Cisco Switching/Routing :: Nexus 5k And Cat 3750 / Benefits Of Private VLAN Trunks?

Jan 11, 2012

I have defined a trunk between a nexus 5k and cat 3750 as a pvlan trunk - now I would like to add redundance and performance and tried to establish a vpc between my par of nexus's and the 3750 stack - but the nexus tell me that the port-channel doesn't support pvlan's - and then - ehh - do I get any benefits of running the trunk as a pvlan trunk at all?

interface Ethernet1/4
  switchport mode trunk
  speed 1000
  switchport private-vlan trunk allowed vlan 550-552
  switchport private-vlan mapping trunk 550 551-552

[code]...

View 5 Replies


ADVERTISEMENT

Cisco Switching/Routing :: Private VLAN's On Nexus 2148

Dec 29, 2011

I have the need for private vlans in isolated mode to backup some hosts on a secured network. We are using Cisco Nexus 5020 with the fex 2148 for copper-ports  - and I tried to implement this setup: [code]

The Cisco Nexus 2000 Fabric Extender does not support PVLANs over VLAN trunks used to connect to another switch. The PVLAN trunks are only used on inter-switch links but the FEX ports are only meant to connect to servers. Since it is not a valid configuration to have an isolated secondary VLAN as part of a Fabric Extender port configured as a VLAN trunk, all frames on isolated secondary VLANs are pruned from going out to a FEX.
 
the "only" limitation should be the trunk option - but as far as I can see from the output from my nexus this is not correct .We are running NXOS: [code]

View 1 Replies View Related

Cisco Switching/Routing :: Nexus 1000v Private-Vlan Trunking

Apr 14, 2011

Having problem pinging from Host A on ESX1 to Host B on ESX2.  Each host are assigned the same port-profile.  If I put 2 host's on the same ESX machine using the same port-profile, they are able to ping each other.
 
n1kv-vsm# sh port-profile name xxx-prod-40port-profile xxx-prod-40  description:  type: vethernet  status: enabled  capability l3control: no  pinning control-vlan: -  pinning packet-vlan: -  system vlans: 1  port-group: xxxl-prod-40  max ports: 32  inherit:  config attributes:    switchport mode private-vlan host    switchport private-vlan host-association 40 400    no shutdown  evaluated config attributes:    switchport mode private-vlan host    switchport private-vlan host-association 40 400    no shutdown  assigned interfaces:    Vethernet3    Vethernet4
System-uplink profile is trunking all vlans.

View 2 Replies View Related

Cisco Switching/Routing :: Private Vlan / Etherchannel And Isolated Trunk On Nexus 5010

Feb 9, 2011

I'm not sure if I'm missing something basic here however i though that I'd ask the question. I recieved a request from a client who is trying to seperate traffic out of a IBM P780 - one set of VIO servers/clients (Prod) is tagged with vlan x going out LAG 1 and another set of VIO server/clients (Test) is tagged with vlan y and z going out LAG 2. The problem is that the management subnet for these devices is on one subnet.
 
The infrastructure is the host device is trunked via LACP etherchannel to Nexus 2148TP(5010) which than connects to the distribution layer being a Catalyst 6504 VSS. I have tried many things today, however I feel that the correct solution to get this working is to use an Isolated trunk (as the host device does not have private vlan functionality) even though there is no requirement for hosts to be segregated. I have configured:
 
1. Private vlan mapping on the SVI;
2. Primary vlan and association, and isolated vlan on Distribution (6504 VSS) and Access Layer (5010/2148)
3. All Vlans are trunked between switches
4. Private vlan isolated trunk and host mappings on the port-channel interface to the host (P780).
 
I haven't had any luck. What I am seeing is as soon as I configure the Primary vlan on the Nexus 5010 (v5.2) (vlan y | private-vlan primary), this vlan (y) does not forward on any trunk on the Nexus 5010 switch, even without any other private vlan configuration. I believe this may be the cause to most of the issues I am having. Has any one else experienced this behaviour. Also, I haven't had a lot of experience with Private Vlans so I might be missing some fundamentals with this configuration.

View 3 Replies View Related

Cisco Switching/Routing :: 3750 Private VLAN With Routing

Jan 1, 2012

I have a Cisco 3750 with private VLANS configured.. VLAN 2 is the "primary", VLAN 3 is "isolated" and VLAN 4 is "community".  This is all working correctly, however I now have the need to another VLAN called "production". I need the production VLAN to be able to reach all the private VLAN hosts (community and Isolated), and vice versa

View 2 Replies View Related

Cisco Switching/Routing :: Nexus 7010 / Multiple VPCs Benefits?

Mar 30, 2012

I have a senario where i'm going to have 2 Nexus 7010 connected as a core, and i'm going to have 4 5510's connected in a star formation. Each nexus 5510 will connect to the nexus core Via two 10Gb links. Each nexus 5510 will have 2 links attached to The core switches in vPc's.
 
Nexus 7010-1 = Core 1
Nexus 7010-2 = Core 2 
Nexus 5510-1 = vPC = 100 2 Ports in vPc 100 -- > 7010-1, 7010-2
Nexus 5510-2 = vPC = 200 2 Ports in vPC 200 -- > 7010-1, 7010-2
Nexus 5510-3 = vPC = 100 2 Ports in vPc 300 -- > 7010-1, 7010-2
Nexus 5510-4 = vPC = 200 2 Ports in vPC 400 -- > 7010-1, 7010-2
 
The way I intend to configure the vPC's is this the best way. If i get a vPC dual active scenario what would happen. All ports will be forwarding all VLAN traffic this is how I intend to have it work.

View 14 Replies View Related

Cisco Switching/Routing :: 6506 Benefits Of Adding Nexus Switch To Datacenter

Sep 7, 2012

We have  two catalyst 6506 switches  with 10 gb u plinks  and around 120 edge switches cat 3750-x switches. Still the module on the  core wheere servers are connected  is 1000mbps port.Now if we induct a nexus switch to the datacenter what kinds of benefits we can reap In a virtulised environment as well as real  environment?following are the some of the queries.Can we reduce the number of edge switches? ( by virtual environment), Inter operabaility between cat ios and nexus ios, how this will affect the environement,What will be the over all benefits ?, What are the cons of this induction ?

View 22 Replies View Related

Cisco Switching/Routing :: 3750 / Dual Trunks Between Stacks?

Jan 30, 2013

I have 2 3750 switch stacks which I would like to have redundant trunks between them.  This will provide two physical connections traveling through different geographical locations for redundancy in the event that a cable is severed.  I couldn't find anything in regards to setup/config.  Does it matter if I go stack1/switch1 to stack2/switch1 and stack1/switch2 to stack2/switch2 or should they cross to opposite switches like a stack cable?  I don't think that should be necessary, but couldn't find any documentation.  Should there be an issue with loops?

View 4 Replies View Related

Cisco Switching/Routing :: Catalyst 3560 Vlan Trunks Over Etherchannel

Jun 20, 2012

I'm configuring two etherchannel groups (2 ports in each) on a 3560 switch.  I need to trunk multiple vlans over each channel group.
 
I created the vlan trunks and allowed vlans on each physical interface.  I notice that I can also configure the vlan trunks on the port-channel interfaces that were created. Should I configure them under those interfaces, or leave them on the physical interfaces?  Relevant config is below:
 
interface Port-channel1
!
interface Port-channel2

[Code].....

View 1 Replies View Related

Cisco Switching/Routing :: Nexus 1000v Don't Use Private VLANs

Aug 28, 2012

We have a requirement for private VLANS for DMZ hosting within one of our datacentres. I just want to query how private VLANs would work in our environment.We have physical servers connected to fex ports (2 fex per rack for each 5k) of a 5548UP switch, virtual servers using the nexus 1000v (vmware hosts connected to fex ports) Out firewalls and load balancers are connected to an upstream pair of nexus 7ks using vPCs.My question is this, ordinarily the firewall would be in a promiscuous port but as these reside on a physically separate switch will the normal vPC trunk still be sufficient or would the "switchport mode private-vlan trunk promiscuous" be required on the vPC up to the northbound 7k.As these connections are already in production I do not want to affect the existing traffic that doesn’t use private VLANs.

View 3 Replies View Related

Cisco Switching/Routing :: Nexus 5548 - Private VLANs On FEX

Aug 13, 2012

regarding PVLANs and the Nexus, my understanding is that we cannot configure Private VLANs on a FEX trunk port with a NX-OS release older than 5.1(3)N2(1) for the Nexus5548... Is there any known workaround for this limitation (appart from performing a SW upgrade)?

View 2 Replies View Related

Cisco Switching/Routing :: N7K Private VLAN With F2

Jan 15, 2013

Why I got below error message when config Private VLAN?
 
Error: while enabling/disabling service: private-vlan, err: Private-vlan is not allowed in F2 VDC (0x40e4005d)

View 2 Replies View Related

Cisco WAN :: Nexus 1000V - Why Is Private Vlan Config Options Missing

Jun 13, 2012

I just installed a N1K (with code 4.2(1)SV1(4a)) and I was trying to setup a private vlan.
 
Example:
 
vlan 300
name PRI-VLAN
private-vlan primary

[Code]....
 
I upgraded another n1k (that already had pvlan configured) to this version of code and it has the private vlan option. This was just installed yesterday so I don't have the license on it yet.

View 4 Replies View Related

Cisco Switching/Routing :: ME 4900 Private VLAN Config

Feb 9, 2012

We need to connect several DSLAMs on the 4900 switch, every DSLAM has 4 VLANs configured (VOIP service, MGMT, ADSL Private, ADSL Public), and sends the traffic for each service tagged with appropriate VLAN id according to the table:
 
VOIP: 608
MGMT: 594
ADSL PRIVATE: 2900
ADSL PUBLIC: 2930
 
On the DSLAM side it is very simple configuration, just a normal trunk with 4 VLANs transversing the link. On the 4900 I need to isolate the traffic for ADSL PRIVATE & PUBLIC service so DSLAMs connected to the same switch do not have L2 connectivity between them. For VOIP and MGMT they must communicate with each other. DSLAM acts also as a VOIP GW so it must communicate with other DSLAMs for VOIP service. Also VLAN 200 is configured on ME 4900 for switch management traffic.
 
This 4900 Switch connects to MPLS PE router, which offers L3 VPN service for VOIP & MGMT service, and L2 VPN for ADSL service (PPPoE traffic to BRAS). Fortunately we have ES+ linecard to support many ethernet features. I tried this config:
 
1) VOIP, DSLAM-MGMT, MPLS-MGMT configured as normal VLANs
2) ADSL PUBLIC & PRIVATE configured as isolated secondary VLANs, primary VLAN for ADSL PRIVATE is 2008, for PUBLIC 2308
3) Configure DSLAM facing ports on ME 4900 as private-vlan trunks
4) Configure ME 4900 uplink port to MPLS PE as a private-vlan promiscous trunk
5) Configure ethernet services on MPLS PE for each tag that comes from ME 4900 (ES+ cards are awesome, i love them:D )
6) Apply L3 VPN service for VOIP and DSLAM-MGMT, and L2 VPN for ADSL service.

But at least this last command should list on spanning tree forwarding state also the ADSL VLANs or not?
 
Here is the output of the show interface switchport.

View 1 Replies View Related

Cisco Switching/Routing :: 2960 / How To Configure Private Vlan

Mar 13, 2013

I have 2960 cisco switch. I want to configure private vlan. But it is not getting configured in cisco 2960. Is there any other way to configure that in switch.

View 1 Replies View Related

Cisco Switching/Routing :: 4900m - Private VLan And VTP Version 3?

Dec 10, 2012

know if Private Vlans are supported on the Cisco 4900m switch when set in VTP version 3 and VTP disabled?Most documents just specify VTY transparent mode without mentioning the version, trying not to assume since this is production.

View 1 Replies View Related

Cisco Security :: Catalyst 3750 Support Private Vlan?

Feb 12, 2004

i want to know if the new Catalyst 3750 Support Private Vlan ?
 
or any other small Switches

View 3 Replies View Related

Cisco Switching/Routing :: 3750 - Extending VLAN To Remote Switch That Already Has VLAN ID In Use

Jan 10, 2013

I have two networks at two sites with a dot1q trunk between the two L3 switches at both sites (no routers involved)
 
SITE A - Cisco 3750 L3 - VLAN ID 50
10.10.50.0/24
 
SITE B - Cisco 3750 L3 - VLAN ID 50
10.20.50.0/24
 
I would like to extend the SITE A VLAN to SITE B so that I can move hosts from SITE A to SITE B without needing to change their IP address but the vlan ID is already in use. Obviously the easy solution is to change the VLAN ID for one or other of the sites but both sites contain hosts that run 24/7. Is there a way to join two VLANs with different IDs together.So for example I create a new VLAN 60 at SITE B and associate it with VLAN 50 at SITE A.

View 4 Replies View Related

Cisco Switching/Routing :: Assign 2 Ports To A Vlan On Slm2008 Private Network

Dec 17, 2012

Is it possible to assign 2 ports to a vlan on this switch and have the 2 machines connected to those ports be able to see each other without having to go off of the switch? If so, how would it need to be setup on the switch?

View 4 Replies View Related

Cisco Switching/Routing :: Private Vlan Configuration On 3560E 24 Port Switch

Dec 12, 2012

We have a 24 port and 48 port 3560 E switches with identical IOS the 48 port switch supports private vlan while 24 port switch doesnt
 
configure private vlans on 24 ports 3560e and is it best practise to configure private vlan on this platform(3560)?
  
IOS version : C3560E Software (C3560E-UNIVERSALK9-M), Version 12.2(55)SE3, RELEASE SOFTWARE (fc1)
flash:/c3560e-universalk9-mz.122-55.SE3/c3560e-universalk9-mz.122-55.SE3.bin

View 3 Replies View Related

Cisco Switching/Routing :: Low Bandwidth On 3750 From Vlan To Vlan?

Nov 20, 2012

We have a low bandwith (15-20 Mbit/s) to the ASA from our Client vlan. If i connect the Client to the same vlan as the ASA is, the bandwith (90 Mbit/s) is good.
 
Here are the Layer 3 Design:
 
Client     ->     vlan 2 - Switch - vlan 7     ->     vlan 1 - ASA 5505     ->     ISP
 
The Layer 2 Design:
 
Client     ->     Gig2/0/13 - Switch - Gig4/0/43     ->     Eth0/1 ASA5505     ->     ISP
 
IP Address:
Client: 172.16.2.10Vlan2: 172.16.2.1Vlan7: 172.16.7.1ASA: 172.16.7.2
  
I assuming the switch has a problem with routing ?It is a stacked Switch with following members:

switch 1 provision ws-c3750g-12sswitch 2 provision ws-c3750g-24tsswitch 3 provision ws-c3750g-24tsswitch 4 provision ws-c3750x-48
 
And we have following error message in the log from the switch:

%PLATFORM_UCAST-4-PREFIX: 

One or more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded I first get the idea that the switch is overloaded with router traffic. Thats why i assuming i have to check the sdm templates, but i'm not sure if this resolves the issue. 
 
Here are the relevant config:
 
ASA Interface on the Switch:

interface GigabitEthernet4/0/43description ASA-inside LANswitchport access vlan 7switchport mode accessspanning-tree portfast
 
Client Interface on the Switch:

interface GigabitEthernet3/0/1switchport access vlan 2switchport mode accessswitchport port-securityswitchport port-security aging time 2switchport port-security violation restrictswitchport port-security aging type inactivitymacro description cisco-desktopspanning-tree portfastspanning-tree bpduguard enable

[code]...

View 2 Replies View Related

Cisco Switching/Routing :: 2950 - Private VLAN Across Trunk To Older Model Switches

Mar 7, 2012

I am looking into the possibility of using private vlan's for some dmz implementations however I do have what may be some very rudimentary questions. It seems straightforward how to configure the primary/secondary vlan configuration as well as associating them. However in my case I would be looking to configure the PVLAN on a 6500-vss platform acting as the router while all of the hosts which I would desire to have in the isolated vlan would be spread out across a number of older Cisco switches which only support "protected port" setup or Procurve switches all of which I do not have budget to replace with something newer. So in my scenario I would have a 6500 connected by trunk to multiple switches which only support a protected port setup such as a Procurve (top of rack) or a Cisco 2950. As the Procurve or 2950 would not support Private VLAN setup, do I then just configure the secondary vlan to be allowed across the trunk from the 6500, configure that vlan on the Procurve or 2950 (as vtp will not foward the info for the secondary vlan) and assign that vlan to the host port as well as setting it as a protected port and this will communicate just fine across the trunk to the router as well as stopping the protected port in top of rack switch 1 from being able to communicate to a protected port in top of rack 2,3,etc? If the above scenario is what needs to be done, do I just use a regular trunk or do I have to use a PVLAN trunk?

View 2 Replies View Related

Cisco Switching/Routing :: Per-VLAN QoS On Nexus 5K?

Feb 22, 2012

I was reading a QoS walkthrough earlier to try to solve my problem and I noticed that in IOS, you can specify "match vlan" in a class map.  This is not available in NX-OS. I'm not doing any routing on the 5K so I cannot match on ACL, and port where traffic is received is a trunk sharing other types of traffic I'd like to classify elsewise.
 
How can I match traffic on a per-VLAN basis?

View 5 Replies View Related

Cisco Switching/Routing :: QOS By VLAN On Nexus 5k?

Aug 14, 2012

I have a couple of Nexus 5ks that I want to put QOS on for the servers running behind it but also have voice running across it.  Voice doesn't play well with jumbo frames so I'd like to put QOS only on the voice vlan. 

View 1 Replies View Related

Cisco Switching/Routing :: Vlan On Nexus 7K Is Down

Apr 17, 2013

I am working in my lab and I was adding a new L2/3 vlan

vlan 555
name test
 
int vlan 555
ip address 1.1.1.1/24
no shut
 
I have also ensured that this vlan is added to the port channel going to my Nexus5K's.  I added the vlan to the 5K's and also ensured that vlan 555 is traversing the peer link.  all is good there.  I have also placed a device on a interface on the 2k as a access switchport on vlan 555
 
Here is my problem, the L3 interface will NOT come up on the 7K
 
LAB-DSW01# sh ip int brie
IP Interface Status for VRF "default"(1)
Interface            IP Address      Interface Status
Vlan555             1.1.1.1     protocol-down/link-down/admin-up  
 
I have gone throug just about everything I can think of and I am still unable to get this L3 interface to come up.  I have other L3 interfaces on this device that are configured exactly the sameway without any issue at all.  All the existing interfaces are working properly, it's jut this new interface that I am trying to add.
 
I am running version 6.0.1 on the 7K and 5.2.1.N1.4 on the 5K.

View 2 Replies View Related

Cisco Switching/Routing :: Nexus 5010 Support For Inter VLan Routing

Jan 10, 2012

Can nexus 5010 supports inter v lan routing , as there is no core switch and router available in current network.

View 2 Replies View Related

Cisco Switching/Routing :: Nexus 7010 - Inter-VLAN Routing On Multilayer VPC Environment

Feb 16, 2011

you find attached my network architecture with 2 Nexus 7010 on core layer and 2 Nexus 5020 on distribution layer, each one with 1 N2148T fabric extender switch. PC-A1 and PC-A2 are connected to one N2148T, PC-B1 is connected to the other N2148T. Nexus-7000-1 is HSRP Active for all VLANs, Nexus-7000-2 is HSRP standby. PC-A1 and PC-A2 are connected to VLAN A, PC-B1 is connected to VLAN B. PC-A1 and PC-A2 have the same default gateway correspondent to IP HSRP on VLAN A. It happens that PC-A1 is able to ping PC-B1 while PC-A2 is unable to ping PC-B1. If I issue a traceroute from PC-A2 I see Nexus-7000-2’s physical IP address as the first hop even if Nexus-7000-2 is HSRP standby. After the first hop the traceroute is lost. If I shutdown Port-channel 20 on Nexus-5000-2, PC-A2 starts to ping PC-B1.I can’t understand what’s wrong in this architecture.

View 6 Replies View Related

Cisco Switching/Routing :: 2960G - Switch Clustering Benefits?

Jun 11, 2013

I recently changed jobs and at the new location we are primarily running Catalyst 2960G series switches with the exception of one 3750. All of the switches are setup in a cluster with the 3750 being the cluster master. My question is what is the benefit of switch clustering? The entire network seems to be a bit over engineered for the our needs and I am hoping to scale it back a bit. For example, the the network was setup with VOIP QoS when there were no plans to even use VOIP. Also what procedures would I want to follow to disable the cluster to avoid any major outages? Assuming there is no real need for a cluster.

View 1 Replies View Related

Cisco Switching/Routing :: Nexus 7000 Vdc Vlan Configuration?

Dec 9, 2012

I am seeing an issue that after deleting/recreating one of the VDC in Nexus 7K, VLAN is not been able to be configured within the VDC although it is not actually a reserved VLAN. Could it be anything missing in the license installation? the version of the image is NX-OS 6.1.2
  
StorageVDC(config)# vlan 100
^
invalid vlans (reserved values) at '^' marker.

View 2 Replies View Related

Cisco Switching/Routing :: Nexus 5000 And 3750 Switch Redundancy

Oct 31, 2012

My network consist of that network device. cisco catalyst 3750 with stackwise, 2xnexsus 5000  series and servers.servers connected to nexsus switch. nexsus connect to 3750.

Each server have two link, one of them connect nexsus1 and other connect to nexsus2 switch.(same traffic) each nexsus have one link to 3750. At 3750 the nexsus link configurate etherchannel. but the flapping occur at 3750.

i understand that at 2 nexsus link have the same server source mac address so the flapping occur at 3750. how i solve this problem?

View 5 Replies View Related

Cisco Switching/Routing :: Nexus 2232PP / 3750 S - Support 100Mbps With A SFP-GE-T

Nov 10, 2012

The data sheet for the 2232PP says you can use a SFP-GE-T, but there is no mention of 100Mbps. I want to recommend to a customer that they use 2232PP for an upcoming core upgrade, but it may need to support some existing 100Mbps devices which are currently connected to 3750s.

View 1 Replies View Related

Cisco Switching/Routing :: Nexus 5010 - Unable To Create More Than 256 VLAN In N5k

Jun 23, 2012

I am not able to create more than 256 VLAN in Cisco Nexus 5010 switch. While creating I am getting "No VLAN resources available for VLAN creation" Details below -
 
Switch model - 5010
Software : NX OS 4.0 (1a)
 
Error Message:
Nexus_5010(config)# vlan 417
ERROR: No VLAN resource available for VLAN creation.

View 5 Replies View Related

Cisco Switching/Routing :: VLAN Information Not Propagating Between Nexus 5K Switches?

Oct 2, 2012

I have 2 NEXUS switches in VPC. When I create/delete a VLAN gets updated in the same switch, but the VLAN information does not get propagated to the neighboring switch. Revision number remains the same even if I modify the VLAN. Had also tried changing the VTP status to transparent mode & reverting it to client mode but no luck.Have double confirmed on the VTP domain names & password. However the same setup in different location which works perfectly fine.

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved