I have a SR520 router with the ADSL WAN built in. I am looking to ignore the ADSL port and utilise the 4 FA ports to route between two networks.Can I configure the ports on the switch part of the router to become Layer 3 and take there own Ip addresses? If so I can save myself the purchase of a new router.I have used loopbacks before but not sure that will work.
View 9 RepliesIs it mandatory to connect Cisco WLC 2504 to a Gigabit port ?? can we connect it to a fasternet port (100 mbps) ?
View 4 Replies View RelatedIs it possible to implement ACLs in layer3 switch??
View 4 Replies View RelatedI am replacing a 7204 router with a 4948 and am having trouble trying to replicate the config for the qnq Layer3 interface.A bit of background - I am a service provider where I have an interconnect with the carrier, who pass off WAN links to me as a standard VLAN Ids. Some of these VLANs however I can do QnQ.
This works fine - but I can get the second-dot1q 50 command working properly
I am trying to implement IP SLA. Can I implement it on layer2 switches?
View 5 Replies View RelatedI understood that service provider will use hardware Alcatel 6850 on the distribution/core and Zyxel 2108G on customer access level.query is that service provider says it's not VPLS which should work most probably through MPLS network of ISP.ISP noted that it would be direct 802.1q VLAN between two sites without any Layer3 on ISP side.
How to:
- understand what kind of connection this will be?
- is this connection is fine for customer?
- identify if this kind of connection will be fine for converge network (voice+data) ?
- what should I ask to ISP to clarify details?
Ive tried to configure NetFlow on layer 2 without success. I configured the recondmonitorexporter like the configuration guide said. but still i dont receive any netflow traffic. I checked the firewall on the VM and it looks fine.
i have done the command under the ethernet interface :" layer2-switch flow monitor TEST input" - for layer2 input.
I'm trying to get the following running.
I have 4 Subnets
VLAN 1 172.20.0.0/16 with the default GW 172.20.200.254
VLAN 10 192.168.10.0/24 with the default GW 192.168.10.2
VLAN 59 192.168.59.0/24 with the default GW 192.168.59.254
VLAN 130 192.168.130.0/24 with the default GW 192.168.130.254
[Code]....
With absolutly the same settings I did this with an HP E4200-12G L3 Switch (which is now doing the job) so there is no routing mistake in the other components.For me it looks like, the SG300 doesn't like to be NOT the default gateway.
I'm setting up two vlans and I would like all of vlan 2 to only have access to the WAN router on vlan1 at 192.168.30.1.
VLAN1 192.168.30.x
VLAN2 192.168.31.x
I've setup the VLANS and static routes and I'm able to access the WAN router at 192.168.30.1 from the 192.168.31.x network and everything is fine.
I'm getting an error setting up the IPv4 based ACL that is designed to allow the 192.168.31.x network access to only the 192.168.30.1 WAN router.
The first rule I setup is to permit source 192.168.31.0 / 0.0.0.255 dest 192.168.30.0/0.0.0.255 to allow all traffic to from the 192.168.31. net to access the 192.168.30.x net. Then I was going to deny the dest of 192.168.30.1-255 but I'm not sure of the wildcard to use for that.
I'm not clear on the wildcards but I'm also getting the following error when I setup the first ACE rule:
"MIB Index is out of range.Index must be bigger then 0 and Existing ifindex.."
I suspect the error is related to how I'm using the wildcards?
A Layer 2 switch with IP Address 192.168.1.4 (Vlan0), subnet 255.255.255.0 is physically connected to ADSL Router with IP address 192.168.1.1 (which is also the gateway address for the switch). The problem I have is that all the devices connected to the switch can intercommunicate but are unable to communicate with devices connected to the Router. I guess this may be something to do with how the Vlan is configured on ADSL router?
View 1 Replies View RelatedWe have a problem with the Layer2 view of the Topology java applet in Cisco Prime LMS 4.2.The Layer2 view shows all the ethernet interfaces links but not the ones in the serial interfaces.All devices have CDP and SNMP (read-only) enabled, and theirs neighbors can be seen with "show cdp neighbors" in both sides of those links.
View 4 Replies View RelatedI have two 3750 layer3 switches and I need to connect them via stack cable.so if I connect them with the stack they will be act as an one switch, but for the configuration if I create a VLANs on the master switch (applied all the configuration on the master one) this configuration will be transfered to the slave one or I have to repeat the configuration that I did on the master.
View 5 Replies View RelatedDuring high throughput times (nightly, when backup runs) we see packet drops on the network. We think it's the ACE module that drops. We use 2 ACE 20-MOD-K9 with base licenses in a FT configuration in Layer2 Mode.Now I found an interesting statistic on the ACE: [code] How to reset this counter?
View 4 Replies View RelatedI'm trying to add an outbound policy on Layer3 interface on a 6500. The will be used to prioritize voice traffic. The environment contains 2 sites with 2 6500's each with VSS and a metro Ethernet link between them. I seem to be having problems prioritizing the voice across this link.
View 1 Replies View RelatedWe have a cisco 7204 VXR and would like to know the module which has two fastethernet port. We tried a PA-2FEISL-TX but it did not work.
View 1 Replies View RelatedI am having the most difficult time trying to setup the Cisco 1841 with a new Fiber Optic ISP. I have no experience with Cisco equipment but have taught myself some basics. All my attempts have ended with failure. I definitely will be taking some cisco courses soon.
Our current setup
20mbs Fiber Optic ISP
- They are providing us a x.x.129.233/30 WAN IP and a x.x.131.225/27 Public IP Block Cisco 1841 Router (Which has no configuration at all, it was wiped by the ISP) 1x HP Procruve 2610 24 port Gigabit Switch
What we need is simple, we just need to distribute the Public IP block through to the LAN on the switch side. I would post a config if I had one already made, but the 1841 is a clean slate. I just wiped it again to start fresh.
We are about to install a new network consisting of Cat 4500s with Sup7E at the Access Layer, with Nexus 7000 at the Distribution and Core layers. We have 14 floors with at least three 4500s on each floor. Within the office block where the Access Layer and Distribution Layer reside we need to support secure borderless networking using 802.1x to place users from different parts of the business into segregated networks at layer 3.All switches will have the feature sets to support MPLS/ VRF / OSPF / EIGRP / BGP etc.We quickly dismissed the idea of using VRF-Lite due to the sheer number of Vlans we would need to managage and maintain, the point to point links alone just to get one additional VRF on each floor required far too many Vlans.As a result we are now considering deploying MPLS. The obvious benefits include scalability and manageability, the fact that all switch to switch links can now be routed, instead of having to using SVIs.
View 2 Replies View RelatedWe're seeing a strange issue with a Cisco 819 that we're testing out. We are able to ping out over the Cellular interface just fine, but as soon as we plug a device into one of the FastEthernet ports we immediately drop the cell connection. The Cell interface then continues to bounce until we unplug the device. We are intending to setup a VPN tunnel, but we've even stripped all that out for the sake of troubleshooting.
Current configuration : 2832 bytes
!
version 15.2
[Code].....
I would like to know if is possible to configure a secondary IP address in a 5505 interface ??
View 1 Replies View RelatedI am getting the new Cisco 2921/K9 router, which comes by default with 3 Integrated 10/100/1000 Ethernet ports. I have Comcast Cable as the ISP, so can I connect the ISP RJ45 Copper cable directly to one of the integrated ports or do I have to buy another WAN Interface Cards for the ISP.
View 3 Replies View RelatedWe have 2.5 Mbps connection from an ISP at our branch routers (1800 series)with single physical link terminated on FE0 but have two subinterfaces with separate subnets.
I have applied the following policy-map outbount under physical Interface FastEthernet 0. Show poliocymap output is as follows
Policy Map QoS-OUT
Class Email
priority 512 (kbps)
Class SQL
priority 512 (kbps)
Class File-Copy
police cir 1024000 bc 32000
conform-action transmit
exceed-action drop
Class CCTV
police cir 384000 bc 12000
conform-action transmit
exceed-action drop
But it seems that sometimes( not all the time ) the CCTV traffic seems to exceed the 384k and chokes the entire link(2.5 mbps).
I understand that the NM-1FE Fastethernet modules are not compatible with Cisco 2600 series routers, just the Ethernet 1-E module. With that being said, are there ANY modules supported by the 2600, 2621 or 2621XM series routers that have fastethernet port(s) outside of the pricey NM-16ESW module? I don't need a 16 port module!
View 3 Replies View RelatedI have this output from show interfaces command for the fastethernet interface on a 2811 router.
find the causes of the crc and the ignored input errors on the interface?
The interface configuration is:
interface FastEthernet0/0description VLANS_CHILE
no ip address
[Code]....
I am trying to install a AIR-BR1310G wireless link between two buildings. I configured the setup in a lab and had everything functioning. Shipped it to the client who is now trying to install it. The radio link is up, but we are having issues with the remote Ethernet connection.The root bridge is connected to a WS-C3560G-24TS (core) switch. The port is setup as a trunk with a native vlan of 2 (our management vlan). [code] if I do a "show power-injector" on the remote radio (no Ethernet link), I get: "Received zero AutoMIB packet from Power Injector, Check to see if CDP is disabled on Fast ethernet" repeating. No other entries. If I do the same command on a unit with a link (root bridge) I get information about "Power Injector Port 0 speed 100Mb/s duplex full link up enabled yes" with a bunch of stats. Similar for "Power Injector Port 1". Power Injector Ports 2-4 as "down" and 5-6 as "disabled". Other than the 3 different patch cables they tried (all straight through) or a crossed cable (try tomorrow when they buy one), is there any other reason the port won't go Up/Up?
View 3 Replies View RelatedI have a task of setting up bandwidth limit on the 2811 router Fastethernet interfaces.The scenario is:We have a 4MB Internet connection and would like to allocate bandwidth usage to users.
Fastethernet 0/0 needs to be set with 256KB output and 2048 input. This is going to be connected to a wireless router. Fastethernet 0/1 needs to be configured with 2048 output.I could also use SDM if that's easier than using CLI.
We have upgraded our gateway router from a Cisco Linksys RVL200 to a Cisco 861, this is a big jump from a GUI driven system to IOS CLi and i'm having issue finding my feet. I tried the Cisco CP system but it didn't work so I'm going to configure it with IOS commands. I wish to replicate the current configuration on the 200 with the following setup.
I have created a DHCP pool but i am unable to configure the FastEthernet ports to hand out address automatically, the pool is called USERS with range 192.168.1.30 -> 192.168.1.253.How do I work out the client-identifier for a DHCP client, I don't want to plug this into the network and manual reconnect all the PC's just to get the ID then make a static route.
why the WAN protocols like Frame-relay, HDLC and PPP are called Layer2 protocols?What is the address scheme they use?
View 5 Replies View Relatedi have upgraded a PIX 525 lately to a 5510 ASA, but i have faced a problem after this.One of the DMZ's are connected to a switch that is not connected to my VTP domain on a DMZ port.
with access-list to permit from host to host with all ports opened.my problem is that the outside client is able to initiate a windows VPN to a server that i have in the DMZ, BUT it disconnects after almost 10minutes. What might be the reason of the disconnection.Note, a cisco remote access VPN is also configured on the FW, and it doesnt disconnect.
I have upgraded the configuration of about 650 Cisco devices (catalyst switches, routers, ASA, VGxxx, etc.) so as to integrate a new AAA server (Cisco ACS 5.3). This AAA server is bound with an Active Directory Server (MS Windows Server 2008 R2) for user authentication (only for admin purpose not for network access).Before this upgrade, the AAA server was Cisco ACS 4.1 (not bound to the Active Directory Server). Cisco devices are managed with a Cisco LMS 4.01 server. I modified the Network Level Login Credentials of the full privileged user of LMS because any caracters of the password were not accepted by AD. Therefore, in order to maintain the telnet connection availibility beetween the LMS server and the network devices, I had also to upgrade the appropriate device credentials in DCR. Finally I got the following issue when performing the credential verification : telnet incorrect !
When performing direct telnet connection with TeraTerm, I can reach the device and the user authentication is well performed by the ACS server and the AD server. Log files on the ACS 5.3 server show the accepted connection, the initiator and the tarjet device.But when LMS sends a telnet connection on to the same device (through a credential verification job), the ACS 5.3 does not receive the authentication inquiry (nothing in the tacacs+ log file). When performing AAA authentication debugging on the switch, the bind message repeats many times with no following authorization message (as requested also in debug). [code]
I reversed to the initial configuration of the switch (with ACS 4.1 as AAA server, not bound to AD) and performed a test with the same LMS server (with reversed credential data). The credential verification job is successful and the debug mode of AAA shows a correct negotiation beetween the switch and its ACS server : [code]
Indeed the ACS 4.1 authentication log file lists the successfull connection of the LMS server to the switch.In the two cases I exported the device credentials to a csv file to check the availability of each.
So, how to explain why a telnet session initiated by a terminal, can connect in both cases (ACS 4.1 ans ACS 5.3) to the switch and a telnet session coming from a LMS job can only connect to the ACS 4.1 server? When the switch "sees" an incoming telnet session request from everywhere, it must send it to the AAA server specified for authentication. I do not anderstand why the request from LMS is not sent to ACS (no record in log file, even according authentication deny.
I have a brand new ACS version 5.2. Everything is working fine. I go to cisco website and download the following packages:5-2-0-26-8.tar.gpg
From there, I ssh into the ACS and performed the following: acs patch install 5-2-0-26-8.tar.gpg repos acs-52-patch That works without any issues. My ACS is now upgrade to 5.2.0-26-8 An hour later, when I tried to perform this: acs patch install ACS_5.3.0.40.tar.gz repository Upgrade_to_5.3.0. it is not working. I get this message: Failed to copy file 'ACS_5.3.0.40.tar.gz' from repository Upgrade_to_5.3.0 (Error -306).
I have a Cisco 881W router. It has historically run IOS 12.4 (20.T3) without issue. I recently upgraded the IOS to version 12.4 (24.T5). Once I made that upgrade, my ability to fully throttle my downstream bandwidth became seriously limited and variable going from a steady 6Mbps to an unreliable 2-3Mbps. No other changes were made to my environment. The degredation in performance was so bad that my AppleTV would no longer stream Netflix or YouTube.I downgraded back to the original IOS 12.4 (20.T3) and the downstream bandwidth and variability issues disappeared. As well, my ability to stream movies or videos with my AppleTV on Netflix or YouTube returned without issue.I wonder if upgrading to IOS 12.4.24.T5 enabled some new commands that I'm not catching or there is something else at play that I'm totally missing.
View 10 Replies View RelatedI upgraded our 3560-48-ps switch from c3560-advipservicesk9-mz.122-35.SE5.bin to c3560-ipservicesk9.mz.122-55.SE4bin and is having issues now.
Since I upgraded to the new IOS our older machines on the network can no longer connect to the domain and is not getting an IP address sh ip dhcp binding and sh ip dhcp conflict does not show any output, however all newer machines on the network received dhcp addresses without any problems and can connect to the network and internet.
For testing purposes I put the old IOS back on the switch and the older machines could connect again and received dhcp addresses.No other changes were made to the config.
I did a comparison on Cisco's website and both IOS's support DHCP. Not sure why the new IOS would not give any output when I ran the commands.older machines : Apollos and NCS (They all have XP service pack 2 with Intel 2.8 processors.)
I have a big problem with my cisco wap4410n .. I have upgrade the firmware of this AP to V2.0.3.3 for supporting multiple SSID after my upgradation is finished ..one time I can able to access the administration page But when I connected to another system the same AP I cannot able to connect through ethernet .The network connection in the system shows connected for one second and not connected for the next second its simultaneously repeating the same ..and still not connecting ..i changed my ip setting to default ie 192.168.1.xxxx and again to old config 192.169.3.xx any way the same instance is showing ..
In the WAP the power led, wireless led , are connected good but the Ethernet led is blinking off on stage.I have many times hard reset the WAP but off no use the same happens .i could not able connect to WAP.This may be the worse case ever seen in wap4410n …