I have established dual-rlans on different segments.I have a 2960g switch. I created vl2 (management) and vl3 (data).I connected rlan1 (port4) to vl2 and rlan2 (port3) to vl3.My laptop receives a dhcp address on vl3 and the switch (in dhcp mode) receives it's proper address on vl2.Unfortunately a MAC is assigned to each vl and to the management interface. Thats 3 out of the 2 sets of 4.
So a managed switch is NOT the desired device to have on the back side of an OEAP600.In any case doing a show mac address-table revealed that all the vl2 MAC addresses were duplicated on vl3.To the tune of 216 addresses. 108 in each vlan. Which is a close match to the current host counts for each segment 98 + 18.Obviously this application is not what was envisioned by the OEAP team during work-up.The goal of 4 host devices on the rlan is proving difficult to achieve.The client wants 2 pc's and 2 digi-port servers.
Region : Argentina Model : TL-WDR4300 Hardware Version : V1 Firmware Version : Region : Others
I have Enable WDS Bridging and run Survey which detect the other SSID to be joined with the correct MAC address.I had filled the password of my second THOMSON v 585 V7 with the correct Auth Type both routers broadcast on channel 11.But my TP-Link 2543ND cannot made it work.I also disable DHCP and changed my LAN ip to 192.168.1.2 and can access it over my lan.
We have a switch in our IT office, Cisco 2960G. It plugs into the wall and goes to the server room and connects somewhere. This weekend we redid almost the whole server room and now this switch can connect to the rest of the network. The uplink has a link light but can get anything.
I have rebooted the switch, used scanning on our other switches to try and find the MAC of the switch but for the life of me I cant see it. Is there a command I can run from the command line of the switch to see where its pointing?
I have used all the ports on my 24 port 2960G and need to extend it with another 2960G. These switches do not have trunk ports so what is the best way to stack them and have all 5 vlans on both switches.Can I just use a port Channel trunk etherchannel ?
I have routing enabled, can build a static route, and go back and see it (sh ip route), but I don't know how to get the route right. I have one host (Host A) on Vlan 20 w/192.168.20.2/24 dg 192.168.20.11 (the vlan ip) and (Host B) on Vlan 30 w/192.168.30.2/24 dg 192.168.30.11 (the vlan ip). I can't ping them from any host man. I can ping the Vlans but not the host.
I have a few 24-port Cisco 2960G Switches (model WS-C2960G-24TC-L) that I upgraded to IOS Release 15.0(1)SE2 using the web interface. I am now trying to upgrade those switches with the new release, 15.0(1)SE3, however I seem unable to do it, I have tried this on two switches so far, both have been upgraded to SE2 just a couple months ago or so, and both of them will not accept the SE3 upgrade, basically, I can select the tar file in the web browser and click "Upgrade" but when I do the status never changes from "Loading the tar file to the switch". I have tried multiple times from multiple computers using many different web browsers, including IE6 which is listed as supported. I have let it go for as long as 1.5 hours but to no avail.I also had a few idential switches here that had never been upgarded to SE2, I have had no problems loading SE3 onto them using the same method so it would seem that the tar file I have downloaded is valid.
I recently changed jobs and at the new location we are primarily running Catalyst 2960G series switches with the exception of one 3750. All of the switches are setup in a cluster with the 3750 being the cluster master. My question is what is the benefit of switch clustering? The entire network seems to be a bit over engineered for the our needs and I am hoping to scale it back a bit. For example, the the network was setup with VOIP QoS when there were no plans to even use VOIP. Also what procedures would I want to follow to disable the cluster to avoid any major outages? Assuming there is no real need for a cluster.
I'm trying to decide what switch to use as a core for 500 users. I'm currently looking at either 2 x 3750X stacks or 2 x 4500s with dual SUPs and PSUs, both options will provide the number of switchports required without the need for additonal access layer swiches. Which switch option is best to go for here? All of our services will be located in our data centre which will be connected using 2 1000Mbps MPLS circuits. I wont need any advanced L3 features and we are not likley to scale over 450 users. Also is it ok to use the dual switch stacks or chassis to provide the collapsed core/access layer or is it best to have a dedicated core (using one of the above options with less switchports) and having a dedicated accesss layer using 2960Gs for example. Our structured cabling terminates in a single comms room so we wont need to distribute switches throughout the office.
i had made a software upgarde on the switch 2960G series have no any passwords, when I fished the upgrade process after rebooting the device i found it need a UserPw to access device manager. i tried to use the default PW "cisco" but it dosen't work too.. after that i tried the password recovery process to rest the PW, but noway, but now i have addition problem, when i try the cmd orders "flash_init , load_helper , dir flash" to beginning the password recovery process it shows the following:
The system has been interrupted prior to initializing theflash filesystem. The following commands will initializethe flash filesystem, and finish loading the operatingsystem software:
because I tried to install the IOS by Xmodem to reload the missing flash file.After finsh the TAR file loading and reboot the switch.......the LEDs of mode and Giga ports are lighted amber and not blinking, i tried many times to follow the steps to connect the switch by the emulator and consol cable by holding mode button and connecting the power cable at same time the device does not work, the switch now still not blinking, now i try to read and understand how can i remove the corrupted files and install a new IOS for this switch?What shall i do.
I have a Cisco 2960G switch and one of the ports was configured with srr-queue bandwidth limit 90 - I need to remove this bandwidth limiting from this interface. [code]
I have a requirement to monitor downstream data feed from a remote site and feed it to multiple destination devices for recording. The source data will be fed into a port on a Cisco 2960G switch then, using the monitor function, be forwarded to multiple interfaces. This works fine for normal Etherent II traffic. We tried a test using a device that generates IEEE 802.3 Raw packets ('type' field is used as a 'length' field) but found that while the traffic appeared to be accepted by the input port with no errors it was not forwarded to the destination ports, even when using the monitor function. I did try the 'encapsulation replicate' feature with no luck. It does not forward these packets even if I set all the ports into a common VLAN and let the switch just perform a normal switch function (non monitor).
if it is possible to get the IEEE 802.3 raw packets to pass through the switch and if it is, how to or what I need to do to make it work?
I am unable to access a series of switches connected together through a management vlan. I receive the message "The server xx.xx.xx.xx at level_15_access requires a username and password." Entering the username and password fails and the same username and password message returns. I am able to ssh into the switch with the username and password that fails trying to access the switch with the browser.
How can I check the username and password for access with the browser?
I am trying to monitor switch performance. Is there a good way to monitor switch performance with the command line interface?
I just got a Cisco 2960G 24-port gigabit switch so that our HP servers can have a Gigabit connection to the network. I moved 2 servers to it (HP Proliant DL380's) but they don't actually seem to be able to achieve even close to 1000Gbps. I ran same some LAN bandwidth tests and it was showing only around 200-300 Mbps between all of them. I also ran a network stress test utility, LAN Tornado, and it was showing packet loss as high as 60% when on gigabit, and only .07% when on 100Mbps.
-Both the NIC's and the switch ports are set to 1000/Full
-Currently using Cat5e cabling no more than 25Ft in length (I know Cat6 would be better but Cat5e is supposed to support Gigabit)
-All servers are on the same VLAN
Here are the port statistics when running just a stress test @ 10Mbps that had a 45% packet loss. What's odd though is when I set the servers and switches to 100Mbps, I get less than 1% packet loss.
GigabitEthernet1/0/16 is up, line protocol is up (connected) Hardware is Gigabit Ethernet, address is 203a.07ff.7e90 (bia 203a.07ff.7e90) MTU 9000 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
We have cisco 5508 office extend in dmz running code 7.3.112. 1132 AP seems to register and authenticate fine but OEAP 600 series dont seem to authenticate. they seem to join the controller and download the SSID but just wont authenticate ? not even registering on the AAA server
I have found that there are only few configuration to the Cisco Aironet 600 OEAP. The settings are just for basic configuration for a wireless network when it is in autonomous mode.
A need for a Wireless LAN Controller to perform advance settings.
Also, there are no firmware available in Cisco. No upgrade/downgrade firmware avalaible for download.
Pool of oeap 600 aps 1x 2504WLC as OEAP WLC (@DMZ) 1x ASA 5515
Scenario:
My OEAP WLC located at ASA - DMZ is NATted to a public ip (primary internet ISP), then my pool of OEAP-600 were configured to communicate with this OEAP WLC.
My question is:
I want to automate the failover of OEAP-600 (I don't know if this is possible) to the secondary internet ISP whenever the primary internet ISP fails. The secondary ISP is terminated on the same ASA 5515-X doing PBR and IP SLA stuff.
I know that OEAP 600 can only be pointed to one WLC ip address I know that the WLC can only be NATted to one public IP address.
What would be the best solution to perform the OEAP backup connectivity? Or just buy another set of WLC/ASA then just manually configure the OEAP-600 APs to point to the secondary ISP.
I have a customer looking to deploy OEAP & wants to know if it possible to disable the local ports 1-3? Reason being, they don't want the home user connecting devices & causing more support tickets to troubleshoot an Xbox or Google TV just b/c it's connected to a company provide AP/Switch. I have read all the docs & it makes no mention of this.... I can see in 7.2 the ability to disable the local SSID but no mention of the ability to shutdown ports 1-3..Also see support in 7.2 for Dual RLAN... but that still leaves 2 local ports.
I have some trouble with the setup of an oeap 600 ap. The ap has joined the controller as it should and the remote-lan connection to my corporate network works well, but i can't connect to the corporate wlan.
When i check the event log on the ap it says:
" *Oct 02 07:36:56.662: (Re)Assoc-Req from 00:1a:73:d2:82:8c forwarded to WLC, wired: no *Oct 02 07:36:56.665: received assoc-rsp for wireless client, status=0011 *Oct 02 07:37:11.712: DisAssoc-Req/DeAUTH from 00:1a:73:d2:82:8c forwarded to WLC, wired: no *Oct 02 07:37:11.713: WTP Event: Delete Mobile sent to wlc00:1a:73:d2:82:8c"
and a debug on the controller gives me:
apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Adding mobile on LWAPP AP ec:c8:82:c2:3a:20(0) *apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Association received from mobile on AP ec:c8:82:c2:3a:20 *apfMsConnTask_6: Oct 02 08:52:05.034: 00:1a:73:d2:82:7f Sending Assoc Response to station on BSSID ec:c8:82:c2:3a:20 (s tatus 17) ApVapId 1 Slot 0
The web GUI of the OEAP itself only has a single field to enter the address of a single controller.
But, I wonder if once the OEAP is talking to your WLC across the Internet, you can allocate HA settings to the OEAP so that it can fall back to a secondary WLC if your main WLC fails.
This is sort of hinted at in the docs I have read, but I have not been able to find it explicitly stated anywhere.
It would be nice to have 2 DMZ-based WLCs at two different data centres to allow remote users to have a fail-over solution, but I need to be sure that this is supported before implementing.
I have a TAC case open, but it doesn't seem to be making any progress.I upgraded my 5508 controller from 7.2.111.3 up to 7.4.100.0..Most of my APs are fine. 3500s, 1100s etc.except for 602i APs. The APs associate, they update software etc, but they won't broadcast the WLAN.An interesting thing, on the 602 AP, in the log, I see this:*Mar 06 15:08:12.667: SSID remote, WLAN Profile Name: RemoteOEAP, added to the slot[0], disabled..So the AP is definately talking to the WLC and being pushed the correct WLAN profile.On the controller, the AP shows the the Admin status of the radios is showing DOWN, but the Admin status on the AP itself shows UP
I've done a factory reset on the APs to no avail. I have a 2504 WLC as well that i'm in the process of implementing in a DMZ specificially for these APs, and for testing purposes, I associated the 602 Ap to that WLC as well. This one is running 7.4.100.0 too, same results. It would appear to be a problem with this version of software?
Only fifteen users are allowed to connect on the WLAN Controller WLANs provided on the 600 series at any one time. A sixteenth user cannot authenticate until one of the first clients de-authenticates or a timeout occurred on the controller. Note: This number is cumulative across the controller WLANs on the 600 series. For example, if two controller WLANs are configured and there are fifteen users on one of the WLANs, no users will be able to join the other WLAN on the 600 series at that time. This limit does not apply to the local private WLANs that the end user configures on the 600 series designed for personal use and clients connected on these private WLANs or on the wired ports do not affect these limits. This is from the Configuration Guide for teh 600 series Office Extend AP. Is this count per AP or total per WLC? If I have 10 APs deployed to our remote users, can each AP support two simultaneous users? Would I need to use separate WLANs for each OEAP?
I've got a strange problem here. In the office, my OEAP 600 can join WLC if there is no MAC authentication. When i enable MAC authentication at WLC, AP will fail to register. However, I try it at home and it works with both MAC authentication enable or disable. I suspect it is because of firewall in my office, but there shouldn't have any different in discovery and joining procedure for AP with MAC authentication enable or disable.
I have a Flex 7500 with 200 1142AP's working fine in remote office and local setup. We have since purchased 3 OEAP 602's and looking to distribute to teleworkers.
I have configured the OEAP to point to the NAT'd IP of the WLC, the OEAP does connect and is listed briefly in the WLC wireless listing but I am not able to make any configuration changes, it will then dissassociate and try the join process all over again. I have attached below the OEAP 600 event log. I see that the WLC does not support data DTLS encryption and looking to make this work.
I have tried to install the DTLS license file from the Cisco website, but says license failed to install, with no other errors.
*Jun 18 15:18:43.938: Build version 7.0.112.72 (compiled Feb 3 2012 at 01:56:39, [L]). *Jun 18 15:18:47.859: CAPWAP State: Init. *Jun 18 15:18:47.860: CAPWAP State: Discovery.
Region : UnitedStates Model : TL-WDR4300 Hardware Version : Not Clear Firmware Version : ISP : Verizon DSL
My DSL connection comes into our house in the basement and the DSL modem came with a router included. I bought the WDR4300 for the higher speed wireless connections and the gigabit ports. I really don't need the "router" functionality. I would like to put the WDR4300 on the second floor to give (hopefully) the broadest wireless range. However, I would like all my PCs (including those wirelessly connected) to be on the same sub-net. Is there a way to configure the WDR4300 so it acts like a switch rather than a router?
I have two 5508 and a few hundred 1142 in our internal net. Now I bought some OEAP 600 to do tests in some small branch offices, but I would like to enable AP policies with MAC filtering to block that anyone else can connect an OEAP through our firewall. If I enable 'Accept Self Signed Certificates (SSC)' and 'Authorize MIC APs against auth-list or AAA' as suggested in Cisco document 'Aironet 600 Series OfficeExtend Access Point Configuration Guide', will that effect only my OEAP 600 or will I have to also include the MAc addresses of my internal 1142?
I am about to buy 2x Series 500 switches but before that I have a design to be sure :I want to create a redondant network so it is the reason why I want to stack 2x Series 500 switches.Each server on my network (ESX and Windows 2008) are connected with two NIC (one port on the first switch , one port on the second switch), with trunk mode + etherchannel for LACP.
First question : I saw that the limitation is up to 8 etherchanel groups, can I have a mix of multiple servers on the same etherchannel group or should I create one etherchanel group for one server with only the two NIC inside?
Second question:I want to use the series 500 to do intervlan routing and want to be sure that if the the ports are in trunk mode with some vlan set on the card itself that the default gateway for the vlan will be propagated on the two switches (in stack mode) and will not cause any issues when both switchs works fine and if one switch crashes?
I'm trying to see if I can use both ethernet ports on a 2811 to run hsrp for non-stacked dual switch fail over. Then link the the NM-32A ports to L0, so the remote access server trying to use them can use the l0 ip and failover much faster (it's programming is limited). This is on IOS 12.4(25)f, though we are moving to 15 soon.
I installed two AIR-AP1142N-E-K9 access points, running a fairly simple config, WPA2 PSK, with AES cipher, both the same SSID.The two access points are connected to Cisco 2960G switches, which are in turn connected to each other, again without any fancy config options, no VLAN's ed.
After a random while, varying from 30 minutes to 15 hours, the access points will stop sending/recieving traffic on the ethernet interface.The units don't stop at the same moment, this also varies seemingly random. It's not related to load or the amount of clients (1 to 15).Only turning on one unit doesn't make any difference.
The units keep sending out their SSID, you can associate to them, but the DHCP requests aren't passed on to the DHCP server which is connected to one of the 2960G's.If you wirelessly connect to the AP and set a manual IP adress you can reach the webinterface and telnet/ssh to the access point. The ethernet link is reported as being up on the access point. Also the switch reports a link on the port to which the access point is connected.Resetting the link does have no effect. The log doesn't mention any errors or warnings.Power cycling or reloading the access point will put it back in working order for a varying amount of time.
! ! Last configuration change at 14:41:40 +0100 Sat May 12 2012 by admin ! NVRAM config last updated at 14:41:40 +0100 Sat May 12 2012 by admin ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec
We have a problem of igh CPU Utilization in Cisco 4510R-with dual SUP V-10G modules.
Cisco 4510R switch is the CORE switch and have 30 no's of VLans. It was running PVST/PVST+ previously. But Now we have migrated to MST. But after upgradation the CPU utilization reached alomst 98%.
I have the following: 1 5520 ASA connected to the internet, 2 core switches, and several access switches.Aside from implementing RSTP, VRRP, hard code access and trunk ports, is there any other recommendation you would like to add.
I am having two connections in same pc 1 via lan and other via 3g(dailing method). I want to combine bandwidth of two connections. As windows 7 has no option for it,is there anyway todo it directly or indirectly.
