C2960-lanbasek9 - tar.122 - 35.SE.tar in CW RME import problems

Similar Questions

• C2960-lanbasek9 - tar.150 - 2.SE2.tar high memory consumption

  Hi all

  I would strongly appreciate that someone could explain to me why my Clients-LAN Switches (c2960) during the upgrade to new IOS namely

  rump C2960-lanbasek9 - tar.150 - 2.SE1 and c2960-lanbasek9 - tar.150 - 2.SE2 upward memory consumption to somewhere between 80% and 90%.

  Is there a "bug" always with these IOS versions that could have caused this? I've never had this problem with the old version (c2960-lanbasek9 - tar.150 - 2.SE) of IOS. I've read through the Cisco Documents on these releases but wasn't too sure if new arrivals on these IOSs caused this high memory usage.

  Shown is an example of one of many c2960-switches using these IOSs. In the meantime, I intend to downgrade to c2960-lanbasek9 - tar.150 - 2.SE.

  Looking forward to your answers.

  Kind regards

  James

  

  Hello

  CSCtw83946 Details of bug

  Problems of low memory on the 2960 switches

  Symptom: Use of the high memory on the switch 2960. Without any configuration just a switch box output shows little memory. The available memory is only 5 mb. Conditionsof : No configuration to the output of the switch to the box with 12.2 (58) SE2 image. -See the compilation of statistics of memory- The Total head (b) Used (b) Free (b) Lowest (b) Largest (b) Processor 21586420 16308768 5277652 4527884 5165508 27A7D6C E/S 2 00000 4194304 2464344 1729960 1729960 1718664 1 has 00000 pilot you 1048576 44 1048532 1048532 1048532Workaround: None.This is a physical limitation and this is how far we can go. We should always be able to make configurations, although a large may need an upgrade according to C-comments

  Kind regards
  Alex.
  Please evaluate the useful messages.

• Cryptographic IOS image loading

  I received the following error message when you try to load an IOS image k9 on one of 2960 switches.  Can someone tell me how to solve this problem?

  Error: The image must be installed on the system 1 ('c2960-lanbasek9 - mz.122 - 52.SE')
  Error: is equivalent to an existing image and the option "/ overwrite.
  Error: was unsuccessful.  Try again, or by deleting the old image
  Error: first of all, or by selecting the option ' / overwrite.

  Almost forgot the command I used was: arc download-sw/Safe tftp://10.xx.xx.xx/c2960-lanbasek9-tar.122-52.SE.tar

  Thank you

  GLH

  You try to switch with the exact same IOS.

• iOS image support ssh

  Hello dear

  Please can you tell me the image ((c2960-lanbase - mz.122 - 53.SE1.bin)) support the ssh or not?

  If not what ios image can I charge for the 2960 G switch to support ssh.

  Thank you

  Hello sajjad_m1987,

  C2960-lanbase - mz.122 - 53.SE1.bin does not support ssh.

  You will need the crypto image that has the k9 in the name.

  C2960-lanbasek9 - mz.122 - 52.SE.bin

  You can go to the following link to search the ios which supports the functionality that is necessary.

  http://Tools.Cisco.com/ITDIT/CFN/JSP/by-feature-technology.jsp

  Hope this helps,

  If Yes, please rate.

• snmpwalk output END_OF_MIB_VIEW_EXCEPTION

  I've got this output strange when I start a snmpwalk on a Catalyst switch. Since the Linux console, I thot, the following output:

  [email protected] / * /-1555: ~ $ snmpwalk - v 2 c - c public

  ISO.3.6.1.2.1.2.1 = no variables left in this MIB view (it is beyond the end of the MIB tree)

  On the switch at the same time with the debug snmp packet on:

  44w3d: SNMP: packet received via UDP to 192.168.88.2 on Vlan3022

  44w3d: SNMP: Get-next request, reqid 429376307, errstat 0, erridx 0

  ifNumber = TYPE/VALUE NULL

  44w3d: SNMP: response, reqid 429376307, errstat 0, erridx 0

  ifNumber = END_OF_MIB_VIEW_EXCEPTION

  44w3d: SNMP: package sent via UDP to 192.168.88.2

  I sniffed the snmp packets, I sent to the switch and it turns out that I send a get-next with the 1.3.6.1.2.1 OID query that is... pretty standard I guess, as I use the same command for other devices, and it works. Yet once sniffing snmp traffic reveals the program of snmpwalk uses the original OID even to begin to "walk" the node.

  Am I missing something?

  The switch in question is Catalyst WS - 2960G - 24TC - L with image c2960-lanbasek9 - mz.122 - 52.SE.

  Hi Boyan,

  Host Server SNMP command > is used just to report or to break the traps to the host us.

  Thank you-

  Alya

  [Note the useful post]

  Ratings encourage contributors *.

• AAA w/RSA: "any type of permission...". »

  I've set up a router and a switch to AAA using a server RADIUS of RSA. Both are RSA 'Agent hosts' with identical configurations. Router (2621XM/EntServ Version 12.4 (18)) and switch (3560-24PS/IPBase - 12.2 (25) SEB2) have identical configs AAA, and RADIUS/RSA is very well regarding the access code will be accepted. But the switch won't let me:

  **********************

  User name:

  Password:

  PASSWORD accepted

  % Failed authorization.

  **************************

  When I do "deb radius authentication" on each, the outputs are the same until the last 2 lines. The router that works says:

  000055.: Jan 16 12:22:51 CEST: RADIUS (00000005): receipt of id 1645/3

  000056:. Jan 16 12:22:51 IS: RADIUS/DECODE: fragments of response Message, 19, total 19 bytes

  But the switch says:

  000284: Jan 16 12:20:47 UTC: RADIUS: saved the authorization for user 3030220 to 3034440 data

  000285: Jan 16 12:20:47 UTC: RADIUS: no type of permission for the user.

  The only other difference I can think of is that I use ssh for router and switch telent (IPBase apparently no habla "crypto", I could use another IOS I think.)

  Any clue? TIA

  Paul

  If I were you, I would like to 'disable' permission

  on the catalyst 3560. I n an identical

  Setup like yours on mine Catalyst 2960 and it

  works very well. See below:

  [[email protected] / * / root] # telnet 192.168.0.5

  192.168.0.5 by train...

  Connected to 192.168.0.5 (192.168.0.5).

  [Escape character is ' ^]'.

  C

  *****************

  User access audit

  Username: test4

  Password:

  Enter your new PIN, containing 4-8 digit.

  or

  to cancel the procedure of the new PIN:

  Please re - enter new PIN code:

  Wait for the code on your card to change, and then sign in with the new PIN code

  Enter the PASSWORD:

  C2960 #sh worm

  Cisco IOS software, software C2960 (C2960-LANBASEK9-M), Version 12.2 (25) SEE4, RELEASE SOFTWARE (fc1)

  Copyright (c) 1986-2007 by Cisco Systems, Inc.

  Updated Tuesday 16 July 07 02:53 by myl

  Image text-base: 0 x 00003000, database: 0x00CC0000

  ROM: Bootstrap program is C2960 boot loader

  BOOTLDR: C2960 Boot Loader (C2960-HBOOT-M) 12.2 (25r) the SEE1, release SOFTWARE (fc1)

  C2960 uptime is 2 weeks, 6 days, 14 hours, 10 minutes

  System to regain the power ROM

  System restarted at 23:20:30 GMT Wednesday, December 26, 2007

  System image file is "flash: c2960-lanbasek9 - mz.122 - 25.SEE4.bin".

  This product contains cryptographic features and is under the United States

  States and local laws governing the import, export, transfer and

  use. Delivery of Cisco cryptographic products does not imply

  third party approval to import, export, distribute or use encryption.

  Importers, exporters, distributors and users are responsible for

  compliance with U.S. laws and local countries. By using this product you

  agree to comply with the regulations and laws in force. If you are unable

  to satisfy the United States and local laws, return the product.

  A summary of U.S. laws governing Cisco cryptographic products to:

  http://www.Cisco.com/WWL/export/crypto/tool/stqrg.html

  If you need assistance please contact us by mail at

  [email protected] / * /.

  processor of WS-C2960G-24TC-L (PowerPC405) Cisco (revision B0) with 61440K / 4088K bytes of memory.

  Card processor ID FOC1036X0F1

  Last reset of tension

  2 virtual Ethernet interfaces

  24 gigabit Ethernet interfaces

  Password recovery mechanism is activated.

  64K bytes of memory simulated by flash not volatile configuration.

  Basic Ethernet MAC address: 00:19:55:1 B: D6:00

  Number of the motherboard: 73-10015-05

  Power supply part number: 341-0098-02

  Motherboard serial number: FOC10352NF2

  Power supply serial number: AZS103402ZF

  Revision number of the model: B0

  Motherboard revision number: B0

  Model number: WS-C2960G-24TC-L

  System serial number: FOC1036X0F1

  Top Assembly part number: 800-26673-02

  Top of page revision number of the Assembly: C0

  Version ID: V02

  CLEI Code number: COM3G00BRA

  Revision number of hardware consulting: 0x01

  SW Version SW Image model switch ports

  ------ ----- ----- ---------- ----------

  * 1 WS-C2960G-24TC-L 12.2 24 (25) SEE4 C2960-LANBASEK9-M

  Configuration register is 0xF

  C2960 #sh run | AAA Inc.

  AAA new-model

  AAA RADIUS local group authentication connection test

  AAA authentication login test1 group Ganymede + local

  AAA authentication login notac local

  Group AAA dot1x default authentication RADIUS

  AAA - the id of the joint session

  C2960 #.

  CCIE Security

• Host multi-domain phone Cisco C2960-mode does not go to the field of voice

  Hello world

  I'm working on the deployment of dot1.x through our company. I'm stuck on configuring Cisco phones to go on one VLAN correct when the multi domain host-mode option is used. I tried on two C2960 switch with two different images. No matter what I do, the phone is going to area: DATA and unable to connect to the network as more likely, it is a wrong VLAN. Poster as authenticated port ISE and MAB works very well. When I set up stream host-mode, the phone Gets a VLAN correct and can top to the network.

  Here is what I use:

  • C2960S-48-i/s-L with C2960S-UNIVERSALK9-M or if C2960 with c2960-lanlitek9 - tar.150 - 2.SE7
  • Phone Cisco 7960 and 7962
  • ISE 1.3.0.876

  Here is the current port configuration:

  GigabitEthernet1/0/1 interface

  switchport access vlan 2

  switchport mode access

  switchport voice vlan 703

  multi-domain of host-mode authentication

  authentication order mab dot1x

  authentication priority dot1x mab

  Auto control of the port of authentication

  periodic authentication

  MAB

  dot1x EAP authenticator

  dot1x tx-time 10

  spanning tree portfast

  end

  Here is the output of logon authentication show inter Gig1/0/1

  MAC address: 0013.1a58.xxxx

  IP address: unknown

  Username: 00-13-1A-xx-xx-xx

  Status: Authz success

  Area: DATA

  Oper host mode: multi-domain

  Oper control dir: in

  Authorized by: authentication server

  Policy of VLAN: n/a

  The session timeout: 5400 s (local), remaining: 5384 s

  Delay action: authenticate again

  Idle timeout: N/A

  The common Session ID: 0AF301450000000C001F3391

  ACCT Session ID: 0x00000010

  Handle: 0x0400000D

  Thanks for your help.

  Looks like youre missing the device class = attribute in your profile authz voice.

• C2960S SG200-18 <>- shared - resources SG200 cut the net

  Hello

  Still trying to figure out how to connect our new SG200-18 to an existing Cisco network, especially a C2960S.

  Here's what I have:

  <----- rest="" of="" network="" -------="" c2960s="" -----------="" sg200="" -----="" (pc="" connected="" directly="" to="" the="">

  On the side C2960S - here's what I have on the corresponding interface:

  GigabitEthernet1/0/1 interface

  switchport mode trunk

  Side SG200 I set the IP address and the gateway by default accordingly, however:

  • From the SG200 I can't ping any host on the same IP subnet as the switch
  • From the SG200 can not ping the default gateway
  • cannot ping the default gateway, or any other host * to * switch

  But:

  • On the SG200, I have many MAC addresses under 'Dynamic address Table' - however only MAC addresses belonging to the VLAN-management the SG200 (i.e. the VLAN9 in my case)
  • The MAC address on the SG200 table includes even the MAC addresses of hosts on the same VLAN, I tried to ping without success. For example: I tried a PING to a host with a MAC address - 00:19:bb:31:91:30. The MAC appears in the the SG200 arp table.

  To the cross check that I plugged a PC dedicated to the SG200 and assign an IP address management-LAN-Beach SG200 - in this case, I can access the switch (PING, WEB, etc.)

  So to summarize:

  • Connectivity is OK when going directly to the devices connected to the SG200.
  • No connectivity of devices that lie behind the C2960S to the SG200 and vice versa. (The problem is certainly not with the side C2960S because we have a lot of them hanging together without problem.)

  I've attached screenshots of the corresponding definition on the SG200.

  Thank you very much in advance for your help,.

  -ewald

  It seems that you use VTP switch. Unfortunately the SG200 can't DRIFT.

  You will need to set the port to match at both ends. It will be without tag vlan 9. If you plan to add several VLANS at a later date, you need to add as marked on each switchport VLANs.

• performance improve sistema lento inicio lento

  THE PANTALLA Y DESKTOP DEL EQUIPO AL LEER PONE LOS TEXTING NOT AT 100%, SINO MUCHO MAS SMALL AND, LO ME DIFICULTA THE LECTURA IN THE PANTALLA PC.¿QUE DEBO HACERO TAREA DEBO REALIZE PARA ESTE PROBLEMA RESPOND?

  You asked your question in a forum that does not support the product or the problem you want to inform you. In addition, this forum is English speaking.  Please reask Forum editing of your language and your problem/product.

  1. for the forums available on Microsoft Community please click on 'Forums' in the blue line at the top of this page and choose the forum that best fits your problem/product. If you can't identify a forum for your question, this very probably means that we do not answer to the product/supplier that you have a problem with. In this case, please use a search engine to find your issue or a forum that manages the kind of problem you have. In many cases, you can contact the hardware vendor or software or the vendor where you bought the product.

  2. for the languages available, scroll to the bottom of the page and click on the link with the small black globe and the word 'English' to it and change your region.

  Thank you.

• Enable SSH V2

  Hi, I have a 2960 switch 24TC-l with c2960-lanbasek9 - mz.150 - 1.SE.bin and SSH v1 active.

  When I try to enable SSH v2 swith tell me that I need to create a rsa key encryption. I generated the rsa cryptographic key with 1024 bits, and when I try to activate SSH v2 I get the same message.

  Damien,

  This SSH session should not break the recommended operation. However, for maximum reliability, I personally would say using another method to access CLI (Console or Telnet) just to make sure that the SSH session is not get corrupted. In all cases, if the SSH session has been closed until the SSH keys are generated again, you no longer able to SSH into the device.

  Best regards

  Peter

• 2960 will not allow "switchport trunk encapsulation dot1q" CLI

  I have a Cisco 2960 switch that does not allow me to configure the switchport trunk encapsulation dot1q on a trunking interface.

  The features of the watch that the interface can use 802. 1 q, but when I try to CLI the command encapsulation of work is not an option.

  Please give us a solution.

  Thank you, S

  Model - WS-C2960G-24TC-L

  Version SW - 12.2 (44) SE6

  Image of SW - C2960-LANBASEK9-M

  S1 #.

  S1 #sh int gi0/23 capabilities

  GigabitEthernet0/23

  Model: WS-C2960G-24TC-L

  Type: 1000BaseLX SFP

  Speed: 1000

  Duplex: full

  ENCAP of trunk. type: 802. 1 q

  Trunk mode: on, off, desirable, nonegotiate

  Channel: Yes

  Removal of broadcast: percentage(0-100)

  FlowControl: rx-(off,on,desired), tx-(none)

  Fast Start: Yes

  QoS scheduling: rx-(not configurable on a per port basis),

  TX-(4q3t) (3T: two configurable values and one fixed.)

  Rewrite coS: Yes

  ToS rewrite: Yes

  UNI-DIRECTIONAL: Yes

  Food online: no

  SPAN: source/destination

  PortSecure: Yes

  Dot1x: Yes

  Several Types of media: rj45, sfp, automatic selection

  S1 #.

  S1 #.

  S1 #.

  S1(Config-if) #switchport?

  Set the access mode characteristic of the interface

  Backup set for the backup interface

  block disable them unknown addresses forwarding uni/multi interpreters

  host port Set

  the interface Set trunking mode

  nonegotiate device engage not in the negotiation protocol on this

  interface

  port-security security associated with order

  priority Set 802 .1p device priority

  protected configure an interface to be a protected Harbor

  trunk trunking features Set of interface

  device attributes voice voice

  S1 #.

  S1 #.

  S1 #.

  S1(Config-if) #switchport trunk?

  admitted only allowed together features VLAN when the interface is in binding mode

  native definition trunking features native when the interface is trunking

  mode

  pruning pruning Set VLAN features when the interface is in binding mode

  S1 #.

  S1 #.

  S1 #.

  New devices do not support ISL so you can run 802. 1 q. This means there is no need of an encapsulation command what an encapsulation being supported. If the device has support for ISL, then you must also this command.

  Daniel Dib
  CCIE #37149

  Please evaluate the useful messages.

• dot1x auth-fail vlanX does not

  Hello

  I have configured 802. 1 x on a fas0/3 and works very well.

  I'm testing to set up a restricted VLAN on that port, and it does not work.

  This is the configuration:

  interface FastEthernet0/3
  switchport access vlan 11
  switchport mode access
  dot1x EAP authenticator
  self control-port dot1x
  LAN virtual auth failure of dot1x 30
  dot1x max-authentication failure 2 attempts
  

  When the PC connected to the Fas0/3 authentication failed twice, he should go to 30 of VLAN, but this isn't the case (port fas0/3 remains 11 VLAN in down state)

  VLANS SHOW:

  11 active VLAN0011 Fa0/2, Fa0/3, Fa0/4
  30 active LIMITED

  SW1 #sh dot1x interface FAS 0/3
  Dot1x FastEthernet0/3 information
  -----------------------------------
  EAP AUTHENTICATOR =
  PortControl = AUTO
  ControlDirection = both
  HostMode = SINGLE_HOST
  A re-authentication = off
  QuietPeriod = 60
  ServerTimeout = 30
  SuppTimeout = 30
  ReAuthPeriod = 3600 (configured locally)
  ReAuthMax = 2
  MaxReq = 2
  TxPeriod = 30
  RateLimitPeriod = 0
  AUTH-Fail-Vlan = 30
  Fail-Max-des authentication attempts = 2

  It is a 2960 running c2960-lanbase - mz.122 - 35.SE5, what Miss me?

  Federico.

  Ferderico,

  How do you test the VLAN Auth failure?  If you test with a bad password and using the PEAP Protocol it is considerred a reproducible error which should not cause a rejection of the RADIUS server, instead the password can be retried without ripping first in the tunnel TLS via an Access-Reject.  As long as it is configured, it should be 3 access - reject the server RADIUS must be filed in the VLAN auth failure.  If I remember correctly a bad username is also reproducible.

  If you use DCC 5 you can lower the number of retries PEAP 1 in which case you will have failed connection 6 times with a wrong password to hit the VLAN auth failure.

  -Jesse

• How can I configure an 802. 1 x in a with IOS 15.0.2 2960 switch?

  Hello

  I'm trying to config a switch WS-C2960-24PC-L IOS 15.0 (2) SE5 and C2960-LANBASEK9-M to use 802. 1 x in my network, but when I type the following commands the IOS does not recognize the interface commands and I can't fill in the parameters:

   Router# configure terminal Router(config)# dot1x system-auth-control Router(config)# aaa new-model Router(config)# aaa authentication dot1x default group radius Router(config)# interface fastethernet2/1 Router(config-if)# switchport mode access Switch(config-if)# authentication port-control auto (or dot1x port-control auto) Switch(config-if)# authentication host-mode multihost Router(config-if)# dot1x pae authenticator Router(config-if)# end 

  Source: http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/...

  I used the same commands in another switch with IOS 12.x and I have no problem to complete the settings so... anyone know if:

  * Should I use other commands to enable this feature in this IOS?

  * Should I use other IOS?

  Thanks in advance,

  I guess you forgot to paste in the following command:

   switchport mode access

  Orders 'authentication... ". "will not be displayed when the port is always in dynamic/circuit to access mode. These commands are available only after you configure static port to be an access port.

• My DLNA compatible TV takes a long time to detect the DLNA server on Windows 7 computer laptop via wifi

  I have a Panasonic plasma tv and a laptop running Windows 7 x 64.  I had no problem with the TV detect my laptop and watch movies via the DLNA server in wifi, aside from the videos stopping frequently, loss of the connection and reconnect.  Thinking it was a problem with my router, I contacted the manufacturer of the router and received a replacement of the same router.

  Apart from switching on the router, nothing has changed.  However, when I try to go to the DLNA function on the TV, it will appear the message "DLNA server is not found. Finally, anywhere from 2 to 10 minutes later, my computer appears on its own in the list and I can continue to watch the videos as usual.  The connection seems to be more stable than before because he rarely abandons the connection after the replacement of the router, but waiting for my computer appears mystified me.
  Y at - it is a particular setting in my notebook or the router that should be adjusted to solve this problem? As I said before, I reflected quite well the former router settings so I'm really helpless why it takes so long.
  Oh, and I use Windows Media Player stream 12.0.7601.17514 (as I was before).
  Thanks for any insight of this!
  Tara
  It is a problem of network discovery/master browser, and if you book DHCP
  addresses, as I suggested, you may be able to solve the problem. You could
  you want to ask their tech support for help if not clear from the user manual.
   
  | Finally, anywhere from 2 to 10 minutes later, my computer will appear on his
  own in the list and I can continue to watch the videos as usual.
   
   
  Barb
   
  MVP - Windows/entertainment and connected home
   
  http://digitalmediaphile.com/
   
  Please mark as answer if that answers your question
   
   
   
   

• 802. 1 x fails to authenticate

  Hello

  I have a user named "testuser" and trying to authenticate the xp computer but fails to authenticate. The journal of the ACS says authentication failed, the user is in the local database, but why it fails to authenticate?

  I have cisco switch:

  WS-C2960G-48TC-L 12.2 (52) SE C2960-LANBASEK9-M

  * 8 Mar 04:03:55.030: AAA/BIND (00000029): link i / f

  * 8 Mar 04:03:55.173: % AUTHMGR-5-START: start "dot1x' for the client (782b.cbc9.a027) on the Interface Gi0/2 AuditSessionID 0A6A00200000001924EBD428

  * 04:03:57.010 Mar 8: % LINK-3-UPDOWN: Interface GigabitEthernet0/2, changed State to

  * 8 Mar 04:03:58.016: % LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/2, until a state change

  * 8 Mar 04:04:05.482: % DOT1X-5-FAIL: failure of authentication for the client (782b.cbc9.a027) on the Interface Gi0/2 AuditSessionID 0A6A00200000001924EBD428

  * 8 Mar 04:04:05.482: % AUTHMGR-7-RESULT: authentication result "fail" to "dot1x' for the client (782b.cbc9.a027) on the Interface Gi0/2 AuditSessionID 0A6A00200000001924EBD428

  * 8 Mar 04:04:15.834: % LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/2, changed state down

  Authentic failed

  testuser

  Group 66

  78-2B-CB-C9-A0-27

  (Default)

  EAP - TLS or PEAP authentication during the SSL negotiation failed

  ..

  ..

  50002

  x.x.x.x

  ..

  ..

  25

  PEAP-MS

  ..

  
  mozdirty type = "_moz" >

  Hello

  Sorry my mistake. I'm assuming that you would use 802. 1 x for authetication wireless. As described here on ACS, LEAP only works only for the wireless RADIUS authetication.

  Also windows XP natively only support PEAP and token based authetication.

  Think so next time, you could try using free generated certificates on ACS for PEAP authentication.

  The link below will guide you how to install free signed certificates on the ACS.

  http://www.Cisco.com/en/us/products/sw/secursw/ps2086/products_configuration_example09186a0080545a29.shtml

  Hope that helps.

  Concerning

  Najaf