2013年12月10日星期二

Cisco 3560 Routing Between Vlans



I have got a cisco WS-C3560V2-24TS-S  which i use as my core switch, it is setup with multiple vlans and ip ranges. 

i am trying to get the 10.0.10.x ip range to be able to communicate with the 192.168.4.x range, my routing table is below and shows everything as i believe it should but when i try to ping from the 10.0.10.x range it fails? anyone have any ideas? do i need to do anything different as i am using vlan tagging? 
do sh ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP        D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area        N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2        E1 - OSPF external type 1, E2 - OSPF external type 2        i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2        ia - IS-IS inter area, * - candidate default, U - per-user static route        o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
     172.16.0.0/24 is subnetted, 1 subnets C       172.16.16.0 is directly connected, Vlan30 C    192.168.4.0/24 is directly connected, Vlan1      10.0.0.0/24 is subnetted, 3 subnets C       10.0.10.0 is directly connected, Vlan20 C       10.1.1.0 is directly connected, Vlan100 C       10.0.0.0 is directly connected, Vlan10      150.150.0.0/21 is subnetted, 1 subnets C       150.150.0.0 is directly connected, Vlan40


then yes, you need the static route on the host to point to 192.168.4.253 as that is the gateway for vlan 1 (directly attached network). Even if you add a static route on the router (192.168.4.254) that all other vlans are accessed via a static route of 192.168.4.253, this will cause TCP Half sessions. Example (assuming that no static route to 192.168.4.253 exists on the 192.168.4.10 host), if 10.0.10.10 sends a TCP syn packet to 192.168.4.10, the packet is sent via the default gateway (10.0.10.254). A routing table lookup is conducted on the 3650, the 192.168.4.0/24 network is directly attached via vlan 1, an ARP lookup is executed for 192.168.4.10 to obtain the MAC address to building the layer 2 frame, it is located and the packet is forward out directly via VLAN 1. The issue is on the return (TCP SYN), 192.168.4.10 sends a TCP SYN packet back to 10.0.10.10, so the packet is sent to the GW, 192.168.4.254. A routing table lookup is conducted and the route is via 192.168.4.253, so the packet is forwarded to the WS-C3560X-24P-L   The 10.0.10.0/24 is directly attached on the 3560, an ARP lookup is executed for 10.0.10.10 to obtain the MAC address to building the layer 2 frame, it is located and the packet is forward out directly via VLAN 20 addressed directly to 10.0.10.10 and NOT sent back to 192.168.4.254 where the path of the TCP Packet was originated from. Any SPI Firewall will typically drop the TCP SYN packet as it does not have an entry in its SPI table for any SYN sessions from the originating host. In some cases you can disable SYN checking, but this might cause unforeseen issues. At any rate, best practice dictates to create another vlan for your Internet traffic (Vlan 2) and move the link over to that vlan, then you can use the 3560 as the aggregate gateway for all your traffic (Local and traffic destined to the Internet). The addition of the static route on the host is required for the topology you have that exists.

2013年12月9日星期一

Cisco Catalyst 3560 48port; lots of ports not power PoE devices

Here's a weird experience I'm having with some of my cisco WS-C3560X-24T-L  switches. After a power surge occurred, a few of my catalysts can't seem to power any of my PoE devices such as Cisco phones and AP's. These switches are plugged into an APC managed PDU which are connected to an APC RT 10k UPS.

It just seems like maybe the switches are not getting enough power required to fully enable PoE for each port. Do you think this is the case when plugged to a PDU?

I originally had them plugged to a separate UPS and had no issues. I have a Fluke Linkrunner AT 2000 that I use to diagnose ports but I'm not sure if this tool can test the PoE.


I would try plugging a switch directly into house power and bypass the UPS/PDU altogether. If you magically get full PoE like before, then the finger starts to point at the UPS/PDU. If you get the same results, perhaps the WS-C3560X-24T-S   switch got hit by the surge in a way that (very strangely) only affected PoE.

2013年12月8日星期日

Cisco 3560 ACL and Syn Protect

We have added the given acl to our cisco WS-C3560X-48T-L  router
Extended IP access list 103
    10 permit tcp any host 77.223.156.156 eq www log (136803 matches)
    20 permit tcp any host 77.223.156.156 eq ftp log
    30 permit tcp any host 77.223.156.156 eq telnet log
    40 permit tcp any host 77.223.156.156 eq pop3 log
    50 permit tcp any host 77.223.156.156 eq smtp log
    60 permit tcp any host 77.223.156.156 eq 443 log
    70 permit tcp any host 77.223.156.156 eq 3389 log (2508 matches)
    80 permit tcp any host 77.223.156.156 eq domain log
    90 permit udp any host 77.223.156.156 eq domain log (68 matches)
    100 deny ip any host 77.223.156.156 log (5633 matches)
    110 permit ip any any (24 matches)
and as you should see there is a high match of www port and if we check it deeply ,
it seems as a ddos or botnet. should i protect the machine from the router for syn ?
you will see multiple same ip address.


Looks like it must be a router feature and not a layer 3 switch feature for Cisco. WS-C3560X-48T-S  Another reason to add to the list of why l3 switches shouldn't be placed on the internet edge. Sorry man, but you need some type of firewalling. An acl just isn't enough these days.

 For more information about Cisco products, please click here. 

2013年12月4日星期三

OSPF Between 2 Cisco 3560 Switches

I would like to connect two switches to one another, with each switch connected to one host. I would like to use a dynamic routing protocol such as OSPF between the two switches, and make sure that Switch1 can ping Host2 and Switch2 can ping Host1 and vice versa.

How can this be done using 2 Cisco WS-C3560X-48PF-S Switches that have Layer 3 capability?

Host1 --------- Switch1 ---------------- Switch2 -------- Host2

Host1: 172.16.10.2 255.255.0.0
            Interface fe1/1 - connected to Switch1 - switchport access vlan 2

Switch1: VLAN 2 - 172.16.10.1 255.255.255.0
              interface g1/1 - 10.1.1.1 255.255.255.0 (connected to Switch2)

Switch2: VLAN 3 - 172.17.10.1 255.255.255.0
              interface g1/1 - 10.1.1.2 255.255.255.0 (connected to Switch1)

Host2: 172.17.10.2 255.255.0.0
            Interface fe1/1 - connected to Switch 2 - switchport access vlan 3


You will also need to add the command

network 10.1.1.0 0.0.0.255 area 0

under router ospf 10 to both switches.

Also, I assume this is just a typo, but host 1 and switch 1 have inconsistent subnet masks.

OSPF normally only comes with IPservices image and not IP Base image. The 3560-C series data sheet says that it only suport IP Base image, yet it mentions that support for OSPF in included. Are there any restictions in the OSPF support?.


Configuring OSPF on a catalyst WS-C3560X-48PF-L  Switch to connect to our building next door by way of fiber.  The other two switches in the other building are running OSPF, I am trying to connect to the other building and access a server which is on a switch running OSPF.  I am trying to configure the switch here to run OSPF and be able to see the neighbor, but currently can't although I've identified the networks.  Maybe I'm missing something, I've followed the instructions but  something is not right.

Connecting a CradlePoint CBA750 to a Cisco 3560 switch

Need your help.  Our company made a decision to implement a network backup that uses Verizon LTE 4G.  The setup is as follows:  On the corporate side there is a Cisco 2911 using VPN going to the Verizon private network.  On the remote side we have a series of layer 3 switches (Cisco WS-C3560X-24P-L).  On the suggestion of Verizon we purchased CradlePoint CBA750 modem/router devices. 

We need to use the Verizon connection as the backup.  The primary is Metro Ethernet going through another ISP.  When connecting the CradlePoint to the switch the link will not activate (actually receive a down/ err-disable).  I can use a PC directly to the CradlePoint Ethernet port and test successfully.

My question is does anyone have experience in connecting the CradlePoint to Cisco Switches?  I have eliminated the cable (it is straight-through)  and also made a call to both Verizon and CradlePoint (have not called Cisco as of this writing)  The CradlePoint is being set in IP Pass-through mode and is receiving its address from Verizon.  I think I have covered the basics so if anyone could lead me in the right direction I would appreciate it.  Thanks.

I've worked on this before and had a couple difficulties. First make sure the DHCP option is turned off on the CP. With your laptop, verify what IP you are getting. I ran in to an issue where Verizon was handing out an IP that wasn't an officially legitimate IP. It was something in the realm of 9.9.9.163/30. Windows didn't mind this IP, but when you look closer the subnet of the IP was 9.9.9.160/30, and the 163 address was actually a broadcast address according to subnetting rules. Not sure how or why VZ was handing that out, but I had to put in a request to have my public IP changed. This may or may not be your case.

For the Err-disable, did you see the reason for the err? "show int status err" will give you better details. Also, check the speed/duplex settings on both devices.
Here is the configuration for the Fast Ethernet Port
interface FastEthernet0/1
 switchport access vlan 140
 switchport mode access
 speed 100
 duplex full

Jun 27 12:40:46: %ILPOWER-7-DETECT: Interface Fa0/1: Power Device detected: IEEE
 PD
Jun 27 12:40:47: %ILPOWER-5-IEEE_DISCONNECT: Interface Fa0/1: PD removed

I believe that explains the port flapping.  Am I getting this error due to the CradlePoint or is the switch looking for the device to not have a power supply attached?


Thanks to all of you.  I was able to find out that the Cisco WS-C3560X-24P-S switch considered  the CradlePoint a PoE device.  Since I am using the power cord on the CradlePoint it was causing an issue with the switch.  Turned off the power on the port by using the 'power inline never' command.  The port is up now with no flapping.  I got a piece of the answers from the posts I received so thanks to the posters.

2013年12月2日星期一

Cisco 3560 to SG200 VLAN trunking

I need desperate help with my limited Cisco knowledge. I am setting up a VM lab I need to do vlan trunking between my Master L3 WS-C3560V2-24TS-S switch to SG200 L2 Switch .

I have setup a couple of vlans in the master and I would like the sg200 talk to these vlans. I have tried at least five different possible solutions and no luck so far. The sg200 is only web based, No CLI supported. I will attach screenshots from my sg200 and txt from the 3560 config file.

To start my project I would like to only start with Vlan 224 and be able to talk to this vlan from the sg200.

Cisco gi0/1 is connected to my Comcast router with a 192 Network DHCP
Links Between: Cisco 3560 Interface gi0/4  to SG200 GE26.

The device should now be access through the DHCP address, find this by looking up the server or doing an nmap scan and look for Cisco equipment.
Now create the VLANs you need and name them under the "Create VLAN tab".

The created VLAN/s now need to be added to the desired trunk port on the smart switch, this is done through "Port VLAN Membership". Simply select the trunk port, edit the details and select the VLAN that is to be allowed on the trunk, tick Membership and then click the arrow to move it in to the selected column.

The VLANs that are needed on the trunk should now be showing on the Port VLAN Membership page.

Access ports can now be configured, which is straight forward by changing the required ports to access ports and defining which VLAN is required, which is done through "Interface Settings". This won't actually work until we configure a trunk port on the other switch.

Depending on your native vlan settings, you may have to change the management vlan setting before changing the port on the other switch to a trunk. Just a reminder make sure the management vlan is a member of the trunk port. This can be done through the "IPv4 Interface".


The smart WS-C3560V2-48TS-S switch might be unconnectable if the management VLAN has been changed, therefore we need to enable a trunk port on the other switch to gain access again.

2013年11月28日星期四

Cisco 3560 Routing Between Vlans

I have got a cisco WS-C3560X-48P-S  which i use as my core switch, it is setup with multiple vlans and ip ranges.
i am trying to get the 10.0.10.x ip range to be able to communicate with the 192.168.4.x range, my routing table is below and shows everything as i believe it should but when i try to ping from the 10.0.10.x range it fails? anyone have any ideas? do i need to do anything different as i am using vlan tagging?
do sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

     172.16.0.0/24 is subnetted, 1 subnets
C       172.16.16.0 is directly connected, Vlan30
C    192.168.4.0/24 is directly connected, Vlan1
     10.0.0.0/24 is subnetted, 3 subnets
C       10.0.10.0 is directly connected, Vlan20
C       10.1.1.0 is directly connected, Vlan100
C       10.0.0.0 is directly connected, Vlan10
     150.150.0.0/21 is subnetted, 1 subnets
C       150.150.0.0 is directly connected, Vlan40

then yes, you need the static route on the host to point to 192.168.4.253 as that is the gateway for vlan 1 (directly attached network). Even if you add a static route on the router (192.168.4.254) that all other vlans are accessed via a static route of 192.168.4.253, this will cause TCP Half sessions. Example (assuming that no static route to 192.168.4.253 exists on the 192.168.4.10 host), if 10.0.10.10 sends a TCP syn packet to 192.168.4.10, the packet is sent via the default gateway (10.0.10.254). A routing table lookup is conducted on the 3650, the 192.168.4.0/24 network is directly attached via vlan 1, an ARP lookup is executed for 192.168.4.10 to obtain the MAC address to building the layer 2 frame, it is located and the packet is forward out directly via VLAN 1. The issue is on the return (TCP SYN), 192.168.4.10 sends a TCP SYN packet back to 10.0.10.10, so the packet is sent to the GW, 192.168.4.254. A routing table lookup is conducted and the route is via 192.168.4.253, so the packet is forwarded to the 3560. The 10.0.10.0/24 is directly attached on the 3560, an ARP lookup is executed for 10.0.10.10 to obtain the MAC address to building the layer 2 frame, it is located and the packet is forward out directly via VLAN 20 addressed directly to 10.0.10.10 and NOT sent back to 192.168.4.254 where the path of the TCP Packet was originated from. Any SPI Firewall will typically drop the TCP SYN packet as it does not have an entry in its SPI table for any SYN sessions from the originating host. In some cases you can disable SYN checking, but this might cause unforeseen issues. At any rate, best practice dictates to create another vlan for your Internet traffic (Vlan 2) and move the link over to that vlan, then you can use the WS-C3560V2-24PS-S as the aggregate gateway for all your traffic (Local and traffic destined to the Internet). The addition of the static route on the host is required for the topology you have that exists.

2013年11月26日星期二

Why window DHCP server is connected to a cisco routing switch in a LAN

We have Cisco WS-C3560X-48P-L switch within our LAN, which connects to a modem and through the fibre network to the service provider. This switch does the internet routing  for our network.

We have PDC Windows 2008 server , which is also our DHCP server.
I have observed that the LAN port of the DHCP server is connected to one of the port in the Cisco 3560 switch.

We have another Cisco Core switch and on this switch all the remaining servers LAN ports get connected and also the uplinks from other segment comes and  gets connected to this switch.

So there is also a RJ45 cable patched between the Core and the Cisco 3560.

I am not clear as  why the DHCP LAN port is patched into the Cisco 3650 rather than the Core switch.
We have been allocated 10.14.116/22 to our network and the scope 10.14.116.1 - 10.14.119.254  is configured on our DHCP server.

I am not able to understand this connectivity. Please tell me technical how it works.
Any tutorial or link to understand this type of infrastructure connectivity will be great.

I am not clear as  why the DHCP LAN port is patched into the Cisco 3650 rather than the Core switch. <-- I think no one here can answer this ^^

For technically why it works, you provided information is not enough to understand, and many scenario can do. Most common case is the core switch has configured ip helper to relay the DHCP request to your server

The port/server can be connected anywhere i.e in any switch as long as the particular port is under the same relevant vlan. Which physical switch, it does not matter. But since you have to connect it somewhere so anywhere, keeping the port config same.......

It all depends on what is connected to the core WS-C3560X-48P-S switch.  IP helpers can be setup that route all DHCP broadcasts to the known DHCP server.

2013年11月25日星期一

Fiber connection question to Cisco 3560 switch

we are connecting a Cisco WS-C3750X-48T-L switch to a Cisco WS-C3560V2-24TS-S with Fiber. We have two SFP connectors in each switch. On the Cisco 3750, both connections are green. On the 3560, one is amber and one is green. We are able to send traffic from one switch to another but we aren't sure why one is amber. We want to combine the connectors so that we can send 2GB over the link. When we unplug either fiber connection on the Cisco 3560, the other connection turns green. My first question is why is one connection amber and secondly how do we combine the connections so that we can utilize 2GB.

 we are connecting  small network environment with one layer 3 Catalyst 3750 and two Catalyst 3560s running VLANs across them. All switches are placed in the same network rack.

There is some debate about how best to connect them together:

a) with LC fibre cables and SFP fibre adapters.

b) with CAT5e cables and SFP Gigabit adapters.

c) with Cisco Interconnect cables (but unfortunately we already have a bucket load of SFP gbic adapters

1) Is there any benefit of using fibre to interconnect them over such a short distance? (they're located above/below each other in the same rack!). If so, what are the benefits?

My understanding is that fibre really only offers better latency which is important over longer distances, and the SFP ports are gigabit no matter if you use fibre or CAT5e the speed is the same - therefore I can see no point in interconnecting them with fibre - but then again, I am not a Cisco expert.

So you have 2 fibers between switches which effectively creates a loop.  So spanning-tree would then just one of the ports down to break the loop.

What you want to do is setup an etherchannel connection between the switches using both of those ports on each switch.  This creates a virtual interface called a port-channel that looks like one connection from spanning-tree's viewpoint.  Then it will send traffic down both links

The use of fibre optic against Cat5e began to become popular when used to span different floors and/or building.  Unlike Cat5e which has a limit of 100 metres, specific fibre optic cables can go from short range (multi-mode) to long range (single-mode). Now if budget permits, I would always choose uplinks or inter-connection to be fibre optic over copper (Cat5/Cat5e or Cat6).


If fibre optic isn't feasible then get Cat6 instead.

2013年11月22日星期五

OSPF Between 2 Cisco 3560 Switches

I would like to connect two switches to one another, with each WS-C3560X-24P-L switch connected to one host. I would like to use a dynamic routing protocol such as OSPF between the two switches, and make sure that Switch1 can ping Host2 and Switch2 can ping Host1 and vice versa.

How can this be done using 2 Cisco 3560 Switches that have Layer 3 capability?

Host1 --------- Switch1 ---------------- Switch2 -------- Host2

Host1: 172.16.10.2 255.255.0.0
            Interface fe1/1 - connected to Switch1 - switchport access vlan 2

Switch1: VLAN 2 - 172.16.10.1 255.255.255.0
              interface g1/1 - 10.1.1.1 255.255.255.0 (connected to Switch2)

Switch2: VLAN 3 - 172.17.10.1 255.255.255.0
              interface g1/1 - 10.1.1.2 255.255.255.0 (connected to Switch1)

Host2: 172.17.10.2 255.255.0.0
            Interface fe1/1 - connected to Switch 2 - switchport access vlan 3
for very basic functionality try this on both switches:

switch1:

router ospf 10
 network  172.16.10.0 0.0.0.255 area 0

switch2:
router ospf 10

 network WS-C3560V2-48TS-S 172.17.10.0 0.0.0.255 area 0

2013年11月20日星期三

Cisco 3560 Lock IP Address

We want WS-C3560V2-24PS-S to lock an ip address to mac number. But we are not using DHCP , so is there any way to mac base protection on layer3 mode

You can use the following command...

arp <IPaddress> <MACaddress> arpa

If you remove the switch IP address through a Telnet session, your connection to the switch will be lost.

Hosts can find subnet masks using the Internet Control Message Protocol (ICMP) Mask Request message. Routers respond to this request with an ICMP Mask Reply message.

You can disable IP processing on a particular interface by removing its IP address with the no ip address command. If the switch detects another host using one of its IP addresses, it will send an error message to the console.

You can use the optional keyword secondary to specify an unlimited number of secondary addresses. Secondary addresses are treated like primary addresses, except the system never generates datagrams other than routing updates with secondary source addresses. IP broadcasts and ARP requests are handled properly, as are interface routes in the IP routing table.

This example shows how to configure the IP address for the Layer 2 switch on a subnetted network:

Switch(config)# interface vlan 1
Switch(config-if)# ip address 172.20.128.2 255.255.255.0

This example shows how to configure the IP address for a port on the Layer 3 switch WS-C3560V2-48PS-S:

Switch(config)# ip multicast-routing
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# no switchport

Switch(config-if)# ip address 172.20.128.2 255.255.255.0

Cisco Catalyst 3560 48port; lots of ports not power PoE devices

Here's a weird experience I'm having with some of my cisco WS-C3560V2-24TS-S switches. After a power surge occurred, a few of my catalysts can't seem to power any of my PoE devices such as Cisco phones and AP's. These switches are plugged into an APC managed PDU which are connected to an APC RT 10k UPS.

It just seems like maybe the switches are not getting enough power required to fully enable PoE for each port. Do you think this is the case when plugged to a PDU?

I originally had them plugged to a separate UPS and had no issues. I have a Fluke Linkrunner AT 2000 that I use to diagnose ports but I'm not sure if this tool can test the PoE.


I would try plugging a switch directly into house power and bypass the UPS/PDU altogether. If you magically get full PoE like before, then the finger starts to point at the UPS/PDU. If you get the same results, perhaps the WS-C3560X-24P-L switch got hit by the surge in a way that (very strangely) only affected PoE.

2013年11月14日星期四

Huawei S3200 display debugging wlan all

 Wcwp submodule- AR3260 switch information                                             
 -----------------------------------------------                               
 sock-module-switch       : on                                                 
 fwd-module-switch        : on                                                 
 fr-module-switch         : on                                                  
 rt-module-switch         : on                                                 
 fsm-module-switch        : on                                                 
 codec-module-switch      : on                                                  
 dtls-module-switch       : on                                                 
 comm-module-switch       : on                                                 
 sfwd-module-switch       : on                                                  
 -----------------------------------------------                               
 Wcwp debug-switch information                                                 
 -----------------------------------------------                                
 Error switch             : off                                                
 Info switch              : off                                                
 Message switch           : off                                                
 Packet receive switch    : off                                                
 Packet send switch       : off                                                
 -----------------------------------------------                               
 Wmap module switch :                                                           
 -----------------------------------------------                               
 Error switch             : off                                                
 Info switch              : off                                                 
 Message switch           : off                                                
 Packet receive switch    : off                                                
 Packet send switch       : off                                                 
 -----------------------------------------------                               
 Wsec module switch :                                                          
 -----------------------------------------------                                
 Error switch             : off                                                
 Info switch              : off                                                
 Message switch           : off                                                 
 Packet receive switch    : off                                                
 Packet send switch       : off                                                
 -----------------------------------------------                               
 Wess module switch :                                                          
 -----------------------------------------------                               
  Error switch                  : off                                          
  Info switch                   : off                                          
  Message switch                : off                                          
  Packet receive switch         : off                                          
  Packet send switch            : off                                          
 -----------------------------------------------                               
 Wglb module switch :                                                          
 -----------------------------------------------                               
 Error switch            : off                                                 
 Info switch             : off                                                 
 -----------------------------------------------                                
 Wlbm module switch :                                                          
 -----------------------------------------------                               
 Error switch            : off                                                  
 Info switch             : off                                                 
 -----------------------------------------------                               
 Wlbm module switch :                                                          
 -----------------------------------------------                               
 Error switch            : off                                                 
 Info switch             : off                                                 
 -----------------------------------------------                               
 Wcfg module switch :                                                          
 -----------------------------------------------                               
 Error switch            : off                                                  
 Info switch             : off                                                 
 Message switch          : off                                                 
 Packet receive switch   : off                                                  
 Packet send switch      : off                                                 
 -----------------------------------------------                               
 Wrfm module switch :                                                           
 -----------------------------------------------                               
 Error-Switch            : off                                                 
 Info-Switch             : off                                                  
 Message-Switch          : off                                                 
 Packet-Receive-Switch   : off                                                 
 Packet-Send-Switch      : off                                                 
 -----------------------------------------------                               
 Wsta module switch:                                                           
 -----------------------------------------------                               
 Error-Switch            : on                                                  
 Info-Switch             : on                                                  
 Message-Switch          : on                                                  
 Packet-Receive-Switch   : on                                                  
 Packet-Send-Switch      : on                                                  
 -----------------------------------------------           

For more Huawei ME60-X3 information please click here


2013年11月11日星期一

Cisco Catalyst 3560-X Ethernet Switch

Cisco WS-C3560X-24T-L series products have two main categories, Cisco 3560V2 and Cisco 3560X, 3560V2 is FE based switch while 3560X is GE based switch, the previous Cisco 3560, 3560G and 3560E are end of sales now and replaced by Cisco 3560V2 and Cisco 3560X. Cisco Catalyst 3560 v2 Series consumes less power than its predecessors. The 3560-X Series Switches is an enterprise-class lines of stackable and standalone switches. 3Anetwork.com keeps regular stock of 3560V2 and 3560X switches. Among all Cisco Catalyst 3560 switches, WS-C3560V2-24TS-S, WS-C3560V2-24PS-S WS-C3560X-24T-L, WS-C3560X-24T-S and WS-C3560X-24P-S are best selling models. 3Anetwork.com offers best Cisco 3560 Price, Cisco 3560V2 Price, Cisco 3560X Price, ship to worldwide.

I just put together a spreadsheet for the Clear Winds sales team on a comparison between Cisco 3750-X switches and below, as opposed to Brocade ICX 6610 switches and below.  When you are comparing apples to apples (and you should), Brocade always seems to win from my perspective.
Here are the apples to apples comparisons:
Cisco 3750-X compares to a Brocade ICX 6610
Cisco 3750G/3560-X compares to a Brocade FCX series/ICX 6610
Cisco 2960-S compares to a Brocade ICX 6450

The Cisco Catalyst3750-X and 3560-X Series Switches are an enterprise-class lines of stackable and standalone switches, respectively. These switches provide high availability, scalability, security, energy efficiency, and ease of operation with innovative features such as Cisco StackPower (available only on the Catalyst 3750-X), IEEE 802.3at Power over Ethernet Plus (PoE+) configurations, optional network modules, redundant power supplies, and Media Access Control Security (MACsec) features.


For more Cisco  information please click here

2013年11月5日星期二

Cisco WS-C3560X-48T-S 3560X Series 48 Port Catalyst Switch

The Cisco Catalyst 3560X-48T-S Layer 3 Switch Ethernet Switch is an enterprise-class lines of stackable and standalone switch, respectively. This switch provides high availability, scalability, security, energy efficiency, and ease of operation with innovative features such as Cisco StackPower, IEEE 802.3at Power over Ethernet Plus (PoE+) configurations, optional network modules, redundant power supplies, and Media Access Control Security (MACsec) features

The Cisco Catalyst 3560-X Series Switches are an enterprise-class lines of stackable and standalone switches, respectively. These switches provide high availability, scalability, security, energy efficiency, and ease of operation with innovative features such as IEEE 802.3at Power over Ethernet Plus (PoE+) configurations, optional network modules, redundant power supplies, and Media Access Control Security (MACsec) features. The Cisco Catalyst 3560-X enhances productivity by enabling applications such as IP telephony, wireless, and video for borderless network experience.



For more Cisco 3925 price information please click here

2013年10月28日星期一

How to configure SDM Template on Catalyst 3560-X Switch?

The WS-C3560X-24T-L Series Switches is an enterprise-class lines of stackable and standalone switches.


configure terminal

Enter global configuration mode.

Step 2

sdm prefer {access | default | dual-ipv4-and-ipv6 {default | routing | vlan} | routing | vlan}

Specify the SDM template to be used on the switch. The keywords have these meanings:

access—Maximize system resources for ACLs.

default—Give balance to all functions.

dual-ipv4-and-ipv6—Select a template that supports both IPv4 and IPv6 routing.

default—Balance IPv4 and IPv6 Layer 2 and Layer 3 functionality.

routing—Provide maximum usage for IPv4 and IPv6 routing, including IPv4 policy-based routing.

vlan—Provide maximum usage for IPv4 and IPv6 VLANs.

routing—Maximize routing on the switch.

vlan—Maximize VLAN configuration on the switch with no routing supported in hardware.

Note       Do not select a routing template when the switch is running the LAN base feature set. Although visible in the command-line help, the LAN base feature set does not support routing.

Use the no sdm prefer command to reset the switch to the default desktop template. The default template balances the use of system resources.

Step 3

end

Return to privileged EXEC mode.

Step 4

reload

Reload the operating system.


For more Cisco information please click here: 
http://www.3anetwork.com/cisco-ws-c3560x-24t-s-price_p45.html


How do I configure a C3750-X-12S-S?

We recently purchased a C3750-X-12S-S device. I am having  a brutal time trying to configure it. I've tried:
1. The web interface. Using IE9 on a Windows7 device, the web interface allows me to login, but doesn't load properly. By that I mean, I'll click on something in the left menu and it doesn't fully come up in the right-side pane. Basically rendering it unusable. It did allow me to do Express Setup, but that was about it.
2. The Cisco Network Assitant. When I try to bring it up in CNA (v5.6.3), the device shows as unsupported. A quick check of the Release Notes for CNA shows that it is not listed as one of the supported models of 3750-X device as you can see below:
"Catalyst 3750-X switches (WS-C3750X-24T-L, WS-C3750X-48T-L, WS-C3750X-24P-L, WS-C3750X-48P-L, WS-C3750X-48PF-L, WS-C3750X-24T-S, WS-C3750X-48T-S, WS-C3750X-24P-S, WS-C3750X-48P-S, and WS-C3750X-48PF-S)"
3. When I try to SSH to the device for CLI access, i cannot seem to get on to configure it. I enabled Telnet via the web interface (one of the few things it allowed me to do), but I still cannot telnet either. I tried SSH'ing and it prompted me for login, but I coulnd't get on, using the password I setup in Express Setup. I tried a variety of usernames but no luck.
Probably the best bet is the CLI via console it would seem (although being relatively new to the CiscoIOS, I was hoping for some gui configuration tools!).

All switch models can be configured with four optional network modules. The UPOE, PoE+, and non-PoE switch
models are available with either the LAN Base or IP Base feature set. IP Services feature set is available as an
upgrade option at the time of ordering or through a license at a later time. The GE SFP switch models are
available with either IP Base or IP Services feature set.


For more Cisco information please Check here
 

2013年8月30日星期五

Cisco 819 lost everything on flash, but is still working ? please help

Question:

System image Cisco 3925 file is "flash:c800-universalk9-mz.SPA.152-4.M1.bin"

Cisco C819HG+7-K9 (revision 3.0) with 492620K/31667K bytes of memory.

cisco819#sh flash:
-#- --length-- -----date/time------ path
1     50833244 Feb 29 1984 00:01:00 +00:00 c800-universalk9-mz.SPA.152-4.M1.bin

209338368 bytes available (50835456 bytes used)

cisco819#

Cisco site sayes that latest image for My Router should be the one loaded right now...
It working, but unable to see certain things in cisco configuration proffesional...Fx Cellular 0
I tryed to downgrade, wich resultet in something like " Unsigned imaged found, Bailing out" then I had to do a tftpdnld, to recover the latest ios from Cisco
Stupid me, did not take a backup before it was to late
Anyway i did make it work again, but here comes my question

When i did the tftpdnld it told me that everythin was erassedm but i had no other way..
After a succesfull tftpdnld. i reboot and amazingly i had internet again

The strange thing is....I have a running-config if i ssh to it. but according to my flash: there is only my IOS.BIN
How is that working?
Anyone know where the latest working image can be found. because Cisco states the the one right now i the right..but still i cant see cellular 0 in CCP
But ita actualy the one making me able to write to this site, right now
BR Anders Bramsen

Answer:

When i did the tftpdnld it told me that everythin was erassedm but i had no other way..
After a succesfull tftpdnld. i reboot and amazingly i had internet again

This is because the configuration on Cisco routers is not stored in the FLASH memory but rather in a different place (and chip) called the NVRAM memory. This reason for this is historical - FLASH memory can be rewritten only a limited number of times and therefore it was not suitable to hold the startup-config file that can rewritten frequently. Your FLASH memory may really have been erased after the tftpdnld command but it did not damage your configuration stored in NVRAM. Try using the dir nvram: command to see its contents.

In order to download images for your Cisco router, you need to have a valid support contract. Cisco does not publish IOS images for free access. Cisco 3925 router 

For more info, http://switch.2329893.n4.nabble.com/3900-router-td14.html

2013年8月29日星期四

ip forward-protocol udp echo

Question:

was looking for WS-C3560V2-48TS-S  documentation to explain "ip forward-protocol udp echo " however, i

receive info on everything except for the actual "echo" portion. essentially i am

trying to find out if i need it or not.

Answer:

i do not believe you need it but reading here you will figure it out:

http://en.wikipedia.org/wiki/Echo_Protocol WS-C3560V2-24TS-S

Original comes from http://switch3560.drupalgardens.com/