Circuits on Cisco Switch SG200-50

Hi all

I'm trying to inter vlan routing using Cisco Switch SG200-50 with router Cisco 1941. The router I created three subinterface for VLAN1, 2, 3 and VLAN1 is vlan native. I have a LWAP with Cisco WLC connected to the same switch. I have activated assignemnet vlan dynamic using Windows /NPS. RADIUS Wireless successfully user can authenticate as well the vlan is assigned, but unable to ping the router subinterface.

On the switch, you must activate the trunk port connected to the router ports and AP, tried all means, what makes the trunk port and General, nothing worked. users are unable to ping the gateway.

If you have worked on this switch, pls help how to on this subject.

If the Cisco technical support team can help me, that would be great

Thanks in advance

Concerning

Joe

Hi Joseph, creating a general port and disable the input filter and label properly login vlan. Also make sure your sub interface are dot1q.

-Tom
Please mark replied messages useful

Tags: Cisco Support

Similar Questions

  • LACP hash between N3048 and CISCO SG300/SG200 + question Twinax attach direct cable

    Hello

    In my network I have deployed two new N3048 with 2 transceivers SPF + and SPF module back + as core switches are connected to other 3 switches from edge of N2048 using optical fiber and I reused my previous CISCO SG300 and SG200 goes to serve the other two boxes of my campus via the spine in copper.

    I have 4 copper cable which starts from the hub of the SG300 network and 2 the SG200 brass. I set up to have a redundant connection using 2 + 2 with SG300 and 1 + 1 with SG200 RSTP.

    So for the SG300 I re LAG + LACP to have two channels of the N3048s port, but now that a single cable is connected because I don't know what kind of LACP hash mode should I put on N3048 to have a compatible hash between Dell and Cisco switches.

    My N3048 have mode 7 (Advanced hash) as default but I guess that cisco models do not understand... so, what mode is the best for LACP work perfectly with small business cisco switches?

    I also received my twinax cables to connect my two N3048 via SPF + back modules... conhot can I plug the cables into the slots SPF + (already mounted) without turning off my basic switches?

    Thank you!

    See you soon

    Cables can be connected/disconnected, but I don't know if the real module SFP + for the rear of the N3000 is hot plug.

  • Launch date for Cisco switches

    Hello

    I need the launch date for the following products:

    Cisco SB SG200

    Cisco SG300 SB

    Can anyone provide this information?

    Thank you

    Tiziana

    Wrong forum, post in "small business switches. You can move your ad with the Actions Panel on the right.
  • Help with the VLAN on SG200-18 and two switches SG200-08

    Hello world. My apologies, but I'm only average at best with my CISCO skills. I have simple installation running some network devices connected via 3 CISCO switches. It is small office and two bedrooms - one with the servers and the other with the printer and pc. Each room has 8 ports SG200-08 pass.

    Router / firewall is Sonicwall TZ215 and manages the internal routing between VIRTUAL networks. Each SG200-08 was directly connected to TZ215 (no SG200-18 again) and VLAN worked perfectly. Please see diagram below...

    Problems started when I added in the Center SG200-18 more to handle additional devices. Everything that I'm doing wrong, but I can't do VLAN longer works. Something I won't set up correctly in SG200-18.

    Please help me to Setup VLAN here - tag, unidentified, PVID, trunk... I am completely lost and already had to reset SG200-18 twice.

    My work without port switch 18 Setup was like that.

    SG200-08 (1)
    G1 1 trunk 1U, 100 t
    G2 1 trunk 1U
    G3 1 trunk 1U
    G4 1 trunk 1U
    G5 1 trunk 1U
    G6 1 trunk 1U SERVER3
    G7 trunk 100 100U SERVER1
    G8 trunk 100 100U Server2

    SG200-08 (2)
    G1 1 trunk 1U, 50 t, 200 t
    G2 1 trunk 1U
    G3 1 trunk 1U
    G4 1 trunk 1U PC1A
    G5 1 trunk 1U PC1B
    G6 trunk 50 50U PC2A
    Trunk PC2B 50 50U G7
    NETWORK PRINTER for the 200 trunk 200U G8

    Thank you in advance.

    Hello

    Oh I'm sorry. I understand that you have 3xSG200-08 and 2 of them with the same configuration :-). So no need to use this port for now.

    Kind regards

    Aleksandra

  • 10G Cisco switch

    I would like to know if the compatibility for the storage matrix Dell is updated regularly, especially for cisco switches.
    We seek to deploy a few PS6210 with 10G connectiivity and here for use with switches Cisco 4500 X series. However these are not included in the doc. There are a few cisco switches that are the end of life (4948 and some nexus switches).

    Hello

    Yes the guide is updated regularly, usually monthly or updates are available.

    Since the x 4500 is not a Nexus series switch, you looking for correct DCB support?

    In this case these Dell 'Level 3' offers better support for resonable effort.   I'll make sure that use you the latest firmware IOS and EQL.  There are other switches catalyst IOS in the guide.  Configure it in this sense would be a great place to start.   Ideally, the switch dedicated for iSCSI use, not VLANd with other types of traffic.

    If you can first test before production, then support can see table diagnosis and SANHQ archive for any signs of network related issues.   (retransmit rate and types for example)

    Kind regards

  • Why I can't command show running on cisco switch

    On a single switch, I found that some commands because they show execution or copy running-config tftp: on cisco switch WS-C2960X-24TS-L does not work it see more below. How I can use the command then show generally. Thank you.

    Building1_FAA_6F_SW3 #sh run
    Building configuration...

    Current configuration: 100 bytes
    !
    ! No change since the last restart configuration
    !
    boot-start-marker
    boot-end-marker
    !
    !
    !
    !
    !
    !
    end

    ---------------------------------------------------

    Building1_FAA_6F_SW3 #copy running-config tftp:
    ^
    Invalid entry % detected at ' ^' marker.

    OK, so the information you provided in your latest messages confirm that the privilege level you get via telnet/vty is different from the one you get via the console. This is due to the configuration of AAA which applies to the vty ports but not on the console port.

    So if you want the same rules apply to the console port, then you must configure the port console for AAA as well.

    If you don't want these rules then you need to remove the AAA configurations. The best way to remove these is by typing 'no new aaa - model' However, careful not to lock you out of the unit. Make sure you have local accounts with the privilege level 15 and you also know the active password/secret.

    I hope this helps!

    Thank you for evaluating useful messages!

  • To the main unit Infrastructure Cisco switch port

    Hello.

    I had a doubt as to the Port of the Switch in my Cisco Switch for a camera of the first Infrastructure.

    This port must be a Switchport to access or a Switchport Trunk?

    What is your recommendation on this subject? What is best practice?

    Thank you very much.

    Access port should work fine. You do not configure a VLAN on the device itself, just the IP address / subnet and default gateway.

    Thank you

    Ric

  • Configuration Wireless 3G as online backup with cisco switch layer 3?

    Hi all

    We have an existing GPRS modems for data transfer between 2 different sites, this connection is a bit slow to no more than approximately 114 Kbps, the idea is to add a 3G modem, so the solution will be based on a two-way communication lines which are 3G network and the GPRS network.

    The line GPRS will be the main and 3G will be secondary, this redundancy offers a high level of availability of communication between the two sites.

    is it possible to configure this redundancy with a cisco switch layer 3? If this is the case do you have a tutorial or a link which explain how to do this work with a layer switch 3 ciso?

    all information will be useful for me, thanks

    Hello

    The config is one provided by anisaini, but you need to change your NAT like this:

    IP nat inside source MAIN interface map route x/x main interface

    IP nat inside source route-map interface o/o interface secondary SCHOOL

    Interior int z/z interface

    IP nat inside

    int x/x

    NAT outside IP

    int y/y

    NAT outside IP

    access-list 99

    permit x.x.x.x y.y.y.y where x.x.x.x is your home subnet addresses and y.y.y.y is the corresponding generic mask

    PRIMARY route map

    match ip add 99

    match interface x/x

    SECONDARY route map

    match ip add 99

    game interface y/y

    Concerning

    Alain

    Remember messages useful rate.

  • C300 Cisco switches when Cisco is considering additional CDP?

    Dear all,

    When Cisco plans to support CDP on C300 switches?

    I have it configured with LLDP based on the document "Adding a Cisco Switch series of 300 Business from small to SBCS 2.0", but this isn't the perfect according to me

    Kind regards

    Vellum Tsekov

    Vellum,

    We are very close. We anticipate releasing the firmware supporting CDP, CLI and several other new features this month - June 2011.

    Ivor

  • Web authentication with RSA SecureID on a Cisco Switch

    Hello

    I recently searched by linking in our Cisco Switch of GB 2960 S with RSA SecureID via Radius

    I already managed to tie in to ssh access

    but I failed to make it work for http / web access to the switch

    I think it's because we use 'single use' maximum security with RSA SecureID tokens

    the web interface tries to authenticate several times against the Radius server RSA SecureID part

    (agreement on the first authentication, but every time after that he's going to want a different code in token)

    I was wondering if anyone knew a way around this? (if there is a way to get the right switch authenticate once instead of multiple times the radius server)

    FYI, the switch is a WS-C2960S-24TS-L with IOS 15.0 (1) SE2

    Hello Chris,

    You can test the following configuration?

    AAA webtac_grp radius server group

    Server

    expiration of cache 1

    authorization cache profile httpauth

    hiding authentication profile httpauth

    !

    AAA authentication login httpauth cache webtac_grp group webtac_grp

    AAA authorization exec httpauth cache webtac_grp group webtac_grp

    AAA authorization network httpauth cache webtac_grp group webtac_grp

    AAA cache profile httpauth

    all the

    IP http server

    IP http authentication aaa - authentication of the connection httpauth

    IP http authentication aaa exec-authorization httpauth

    RADIUS server host key *.

    I know for sure the above configuration works when you use GANYMEDE + instead of RADIUS in order to avoid multiple guests due to the authentication of JAVA Applets to access the GUI of the IOS. I him have not tested against RSA acting as an authentication server.

    NOTE: As "aaa authorization exec" is configured the RSA should send Service-Type attribute with administrative value for it to work as expected.

    If this was helpful please note.

    Kind regards.

  • MacBook as Cisco Switch profiles in 2.1

    I'm experimenting with trying to Mac to the profile to the ISE. 2.1. I tried installing AnyConnect, and for some reason he sees it as a Nexus 7000 switch.

    Here's the debug info

    Attribute: AAA-server value: ise-2
    Attribute: Airespace-Wlan-Id value: 5
    Attribute: AllowedProtocolMatchedRule value: EAP_Chaining_Wireless
    Attribute: AuthenticationMethod value: MSCHAPV2
    Attribute: AuthorizationPolicyMatchedRule value: default
    Attribute: BYODRegistration value: unknown
    Attribute: CacheUpdateTime value: 1465417705907
    Attribute: Called-Station-ID value:20-3a-07-66-96-20
    Attribute: Calling-Station-ID value:a4-5e-60-cf-81-83
    Attribute: CreateTime value: 1464896196500
    Attribute: DestinationIPAddress value: 10.10.207.156
    Attribute: Value DestinationPort: 1812
    Attribute value: DetailedInfo: authentication succeed
    Attribute value: IP address: 10.10.204.114
    Value of the attribute identifier: Device:
    Attribute value: device Port: 32772
    Attribute: Value Type Device: Device Type #All Types of devices
    Attribute: DeviceCompliance value: unknown
    Attribute: DeviceRegistrationStatus value: NotRegistered
    Attribute: value:A4-5E-60-CF-81-83 EndPointMACAddress
    Attribute: EndPointPolicy value: Cisco-switch
    Attribute value: EndPointPolicyID: 4afc4ae0-6d8e-11e5-978e-005056bf2f0a
    Attribute: EndPointProfilerServer value: ise-2
    Attribute: EndPointSource value: RADIUS probe
    Attribute: FailureReason value: 5440 abandoned Endpoint EAP session and began again
    Attribute: FirstCollection value: 1464896196418
    Attribute: value Framed-IP-Address:
    Attribute: value Framed-IPv6-Address:
    Attribute: IdentityAccessRestricted value: false
    Attribute value: IdentityGroup: profile
    Attribute value: IdentityGroupID: b132c920-6d8d-11e5-978e-005056bf2f0a
    Attribute: IsThirdPartyDeviceFlow value: false
    Attribute: LastActivity value: 1465417705904
    Attribute: LastNmapScanTime value: 1465245395228
    Attribute: value: a place #All locations
    Attribute: LogicalProfile value: infrastructure network devices
    Attribute: MACAddress value: A4:5E:60:CF:81:83
    Attribute value: MDMServerID:
    Attribute: MatchedPolicy value: Cisco-switch
    Attribute value: MatchedPolicyID: 4afc4ae0-6d8e-11e5-978e-005056bf2f0a
    Attribute: Value MessageCode: 5440
    Attribute: NAS-IP-address value: 10.10.204.114
    Attribute: NAS-identifier value: WLC-3
    Attribute: NAS-Port value: 1
    Attribute: NAS-Port-Type value: Wireless - IEEE 802.11
    Attribute value: Network Device Profile: Cisco
    Attribute: NetworkDeviceGroups value: location #All locations, Types of devices Device Type #All
    Attribute: NetworkDeviceName value: WLC-3
    Attribute value: NetworkDeviceProfileId: 8ade1f15-aef1-4a9a-8158-d02e835179db
    Attribute: NetworkDeviceProfileName value: Cisco
    Attribute: NmapScanCount value: 1
    Attribute: NmapSubnetScanID value: 0
    Attribute: YES value: Apple, Inc.
    Attribute value: PhoneID:
    Attribute: PolicyVersion value: 32
    Attribute value: PortalUser:
    Attribute: PostureApplicable value: Yes
    Attribute: PostureAssessmentStatus value: NotApplicable
    Attribute value: PostureExpiry:
    Attribute: PostureStatus value: unknown
    Attribute: RadiusFlowType value: Wireless802_1x
    Attribute: RadiusPacketType value: AccessRequest
    Attribute: RegistrationTimeStamp value: 0
    Attribute value: response: {RadiusPacketType = drop ;}
    Attribute: SSID value:20-3a-07-66-96-20
    Attribute: SelectedAccessService value: lack of access to the network
    Attribute value: SelectedAuthenticationIdentityStores: the internal users, ise-2, All_AD_Join_Points
    Attribute: SelectedAuthorizationProfiles value: DenyAccess
    Attribute: Service-Type value: box
    Attribute: StaticAssignment value: false
    Attribute: StaticGroupAssignment value: false
    Attribute: StepData value: 4 = standardized Radius.RadiusFlowType, 5 = EAP_Chaining_Wireless
    Attribute value: TLSCipher: ECDHE-RSA-AES256-SHA
    Attribute: TLSVersion value: TLSv1
    Attribute: TimeToProfile value: 44
    Factor of certainty attribute value: Total: 30
    Attribute value: UniqueSubjectID:
    Attribute: UpdateTime value: 1465245396597
    Attribute: allowEasyWiredSession value: false
    Attribute: Host-name value:
    Value of the attribute: ip:
    Attribute: value operating system switch: Cisco Nexus 7000 (NX - OS 4.2.6) (99% accuracy)
    Attribute: result of operating-system value: Cisco Nexus 7000 switch (NX - OS 4.2.6) (99% accuracy)
    Attribute: SkipProfiling value: false

    Yes you must add the ISE server in your help-dhcp (dhcp relay) in order to obtain information about the DHCP request to profile correctly the devices.

    Even after setting correctly ISE in your DHCP relay, you aren't able to profile?

  • Turn on the mtu on cisco switch and cisco user server

    Hi all

    someone got bad luck turning on the mtu on their cisco switch?  I guess I need to turn it on for all because the command is for all ports on cisco catalyst and my server switch is nearby to my user of switches and a broadband bandwidth 6 G or 6 ports, I need to turn it on for all user ports?

    Thanks for any comments, that you can add.

    I assume you mean Jumbo frame support! You shouldn't have any problems with that. Please take a look at for example http://www.cisco.com/en/US/products/hw/switches/ps700/products_configuration_example09186a008010edab.shtml for more details and the configuration of the different switches. According to the model, the parameters are for dedicated ports only or the entire switch. In the case of the switch everything you will need to reload (reboot) switch, so be careful.

    André

  • Switch SG200 - 26 & questions

    Hello, I am a small business owner trying to set up a network in my office with VOIP phone service. I have a little understanding of networks, but am not a professional. We have a SG200 - 26 pass and have access to the internet via a modem cable of the Charter Business. The modem cable is plugged into one of the ports on the switch. We also have a plugged into the cable modem wireless router. Internet and Wi - fi works very well. I have a dynamic ip address.

    I could not get an IP phone to receive an IP address of the switch. Voice VLAN is enabled, so I don't know what the problem is. Marketing of Cisco touted plug-and-play VOIP, but it seems that it's not so easy!

    I spent half a day, this research so far and have not been able to solve the problem. Any suggestions or advice to a person with similar problems if all goes well would be greatly appreciated. Thanks in advance for any help.

    The modem must be connected to the WAN port on the router or a 'internet'. The modem should not be connected to the switch at all.

    Internet-> Modem-> router-> Switch-> phones/computers

    -Tom
    Please mark replied messages useful

  • How to open the port 161 on the ASA and Cisco switches for monitoring of BB

    Dear all,

    I want to install BB to monitor snmptraps suffering of failure.

    The newspaper shows BB cannot connect to all ports of the switch 161, and I even can't telnet to 161 XXX_17f for example.

    My switches are Cisco C3550, C2950, etc. of the ASA.

    Mon 7 Nov 15:43:03 2011 bbnet cannot connect to the server XXX_17f on port 161

    Mon 7 Nov 15:43:03 2011 bbnet cannot connect to the server XXX_9f on port 161

    Mon 7 Nov 15:43:03 2011 bbnet can't connect to XXX server on port 161

    Thank you

    Anson

    no need to adjust anything in bb-hosts. If you have added setings in bb-hosts, delete them. Also remove associated in bbvar/logs log files. (otherwise, you'll have purple when you delete the SNMP, trap tags bb-hosts)

    A column of trap will be that no show until the device sends a trap to BB.

  • GANYMEDE + with 3560 cisco switch configuration issue

    Hi Forum,

    Here's my setup GANYMEDE + on my cisco 3560 switch and my question is, how can I configure the switch, if I would not type enable after I put the user name and password? with configs below, users will need to type activate whenever they connect to the switch in order to enter the user exec mode. Please let me know if there is something missing in my configs to help me avoid typing 'enable '.

    Thanks in advance,

    MacBookAir: ~ MacBook$ ssh [email protected]/ * /.

    Password:

    Switch > en

    Switch #show run | include the aaa

    AAA new-model

    AAA server Ganymede group + mpcc

    AAA authentication login default group Ganymede + local

    activate the default AAA authentication no

    AAA authorization exec default group Ganymede + authenticated if

    AAA authorization commands 1 default group Ganymede + authenticated if

    AAA authorization commands 15 default group Ganymede + authenticated if

    start-stop radius group AAA accounting dot1x default

    AAA accounting exec default start-stop Ganymede group.

    orders accounting AAA 1 by default start-stop Ganymede group.

    orders accounting AAA 15 by default start-stop Ganymede group.

    AAA accounting system default start-stop Ganymede group.

    AAA server RADIUS Dynamics-author

    AAA - the id of the joint session

    Switch #.

    Hello

    Add the level of privilege 15 control VTY line configuration.

     line vty 0 4 [..] privilege level 15 ! 

    Concerning

Maybe you are looking for