dynamic desirable" command before "sw mo trunk" command ?
We have purchased 3 no CISCO SF300-48P (Access Switches) with the interest of setting up a new laboratory consisting of 120 desktops. We currently have a CISCO 4507R (Core Switch) and a CISCO 3560 (Distribution Switch) for the campus wide network. Our network is developed with various VLANS to support Internet and Intranet facilities. The new lab need to be incorporated in to the Campus wide network with a new VLAN ID. But problem is while trunking the CISCO 3560 (Distribution switch) to the CISCO SF300-48P (Access Switch) communication does not happen. While, surfing the internet and various doc's say that SF300 uses GVRP instead of dot1q trunking.
View 4 Replies View RelatedWe have a 5580 that we want to connect to each of our 7K's as an internal firewall. To minimize hassle, we will setup the ASA in transparent mode.I have been working on this all day today and have run into a stopping point. If I put vlan 20 on a subinterface on Te7/0 which will connect to N7K_1 it works great. When I try to put that same vlan on Te7/1 which connects to N7K_2, I get an error that says the vlan is already assigned to another interface.Our local Cisco SE told us that this would work.
My problem is that not all of our servers/systems are dual homed to both 7K's so I have to be able to get this to work because of potential asymmetric routing issues that we will be dealing with.How to get the 5580 to work in this configuration and can you share your config with me ?Using the redundant interface command isnt an option because I need for both interfaces to be able to route over both 7K's at all times.
We have setup a pair of Nexus 5596 L3 switches with 2 x 10Gbps LACP links between them to act as the vpc peer link. We also have another 2 x 10Gbps LACP links between the 5596 switches to carry non VPC VLANs, this is required to provide EIGRP routing between the switches and an upstream router.I have read that it is possible to setup the vpc keep-alive link over an SVI instead of the management interfaces. Is it ok to run the keep-alive SVI over the second LACP non VPC VLAN trunk or is it recommened to keep this seperate?
View 0 Replies View RelatedI have 2 hosts, 1 plugged in fa 0/21 in VLAN 101 and another in fa 0/22 in VLAN 101 on our L2 Cisco 2960. If I try and transfer files from either host the gig 0/1 trunk port on the 2960 leading tot he 3750 fa 0/1 port hits 100mb (using a real time bandwidth monitor tool), but why? This VLAN is on the same switch, why does it go one way up the trunk to the L3 3750 switch? The L3 3750 is the VTP server and the 2960 is a client. I would of thought the traffic stays local. The 2 hosts don't even have a gateway set.To sum up the typology the 2960 and 3750 are trunked using a single cable. The 3750 hangs of a ASA firewall using SVIs.Here is whatthe traffic looks like when copying a file between hosts (2gb file).
3750 L3 Switch (VTP Server)
interface FastEthernet1/0/4
description Trunk to Cisco 2960 Gig 0/1
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
[code]....
I have 2 Cisco 6509 switches linked together via single Fibre as a trunk.I want to change this to a port channel where I will add another 3 fibre ports to the port channel but what order do I do this to minimise any disruption.
1-Configure PortChannel and add the 3 new ports, this will bring up the Port Channel but what effect will this have on traffic currently going over the single Trunk link? Will spanning tree go mad, how will switches react?
2-Convert existing Trunk link to Portchannel then add in new ports to PortChannel, I guess in doing this there will be a small hit on traffic as it changes to a port channel.
I am struggling with a CE520 and its smartports stuff.I have configured the following vlans :
1- data
100 - phones
I need to bring those vlans (both of them) to a Cisco 800 router. The port of the 800 router is already configured as trunk and accepts vlan 1 and 100.The cisco 800 has both vlan 1 and 100 configured with 2 ips on different subnets, and ip routing is enable (to route between two vlans). Also, no access lists are configured.I have configured one port in the switch as role "router" and connected to the router. The other ports are all configured as phone-desktop (phone vlan 100 desktop vlan 1).If I connect a phone and manually configure an ip (the phone gets automatically vlan 100), and try to ping the phone from the router, it doesnt respond. Alse vlan 100 is protocol down.I am guessing what s the right configuration as the link between the switch and the router should be a trunk link for 1 and 100 vlans, but it looks like is transporting only vlan 1.Also changing the port role to "other" when you can specify the native vlan and another vlan, the switch doesnt accept vlan 100 as additional vlan on that link.
Cisco 4506-E port configuration
WESTERN-4506-01#show int g4/47
GigabitEthernet4/47 is down, line protocol is down (notconnect)
Hardware is Gigabit Ethernet Port, address is 0022.554c.01fe (
fe)
Description: Trunk to 425
[code]....
Cisco 3750 Configuration
interface FastEthernet1/0/1description 425Linkswitchport trunk encapsulation dot1qswitchport trunk native vlan 30switchport trunk allowed vlan 30,35switchport mode trunkswitchport nonegotiateswitchport port-security aging time 2switchport port-security violation restrictswitchport port-security aging type inactivitystorm-control broadcast level pps 300storm-control multicast level pps 300storm-control action trapmacro description cisco-desktopmac access-group AuthorizedHosts in
I have mac address' populated. I can see the device in layout on CNA with the proper name however cannot ping it.
4506 is 10.30.30.1
3750 is 10.30.30.2