R11 is acting as host for testing purposes (pinging the DG's, and the ISP interfaces -> which are the lo0 address on the routers.I also have another question: How would I go about providing redundancy on the trunks from the Switch to the router?
View 2 RepliesI've been tasked with finding all switch ports that are configured as Trunks. We plan to use LMS 4.2 to push (via Netconfig) new interface level commands to all user (non-trunked) ports. From my experience, this poses a problem because we do not know which ports are configured as trunks -vs- user ports.
Using Netconfig is not going to be easy since there is no way to script this. It would be great if I could run a show command on a switch and then have CWSI peform a change based upon the output.In other words, we need a way to run a job based upon the output of a command.
I just moved in to a new place and have connected my Wireless router (WRT610N) to my switch located in the smart panel in the basement (SE2500). Plugging my ultrabook in to the wall confirms that the signal from the switch in the basement is being sent up, however if I plug my wireless router in to the jack and connect to the wireless router I have no internet access.
View 3 Replies View RelatedI'd like to establish a more robust border router/switch redundancy plan and would like to know if this seems like it would be reliable.I'm looking at using a couple of 3945 routers and 3750 switches in the configuration shown below.
The article found at [URL] outlines the config between a single switch and router but I am looking at doing this with dual routers and switches.
My current switch layout at work is very basic and offers no redundancy. I'd like to at least setup redundant core switches, so that if any of my switches would to fail, it would result in a smaller number of systems affected.
Current Core Switch: HP Procurve 3500yl-48G (3500yl-24G as cold spare)
Internet Switch: 3com (forget model)
User distribution switches: 9 Planet 10/100 Layer 2 Managed switches, and 2 Dell Powerconnect 5448
Server switches: 5 Procurve 2810-24Gs (1 in each server rack)
In addition, we have 50+ site to site VPNs using different 192.168.x.x subnets across 2 different VPN concentrators, several routers, and a pair of MPLS's.My first step to improve speed and reliance was to reconnect the user switches. The old distribution switches were daisy chained, and all users 120 users were on a single 1GB port on the core switch, and if switch 2 of 11 failed, I'd have 10 switches knocked out of the network. I've since connected them directly to the core switch, and the users have noticed the improvement.
I'll try to get a diagram, but it's basically a large hub and spoke. Each and every switch is connected directly to the single core switch. All of the internet sources are connected directly to the 3com and are on separate VLANs which are then connected to the core via a trunk, which then handles the routing. Currently, I'm using less than half of the ports on the current core switch, so I should still have enough ports on the 24G to at least maintain the critical systems. Each server switch is trunked to the core, as is the internet switch, but the user network is not (but probably should be). Instead they are connected via simple untagged uplinks.
I absolutely cannot afford new equipment right now, so whatever I do will require reusing existing equipment. I'd very much like to increase the bandwidth from the server switches to the core if at all possible. Is there an easy way to configure and Active-Active setup that would improve bandwidth? Or would It be active-passive and require a 2 port LAG on the 48 port (for speed), and a 3rd port for the 24 port (for redundancy).
NOTE: With any luck, we'll be dropping our analog phone system and replacing it with VOIP sometime within the next year. So I should be getting some extra budget to replace the distribution switches with POE. Until then, I'll have to live with my crappy Planets.
My network consist of that network device. cisco catalyst 3750 with stackwise, 2xnexsus 5000 series and servers.servers connected to nexsus switch. nexsus connect to 3750.
Each server have two link, one of them connect nexsus1 and other connect to nexsus2 switch.(same traffic) each nexsus have one link to 3750. At 3750 the nexsus link configurate etherchannel. but the flapping occur at 3750.
i understand that at 2 nexsus link have the same server source mac address so the flapping occur at 3750. how i solve this problem?
I have the following: 1 5520 ASA connected to the internet, 2 core switches, and several access switches.Aside from implementing RSTP, VRRP, hard code access and trunk ports, is there any other recommendation you would like to add.
View 7 Replies View Relatedi have new project in hospital with the bellow product :
20 X WS-C2960-24TC-S
2 X WS-C3750X-48T-S
2 X WS-C2960S-24TS-S
i need to configure this switch in order to work first the 2 core switch for redundancy then each catalyst switch 2960 connected to the core with 2 uplink each uplink for each core switch that way i have rendundancy in the connection then i need one vlan ?i need to configure this switch to work perfectly with each other in best redundancy mode?
I have a following question. I configured different authentication passwords in Master and slave VRRP setup.
View 2 Replies View RelatedDoes Cisco 2911 support VRRP?I can’t find in datasheet anything about it.
View 2 Replies View RelatedOne of our customers had 2 x 2800 series routers that they needed to reconfigure to support new services, The existing public subnet has 2 free ip addresses to use for the routers, unfortunetely even though the ISP can reconfigure this to create more addresses the customer cannot have any downtime (there are other routers in this subnet that are live) and therefore i had my hand forced into using VRRP as opposed to HSRP (3 addresses).
I used VRRP to share the master address as the VIP, so one address on the master, one on the backup, using the master address as the VIP.
This all works fine, outbound and inbound traffic failover as expected and preemption works just fine.
My problem is, he asked me to configure a remote access VPN. So i have configured the VPN to connect to the VRRP VIP. When the master is active, the VPN connects, traffic passes, all fine. When the master is switched off the VPN traffic hits the backup, as its now assumed the VIP, and completes phase 1, xauth works, but phase 2 will not come up and the client displayed "not connected".
So doing some debugs, the phase 2 policies are accepted, but i get the message
*Mar 1 01:36:21.451: IPSEC(validate_transform_proposal): invalid local address x.x.x.164
where x.x.x.164 is the VRRP VIP address, the physical address which has the crypto map applied is .165
So here lies the problem, the client is connecting to .164, the crypto map is applied to the interface the is configured with .165. Hence the "invalid local address"
I have found some documentation online that suggests that VPN redundancy is possible with HSRP, but not on the 2800 series router. I cant use HSRP as i have only 2 addresses, and i cant use that feature as my routers dont support it.
I currently have a working metro ethernet connection between our main office and a branch office. I am tasked with building a redundant route for this site, in case the metro-E line goes down. We are purchasing two cable internet lines at each sight and I plan on buying two Cisco routers to do the VPN tunnel via the new cable Internet connection. The metro ethernet connection currently has two HP 3500s on each atm.2 questions:
-How will OSPF and VRRP factor-in to such a setup?
-What Cisco routers are recommended that can utilize this protocol?
The HP 3500s can do either OSPF or VRRP.I have been purchasing and setting up refurbed Cisco 1811 routers for other VPN tunnels and they work great.
I have found the HSRP configuration example in Cisco Metro Ethernet Switch ME-3600x/ME-3800x but unable to find the VRRP configuration exmaple in Configuration guide as well in Command Reference Guide.
I am using the IOS version ME-3600: S360XVK9T-12252EY and ME-3400: S340XBT-12253SE
command reference guide: [URL]
configuration guide: [URL]
Kindly confirm either these switches support vrrp commands or not? If yes, kindly share configuration example.
I am using a bunch of Cisco 1721 routers for my T1 lines. We recently purchased Digi cell modems as a backup for the T1. On configuring vrrp to work on both devices I discovered that IOS 12.3(6c) does not support the "vrrp track" feature. After reviewing the Cisco Feature Navigator I could not see an IOS that will support the vrrp object tracking. Is that correct? The routers have T1 WIC's installed. If it does work what is the latest IOS that will work on this end of life product?
View 1 Replies View RelatedLet's say I have a Brocade switch, and a Cisco switch, and I've formed a VLAN trunk between the two.On the Cisco switch, I configure the trunk to utilize VLAN 3 for its native VLAN.On the Brocade switch, I utilized the command 'default-vlan-id 2'. I have configured the port going to the Cisco switch in dual mode.From my understanding, when a port is placed in dual mode, it sends frames that are untagged as the default vlan. Does this cause a native VLAN mismatch?
View 19 Replies View RelatedOur ISP hands us an ethernet link. ISP router has one address of (for argument sake) 1.1.1.0/30 net, - let's say they have 1.1.1.1 we have the other usable address of 1.1.1.2/30 assigned to our 3825 router. Is it possible to use hsrp or vrrp if there is not two valid/unique "wan" IPs to assign to our routers? For example, if we had a pair of 3825 routers? are we stuck with basically a manual failover or requesting our isp to provide a larger address wan block?
View 2 Replies View Relatedconnect a network providing security pin
View 1 Replies View RelatedMy device is not providing wireless around the house. What should I do?
View 1 Replies View RelatedHad a question regarding creating dial peers through sip trunks. It will be through verizon fios so it'll be terminated through the fa0/0 port. I know to the provider i'll implement something along the lines of this:dial-peer voice 1 voipsession target ipv4:1.2.4.4sipv2port fa0/0Many of the documentation I came across really only shows pots dial-peers will a voip dial-peer work the same? Something a long of the lines of this:dial-peer voice 2 voipdesination-pattern 91[2-9]..[2-]...... no digit-stripport fa0/0
View 9 Replies View RelatedI need to adapt a Cisco Catalyst switch configuration into a new ASR9000 router and I do not know how to configure trunks and access ports on an ASR9K router.
This is the configuration of the catalyst switch I want to replace.
interface GigabitEthernet1/0/1
description Access-Port -> SERVER
switchport access vlan 5
spanning-tree portfast
!
[code]....
Am I right? Or do I need to use the command “rewrite ingress tag pop 1 symmetric”on any of the interfaces o subinterfaces? Do I have to configure the command “encapsulation dot1q untagged“ on the GigabitEthernet0/0/0/0.5 subinterface?
I'm building this network and I stumbled upon a problem that I don't understand. Here is how my config looks:
PC -----------vlan5-------Cisco 3560----trunk3-5----Cisco AP1420
Vmware guest
Configuration of 3560:
interface Vlan3
description ID-180, wifi1
ip address x.x.x.x 255.255.255.224
ip access-group 115 in
[code] .......
Configuration of WIFI AP:
interface FastEthernet0
no ip address
no ip route-cache
[code]....
PC and vm ware are plugged in port 5 and 6, wifi in port 7. There if no V LAN ID set on the PC, but there is V LAN ID set on the VM ware esx interface. If I try to ping WIFI from PC or esx, ping doesn't get through. If I plug WIFI to port 5 or 6, I get access it.
Small business with 4 computers networked together and sharing coommon software programs and files. Need to block one of the computers access to the Internet whille allowing the other 3 access to the Internet. Is this possible/ If so How?
View 3 Replies View RelatedI have a D-Link DGL-4500 Wireless N Gaming Router. If I create a mobile hotspot with my BB Bold 9900, can I somehow get my router to connect to it so I can provide bandwidth to my Ethernet dependent network devices?
View 2 Replies View RelatedI am beginning to implement OSPF into the network I work on. I have a network which consists of multiple 4500, 6500 series routers and 3560s. Each switch has its own set of VLANs. In other words VLAN X on one switch is not the same as VLAN X on another switch. I had envisioned connecting each switch via trunk links and then routing via the loopback addresses on each device. That didn't work. Then I created a VLAN 100 on each switch. Each one was configured with an IP in the same subnet range (10.3.0.1 and 10.3.0.2). I added these addresses to the OSPF process in area 0. It worked. However, this is not desired. I have not seen many examples of 4500 layer 3 switches configured with OSPF. The examples I have seen show the interfaces configured with IPs.
View 3 Replies View RelatedI have a ASA 5505 that I have been using for a while, but a new ISP is trying to configure my service so that the outside interface has to be configured as DHCP to receive a reserved IP address, and then they will route a separate, non-contiguous block of addresses to that address.
Essentially, they have a DHCP reservation for 1.2.3.4 for my ASA, and then they have 10.2.3.16/28 as a separate block routed to me.
Obviously, I can do my static NAT translations using outside as the address, but I cannot get the separate block of addresses to route through the ASA. Is there a way to do this and get them to work? My ASA is running 7.2(2)
We have some technical issue with IPv6 router configuration[DLINK 655] when we try to connect it with ISP provided static IPv6 connection.
[Code]...
we have a cat6509 with FWSM. We pass to the FWSM several VLANs. AllL3 is assigned to the FWs.In the Cat6500 log we have received this message %SVCLC-5-FWTRUNK: Firewalled VLANs configured on trunks ,when we configure 2 vlans in a trunk to an ESX server (these 2 VLANs are alreadyassigned to the FWSM).Idea is to share an interface to a ESX server with several VLANs, some of them are assigned also to FWSM.
View 1 Replies View RelatedI would like to monitor the status of ether channel and trunk configurations in 6500 Catalyst switches running both CATOS and IOS. I would like to understand the specific mibs /OIDS that should be monitored for ether channels and trunks. I am trying to get a better handle on tracking the ether channels and trunk dynamically and then understanding when the ports are having issues (up/down and errors). I need to understand how to differentiate these type of ports from regular access ports.
View 4 Replies View RelatedI have 2 3750 switch stacks which I would like to have redundant trunks between them. This will provide two physical connections traveling through different geographical locations for redundancy in the event that a cable is severed. I couldn't find anything in regards to setup/config. Does it matter if I go stack1/switch1 to stack2/switch1 and stack1/switch2 to stack2/switch2 or should they cross to opposite switches like a stack cable? I don't think that should be necessary, but couldn't find any documentation. Should there be an issue with loops?
View 4 Replies View RelatedI have not yet completed my CCNA, however I have managed to configure a 1841 router with 1 x HWIC-ADSL1 and it also has 1 x HWIC-AG-AP-A which is the only part I am unable to get working.
The Wi-Fi (Dot11Radio) config has enabled me to see the SSID from wireless devices, but they never get an IP address. I need them to get the same IP range as the DHCP service I have in there 203.35.10.xxx, there is no option for "IP ADDRESS DHCP" only "IP ADDRESS POOL LAN" Lan is of course my DHCP pool name. however I cannot have the same DHCP pool on both Dot11Radio interfaces.
I know I'm missing one very simple command, but as I've never worked with Radio on Cisco equipment, I am unsure how to fix it.
Then once I get that worked out, I need changing the access from OPEN to WPA or WPA2, etc..
IOS Software on Router is C1841-ADVSECURITYK9-M - Version 12.4(9) T
I can upgrade to a better version of software if needed, I only have a 32mb Flash and 128Mb Ram.
The current Radio Config is:
!
interface Dot11Radio0/1/0
no ip address
no ip redirects
[Code]....
I'm configuring two etherchannel groups (2 ports in each) on a 3560 switch. I need to trunk multiple vlans over each channel group.
I created the vlan trunks and allowed vlans on each physical interface. I notice that I can also configure the vlan trunks on the port-channel interfaces that were created. Should I configure them under those interfaces, or leave them on the physical interfaces? Relevant config is below:
interface Port-channel1
!
interface Port-channel2
[Code].....
how to configure QoS on my SGE2010 to support my Toshiba CIX PBX VoIP trunks. The infrastructure is straight forward: PBX(1)<==>SGE2010(1)<==>SGE2010(2)<==>SGE2010(3)<==>PBX(2) where PBX(1) and PBX(2) are connected through three SGE2010's that are trunked via fiber between buildings. I don't have VoIP handsets and the PBX's are on their own VLAN. Everything else has been a breeze in these switches but I have no experience with QoS
View 6 Replies View RelatedFew days ago I faced a issue in which one of ours 4500 stopped providing poe on some ports in one line card. I called TAC and ran some diagnostics. However, there is a command that I found and it is NOT DOCUMENTED on 4500 reference guide! The command is "diagnostic monitor poe". This command actually detects/recover POE hardware failures! After executing this command, poe start to work again?
View 4 Replies View Related