Refills of 6500 switch to ROMMON invites

Similar Questions

• Cannot Telnet to 6500 switch

  Telnet still working on our 6500 switches and today it stopped. We use Ganymede. This is the message that we receive when you try to open a session

  % Failed authorization.

  Here is the config Ganymede and aaa

  AAA new-model

  !

  !

  AAA of default login authentication group Ganymede + activate

  the AAA authentication enable default group Ganymede + activate

  AAA accounting exec default start-stop Ganymede group.

  accounting AAA commands default 15 stop only Ganymede group.

  Default connection accounting AAA power Ganymede group.

  AAA accounting system default start-stop Ganymede group.

  !

  !

  !

  AAA - the id of the joint session

  radius-server host 192.168.100.253

  RADIUS-server timeout 10

  RADIUS-server application made

  radius-server key 7...

  other switches are still authenticating correctly using the same Ganymede.

  What could happen to her. We received a lot of messages saying it could not 192.168.100.254 of the Management Server Vlan but GANYMEDE is 254. Can you please help. Tried to create a local user name, but that has not worked for a temporary fix.

  Thank you.

  Check the ACS > reports and activity > failed attempts.

  ~ BR
  Jatin kone

  * Does the rate of useful messages *.

• OfficeJet 6500 - switch from USB to wireless connection?

  Got a new MacBook Pro (OS 10.6 Snow Leopard) and new Officejet 6500 Wireless, installation on old wired eMac (OS x 10.4.11) seemed to go smoothly. Fine prints of eMac/USB connection, but I can't figure out how to go wireless to print from MacBook. (User guide says to use the network printer configuration utility in Device Manager/Info and settings - but that the utility is not listed. I'm pretty sure that the printer is on my network without wire - set - up seemed OK, and the network was recognized immediately during the initial installation (on the eMac), Safari recognizes the printer via Bonjour on the MacBook, etc.. As an experimentI tried to print from MacBook still and you have something like "printer offline".

  Basically I'm a novice at this (and HP technical support is essentially down to the day, so I can't yet begin the session of 3 hours so many people report), any help at all would be appreciated.

  Sonofa...! This is where, under Print > Copies & Pages > page layout. (Not exactly intuitive given that the interface is different for pre - 10.6.) But now, all right. Thank, very much .)

• Switch all 6500 FWSM

  I'm setting up a cisco 6509 switch with FWSM, but it a little confusing to implement. I'm following the next of the http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00808b4d9f.shtmldocumentation, however, depending on the following configuration has failed. I would check if my interpretation is correct. The FWSM firewall is like a part doesn't work don't not with switch, from what I've seen on the configuration of the conversation of FWSM example with the switch through a VLAN specific and am not together, correct? If so, created because the configuration is incorrect? The next option below.

  6500 switch

  interface vlan 10

  IP 192.168.10.1 255.255.255.0

  FWSM

  interface vlan 10

  nameif outside

  security-level 0

  address 192.168.10.2 255.255.255.0

  interface vlan 20

  nameif inside

  security-level 100

  address 172.16.10.1 IP 255.255.255.0

  interface vlan 30

  nameif dmz

  security-level 60

  address 172.16.20.1 255.255.255.224

  No VLAN 10,20 and 30 create 6500 switch.

  Concerning

  Ricardo

  "not create VLAN 10,20 and 30 on the 6500 switch."

  All VLANS have exist to L2 on the 6500. So, if you do a ' sh vlan "on the 6500, you should see VLAN 10,20,30. If you have not your configuration will not work.

  In addition, you must have L3 vlan interface to the external interface, you have your config, IE. -

  6500 switch

  interface vlan 10

  IP 192.168.10.1 255.255.255.0

  But you must not have an interface vlan to VLAN 10 & 20 L3.

  Jon

• Mac Fast User Switching does not properly

  I was just in Apple authorized repair have replaced failing disk, which they did. They have also improved my OS of 10.9.5 in 10.11.

  Now, when I try to use the fast user switching, I am invited for an administrator user name and password every time I change account, and then move the accounts.

  I tried to disable the fast user switching option, by restarting and then on again.  The problem persists.

  I used to get the account name and picture and a password prompt?

  How can I fix it?

  Thank you

  I get this message every time I try the fast user switching?  There seems to be a problem with permissions on the program of switching?

  

• Catalyst 6500 Inter-VLAN routing

  I have a Cisco 6500 switch and I have a question about routing inter - vlan and the command "IP ROUTING".  I use dial-up virtual interfaces (I.e. int vlan 2, int vlan 3, etc.), but I noticed that I don't have the IP ROUTING enabled on my switch but I can route properly between the VLANS.  I have even a little ports that I have configured with the command "no switchport" and I assigned an IP address to these ports.  On routed ports, there is another switch on the other side configured with an IP address and I am able to ping and route traffic to the other network.

  I did some research on this and all the documentation I am able to find talk of how you must enable IP ROUTING to route between the VLANS.  I guess that this should only be done if you go to the road to other not directly connected networks.

  http://www.ccnpguide.com/CCNP-switch-642-813-inter-VLAN-routing/

  http://www.Cisco.com/c/en/us/TD/docs/iOS-XML/iOS/lanswitch/configuration/12-2Sx/lsw-12-2Sx-book/lsw-VLAN-cfg-RTG.html#GUID-F5181D47-F44E-4F01-92E4-9132097BA333

  Can someone clarify this for me?

  For the 6500 Series, IP routing is enabled by default, that so all VLAN can communicate with each other.  You don't need to activate as you do for other switches (IE 3560, 3750, 3850, etc...)

  HTH

• Procedure upgrade switch Cisco 6509-E Firmware

  Hello

  I am eager to deploy QoS on our 6509-E switches. They are running firmware 12.2 (33) SXH and have not been restarted in 7 years. Due to their function in the company, I would rather not restart them where they do not return. The 6509 has two Additional modules are installed. Firmware SXH 12.2 (33) does not display the 'auto qos' command, which makes me wonder how QoS features will have this 7 years old firmware version.

  Can I use firmware version 12.2 (33) SXH to implement QoS on the 6500 switch? Maybe I could get the qos "auto" macro that is included in the firmware later releases and run it manually? It is possible to update the firmware without having to reboot the switch uses two modules SUP?

  Thank you

  It is possible to update the firmware without having to reboot the switch uses two modules SUP?

  N °

  If line cards > 7 years then read THIS.

• 3.3.1 and 6500 CSM

  Hello

  We are facing a problem with a CSM 3.3.1 switch and 6500 and FWSM. We have 2 x 6500 switches with 2 supervisors each + 2 cards FWSM one in each frame. The problem is that we have MSC 3.3.1 who manages the switch and FWSM. The problem is that when we try to delete a VLAN to 6500 we get a deployment failed because the switch will display this message:

  Change VLAN applying % can take a few minutes. Please wait..

  We use the following version of IOS.

  CSR-CORE #sh worm

  Cisco IOS software, software of s72033_rp (s72033_rp-IPSERVICESK9_WAN-M), Version 12.2 (33) SXI2a, VERSION of the SOFTWARE (fc2)

  Technical support: http://www.cisco.com/techsupport

  Copyright (c) 1986-2009 by Cisco Systems, Inc.

  Last update Wed 02 - Sep - 09 01:00 by prod_rel_team

  ROM: System Bootstrap, SX6 Version 12.2 (17r), RELEASE SOFTWARE (fc1)

  The availability of CSR-CORE is 22 weeks, 6 days, 23 hours, 59 minutes

  Availability for this control processor is 22 weeks, 6 days, 23 hours, 55 minutes

  Since CSR-CORE time spent active is 22 weeks, 6 days, 23 hours, 55 minutes

  System returned to ROM by power cycle at 06:42:16 UTC Friday, February 12, 2010 (market SP)

  System restarted at 11:10:39 IS Monday, June 14, 2010

  System image file is "sup - bootdisk:s72033 - ipservicesk9_wan - mz.122 - 33.SXI2a.bin".

  Reload last reason: reload command

  This product contains cryptographic features and is under the United States

  States and local laws governing the import, export, transfer and

  use. Delivery of Cisco cryptographic products does not imply

  third party approval to import, export, distribute or use encryption.

  Importers, exporters, distributors and users are responsible for

  compliance with U.S. laws and local countries. By using this product you

  agree to comply with the regulations and laws in force. If you are unable

  to satisfy the United States and local laws, return the product.

  A summary of U.S. laws governing Cisco cryptographic products to:

  http://www.Cisco.com/WWL/export/crypto/tool/stqrg.html

  If you need assistance please contact us by mail at

  [email protected] / * /.

  processor of WS-C6509-E (R7000) Cisco (revision 1.5) with 983008K / 65536K bytes of memory.

  Card processor ID SMC1401000U

  SR71000 pace at 600 Mhz, implemented 0 x 504, Rev 1.2, 512 KB of L2 Cache

  Last reset to reset the s/w

  30 virtual Ethernet interfaces

  116 of the gigabit Ethernet interfaces

  12 ten interfaces Ethernet Gigabit

  1917K bytes of non-volatile configuration memory.

  8192K bytes of packet buffer.

  65536 K bytes of Flash internal SIMM (sector size of 512K).

  Configuration register is 0 x 2102

  CSR-CORE #.

  Note that we don't use vs.
  TIA,
  Nicos

  Hi Nicolas,.

  answer Panos answers your question? Otherwise, let know us and we will investigate further.

  Thank you

  Stefano

• Problem with NAC and 5508 WLC OOB

  I have a wlc 5508 to shared resources to a 6500 switch. Shared resources to the switch on eth0 and eth1 is also the CASE. The CAM is connected to an access port.

  The SCS and CAM are on VLANS separated and the CASE has been added to the CAM without problem.

  I followed the example of document for OOB WLAN (VLANs and mapping etc.), but I don't get all current identifications. The client is associated and the WLAN interface is the quarantine VLAN but it seems that the client can connect to the network without problem (may web access a server in-house to campus)

  The customer indicated in customers wireless on the device of the cam page

  If I either CASE interfaces close client connectivity is broken.

  Once, randomly the own access connection Page appeared on the client (battery dead and waited for about an hour) but when I rebooted the CASE check it was she never came back.

  I do not set up the SSO part, must it be filled or is it a valid test without it so far?

  No idea where to start with this problem?

  Thank you

  Yes, it looks like that somewhere, your 'placing in quarantine/no authenticated' vlan is filled to the full network, I do not see another explanation.

  Try to configure the WLC for a new vlan quarantine which does not exist anywhere.

  Then you should not have any access at all to anything whatsoever. Then try to leave this vlan gradually reach the heap and constantly test. You should find the point where the vlan 'flows '.

  Nicolas

  ===

  Remember responses of the rate that you find useful

• JOINT-2 licenses

  I inherited a few JOINT-2 modules for our 6500 switches. These have been hanging around for a while and I just need some clarification on how the modules are allowed.

  When you buy these modules they come with a basic license already as the Firewall Services Module. Or are you save with their serial number until you can use them?

  I ask because we are trying to deploy them and told me that they cannot be activated without a license key.

  Pointers would be much appreciated

  Jon

  You can set up the JOINT-2 and start using it without a license. the only thing you won't get updated signature without registration.

  As you say GET register with Cisco JOINT using the serial number and start downloading the update of the signature.

• question of CSMars

  Hi all

  I am trying to add a 6509 switch that contains the FWSM and JOINT module. But when I tried to add the module, it shows only the IPS in the drop-down list of device type and options no fwsm version.please me tell how to find the fwsm versions also in the device type

  Hello.

  When add you 6500 switch to cs-mars database you must select the Type of device: Cisco switch IOS 12.2.

  After that, when you click to add module. Cisco FWSM device type will be available.

  No doubt, when you added your 6500, you have selected device type: Cisco IOS 12.4.

• 5508 LAG connected to Nexus bundle

  Putting in place a WLC 5508 connected to a Nexus C7010 performer 5.1 (1) of the code.

  Installation guide for the WLC recommends the switch, that the WLC is connected to the tracks src-dst-ip load balancing across the beam LAG. The installation guide also makes reference to 6500 switches that are running versions of IOS which adds the number VLAN to the hash function and advises that this is incompatible with the WLC.

  This seems to be the case with the Nexus as the show command shows:

  name # sh port-channel - balance load

  Port Channel Configuration of load balancing:

  System: src - dst ip - vlan

  Port channel balancing address by protocol used:

  No - IP: mac src - dst

  IP: src - dst ip - vlan

  The link doesn't seem to have a purely src - dst ip option as shown below load balancing

  Name (config) # port - channel - the balance of the load src - dst?

  IP l4port IP and port L4

  IP-l4port-vlan IP, L4 port and VLAN

  IP IP-vlan, and VLANS

  l4port L4 port

  Mac MAC

  Anyone has an idea, what option should I use for compatibility with the 5508 and its connection LAG?

  Hello Erick,.

  From now on, the src-dst-ip pure load balancer is not available on the N7K and, Yes, we have had reports that, with all the other things method could break between the 5508 and the N7K.

  You can test with src - dst ip - vlan (it is the closest), but already we have seen previous issues: the only way to get around a connected to a N7K 5508 is through a single port, or with a switch between the two that can do the the src-dst-ip load balancing.

  To do this, an enhancement (visible internally) for the N7K request was filed:

  http://Tools.Cisco.com/support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtf19657

  Src-dst-ip load balancing method should be available on the N7K from 5.1.2: best however to double check with N7K CSC forum or through a standard case of TAC:

  http://Tools.Cisco.com/ServiceRequestTool/create/launch.do

  Kind regards

  Fede

  --

  If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

• Configure 6513 JOINT and has no local SCOPE

  Hi, my version of IOS catalyst 6513 is 12.2 (18) SXF16 and 12.2 (33) SXI5, today I want to configure my JOINT module.

  Should I COVER my traffic vlan for the JOINT, right?

  commands like:

  monitor the session 4 source vlan 21

  monitor the data-port of destination 4 intrusion-detection-module 10 session 1

  But the switch tell me:

  Local % Session limit has been exceeded

  So, what should I do if I want my JOINT work.

  Thank you!

  Hello

  You satisfy VACL to pass traffic to the IDSM2. VACL capture allows you to specify a VLAN you would like to have the IDSM2 follow.

  So if you know what VLAN from the etherchannels, then you can include them in the VACL configuration

  For example:

  intrusion detection module 4-port data 1 capture allowed vlan 10-20, 40, 70

  Please find documentation to configure VACL 6500 switch:

  http://www.Cisco.com/en/us/docs/security/IPS/6.1/Configuration/Guide/CLI/cli_idsm2.html#wp1030767

  Hope that answers your query.

  Cyril Shankar

• The list of access on a blade JOINT definition

  I have a JOINT blade for a 6500 switch series. I need to change the administrative of the CLI access list, so I can get in remotely and with GUY

  I see in this config entries

  access-list 192.168.100.10/32

  I guess this is the section for the hosts that are permitted to access the METHOD

  but I can't understand how to add an entry?

  any advice would be great

  on the console, you can add entries in the following way:

  conf-mode:
  service host
  the network settings
  access-list 10.10.10.0/24! or you want to add
  output
  output
  answer 'Yes' to apply the changes
  output
  ! (loan)

  Sent by Cisco Support technique iPad App

• Supported VLAN ID-4250 or IDS-4250XL?

  Hello

  I was reviewing for the purchase of an IDS solution. One of the major concerns I have is the ability to monitor several local networks VIRTUAL (Interfaces) and flow.

  I was looking through the IDS-4250 and IDS-4250XL specifications. the XL version has an output more than 4250. What got me confused, is that the XL version takes only an additional interface (1000Base-SX) while the standard version gives you the ability to both 1000Base-SX and 4port FE.

  Now, my question is, is it possible on the 2 special devices to configure the interface of surveillance to monitor multiple VIRTUAL local networks (with the help of a trunk), if all them VLANS are connected on a Switch? Unfortunately buying an IDS module for 6500 is out of the question since no available 6500 switch is currently available.

  The IDS-4250-TX-K9 (aka IDS-4250) is the basic frame which can be added a single PCI card (IDS-XL-INT =, IDS-4250-SX-INT =, IDS-4FE-INT =).

  If the IDS-XL-INT = (aka card XL) is added to the IDS 4250 sensor would then become an IDS-4250-XL-K9 (aka IDS-4250-XL).

  NOTE: The ID-4250-XL is not a chassis separated from the base, it is the same ID-4250-TX-K9 with the IDS-XL-INT = already installed by manufacturing.

  The XL card has 2 interfaces Gig of fiber with MTRJ fiber optic in SX type connectors.

  Map XL adds hardware acceleration to 2 interfaces Gig fiber (increases performance of 1 GB of capacity of monitoring).

  However, there is a limitation which, with interfaces to fiber XL only 2 XL adapter card can be used for monitoring.

  If the ID-4250-SX-INT = (aka card SX) is added to the IDS 4250 sensor would then become an IDS-4250-SX-K9 (aka IDS-4250-SX).

  The SX card has a single fiber interface Gig with SC connector for the SX interface.

  With the IDS 4250 SX users can sniff both interface SX of the card as well as the interface of TX Gig sniff on Board standard, which gives a total of 2 interfaces to sniff.

  If the ID-4FE-INT = (aka 4FE card) is added to the IDS 4250 then it was not a name of created specific sensor (although I usually call a 4FE-4250-IDS)

  The 4FE card has a 10/100 4 TX interfaces

  With the IDS-4250 so that a map 4FE, that user can sniff the two interfaces TX 4 10/100 card as well as the interface of TX Gig sniff standard onboard which gives a total of 5 sniffing interfaces.

  NOTE: ONE of the 3 PCI cards can be placed in the ID-4250. The IDS 4250 has 2 PCI slots, BUT Cisco CAN'T stand that place a card in ONE of the 2 slots. If users cannot set 2 cards XL or 2 cards SX, or 2 cards 4FE, a mixture of 2 different types of cards. (This may change in a future release).

  If a breakdown quick of what I said:

  ID-4250-TX-K9:

  1 gig TX interface

  500 Mbps performance

  IDS-4250-TX-K9 + ID - 4FE - INT =:

  1 TX interface + 4 gig interfaces FE TX

  500 Mbps performance

  IDS-4250-TX-K9 ID - 4250 - SX - INT PLUS:

  (ID-4250-SX-K9)

  1 gig TX + 1 Gig SX interface (SC connector) interface

  500 Mbps performance

  IDS-4250-TX-K9 + IDS-XL-INT: =

  (ID-4250-XL-K9)

  2 interfaces gig SX with hardware acceleration (MTRJ connectors)

  1 Gbps performance

  NOTE: Performance is not a port, but it is rather total performance of the chassis when the combination to pronounce on all ports to sniff.

  As for the question on the circuits.

  ID software supports 802. 1 q trunk monitoring on ALL interfaces. You don't have to worry about buying a particular sensor for links model.

  You must determine your model of sensor (and additional PCI card) performance-based physical connection and sensor required:

  How to:

  On the switch itself hard code the port as a 802. 1 q trunk port and force the sheath to be turned on. (This must be hardcoded on the switch because there is no trading e-mail with the sensor).

  In the BONE of CAT on the 6500 switch, an example would be:

  define trunk 6/1 on dot1q

  Now set up the trunk single trunk port them VLAN you are interested the surveillance.

  In the BONE of CAT on the 6500 switch, an example would be:

  set of 6/1 master 1-100

  Disable the trunk 6/1 101-1005, 1025-4094

  Now, you need to use SPAN or capture VACL to send packets on the trunk port.

  In the BONE of CAT on the 6500 switch, an example would be:

  set of spans 1-100 6/1

  NOTE: Configure the port as a trunk port is not enough to get the packets sent to the sensor. You must always use SPAN or capture VACL on top of the trunk port to get the packages at the monitoring sensor.

  If you do not the 6500 then, of course, the controls on your switch may be different. And in some cases the above commands can be gathered in a single command on your switch so see your switch documentation' are.