2014年1月23日星期四

Cisco 3750 switches and eigrp

I am practicing my cisco routing skills and am trying to set up eigrp routing between two cisco catalyst WS-C3750V2-24PS-S   switches. I cannot seem to get eigrp to work. I am new here and tried to attach the config files but the site won't let me so I pasted them below. I can ping from one switch to the other and to the vlans on each back and forth. However, this is only because I created a default route on each switch to the other switch. When I do the show ip route command I don't see any eigrp routes showing. When I do the various other commands for eigrp like show neighbors, nothing displays in terms of other swithces. I can go into more detail but please take a look at my configs and let me know if there is anything obviously wrong with the setup of eigrp.
mktest3 switch config below
sh run
Building configuration...
Current configuration : 4401 bytes
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname mktest3
boot-start-marker
boot-end-marker
aaa new-model
aaa authentication login doc local
--More-- !
aaa session-id common
switch 2 provision ws-c3750g-12s
system mtu routing 1500
ip subnet-zero
ip routing
spanning-tree mode pvst
--More-- spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
vlan internal allocation policy ascending
interface Port-channel1
switchport trunk encapsulation dot1q
switchport mode trunk
interface GigabitEthernet2/0/1
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode desirable
interface GigabitEthernet2/0/2
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode desirable
interface GigabitEthernet2/0/3
--More-- switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet2/0/4
no switchport
bandwidth 120
ip address 192.168.150.1 255.255.255.0
interface GigabitEthernet2/0/5
interface GigabitEthernet2/0/6
interface GigabitEthernet2/0/7
interface GigabitEthernet2/0/8
interface GigabitEthernet2/0/9
interface GigabitEthernet2/0/10
interface GigabitEthernet2/0/11
interface GigabitEthernet2/0/12
--More-- !
interface Vlan1
no ip address
shutdown
interface Vlan2
ip address 192.168.124.1 255.255.255.0
interface Vlan3
ip address 192.168.125.1 255.255.255.0
interface Vlan4
ip address 192.168.126.1 255.255.255.0
interface Vlan5
ip address 192.168.127.1 255.255.255.0
interface Vlan6
ip address 192.168.128.1 255.255.255.0
interface Vlan7
no ip address
--More-- interface Vlan60
ip address 192.168.130.2 255.255.255.0
router eigrp 1
eigrp event-logging
network 192.168.124.0
network 192.168.125.0
network 192.168.126.0
network 192.168.127.0
network 192.168.128.0
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.150.2 permanent
ip http server
ip http secure-server
ip access-list standard TELNET_ACCESS
permit 192.168.124.3
deny any
ip access-list extended vlan2
--More-- deny ip 192.168.125.0 0.0.0.255 192.168.124.0 0.0.0.255
ip access-list extended vlan3
deny ip 192.168.124.0 0.0.0.255 192.168.125.0 0.0.0.255
control-plane
banner motd ^C UNAUTHORIZED ACCESS IS PROHIBITED FOR INFORMATION, CONTACT DOC.HELPDESK@PO.STATE.CT.US ^C
line con 0
line vty 0 4
access-class TELNET_ACCESS in
exec-timeout 20 0
password test
login authentication doc
line vty 5 15
access-class TELNET_ACCESS in
exec-timeout 20 0
password test
login authentication doc
--More-- end
mktest3#
mktest4 switch config below
sh run
Building configuration...
Current configuration : 1449 bytes
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname mktest4
boot-start-marker
boot-end-marker
no aaa new-model
switch 1 provision ws-c3750g-12s
system mtu routing 1500
ip subnet-zero
ip routing
--More-- !
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
vlan internal allocation policy ascending
interface GigabitEthernet1/0/1
no switchport
bandwidth 100
ip address 192.168.150.2 255.255.255.0
!
--More-- interface GigabitEthernet1/0/2
switchport access vlan 20
interface GigabitEthernet1/0/3
interface GigabitEthernet1/0/4
interface GigabitEthernet1/0/5
interface GigabitEthernet1/0/6
interface GigabitEthernet1/0/7
interface GigabitEthernet1/0/8
interface GigabitEthernet1/0/9
interface GigabitEthernet1/0/10
interface GigabitEthernet1/0/11
interface GigabitEthernet1/0/12
--More-- interface Vlan1
no ip address
shutdown
interface Vlan20
ip address 192.168.140.1 255.255.255.0
interface Vlan60
ip address 192.168.130.4 255.255.255.0
router eigrp 1
network 192.168.140.0
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.150.1 permanent
ip http server
ip http secure-server
control-plane
--More-- !
line con 0
line vty 0 4
password test
login
line vty 5 15
password test
login
!


mktest4#

2014年1月14日星期二

Loadbalancer IMPI problems. Help with configuring Cisco 3750/2950

I'm attempting to replicate here in the office and find the solution for a problem that we are experiencing at both our data centre sites.This is the problem:

Everytime we load the IPMI WebUI to any of our Loadbalancer Supermicro units the IPMI crashes shortly after logging in and connectivity can only be restored by power cycling the Loadbalancer or disconnecting/reconnecting the network.

There are two Loadbalancers in each rack as Master/Slave.

The IPMI ports are connected to stacked Cisco WS-C3750X-24T-L   switches into a management VLAN.

As a potential solution we have decided to have a switch just for the IPMI/RSAs but this is currently not working as expected as there is no connectivity from the internal network to the IPMI port even though the VLAN is correct.

The crossed cables connecting the 3750 swtiches and 2950 switch are configured as lacp.

Is this a standard configuration or is there and obvious problem with how we're set up?

There needs to be failover in the event that one of the stacked switches fails. The only single point of failure is the 2950, this isn't ideal but most of the servers in the rack only have a single remote management NIC.

Below is a diagram. If you need any more information just ask.
You already have VLAN tagging with the "switchport mode trunk" and "switchport trunk encasulation dot1q" commands. What you need is VLAN 103 and 104 on both the WS-C3750X-24T-S   and the 2960 in the vlan database ("show vlan" will tell you if they are there). Then you add a "interface vlan 103" to the 3750 and give it the IP address of the default gateway of your load balancer. And you give your 2960 an "interface vlan 104" and set the IP address to an address of the subnet that you will use for management.


When in doubt please post configs without passwords/keys.