problem with dhcp Cisco sg200 voice vlan

Similar Questions

• Problem with switch Cisco SG300

  Hi guys,.

  I have a problem with switch Cisco SG300-20. After the failure of the switch boots in a kind of mode. It requires

  MAC address and serial number to be entered manually for the device. I tried to find information on this mode, but without success.

  My question is: what is this mode and how to make the start switch in this mode?

  How can I turn on the switch in this mode on purpose if it happens again and I enter the wrong information by accident.

  Thank you

  Hi Aegx, this is a rare case where the switch basically forget his identity. Although the switch is recoverable, it is recommended the switch RMA.

  If you are certain that you have neither taken under warranty, all the information that is asked is on the bottom of the switch sticker. If the thumbnail is is not present you wouldn't able to do this is correct.

  In addition, if you make a typographical error, the switch will have undesirable failures that are permanent, such as the inability to update software.

• Problem with DHCP broadcast between VLAN

  Hello

  I trying to solve the lab that I set up, I have a problem with broadcast between VLANS with my DHCP. I looked around the vmware community to find my answer, but I did not who is right why I post here!

  So here's my situation :

  • ESX with 2 race of VM:
    • An R2 of 2012 Windows running a DHCP server with a configured scope
      • This virtual machine is assigned to the vmnic4 with the port VLAN 100 group
    • A Windows 7, which I use as a customer
      • This virtual machine is assigned to the vmnic4 with the port VLAN 110 group
  • Switch Cisco with a simple configuration:

  interface FastEthernet0/1

  Description LINK FOR ESX

  switchport mode trunk

  switchport nonegotiate

  interface FastEthernet0/24

  Description OF LINK ROUTER

  switchport mode trunk

  • Configuration of the Cisco "router on the stick:

  interface FastEthernet0/0.100

  encapsulation dot1q 100

  10.1.1.254 IP address 255.255.255.0

  interface FastEthernet0/0,110

  encapsulation dot1q 110

  IP 10.1.2.254 255.255.255.0

  IP helper 10.1.1.0

  
  

  The resolution of the problems that I did:

  • Affecting the client static IP and that both virtual machine can ping each other
  • Moving from the client to the same VLAN as DHCP server, and the DHCP server is to give the client an IP address.
  • Sniffing the packet:
    • I can see the client DHCPDiscover
    • I can see the router with the command "debug ip dhcp server packet" package passed on the 10.1.1.0.
    • I am not able to see the packets from the router to DHCP perspective

  That's why I guess miss me something ESX configuration.

  Thanks in advance for reading this post!

  
  

  PS: I've linked a vswitch configuration screenshot
  

  I think that you have configured an incorrect address of IP support, take a look at the following line:

  IP helper 10.1.1.0

  
  

  Your DCHP server is really 10.1.1.0? I think not, since 10.1.1.0 corresponds to the ID of the network 10.1.1.0/24 network.
  

• Problems with HP Slate 7 voice tab

  Hello

  Since last 1 week I am facing a problem with my tab HP 7 voices, in which half of the screen is is blackened and vibrations can been seen on the screen.

  I bought this tablet Flipkart online August 17, 2014.

  Problem solved with the force update of the software

• Problem with MAC pinning and new VLAN

  [Cross Announces nexus 1000V and forums of the UCS]

  Hi all, I have a working of the UCS 1.4 configuration (3i) and the Nexus 1000V 1.4 and according to best practices guide uses "channel-group auto on mac - pinning mode" on the uplink of Nexus. I have a problem when you add a new VLAN in this environment, and it is a reproducible problem in two different facilities.

  I pass by the VLAN usual creation process on the Nexus, the network upstream and within the UCS himself. I create new port vethernet profile and set it as an access port in the new VIRTUAL LAN. However when I join a VM (existing or new) to this new port vethernet profile in vCentre virtual machine cannot communicate with anything. However, if I disable MAC pinning with 'no channel-group auto on mac - pinning mode', the virtual machine will start instantly talk to the outside world and the new VIRTUAL LAN is running. Can I turn MAC pinning back once again, and everything continues to work.

  So the question is, is this normal or is there a problem? MAC the Θtiquetage has a brief interruption of the uplink, so is not a viable long-term customer solution when they want to add new VLAN. Is it possible to add new VLANS in this scenario without any unavailability of the network, but brief?

  Thank you

  Close the loop on this.  You tap the CSCto00715bug.

  Symptom: New MAC address is not learn on vem in the l2 table even though the mac address table is not overflow yet. vemcmd show l2-emergency-aging-stats | grep "Number of entries that could not be inserted:" will show extreme large number. Conditions: Nexus1000v VEM running on SV1.4 release. There are two CPU cores on the host. This issue may happen at race condition. Workaround: Reboot the ESX/ESXi host. 

  This problem is corrected in the 1. 4A release.

  Kind regards

  Robert

• Problem with the Cisco VPN and Vista client

  Hello

  I have an easy VPN server configured on a c2811 and users use the Cisco VPN client. Lately, I have users running Windows Vista 64 bit and I need to know what is the correct version of the vpn client, I have to use and the compatibility problems with the server, I configured.

  Thank you and best regards.

  Cisco VPN Client doesn't have any version that is compatible with Vista 64 bit OS. The only customer that Cisco has released that supports the 64 bit OS's AnyConnect, but it is only supported on the CISCO ASA Appliance

• Problem with DHCP SG200-26

  Hello, I have a switch SG200-26 for a small business network that gives me some irregular deadlines.  We have a wired broadband to Internet services, (cable Modem), which is plugged into a port on the switch Gig.  In our office space, we have a wireless router for PCs connected to SG200-26, and connected by Ethernet to SG200-26 IP phones.  In the PC desktop access via Wireless-> SG200 - 26-> cable Modem.

  DHCP is provided by cable modem for the devices connected to the SG200-26, devices on the wireless get an IP address of the wireless AP.

  I have an IP phone and a laptop that won't get a DHCP address when it is connected to the switch SG200-26.  I know that DHCP works on the cable modem because the 6-10 devices work without problem.  The phone that will not get an address is new.  When I connect to the wireless router to test it, it gets an IP address without problem.  I connect my laptop to the switch and that you do not get a DHCP address.  I rebooted the cable modem, all devices got an IP address except this new phone.  I blame the phone, but my laptop is not getting and address either.  I also checked the cable operator and they don't see any errors on the cable Modem.

  Help.  I fear that the switch is failed the DHCP information and when the current IP address leases expire I have a dead network.

  Thank you

  Hello

  If you have this option then the best Setup is to connect your E2500 directly to the modem with a static IP address, then connect the switch to the E2500 and connect the whole switch. It works like a charm.

  Please let me know if you have any other questions.

• WLC5508 problem with dhcp and flexconnect local switching

  Hello
  I have a new WLC 5508 with firmware 8.0.133.0 (suggested one right now) and I'm trying to set up a WLAN with flexconnect and local switching, but when I try to connect a client it is not getting an IP address.

  Here's what I did:
  -put the AP mode flexconnect
  -support vlan in the AP has allowed
  -local switching license and only in wlan
  -spread the vlan from AP to the local gateway
  -put the IP helper on local and pointed the wlc management ip gateway
  -set up a scope for the vlan Server dhcp internal WLC
  -set up a working group with the vlan-wlan association flexconnect

  Here is what I checked:
  -l'AP obtains an IP address in dhcp in the vlan, and a lease for that appear in the DHCP Server internal to the WLC
  -If I put the interface vlan on a switch in DHCP it gets the ip address of the same way
  -If I set the static IP address in the wireless client it ping the local gateway and navigate normally
  -J' tried the deactivation/activation proxy DHCP in the management connected to the WLAN interface, but nothing happened
  -J' tried Central DHCP activation of treatment with no luck

  It seems a dhcpdump on the wireless client client ask for an IP address, but get no response, as if it were the DHCP request is be filtered or diverted somehow.

  All you other ideas?

  DHCP on the controller is not a real dhcp server, see it that way. The management interface is used when defining aid ip and proxy dhcp must be enabled for internal dhcp. In your configuration, dhcp only works for the AP and should not work for any cable customer. You should be able to use the IP helper pointing to your WLC management interface but also make sure that you create an interface on the WLC for the local subnet and assign the interface to a correct address, even if it is not actually using it. Then in the new dynamic interface of this local subnet, you create, make sure that the primary dhcp is the ip address of the controller management. I think it works.

  I would really use a true if possible dhcp server or even put a dhcp scope on the interface of L3 on the production site.

  -Scott

  Please evaluate the useful messages *.

• Problem with the Cisco ASA 5525 X SFR and Firesight high school

  Hi team,

  We have two ASA 5525 X installed on them and Firesight in a Linux VM whose two SFRs are registered with SFR failover mode. We use the SAA secondary off the hook if the primary fails to turn on the secondary manually switch the wan cable. I turn on the ASA secondary every weekend to take the configuration of the primary for the ASA and the SFR and close by button walk / stop.

  Last week I turn on high school ASA and the Firesight couldn't see the secondary SFR and show the message below:

  Module device heartbeat: device > don't send heartbeats.

  (I should mention I can Pinger the IP ADDRESS)

  I tried to study the problem without success.

  I also deleted the sensor just Firesight devices management in case something is stuck, and I'm trying to re added without success.

  I'm new in firepower so... any ideas?

  Thank you

  Finally, this problem has been resolved by the redefinition of firepower:

  see detailed here procedure to perform this redefinition;

  http://www.Cisco.com/c/en/us/support/docs/security/ASA-firepower-service...

  Before that, it appeared that firepower was not very healthy:

  After a success "" configure Manager add xxxxx"command.

  the command of managers show show nothing;

  He should have shown this result:

  > Display managers
  Host: 193.193.2.75
  Registration key: AZERTY
  Inscription: pending
  State of the PRC:

  on the other hand, in expert mode, the following command shows several processes (and not in the normal state):

  sudo pmtool status | grep-i down

  Last point,

  After the recreation and reconfigure all this fire power, installed in the ASA secondary standby, was considered to be OK under Firesight health Monitor,.

  but after 10mins, it appeared in critical condition with the following message:

  "Interface"DataPlaneInterface0"receives not all packages.

  This is normal and due to the fact that Eve ASA receives no flow and the same goes for firepower inside this ASA;

  by performing a failover from the primary to the secondary ASA, this critical message disappeared for firepower inside the ASA Sec and appeared for firepower inside the ASA elementary school

• Problem with the cisco 5510 port mapping

  Hello

  My device Cisco ASA 5510, ASA 8.4 (2), 6.4 AMPS (5) 206

  What I'm trying to achieve.

  (1) listening host 10.10.11.108 port 8080

  (2) trying to access from WAN for example port 8090

  I tried command sequence:

  Network 10.10.11.108_8080 object
  Home 10.10.11.108
  NAT (LAN1, WAN) interface static 8080-8090 tcp service

  allowed to Access - list line extended 11 tcp WAN_access_in any object eq 10.10.11.108_8080 8080
  WAN_access_in access to the WAN interface group

  But I do not have access gett. Can someone help me to solve this case?

  I think I know what the problem is:

  object service tcp-8080 service tcp destination eq 8080 object service tcp-8090 service tcp destination eq 8090 

  change to the source destination:

  object service tcp-8080 service tcp source eq 8080 object service tcp-8090 service tcp source eq 8090 
  
  

  no access-list WAN_access_in extended permit object tcp-8080 any object 10.10.11.108_8080 

  access-list WAN_access_in extended permit tcp any object 10.10.11.108_8080 eq 8080

  -Please do not forget to select a correct answer and rate useful posts

• Problems with SSH Cisco 871W

  Hi, I started training for my certification and now have any posible explanation how to configure ssh to a cisco 871w router, and there is no way I can connect. I used TeraTerm Version 3.13 and 4.69 and he keeps asking me the password that I entered correct.

  It's really frustrating because everywhere wherever I look for answers I noticed it should be something simple to do and it does still work for me.

  In any case, this is my config runing if anyone can give me a hand I would really appreciate it

  Current configuration: 1317 bytes

  !

  version 12.4

  service configuration

  no service button

  horodateurs service debug datetime msec

  Log service timestamps datetime msec

  no password encryption service

  !

  hostname labrouter

  !

  boot-start-marker

  boot-end-marker

  !

  enable secret 5 AnLl $1$$ H5XfrfdN5L6bogmtdGW.Y1

  !

  No aaa new-model

  !

  !

  dot11 syslog

  IP cef

  !

  !

  property intellectual auth-proxy max-nodata-& 3

  property intellectual admission max-nodata-& 3

  House.com IP domain name

  !

  !

  !

  username tripi22 password 0 ld30dzy7

  !

  !

  Archives

  The config log

  hidekeys

  !

  !

  property intellectual ssh version 2

  !

  !

  !

  interface FastEthernet0

  !

  interface FastEthernet1

  !

  interface FastEthernet2

  !

  interface FastEthernet3

  !

  interface FastEthernet4

  DHCP IP address

  automatic duplex

  automatic speed

  !

  interface Dot11Radio0

  no ip address

  Shutdown

  Base speed - 1.0 2.0 basic basic-5, 5 6.0 9.0 basic-11, 0 12.0 18.0 24.0 36.0 48.0

  54.0

  root of station-role

  !

  interface Vlan1

  IP 192.168.1.1 255.255.255.0

  !

  IP forward-Protocol ND

  !

  no ip address of the http server

  no ip http secure server

  !

  !

  !

  !

  control plan

  !

  Banner motd ^ C

  ******************************************************************************

  NO JODER

  ******************************************************************************^C

  !

  Line con 0

  password 123

  opening of session

  no activation of the modem

  line to 0

  line vty 0 4

  password 123

  opening of session

  transport input telnet ssh

  !

  max-task-time 5000 Planner

  end

  Current configuration: 1317 bytes

  !

  version 12.4

  service configuration

  no service button

  horodateurs service debug datetime msec

  Log service timestamps datetime msec

  no password encryption service

  !

  hostname labrouter

  !

  boot-start-marker

  boot-end-marker

  !

  enable secret 5 AnLl $1$$ H5XfrfdN5L6bogmtdGW.Y1

  !

  No aaa new-model

  !

  !

  dot11 syslog

  IP cef

  !

  !

  property intellectual auth-proxy max-nodata-& 3

  property intellectual admission max-nodata-& 3

  House.com IP domain name

  !

  !

  !

  username tripi22 password 0 ld30dzy7

  !

  !

  Archives

  The config log

  hidekeys

  !

  !

  property intellectual ssh version 2

  !

  !

  !

  interface FastEthernet0

  !

  interface FastEthernet1

  !

  interface FastEthernet2

  !

  interface FastEthernet3

  !

  interface FastEthernet4

  DHCP IP address

  automatic duplex

  automatic speed

  !

  interface Dot11Radio0

  no ip address

  Shutdown

  Base speed - 1.0 2.0 basic basic-5, 5 6.0 9.0 basic-11, 0 12.0 18.0 24.0 36.0 48.0

  54.0

  root of station-role

  !

  interface Vlan1

  IP 192.168.1.1 255.255.255.0

  !

  IP forward-Protocol ND

  !

  no ip address of the http server

  no ip http secure server

  !

  !

  !

  !

  control plan

  !

  Banner motd ^ C

  ******************************************************************************

  NO JODER

  ******************************************************************************^C

  !

  Line con 0

  password 123

  opening of session

  no activation of the modem

  line to 0

  line vty 0 4

  password 123

  opening of session

  transport input telnet ssh

  !

  max-task-time 5000 Planner

  end

  Hello

  Can you try to change the "connect" command to "local connection" under the vty lines?

  Thank you

  Wen

• PIX 6.3 SNMP MIB, problem with the CISCO-PROCESS compilation - MIB.oid

  I am Edgar Servín

  I have a cactus and got to watch the CPU of the PIX, I got the OID number:

  cpmCPUTotal5sec 1.3.6.1.4.1.9.9.109.1.1.1.1.3

  I used the Cisco SNMP Object Navigator and said:

  Compile the MIB

  Before you can compile CISCO-PROCESS-MIB, you need to compile the MIBS listed below in the order listed.

  Download all of these MIBs (WARNING: does not include non - Cisco MIB) or view details about each MIB below.

  How can I do?

  Hi Edgar,

  compiling the MIBs is necessary only when you are using HP OpenView or something similar. With the cactus, I confess that I have never used myself, but I'm pretty confident that you can just set the OID in Cacti and it will just make a periodic SNMP query for that object.

  HTH

  Herbert

• Problem with the Cisco ASA vpn redundancy?

  Hi all

  I have a series ASA 5500 firewall and need to set a different peer ip for the connection of site2sitevpn. In fact, my goal is, ASA tent first pair ip of the site2site tunnel, when ASA may not reach this ip, try to reach another ip I set before. I can configure this scenerio on Cisco router with this command;

  
  
      crypto map tohub 1 ipsec-isakmp 

   set peer 10.1.1.1 default 

   set peer 10.2.2.2
  
      

  but I wonder what can I do about ASA?

  Thank you.

  Best regards.

  Shane,

  You can configure multiple IP addresses, under the same entry of homologous set on ASA, but it works the same on IOS with preferred peer, it passes between defined peer.

  Marcin

• Need help to set up voice VLAN in SG300

  Hello

  I spent too much time on it now and need help. I'm trying to set up a voice switch VLAN on a SG300 - 28 p. I need to charge a phone Cisco 7965 connected to a port on SG300 - 28 p to use VLAN 100, and a workstation connected to the phone to use Cisco 7965 on VLAN 101 by SG300 - 28 p. In the common Cisco IOS switches, this task is configured as follows:

  interface gi25

  switchport mode access

  switchport access vlan 101

  switchport voice vlan 100

  Trying to achieve this scenario with a Cisco SG300 switch turns into a nightmare. You will have to deal with a Dynamic of VLAN voice Auto Voice VLAN mode. Then, you must have a configured trigger and activated Automatic Smartport . I tried to do this in CLI nothing helps. Cisco 7965 receives an IP address of the access VLAN on Gi15 interface, which is 101 VLAN. I need to receive an address IP of the VLAN 100.

  The current configuration under Gi15 interface is as follows:

  interface gigabitethernet15

  activate the storm control

  broadcast storm control level kbit/s 10

  Storm-control include multicast

  port security throw trap 60

  maximum port security by 10 points

  port security mode max-addresses

  spanning tree portfast

  LLDP-med disable

  switchport mode access

  switchport access vlan 101

  ! next order is internal

  macro auto smartport dynamic_type unknown $native_vlan 101 $voice_vlan 100

  Now, I don't know how the macro auto smartport dynamic_type unknown $native_vlan 101 $voice_vlan 100 command in the config, and I do not know how to remove it.

  When I try to enter the command macro auto smartport type ip_phone_desktop under Gi15 interface, I get the following error message:

  The $voice_vlan macro setting is not configurable by the user

  It seems that the auto attendant smartport macro ip_phone_desktop can not apply the setting $voice_vlan with a value of 100. In fact, I explicitly does not use this parameter to everything in the order of macro auto smartport type ip_phone_desktop ; However, the SG300 switch knows that the voice VLAN VLAN 100, and he's trying to use this VLAN ID as the value of the $voice_vlan parameter, the macro fails.
  

  I tried statically configure the voice VLAN on the switch SG300 using the command id of the vlan 100 voice , but I couldn't get the ip_phone_desktop macro to configure interface Gi15 correctly. Then, I removed the command id of the vlan 100 voice and obtained SG300 to learn his voice VLAN ID of UC560 connected to the SG300 through a trunk port based on the port configuration (connected to SG300) for the trunk of the next UC560:

  switchport trunk vlan 101 native

  switchport mode trunk

  switchport voice vlan 100

  Cisco-switch macro description

  This is the command switchport voice vlan 100 who announces to SG300 via CDP VLAN 100 is a voice VLAN. When I run the command show vlan local VoIP on the SG300, I get the following result:

  VLAN ID - VPT DSCP Source MAC address Interface

  1                    5          46       default           ----                    ---

  * 100 CDP e0:5f:b9:xx:yy:zz gi28

  Thus, it is clear that the SG300 receives information from UC560 via CDP in port Gi28 VLAN 100 is the voice VLAN. However, I can not always apply the ip_phone_desktop macro to SG300 Gi15 interface.

  Also, I tried to set up vState ofoithis vlan auto-déclenché as well as the commands in global configuration State vlan automatic voice activated mode. Or setting changes anything view voice VLAN announced at Cisco 7965 where Cisco 7965 continues to use VLAN101 (access the VLAN assigned to the interface Gi15).

  Hello telecastle,

  The Macro just get in the way most of the time. A default state on the switch a user will set the id of the vlan voice with orders

  (config) #voice vlan id 100

  * This will create the vlan 100

  VLAN, VoIP? * You can use to change your defaults for dscp and cos a long with all the other settings.

  State of vlan (config) enabled automatic #voice

  (config) #interface rank fa1-24

  (config-if-range) #switchport trunk vlan 101 native

  trunk (config-if-range) #switchport allowed vlan add 100

  * This function will define the vlan native on the trunk to 101 for the data port and vlan tagged will be 101 for the voice.

  CDP is enabled automatically and should learn the features of the phone and get on the phone to the vlan 101 on this port.

  CDP of the UC should automatically fill in the switch of the SG. You may need to upgrade the switch to the latest firmware however. Also make sure that the DHCP server for the voice if the CPU must be configured accordingly.

  Let me know if this helps.

  Cisco Small Business Support Center

  Randy Manthey

  CCNA, CCNA - security

• Voice VLAN help please

  My client has 2 SG300 - 52p and 5 SG300 - 28 p. We have installed a VoIP telephony system earlier this year. At the time of installation, we placed the phone on the native VLAN 1 System. Now, they want to pass the phone system to a new VLAN, because their class C subnet is running out of addresses. DHCP is managed by their Active Directory and their router/firewall is a box to sort out. The SG300 switches have a basic configuration only.

  To move the phone system to a new VLAN, I created 20 VLAN on each switch. I then turned on VLAN auto voice. I have all the ports on each switch setting on the trunk. Computers are plugged into the back of the phone. I then created a virtual interface in the box to unravel for VLAN 20. Box unravel also manages DHCP to the new VIRTUAL LAN. Active Directory is always manage DHCP for VLANS native.

  I ping from each switch to the bridge of the new VLAN. Since each computer I can ping the gateway and on the new LAN VIRTUAL phone system. However, phones will not seize an address on the VIRTUAL LAN and when they have the static value, they cannot communicate with other devices on the VIRTUAL LAN.

  Any help would be much appreciated. I don't know what I'm on.

  Here is an example of part of a switch configuration to work with Zultys phones where voice VLAN is 100 and data VLAN 10:

  database of VLAN
  VLAN 10,20,100
  output
  ID of the vlan 100 voices

  interface fastethernet1
  Description "RCP and voice."
  switchport trunk allowed vlan add 100
  trunk switchport vlan 10 native
  !
  interface fastethernet2
  Description "RCP and voice."
  switchport trunk allowed vlan add 100
  trunk switchport vlan 10 native

  In your case, you need a trunk port with 20 VLAN Tag on your firewall (or an access port to a separate physical port on VLAN 20.  The default gateway served on the phone (or put statically) should be the interface on intellectual property.  Then, you can also allow routing inter - vlan for admin access or MXIE if you use.

  One thing to note on Zultys is by default I think the device profile disables LLDP, but on phones, it is enabled out of the box.  For the first time that a phone downloads its config from the Zultys it can turn of LLDP unless you have checked the box to keep it on.