My company uses a Sonicwall NSA 3500 as it's Firewall/WLAN controller and lightweight Sonicpoints for the private/public WIFI access. We are getting ready to implement wireless at one of our branch locations a few blocks away(We use Metro Ethernet to connect the 2).I know with the current firmware the Sonicpoints can't provision to the Sonicwall NSA over the Metro Ethernet like Cisco lightweight AP's can because the Metro Ethernet strips their VLAN Tags and obviously the Sonicpoints don't support REAP.what other options (short of installing another WLAN controller at the remote site) do I have to connect the AP's at the WLAN controller at our main location.
I curently have 2 Data centers connected with a Metro Ethernet Connection. Each Data Center has 6500 with Sup720s. The Metro Ethernet connection is currently conected by a L3 routed interface. I now need to enable VRFs between the locations and want to determine the best way to adjust the Mero. I was considering adjusting the routed interface to use Ethernet sub-interfaces. Each VRF would be given a different subinterface over the Metro Ethernet connection. I have done this on internal LAN connections but am concerned about exteding across data centers over Metro E.
We are in the process of upgrading the bandwidth at a few offices. Each currently have a 2xT-1 connection but have high utilization on the circuit which is why they are being upgraded. We are trying to decide b/t either a partial DS3 or metro ethernet connection. Are there pros/cons b/t the two in order to decide which to go with? Cost is not an issue. Some say going with a partial DS3 circuit offers benefits over metro ethernet such as network-based failover, end-to-end availability is better with DS-3 and QoS.
my company will change WAN connection from HDSL (2Mb/2Mb) to Metro Ethernet (10Mb/10Mb). Now, I have CISCO 1841 (12.4(15)T12 ) with 2 FE and HWIC-1T. Can i configure my Metro Ethernet (WAN Connection) on one FE or i need of "external wic" such as hwic-1FE ?
I am planning on implementing a metro ethernet circuit to replace a more expensive circuit to connect my office and data center. This circuit will be configured by the provider in a 'transparent' manner, which will allow us to pass vlans freely over the circuit without having to create a QinQ tunnel. This is a layer 2 only metro ethernet circuit.Planning on connecting the office end to a 3750 (switch A) and the data center end to a 2960 (switch B). The data center end will have a couple of other 2960s hanging off of it for server connectivity (switches C & D). I plan to use a 2811 (router A)for layer 3 connectivity in the data center. Switch B will plug into router A and switches C & D will plug into switch B using two port-channelled links. I can post a diagram if needed.I will use rpvst here and configure switch B as the root bridge.There are about 10 vlans that I use between the office and data center. Router A is also used to connect to other environments such as staging, production and also to the internet. I think this should be a straight-forward configuration since it is mostly layer 2. Should switch B be the root bridge?
I am trying to configure a new metro ethernet and have some questions about the configuration. The physical layout is a main office and two remote locations. The remote sites are point-to-point connections to the main office, tagged by the ISP with VLAN 130 and VLAN 140. The connections aggregate into one handoff at the main office, and are plugged into Catalyst 3750-X switches at all three sites.
I am preparing to move two branch offices from a point to point T1 connection to Century Link Metro Ethernet.Currently my branch locations connect to my HQ 7204 router via a channelized DS3. I have a 4507R at HQ that I will connect the ME circuit to.We will also be moving our Internet connection on the ME circuit.Our service provider Clink will hand me a single Ethernet handoff for the Internet and branch office connections. For the first phase I will connect one branch office using ME. Once that is in place and tested we will move another office and so on. Then our final step is to move our web connection to the ME circuit.Each branch office has their own unique voice and data subnet. They each have a 2801 router and a 3560 switch. The routers are MGCP gateways with only one PSTN connection, a POTs 911 line on a FXO port.
So my questions are;
1 - Should I connect the ME directly in to the 3560 at the branch offices or use the Fa0/1 on the 2801? Fa0/0 is currently connected to the 3560.
2 - On my 4507R at HQ how will I configure the ME switch port? As a dot1q trunk port?
3 - Given that ME is basically a LAN connection will I have to re IP the branch office? HQ is 10.10.1.x/24. Branch is 10.10.166.x/24 (data) 192.168.166.x/24 (voice).
4 - On the 4507R will I need to configure a vlan interface for each branch subnet?
I attached two network diagrams. One represents our current topology (MEexisting) and the second represents the new ME circuit changes (MEprojected).
Today my sw upgrade procedure failed on a ME3600 Series switch.
From the past with LAN switches i thought that we need to set IP settings manually in ROMMON and then load remotely an IOS via TFTP.
But it seems that this is not supported there.So now i would like to ask how can i bring a bootable IOS to the ME3600 switch. and at least: how can i bring back my switch to life.
I could imagine that there is a missing default gateway.But what is the syntax for default gateway? And after I have connectivity i need to work for the process of loading a bootable image to the switch.
I have the possibility of upgrading a DS3 to Metro Ethernet, Gigabit connection. My dilemma is I have two VTP domains in my network. How can I get two VTP domains over one trunk to a remote site ?
we are setting up our first ATT metro ethernet connection. I have a Cisco 2960S at the remote site and I placed a Cisco 2960 on the Host site to test and had no issues. When I moved the Host site to our Nexus 7000, I can not get a link.. both sides are set as trunks,
I have a 50 Mbps metro ethernet connection between our main office, and our collocation site, where we store web servers, DR equipment and VPN access gateways. I have two Cisco 3845 ISR's connected to the metro E circuit. The interfaces on each router are configured as 100/full as requested by my ISP. We are connected via ethernet to a fiber media converter.
As I understand, CBFWQ will not kick in until congestion occurs on an interface. I also understand that the bandwidth command on an interface is to provide bandwidth related information to upper level protocols (like EIGRP, etc).
My question is that since the interface where I have CBWFQ configured on is at 100 Mbps, but my circuit is at 50Mbps, how can I get my routers to kick CBWFQ in when traffic demand exceeds 50Mbps+? Does the bandwidth command on the interface control that as well?
I recently ran into some problems concerning the use of a Cisco layer 3 switch (3560) as an Internet edge device to perform a simple static route between the customers network and the ISP POP router. Although this device can perform the routing at the edge for Internet traffic, I am concerned that this device has limitations when it comes to functions such as traffic shaping to the subscribed bandwidth of the Metro Ethernet access to the Internet. Since the 3560 could not conform to the 20 Mbps of subscribed bandwidth, any traffic beyond 20 Mbps was dropped causing performance issues with applications that use TCP. I am trying to find design documents or white papers that would either support or not support using a layer 3 switch as an Internet perimeter device instead of a router. I would like to know if Cisco has a specific perspective on this subject and whether or not they would ever recommend actually using a layer 3 switch model that is a 37XX or below?
I am running LMS 3.2 and can not see the Nexus 5596 / ME-3600X-24FS-M Cisco switches on Cisco works LMS 3.2. Where I need them most is DFM the devices come up as unknown. An example below 10.125.202.1 is NExus 5596 and the rest are ME3600.
I have a cisco 1841 running on a 10Mbps Metro-E connection. I recently signed an agreement for a 100Mbps Metro-E. I am wondering if I will need to purchase a new router to support this new connection or will my 1841 be able to handle the traffic.
I have been reading for awhile now on all the Cisco forums on the 3560 and shaping egress traffic but I wanted to verify my thoughts on this. I have 3560 that connects to the ISP that is policing at 10Megs, I want to shape my egress traffic going to the ISP, I do not want to provided QOS to any specific traffic type but only shape all traffic outbound. Will my config below shape "all" egress traffic going to the ISP on the 3560, on a port that is physically connect at 100Meg Full duplex?
int gi0/1 srr-queue bandwidth shape 40 40 40 40
I gathered these numbers using the formula of 100* 1/weight, which would equal 2.5 and if each queue has 2.5 meg that would = 10Meg. However another concern is that I don't think I have the full 100Meg on the interface to use (correct?)
I have some 1242s and I can't get a straight answer on whether they can do both autonomous and lightweight or just lightweight.
Model number: AIR-LAP1242AG-A-K9.
I'm assuming that the 'L' in the model numbers means it's just lightweight, but searching Cisco's site and the Internet in general it's just not clear.
I know it works as a lightweight AP, can I run it in autonomous mode?
I am attempting to upgrade my 1261n's to lightweight but the upgrade tool (3.4) is telling me that it is not compatible with this model AP. Is there an article or quick run down on what I need to do to upgrade these AP's?
Our client have cisco 5500 Wireless lan controllers. They connect to core switch and other ports conenct to various switches on each floor. Then we have cisco AP 1300 series mounted on celing. I was reading that lightweight AP gets config from WLC as soon as they plug in. Need to know how the AP gets config from WLC switches?
a few day l have 3 AP Ligthweight 1250, today l was checking my infrastructure and l saw that these 3 AP can´t join to the controller, l reset the AP to the, and its can not join, l checked physicly the AP, and the Ethernet Led is in Amber permanent and the Radio Led is in Green permanet , i am searching the status led to find the fix but l have not found these convination led. and l can not access to the consolo port.
how to convert a 3502 access point from Autonomous to Lightweight ? 3502 has a new IOS released back in Dec 2012 to work as staandalone mode. I need to convert this back to Lightweight mode.
I have been searching on web but have had no luck so far with anything. Tried converting it to lightweight in the same way as putting it on Autonomous IOS but errored out.
How can I upgrade my 1041N AP to lightweight firmware? I found an upgrade tool which works in only XP and 2000 machines. I do not have these outdated OS so is there another way to upgrade it to lightweight?
I cannot TFTP this tar file to both 1230 and 1231 APs. Both are lightweight APs that I've wiped to the rommon mode (ap>) and I issue the command:
tar -xtract c1200/k9w7-mx.123-8.JA 10.0.0.2
And I get a error saying: "permission denied"
Notes: The AP has defaulted to the 10.0.0.1 IP. My laptop is set to 10.0.0.2 255.255.255.0 IP My TFTP-Server is on and the root folder with the .tar file is in there. ether_init, flash_init, tftp_init (these commands have been executed) My firewall is disabled.
We have a couple of smaller remote locations running cisco 1811W routers (built in switch ports & wireless).Now I have been tasked with determining if the wireless portion can be converted to Lightweight or not; if so what is required.
How to upgrade C3502i to Lightweight? I failed to upgrade using Upgrade tool v3.4. The error message is "AP model is not supported" . how can I upgrade it?
We have a remote site with ~5 users, 4 IP phones and a network printer. Right now we have an old Win2003 box serving as the DC for that site. It is connected back to us via 10MB layer 3 routing on a HP 5500G-EL switch. This windows server is getting quite old and I'd like to avoid the expense of buying a new server just to hand out addresses and authenticate users. How do you all handle login authentication,dns,and DHCP for your lightweight remotes sites?
