Port / vlan without ACLs

Similar Questions

• Can we create a Vlan without SRM for disaster recovery testing

  We are working on plans for our recovery after disaster in our VMWare environment.  We have a recovery Site which has a NETAPP file server we reproduce our VM data warehouse and SQL data.   We have no RS, but must be able to test if possible disaster recovery with Production upwards.   Is it possible to configure a VLAN and do a test isolated Dr. without SRM?   Thank you

  Welcome to the VMware communities forum.

  You can create a VLAN without SRM.  You will need to properly set up your network hardware, and then you add new virtual machine port groups to your ESXi hosts.  You can then save the virtual machines by giving them a different name and starts in isolation.  When you attempt to save the virtual machines they will always have a reference for the port VM production group so you'll want to make sure you update you turn on.

• Ports & VLANS

  Hey all - serious brain issue today.

  I have a core switch with a port set to VLAN 10 & 20 tag traffic.

  In this core switch port, I have a GS748T, where I'm the odd ports # be vlan 20 & ports even # to vlan 10.

  Objective:
  I have a DHCP server, which serves the two VLAN - so I was hoping that plug into one line, withdrew a DHCP server IP address, but not luck.

  I've been playing with the PVID & VLAN settings on the ports, but impossible to find the right combo. What is the setting for the port of uplink on 748?

  Thoughts? Help?

  Thank you!

  -Tom

  I have it.

  GS748:
  

  DHCP release/renew unsuccessful for different networks when I move the cable to different VIRTUAL local area network ports.

  So:
  Interface/Port 1: VLAN 20.
  VLAN 20 membership: U
  Port PVID config: VLAN 20
  Uplink port: VLAN 20: T

  Interface/Port 2: VLAN 10
  VLAN 10 members: U
  Port PVID config: VLAN 10
  Uplink port: VLAN 10: T

• Limit the number of Port VLAN UCS

  Hi, Cisco:

  Is it possible to INCREASE the limit of the number of Port VLAN of 6000 by FInterconnect 1.4(2b) running?

  Imagine I have 4 and selected VLAN 10 vNIC by Profile Service and 2 vHBA.

  So in this case, how many local network VIRTUAL ports will be used? It's 60 or 40? Assuming that it is 60, he the man I CAN ONLY HAVE 100 Service profiles?

  I was wondering WHY is the VLAN Port count limit so low? What about the other fabric and HOW it contributes to the limit of the number of Port VLAN?

  Please notify.

  Really appreciate it as we roll and unroll UCS mass.

  RIL

  Yes makes sense.  The golden rule in access to resources is only allow what you need, not just what is available.

  See you soon,.

  Robert

• I can mutually ping in router RVS4000 VLAN without another router

  One of our clients has RVS400 router with 4-port LAN VIRTUAL. We have recently added Crestron devices to our network and have some network problem. Search Google points to this page: Network slow question as discessed in this article: Troubleshooting network slow issues... There are two things happening with the Crestron system:... www.chicagotech.net/NetForums/viewtopic.php?f=1&t=7737 It recommends to create a local network VIRTUAL for Crestron. However, the Cisco RVS400 manual States: "function VLANS at layer 2.» VLANS isolate traffic within the VIRTUAL LAN, router layer 3 functioning router is needed to allow traffic between the VLANS. Layer 3 routers identify segments and coordinate with local networks virtual. "If we create two VLANS on the router without another router, can access us each other in these two VLAN?

  Hi chicagotech.

  I implemented a RVS4000 in our laboratory and created 2 VLAN, VLAN 1 and VLAN 2. I connected two PCs, 1 on each VLAN and they were able to ping each other with Inter-VLAN routing active. Here are the steps I followed:

  1. Go to L2 Switch-> create a VLAN. I have added VLAN ID: 2 and click Add VLAN
  2. Go to membership to a VLAN and select VLAN 2 from the drop-down. In the table for Port 2, select the Untagged radio button and click on save at the bottom.
  3. Go to settings-> Advanced Routing and ensure that the Inter-VLAN routing is enabled. (It is enabled by default)
  4. Connect a PC to port 2 and make sure he gets an IP to VLAN 2. (in this case 192.168.2.100) Ping this address in VLAN 1 PC-> success. From VLAN 2 PC, ping 192.168.1.101 (VLAN 1 PC)-> success.
  5. As a test I gave then the PCs in each VLAN to an IP address static and turned off the DHCP server on the router. 192.168.1.102 was able to ping 192.168.2.102 and vice versa.
  6. I then disabled Inter-VLAN routing and the PC could ping is no longer among them. They still had full access to the internet.

  It seems that the devices connected to the RVS4000 in different VLANS have no trouble to access each other with Inter-VLAN routing active.

• Can not read the serial port VISA without MAX

  Hello

  I'm trying to build an application that will interface with a Black Cat Systems GM-10 radiation detector.

  The app works fine on my computer (with the full development system OR) but when I install it on another computer, without LabView, the application cannot see the serial port!

  I checked that the driver is installed correctl and Windows can see the device, but when I run my program, he can't seem to access the serial ports.

  I then tried to install MAX on the second computer, how the application worked well, but as I install this app in other places, I don't really have the ability to install MAX everywhere (software must be autonomous).

  Any help would be appreciated!

  Z

  I would have joined the project file, but the forums seem to not want to allow me to download that big of a file.

  What version of LabVIEW are you using? With 8.x, the installer is very able to install the runtime of NI-VISA and MAX. If you are using an older version of LabVIEW, there is an option to include the series VISA support. Install just MAX will do nothing to make the available ports. This is the VISA that does this.

• Config port / VLAN on switch MXL

  I'm not a network engineer, but I try to set a port to my MXL switch to a VLAN that will route traffic on virtual machines on a local network of calculation.

  This is the port Te 0/52 on the back of the MXL and I am running ESXi on servers in my m1000e.  In fact, I have two MXLs in the tissue A of the m1000e configured with VLT via the interfaces of the FourtyGig.  This part has been implemented by people of Dell Tech Services, making the installation.

  Here's what looked like the config to start:

  dsa1 #show vlan

  Codes: *-Default VLAN - VLAN, GVRP, R - G remote control Port Mirroring VLAN, P - primary, C - community, I - isolated
  O Openflow
  Q: U - no identified, the T - tag
  x - unidentified Dot1x, X - Dot1x tag
  o - unidentified OpenFlow, O - OpenFlow tag
  G - GVRP tag, M - Vlan-stack, H - VSN tagged
  i unidentified intern, I - labeled internal, untagged, V v - VLT - VLT tag

  Ports Status Description Q NUM
  * 1 U active Po33 (0/33.37 Fo)
  U Po41 (Te 0/41-44)
  Te U 0/1-32
  115 active Mgmt T Po41(Te 0/41-44)
  V Po33 (0/33.37 Fo)
  Te T 0/1-32
  486 active VMGuest T Po41(Te 0/41-44)
  V Po33 (0/33.37 Fo)
  Te T 0/1-32
  Te U 0/49-50

  And I wanted to add VLAN 1000 to calculate, so I did the following:

  dsa1 #conf

  dsa1 (conf) #interface Te 0/52
  dsa1 (conf-if-you-0/52) #show config
  !
  interface TenGigabitEthernet 0/52
  no ip address
  MTU 12000
  hybrid portmode
  switchport
  FlowControl rx tx off
  spanning tree rstp edge port bpduguard stop-on-violation
  no downtime

  dsa1 vlan (conf) #interface 1000
  dsa1 (conf-if-vl-1000) #show config
  !
  interface Vlan 1000
  Description information
  name computer
  no ip address
  Tagged TenGigabitEthernet 0/1-32
  Unmarked TenGigabitEthernet 0/52
  no downtime

  VLAN now looks like:

  dsa1 #show vlan

  Codes: *-Default VLAN - VLAN, GVRP, R - G remote control Port Mirroring VLAN, P - primary, C - community, I - isolated
  O Openflow
  Q: U - no identified, the T - tag
  x - unidentified Dot1x, X - Dot1x tag
  o - unidentified OpenFlow, O - OpenFlow tag
  G - GVRP tag, M - Vlan-stack, H - VSN tagged
  i unidentified intern, I - labeled internal, untagged, V v - VLT - VLT tag

  Ports Status Description Q NUM
  * 1 U active Po33 (0/33.37 Fo)
  U Po41 (Te 0/41-44)
  Te U 0/1-32
  115 active Mgmt T Po41(Te 0/41-44)
  V Po33 (0/33.37 Fo)
  Te T 0/1-32
  486 active VMGuest T Po41(Te 0/41-44)
  V Po33 (0/33.37 Fo)
  Te T 0/1-32
  Te U 0/49-50
  1000 active Compute T Te 0/1-32
  Te U 0/52

  But I wanted to add THAT VLT Po33 tag to the new VLAN because there is in others, not because I really understand what it does.  In my view, it is used for load balancing?  If I label it with the command 'tag Po33' in the config of vlan, out with the status "T" instead of "V".

  Here are the details of the VLT:

  dsa1 #show vlt detail
  Local LAG Id counterpart LAG Id status Local Peer status Active VLAN
  ------------  -----------  ------------  -----------  -------------
  41 41 UP UP 1, 115, 486
  dsa1 #show brief vlt
  VLT area in brief
  ------------------
  Domain ID: 100
  Role: secondary
  Primary role: 4096
  ICL Link Status: to the top
  Status of heart rate: upward
  VLT Peer status: to the top
  The local unit ID: 0
  Version: 6 (4)
  Local system MAC address: f8:b1:56:09:70:b1
  MAC address of the remote system: f8:b1:56:09:70:fd
  Configured the system MAC address: 00:01:00:01:00:01
  Version of the remote system: 6 (4)
  Restore delay timer: 90 seconds
  Delay-restore Abort threshold: 60 seconds
  Routing peer: disabled
  By the peer-routing-Timeout timer: 0 seconds
  Multicast peer-routing timeout: 150 seconds

  So my questions are, I'm on the right track?  It will do what I want it to do is send traffic on port 0/52 Te which is labeled in ESXi with 1000 VLAN?  Should I worry the VLT marking stuff and if yes, how should I do the VLT marking rather than normal marking?

  The connection only 1 port of MXL 1 to a device, this device is considered a switch/host an orphan. A VLT connection will have 1 port each MXL placed in a port channel and connected to a device.

  Here is a good article that covers the VLT in use with different Topologies.

  http://Dell.to/1wfDl3n

  And the User Guide is a good source to have as well.

  http://Dell.to/1Hy70bb

• 5524 - jumbo Frames - entire unit or only to certain ports / vlan

  Hello

  is - anyone idea, if possible to use frames only for ports specific it s?

  After enable JumboFrames, it will create a problem of common computers network traffic? I intended to create a VIRTUAL LAN to connect to the storage and r.620 (under XenServers).

  * We plan to use this unit to connect a Dell Power Vault MD3200i volumes as iSCSI offering.

  * According to our (ftp://ftp.dell.com/Manuals/all-products/esuprt_ser_stor_net/esuprt_powerconnect/powerconnect-5524_User%27s%20Guide_en-us.pdf ) switch mannual: "Activation iSCSI automatically enables Jumbo frames and allows the control of flow on all interfaces.

  Allowing the frames on the switch will allow the frames extended on all interfaces. I don't see a way on this option to activate the frames extended on a specific interface or VLAN. Allowing the Jumbo will not create any problem with common computer network traffic. If this switch is connected to another switch, it's a good idea to have some Jumbo frames enabled on the interface of switches connection also.

  Here is a white paper with some info good iSCSI.

  www.dell.com/.../Dell_EqualLogic_%20iSCSI_Optimization_for_Dell_Power_onnect_%20Switches.pdf

  See you soon

• More ports numbers in ACL taking AAGR more?

  Hello

  If I use the permit tcp any any eq 1 8 10 15 instead of below:

  permit tcp any any eq 1

  permit tcp any any eq 8

  permit tcp any any eq 10

  permit tcp any any eq 15

  With the help of all the port in the same line numbers will use more ACL AAGR? According to my understanding, if we define a range to an ACL line, which would reserve a portion of the AAGR for this range, but there is no if booked AAGR, we define a single port as in permit tcp any any eq 1.

  Then, will be permit tcp any any eq 1 8 10 15 be also part of the AAGR just like using " " 1-4range "" and I have to take into account the use of resources while using this?

  Hi Vivek,

  I see. Well, honestly, I don't know for you. These questions are extremely specific to the platform, and each router platform and switch supporting ACL can implement these things differently.

  A note: I see you are using a router ISR G2 3945. These devices, to my knowledge, do not have an AAGR and that they do not become ACL in a hardware dedicated. SRI (x 800) and routers ISR G2 (x 900) are software-based and ACL is processed on the CPU. Specifically on these platforms, there is no need to worry about the use of the AAGR - because there is no AAGR there at all.

  Best regards
  Peter

• Uplink port VLAN

  Hello:

  I'm lost

  I know not if you have for example two uplink ports that belong to the same vlan, and two or more NICs for asociated to this VLAN, pinning happen dynamically

  I don't know how to set up a VLAN and assign it to a vNIC

  But I can't found how to link the uplink port to the VLAN in the UCS Manager

  Can someone help me please

  Thanks in advance

  Al

  Al,

  In the end-host mode for ethernet, when you set vlan in the UCSM the vlan is automatically assigning / configured on all uplink and port of the server.

  This is a chapter of the Guide to config:

  http://www.Cisco.com/en/us/docs/unified_computing/UCS/SW/GUI/config/Guide/2.0/UCSM_GUI_Configuration_Guide_2_0_chapter15.html

  However, since version 2.0, there is a feature in which you can control or confiure different VLAN on different uplink ports. This feature is characteristic L2-disjoint and here is a URL to configure:

  http://www.Cisco.com/en/us/docs/unified_computing/UCS/SW/GUI/config/Guide/2.0/UCSM_GUI_Configuration_Guide_2_0_chapter21.html

  I hope this helps!

  . / Afonso

• Redirect Port RV042 bypassing ACL

  I have a RV042 with Port Forwarding configured for RDP. This Port forwarding rule is applied before my ACL - sort of subnets that are not allowed through are allowed in. Version 4.0.0.07 firmware. Any help would be greatly appreciated.

  Hi Eric, the default state table may be the problem.

  Try to access rule something like -

  Deny action

  Service of all

  The source WAN interface

  IP source everything

  Destination IP everything

  Save

  Permitted action

  RDP service

  The source WAN interface

  Source IP - xx.xx.xx.xx

  Destination IP - xx.xx.xx.xx

  Save

  -Tom
  Please mark replied messages useful

• SG 300-10. Fiber mapping of ethernet ports (VLAN)? ...

  Hello

  the incoming fiber on ports 9 and 10 are on different subnets.  I need to map the subnet on the 9-1-9 ethernet ports and port 10 on its own.  I have the device IPv4 address a static address on the same subnet as port 9.  I don't know if there is an easier approach, but I tried to map the ports using VLANs (see attached screenshots).  We do not yet have the fiber link for port 10, so I have not had the chance to test, but I wanted to confirm that my setup is healthy.  I used the vlan by default for ports 1-9, because I need to manage through this subnet.  I added vlan 10 for 10 port, but I do not know if I have it configured correctly... Please notify.  Thank you.. !

  Gidday Greg,

  Thanks for the quick chat on IM, that's what you try to do?

  

  What about Dave

• vShield Manager interface network & group of port / vlan

  Hello:

  I'm new to vShield and looking to use it in our environment.  I read the documentation and seeks to install the first part, the Device Manager vShield.  By reading the docs, it specifies the management interface for the vShield Manager is in its own group of port.  Why is this?  Is it okay to put this interface in a group of existing port?  Is it possible in a port with another management SMV Group (vCenter, etc.)?  Also, is it better practice to have this in a standard vs dvswitch, or isn't it important?  I was looking through posts and the other docs and so far I don't see a clear reason why it must be in its own group of port.

  So far, the only element that we will consider is vShield Endpoint, for now.  We have no plans to watch App or Edge, etc.

  Thanks in advance!

  Hello

  The Manager can be put on any standard or distributed port group. Do not create any new groups-port. The only thing that is necessary to access vCenter/SSO and DNS, NTP server (mirror).

  There is no need to create a new. IMHO, this could be a failure in the doc.

  Kind regards

  Roland

• How VLANs ' IP subnet ing works with based port of VLAN (series N2000 and N3000)

  Hi all

  I have a small pile of x N3024 2 acting as my heart L3 with a lag of 2 x 10 g down to a stack of x N2048 5 acting as L2 switch for my PC workstations.

  Workstations are that all on the port assigned VLAN 10 (switchport access vlan 10). I have a bunch of developers who want to access without restrictions more or less to assign random IP addresses for their VM (Virtualbox and VMware) Workstation.  As you can imagine, I would like some control over this situation.  the powerconnect guide I described features of subnet IP VLAN but does not seem to enter in how it works and interacts with the port actually function vlan assignments.

  What I currently have is the VLAN 10 assigned to a segment that support the subnet 172.100.x.x which dates back to our base of L3 for routing to other segments. What I want to do is to configure the VLAN based on IP and then load the dev is to config their VM with another IP range, say 10.10.x.x.

  Theory here is, I set the L3 core with say 20 VLAN and an IP to register in L3 path between subnets and then configure the battery switch L2 workstation with IP - based VLAN to recognize 10.10.x.x and separate on VLAN 20.

  However, I think the simplified here question is if I have a nail up to 10 ports VLAN, will the than basic work IP subnet VLANS as I want only it? Or, I need to create a subnet IP VIRTUAL local area network for the two IP ranges? I have to remove the assignenment VLAN per port and are based entirely on the treatment of subnet IP VLAN?

  If there is a better RTFM on this topic you can tell me I would appreciate it

  Thank you!

  I ended up calling specialists... great Dell technical support here.

  In fact, the IP based VLAN works very close to what I want to achieve. Missing from the user guide is that the port needs to be in the mode. Ports using switch port mode and bound to a VLAN just didn't work... probably because the vlan IP based did not differ from the port binding. Dell support has suggested to use the trunk mode, but my answer is finished using the general mode; any traffic not referenced, PVID located my usual LAN vlan ID and acceptance of port traffic of new vlan based on IP. In this way, I'm able to have a physical host DHCP on the corporate LAN and a virtual machine on that host to bind to a different subnet which is then isolated in the new NAV based on IP.

• PowerConnect 5448, how all the trunk of physical ports and allow all the VLAN tags to pass transparently

  I would like to achieve such a goal, do all acts of switch ports 5448 as 'trunk', that is, just as an entry-level switch. Yes, I want all the tags VLAN through seamlessly.

  Let me explain more clearly. If

  • With MAC1 PC1 is connected to switch port 1 (port 1) in short, PC2 with MAC2 is connected to port 2.
  • PC1 sends a packet with vlanid = 30 ethernet VLAN tag,.

  I want the ethernet packet must be SENT to port 2 without modification, i.e. 2 PC will receive the package with exactly the same byte packets that PC1 sends.

  Currently, I want to configure all ports from the switch to act like this, but how to do this? Can someone tell me the more concise CLI commands to achieve? Alternatively, it is possible via the web interface?

  I must again complain the poor manual, which talks about this concept and this notion over and over again (both of ambiguous statements that the author of manual does not), BUT doesn't explain them not at the level of the content of the packages, so I'm totally at a loss.

  I tried the web interface. Simply together port 1 and 2 for access mode or general mode does not work.

  Please help me. Thank you in advance.

  Thank you, Josh, you begin to point me in the right direction.

  Now, I know just affecting a Trunk port, or general mode is NOT sufficient.  I have to give what kind of package VLAN (i.e. what VLAN ID) are allowed to pass through.

  To do this assignment, I have to take 2 steps. say first of all, the database "vlan" to recognize a VLAN ID in the world, then say that some specific port is allowed to pass through with this VLAN ID specific packages.

  Thus, in order to pass packets VLAN with VLAN ID 18-25 no modified (marked packets in packages marked on) g7 to the g8 to port port, I have to do:

  Console # config
  Console (config) # vlan database
  Console(config-VLAN) # vlan 18-25
  Console(config-VLAN) # exit

  Console (config) # interface ethernet g7
  Console # switchport general mode
  Console # switchport General allowed vlan add the tag of 18-25

  and again for the g8. And if I want to 48 ports to act like that, I have to write this kind of order 48 times right? All the shortcuts?

  Some useful links for me: http://hasanmansur.com/2012/10/14/powerconnect-switchport-modes/