I'm creating 3 vlans, one private ip addresses and the two for two blocks of public ips. After creating them devices on the same network are able to talk to each other on the private IP but not on the public ips.
View 1 Replieswe have a setup of about 14 WS-C2960-48FPS-L all running from a 3750G stack.What i want to be able to do is create dedicated accounts so that local IT admins can tag ports via CNA without calling me everytime something needs to change. How and where can i create these on CNA? Is it as simple as using the Users and Passwords options?What privledge level should i assign to these accounts so that it will give the least amount of previledge required to tag ports. I dont want them being able to change much else.
View 2 Replies View RelatedI have a 3750G switch in my production network that only has VLAN 1 on it. All ports are in a default state and VLAN 1 is disabled. The switch is passing traffic but shouldn't having the default VLAN shut down cause the ports not to pass traffic? If I start to create VLANs will that cause the switch to stop passing traffic?
View 4 Replies View RelatedNew to Cisco devices and have had an ASR dropped in my lap.Running ASR1000-RP2 with System image file: asr1000rp2-advipservicesk9.03.03.00.S.151-2.S.bin Show Vlans returns: No Virtual LANs configured Router(config)#interface vlan?
<1-4095> Vlan interface number
But when I try an assign a Vlan number I get % Unrecognized command, or % Incomplete command
we have two Catalyst Express 500 switches and a ESW 520 just purchased. the VLAN on the other two is 2. how do I change the Default to be 2 instead of 100 in the ESW Switch.
View 3 Replies View RelatedI am currently tasked with setting up a network, pretty much from scratch, that requires some fairly hefty VLAN deployment. My hardware on hand (already existed so can't can't change anything easily) 5x ESW-540-48 Switches, 1x3750g switch, 1x2811 router. I don't believe the router should be required as the 3750 is capable of intervlan routing. [code]
Now at one point I actually had the VLAN's *working* in that I could specify an IP address and could ping to and from it! However DHCP wasn't passing despite numerous attempts with DHCP relay and IP-Helper configurations.Also I was having issues with VLAN 1 as the native VLAN, the ESW switches don't allow you to do much with them, as they 'weren't created by the user'. So tried switching that out to VLAN11 also but with very little success there (I had to change the native vlan on all trunks to VLAN 11)All the 10.x.x.x addresses need to be able to communicate with each other.All the ESW switches need to be able to handle their respective VLAN's as well as VLAN 1 (for Printers and wireless access points distributed around the building).
We have a server that we remove from the rack. The only role it has is to give out DHCP on the wireless network. I tried enabling the built in DHCP server on the Airespace 4112, though a Catalyst 3750G, but I dont get an address when I'm connected to the wireless network even though the range is enabled. If I set an static IP on my wireless card I can access the network. I also tried enabling DHCP on a Sonicwall that is connected to the Catalyst 3750G.
Do I need to link the DHCP scope to the wireless network? Is there anything on the switch that would be blocking DCHP since it on a VLAN? I have the last four ports in a VLAN for the AP's and the internet connection to the Sonciwall.
I just procured Cisco 3560V2- 48PS-S i would like to know how to set it up from scratch:
1. configuring passwords: enable and privilege
2. Creat Vlan , such that systems connected to the Vlan can connect to internet.
3. enable routing protocols
4. How do i use the switch as a default gateway for the systems on the vlan
5. how do i make sure the desktops connected to the switch are browsing the internet.
I have a problem to create a VLAN with a Cisco 2801.,I need to have base ports FastEthernet 0 / 0 and FastEthernet 0 / 1, in the same VLAN.
Basically I'm trying to switch access redundacion, now I have redundant switches in which I have the servers, but if one of these switches fails, and,coincidentally is where I have connected the router, the server runs out of internet connection.,I idea is to connect the FastEthernet 0 / 0 to a switch, and FastEthernet 0 / 1, to the other switch,but I managed to have these two ports in the same vlan, in order to have a unique IP for both FastEthernet ports,As I can do this?. do is a lot of documents using the switchport command, but this command is not available in my router, I tried different IOS, and nothing.,currently I have the following IOS: c2801-adventerprisek9-mz.124-24.T6.bin
We have observed WS-C4507R-E got rebooted while creating the L3 VLAN ( while No shut).Is there any known bug for below IOS ?cat4500-entservicesk9-mz.122-40.SG.bin,
View 4 Replies View RelatedI have Linksys SPS224Trying to create VLAN through SNMP. Issueing the string to create VLAN ID=100 with name "VLAN100"
snmpset -c private -v2c 10.254.2.144 .1.3.6.1.2.1.17.7.1.4.3.1.1.100 s VLAN100 .1.3.6.1.2.1.17.7.1.4.3.1.5.100 i 4
It reports
Error in packet.
Reason: (genError) A general failure occured
Failed object: iso.3.6.1.2.1.17.7.1.4.3.1.1.100
In same time changing the name of existing vlan snmpset -c private -v2c 10.254.2.144 .1.3.6.1.2.1.17.7.1.4.3.1.1.23 s VLAN23 and even deleting the existing vlan snmpset -c private -v2c 10.254.2.144 .1.3.6.1.2.1.17.7.1.4.3.1.1.510 i 6 are successful.
How can I create new vlan through SNMP?
We have 3 VLAN in our cisco 3750G switch. VLAN 1 10.1.0.0/24 for domain network, VLAN 2 10.2.0.0/24 for student and VLAN 3 10.3.0.0/24 for public. We have one printer 10.3.0.206 in the VLAN 3 and want to allow student server 10.2.0.253 in the VLAN 2 to access the printer. How can we configure access-list? Here is current configuration.
ip access-list extended publicaccess
permit icmp any any
permit ip any host 10.2.0.253
permit tcp any any established log
deny ip 10.3.0.0 0.0.0.255 10.1.0.0 0.0.0.255
deny ip 10.3.0.0 0.0.0.255 10.2.0.0 0.0.0.255
My core switch is a 6509-e and my IDF closets have 3750's.I have a couple of vlans currently setup, that can communicate with each other.VTP is setup Client/Server where as my core is Server, all IDF's are Client.
What i'm trying to do is create an isolated VLAN. I want to setup a DHCP scope and use helper address. When i plug in a client to that VLAN, i want it to get an IP, but not have any other network access.
Is this possible to do without switching to Transparent mode? If not - what reprocussions will i see by switching to transparent mode?
I was given a task of creating a vlan and isolating one pc to access an internal website (192.168.90.15) on a specific port (port 8080)The pc is connected in the following manner:
PC--> HP Switch --> Cisco Small Business SG200 switch --> 3550 Catalyst 1, 3550 Catalyst 2 and 3550 Catalyst 3.
I have created a vlan 110 on the Main 3550 Catalyst switch and successfully added the pc to that vlan.However, that PC must be able to access the internet and an internal website on port 8080.I have placed an access-list on the main 3550 catalyst switch which is connected to our router as below:
Client ip address: 192.168.100.2
VLAN 110: 192.168.100.3
access-list 110 permit tcp host 192.168.100.2 host 192.168.90.15 eq 8080access-list 110 permit icmp host 192.168.100.2 anyaccess-list 110 deny ip 192.168.100.0 0.0.0.255 ? I was unable to access the webserver even after many attempts.
There are 5 VLAN's and all can communicate through all the different subnets, but VLAN5 can not communicate to the RVS 4000.
VLAN Smart Port set to switch and router - this is not working What Smart Port configuration should be set up to talk to the LAN port on a RVS4000?
VPN is set up and connected, but when trying to connect to the client can not connect to remote networks.
I have a 5508 WLC that for whatever reason cant take any DNS settings, but I still need to get some filtering on the public hotspot side of my wireless network. Can I put the DNS settings on the router that the circuit terminates on? This is the same router that the public vlan is defined on, I'm just not sure if I can put DNS settings in place for just one vlan, and how that'd work.
View 3 Replies View RelatedHas any come across show ver memory details on 3750G-48PS as below, One of our Catalyst 3750G running software 12.2(44)SE2 shows unexpected DRAM as below:
cisco WS-C3750G-48PS (PowerPC405) processor (revision F0) with 0K/12280K bytes of memory. This would equate to around 11MB memory which does not seem right... Is it a known IOS bug?
I have been working with ASA 5510,20,40,80 but not with 5505 this vlan and its interfaces are quite confusing.Just want to know how it works and its connectivity to Cisco Switch.Do i have to put the interface of the switch in the same vlan as i am creating the interface vlan in firewall ?Now the switch port connecting to this Eth1 interface should also be in the same vlan ? i.e vlan3 ?? or it will be in trunk ? The default configuration shows the eth0 with no access vlan and interface eth1 with access vlan 2... does it mean the eth0 is in vlan1 ? (Nativ Vlan ) ???
View 4 Replies View RelatedI'm building a new colo presence with a full class C of public IP's. The idea is to connect to our ISP with a 3750x switchstack and they will be providing two ethernet drops that conect directly into two seperate switches on their side with HSRP and BGP at the routing level, so we will just point to their virtual IP (gateway address).I'm not sure how to either segment the public ip block or statically route each ip address and the interaction of vlans/svi with HSRP groups. Just use the switch at layer 2 or handle the internal routing with eigrp or ospf at layer3?
View 2 Replies View RelatedI have a quick query which i need ratified before proceeding. I have the following scenario -
Two Cisco 3750v2 switches with stackwiseISP allocated block of /26 (64 addresses)8 customers each with a VLAN and SVIInternet facing VLAN and SVIDefault route to ISP router Lets say the ISP has given me the network range 10.10.10.0/26 (we'll assume this is routable on the internet for the purposes of this example) and a default gateway to the internet of 10.10.10.1 within this range. I have configured a public facing VLAN as follows -
VLAN 300
name PUBLIC
int VLAN 300
IP Address 10.10.10.2 255.255.255.252
I have then created a default route as follows -
ip route 0.0.0.0 0.0.0.0 10.10.10.1
With this configured, the switch can successfully route upstream to the internet with no problems. I have then moved onto the customers and depending on what service they have purchased, I have subnetted the 10.10.10.0/26 range into smaller subnets. See as follows -
Customer A - 10.10.10.4/30
Gateway IP - 10.10.10.5
Useable IPs - 10.10.10.6
Customer B - 10.10.10.8/29
Gateway IP - 10.10.10.9
Useable IPs - 10.10.10.10 - 10.10.10.14
This continues for each customer depending on how many IP's the have purchased. I have then assigned these IP ranges to a customer VLAN and SVI as follows -
Customer A
VLAN 10
name CUST-A-VLAN
int VLAN 10
ip address 10.10.10.5 255.255.255.252
[code].....
It is then up to the customer as to what equipment they use and how they NAT or firewall their internal networks.
One of our vendors requires using a public ip address to setup a site-to-site IPSEC vpn. We only have one public ip address and that will be used for the vpn endpoint and for internet access for the local network. I've setup policy NAT from our local network to the outside interface. I'm also using the outside ip address for the crypto map. The tunnel setups successfully and the Tx count increases anytime I try to ping the remote network, but the ping fails and the Rx count does not increase. According to our vendor, we should be able to ping the remote network and connect using port 443. When trying to connect using port 443, I see a SYN timeout in the logs. I'm not sure if the problem is on their end and they're rejecting our traffic, or if something is misconfigured on our end. I'd like to make sure that I have everything configured correctly before I go and point fingers at them.
Local Network - 10.10.9.0/24
Remote Network - 20.20.41.0/24
Remote Peer - 20.20.60.193
.ASA Version 8.2(5)
!
hostname ciscoasa
[code]....
i have an ASA 5520 8.4(1) setup as follows
public wan
|
|
ASA-- public dmz
|
|
private lan
i need to allow https traffic to a server in the DMZ that will have a routable IP address will just an ACL suffice ?which interface do i apply it to ? wan or dmz ?i dont need a NAT since the DMZ is a routable space?
I has got a 8 system(Say Node1, Node2,.....,Node7,Node8) in my LAN Network.i Want a Group a 8 System's in Such a way that Node 2 Should Ping with Node1,Node3 Node4, But not with Node 5,Node 6,Node 7,Node 8.
View 2 Replies View RelatedI'm trying to create a VPN at our office. However I cant seem to ping our servers public IP. I have tried configuring our router to do this. However, it times out when you are outside of our network.
View 4 Replies View RelatedI have a VM (Alice).I want to route ALL its traffic through a server of my own in the UK.It needs to be 'fail-safe' in the sense that the traffic must either be routed through the server, or not at all (EG with windows VPN dialer, if the VPN connection is dropped it will immediately begin routing traffic normally again - that's not acceptable*). I need to run windows on the VM, the server can be anything.The VM is connected to the internet via a linux firewall/router box in my house (set as default gateway for the VM).How can I set this up?
View 5 Replies View RelatedI am a bit confused on how to create a Hot Spot & connect a Dell Desktop(no built in WIFI) a Dell Laptop(with built in WIFI) & a HP Printer with WIFI. From reading info on your Web Site, it appears that I need a Wireless Router, an adapter(not sure what this is) for my Desktop. I have AT&T Air Card internet access. Do I need anything else?
View 1 Replies View RelatedI have 2 routers and would like to create a wireless bridge/repeater between them so i can extend my wifi range. Is it possible to do this? and How would I do it.
Router 1: Aztech hw 550-3g
Router 2-Link DWR-113 3g
I'm trying to set up a network for a friends small office so we can share files between each of the computers.i have tried to do it through the workgroup but with no luck as some can see the other machines and some cant?
Hardware/software:
Thompson wireless Router
laptop with Windows 7
laptop with Windows Vista
laptop with Windows XP SP2
Mac
I have set the network discovery to on in W7 & Vista and and ran the network wizard in XP At the moment the vista and W7 machine can see each other but i get and error saying cannot access //(computer name)with the W7 and XP machines i can send a file when i type in the ip address (//192.168.1.?) into the W7 search bar but the XP computer is not shown in the network folder?
I have a core switch Cisco3750G with 4 SFP slot populated with GLC-SX-MM module.Now in these 4 fiber GLC-SX-MM modules 3 are connected to 3 floor switches which are having the same GLC-SX-MM.Each link is configured as a TRUNK and allowed only that floor VLAN and working fine.Now the 4th GLC-SX-MM module has to be connected to a single desk top PC using a FIBER to UTP convereter,which is SC to UTP .Now patch pannel is LC ,I used a LC to SC fiber patch cord,but link is not coming up,in this situation if I used both side SC convereter then link is up.
All 4th GLC-SX-MM modules are checked and it is working fine.Only the forth floor link is not coming up,if I use the UTP to Fiber SC type connector in the CORE switch for teh 4th Floor then it is working.How to resolve this issue,Whether I need to use the UTP to Fiber LC type convereter in the fourth floor instead of SC type converter,logically when I use the LC-SC type patch cord and connecting to SC type converter it should work.
I have been assigned to create a basic IP Addressing Scheme. The company has a single class B private address range of 172.16.11.0/16 and it needs to be divided into four subnets. They are all based on a single router.
Subnet A: 500 hosts
Subnet B: 200 hosts
Subnet C: 50 hosts
Subnet D: 20 hosts
How can I subnet them correctly and how would I make an addressing scheme for each subnet? (Host range, server, peripherals, gateway address? etc.)
What is the best way to set up a VPN connection?
View 2 Replies View RelatedSo i'm new to this sort of thing i am building up 2 gaming pc Windows 7 so while i have both for a few days i would like to network them so that when i want to play a car racing game via lan the other pc will detect itone gaming pc is mind the other my fren so until i deliver it to him i have it for a few days so i wanted some practice in thisso i have a WIF arris modem with 4 Ethernet ports so both sys will be connecting through cablesi would like a step by step guide as to how to go about doing this creating domains et
View 2 Replies View RelatedI am looking at using a TP-Link Powerline Adapter (TL-PA211 Starter Kit) and a Trendnet 4-Port Broadband Router Tw100-S4@1CA (both listed on Amazon) to connect my Hitachi L32A402 HDMI television and a Roku XD|S to the internet to use Netflix. And also to connect my housemate's new laptop.
I believe the setup would be from my Dell Vostro desktop to the Trendnet router to one of the TP-Link Powerline Adapters. This would be on the second floor. Then in the basement I would need to plug in two additional adapters ... I would connect one to the Roku and then to the Hitachi tv and connect the other one to my housemate's computer.
My questions are:
Can I keep the computers not visible to each other? We would both like to maintain our privacy ... and I don't know if we connect everything up this way if our computers will be open to each other. Is this called putting them on a separate network?
I saw something in the documentation in this manual [URL]. I think on page 20 it is telling me I can give one adapter a different name to put it on another network, but I am not sure. And I also see that it also says for there to be connectivity they need to have all the same name "HomePlugAV".
So, if the tv and the main adapter have "HomePlugAV" as a name, and my housemate's adapter has a different name ... then they will all work (get on the internet) - but my housemate and I will have privacy?
Are there any issues about anyone being able to access my computer through the tv ...