I have 2 3550's connected across a wireless link. [code] However, from Switch A, I cannot reach 10.1.3.9Can this 3550 not route traffic between 2 routed ports?
I live in a condo building that uses 3 Cisco Catalyst 3550 switches connected to a Comcast router with 100 Mbps download. Currently we regulate bandwidth by providing each user with 3 Mbps download. Even if only two people are active they still only get 3 Mbps download. I would like to set it up so if two people are using they each get 50 Mbps; a sort of 'dynamic qos. Is this possible with these switches? Would we have to purchase a Cisco router in order to provide this feature?
What are the pros and cons of configuring a Switch Virtual Interface (SVI) versus a routed physical port between layer 3 switches?For example, if I have two 4506s and have a need to run HSRP and route between them which feature is better and why?
On a router I can use IP Accounting or Netflow to see what kind of traffic is moving over an interface. Are there any tools on a 3750 switch with a routed interface which would tell you who is hogging the bandwidth on that interface?
One of my Catalyst 3750 switch have many out drops, I execute "sh mls qos int g2/0/3 statist" command, there are many output drops in queue3 threshold3. [code]
I have a collapsed core design with routed ports between all components. Access layer switches, data center switches, core/aggregation. All routed (no spanning-tree at all).Now...I have to add an IBM BladeCenter with a BNT layer 3 switch to my topology. However, those nasties don't seem to support routed ports.How can I have a routed port on my cisco switch and a standard access port on the BNT and still establish an adjacency with an SVI? I am running OSPF, but I am labbing this in my home lab with 2 x 3550s and EIGRP.
On SW2: *Mar 1 00:57:00.711: EIGRP: Received HELLO on Vlan100 nbr 10.1.1.1 *Mar 1 00:57:00.711: AS 999, Flags 0x0, Seq 0/0 interfaceQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/1 *Mar 1 00:57:02.303: EIGRP: Sending UPDATE on Vlan100 nbr 10.1.1.1, retry 9, RTO 5000 tid 0 *Mar 1 00:57:02.303: AS 999, Flags 0x1, Seq 17/0 interfaceQ 0/0 iidbQ un/rely 0/0 peerQ un/rely 0/1
I have my main branch router (3825) and two remote routers (2821's). They are connected through leased lines that do not touch the internet. For various security reasons I have to ensure that the traffic from the remote's are encrypted in a VPN tunnel even though it is still part of a private network.I have went ahead and created the tunnels and I can verify that they are up. I have applied the cryptomap to the correct interfaces, etc.So the question is - How do I ensure that traffic is not just being router out of the interface from the remote sites back to the branch router with or without using the VPN tunnel? I've taken down the tunnels and of course, the traffic is still being passed back and fourth.
I have a subnet (vlan 104) working great across a WAN. At site 1, Router A (3745) has the L2TPv3 tunnel configured while Router B (7204) has a routed interface on vlan 104.
The only thing router A is doing is the tunnel, so I'd like put the tunnel on Router B and eliminate Router A.
The trouble is, when I move the configs to Router B, the tunnel comes up, but the far side does not receive traffic over the tunnel.
Router B shows sending and receiving packets (per the 'sh l2tun session all' command). The far end router shows sending packets but receiving 0.
Is it a problem to have both the vlan 104's L2TPv3 xconnect interface and the vlan 104's routed inteface on the SAME router?
confirm whether the Catalyst 3550 with IOS Rel. 12.2(44)SE is compliant with POE IEEE 802.3af? I see some conflicting informaiton on Cisco's web site. Before Release 12.1(22)EA2, Catalyst 3550 PoE-capable switches (without intelligent power management support) caused high-power powered devices that supported intelligent power management to operate in low-power mode. Devices in low-power mode are not fully functional.
IEEE 802.3af—The major features of this standard are powered-device discovery, power administration, disconnect detection, and optional powered-device power classification. For more information, see the standard.
We are looking for a solution that to use Sub-interface on a routed port on 6509, instead of using a SVI on it.Are there any different when using Sub-interface?
I have two 1252s on ports 1 and 2 off a Catalyst 3550. No other device on the switch except the fiber uplink.
Initially 1252 #2 (on port 2) resets for no reason at no specific time. We did not have a problem with 1252 #1.
The show ver on #2 does indicate that equipment resets due to power. I figured the 3550 is having problems powering two 1252s so had this AP on PWRINJ4 (validated its not drawing power via show power inline).
Today, #2 does not reset. However, now #1, which is the only device using inline power is now resetting. Same thing, reset due to power. Same weird behavior, at no particular time.
I've also have "no cdp enable" out off each port as i understand CDP sometime cause device to not boot up (15w versus 15.4w issue).
I can assign IP addresses to any of the 24 FastEthernet ports (it is a 24 port switch!). However, I have fitted the WS-G5482 Gigabit adaptor to give me Gig ethernet capability. It does not seem to be possible to assign an IP address to the adaptor.I realise that as it is an 'add on module' (well, a plug in module) this is different to the 24 port in the 'body' of the switch. I also have read that these Gig adaptors will only connect to other Gig adaptors (I found that out by trial and error, and then confirmed it by searching here).it's not possible to assign an IP addy to one of the plug in modules; it is not a big deal but I am planning to assign some IP addresses for remote management etc. I was going to use the Gig port for this but it may not be possible.
AH PS I am using the switch and connecting to the internet via the Gig adaptor, then out from one of the fastethernet ports to another little switch and then on to a router and out to the internet, so the switch and the plug in module are working fine.
I am attempting to create a mass upgrade server for some of our more standardized equipment since our vender cannot upgrade them pre-shipping for us, we've got to do them on our own. This means using a terribly organized wizard written in what appears to be Java...
I have an aversion to Windows and felt that I could accomplish the same thing using expect scripts and a Gentoo Linux server; now all I need is to set my Cisco 3550 (c3550-ipservicesk9-mz.122-44.SE6.bin) to have each port on it's own VLAN, except for fa0/1 which will be a trunk port to communicate with all ports as well as the server.
correlates the older IOS format naming compared with the newer? I have an older catalyst 3550 that might need an IOS upgrade due to us starting to implement dot1x. The reason that I say this is that some of the commands in the dot1x config guide, such as aaa accounting dot1x, are not valid on this platform. The current IOS is c3550-i5q3l2-mz.121-8.EA1c but the newer format is the ipbase, ipservices, etc. format. There is a newer ios but how do I convert from one to the other? I think I need to research the IOS to see if the new commands are there as well as I want to make sure there are no gotchas from a hardware standpoint if I upgrade.
Cisco Internetwork Operating System Software IOS (tm) C3550 Software (C3550-I5Q3L2-M), Version 12.1(8)EA1c, RELEASE SOFTWARE (fc1)Copyright (c) 1986-2002 by cisco Systems, Inc.Compiled Fri 15-Feb-02 10:50 by antoninoImage text-base: 0x00003000, data-base: 0x006675E0 ROM: Bootstrap program is C3550 boot loader ACSTMElab-3550 uptime is 20 minutesSystem returned to ROM by power-onSystem image file is "flash:c3550-i5q3l2-mz.121-8.EA1c/c3550-i5q3l2-mz.121-8.EA1c.bin" cisco WS-C3550-24 (PowerPC) processor (revision C0) with 65526K/8192K bytes of memory.Processor board ID CHK0615V0BPLast reset from warm-resetBridging software.Running Layer2/3 Switching Image
I have a catalyst 3550 and will be using it to run my cisco 7940 and 7960 ip phones with POE. When I plug the phones into the switch they power up just fine but the phones will not dial out as they have little x's by the line. I have also tried going through the set up of the 3550 but get stuck in one place. When I go to the 10.0.0.0, the screen will not allow me to enter the telnet page or allow me to enter any information. In the manual it shows a pic of what the screen should look like when I go to 10.0.0.1, but I am getting an entirely different page.
What I need to do to get everything set up correctly?
I am testing on lab equipment (2 Catalyst 3550 and 1 Catalyst 3560) HSRP version 1 and 2.I successfully created a load balancing between the two Catalyst 3550 on a couple of vlans (11 and 12) on ver 1
now, just adding the command "standby xx version 2" my hosts on the 2 vlans are completely unable to ping the virtual IP def. gw on debugging i checked that msgs are exchangedthe two cat 3550 are seeing each other on HSRP (active / standby roles)the real ip addresses are pingable rebooted the swiches (just as a last resort try)deleted arp chache on hostsremoved the auth on hsrp all of this no effect.
i also tried to modify the priority on the cat 3560 (before he was on both vlans in standby) to make it the active one and with the same config it worked flawlessly.
My only idea is that there is a bug on CATs 3550 (IOS: c3550-ipservicesk9-mz.122-55.SE4.bin) [code]
Quick question here. Using 3750E series switches with multiple VLANS configured. These switches serve as our 'core'. I have SVIs configured for the different VLANs and add inbound ACLs in each of the SVIs to control traffic between VLANS. This switch also terminates a P2P Ethernet link which connects to our Colo facility. The port used for this is configured as an L3 port. I noticed today that I was able to send traffic across this L3 link that I thought should have been blocked by an ACL I had in place but it wasn't. So the traffic flowed from a port in say VLAN 20 across this L3 link (assigned with an IP address). Would this traffic flow not cause traffic to be checked against an ACL applied in the inbound direction on the SVI of VLAN 20 (int vlan 20)? Traffic does get checked when routing between SVIs. Why would it not get checked when routing between SVI and L3 interface?
I'm looking at implementing a cisco 3550 Layer 3 switch and would like to know if i can forward ports down to all of my different Subnet Servers/Pc's.
For example. See attached image.10.0.3.5 is a mail server. 4.2.2.2 is our public IP.
I would like to forward TCP port 25 down to our Mail servers IP. Any reason this will not work by using the cisco 3550? Currently we have a flat network (1 subnet) and port forwarding works fine.
I have a Catalyst 4006 switch in production and a spare switch of same model. I have to quickly copy the configuration from production switch to spare switch (both L2 and L3 configurations) How do I do that?
i have an OM1 MMF fiber run between two switches, the first being a 3750 and the second being a 3550.
The link currently exceeds the maximum distance for OM1 @ 1000Mb/s (220m) so i would like to downgrade the link to 100FX using the necessary SFP's/GBIC's to extend the maximum distance to 550m and run the link @ 100Mb/s.
I have the part code for the 100FX SFP to install in the 3750 (GLC-GE-100FX) but cant find a 100FX GBIC for the 3550, can I use a 1000SX GBIC (WS-G5484) for the 3550 at one end and the 100FX SFP at the other? Any success with this configuration over MMF?
I have a 3550 switch right now, and need to upgrade to a gigabit switch, so I'm looking at a 3560G-48. For some reason I purchased an EMI version of my 3550, but run the ipbase image...what I need to look for - is a 3560G-48-s good for what I need?
I'm using a Catlyst 3550 to supply power to a IP network surveliance camera. By default, the predecesor to POE, Cisco Inline Power allocates 15.4 W of power to a port ... What is the process for reducing this power output?
"For an IEEE device, the switch always allocates 15.4 W to the port. The switch does not display the IEEE class type in the show power inline privileged EXEC command output. Instead, it displays n/a."
While working at a client site today, I was troubleshooting some ICMP connectivity for a network we have created.I turned on 'debug ip icmp" on the 3550 switch int he middle, and was inundated with the following debug output:
Jan 25 11:01:14.641: ICMP: dst (172.16.1.7) port unreachable rcv from 172.16.1.5 Jan 25 11:01:14.641: ICMP: dst (172.16.1.7) port unreachable rcv from 172.16.1.5 Jan 25 11:01:14.641: ICMP: dst (172.16.1.7) port unreachable rcv from 172.16.1.5 Jan 25 11:01:14.641: ICMP: dst (172.16.1.7) port unreachable rcv from 172.16.1.5
[code]....
This output fires several times a second, and based on how often it is firing, I am curious if it may be a culprit with respect to the fact that the client has indicated that they have some slow internet.Should the next step be to look at the workstation at 172.16.1.5?
I'm doing some testing with ACS server on my windows box and I can't seem to get a barebone radius authentication to work with ACS internal users. I tested the same configuration with TACACS and it works fine, so there's something missing or misconfigured in my setup.
I have a cisco 3550 switch that I want users to login using their ACS username/password.
I have cisco switch 3550 IOS Version 12.1(19)EA1c.
I can configure route-map commands on that. but i can not apply that into any vlan interface. while i try to apply the following command ( ip policy route-map PBR) on VLAN int i get an error msg saying that the command is not recognized.