10G Cisco switch

Similar Questions

• Why I can't command show running on cisco switch

  On a single switch, I found that some commands because they show execution or copy running-config tftp: on cisco switch WS-C2960X-24TS-L does not work it see more below. How I can use the command then show generally. Thank you.

  Building1_FAA_6F_SW3 #sh run
  Building configuration...

  Current configuration: 100 bytes
  !
  ! No change since the last restart configuration
  !
  boot-start-marker
  boot-end-marker
  !
  !
  !
  !
  !
  !
  end

  ---------------------------------------------------

  Building1_FAA_6F_SW3 #copy running-config tftp:
  ^
  Invalid entry % detected at ' ^' marker.

  OK, so the information you provided in your latest messages confirm that the privilege level you get via telnet/vty is different from the one you get via the console. This is due to the configuration of AAA which applies to the vty ports but not on the console port.

  So if you want the same rules apply to the console port, then you must configure the port console for AAA as well.

  If you don't want these rules then you need to remove the AAA configurations. The best way to remove these is by typing 'no new aaa - model' However, careful not to lock you out of the unit. Make sure you have local accounts with the privilege level 15 and you also know the active password/secret.

  I hope this helps!

  Thank you for evaluating useful messages!

• To the main unit Infrastructure Cisco switch port

  Hello.

  I had a doubt as to the Port of the Switch in my Cisco Switch for a camera of the first Infrastructure.

  This port must be a Switchport to access or a Switchport Trunk?

  What is your recommendation on this subject? What is best practice?

  Thank you very much.

  Access port should work fine. You do not configure a VLAN on the device itself, just the IP address / subnet and default gateway.

  Thank you

  Ric

• Configuration Wireless 3G as online backup with cisco switch layer 3?

  Hi all

  We have an existing GPRS modems for data transfer between 2 different sites, this connection is a bit slow to no more than approximately 114 Kbps, the idea is to add a 3G modem, so the solution will be based on a two-way communication lines which are 3G network and the GPRS network.

  The line GPRS will be the main and 3G will be secondary, this redundancy offers a high level of availability of communication between the two sites.

  is it possible to configure this redundancy with a cisco switch layer 3? If this is the case do you have a tutorial or a link which explain how to do this work with a layer switch 3 ciso?

  all information will be useful for me, thanks

  Hello

  The config is one provided by anisaini, but you need to change your NAT like this:

  IP nat inside source MAIN interface map route x/x main interface

  IP nat inside source route-map interface o/o interface secondary SCHOOL

  Interior int z/z interface

  IP nat inside

  int x/x

  NAT outside IP

  int y/y

  NAT outside IP

  access-list 99

  permit x.x.x.x y.y.y.y where x.x.x.x is your home subnet addresses and y.y.y.y is the corresponding generic mask

  PRIMARY route map

  match ip add 99

  match interface x/x

  SECONDARY route map

  match ip add 99

  game interface y/y

  Concerning

  Alain

  Remember messages useful rate.

• Circuits on Cisco Switch SG200-50

  Hi all

  I'm trying to inter vlan routing using Cisco Switch SG200-50 with router Cisco 1941. The router I created three subinterface for VLAN1, 2, 3 and VLAN1 is vlan native. I have a LWAP with Cisco WLC connected to the same switch. I have activated assignemnet vlan dynamic using Windows /NPS. RADIUS Wireless successfully user can authenticate as well the vlan is assigned, but unable to ping the router subinterface.

  On the switch, you must activate the trunk port connected to the router ports and AP, tried all means, what makes the trunk port and General, nothing worked. users are unable to ping the gateway.

  If you have worked on this switch, pls help how to on this subject.

  If the Cisco technical support team can help me, that would be great

  Thanks in advance

  Concerning

  Joe

  Hi Joseph, creating a general port and disable the input filter and label properly login vlan. Also make sure your sub interface are dot1q.

  -Tom
  Please mark replied messages useful

• C300 Cisco switches when Cisco is considering additional CDP?

  Dear all,

  When Cisco plans to support CDP on C300 switches?

  I have it configured with LLDP based on the document "Adding a Cisco Switch series of 300 Business from small to SBCS 2.0", but this isn't the perfect according to me

  Kind regards

  Vellum Tsekov

  Vellum,

  We are very close. We anticipate releasing the firmware supporting CDP, CLI and several other new features this month - June 2011.

  Ivor

• Web authentication with RSA SecureID on a Cisco Switch

  Hello

  I recently searched by linking in our Cisco Switch of GB 2960 S with RSA SecureID via Radius

  I already managed to tie in to ssh access

  but I failed to make it work for http / web access to the switch

  I think it's because we use 'single use' maximum security with RSA SecureID tokens

  the web interface tries to authenticate several times against the Radius server RSA SecureID part

  (agreement on the first authentication, but every time after that he's going to want a different code in token)

  I was wondering if anyone knew a way around this? (if there is a way to get the right switch authenticate once instead of multiple times the radius server)

  FYI, the switch is a WS-C2960S-24TS-L with IOS 15.0 (1) SE2

  Hello Chris,

  You can test the following configuration?

  AAA webtac_grp radius server group

  Server

  expiration of cache 1

  authorization cache profile httpauth

  hiding authentication profile httpauth

  !

  AAA authentication login httpauth cache webtac_grp group webtac_grp

  AAA authorization exec httpauth cache webtac_grp group webtac_grp

  AAA authorization network httpauth cache webtac_grp group webtac_grp

  AAA cache profile httpauth

  all the

  IP http server

  IP http authentication aaa - authentication of the connection httpauth

  IP http authentication aaa exec-authorization httpauth

  RADIUS server host key *.

  I know for sure the above configuration works when you use GANYMEDE + instead of RADIUS in order to avoid multiple guests due to the authentication of JAVA Applets to access the GUI of the IOS. I him have not tested against RSA acting as an authentication server.

  NOTE: As "aaa authorization exec" is configured the RSA should send Service-Type attribute with administrative value for it to work as expected.

  If this was helpful please note.

  Kind regards.

• MacBook as Cisco Switch profiles in 2.1

  I'm experimenting with trying to Mac to the profile to the ISE. 2.1. I tried installing AnyConnect, and for some reason he sees it as a Nexus 7000 switch.

  Here's the debug info

  Attribute: AAA-server value: ise-2
  Attribute: Airespace-Wlan-Id value: 5
  Attribute: AllowedProtocolMatchedRule value: EAP_Chaining_Wireless
  Attribute: AuthenticationMethod value: MSCHAPV2
  Attribute: AuthorizationPolicyMatchedRule value: default
  Attribute: BYODRegistration value: unknown
  Attribute: CacheUpdateTime value: 1465417705907
  Attribute: Called-Station-ID value:20-3a-07-66-96-20
  Attribute: Calling-Station-ID value:a4-5e-60-cf-81-83
  Attribute: CreateTime value: 1464896196500
  Attribute: DestinationIPAddress value: 10.10.207.156
  Attribute: Value DestinationPort: 1812
  Attribute value: DetailedInfo: authentication succeed
  Attribute value: IP address: 10.10.204.114
  Value of the attribute identifier: Device:
  Attribute value: device Port: 32772
  Attribute: Value Type Device: Device Type #All Types of devices
  Attribute: DeviceCompliance value: unknown
  Attribute: DeviceRegistrationStatus value: NotRegistered
  Attribute: value:A4-5E-60-CF-81-83 EndPointMACAddress
  Attribute: EndPointPolicy value: Cisco-switch
  Attribute value: EndPointPolicyID: 4afc4ae0-6d8e-11e5-978e-005056bf2f0a
  Attribute: EndPointProfilerServer value: ise-2
  Attribute: EndPointSource value: RADIUS probe
  Attribute: FailureReason value: 5440 abandoned Endpoint EAP session and began again
  Attribute: FirstCollection value: 1464896196418
  Attribute: value Framed-IP-Address:
  Attribute: value Framed-IPv6-Address:
  Attribute: IdentityAccessRestricted value: false
  Attribute value: IdentityGroup: profile
  Attribute value: IdentityGroupID: b132c920-6d8d-11e5-978e-005056bf2f0a
  Attribute: IsThirdPartyDeviceFlow value: false
  Attribute: LastActivity value: 1465417705904
  Attribute: LastNmapScanTime value: 1465245395228
  Attribute: value: a place #All locations
  Attribute: LogicalProfile value: infrastructure network devices
  Attribute: MACAddress value: A4:5E:60:CF:81:83
  Attribute value: MDMServerID:
  Attribute: MatchedPolicy value: Cisco-switch
  Attribute value: MatchedPolicyID: 4afc4ae0-6d8e-11e5-978e-005056bf2f0a
  Attribute: Value MessageCode: 5440
  Attribute: NAS-IP-address value: 10.10.204.114
  Attribute: NAS-identifier value: WLC-3
  Attribute: NAS-Port value: 1
  Attribute: NAS-Port-Type value: Wireless - IEEE 802.11
  Attribute value: Network Device Profile: Cisco
  Attribute: NetworkDeviceGroups value: location #All locations, Types of devices Device Type #All
  Attribute: NetworkDeviceName value: WLC-3
  Attribute value: NetworkDeviceProfileId: 8ade1f15-aef1-4a9a-8158-d02e835179db
  Attribute: NetworkDeviceProfileName value: Cisco
  Attribute: NmapScanCount value: 1
  Attribute: NmapSubnetScanID value: 0
  Attribute: YES value: Apple, Inc.
  Attribute value: PhoneID:
  Attribute: PolicyVersion value: 32
  Attribute value: PortalUser:
  Attribute: PostureApplicable value: Yes
  Attribute: PostureAssessmentStatus value: NotApplicable
  Attribute value: PostureExpiry:
  Attribute: PostureStatus value: unknown
  Attribute: RadiusFlowType value: Wireless802_1x
  Attribute: RadiusPacketType value: AccessRequest
  Attribute: RegistrationTimeStamp value: 0
  Attribute value: response: {RadiusPacketType = drop ;}
  Attribute: SSID value:20-3a-07-66-96-20
  Attribute: SelectedAccessService value: lack of access to the network
  Attribute value: SelectedAuthenticationIdentityStores: the internal users, ise-2, All_AD_Join_Points
  Attribute: SelectedAuthorizationProfiles value: DenyAccess
  Attribute: Service-Type value: box
  Attribute: StaticAssignment value: false
  Attribute: StaticGroupAssignment value: false
  Attribute: StepData value: 4 = standardized Radius.RadiusFlowType, 5 = EAP_Chaining_Wireless
  Attribute value: TLSCipher: ECDHE-RSA-AES256-SHA
  Attribute: TLSVersion value: TLSv1
  Attribute: TimeToProfile value: 44
  Factor of certainty attribute value: Total: 30
  Attribute value: UniqueSubjectID:
  Attribute: UpdateTime value: 1465245396597
  Attribute: allowEasyWiredSession value: false
  Attribute: Host-name value:
  Value of the attribute: ip:
  Attribute: value operating system switch: Cisco Nexus 7000 (NX - OS 4.2.6) (99% accuracy)
  Attribute: result of operating-system value: Cisco Nexus 7000 switch (NX - OS 4.2.6) (99% accuracy)
  Attribute: SkipProfiling value: false

  Yes you must add the ISE server in your help-dhcp (dhcp relay) in order to obtain information about the DHCP request to profile correctly the devices.

  Even after setting correctly ISE in your DHCP relay, you aren't able to profile?

• Turn on the mtu on cisco switch and cisco user server

  Hi all

  someone got bad luck turning on the mtu on their cisco switch?  I guess I need to turn it on for all because the command is for all ports on cisco catalyst and my server switch is nearby to my user of switches and a broadband bandwidth 6 G or 6 ports, I need to turn it on for all user ports?

  Thanks for any comments, that you can add.

  I assume you mean Jumbo frame support! You shouldn't have any problems with that. Please take a look at for example http://www.cisco.com/en/US/products/hw/switches/ps700/products_configuration_example09186a008010edab.shtml for more details and the configuration of the different switches. According to the model, the parameters are for dedicated ports only or the entire switch. In the case of the switch everything you will need to reload (reboot) switch, so be careful.

  André

• 10G and switch network cards virtual configs

  It will move in a new data center that has a capacity of 10G up to the switches in the baskets.  In our current environment of 1 G, we have seven network cables (6 for ESX) and 1 for the remote management of the server.  If we move to 10G we could cut the cables up to two for ESX and remote management.

  Our current Setup uses a vSwitch for the console, another vSwitch VMotion and private traffic and a third for public traffic.  Each of the three vSwitches has two network adapters physical, assigned to the redundancy.

  If we go with NIC 10 G in the new data center then of course we have only a single virtual switch with two network cards in 10G for redundancy.  I wouldn't have the isolation we have currently with three virtual switches, but given that we're going to use VLAN exclusively in the new data center I don't see a problem.

  Any thoughts on the advantages or disadvantages?  Of course, we will follow the HCL to select a network adapter. 10G compatible

  I think that the reason why many customers today use more than 2 x Gigabit connections is mainly for reasons of security rather than the problems of bandwidth (FT could introduce a little challenge and you could use the same pair or a dedicated third party adapter if you are really concerned for VMotion).

  I wrote about this concept a little back: http://it20.info/blogs/main/archive/2007/10/30/75.aspx

  This hour IB seemed to be the best placed to do this today I think there is a consensus that it's the way things are going to be built... but using 10 Gbit (harmonised rules ethernet - which also includes storage traffic).

  Back to your point I don't think that, in General, a simple increase in bandwidth will solve magically all the segmentation/security concernd that led us to dispose of separate network cards of 6-8-10-22. VLAN / exchanges have been around for a long time and their implementation (or lack of theorof) on the host ESX has been achieved through physical segmentation rather than raw bandwidth concerns. This may be different for you (good for you).

  This will change with Enhanced segmentation/QoS features added to Ethernet protocol to join this converged network that talks about Cisco.

  My 0.0002 cents.

  Massimo.

• How to open the port 161 on the ASA and Cisco switches for monitoring of BB

  Dear all,

  I want to install BB to monitor snmptraps suffering of failure.

  The newspaper shows BB cannot connect to all ports of the switch 161, and I even can't telnet to 161 XXX_17f for example.

  My switches are Cisco C3550, C2950, etc. of the ASA.

  Mon 7 Nov 15:43:03 2011 bbnet cannot connect to the server XXX_17f on port 161

  Mon 7 Nov 15:43:03 2011 bbnet cannot connect to the server XXX_9f on port 161

  Mon 7 Nov 15:43:03 2011 bbnet can't connect to XXX server on port 161

  Thank you

  Anson

  no need to adjust anything in bb-hosts. If you have added setings in bb-hosts, delete them. Also remove associated in bbvar/logs log files. (otherwise, you'll have purple when you delete the SNMP, trap tags bb-hosts)

  A column of trap will be that no show until the device sends a trap to BB.

• GANYMEDE + with 3560 cisco switch configuration issue

  Hi Forum,

  Here's my setup GANYMEDE + on my cisco 3560 switch and my question is, how can I configure the switch, if I would not type enable after I put the user name and password? with configs below, users will need to type activate whenever they connect to the switch in order to enter the user exec mode. Please let me know if there is something missing in my configs to help me avoid typing 'enable '.

  Thanks in advance,

  MacBookAir: ~ MacBook$ ssh [email protected]/ * /.

  Password:

  Switch > en

  Switch #show run | include the aaa

  AAA new-model

  AAA server Ganymede group + mpcc

  AAA authentication login default group Ganymede + local

  activate the default AAA authentication no

  AAA authorization exec default group Ganymede + authenticated if

  AAA authorization commands 1 default group Ganymede + authenticated if

  AAA authorization commands 15 default group Ganymede + authenticated if

  start-stop radius group AAA accounting dot1x default

  AAA accounting exec default start-stop Ganymede group.

  orders accounting AAA 1 by default start-stop Ganymede group.

  orders accounting AAA 15 by default start-stop Ganymede group.

  AAA accounting system default start-stop Ganymede group.

  AAA server RADIUS Dynamics-author

  AAA - the id of the joint session

  Switch #.

  Hello

  Add the level of privilege 15 control VTY line configuration.

   line vty 0 4 [..] privilege level 15 ! 

  Concerning

• Major question Dhcp on cisco switch please help!

  Hi Experts,
  One of our remote sites has Cisco 2811 router and switch 3650. The switch provides switching and DHCP PC to all customers.
  Please see attachment for more details files.
  Problem:
  After the expiry of the term of the DHCP lease (10 hours), some of the PC (Windows 7) on the remote site received Windows popup says that duplicate IP. Then, the network connectivity of the computer has been disconnected. After you restart the PC, then its network connectivity was back to active state.
  If all the computers have been placed in static mode, there is no problem.
  Please see the attached configuration of the router and Switch.
  Thank you very much

  It's strange this generally solves the problem of IP duplicate

  How to put the DHCP server on the router instead of this?

  what you get when you place an order 'show ip dhcp conflict '.

  also can you share the command 'show ip dhcp pool '.

  Richard

• rrack mounting brackets for Cisco switch SF300 - 48P?

  Does anyone know how to get grid mounting brackets for switch Cisco SF300 - 48P?

  You might be able to get them through the support of Cisco.  Check this thread: https://supportforums.cisco.com/discussion/11201291/sf-300-series-rack-m...

• The ISE Cisco switch configuration

  Hi experts,

  I got the following network:

  Devices-> switch access-->--> access switch central office switch-> ISE Server

  All switches are capable IOS for the 802. 1 X and configurations of AAA for ISE to manage network devices. However, I read in the guide on the configuration of the switches in preparation for the deployment of the ISE of CIsco, but I wonder what should I configure switches for access and basic switches or only configure the switches for access to EHT?

  Thanks for your time to read!

  If all clients are non-DHCP clients, then no configuration is based or distribution at all.

  But you may need to search different options of profiling, if the customers are not active DHCP. Access switch supports the function of detection IOS? Would be very useful to have such a that it would send important profiling information at ISE. You may need to use the right options for ISE of profiling to determine the details of the endpoint.

  Concerning

  Vivek