I'd like to establish a more robust border router/switch redundancy plan and would like to know if this seems like it would be reliable.I'm looking at using a couple of 3945 routers and 3750 switches in the configuration shown below.
The article found at [URL] outlines the config between a single switch and router but I am looking at doing this with dual routers and switches.
My network consist of that network device. cisco catalyst 3750 with stackwise, 2xnexsus 5000 series and servers.servers connected to nexsus switch. nexsus connect to 3750.
Each server have two link, one of them connect nexsus1 and other connect to nexsus2 switch.(same traffic) each nexsus have one link to 3750. At 3750 the nexsus link configurate etherchannel. but the flapping occur at 3750.
i understand that at 2 nexsus link have the same server source mac address so the flapping occur at 3750. how i solve this problem?
how my switches are configured, a cisco 3750 and a cisco 4506.[code] i can ping the gateway from the 3750 however cannot get anything past that or enything to it.
View 12 Replies View RelatedI had setup a lan infrastructure with 5 3750 stack swithes. In these 3 of them are in one stack which is acting as access switch, 2 of them in another stack which is as core switch where all the SVI is configured. Now, when i tried to ping from our edge pc which is connected in access switch to default gaeway, which is configured in core switch, the ICMP is getting delayed . But when try to ping from the same edge pc to another user PC, it is getting less tahn 1 millisecond icmp replies.
why icmp is delaying to default gateway , but working with another edge to edge pcs without any delays?
actually im using a cisco asa 5520 as a default gateway to acessin/ publishing in the wan. i have a cisco 2811 configured to replace the cisco asa in a case of problem, but the switch is made manually. my lan switch is a 2 3560e configured with hsrp, so it is possible to make redendancy( failover) between the cisco ASA 5520 and the cisco 2811 using a hsrp or other technic.
View 11 Replies View RelatedI'm running into what seems a basic ip routing config problem with a Catalyst 3750 (IP Base) switch. I have several VLANS configured on the switch with IP routing enabled, and the switch is connected to the inside interace of a new ASA 5520 as follows:
ASA5520 IP (Default gateway): 192.168.1.1Switchport Gi1/0/1 is configured as a routed port, IP address 192.168.1.3 255.255.255.0Example VLAN is VLAN 100, IP address 192.168.100.1 255.255.252.0 From the switch CLI, I can ping all VLAN addresses, as well as the ASA5520, and the client laptop I'm testing with from VLAN 100.
From the client laptop on VLAN 100, I can ping all switch interface and VLAN addresses (inter-VLAN routing is working), including 192.168.1.3, but I CANNOT ping the default gateway at 192.168.1.1.
Here is the relevant configuration information on the 3750:
!
no aaa new-model
switch 1 provision ws-c3750x-24
system mtu routing 1500
[Code]....
i have a 6509 connected via layer 2 (VLAN1) to a 3750 (e.g. VLAN1 10.1.1.1)then to the HQ via Metroethernet(L3). Is it possible to connect the 6509 to an ASA that already has VPN connectivity to the HQ using HSRP? Also need to mention, the VPN connection is supposed to be the redundant connection if Metroethernet link fails.
View 3 Replies View Relatedwhich option do you think is better? The idea is to use them as the core of the network,to route between several VLANs.
Options:
1 - Two 3560 with HSRP
2 - Two 3750 stacked with cross-stack etherchannel to the access switches
I will be installing a new ASA 5510 firewall on our SIP vlan to separate our voice traffic from the rest of the traffic. I'm trying to decide whether or not I should go with an active/active setup or an active/standby. Any insight on the best way to set this up? This install is going in from scratch, and I am going to be connecting to a 3750 switch stack. Should I pair up a link from each switch to each 5510 using etherchannels? Should I use 8.3 or 8.4? Most of the docs I've been able to find say it depends on this, that, or the other.
View 2 Replies View RelatedI have a trouble with Cisco view 6.1.8. I had update offline device package because i don't have internet . When i connect to switch router 3945 and switch 3750, router 2911 on Cisco view then I receive "cannot find applicable device package for 10.1.241.10". Need to reinstall device package. The version of Cisco work LMS is 3.2. I check Active log and receive message .
The Package(s) Selected for Install :
Cat2960, Cat3750, Rtr2900, Rtr3900, Rtr7000
WARNING : Cat3750(14.0):Consistency check failed for base package DtShare
WARNING : Rtr3900(5.1):Consistency check failed for base package NGMARShare
I am facing a problem in implementing HSRP. My scenario is like this, I have two 3750 switches and I have a server with two NICs. I want to run HSRP in these two switches. By the way the server is connected directly with the switches. I mean each NIC to each switch.we have teamed the two NIC (Active / Standby).what configuration need to done in switches to work HSRP.
View 4 Replies View RelatedI plan to build improved redundancy in to my LAN by stacking two 3750s and teaming pairs of NICs on my Dell PowerEdge servers, with each cable of the pair going to a different switch.In my mind this provides redundancy for the NICs and the switches. Does this configuration will work, and also what type of teaming is supported, as I was planning to have one NIC active and one standby, but can I run this configuration with both NICs in the team as active with load balancing?
View 1 Replies View RelatedI have a Ethernet module (SM-ES3G-16-P) installed in a 3945 router and noticed during first boot no licenses are active at all. I would assume at a mimimum ipbase would be active. With this module, does static routing work with just ipbase?
Example:
interface g0/1
no switchport
ip addr 192.168.254.2 255.255.255.0
[code]....
We have Cisco 3945 Router with SM-ES3-24P Switch Module. when we tried to configure routing in Router and Layer 3 ports on Switch module, the inter-communicaiton is not working?
how we can use routing in 3945 with SM-ES3-24P module?
I have one 3945 router with SM-ES3-16-P module with SL-ES3-16-IPS. I am not seeing any license for this module in CLI output of my router. How do I add license for this module and activate. do I need IP Service IOS for this module
View 1 Replies View RelatedWe are having problems with a two router 3945 in HSRP and a switch 2960.The two routers are connected to the switch 2960 through differentes ports. The problem is that we loose connection between the router and the switch.When we excute the command: show cdp neighbor at router, it shows nothing.If we try to make ping to the 2960 switch it is no reachable.If we make ping to the other router 3945 it is not reachable.All other function of the router are o.k.We are attaching the IOS of the routers and switch 2960 and a document in which make reference to a BUG in which mention about arp overwrite due arp attack which produce DoS.
View 2 Replies View RelatedR11 is acting as host for testing purposes (pinging the DG's, and the ISP interfaces -> which are the lo0 address on the routers.I also have another question: How would I go about providing redundancy on the trunks from the Switch to the router?
View 2 Replies View RelatedMy current switch layout at work is very basic and offers no redundancy. I'd like to at least setup redundant core switches, so that if any of my switches would to fail, it would result in a smaller number of systems affected.
Current Core Switch: HP Procurve 3500yl-48G (3500yl-24G as cold spare)
Internet Switch: 3com (forget model)
User distribution switches: 9 Planet 10/100 Layer 2 Managed switches, and 2 Dell Powerconnect 5448
Server switches: 5 Procurve 2810-24Gs (1 in each server rack)
In addition, we have 50+ site to site VPNs using different 192.168.x.x subnets across 2 different VPN concentrators, several routers, and a pair of MPLS's.My first step to improve speed and reliance was to reconnect the user switches. The old distribution switches were daisy chained, and all users 120 users were on a single 1GB port on the core switch, and if switch 2 of 11 failed, I'd have 10 switches knocked out of the network. I've since connected them directly to the core switch, and the users have noticed the improvement.
I'll try to get a diagram, but it's basically a large hub and spoke. Each and every switch is connected directly to the single core switch. All of the internet sources are connected directly to the 3com and are on separate VLANs which are then connected to the core via a trunk, which then handles the routing. Currently, I'm using less than half of the ports on the current core switch, so I should still have enough ports on the 24G to at least maintain the critical systems. Each server switch is trunked to the core, as is the internet switch, but the user network is not (but probably should be). Instead they are connected via simple untagged uplinks.
I absolutely cannot afford new equipment right now, so whatever I do will require reusing existing equipment. I'd very much like to increase the bandwidth from the server switches to the core if at all possible. Is there an easy way to configure and Active-Active setup that would improve bandwidth? Or would It be active-passive and require a 2 port LAG on the 48 port (for speed), and a 3rd port for the 24 port (for redundancy).
NOTE: With any luck, we'll be dropping our analog phone system and replacing it with VOIP sometime within the next year. So I should be getting some extra budget to replace the distribution switches with POE. Until then, I'll have to live with my crappy Planets.
I have the following: 1 5520 ASA connected to the internet, 2 core switches, and several access switches.Aside from implementing RSTP, VRRP, hard code access and trunk ports, is there any other recommendation you would like to add.
View 7 Replies View Relatedi have new project in hospital with the bellow product :
20 X WS-C2960-24TC-S
2 X WS-C3750X-48T-S
2 X WS-C2960S-24TS-S
i need to configure this switch in order to work first the 2 core switch for redundancy then each catalyst switch 2960 connected to the core with 2 uplink each uplink for each core switch that way i have rendundancy in the connection then i need one vlan ?i need to configure this switch to work perfectly with each other in best redundancy mode?
I got connected ASA ----- ROUTER 2811) to metroethernet switch from my ISP , with a 4MB of bandwidth but the internet connections to all my LAN has been frozen and we lost connection to the internet, to restart the internet service I need to boot the ROUTER 2811 - and ISP switch to rollback the internet operation,My ISP support tell me if is possible to set up the traffic bandwidth in one or both borders devices, ( ASA 5510 or ROUTER 2811)
View 3 Replies View RelatedDoing a migration. During comparison of "show bgp nei x.x.x.x advertised-routes" between existing C7600 vs new ASR9K. Found that there were some r>i (RIB-Failure) route in C7600 doesn't flagged w/ r>i in ASR9K. Is it normal behaviour in ASR9K? How can I perserve r>i on ASR9K? Due to my IGP (e.g. AD etc) issue or ASR9K IOS-XR hidden config / default config issue?
View 5 Replies View RelatedI have an 1811 as a border router. Initially we had one block from our ISP. We just got a second block of IP's and I'm not sure how to make this work.
Block #1 - Working
209.91.**.129-142 /28
Block #2 - Not Working
209.91.**.146-158 /28
The problem I'm having is block #1's gateway is 209.91.**.129 and block #2's is 209.91.**.145
How do I make it so I can use both blocks in my NAT entries?
i have an issue to connect a trunk between cisco switch and extreme switch i have many vlans that i want to cross via a link between cisco 3750 switch and a Extreme Alpine 3800 switch
View 12 Replies View RelatedI have two 3750-X configured to be a stack and I am planning to re-rack these somewhere else. What I would like to know is what are the effects of having the master switch itself lose power? Does it immediately just make the member take over master (there should be no election since there are only 2 switches??) and there would be no loss of connectivity?
View 1 Replies View RelatedThis would probably sound like a stupid question but it took at least 2 hours of my time so far. I have a 3750 switch where a router and a server is connected. From the switch I can ping the router and server with no issue (directely connected). But from the server I am not able to ping the router. The router and the server are in the same subnet. The router is configured as the default router for the server. I am not able to ping the server from the router either. Here's the output of the ip route from the router. The server IP address is 10.1.200.21 and the router IP address is 10.10.200.1
10.0.0.0/8 is variably subnetted, 8 subnets, 3 masks
C 10.1.30.0/24 is directly connected, FastEthernet0/0.30
C 10.1.20.0/24 is directly connected, FastEthernet0/0.20
[Code].....
I have a bit of a mystery on my hands. I had a whole campus of Cisco 3750's cache a new default gateway. Example
Cisco3750#sh ip redirects Default gateway is 10.10.10.1
Host Gateway Last Use Total Uses Interface172.16.0.5 10.10.101.179 0:00 185749 Vlan1172.16.0.76 10.10.101.179 0:01 47254 Vlan1192.168.0.154 10.10.101.179 0:00 183090 Vlan1
My question is what generates a IP Redirect packet or how does the switch know what to change the gateway to? As in my case the changed gateway was a dead IP address. So I am at lose how this happened. I this case the Host IP's are network management servers conducting polling.
I need to move the client machines off of the 3750 (and their DHCP dependency on it) to the SGE2010 and absolutely route their internet traffic out through the outside interface on the 5505. They must also be able to communicate back into the internal environment in order to communicate with the production servers.
The clients currently use .254 addressing through a dumb dell switch to the 3750 but I am trying to migrate them over slowly to the .253. I know that the 2010 will not do DHCP, so I am putting a DHCP server on that switch right now. The 5505 won't let me add an additional nameif statement onto one of the other eth0/x interfaces and I'm not sure if that has anything to do with it's capabilities to act as a DHCP server (it's not an option in the ASDM) or it's ability to serve as the internet gateway for the 2010 clients. (Side notes: The 5505 has a base license and is currently also connecting 1 site to site VPN. As is the 5520, so all of it's interfaces are used as well).
I statically assigned a moved client with a .253 address and plugged it into the 2010. I have tried giving the 2010 both a .4 address and a .253 address but neither will allow me to ping any of the addresses on the 5505. The 2010 shows automatic routes to the two subnets and I set it's default route to 253.1. The link between the 2010 and the 3750 works - clients receive a .254 address from the 3750 and can get out to the internet via the 5505 and reach the production servers as well.
Why won't the 2010 see the 5505 as a gateway and allow clients to get to the internet and also traverse the 3750 when they need access to the production network?
The reason why I dont' just connect the two swtiches and call it a day is because I also need the production servers to ALWAYS go out/receive web requests via the 5520 outbound/outside interface. I'm having such a hard time wrapping my head around why i can't get my clients moved over to the new switch, I haven't even grasped how I'm going to do that yet.
We have a 6509 series of core switches and 3750 series of L2 switches, There is no default gateway or any static routes to any IP.VLAN 1 is made admin down and another vlan is used for all communication here in this environment
Attached is configuration for reference But still I am able to take telnet or SSH. I want to know how telnet or SSH or tacacs authentication happens without any static or default route.
i am facing a problem when the client vlan is commmunicating with the default gateway on the core 3750-x.
ios in 3750-x core is 3750e-universalk9-mz.150-2.SE.bin. But, client to client communication is happening without any dealy and icmp is less than 1 ms always.
When try to ping default gateway of client vlan, it is getting delayed (variable icmp delays). Is this an ios bug?
I'm really not clear about default-gateway on switch command, not the function but how its works.i have 1 multilayer switch (MLS 1) that have 2 vlan within it, vlan 2 and 100. on vlan 2 i assign ip address of 192.168.1.1 and on vlan 100 is 172.16.1.254. both vlans are up. then under that multilayer switch i added 2 more MLS (MLS 2 and MLS 3), and the links of MLS 2 and 3 to MLS 1 are trunking. and both MLS 2 and 3 have a same vlan with MLS 1. that i assign an ip address on vlan 2 in MLS 2 192.168.1.2 and i set default gateway 192.168.1.1, and i do the same to MLS 3 but the ip address of vlan 2 is 192.168.1.3i already setup the routing protocol on MLS 1 so that vlan 2 could contact vlan 100. but the fact it doesnt work at all, both MLS 2 and 3 cannot contact vlan 100 eventhough that are already have default-gateway setup, is there anything wrong with the configuration ??
View 3 Replies View RelatedOn my Gateway laptop there was a switch on the left side. It turned the internet access on or off. The switch broke off, and now I cannot access my wireless internet, I have to be corded.Can I turn off the switch within the computer so I can access my wi-fi?
View 1 Replies View RelatedI recently purchases new E3000. I setup the E3000 with static IP from border router rather DCHP which seemed to default to the same IP address and DNS. The laptops tied to the E3000 have their own IP's that are different from the IP of the border router. E3000 is configured with no firewall an minimal protection, for now. The reason for minimal protection was to get the handshaking to work between the two routers. The border router is a Verizon product. The old router that I was using is a Netgear that did handshake with the border router. I have the latest firmware for the E3000 namely Firmware version: 1.0.04 build 6. Router will not handshake either with wired or wireless connections. Laptop used to connect to the E3000 is running Windows 7 Ultimate. In fact all laptops here are using the same OS and connect using wireless. I tried the included software package from the website, which housed a diagnostic that apparently couldn't fix the problem as well. I don't have clue as to the reason for E3000 not to handshake with the border router.
View 3 Replies View Related