srw2008 snmp vlan to the port

Similar Questions

• Rerouting of interruptions SNMP port 162 to the port above 1024

  Hello

  I have to re - route SNMP traps received at the port 162 to some other port higher than 1024 (2041 for example). There is an application that sends SNMP traps for the port 162 and our application running on Windows listen to SNMP interruptions on port 2041, so we want road/winger pitfalls in-house port 162 to 2041.

  I've been watching rules defined in "Windows Firewall with advanced security", but not in a position to succeed. I noticed that there is a predefined SNMP interruptions rule but it does give me an option to transfer trapped on another port. I tried to create a new rule, but as me is not an option to change the port.

  Help, please.

  Hi Gupta,

  The question you posted would be better suited in TechNet community you are trying to deploy an application to the Windows installation.
  http://social.technet.Microsoft.com/forums/en-us/w7itpronetworking/threads

• Get the VLAN of a port group

  What is the fastest way PowerCLI, when knowing the name of a virtual machine and that it is on a standard switch, I can find the number of VLAN that the port group it uses is labelled for?

  Try ' Get - VM $VM_Name | Get-VirtualPortGroup | SELECT name, VLanId.

• Remove the ' system VLAN "Nexus 1000V port-profile

  We have a Dell M1000e blade chassis with a number of Server Blade M605 ESXi 5.0 using the Nexus 1000V for networking.  We use 10 G Ethernet fabric B and C, for a total of 4 10 cards per server.  We do not use the NIC 1 G on A fabric.  We currently use a NIC of B and C fabrics for the traffic of the virtual machine and the other card NETWORK in each fabric for traffic management/vMotion/iSCSI VM.  We currently use iSCSI EqualLogic PS6010 arrays and have two configuration of port-groups with iSCSI connections (a physical NIC vmnic3 and a vmnic5 of NIC physical).

  We have added a unified EMC VNX 5300 table at our facility and we have configured three VLANs extra on our network - two for iSCSI and other for NFS configuration.  We've added added vEthernet port-profiles for the VLAN of new three, but when we added the new vmk # ports on some of the ESXi servers, they couldn't ping anything.   We got a deal of TAC with Cisco and it was determined that only a single port group with iSCSI connections can be bound to a physical uplink both.

  We decided that we would temporarily add the VLAN again to the list of VLANS allowed on the ports of trunk of physical switch currently only used for the traffic of the VM. We need to delete the new VLAN port ethernet-profile current but facing a problem.

  The Nexus 1000V current profile port that must be changed is:

  The DenverMgmtSanUplinks type ethernet port profile

  VMware-port group

  switchport mode trunk

  switchport trunk allowed vlan 2308-2306, 2311-2315

  passive auto channel-group mode

  no downtime

  System vlan 2308-2306, 2311-2315

  MGMT RISING SAN description

  enabled state

  We must remove the list ' system vlan "vlan 2313-2315 in order to remove them from the list" trunk switchport allowed vlan.

  However, when we try to do, we get an error about the port-profile is currently in use:

  vsm21a # conf t

  Enter configuration commands, one per line.  End with CNTL/Z.

  vsm21a (config) #-port ethernet type DenverMgmtSanUplinks profile

  vsm21a(config-port-Prof) # system vlan 2308-2306, 2311-2312

  ERROR: Cannot delete system VLAN, port-profile in use by Po2 interface

  We have 6 ESXi servers connected to this Nexus 1000V.  Originally they were MEC 3-8 but apparently when we made an update of the firmware, they had re - VEM 9-14 and the old 6 VEM and associates of the Channel ports, are orphans.

  By example, if we look at the port-channel 2 more in detail, we see orphans 3 VEM-related sound and it has no ports associated with it:

  Sho vsm21a(config-port-Prof) # run int port-channel 2

  ! Command: show running-config interface port-canal2

  ! Time: Thu Apr 26 18:59:06 2013

  version 4.2 (1) SV2 (1.1)

  interface port-canal2

  inherit port-profile DenverMgmtSanUplinks

  MEC 3

  vsm21a(config-port-Prof) # sho int port-channel 2

  port-canal2 is stopped (no operational member)

  Material: Port Channel, address: 0000.0000.0000 (bia 0000.0000.0000)

  MTU 1500 bytes, BW 100000 Kbit, DLY 10 usec,

  reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA

  Port mode is trunk

  Auto-duplex, 10 Gb/s

  Lighthouse is off

  Input stream control is turned off, output flow control is disabled

  Switchport monitor is off

  Members in this channel: Eth3/4, Eth3/6

  Final cleaning of "show interface" counters never

  102 interface resets

  We can probably remove the port-channel 2, but assumed that the error message on the port-profile in use is cascading on the other channel ports.  We can delete the other port-channel 4,6,8,10 orphans and 12 as they are associated with the orphan VEM, but we expect wil then also get errors on the channels of port 13,15,17,19,21 and 23 who are associated with the MEC assets.

  We are looking to see if there is an easy way to fix this on the MSM, or if we need to break one of the rising physical on each server, connect to a vSS or vDS and migrate all off us so the Nexus 1000V vmkernel ports can clean number VLAN.

  You will not be able to remove the VLAN from the system until nothing by using this port-profile. We are very protective of any vlan that is designated on the system command line vlan.

  You must clean the canals of old port and the old MEC. You can safely do 'no port-channel int' and "no vem" on devices which are no longer used.

  What you can do is to create a new port to link rising profile with the settings you want. Then invert the interfaces in the new port-profile. It is generally easier to create a new one then to attempt to clean and the old port-profile with control panel vlan.

  I would like to make the following steps.

  Create a new port-profile with the settings you want to

  Put the host in if possible maintenance mode

  Pick a network of former N1Kv eth port-profile card

  Add the network adapter in the new N1Kv eth port-profile

  Pull on the second NIC on the old port-profile of eth

  Add the second network card in the new port-profile

  You will get some duplicated packages, error messages, but it should work.

  The other option is to remove the N1Kv host and add it by using the new profile port eth.

  Another option is to leave it. Unless it's really bother you no VMs will be able to use these ports-profile unless you create a port veth profile on this VLAN.

  Louis

• See the bandwidth for the Port-Channel on Powerconnect & Force10

  Reference Dell dear community,

  Y at - it a command CLI or GUI to see how much bandwidth result after having done a port channel in some port Powerconnect and Force10? Suppose we have 4 port 1 Gb and do 4 ports with 1 port-channel. So actually in this channel port have a bandwidth of 4 GB.

  In Cisco, with the command show interface port-channel 1, we get the result

  switch #sh po int 1
  Port-channel 1 is up, line protocol is up (connected)
  Material is EtherChannel, address is 0064.4026.739a (bia 0064.4026.739a)
  MTU 1500 bytes, BW 4000000 Kbit, DLY 10 usec,
  reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  KeepAlive set (10 sec)
  Full duplex, 1000 Mbps, link type is auto, media type is unknown
  input stream control is turned off, output flow control is not supported
  Members in this channel: Gi0/1 Gi0/2
  Type of the ARP: ARPA, ARP Timeout 04:00
  Last entry of 00:00:00, 00:04:48 output, output hang never
  Final cleaning of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/dumps); Total output drops: 0
  Strategy of queues: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 2000 bps, 3 packets/s
  5 minute output rate 2000 bps, 3 packets/s

  But if we do this command on Powerconnect, the just result inform port that starts from the port-channel.

  Reference Dell #show interfaces port-channel 1 short

  Ch-Type Hash Type Min-links Channel ports local FRP
  -------   ----------------------------- -------- --------- --------- ---------
  PO1 Active: Static disabled people article gi1/0/1, gi1/0/2 7 1 article
  Item in gi1/0/3, item in gi1/0/4

  Type of hashing algorithm
  1 - the source MAC, VLAN, EtherType, source module and port Id
  2 - destination MAC, VLAN, EtherType, module source and port Id
  3 - source IP and TCP/UDP source port
  4 - destination IP and destination TCP/UDP port
  5 source/Destination MAC, VLAN, EtherType, MODID/source port
  6 source/Destination IP and port TCP/UDP source / destination
  7 - improved hash mode

  Can you help us find the answer?

  Thank you

  Kind regards

  Aziz

  The PowerConnect switches do not have the ability to show as much detail as the Force10 can. The RMON tables have an interface use %, what may be the closest we can do on the PowerConnect switch.

  #show rmon statistics

  I've seen some monitoring software which was able to question the switch via SNMP and get some information of bandwidth. However, this can be a bit inconsistent, according to which switch and what software is used.

  The MIBs/OID can be downloaded with the software switch.

  http://www.Dell.com/support/home/us/en/rc959303/products/ser_stor_net/networking/net_fxd_prt_swtchs

• VLAN to the internet does not.

  Hello

  I just the 6248.

  VLAN 1: 10.0.1.1/24

  VLAN 300: 10.254.0.1/24

  Gateway: 10.254.0.10 //residing on VLAN 300

  I can ping to the gateway of the VLAN 1, I can ping hosts on VLAN 1 from VLAN 300, but I can't access internet from VLAN 1.  VLAN 300 has not all hosts except the entry door.

  VLAN 1 is the default VLAN with management moved to 255 VLANS.  VLAN 1 is able to route.

  VLAN 255 is the management VLAN without routing.

  I do a tracert and I get this:

  C:\Documents and Settings\chris > tracert www.yahoo.com

  The route to www.yahoo-ht3.akadns.net [69.147.114.210]
  with a maximum of 30 hops:

  1<1 ms   =""><1 ms    ="" 1="" ms ="">
  2 1 ms<1 ms   =""><1 ms ="">
  3 * the request exceeded.
  4 ^ C

  Here is my current setup.

  ! Current configuration:
  ! Description of the system 'Dell 48 Port Gigabit Ethernet, 2.0.0.12, VxWorks5.5.1'
  ! Version of the software system 2.0.0.12
  !
  Configure
  database of VLAN
  VLAN 255 300
  output
  location of the SNMP Server «*»
  SNMP Server contact «*»
  hostname "DELLP_PE_6248-01".
  battery
  1 2 Member
  output
  the IP 10.0.0.1 255.255.255.0
  IP address vlan 255
  IP routing
  IP route 0.0.0.0 0.0.0.0 10.254.0.10
  router RIP
  by default metric 1
  output

  interface vlan 1
  Routing
  IP 10.0.1.1 255.255.255.0
  IP rip
  no ip proxy-arp
  output
  interface vlan 255
  name of "management".
  output
  interface vlan 300
  the name "Temp".
  Routing
  IP 10.254.0.1 255.255.255.0
  IP rip
  no ip proxy-arp
  output
  level of e6b391f96478438ce8fcacd4d0a695fb user name 'admin' password encrypted 15
  line console
  e6b391f96478438ce8fcacd4d0a695fb encrypted password
  output
  !

  interface ethernet 1/g1
  switchport access vlan 300
  output
  activate e6b391f96478438ce8fcacd4d0a695fb encrypted password
  output

  Thanks in advance.

  
  

• Having trouble getting the voice VLAN on the switch X1052P to work at all

  Can someone help me understand how to set up the voice VLAN X1052P? I spent several hours trying to get this working and it does not work. I spent about 4 hours on the phone with a Dell technician that night and he couldn't get it to work and finally gave up. He told me that I had to spend my warranty to ProSupport because he did not know how to solve the problem. What group of *. It's a simple configuration of VLAN. What must be so picky about? In any case...

  Setting up the VIRTUAL LAN must be fairly simple, but apparently on this switch is not. The user guide page 406 is not very useful except explaining what the different options. I must admit I am not an expert VLAN so I dunno I've misconfigured something. But remember, Dell technology could not operate either.

  Here's my situation... I have VoIP phones on my network connected to a network wall jack. Connected to phones are my computers of users. The computer of the user and its respective VoIP phone, both share the same data cable. Before replacing Cisco managed Internet service provider spend all it worked well. The problem is that they had direct access to our network so I removed the switch and installed the X1052P in its place. I talked to the ISP to let them know what I'm doing and they said everything I had to do was setup VLAN ID: 15 for the voice VLAN because this is the VLAN ID that the router uses to route telephone traffic. Router PSI is also the server DHCP VLAN 15 and issues IP for phones using 172.27.0.0/24 with a DHCP 172.27.0.50 range - 150.

  I tried to configure the switch using parameters of VLAN static and settings VLAN voice and neither one also seems to do what I want it to do.

  Network administration > VLAN > VLAN static

  Network administration > VLAN > Voice VLAN

  I activated the profile 'phone' on ports I want to added to the voice VLAN and it does not work. Moreover, 47 the switch port is connected directly to the ISP router and is configured as a trunk with the default port VLAN 1 unidentified and tag VLAN 15. For other ports I tried the general implementation, access and trunk of the parameters on each port to see if I could get something going and still nothing happens. When I set up the ports as General ports VLAN, I made adding VLAN VLAN 1 and VLAN 15 as a VLAN tagged not marked. It still does not.

  This is the short story from where I am now. Any help is greatly appreciated.

  FYI, as a follow up I finally solved the problem. I hope this information helps someone else that can encounter the same problem.

  After buying the ProSupport warranty upgrade ($121 out-of-Pocket mind you) and addressing a total of 4 technicians ProSupport expert technician a 3rd another level (only available via chat message between one of the ProSupport phone technicians and the 3rd Tier expert tech - i.e. I couldn't talk or chat with this person me) the consensus was that the material must be bad. When I bought the X1052P I bought two of them, so the best way to know if it was a bad switch was simply configure the other switch and see if the behavior occurs on this one, too. Well, this switch also restarted each time I assigned the profile 'phone' to more than 13 or 14 ports in the switch. It seems that it was not a hardware problem after all.

  I went back to the switch original and tried new things hoping that I could fall on a solution and it turns out that the solution was NOT to use the voice VLAN on the switch. It does not work!

  SOLUTION: I set the VLAN ID: 15 manually and no has not assigned any phone profiles to one of the ports. This is how I solved the problem.

  So he has bad software on the switch. I tried to see if there are updates of the firmware on the Dell support site, but there is none. Configure manually the phone VLAN was the solution. What a freaking nightmare which turned out to be. Maybe someone in Dell could note this problem and test in-house. And, if you want to compensate me for the 20 + hours I spent working on this problem, which has be great, too.

• Bandwidth the port outskirts consuming monitor

  Dear all,

  Hope my email finds you well,

  Wish you all a very nice new year time,

  I need your support to choose the best tool to monitor,

  I have the devices below:

  1 WLC 5500 series

  2 - call manager 8.5

  3 cisco Core 4506E SW

  4-LAP 1130

  5 - cisco IP phone 7945

  6 - juniper firewall,

  I need to check all the devices of health with the Port of bandwidth to each device,

  Please advise me,

  Thanks in advance,

  Ahmed,

  You should probably seek a solution based on SNMP. There's a certain open source (Zabbix, Nagios, Cacti,...) and commercial (PRTG, Cisco first LMS,...) of the solutions out there

  Sent by Cisco Support technique iPad App

• Problem with security of the ports and disabled learning MAC addresses?

  Hello

  Is there a problem, or incompatibility, if you configure the port-security on "n" ports that belong to X vlan and also disable mac-address-table of learning on this vlan?

  Someone did he do reference, links or PDFs on this problem?

  Thank you very much

  Best regards.

  Hi Javier,

  As I showed above, the combination is valid. I did not all static entries in the security of the ports, but all entries learned through port security will be shown as static on the show see the mac address table. All dynamic learning is disabled.

  I don't know what kind of security problem, that you try to resolve, but the configuration is valid.

  Daniel Dib
  CCIE #37149

  Please evaluate the useful messages.

• How to create and assign a VLAN to specific ports

  In our ISA550W, create the VLANS for different subnets and assigning them to specific ports are a piece of cake and self explanitory.

  However on a SG300-10MP, I am totally lost lol. I just want to make ports 7 & 8 set to a sous-reseau.10 instead of un.6 as the rest of the switch. I need these ports to be totally independent from the rest and not to communicate with others at all.

  How can I do this?

  Thank you!

  Hi Alex,

  Under management of VLANS, go into settings of the interface.  Change the interfaces that you use to access the ports by choosing the way you want by clicking on change.

  Once they are access ports back to Port for page VLAN and assign the port desired as one not marked in this interface.

  This should be everything you need, let me know if you have any other questions.

  -Good Trent

  * Please note the useful messages! **

• All traffic Vlan to the Interface of the Proxy Server

  Hello!

  I need little help to route all the traffic on VLAN to the proxy server.

  I have different VLANS on switches L2 200-26 and by 300-28-L3 for routing.

  I have already created VLANs and able to rout them, but facing problem for routing traffic to the interface proxy for internet access.

  I have different VLAN for example Vlan 10, 10.10.10.0/24 sales, Vlan20 10.10.20.0/24 Marketing. I have trunk between switches interfaces and default 1U is the same on all switches.

  My proxy server has two NICs, one is connected to a dsl modem and other one to the switch port that uses the IP 192.168.0.2 to default vlan1.

  I am able to surf the internet using vlan1 but not on ther VLAN.

  I put the route defaults to the switch of 192.168.0.2, but don't not routing for internet to another VLAN.

  Thank you

  Hello

  To answer your questions:

  1. I have to update the following files?

  https://software.Cisco.com/download/release.html?mdfid=283019617&release...

  Yes, please let me know what firmware and boot code, that you have right now and I'll tell you what is the best way for you to upgrade because you shouldn't go straight to the latest firmware unless you run already 1.3.5.58 or later version.

  2. it supports to 8 dhcp pools. I have swimming pools, but I have more than 8 VLAN. I put all the settings, works very well.

  You are right and I forgot to mention the limitation of only 8 DHCP pools, I'm sorry. That being said, make sure that your current DHCP server uses IP addresses assigned to each VLAN on the switch as the gateway by default for the VLAN respective.

  3 for the Proxy Server, I need to find a way to point back roads of VLAN to vlan mapping static address on the switch. I'm confused in this little piece.

  I understand that this can be confusing, let me see if I can explain it a little better.

  Assuming that everything on the switch is configured according to my recommendations can

  1. you need a single, a route by default on the switch, so that when a PC is connected to one of VLAN on she tries to go online, an unknown IP address to the switch, it will send it to the Ip address of the router, because the proxy server will be able to reach this IP public, unknown to any Web site.

  2 - when the traffic is back to this Web site, it will be intended for another subnet that the proxy server is on. Suppose the answer is looking for 10.10.10.100 (subnet unknown to the proxy server), without a static route on the proxy server it say where to send this traffic, packets are simply deleted.

  3. you need to create as many static routes on the proxy server as the amount of VIRTUAL LANs, you have on your network.

  For now I know that the proxy server is 192.168.0.2 on VLAN 1 but I don't know what the IP address of the switch is on the same VLAN, it should be something on the 192.168.0.x range.

  All journeys should look like this:

  10.10.10.1 255.255.255.0 send 192.168.0.x (IP address of the switch on the VLAN 1)

  10.10.20.1 255.255.255.0 send 192.168.0.x (IP address of the switch on the VLAN 1)

  Alternatively, if all your internal VIRTUAL local networks are on the beach of 10.10.x.x then you should be able to create a single rule to summarize all the VLAN as this:

  10.10.1.1 255.255.0.0 send 192.168.0.x (IP address of the switch on the VLAN 1)

  Please let me know if it was a little clearer.

  Feel free to ask any questions.

• Can WOL while the port is configured to authenticate through ISE

  Hi all

  I tried setting up WOL

  The L3 switch configuration I have no problem in it

  Configuration of the L2 switch without configuration of ISE

  interface fa0/1

  switchport access vlan 100

  switchport mode access

  spanning tree portfast

  It works well, but after that I put the ISE configuration on the port, WOL is not working.

  so please help can I use ISE + WOL or there will be problems because of that.

  I read a custom ' authentication control direction in "which should enable ISE and WOL.

  then, which will affect on something.

  Thank you.

  Yes, that's correct. If you add the command "authentication control-direction in" on a switchport then he will allow the "Magic Packet" WoL should be sent to the unit of the end and wake him up.

  By default, a switchport configured to dot1x will only allow EAP traffic initially to the switchport (thereby breaking WoL) you don't need to add the command "authentication control-direction in" to allow WoL functionality to continue working while ensuring that the endpoint can still only send EAP frames to the switchport prior authentication of 802. 1 x.

• Helps the clarification on the ports of the UCS C220

  Hi guys New computer unified (and the servers / virtualization in general to be honest!) Sorry for stupid questions, I guess. I tried to read as much as I can but still a little fuzzy on a few things.

  At the back of the UCS C220 I have, there is a M, 1 LAN, LAN 2 port, and then a 4 ports ethernet card. What I guessed was:

  M's management for MMIC port

  LAN 1 and 2 were for ESXi (grouping of NETWORK cards?)

  So do not know what is the purpose of the ethernet card 4 ports as well?

  In addition, the MMIC, you have the option for dedicated/shared LOM etc and I don't really understand the differences. I guessed who dedicates meant that MMIC used the port of M and LOM shared meant she could use other LAN ports? Furthermore, making MMIC and ESXi had to be on separate subnets?

  Sorry for stupid questions, but once I have clearly in my head I think it will be easy for me,

  Thank you

  Hello

  If I have CIMC running in "Shared LOM" then it means I can have 1 cable connected from one of the LOM ports and can access both the CIMC and ESXi on a single cable without the need for the management cable to be connected?
  

  Yes, the only cable connected to the LOM port will give access to interface MMIC and ESXi.

  In this case the CIMC and ESXi can also be on the same subnet without problems? (Assuming switch with single vlan)
  

  They can be in the same subnet and won't cause problems

  Padma

• auth failure VLAN vs the VLAN

  Hi all

  What are the criteria for determining whether to use the local network VIRTUAL auth failure or the guest VLAN?

  What happens if a non - 802.1 x client connects to the port, tell a seller... 802. 1 x does not occur, then is he then comments crossing vlan?

  What happens if a salesperson brings a 802. 1 x PC capable and connects it... the identification fails, but I want the seller to go in the VLAN comments in any case, I could give them a temporary user name / maybe PW to authenticate with? Hmmm...

  Thanks in advance.

  Hello

  The local network VIRTUAL Auth-Fail is called if an Access-Reject is received from the Radius Server to the

  authentication of the user or machine.  The local network VIRTUAL Auth-Fail will be called after a certain number of failures

  not after the first failure of authentication.  It is a configurable value.

  The VLAN comments is called otherwise EAPoL traffic comes from the customer who connects.

  You can set the VLAN Auth failure and the VLAN comments on the same VLAN ID if you want to

  users who have disabled begging him or a person with invalid credentials (or no credentials).

  -Jesse

• problem with the ports of the two SLM2048

  Hello:
  I have a problem with two models of SLM2048.
  I only as configured in these devices was 4 VLAN and link aggregation port between these devices.
  I detect some Don t work ports (I connect to a workstation in the port and the Don t upward, but in the other port if upward)
  Could be a hardware failure? or maybe the switch block these ports?
  Best regards

  I'm not sure that I fully understand your port problems.  Is this a failure of single port or you have a problem of end-to-end between ports on two different switches?

  Andrew Lissitz