Company has implemented a 3750x with older Lexmark Pro print servers on new V lan configuration for printers. Causing print servers to lose connection. Have to reset constantly. Have tried to configure print server ports to full. Also new Nexus 7000. Perfect scenario is network devices.. not there yet.
View 3 RepliesI am trying to configure a new metro ethernet and have some questions about the configuration. The physical layout is a main office and two remote locations. The remote sites are point-to-point connections to the main office, tagged by the ISP with VLAN 130 and VLAN 140. The connections aggregate into one handoff at the main office, and are plugged into Catalyst 3750-X switches at all three sites.
View 8 Replies View RelatedI have on 3750X stack with a few vlan
--------------------------------------------------
vvlansw06# sh vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi1/0/6, Gi1/0/10, Gi2/0/5
Gi2/0/6, Gi2/0/37
10 LAN_10 active Gi1/0/16, Gi1/0/17, Gi1/0/19
[code]....
where are the others vlan?
We are looking for a print server that saves prints to a hardrive when printed from anywhere on a network.What is meant by saves prints meaning that they can be accessed anytime during the future for reference and security reason
View 1 Replies View RelatedWe have 6509 VSS with FWSM Module and we have created two context on it, one is INTERNALL CONTEXT othe is EXTERNALL Context? We have spanned various VLANS in switches and FWSM context level. All VLAN Gateways are configured in context level.
Activity description : We had planned migration of these devices into a new Datacenter, it was a planned activity. During migration of devices from one Dc to a new DC we broke the VSS and kept the primary running and removed the secondary switch and migrated this secondary to new DC and powered this device ON in the new DC and checked all the config was very much fine but this device was OFF network as secondary was brought to new DC just to limit the downtime during the primary switch movement.
During the activity ( Primary switch movement )We powered off the Primary switch and mean time before shifting into new Data center We had brought up secondary switch which was already existing in the DC was put live in the network and it was working fine without any issues.
Later we had moved Primary into new data center and tried to put into VSS with the secondary , during this period the secondary device into went into RECOVERY MODE and primary device was not responding and devices went off network and immediatly we removed the VSL link and brought up primary into production network without secondary online in the network ( Without VSS just stand alone switch ) network started working, but bringing up the primary we found that some of the VLANS in the FWSM was deleted and some VLAN had misconfiguration ( example : say original VLAN ip 10.200.112.1 has become 10.300.13.1 ) also some of the access list as well as SVI was deleted making configuration mismatch.
Wanted to know while syncronization b/n primary and secondary switch in VSS if we pull out VSL link would create this type of issues.
I have a NG PS121V2 print server that i had working on my cradle point MBR 900 with a lexmark E238 I lost the MBR 900 during a storm so i picked up a Belkin N300 until i decide what to do about ISP.I can not get the NG Print Server to now. when i go through the setup wizard for the Print server i can configure and print a test page but as soon as i exit the setup wizard i can no longer print? e)
View 1 Replies View RelatedI have 3750x with existing small business server and all computers on one vlan. This vlan connects to other switches with fibre trunk sfp's.I want build a new forest utilising vlans in the normal way, what is the easiest way to segregate this vlan?The site is running 24/7.
View 6 Replies View RelatedI need to connect two switches with each have different Vlans and wants to Connect the users of These Switches to Existing Network of Company(Vlan 1 ; showing Right in the picture).
I have created Vlans and able to route packets from Two Vlans (10,20) to VLAN 1 but i am unable to get access to Users existing in vlan 10,20.
Internet is working fine from VLAN1 and existing network did not have any router ,it is just a DSL modem and did not have Static /Default Route option,NAT.
What Option should i choose for it. 3750x have 12 Mini Gbic Slots and 1 Routed port and did not have any NAT options in it.
I recently upgraded my network to have two 3750x core, one interface on the cisco is connecting to a Netgear switch via a fiber converter. I am keep getting the vlan flapping error message in my log as below.
View 2 Replies View RelatedI have a LIII Switch Cisco 3750x ,with diffrent Vlans , Some users are in Vlan 102 (10.10.2.0) and Some Users are in Vlan1 (10.10.1.0) , now i want to restrict the Vlan102 users to access Vlan1 , i am pasting my configuration below , how to create a access list .
interface Vlan1
ip address 10.10.1.36 255.255.255.0
ip helper-address 10.10.1.36
[Code].....
I have one issue on Vlan in Cisco 3750X switches , I have 2 Offices , I am sitting at corp OFfice and i have one 3750 ( 10.10.1.36)Switch at my location , in my remote office i have one more switch 3750 ( 10.10.33.1) and i am able to access the both vlan IPS with out any issue , now i have some network components in Vlan33 ( 10.10.33.1) at my remote office . i am able to ping 10.10.33.1 IP from my corp office , but i am not able to ping any network devices in 10.10.33.5 example : 10.10.33.5 is my Cyberoam IP at remote location and i am not able to ping , i have taken a trace route and not able to find the issue as i am not much femilar , ping 10.10.33.5 at remote location devicec
I am giving the Configuration for both locaitons below :
10.10.1.36 - Corp Office 3750 Switch:
sh run
L3-#sh running-config
Building configuration...
[Code].....
I've got a 3750x stack set up as my core switch (only a small-ish environment) - I'm shortly going to be deploying an enterprise wireless network with Corporate and Guest SSID's. I'm going to be putting all traffic from the Guest SSID in VLAN 244, and don't want it to have access to any of the other VLANs (1 (Legacy Eqpt), 4, 8, 12, 16, 20, 24, 28, 32, 248 & 252).
IP ranges for all the main VLANs are:
1: 10.0.0.x/22
4: 10.0.4.x/22
8: 10.0.8.x/22
12: 10.0.12.x/22
16: 10.0.16.x/22 etc etc (you get the pattern)
I'll probably give Guest traffic (VLAN 248) the IP range 192.168.10.x/22 (not because I NEED that many addresses, but it's easier for everyone to remember/understand if I keep the subnet masks the same all round). However I also have a CCTV VLAN (252) which already has the range 192.168.0.x/24, which some people in other VLANs WILL need access to.
So my question is: What is the syntax for the ACL on my 3750x (IP base - 15.0.2) to prevent traffic from VLAN 244 gaining access to any of my other VLANs. I'm making a broad assumption here that a layer 3 switch is perfectly capable of supporting that function? I need ALL the syntax for setting up ACL's - I've never done it before
My gateway device by the way is 10.0.4.1, and I do have inter-VLAN routing set up on the core switch (obviously).
I am migrating an existing LAN from 3550 to 3750X-12S. In the existing configuation, I´ve got some trunks with native VLAN <> 1. The native VLAN is also used for user data transport. With IOS 15.0(1)SE3 on 3750X I recognized, that per default behavior PVST is not active for a VLAN defined as native, even if the corresponding trunk is up and trunking. My current workaround is to add a "switchport access vlan" command on the trunk even this one never should become an access port. With this statement only the switch is activating the PVST for the native VLAN. For all other vlans PVST works as exspected. [code]
View 6 Replies View RelatedI`m working on Dynamic Vlan Assigmenton the basis of end user authenticatedwhoc are part of specific AD Group in c ampus enviorment.Objective: Need to assign the vlan on switch port on the basis of authenticated users OU Group in Active Directory. Eg: There are 2 OU groups in AD, Sales and Administration. Authenticated user in Sales group should get Vlan 10 and user in Admininstration Group shoudl get Vlan 20.
Components:
Cisco 3750x/Cisco 4500
ACS Version 5.2
Microsoft AD
I'm building a new colo presence with a full class C of public IP's. The idea is to connect to our ISP with a 3750x switchstack and they will be providing two ethernet drops that conect directly into two seperate switches on their side with HSRP and BGP at the routing level, so we will just point to their virtual IP (gateway address).I'm not sure how to either segment the public ip block or statically route each ip address and the interaction of vlans/svi with HSRP groups. Just use the switch at layer 2 or handle the internal routing with eigrp or ospf at layer3?
View 2 Replies View RelatedHas anything changed in the way of defaults for creating a trunk port and spanning-tree between a 3750x and the newer 2960s? I have one of each I just took out of the box and applied my standard switch configuration template but I cannot get my VLANs that are configured on my 3750X to appear on the 2960S. I find nothing that is blocking and everything seems to be forwarding and I am running out of things to check.
View 5 Replies View RelatedWe currently have 7 Cisco 3524-XL switches (10-12+ yrs old) which are 10/100. We purchased a handful of Cisco 3750X switches to replace them going with the whole stackwise and redundant power supplies. Our current configuration on the old 3524 switches is that they have hardset all the ports on them to 100MB/FULL since devices would auto-neg to 100/Half. Since we're going from 10/100 to 10/100/1000 switches, I want things to auto-neg as I have heard in the past and experienced that things work better when it auto-neg to gigabit. My upper management is afraid since the old switches wouldn't auto-neg correctly that we should hard set all the ports on the new switches, which would be a nightmare since some ports would be hard set to 100/FULL others to 1000/FULL, etc.. We've tested just about all of our devices at auto with the switches and they've all auto-neg to the correct speed. In short, is Auto-Negotiation the way to go with the newer switches or is it still better practice to hard set your ports?
View 3 Replies View RelatedI have RFID Reader (10.10.63.2 - 255.255.255.240) connected Cat-6 POE to ws-c3750x-24p-s - standard TCP/IP web service app pulling data from the reader every 250msec: I have my app server connect via vlan by ws-c3750x-24p-s IP address (128.1.70.1 - 255.255.0.0) as you can see its on a different sub net;
I can ping the device from the server - although I'm not getting any data coming through: my config are as:
0 [switch 1 provision ws-c3750x-24p-s]
1 [system mtu routing 1500]
2 [ip routing]
3 [no ip domain-lookup]
[code]...
I can ping the device from the server - although I'm not getting any data coming through.
I have a requirement whereby a CCTV system is being installed that will need multicast RTSP configured on the switch network. How this will be achievable on 3750X IP Services switches? if this is not possible then what switch hardware will be needed?
View 2 Replies View RelatedI would like to know if there an specific configuration in order to apply QoS configuration in Switches 3750X for Polycoms Phones.I was reviewing the information from Cisco but mostly of them apply only for cisco phones, and just some or basic for non cisco phones.
View 1 Replies View Relatedwhen enabling multicasting on layer 3 interfaces the CPU becomes fully utilized , is there any specific configuration should be enabled to reduce this .
Config :
Inetface vlan 100
ip pim sparse-dense
ip igmp version 3
[Code]......
I have Cisco 2960's, 3750's and 3750x's all running IOS on the access layer. I have Cisco 6504's running IOS on the Distribution and Core layers. I am looking to monitor redundant links through Spectrum by having specific ports send traps but I have run into trouble finding how to configure it. I would like to have:
1. Logging enabled for all links (Fiber and Copper) so that I see all links up/down messages in the syslog
2. SNMP traps sent for linkup/link down messages only for redundant links (ex. Dual Up links from Access Layer or Redundant Ether channel Links on Dist Layer)
3. SNMP traps should be ignored/not sent for all copper ports.
I am trying to setup intervlan configuration and stuck on a problem. Here are the details:
1. Switches Catalyst 3750-x (as core switch) and Catalyst 2960S (as access switch)
2. Both switches have VLAN 20 and VLAN 1 on their database and both are active. BTW, after I figure out how to properly configure interVLAN routing the native VLAN 1 will not be used anymore. This is just an initial test.
3. VLAN 20 SVI interface (IP 192.168.20.200) on 3750 is up and can be pinged from catalyst 2960.
4. VLAN 1 SVI interface (IP 192.168.170.200) on 3750 is up and also can be pinged from Catalyst 2960.
5. Catalyst 3670 can ping a client computer (IP 192.168.20.10) connected to Catalyst 2960.
6. IP route enabled on 3750
7. Trunking is enabled on etherchannel connecting both 3750 and 2960
8. Client computer in VLAN 20 (connected to 2960) can ping VLAN 20 SVI interface 192.168.20.200 on switch 3560.But, the client computer in VLAN 20 can not reach any computer in VLAN 1 and vice versa. Strangely, the switches which these computers are connected to can ping each other or any connected client copmuters without any problem as described above.
we noticed that every six hours, our all servers in a VLAN disconnects/disappears from the network for a time of 10-20 secs and it comes online immediately. It impacts the performance of the application for a moment.
We use CISCO router com Switch and Checkpoint firewall to access those servers. The issue is not every six hour, it is every sixth hour from its previous instance. Eg) if it 9 am in the morning then it happens somewhere around 3:01 pm in the afternoon and again 9:02 pm in the night.
There is no DHCP allocation or server in our environment. All ip address used are static.
specially, what could be set to action every six hour ?
I am installing a several new Cisco VM servers. The VM hosts are losing connectivity when we apply the etherchannel config in the core stack. VMware has stated that the etherchannel load balance needs to be src-dst-ip in order for the etherchannel to work.However, my current stack has 2 etherchannels configured to other switches through out the bldg in network closets. The current load balance configuration is src-mac.My question....when I make the change to src-dst-ip, will my network connectivity go down? I saw there was an older article on this that doesnt provide an answer just a work around. Here is the article. [URL].
View 1 Replies View RelatedI have a network with the following structure
internet ---- cisco2911 ----cisco3750 --- internal lan
I have two email servers on different vlan
192.168.0.1 ----- 1.1.1.2 (public ip)
10.1.1.65 ---- 1.1.1.3 (public ip)
Before these servers were directly connected to the internet with two nics (Nightmare, I know). The Public IP on internet facing NIC and private ip on LAN facing nic. I'm in the process of changing this.I'm able to access internet from my vlans and also able to send emails but cannot receive emails on these servers.
My router congif is as follows:
Building configuration...
Current configuration : 6234 bytes
!
version 15.1
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
[code]....
I’m working with a managed switch that has three V LANs setup on it. Recently the domain changed and the wireless V LAN can no longer access the internal website. I found access rules, in the switch that allowed the wireless V LAN to use the DNS server on the private/staff V LAN. Their DHCP scope is on the switch and DNS is set there. The Website is also on the V LAN with the DNS server. This configuration totally cuts out external DNS usage. It stopped working though. It is as if when things switched on the Domain the wireless users were denied DNS requests. The switch was not touched at that time. I’m looking at it though and it seems that I may have conflicting rules.
The version is 12.2. I believe its a Catalyst 2600~
DHCP scopes: ip dhcp pool INSIDE network 192.168.1.0 255.255.255.0 default-router 192.168.1.1 dns-server 192.168.1.6 192.168.1.4 domain-name saline.lib.mi.us
ip dhcp pool WIRELESS
network 172.16.0.0 255.255.255.0 default-router 172.16.0.1 dns-server 192.168.1.6 192.168.1.4
Here is the V LAN Setup:
Interface Vlan1
ip address 192.168.1.1 255.255.255.0
[code]...
Here are two access lists that should be allowing the traffic from 172.16.0.0 into the list IPs/Ports. These do no work.
ip access-list extended WIRELESS-PRINT
permit tcp 172.16.0.0 0.0.0.255 host 192.168.1.12 eq 30044
permit tcp 172.16.0.0 0.0.0.255 host 192.168.1.12 eq 21326
permit tcp 172.16.0.0 0.0.0.255 host 192.168.1.12 eq 6987
[code]...
During my testing I removed the Deny rule and everything worked. deny ip 172.16.0.0 0.0.0.255 192.168.1.0 0.0.0.255
However, the “ permit ip any any “ rule, makes all the port rules pointless because when this rule is in place solo, I can ping and access everything on the 192.168.1.0 network. Is there a way to deny everything, except what I permit? Because when I remove the ip any any, then they cant even get out. Perhaps there a better way to say, the wireless users can get out but only get into the sub net over specific ports? I have a feeling it may have not be thought out entirely when initially created. However, the big mystery is that it worked before secondary domain controller failed.
Having a problem configuring my new 1941 Router. The 0/0 interface is attached to my broadband and gets it's ip via dhcp, the 0/1 interface is connected to my lan and has a dhcp pool. My problem is that the 0/0 interface does not appear to be getting any dns servers. So i have either missed something or need to add the dns servers manually to my dhcp pool. Below is my config,
[code]...
We have a Cisco router 2901 with 10M dedicated link on Gi0/0 interface, 3 VLANs on Gi0/1 interface. The Gi0/1 is subinterfaced for default, LAN and DMZ segments.LAN is assigned 172.16.1.0/24 and DMZ 192.168.1.0/24. We host a web server (192.168.1.11) and dns server (192.168.1.18) on DMZ VLAN. On the same WAN interface we have confiugured PAT and NAT. For outside queries to DNS and WEB servers everything works fine but when we try to open the website on our web server from internal LAN, we can´t do it.
When PINGing the web server by its IP address 192.168.1.11 or by the FQDN, the requests respond fine. The domain.com and [URL] resolve and respond with public IP address of our WAN link as the DNS server is configured. But when we try to open [URL] in the Internet browser the website does not open.
What could be the issue? Can be anything with NAT or PAT configuration?
My IP Configuration lost after system reboots in SLES 10.but when i restart the nework it again comes back after doing the same two/thre times.
View 1 Replies View RelatedMy router/modem is a DSL-2740BI created a hostname [URL] At my service provider I was able to create a DNS setting where I specified my routers IP address.In my router I think I created a port forward (TCP port 8080 on both external and internal) with the ip address of a small "web server" (an Arduino module for home automation).When I enter my hostname I get to see my router config page instead of my "Arduino page".
View 7 Replies View RelatedI'm adding it to an existing infastructure, with multiple VLANs. I believe I have it set up correctly, however whenever I daisy-chain the switch in with the trunk ports, it's not passing the VLAN info correctly. There's not a lot of configuguration involved, so I'm not quite sure where I might be going wrong. I've attached a couple screenshots that show my trunk port configuration.
View 3 Replies View RelatedI have been trying to setup vlans on a SG300-28p but they are not working. This is my setup: I want Switch1 to have ports 1-10 to access the DMZ, and 11-24 the LAN. Then i wan to add switch2-4 to extend the access to LAN.
i tested with cisco 2960 switches by just telling what ports whould have access to DMZ and LAN but the small business switches are different..