CBWFQ on Catalyst 3750 Switch

Similar Questions

• Issue of QoS Catalyst 3750

  Hello

  I have a scan server (IP = 1.2.3.4 for this example) who wreaks havoc when it works, which is evident in the number of drops of output I see.  I thought the police thing, but it is a production environment and 3750-G switch does not support Netflow or any other tool that would provide accurate estimates of flow to work from.

  So, my thoughts are rather to implement queuing for the scan server and limit his access to common buffers, etc..  I would like to have some feedback on the config.  (I've included notes in an attempt to illustrate my thought.)

  !**| Catalyst 3750-G | **
  !
  ! * Activate QoS
  !
  MLS qos
  !
  ! * Create custom queue-set
  ! * increase buffer 1 and disable the stamp 4
  !
  MLS qos all the output queue 2 buffers 50 25 25 0
  !
  ! * To queue 1, make available to the threshold of 1 full buffer,
  ! * reserve full buffer for the local queue only, enable
  ! * queue to borrow 3 x more common pool pads.
  !
  MLS qos all the queue of output 2 1 100 100 100 400 threshold
  !
  ! * To queue 3, make available to the threshold of 1 full buffer,
  ! * reserve 30% of buffer for the local queue only, enable
  ! * queue to borrow 4 x more common pool pads.
  !
  MLS qos all the queue of output 2 3 100 100 33 165 threshold
  !
  ! * Assign values DSCP 16, 18, 20, 22 & to queue 1;
  ! * assign values DSCP 8, 10, 12, 14 & the queue of 3
  !
  queue threshold 1 dscp-map of MLS qos srr-queue output 1 16 18 20 22
  queue threshold 3 dscp-map of MLS qos srr-queue output 1 8 10 12 14
  !
  ! * To be complete, assign COS values associated with the same queues.
  !
  queue threshold cos 1-map of MLS qos srr-queue output 1 2
  queue threshold cos 3-map of MLS qos srr-queue output 1 1
  !
  ! * Access-list 130 identifies (bidirectional) scan traffic.
  !
  IP access-list 130 allow any host 1.2.3.4
  access-list 130 allow the host ip 1.2.3.4 everything
  !
  ! * Create a class map to match previously configured access group.
  !
  class-map correspondence-any CM-SCANS
  Description * no critical analysis traffic
  game group-access 130
  output
  !
  ! * Create policy-map to assign a DSCP values to analyze default traffic.
  !
  Policy-map PM-QOS-IN
  Description * Ingress QoS strategy
  class of CM-SCANS
  set ip dscp af11
  output
  !
  class class by default
  set ip dscp af21
  output
  output
  !
  ! * Assign the queue-series 2 and/or service-policy (single entry) if required.
  !
  gix/x/x interface
  queue-series 2
  entry of service-politics-PM-QOS-IN
  output
  !

  PS - There is no voice that cross this switch, so I don't see it had to book the queue 1 for voice or turn on the priority queue, etc..

  Any help is appreciated.  Thank you in advance.

  Disclaimer

  The author of this announcement offers the information in this publication without compensation and with the understanding of the reader that there is no implicit or explicit adequacy or adaptation to any purpose. Information provided is for information purposes only and should not be interpreted as making the professional advice of any kind. Use information from this announcement is only at risk of the reader.

  RESPONSIBILITY

  Any author will be responsible for any wha2tsoever of damage and interest (including, without limitation, damages for loss of use, data or profits) arising out of the use or inability to use the information in the view even if author has been advised of the possibility of such damages.

  Poster

  Well, then you're a little stuck trying to manage the flow of this server.  Unless you want to look at the penetration of the port police server and/or to "shape" the output port.  The idea being, if you can slow down the movement of this server, you might avoid configuration QoS requirements.

  Otherwise, you're on the right track, in what you're trying to do.

  You may want to traffic of tag to this server as 'trap' (CS1).  Ideally, you may be able to distinguish the traffic 'scan' of other traffic to and from this server.

  On treatment of output of your QoS policy, rather than create a 'special' configuration to handle this traffic, you should consider having a policy that has a low priority class (scavenger), which is where direct you this traffic.  That is a policy of 4 class that takes in charge in time real (PQ), foreground (twice in 10 x % of the default value), by default and the background (1%), planning priorities.

  3750 of buffer management, I found the setting of thresholds all up and moving more if not all buffers to the pool, usually works quite well.

• VXLAN on UCS: IGMP with Catalyst 3750, 5548 Nexus, Nexus 1000V

  Hello team,

  My lab consists of Catalyst 3750 with SVI acting as the router, 5548 Nexus in the vpc Setup, UCS in end-host Mode and Nexus 1000V with segmentation feature enabled (VXLAN).

  I have two different VLAN for VXLAN (140, 141) to demonstrate connectivity across the L3.

  VMKernel on VLAN 140 guests join the multicast fine group.

  Hosts with VMKernel on 141 VLAN do not join the multicast group.  Then, VMs on these hosts cannot virtual computers ping hosts on the local network VIRTUAL 140, and they can't even ping each other.

  I turned on debug ip igmp on the L3 Switch, and the result indicates a timeout when he is waiting for a report from 141 VLAN:

  15 Oct 08:57:34.201: IGMP (0): send requests General v2 on Vlan140

  15 Oct 08:57:34.201: IGMP (0): set the report interval to 3.6 seconds for 224.0.1.40 on Vlan140

  15 Oct 08:57:36.886: IGMP (0): receipt v2 report on 172.16.66.2 to 239.1.1.1 Vlan140

  15 Oct 08:57:36.886: IGMP (0): group record received for group 239.1.1.1, mode 2 from 172.16.66.2 to 0 sources

  15 Oct 08:57:36.886: IGMP (0): update EXCLUDE group 239.1.1.1 timer

  15 Oct 08:57:36.886: IGMP (0): add/update Vlan140 MRT for (*, 239.1.1.1) 0

  15 Oct 08:57:38.270: IGMP (0): send report v2 for 224.0.1.40 on Vlan140

  15 Oct 08:57:38.270: IGMP (0): receipt v2 report on Vlan140 of 172.16.66.1 for 224.0.1.40

  15 Oct 08:57:38.270: IGMP (0): group record received for group 224.0.1.40, mode 2 from 172.16.66.1 to 0 sources

  15 Oct 08:57:38.270: IGMP (0): update EXCLUDE timer group for 224.0.1.40

  15 Oct 08:57:38.270: IGMP (0): add/update Vlan140 MRT for (*, 224.0.1.40) by 0

  15 Oct 08:57:51.464: IGMP (0): send requests General v2 on Vlan141<----- it="" just="" hangs="" here="" until="" timeout="" and="" goes="" back="" to="">

  15 Oct 08:58:35.107: IGMP (0): send requests General v2 on Vlan140

  15 Oct 08:58:35.107: IGMP (0): set the report interval to 0.3 seconds for 224.0.1.40 on Vlan140

  15 Oct 08:58:35.686: IGMP (0): receipt v2 report on 172.16.66.2 to 239.1.1.1 Vlan140

  15 Oct 08:58:35.686: IGMP (0): group record received for group 239.1.1.1, mode 2 from 172.16.66.2 to 0 sources

  15 Oct 08:58:35.686: IGMP (0): update EXCLUDE group 239.1.1.1 timer

  15 Oct 08:58:35.686: IGMP (0): add/update Vlan140 MRT for (*, 239.1.1.1) 0

  If I do a show ip igmp interface, I get the report that there is no joins for vlan 141:

  Vlan140 is up, line protocol is up

  The Internet address is 172.16.66.1/26

  IGMP is enabled on the interface

  Current version of IGMP host is 2

  Current version of IGMP router is 2

  The IGMP query interval is 60 seconds

  Configured IGMP queries interval is 60 seconds

  IGMP querier timeout is 120 seconds

  Configured IGMP querier timeout is 120 seconds

  Query response time is 10 seconds max IGMP

  Number of queries last member is 2

  Last member query response interval is 1000 ms

  Access group incoming IGMP is not defined

  IGMP activity: 2 joints, 0 leaves

  Multicast routing is enabled on the interface

  Threshold multicast TTL is 0

  Multicast designated router (DR) is 172.16.66.1 (this system)

  IGMP querying router is 172.16.66.1 (this system)

  Multicast groups joined by this system (number of users):

  224.0.1.40 (1)

  Vlan141 is up, line protocol is up

  The Internet address is 172.16.66.65/26

  IGMP is enabled on the interface

  Current version of IGMP host is 2

  Current version of IGMP router is 2

  The IGMP query interval is 60 seconds

  Configured IGMP queries interval is 60 seconds

  IGMP querier timeout is 120 seconds

  Configured IGMP querier timeout is 120 seconds

  Query response time is 10 seconds max IGMP

  Number of queries last member is 2

  Last member query response interval is 1000 ms

  Access group incoming IGMP is not defined

  IGMP activity: 0 joins, 0 leaves

  Multicast routing is enabled on the interface

  Threshold multicast TTL is 0

  Multicast designated router (DR) is 172.16.66.65 (this system)

  IGMP querying router is 172.16.66.65 (this system)

  No group multicast joined by this system

  Is there a way to check why the hosts on 141 VLAN are joined not successfully?  port-profile on the 1000V configuration of vlan 140 and vlan 141 rising and vmkernel are identical, except for the different numbers vlan.

  Thank you

  Trevor

  Hi Trevor,

  Once the quick thing to check would be the config igmp for both VLAN.

  where did you configure the interrogator for the vlan 140 and 141?

  are there changes in transport VXLAN crossing routers? If so you would need routing multicast enabled.

  Thank you!

  . / Afonso

• SG500 vs Catalyst 3750 command set

  Hello world!

  Could you give me the main differences between the set of commands SG500 and Catalyst 3750?

  Thanks in advance!

  Hello Gio, it cannot really be quantified. Not only is there a set difference command there a difference in functionality.

  The primary opposition between SB vs the catalyst switches happen is how they deal with the VLAN. On a Catalyst switch, if you do a port a trunk and do not specify a VLAN on the port, all the VLANS will be passthrough port.

  On all switches of SB, you must specify the VLAN and follow the guidelines of 802. 1 q, which means, vlan native unidentified, all the VLANS additional added to a port. In addition, a trunk port applies the filtering of capture (rejected a package where him VLAN does not fall on the port).

  In addition, the vlan, VoIP is a global configuration

  config t

  ID of the vlan 100 voices

  On a catalyst usually build you a policy then indicate this vlan voice on the port. If you specify a vlan voice on the port a SG500 it "will allow phone Yes" which is usually the opposite of the desired result.

  Another notable difference, a catalyst using the terminal command length 0 for output, the SB switches use terminal datadump

  Here's the CLI guide for the 500 series. You will actually receive a complete response, a few entries experiences user but that may be better than nothing.

  http://www.Cisco.com/en/us/docs/switches/LAN/CSBMs/Sx500/cli_guide/CLI_500.PDF

  -Tom
  Please mark replied messages useful

• Cisco Catalyst 3750 G cable StackWise Query

  Hi everyone, I hope you can shed some light on my question.

  I have a job reserved Friday to add a switch to an existing fireplace. I was wondering at what point I need to use a longer cable to complete the ring.

  The existing stack consists of 2 x Cisco Catalyst 3750 G-24TS-24 switches are the 1.5U models and I will be adding a 3750 G-12-12 to the stack. So a total of 4U.

  So I guess my question is, do you think that the CAB-STACK - 50CM = cable supplied with the unit will be long enough, or do you think I will need to order a CAB-STACK - 1 M =? It's been a while since I've done it and I think remember me being quite stiff and bulky cables. All switches are in order without a space.

  Kind regards

  Mike

  Disclaimer

  The author of this announcement offers the information in this publication without compensation and with the understanding of the reader that there is no implicit or explicit adequacy or adaptation to any purpose. Information provided is for information purposes only and should not be interpreted as making the professional advice of any kind. Use information from this announcement is only at risk of the reader.

  RESPONSIBILITY

  Any author will be responsible for any damage that it (including, without limitation, damages for loss of use, data or profits) arising out of the use or inability to use the information in the view even if author has been advised of the possibility of such damages.

  Poster

  If you do the 'classic' connections, i.e. 1 to 2, 2 to 3, 3, 4, and 4 to 1, and the 50CM won't reach between 1 and 4, you should be able to use shorter cables as: 1-2 and 1-3 and 4-2 and 4-3.

  PS:

  BTW, remember that 12-12 can use SDM models incompatible with the 3750 G.  I.e., ensure the 12-12 has a model SDM compatible before connect you to the battery.

• Recovery of password on a 3750 Switch

  I tried a recovery of password on Cisco 3750 switch. I followed all the steps and got to the point where I copied the config.text to the running-config. After that, I got the switch privilege exec mode. When I tried to configure the switch with a new enable password, I got the following result

  Switch1 # conf t

  Authorization failed %

  Even the show commands do not seem to work

  Switch1 # sh run

  Authorization failed %

  Switch1 # sh ip int brief

  Authorization failed %

  Can anyone suggest how to get on this question to reset the password of the switch.

  Thanks in advance,

  Kind regards

  REDA

  Do you need to keep the configuration? If does not need, do not copy the file config.text to the running-config. Password recovery is over.

  If you need does the following.

  Do not copy the file config.text to the running-config. Before copying to the computer file config.text. Open and edit with Notepad (remove the aaa and change the enable password). Then, copy the file config.text (which you changed) for the running-config.

  Kind regards

• 1400 series 802. 11 a bridge with Catalyst 3524 switch?

  According to the documentation below, "you cannot provide redundant power to 1100 and 1200 access points with the two power DC to its port and inline power from a patch panel or powered switch to the access point Ethernet port'. How about the 1400 series bridges? You can use a power injector to power and also connect it to a catalyst 3524 switch (WS-C3524-PWR-XL-EN)? He will know not to draw power from the switch? Or should it be plugged into a hub, and the hub plugged into the switch? Or what would be the recommended configuration? 3524 switch already has 350 access points and a trendy 350 bridge. What would be the risks, if any, plug the bridge 1400 series also in the switch so that it is also a power injector-shoot?

  Thanks for the tips!

  http://www.Cisco.com/en/us/products/HW/wireless/ps458/prod_release_note09186a00801d0607.html

  Use the power only one Option

  "You cannot provide redundant power to 1100 and 1200 access points with the two power DC to its port and inline power from a patch panel or powered switch to the Ethernet port on the access point. If you are using power to the access point from the two sources, the switch connection control panel or power could close the port to which the access point is connected. Figure 1 illustrates the configuration of power, which can stop the port on the Panel of brewing or powered switch.

  "Figure 1 bad power Configuration with the help of two Power Sources

  "Operating Radio 5 GHz requires power injector, power Module or Catalyst 3550-24 PWR Switch

  "The series 1200 power injector and power module support operation 1200 series of the 5 GHz in the access point radio." Currently, the Catalyst 3550-24 PWR switch supports power for radio 2.4 GHz and 5 GHz radio. other switches and power patch panels could provide not enough power for the 5 GHz radio.

  "Access point requires 1200 Series universal power supply and power injector.

  "The 350 series universal power supply and power injector are not compatible with the 1200 Series access point. If you use a power injector or a power module to power a series 1200 access point, you must use a universal power supply series 1200. If you need to use an injector to power to inject into the access point Ethernet port, you must use a power injector 1200 series. »

  The power injector is between the switch and access point online. If your power injector fails, you have lost connectivity to the switch anyway. And to power from a device to a switchport works only if they are directly linked together; You can't have any other intermediate devices in the path.

  In short: No. is not a matter of being a bad idea, it is not be possible to try again.

• IPsec tunnel on cisco 3750 Switch

  Guys... I just wanted to know, is - it possible to configure/close the tunnel vpn ipsec on cisco switch 3750.

  Thanks in advance.

  NO u cant, you can on CAT 6500 with VPN module!

• Light green RPS on 3750 switch

  Hello world

  I have stand-alone switch 3750.

  RPS led is green and light system is off.

  3750TS env #sh all the

  The FAN is OK

  TEMPERATURE is OK

  SW series PID # status Pwr Sys PoE Pwr Watts

  --  ------------------  ----------  ---------------  -------  -------  -----

  2 integrated good

  Status of SW RPS name RPS no_serie RPS Port #.

  --  -------------   ----------------  -----------  ---------

  2 does not<>

  3750TS #.

  I have another switch with the same model and ios that its light RPS is off and the system led is green

  Thank you

  Mahesh

  Hello Manu,

  So, given that the switch works well, so there could be something wrong with the light, front or the mode button which are all cosmetics and should not impact on the switch.

  HTH

  Reza

• Compatibility matrix for Cisco Catalyst 3012 Switch Module

  Hello

  I'm checking the compatibility of the VMware vSphere 5.5U1 Guide and an IBM switch module Part Number: 43W4401 product name: Cisco Catalyst Switch Module 3012. The search of the matrix returns Cisco 1GigE I350 LOM who seems to identify the drivers of Cisco.

  Can anyone help clarify and check if this IBM re-branded chassis switch module is supported and to a specific firmware for the switch code? Thank you all.

  L2/L3 switches are off-limit of drivers for vSphere hypervisor, so you don't find on the HCL...

  Here's IBM BladeCenter matrix interop for VMware:

  IBM ServerProven compatibility

  and here is the interoperability of the switch Cisco Catalyst 3012 with IBM BladeCenter chassis:

  IBM BladeCenter Interoperability Test program

  I hope this helps...

• Bundle of Web authentication on a WLAN controller integrated Catalyst 3750

  We have set up a wifi zone based on a few 1131AG access points and a few Cisco 3750 integrated WLAN controllers. We are now trying to use web authentication for our comments area. No problem by defining a WLAN of COMMENTS and the associated VLAN. We have also managed to download a custom controller authentication web page.

  However, when I try to display the custom page, both controllers of show me the internal default page (preview and during the phase of actual authentication).

  Global web authentication settings are the following: Security--> Auth Web--> Web Login Page--> custom (downloaded).

  On the controller software version is 4.2.112.0, and the page is an HTML page.

  Reveal any help be appreciated.

  Kind regards

  Sonia

  What you need to do is set internally (by default) and hit apply, then play again to custom and click on apply. You can still see the defaul if you use the preview, but if you associate the SSID and open your web browser, you should get the webauth page. I hope this helps.

• Stacking question 3750 G/3750 Switch 3 stack

  Hi all

  We know a problem that seems to contradict itself on a stack of 3 switches. The question that we see does not seem to be very well described in the Cisco documentation, so just watch the State exists, but not if it's good or bad.

  I note an exit on the issue below.

  SW Version SW Image model switch ports
  ------ ----- -----              ----------            ----------
  * 1 12 WS-C3750G-12 S 12.2 SE5 (55) C3750-IPBASEK9-M
  2 12 WS-C3750G-12 S 12.2 SE5 (55) C3750-IPBASEK9-M
  3 52 WS-C3750-48TS 12.2 SE5 (55) C3750-IPBASEK9-M

  Switch-1 #sh sw stack-port Synt.

  Switch #/ nearby Stack cable Link Link Sync # in
  No. Port Port length OK changes OK Active Loopback
  LinkOK status
  --------  ------  --------  --------  ----  ------  ----  ---------  --------
  1/1 Okay 3 50 cm Yes Yes Yes 2 no
  1/2 okay 2 50 cm Yes Yes Yes 2 no
  2/1 okay 1 50 cm Yes Yes Yes 2 no
  2/2 okay 3 50 cm Yes Yes Yes 2 no
  3/1 Okay 2 50 cm Yes Yes Yes 2 no
  3/2 okay 1 50 cm Yes Yes Yes 2 no

  Switch-1 #sh platform stack all the Manager
  Switch/battery Mac address: xxxx.xxxx.xxxx.xxxx
  Current H/W
  Switch # Mac address priority Version State role
  ----------------------------------------------------------
  * 1 master xxxx.xxxx.xxxx.xxxx 15 0 loan
  2 members xxxx.xxxx.xxxx.xxxx 14 0 loan
  3 members xxxx.xxxx.xxxx.xxxx 13 0 loan

  Battery nearby Status port
  # 1 Port 2 Port 1 Port 2 Port switch
  --------------------------------------------------------
  1        Ok         Ok                3        2
  2        Ok         Ok                1        3
  3        Ok         Ok                2        1

  Switch-1 # sh pass nearby
  # Port 1 Port 2 Switch
  --------    ------       ------
  1         3             2
  2         1             3
  3         2             1

  So far, everything looks good, okay?... now, the output that causes doubt.

  SWMLSSGESR09-1 #sh battery platform ports buffer

  Trace event data, Debug the battery
  ==============================================================
  Event LINK: link status change
  RAC event type: RAC changes not OK
  Type of event SYNC: sync changes to not OK
  ==============================================================

  Event stack stack PC Info Ctrl-status Loopback Cable
  Number of IOS Port / length HW
  =========  =====  ===================================  ===========  ========  ========
  Type of event: LINK OK battery Port 2
  1 0000000117 FF08FF00 84035BFD AAAAFFFF FFFFFFFF 0C340CE0 No./No 50 cm
  2 0000000117 FF08FF00 86038FE6 5595FFFF FFFFFFFF 0C340CE0 no/no. 50 cm
  Event type: CARS
  1 0000000118 FF08FF00 84035BFD AAAAFFFF FFFFFFFF 0C340CE0 No./No 50 cm
  2 0000000118 FF08FF00 86038FE6 5595FFFF FFFFFFFF 0C340CE0 no/no. 50 cm
  Type of event: LINK OK battery Port 1
  1 0000000655 FF08FF00 86032D8D 5555FFFF FFFFFFFF 1CE61CE0 no/no. 50 cm
  2 0000000655 FF08FF00 86038FE6 5595FFFF FFFFFFFF 1CE61CE0 no/no. 50 cm
  Event type: CARS
  1 0000000656 FF08FF00 86032D8D 5555FFFF FFFFFFFF 1CE61CE0 no/no. 50 cm
  2 0000000656 FF08FF00 86038FE6 5595FFFF FFFFFFFF 1CE61CE0 no/no. 50 cm
  Type of event: DON'T LINK NOT OK battery Port 1
  0000018717 1 FF08FF00 000128F6 00000002 FFFFFFFF 0E140CE0 no/no. 50 cm
  2 0000018717 FF08FF00 86038FE6 5595FFFF FFFFFFFF 0E140CE0 no/no. 50 cm
  Event type: CARS
  1 0000018718 FF08FF00 00012940 16010703 0E140CE0 FFFFFFFF no/no. 50 cm
  2 0000018718 FF08FF00 86038FE6 5595FFFF FFFFFFFF 0E140CE0 no/no. 50 cm
  Type of event: LINK OK battery Port 1
  1 0000018913 FF08FF00 8603CA6B AAAAFFFF FFFFFFFF 1EE61CE0 No./No 50 cm
  2 0000018913 FF08FF00 86038FE6 5595FFFF FFFFFFFF 1EE61CE0 no/no. 50 cm
  Event type: CARS
  1 0000018914 FF08FF00 8603CA6B AAAAFFFF FFFFFFFF 1EE61CE0 No./No 50 cm
  2 0000018914 FF08FF00 86038FE6 5595FFFF FFFFFFFF 1EE61CE0 no/no. 50 cm
  Type of event: DON'T LINK NOT OK battery Port 2
  1 0000019999 FF08FF00 8603CA6B AAAAFFFF FFFFFFFF 0EE60CE0 No./No 50 cm
  0000019999 2 FF08FF00 00018D 79 00000000 FFFFFFFF 0EE60CE0 no/no. 50 cm
  Event type: CARS
  1 0000020000 FF08FF00 8603CA6B AAAAFFFF FFFFFFFF 0EE60CE0 No./No 50 cm
  2 0000020000 FF08FF00 00018DC2 09954FFF FFFFFFFF 0EE60CE0 no/no. 50 cm
  Type of event: LINK OK battery Port 2
  1 0000020193 FF08FF00 8603CA6B AAAAFFFF FFFFFFFF 1EE61CE0 No./No 50 cm
  2 0000020193 FF08FF00 556AFFFF 86036557 FFFFFFFF 1EE61CE0 no/no. 50 cm
  Event type: CARS
  1 0000020194 FF08FF00 8603CA6B AAAAFFFF FFFFFFFF 1EE61CE0 No./No 50 cm
  2 0000020194 FF08FF00 556AFFFF 86036557 FFFFFFFF 1EE61CE0 no/no. 50 cm

  2 messages read LINK NOT OK types of events and event type CARS and SYNC the two seems to indicate a problem.

  the battery cables have all been replaced already and this has not changed the situation.

  Please let me know your thoughts, if possible a response today would be perfect.

  Thank you

  Mike

  Dude, you don't need to worry about what it is.
  Based on your post. you are concerned about newspapers below:

  Trace event data, Debug the battery
  ==============================================================
  Event LINK: link status change
  RAC event type: RAC changes not OK
  Type of event SYNC: sync changes to not OK
  ===============================================
   

  There is nothing to fear the newspapers above. This is quite normal.
  If you want proof check out this Cisco documentation, you can see that the 'see the platform stack buffer ports' shows.

• AAA with Catalyst 2950 switch

  I have a Cisco ACS 4.2 on Windows 2003. Authentication works very well for various cisco as the routers, VPN etc Hub devices

  Today, I added a 48-Port L2 switch as a client of the AAA authentication works well. However, I see several connection attempts that have failed this L2 switch with the user 'C '.

  Message Type: Authentic failed

  Caller ID: async

  Authentic-failure-Code: external DB invalid or wrong password user

  NAS-Port: tty0

  What is causing this connection failed?

  If the port console switch generating errors of parasitic connection is connected to a device offering remote access to the console port, then it is likely that an output of this unit is causing the false connection attempt.

  If this device is an IOS router with a bunch of asynchronous ports add "no exec" to the line connected to the switch console port.

• switch 3750 EAPoL transmission RADIUS server

  I have a running version of the 3750 switch stack 12.2 (53) SE2 IPBASEK9-M. I have dot1x configured on the switch and a Windows 7 PC, connected with 802. 1 x configured on the interface. I see the EAPoL start message from the PC, but I do not see the packets from the switch to the RADIUS server RADIUS. I have a config simple dot1x just to try to make it work before adding additional features such as comments - vlan...

  Config and debug of attached file.

  I don't know if the configuration ip dhcp snooping and arp of inspection is cause a problem with that or not. I see the EAPoL packet received on the switch, as shown in the attachment of debugging, but I never see the RADIUS packet. I've defined both trust on the interface, but always the same result. I can't turn it off because there is a switch of production with a test interface.

  Any ideas?

  Thank you

  Mark

  I had the same problem and solved it is enough to configure the switch as authenticator instead of "supplicant". "Supplicant" means customer, "authenticator" means in fact the switch acts as an authenticator to pass through, it will forward the requests to the auth server, for example, host of RADIUS.

• Switch SF300 trunk with a 3750

  Is it possible to stem a SF300 switch with a 3750 switch?  If so, how?  Whenever I turn on the 3750 trunking port I lose connection to the SF300.

  I'd appreciate any help, thank you

  Larnel

  Hi Larnel,

  You can do so by setting the 3750 for 802. 1 q ecapsulation on the trunk port, set it vlan native and wait for VLAN throughout. On the SF300, you must run the same process create the trunk port, enable the VLAN and set the PVID to match the VLAN native on the 3750 trunk interface. To do this, you will need from your VLAN pre-configured on both switches. Hope this helps you.

  Kevin