Cisco cat. 2960 switch to SF 302-08MP

Similar Questions

• Cisco Catalyst 2960-S switch configured for 802. 1 x sends a query to access the Radius Server Radius

  Setup

  Cisco Catalyst 2960-S running 15.0.2 - SE8

  Under Centos freeRadius 6.4 RADIUS server

  Client (supplicant) running Windows 7

  When Windows client is connected to the port (port 12 in my setup) with authentication of 802. 1 x active switch, show of Wireshark that catalyst sends ask EAP and the client responds with EAP response. But it made not the request to the Radius server. The RADIUS test utility 'aaa RADIUS testuser password new-code test group' works.
  Here is my config running. Any advice would be greatly appreciated.
  #show running mySwitch-
  mySwitch #show running-config
  Building configuration...

  Current configuration: 2094 bytes
  !
  version 12.2
  no service button
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  no password encryption service
  !
  hostname myswitch
  !
  boot-start-marker
  boot-end-marker
  !
  activate the password secret 5 $1$ Z1z6$ kqvVYRQdVRZ0h8aDTV5DR0 enable password!
  !
  !
  AAA new-model
  !
  !
  AAA dot1x group group radius aaa accounting dot1x default start-stop radius authentication group!
  !
  !
  AAA - the id of the joint session
  1 supply ws-c2960s-24ts-l switch
  !
  !
  !
  !
  !
  control-dot1x system-auth
  pvst spanning-tree mode
  spanning tree extend id-system
  !
  !
  !
  !
  internal allocation policy of VLAN no ascendant interface FastEthernet0 no stop ip address!
  GigabitEthernet1/0/1 interface
  !
  interface GigabitEthernet1/0/2
  !
  interface GigabitEthernet1/0/3
  !
  interface GigabitEthernet1/0/4
  !
  interface GigabitEthernet1/0/5
  !
  interface GigabitEthernet1/0/6
  !
  interface GigabitEthernet1/0/7
  !
  interface GigabitEthernet1/0/8
  !
  interface GigabitEthernet1/0/9
  !
  interface GigabitEthernet1/0/10
  !
  interface GigabitEthernet1/0/11
  !
  interface GigabitEthernet1/0/12
  switchport mode access
  Auto control of the port of authentication
  dot1x EAP authenticator
  !
  interface GigabitEthernet1/0/13
  !
  interface GigabitEthernet1/0/14
  !
  interface GigabitEthernet1/0/15
  !
  interface GigabitEthernet1/0/16
  !
  interface GigabitEthernet1/0/17
  !
  interface GigabitEthernet1/0/18
  !
  interface GigabitEthernet1/0/19
  !
  interface GigabitEthernet1/0/20
  !
  interface GigabitEthernet1/0/21
  !
  interface GigabitEthernet1/0/22
  !
  interface GigabitEthernet1/0/23
  !
  interface GigabitEthernet1/0/24
  !
  interface GigabitEthernet1/0/25
  !
  interface GigabitEthernet1/0/26
  !
  interface GigabitEthernet1/0/27
  !
  interface GigabitEthernet1/0/28
  !
  interface Vlan1
  IP 10.1.2.12 255.255.255.0
  !
  IP http server
  IP http secure server
  activate the IP sla response alerts
  recording of debug trap
  10.1.2.1 host connection tcp port 514 RADIUS-server host 10.1.2.1 transport auth-port 1812 acct-port 1646 timeout 3 retransmit testing123 key 3.
  Line con 0
  line vty 0 4
  password password
  line vty 5 15
  password password
  !
  end

  interface GigabitEthernet1/0/16
  !
  interface GigabitEthernet1/0/17
  !
  interface GigabitEthernet1/0/18
  !
  interface GigabitEthernet1/0/19
  !
  interface GigabitEthernet1/0/20

  Have you run wireshark on the server because the request to switch? If so you make sure that there is a response from the server? For Windows network POLICY Server (I've never tried Centos), you must ensure that the request is related to a policy which then authenticates, or denies access. Usually, it is a matter of such attributes and the seller.

  Regarding the configuration, it seems a bit out of the AAA. Try to remove the:

  line "aaa dot1x group service radius authentication" and this by using instead:

  "aaa dot1x default radius authentication group". After the dot1x word you are supposed to provide a list of the authentication or the default Word if you do not want to use a list.

• 6248 FI Cisco's UCS with Cisco catalyst 2960 connectivity

  In our environment, UCS, connects the two fabric as a Cisco Nexus 9 k switch upstream with vPC and it works well. But we need to isolate some virtual servers on the blades of the UCS on an entirely separate DMZ switch which is Cisco catalyst 2960.

  (1) so can we connect cables separate physical twinax of FI uplink ports to catalyst 2960 and connectivity to the servers in the DMZ keeping YEW to nexus connectivity as it is?

  (2) in this case, as there are 2 switches to nexus core 1 and 2 so we will require 2 cisco catalyst 2960 for disjoint such a network? or otherwise we can connect A FI and FI B to one on his 2 numbers 2960 switch. Gig SFP ports + 10?

  (3) also suggest things must be taken in charge, the best guides practice or an illustration in this context.

  The assignment is static and cannot be changed.

  location 1 - uplink 1

  slot 2 - uplink 2...

  If a property has no blade, the corresponding uplink is not used and that can not be changed!

  This dedication of uplinks of IOM is of course a lot of resources: cables, ports on FI, allowed port,...

• Cisco Nexus 5548UP switch current Version 5.2 (1) N1 (4)

  Hi, we are currently have Cisco Nexus 5548UP switch current Version 5.2 (1) N1 (4)

  It is not listed as affected version:

  Known affected releases:

  (5)

  5.2 (1) N1(8A)

  6.0 (2) N2 (5)

  7.0 (3) N1 (0.125)

  7.0 (4) N1 (1)

  7.1 (0) N1 (0.349)

  The fixed versions known as follows:

  Known fixed releases:

  (7)

  6.0 (2) N2 (4.3)

  6.0 (2) N2(5A)

  7.0 (1) ZN (0.615)

  7.0 (5) N1 (0.173)

  7.0 (5) N1 (1)

  7.1 (0) N1 (0.371)

  7.1 (0) N1 (1)

  It needs to be updated to the latest versions?

  If Yes, what version of the fixed known better adapt our current version

  Cisco Nexus 5548UP switch current Version 5.2 (1) N1 (4)

  Thank you.

  I had the same question, so I opened a folder of TAC to find the version of the software. I was told that the software listed as available in the bug report are versions of NX - custom OS and that there was no version patched for the 5548p. The support engineer also said that the updates of Nexus 5 k should not until November or December. The best advice I could get was to subscribe to the bug report and wait to be notified of an available upgrade.

• M8024 K-switch Cisco WS - 2960 S-24TD-L switch interconnection

  Hello

  I have 4 ports SFP + Module switch M8024-K. I want to establish connectivity 10Gig between M8024-k and Cisco WS-C2960S-24TD-L switch. I'm not able to find the exact Dell transmitter/receiver part number required for 4-port SFP + Module and cord Patch LC - LC-OFC required dell. I have no problem with Cisco parts.

  Kindly suggest exact reference numbers.

  Jean Marc

  This transceiver is listed on the list of compatibility of the server but not the switch. It can work in the switch, but I can't confirm that it will be because he is not on the compatibility list.

• Is it possible to superimpose a 3cr17161-91 3Com with another Cisco layer 3 switch?

  Hello

  Nice day.  I would like to ask whether it is possible to superimpose a 3cr17161-91 3Com to a layer 3 Switch Cisco? The two will be stacked using the SFP modules available to the general public.

  Thank you

  Hi Rey, not with switches for small businesses. Small business past stack with their own range of products running the same software. Something like SGE2010 won't stack with SG500-48 as example.

  -Tom
  Please evaluate the useful messages

• How can I configure an 802. 1 x in a with IOS 15.0.2 2960 switch?

  Hello

  I'm trying to config a switch WS-C2960-24PC-L IOS 15.0 (2) SE5 and C2960-LANBASEK9-M to use 802. 1 x in my network, but when I type the following commands the IOS does not recognize the interface commands and I can't fill in the parameters:

   Router# configure terminal Router(config)# dot1x system-auth-control Router(config)# aaa new-model Router(config)# aaa authentication dot1x default group radius Router(config)# interface fastethernet2/1 Router(config-if)# switchport mode access Switch(config-if)# authentication port-control auto (or dot1x port-control auto) Switch(config-if)# authentication host-mode multihost Router(config-if)# dot1x pae authenticator Router(config-if)# end 

  Source: http://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/...

  I used the same commands in another switch with IOS 12.x and I have no problem to complete the settings so... anyone know if:

  * Should I use other commands to enable this feature in this IOS?

  * Should I use other IOS?

  Thanks in advance,

  I guess you forgot to paste in the following command:

   switchport mode access

  Orders 'authentication... ". "will not be displayed when the port is always in dynamic/circuit to access mode. These commands are available only after you configure static port to be an access port.

• How to use Layer 2 Ports on the Cisco 1841 router switch

  Hello

  I use the Cisco 1841 router with a single port layer 3 Fe0 and 8 Ports switched.

  I gave the IP on the Fe0 port which is connected to another router.

  Now I don't know how to use Layer 2 of the router switch ports.

  I tried to make one of the port as a Port of access by switchport mode access and connected my laptop and the same subnet given IP, but I can't ping my Fe0 IP port and vice versa, as I am also unable to ping my laptop router.

  Can someone explain to me how to use these ports on layer 2?

  Hi Muhammadatifmasood, take a look at the link below, I'm sure that you will find it useful.

  https://supportforums.Cisco.com/discussion/10919631/how-enable-routing-b...

  BenSamayoa

• 2960 switch configuration for test of dark fiber

  Hi guys

  IM new in network. We have a dark fiber, tests aside > dark fiber > side (B) to test the fiber link, im using a switch 2960 and configure a vlan - vlan 31 and I assign port 1 to switchport access vlan 31. I'm not sure whether the switch need to configure a default gateway, which is the other tat switch side b. I'm not able to ping to my pc either [port 2/0/1]. the fiber link that connected to the switch's port 2/0/49]

  can you help me to check if this configuration is correct?  Here's the running configuration. TX a lot for the help.

  #sh SRO-SWITCH-TEST run
  Building configuration...

  Current configuration: 2679 bytes
  !
  version 12.2
  no service button
  horodateurs service debug uptime
  Log service timestamps uptime
  encryption password service
  !
  SRO-SWITCH-TEST hostname
  !
  boot-start-marker
  boot-end-marker
  !
  enable password 7 110A1016141D5F01072728
  !
  username admin privilege 15 password 7 00071A 150754
  !
  !
  No aaa new-model
  clock timezone 8 MYS
  switch 2 supply ws-c2960s-48ts-l
  !
  !
  !
  !
  !
  pvst spanning-tree mode
  spanning tree extend id-system
  !
  !
  !
  !
  internal allocation policy of VLAN ascendant
  !
  property intellectual ssh version 2
  !
  !
  interface FastEthernet0
  no ip address
  !
  GigabitEthernet2/0/1 interface
  switchport access vlan 31
  switchport mode access
  No auto mdix
  spanning tree portfast
  !
  interface GigabitEthernet2/0/2
  !
  interface GigabitEthernet2/0/3
  !
  interface GigabitEthernet2/0/4
  !
  interface GigabitEthernet2/0/5
  !
  interface GigabitEthernet2/0/6
  !
  interface GigabitEthernet2/0/7
  !
  interface GigabitEthernet2/0/8
  !
  interface GigabitEthernet2/0/9
  !
  interface GigabitEthernet2/0/10
  !
  interface GigabitEthernet2/0/11
  !
  interface GigabitEthernet2/0/12
  !
  interface GigabitEthernet2/0/13
  !
  interface GigabitEthernet2/0/14
  !
  interface GigabitEthernet2/0/15
  !
  interface GigabitEthernet2/0/16
  !
  interface GigabitEthernet2/0/17
  !
  interface GigabitEthernet2/0/18
  !
  interface GigabitEthernet2/0/19
  !
  interface GigabitEthernet2/0/20
  !
  interface GigabitEthernet2/0/21
  !
  interface GigabitEthernet2/0/22
  !
  interface GigabitEthernet2/0/23
  !
  interface GigabitEthernet2/0/24
  !
  interface GigabitEthernet2/0/25
  !
  interface GigabitEthernet2/0/26
  !
  interface GigabitEthernet2/0/27
  !
  interface GigabitEthernet2/0/28
  !
  interface GigabitEthernet2/0/29
  !
  interface GigabitEthernet2/0/30
  !
  interface GigabitEthernet2/0/31
  !
  interface GigabitEthernet2/0/32
  !
  interface GigabitEthernet2/0/33
  !
  interface GigabitEthernet2/0/34
  !
  interface GigabitEthernet2/0/35
  !
  interface GigabitEthernet2/0/36
  !
  interface GigabitEthernet2/0/37
  !
  interface GigabitEthernet2/0/38
  !
  interface GigabitEthernet2/0/39
  !
  interface GigabitEthernet2/0/40
  !
  interface GigabitEthernet2/0/41
  !
  interface GigabitEthernet2/0/42
  !
  interface GigabitEthernet2/0/43
  !
  interface GigabitEthernet2/0/44
  !
  interface GigabitEthernet2/0/45
  !
  interface GigabitEthernet2/0/46
  !
  interface GigabitEthernet2/0/47
  !
  interface GigabitEthernet2/0/48
  !
  interface GigabitEthernet2/0/49
  switchport access vlan 31
  switchport mode access
  Nonegotiate speed
  spanning tree portfast
  !
  interface GigabitEthernet2/0/50
  !
  interface GigabitEthernet2/0/51
  !
  interface GigabitEthernet2/0/52
  !
  interface Vlan1
  no ip address
  Shutdown
  !
  interface Vlan31
  Description OFFICE SRORO
  IP 192.168.31.250 255.255.255.0
  !
  IP http server
  IP http secure server
  !
  Line con 0
  line vty 5 15
  !
  end

  SRO-SWITCH-TEST #.

  Hey the config looks ok just disappeared locally pointing to the other switch, default gateway as you say

  PC must be set with the 192.168.31.250 gateway vlan 31 and have a static ip address in the same range and same subnet

  Make sure that your vlan 31 is to the top/top

• Compatibility matrix for Cisco Catalyst 3012 Switch Module

  Hello

  I'm checking the compatibility of the VMware vSphere 5.5U1 Guide and an IBM switch module Part Number: 43W4401 product name: Cisco Catalyst Switch Module 3012. The search of the matrix returns Cisco 1GigE I350 LOM who seems to identify the drivers of Cisco.

  Can anyone help clarify and check if this IBM re-branded chassis switch module is supported and to a specific firmware for the switch code? Thank you all.

  L2/L3 switches are off-limit of drivers for vSphere hypervisor, so you don't find on the HCL...

  Here's IBM BladeCenter matrix interop for VMware:

  IBM ServerProven compatibility

  and here is the interoperability of the switch Cisco Catalyst 3012 with IBM BladeCenter chassis:

  IBM BladeCenter Interoperability Test program

  I hope this helps...

• Cisco Nexus 1000v switch

  Hi, I have 2 questions about the Switch Cisco Nexus 1000v.

  First of all, why use it rather than the standard vswitch distributed?

  Second, if an environment currently works using distributed vswitches, what are the impacts and the problems likely to introduce a Switch Cisco Nexus 1000v? Is there a process for the upgrade?

  See you soon

  Here is a comparison for the most up-to-date between the optioins network:

  http://www.Cisco.com/en/us/prod/collateral/switches/ps9441/ps9902/solution_overview_c22-526262.PDF

  The great driver with most of the people running the 1000v I talked to is give visibility to the network team and streamlining changes made to the virtual network environment. In a great organazation with a network operations team, they will create an IVR to route a new VLAN, and then create the new VLAN on all switches distribution and access in the area of layer 2, just 1000v allows them to move forward and it create on the hypervisor using a set of commands that they already know.

• Issue between Cisco and ESX switch

  It is a small deployment with an ESX Server running a Windows Small Business SERVER 2003.

  ESX server has 2 network cards, previously a NIC was connected to a small FastEthernet Switch netgear and all workstations have been working on it.

  I replaced the netgear with a Cisco WS-C2960S-24TS-S and the field still works fine, the problem is that I can't connect to the service console or the VI client from a computer connected to the switch.

  I can't ping the IP switch ESX service console and also can not ping the switch since the service console.

  Switch and ESX console can ping the Windows Virtual Machine and the virtual machine can ping both of them. Therefore, I can get to the VI client via Wirtual Machine (not the best scenario to manage one of its right VMS ESX host?)

  I don't know what the problem is, but it sounds a lot there is a problem with the configuration of port / vlan on the cisco switch.

  Can a Cisco expert help out me here?

  Here are some details of the configuration.

  Port group service Console and the port Vm group do not use no matter what config VLAN on the ESX Server.

  CONFIG NETWORK ESX

  # esxcfg - NICS - l

  Name PCI Driver link speed Duplex MAC address MTU Description

  vmnic0 0b: 00.00 bnx2 up to 1000Mbps Full 00: 1a: 64:b6:06:92 1500 Broadcom Broadcom NetXtreme II BCM5709 1000Base-T Corporation

  vmnic1 0b: 00.01 bnx2 up to 100 Mbit/s Full 00: 1a: 64:b6:06:94 1500 Broadcom Broadcom NetXtreme II BCM5709 1000Base-T Corporation

  vusb0 nickname cdc_ether Up 0Mbps 02: 1a: 64:b6:06:99 half 1500 unknown unknown

  # esxcfg - vswitch - l

  Switch name Num used Ports configured Ports MTU rising ports

  64 6 64 1500 vmnic0 vSwitch0

  Name PortGroup VLAN ID used rising Ports

  PORTS 0 1 vmnic0 VM GROUP

  0 1 vmnic0 Console service

  Switch name Num used Ports configured Ports MTU rising ports

  64 3 64 1500 vmnic1 vSwitch1

  Name PortGroup VLAN ID used rising Ports

  BIG POND ADSL 0 1 vmnic1

  # esxcfg - vswif - l

  Port Group/DVPort IP IP family name address Netmask Broadcast Enabled TYPE

  vswif0 Service Console IPv4 192.168.0.100 255.255.255.0 192.168.0.255 true STATIC

  # ifconfig

  Lo encap:Local Loopback link

  INET addr:127.0.0.1 mask: 255.0.0.0

  RACE of LOOPING 16436 Metric: 1

  Dropped packets: 1310258 RX errors: 0:0 overruns: 0 frame: 0

  Dropped packets: 1310258 TX errors: 0:0 overruns: 0 carrier: 0

  collisions: 0 txqueuelen:0

  RX bytes: 4531037961 (4.2 GiB) TX bytes: 4531037961 (4.2 GiB)

  vmnic0 Link encap HWaddr 00: 1a: 64:B6:06:92

  RUNNING BROADCAST MULTICAST MTU:1500 metric: 1

  Dropped packets: 94579247 RX errors: 0:0 overruns: 0 frame: 0

  Dropped packets: 99834049 TX errors: 0:0 overruns: 0 carrier: 0

  collisions: 0 txqueuelen:1000

  RX bytes: 127899970453 (119.1 GiB) TX bytes: 19056702095 (17.7 GiB)

  Interruption: 209 memory: 92000000-92012100

  vmnic1 Link encap HWaddr 00: 1a: 64:B6:06:94

  RUNNING BROADCAST MULTICAST MTU:1500 metric: 1

  Dropped packets: 3585973 RX errors: 0:0 overruns: 0 frame: 0

  Dropped packets: 3018690 TX errors: 0:0 overruns: 0 carrier: 0

  collisions: 0 txqueuelen:1000

  RX bytes: 2304776001 (2.1 GiB) TX bytes: 1021855293 (974,5 MiB)

  Interruption: 217 memory: 94000000-94012100

  vswif0 Link encap HWaddr 00:50:56:45:43:6 C

  INET addr:192.168.0.100 Bcast:192.168.0.255 mask: 255.255.255.0

  RUNNING BROADCAST MULTICAST MTU:1500 metric: 1

  Dropped packets: 367248 RX errors: 0:0 overruns: 0 frame: 0

  Dropped packets: 126300 TX errors: 0:0 overruns: 0 carrier: 0

  collisions: 0 txqueuelen:1000

  RX bytes: 33905320 (32.3 MiB) TX bytes: 154760077 (147,5 MiB)

  vusb0 Link encap HWaddr 02: 1a: 64:B6:06:99

  RUNNING BROADCAST MULTICAST MTU:1500 metric: 1

  Fall of RX packets: 341442 errors: 0:0 overruns: 0 frame: 0

  Dropped TX packets: 0 errors: 0:0 overruns: 0 carrier: 0

  collisions: 0 txqueuelen:1000

  RX bytes: 26973918 (25.7 MiB) TX bytes: 0 (0.0 b)

  CISCO SWITCH CONFIGURATION

  Port on which the ESX nic is connected to:

  interface GigabitEthernet0/1

  switchport mode trunk

  switchport nonegotiate

  switchport port-security

  aging of the switchport port security 2

  security violation restrict port switchport

  inactivity of aging switchport port-security type

  macro description cisco-computer desk

  spanning tree portfast

  spanning tree enable bpduguard

  !

  ******************************************

  CONFIGURATION OF VLAN

  !

  interface Vlan1

  IP 192.168.0.253 255.255.255.0

  !

  interface Vlan2

  Description management Vlan

  no ip address

  !

  interface Vlan10

  Test description Vlan

  IP 192.168.121.253 255.255.255.0

  !

  Default IP gateway 192.168.0.1

  Any help would be appreciated.

  Thank you

  I think I've seen this before. I'm not super familiar with this switch, but I think that the problem is with cisco-computer office macro.

  Try using the macro switch cisco instead since you are addressing a vSwitch on the other end. You can always check the mac address table and see if your Mac to the vswif (service console) make their appearance. If they are not then appear this is an inconsistency in the port between the Cisco Switch and vSwitch.

  Louis

• SG200-50 Cisco GigaBit Smart Switch - can not update FW

  Hello

  I tried to update the FW, but get this message:

  Backup/upgrade the Firmware/language

  Bytes transferred: 7339520 Status: Copy failed Error message: Copy: Code SW file size is more

  I tried to upgrade to version 1.4.0.88 release 1.3.7.18

  The boot loader is version 1.0.0.1

  SOM hope you can help me to update the FW.

  Fr. Torben Grosen

  TorbenVejle,

  My name is Ishmael. IAM with Small Business Support Center. From my understanding, you tried to update firmware and its not not downloading. I like to think to upgrade the boot first, code before trying the firmware. Startup code are on the same zip as the firmware folder. I tried the same thing in my lab with SG300 with an initial bootstrap code and then I upgraded to 1.3.5.06 allowing the firmware to download.  So give it a try and let me know how it turns out.

• MARCH Cisco and Foundry switch integration.

  Hello

  Is it possible to add foundry devices to the device in MARCH. Would I be able to import specific events and the State of the system?

  Thank you

  March does not directly support these devices. You will need to create some parsers customized for each message the device. It is not fun (and not having to do that is the main point of a SIM card) but it can be done.

• Gateway to Comcast Business class SMCD3G-CCR and Cisco 2960 G switch

  Hello

  I'm looking to upgrade my silent switches to a Cisco 2960 switch.  I wanted to check and make sure that this configuration would be funded.

  I need to configure the 4 VLANS on Cisco 2960 switch, 1 for the vmotion traffic, which would have no internet access, one for management traffic that does not have internet access, for standard server traffic and traffic vmserver, who should access to the internet.

  The Cisco switch working with gateway SMCD3G-CCR ok, or do I need another router for this?  If yes why?

  I don't know if this is the right forum but I know that Cisco linksys bough, so I hope someone can point me in the right direction.

  Thank you

  Hello.

  These products are processed by the Cisco Small Business Support Community.

  * If my post answered your question, please mark it as "acceptable Solution".

  Thank you!