Cisco WAN :: C6500 Routing One IP Away From Connected Sub-net
Jan 24, 2013
I have lets say a /24 directly connected via a vlan on a C6500 in the network.I'm trying to migrate some servers/devices away from it , however I need to move parts of it away bit by bit ( For example a /32 or a /30 that make up the /24 )Ive tried a direct ip route x.x.x.x 255.255.255.255 y.y.y.y and even a ip route x.x.x.x 255.255.255.255 y.y.y.y 1
Yet it still prefers the directly connected range ( as I pretty much expected. )
Is there any way I get it to prefer a static route over a directly connected?
I'm going to start the evaluation of implementing the virtualization of our campus LAN using MPLS.We'll get many inter-VLAN routing domains per VRF on the same LAN infrastructure.The LAN infrastructure is based on C6500 implementing VSS.Do you have experience with this kind of setup?Any known/faced issue that might prevent the setup of MPLS on VSS enabled C6500?
how is calculated heat dissipation of ethernet modules for c6500? For example, heat dissipation of WS-X6908-10G-2T - 2083.32 BTU/hour.. This heat dissipation of the empty module, without transceivers? Or including all installed transceivers?
My C6500 is having relatively high CPU (no spikes, but constantly)
I'm under the impression that cef is causing this problem because alot of packets are being processed or send to/from the CPU. [code]
I did a netdr and I can see that the majority of packets going to the CPU are packets for which I have an entry in the CEF table.What can be a reason why those packets don't get hardware switches?I'm running Version 12.2(33)SXH5 - Sup720-10G.
there is something I find strange on C6500 about QoS: C6500 derive an internal DSCP value for it's internal use, but when configuring the qos mapping on output interfaces, only a cos value (I guess, an internal cos value) can be used. Is it a misunderstanding from me, or is it really illogic?
I want to see net flow data.I have configured this command on the c6500.but I can to see data only below...How can I configration ip cache flow on the C6500? what is the problem?
int gi4/31 ip add x.x.x.x ip route-cache flow c6500# show ip cache flow Displaying software-switched flow entries on the MSFC in Module 5:
I am trying to filter ARP answer arriving on a C6500 trunk port, for a specific vlan.Filtering conditions are:
- packet arrive from vlan ID x on the trunk (on only for this vlan ID) - source MAC address = xx:xx:xx:xx:xx:xx
Thae aim is that the C6500 with never enter into its CAM table this MAC address.I looked at several methos like service policy or vlan filter, but no solution for the moment.
We are wanting to use local database users to authenticate our SSH connections to our 6500 cores.
We have added the usernames and password into the 6500 using
username anameduser password astrongpassword or username anameduser secret astrongpassword
We where expecting the commands to be the same as other iOS devices example C3750 we would add.
Line vty 0 4 login local
And this would allow us to use the local user database to authenticate our ssh sessions.
The login local commands are not availbe on the 6500s and we have not found any documentation on how to impliment a local database for this purpose except in a CatOS 6500.
Im wondering if the Adaptive Security Services Module has some of the same function as a ASA 5500.Can we configure a IPSec VPN tunnel, SSL VPN tunnel or IPS on a C6500 with ASA-SM or do we need a specific line card for those tasks?
I've been running into an issue with Cisco CSM for a number of years, but always found a way around it. Im attempting to get to the bottom of this to find out once and for all, if this is infact a limitation of the device, or a config issue/work around is possible.
Here is my situation. My CSM's are configured in bridging mode. Traffic works great, traffic bridges across vlans correctly. Everything works and have many instances of smilar configurations running in production. Every once and a while, a client requests that a "real" server (ie LWCMW-021) cannot ping its VIP address (10.95.88.68). I am assuming this is related to the NAT Server, but not 100% sure. Clients have requested this functionality for some type of application based purpose, but Im unaware if CSM in bridging mode can provide this or not.
real LWCMW-021 address 10.95.88.59 inservice ! real LWCMW-022 [Code]....
It seem that ACE10 not support 12.2(33)SXJ1 IOS running on C6500. The box cannot detect the ACE module when power up. Currently the ACE10 running on system A2(30).
My challenge i have the ASA SM that compulsary to run on 12.2 (33) SXJ1 version. How to let these 2 module can running on the same C6500 box?
I have a wireless system and I am setting up the player but cannot connect because of the gateway ping problem.I called my server and was told that my average ping rate is 1292 and have no hope of getting connected.
I am monitoring 2 or more source interfaces which are running 1G traffic on each interface. Destination is 10G interface.There are 2 kinds of traffic running through the source interfaces: icmp and regular IP traffic. I am only interested in capturing icmp traffic. How can I achieve my goal?I don’t have any vlan traffic at all. Router is c6500.
I experinced critical problem for our customer service pertaing to communication fail for FT between FWSMs.
I can just find the log in FWSM as follows and can't find any physical log as interface down in C6500 at that moment.Now our FWSM OS version is 3.2(7) and jsut monitor-interface option is applied at outside interface in FWSM.
[code]...
I already opend the TAC case (SR 613646199) but I didn't get any correct cause for problem and they just recommend to change the FWSM through RMA.
On C6500 series I have to create a separate community to send a SNMP trafic for a couple of gig interfaces.The user that will collect these informations has a Monitoring server and is only interested in monitoring traffic on those link and maybe pps.
I understood to create a an ACL pointing to his IP of the server, and that create a community and associate this access list with that community. Those commands I have, but I need to send the user the MIBs or other relevant info on how to collect and forbid everything else but thos interfaces.Do I need to give the SNMP HOST command and associate with this community after that.
I have recently changed my ISP and as such now have a modem router from them, however I used to have a seperate modem connected to my own router that I have already set up to have port forwarding to my CCTV, DVR and networked storage (Built into exsistine router).Since connecting the new modem router to my exsisting router I have been unable to access the CCTV, DVR and Storage from outside my LAN.
I guess this is because the devices are on the client list of my old router and not on my modem router.Is there anyway I can access the old port forwards through the new modem router, it used to be a matter of just xxx.xxx.xxx.xxx:9966 for example but now this would try to access the modem router and not the router it's connected to.
I have not found any options to disable the router side of it to make it act as just a modem.The hardware is a Virgin Media Super Hub model connected to a D-Link Dir-685.For arguments sake the IP address of my D-Link is 192.168.0.1 and the Super hub is 192.168.100.
Can 2 Cisco 4507E switches with redundant SUP6-E modules be connected togther using the the standard 10GB CX4 modules and CX4 copper cables? Are there any special modules or cables required.
We have two catalyst 3560X 24T-S switches connected on two separate LANs (both the networks are redundant to each other). The last port of the switches are connected together?
I have client who has two distant offices with 3750 L3 as core (do all vlan routing for local office) and multiple L2 access switches with multiple VLAN’s connected to it. First 3750 is hub also connected to internet, second 3750 is spoke and acting as a router on stick. We have eigrp configured on both side ISP provided client 100Mbps link as a trunk with two vlan; vlan10 for voice and vlan20 for data. We assigned two small subnets to these vlans 10.15.17.0/29 and 10.15.17.9/29. Hub addresses are 10.15.17.1 and 10.15.17.9 respectively. How to force voice over VLAN10 and data via vlan20, but still do some load balancing? How to setup default route on second (router on stick) switch?
Two ports in C3560E are grouped together in "active" mode.These ports are connected to a EMC server. When I type as below, the channel is in SD mode. The Server admin told me that this is normal behavior since one port is active and the other is in standby mode of which are teamed together.
Switch#show etherchannel summ ... Number of channel-groups in use: 1Number of aggregators: 1 Group Port-channel Protocol Ports------+-------------+-----------+-----------------------------------------------1 Po5(SD) LACP Gi0/33(I) Gi0/34(I)
On one of our routers (running bgp and ospf), we are redistributing ospf to bgp. This router has a loopback interface which is advertised in ospf.
Router#sh ip route 10.22.0.24 Routing entry for 10.22.0.24/32 Known via "connected", distance 0, metric 0 (connected, via interface) Redistributing via bgp 64999 Routing Descriptor Blocks: * directly connected, via Loopback11 Route metric is 0, traffic share count is 1
I am confused about "Redistributing via bgp 64999" part.....Under router bgp, we are redist only ospf and static routes, but using route-maps like this:
Obviously it won't match redistribute static because it is not static, but connected interface...And 10.22.0.24 does not appear in match statement in route-map OSPF2BGP, how is it still shown as "Redistributing via bgp 64999"?
client originally connects to the 4500E, moves to the 2960s and then cannot connect back to the 4500E.My design is a 4500E (configured for routing) and a 2960s. The 2960s is trunked to the 4500E, no vlan pruning.
Tried;
- shut/no shut port on the 4500E doesn't work
- no result for sh ip arp | i (clients mac) or sh mac address | i (clients mac) on the 4500E
The only way I can get the user back online is removing the 2960s, not a desirable solution as other clients are on the 2960s.
I recently removed a catalyst 2950 switch code version: c2950-i6q4l2-mz.121-13.EA1 ?I had an ASA 5505 connected as a switchport access to the 2950 on port 44. We will call the VLAN that the ASA sits on: VLAN 404. The 2950 had a trunk to our catalyst 6509 distribution switch carrying that VLAN 404. We also have a another VLAN for computers that sits on: VLAN 129, this is a standard DHCP vlan and it accounted for the rest of the switchports. The 2950 also has this trunked to our 6509 distribution switch.
Everything was working fine with that setup.After replacing the 2950 with a 3560 we started running into problems. The 3560 was configured the same exact way as the 2950. What was happening is that computers that sat on VLAN 129 started experiencing packet loss and were unable to work. It's as though the ASA was taking over the switch.
Is there a protocol that is enabled by defult on the 3560 that would do this?
Just yesterday my laptop could connect to the Internet. Now it would just connect to the modem (via wi-fi), and there would be no Internet connection. All other computers in my house using wi-fi work fine.Here are my results when I type in the ipconfig /all in the command prompt.
Configuration IP de Windows
Nom de l'h�te . . . . . . . . . . : Loc-PC Suffixe DNS principal . . . . . . : Type de noeud. . . . . . . . . . : Diffusion Routage IP activ� . . . . . . . . : Non
My wireless connection shoes connected but no internet access. when i connect directly to the modem to computer internet is ok. i am using linksys wrt400n route
I need Know what connection is using on Cisco 2811 router.I have this interface in Cisco 2811, I need Know if this port is connected to Fiber or Copper. I think is copper with RJ45 but I see 100 base TX/FX so this make me doubt about it because TX its for copper link and FX for fiber. [code]
I just completed installation of a stacked pair of 3850s in my datacenter. While I was installing them, I noticed that the lights on ports 1-8 on one of the switches were on solid even though there were no cables connected to that switch. I don't see anything in the logs or anywhere else in the CLI that indicate a problem, however the lights remain on. This only happens on switch 1, not switch 2. Once I plugged the cable into port 1, it flashes normally with activity, but 2-8 remain on solid even though nothing is connected to them.
Before I put the switches in place, I had configured them at my desk with the console connection, and those lights were not lit up.
The indicators on the front of both switches are set in STAT mode. I thought initially I had hit the button and flipped it to a different mode, but that is not the case.
I have a CAT 3560 connected to a ISR 2911 The 3560 has 2 subnets ( 192.168.1.0 /24 and 10.10.10.0 /24) The 2911 has interface GigabitEthernet0/1 on the 192.168.1.0 /24 and another GigabitEthernet0/0 on a WAN connection 172.16.7.246 I need to NAT both the 192.168.1.0 /24 and the 10.10.10.0 /24 to the single address 172.16.7.246 I have to use route-maps . I have IPSec VPN's and ZBF on the 2911 My problem is the NAT does not work for the 10.10.10.0 /24 network!Why?is my only option to use trunking between the 3560 and 2911 and subinterfaces on the 2911? I want to avoid sub-interfacing.
============================================================= On the Cat 3560=====================!vlan 40name the 192.168.1.0 /24 subnet!vlan 60name the 10.10.10.0 /24 subnet!interface FastEthernet0/7description Connection to Router Gig0/1switchport access vlan 40!interface FastEthernet0/16description Connection pc host on the 10.10.10.0 /24 subnetswitchport access vlan 60!interface Vlan1no ip address!interface Vlan40ip address 192.168.1.4 255.255.255.0!interface Vlan60ip address 10.10.10.10 255.255.255.0!ip classlessip route 0.0.0.0 0.0.0.0 192.168.1.1 =========================
The host on the 10.10.10.0 /24 network has the 10.10.10.10 address as it's default gateway The host can not access the WAN thru NAT....
