We are about to move our IT rack to a data centre and will be adding a new Layer 3 (Catalyst 3560) switch beyond our ASA 5510 which will be providing our existing WAN plus another SVI which will be carrying our HSRP range.
I have never configured a switch to use two SVI's before and can't seem to find the relevant docs online.
Seeing very strange behaviour my 2811 Router is sitting behind 3650 switch, when the link between switch and router is trunk the router start rebooting itself, to test i changed to access mode then I can see ip address of router on cdp neig de or else not seeing ip address of router.
View 3 Replies View RelatedI want to create a network with the following switch SF 300 - 08.I am not use to GUI.I am having problems setting the settings.Currently, i have assigned each port with a vlan 1 to 8 for ports 1 to 8.How do i do an inter vlan with the GUI? Also, i want to restrict port 7 and 8 to certain ports only. Example:Port 7 and 8 can read port 5 and 6 but not others?
View 9 Replies View Relatedcan we create VRF on Cisco 3550 EMI switch so that we can create mutiple virtual switch on physical switch.
View 4 Replies View RelatedI need to create a DMZ Vlan. Core switch is a 6509. FW is an ASA5520. Need to create a VLAN for DMZ purposes for outside facing servers. NAT is used on ASA.
View 7 Replies View RelatedI have a brand new SG500-28P sitting on my desk.
The swtich is configured and going to operate in L3 mode. All ports are still assigned to the default VLAN ID 1. I have created several new VLAN's. Once I configure and aplly an IP Interface to a certain VLAN the swtich becomes inaccessable right away. I am pretty sure I am not pulling my own VLAN under my connection. Every port is inaccessable. I have to pull the power plug and restart the swtich with its saved configuration. Even when I add another IP interface to the default VLAN 1, same issue. I have tried lot's of things, but can't get it to work properly. I have just upgraded to the latest firmware.
I have configured dozens of SG300 swtiches which is very easy. This one does not work with me.
I used two sf-300 switch and create 4 vlans and intervlan routing is working fine.
Port 1 - 10 -------------> Vlan 1
Port 2 -20----------------> Vlan 2
Port 3 - 30------------------> Vlan 3
Port 4 - 40--------------------> Vlan 4
giga1 -----------------> connected to router (This router used for intervlan routing).
SF-300 Port 1 is connected to Internet Modem. This modem worked as dhcp server also for vlan 1, my problem is that when vlan 1 is not communicate to vlan2,3,4 and 2,3,4 are not communicating.
How i can communicate vlan 1 to 2,3,4 vlan.
how i can connect the modem in switch? Access port or Trunk port ( Presently available in vlan 1 Access port)Any route i need to make? sf-300 or modem or router?
This is regarding VLAN creation on C3750E switch.I want to create new Vlan 94 on this switch and also I want to allowed same interfaces like Vlan 95 & Vlan 96. [code]
View 7 Replies View RelatedI was wondering if I can stack WS-C3750E-48TD with WS-C3750G-12S together to created a single logical switch.
View 3 Replies View RelatedI configured multidomain on a Cisco 3650 port (12.2(53)SE1), and connected a 7941 Phone and laptop behind it. The phone gets successfully authenticated but the PC does not get fully connected. The PC adapter´s icon shows a "authentication error" message. The same PC, connected to another port (same commands except "authentication host-mode multi-domain") works perfect, including new VLAN and ACL assigned from ACS.
This is the configuration on the switch port where the PC chained to the phone fails:
interface FastEthernet0/6 switchport access vlan 701 switchport mode access switchport voice vlan 123 authentication event fail action next-method authentication event server dead action authorize vlan 704 authentication event no-response action authorize vlan 701 authentication host-mode multi-domain authentication open authentication port-control auto authentication periodic dot1x pae authenticator dot1x timeout tx-period 60 spanning-tree portfast
This is the configuration on the switch port where the PC without a phone works OK (exactly the same config, except for multidomain):
interface FastEthernet0/7 switchport access vlan 701 switchport mode access switchport voice vlan 123 authentication event fail action next-method authentication event server dead action authorize vlan 704 authentication event no-response action authorize vlan 701 authentication open authentication port-control auto authentication periodic dot1x pae authenticator dot1x timeout tx-period 60 spanning-tree portfast When the PC fails to get connected, I see the following messages on the switch:
Sep 17 18:36:18: %DOT1X-5-SUCCESS: Authentication successful for client (0023.aeb8.ce44) on Interface Fa0/6 AuditSessionID 0A01460A000000310080FDFCSep 17 18:36:18: %AUTHMGR-7-RESULT: Authentication
[Code].....
I have created a PBR in 3650 switch to route traffic from a specific IP address to a specific next hop or IP address(Router)
ROM: Bootstrap program is C3560 boot loader
BOOTLDR: C3560 Boot Loader (C3560-HBOOT-M) Version 12.2(44)SE5, RELEASE SOFTWARE (fc1)
SW1 uptime is 6 weeks, 2 days, 16 minutes
System returned to ROM by power-on
[Code]....
We have a 3750 and a 3560 defined as a layer 2 switches. One gig port on each switch is trunked to layer 3 switches, which containall the VLAN definitions etc. The other gig port on the 3650 and 3750 switches are trunked together to provide an alternative path in the event of a failure.
We have added a new device to the 3750 and given it a VLAN 9, and the VLAN added to allowable VLANS on both trunk ports between the layer 3 and layer 2 devices ie:
switch port trunk allowed vlan 9,10,20,30,40,50,60,90,200,202,206,211,212,700.
From either of the 3750 or the 3560 we can ping any device on any VLAN on any switch in this group with exception ofVLAN 9. We can however ping the ip address of VLAN 9 on the layer three switches.
I have a small network using a 24 port 3750 switch. I need to add five computers in another room and only have one Cat 6 cable running there and no room left on the 3750. I got a 3650 to put in the new room with the new computers. The problem is, whenever I plug the new switch into the 3750, it shuts down the port and gives me an err-disable. I can do a shut/no shut and re-enable the port. I searched the web and read about trunking and clusters. I'm not sure which, if either, is appropriate. I see various documentation that shows you can put one switch behind the other. But nothing tells me the configuration which will allow it.
View 9 Replies View RelatedConfiguring a network with Rapid Spanning Tree Protocol. There's a combination of Cisco 3650s, 2950 and 2960 switches. It is a flat Layer 2 network with a single VLAN. CLI configuration?
View 3 Replies View RelatedDoes 3650-X IP Base support Static Load Balancing or i should upgrade to ip service SW ?
View 4 Replies View RelatedI am doing 802.1X for a user on Cisco 3650 and wanted the Radius Server to return an attribute to set the Duplex setting of the port. with the correct Radius Return Attribute.
View 4 Replies View RelatedI have set up a scenario for a small business and have some questions about how to manage the access between the VLANs. Is there is a better / another way to do it. See the attached picture for the topology / info.
My question is:
My switches is set up with x numbers of VLANs and a routed port (no switch port) to the ASA for internet connectivity. How is the best (or only??) way to manage the access between the VLANs? Is it ACL's on the switch?
And by "managing access" I mean VLAN 50 (public WiFi) only have access to the internet, only management servers have access to management VLAN, Client VLAN only have RDP access to server VLAN and so on. Is there any way to do this in the ASA (or add another (gigabit) router to the topology)) or it the only way to have lots of ACL's on the switch itself? I have thought about "router on a stick", but then I imagine there will be a bottleneck between the switch and the ASA?
(Equipment is 2 x 3650G, ASA5505, AP1252 - see attached file).
I have a question about speed negotiation process between interfaces. I have 3650X Sw and 2960S-48port. All ports of two are GigabitEthernet, however the link between them is only 100Mb/s, Full duplex. I try to set the speed 1000 Mb/s manually in the interface then the interface never up. Its status is down/down. I must set back to speed auto. I show interface Gigabit0/24 in Sw 3650-X and figure out that there are many output drop (over 600000). I clear counter then after two days the output drop is over 70000. This link is trunk link between two switches, all ports of access SW are Gigabit and connect to PC. First, I thinks the 3650X is throttled somewhere in output direction of trunk link. But there is another trunk link (Gi0/23) to another 2960S-48port and no output drop number in this interface. This Giga 0/23 speed is 1000 Mb/s (auto speed, auto duplex)
Does any outside things impact the speed negotiation process between 2 interfaces? And output drop number may caused by abnormal speed between two Gigabit interface?
|_voip PBX___|-----|__3650___|------fiber-------------|__3650_____|------|_voipphone__| I have a case where voipphone is registered on the voippbx but peaple on both end can't hear each other . No ACL on both 3650 , no firewalls between them , distance is about 2 miles . I tried to make telnet x.x.x.x 1720 or 1719 or 1721 (h323 ports) to opposite switch -connection refused . How can test if ports are open on the 3650 ? Is it coorect If I create allowing acl and apply it on both 3650 on the interfaces connected one switch to voippbx "IN" , second switch on the interf connected to voipphone "IN" ?
View 3 Replies View RelatedHow does the 3550 with enhanced image compare to the 3650 with enhanced image in terms of routing functionality?
View 5 Replies View RelatedI have a question regarding fabric storage and cisco catalyst switch 3650.My plan is connecta a esxi server to a nexus switch and then to a san storage. I want add a new switch to have a redundant link between esxi and the storage.Can I use a cisco catalyst 3650 with a fiber conecction to connect the HBA esxi server card to 3650 sw and the SAN storage to the 3650 sw ?
View 2 Replies View Relatedtrying to perform a RME InventoryCollection job with cwcli inventory I wasn't able to perform this task.
View 2 Replies View RelatedI have problem with device cisco srp 521 , my problem is haw to create two VLAN-s first will be to WAN link, second for Management.
View 2 Replies View RelatedI need to create second VPN in same ASA5505, it has already a VPN to one of our clients. So it alredy have a transformset,cryptomap,policy.Now i need to create new one. i like to create a seperate transformset and crypto map for this 2nd VPN with a new name to identfy very easily.But i have doubt like may it will affect the current VPN? because it has another VPN with another tranformset and cryptomap.......
1) will it affect the current VPN?
2) do i need to create a seperate tranformset and cryptomap? or with same tranformset and cryptomap with different number.....if it possible to create multiple cryptomap then i would like that to create.....
I have an ASA5510 with VPN L2L two operand normally. I need to create another VPN L2L. When you add the 3rd VPN always drop one of those that were operating. What can be?
View 2 Replies View RelatedI need to create a LAG consisting of 4 ports on my SG 300-20.
When I go to create the ports via Port Management - Link Aggregation - LAG Management - LAG1 - Edit and move ports 5,6,13,14 over as LAG Members - Click apply I get Port gi5 belongs to a VLAN. If I try to add them individually I get the same error, i.e. port gi6 belongs to a VLAN, port gi13 belongs to a VLAN, etc..
how to get these ports out of a VLAN?
I'm baffled by a lot of new features of LMS4.2 and seem lost where to start looking.Our client needs to periodically make changes to switches to change their port settings.They have specific descriptions with a certain string. Let's say the description say "Cisco phone".The task is to create either template or ad-hoc Netconfig job that will send changes only to those switchports.
View 2 Replies View RelatedI have a weird problem. I can't create a vpn in windows xp. I click on create a new connection, the connection wizard opens up, I click "connect to the network at my workplace", and this happens mm31z.jpg at Free Image Hosting.I can't select VPN connection. I have no idea what is causing this, maybe a service is not running, I don't know. I tried uninstalling/ reinstalling my network and it did not work.
View 5 Replies View Relatedhow to create ip sec tunnel using these parameters. customer ip where tunnel has to be connected 1.1.1.1
ISAKMP Parameters: (Phase I)
Encryption: AES-256 or 3DES
Authentication Mode: Pre-shared key
[Code]......
I am having a LAN with 30 switches and . Is it possible to create seperate dashlet/dash board to moniter only the uplink trunk ports of Lan Excluding acces ports with LMS 4.2?
View 1 Replies View RelatedI want to create a VPN between two PC's, (the server "Data" and "Remote Desktop" check the topology below), the Router Clabeck (cisco 2811 ) is connected to the internet through int f0/0 using a PPPoE connection and connects all the LAN PC's by PAT to the internet (you can see all the configurations in the Show Run below), the "Remote Desktop" is any PC with internet connection.
F0/1 F0/0
DATA--------------------SW-------------------ROUTER(Cisco 2811)---------------------INTERNET---------------REMOTE DESKTOP
192.168.1.51 192.168.1.254 201.122.53.177 192.168.1.1
Current configuration : 2116 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
[code]....
im trying to create a VPN between a Cisco ASA5510 and an ASR1002 when my Loopback interface is The Source IP . [code]
View 1 Replies View RelatedWe currently run dual ASA 5510's in A/S config on our main campus. We would like to create a VPN tunnel to a branch campus. Trying to decide between a 5505/5510/5512x, We would like to extend many of the capabilities of our network to the branch campus which will be 20-50 users on a 50mb/10mb internet connection.
Domain login
System Center workstation management
Cisco WCS
Shoretel voip
(Cisco NAC?)
Several different VLANs for wireless guest, student traffic, staff traffic, voip traffic, etc. Which device would be best and should we get the security plus license with it?