2014年3月20日星期四

Configuring HSRP

How to use Hot Standby Router Protocol (HSRP) on the Catalyst 3750X switch to provide routing redundancy for routing IP traffic not dependent on the availability of any single router. HSRP for IPv4 is supported on switches running the IP base or IP services image. To use HSRP for IPv6, see Chapter 39, "Configuring IPv6 Unicast Routing."

Routers in an HSRP group can be any router interface that supports HSRP, including Catalyst 3750 routed ports and switch virtual interfaces (SVIs).

When a device is participating in an HSRP standby routing and clustering is enabled, you can use the same standby group for command switch redundancy and HSRP redundancy. Use the cluster standby-group HSRP-group-name [routing-redundancy] global configuration command to enable the same HSRP standby group to be used for command switch and routing redundancy. If you create a cluster with the same HSRP standby group name without entering the routing-redundancy keyword, HSRP standby routing is disabled for the group.

This example shows how to bind standby group my_hsrp to the cluster and enable the same HSRP group to be used for command switch redundancy and router redundancy. The command can only be executed on the cluster command switch. If the standby group name or number does not exist, or if the switch is a cluster member switch, an error message appears.

 Switch# configure terminal
 Switch(config)# cluster standby-group my_hsrp routing-redundancy

 Switch(config)# end

2014年3月11日星期二

How to Save a Cisco 3560 Switch Configuration

Cisco Catalyst switches can be configured using a number of different utilities. The most common way to configure a Cisco Catalyst switch, such as the Catalyst WS-C3560X-24T-L , is using the command line interface (CLI) provided with the switch. When typing configuration commands into the switch, all configurations are held in active memory on the switch, but are not saved to the startup configuration until the command to save the configuration to flash is issued.  

Instructions
1 Click the Windows icon in the lower left corner of the desktop, then click “Programs” and click “Accessories.” Right-click the command line icon in the menu that appears, and then click “Run as Administrator.” The command line window will appear.

2 Type “telnet x.x.x.x” on the command prompt, replacing the “x.x.x.x” with the IP address of the Cisco Catalyst 3560 switch, and then press "Enter.”

Sponsored Links

Server Monitoring Tool
ServerSentinel - Always be sure your servers are up and running
www.jam-software.com/serversentinel
3 Type the telnet access password when requested on the command prompt and press “Enter.”

4 Type “enable” on the command line and press “Enter.” Type the Privileged Exec password on the command prompt when requested and press “Enter.”

5 Type “write memory” on the command line and press "Enter.” The running configuration stored in the switch memory has now been saved to the startup configuration in the flash memory of the Cisco Catalyst WS-C3560X-24T-S   switch.


Original resource from eHow

2014年3月7日星期五

Cisco 2801 + WIC-1T problem

I've got a problem with my new 2801 router and HWIC-1T   card. My connection to Internet is 2Mbit/s sync HDSL by modem Schmidt with V.35 interface.
Everything works fine with old Cisco 2610 router + WIC-1T, but when putting the same WIC-1T to any slot of 2801 there is no link... Serial interface is detected and up, line protocol is up, but it is still not responding.

Configuration both of routers is the same, no changes with default clock rates or something... I've tested two different WIC-1T cards and there was the same behaviour, 2610 works fine, 2801 not...

Here is my config, sh ver, debug and all that can be helpful in diagnose.

2801#sh ver
Cisco IOS Software, 2801 Software (C2801-ADVSECURITYK9-M), Version 12.3(8)T8, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Wed 06-Apr-05 12:34 by yiyan

ROM: System Bootstrap, Version 12.3(8r)T8, RELEASE SOFTWARE (fc1)

2801 uptime is 7 minutes
System returned to ROM by power-on
System image file is "flash:c2801-advsecurityk9-mz.123-8.T8.bin"

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
cisco 2801 (revision 5.0) with 236544K/25600K bytes of memory.
Processor board ID FCZ092913UF
2 FastEthernet interfaces
1 Serial(sync/async) interface
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity disabled.
191K bytes of NVRAM.
62720K bytes of ATA CompactFlash (Read/Write)
Configuration register is 0x2102
2801#sh interfaces serial 0/3/0

Serial0/3/0 is up, line protocol is up
  Hardware is GT96K Serial
  Internet address is 62.87.128.94/30
  MTU 1500 bytes, BW 2048 Kbit, DLY 20000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation HDLC, loopback not set
  Keepalive set (10 sec)
  Last input 00:00:09, output never, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 92
  Queueing strategy: weighted fair
  Output queue: 594/1000/64/92 (size/max total/threshold/drops)
     Conversations  75/75/256 (active/max active/max total)
     Reserved Conversations 0/0 (allocated/max allocated)
     Available Bandwidth 1536 kilobits/sec
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     14 packets input, 336 bytes, 0 no buffer
     Received 14 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     1 packets output, 343 bytes, 0 underruns
     0 output errors, 0 collisions, 3 interface resets
     0 output buffer failures, 0 output buffers swapped out
     0 carrier transitions
     DCD=up  DSR=up  DTR=up  RTS=up  CTS=down

2801#sh run
Building configuration...

Current configuration : 1949 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname 2801
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings

mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
ip cef
ip ips po max-events 100
ip domain name yourdomain.com
no ftp-server write-enable

interface FastEthernet0/0
 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$
 ip address 192.168.231.1 255.255.255.0
 duplex auto
 speed auto
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
interface Serial0/3/0
 bandwidth 2048
 ip address 62.87.128.94 255.255.255.252
!
ip classless
ip route 0.0.0.0 0.0.0.0 62.87.128.93
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
control-plane
!
line con 0
 login local
line aux 0
line vty 0 4
 privilege level 15
 login local
 transport input telnet ssh
line vty 5 15
 privilege level 15
 login local
 transport input telnet ssh
!
end

I've compared both releases and there should be no problem with 12.4, it has all of the 12.3T funcionality  WS-X45-SUP7L-E   and much more. With RAM there will be no problem, my 2801 has got 256MB while there's requirement of 128 megs.

2014年3月4日星期二

Receiving error - Can't find applicable device package - in CiscoView

 I have CiscoWorks LMS 2.6 with CiscoView 6.1.5 & with version 4.0 of the WS-C3560X-48T-L   device package. For some reaseon I'm getting the following when I try to bring up a 3560' in CiscoView's ChassisView

Message
Can't find applicable device package for 10.20.2.11.

Cause
Device package for this device type is not installed or device support for this device type might not be available or you are attempting to open a component inside a device.

Action
Please install a device package for the device type or open the parent device to manage the component.
--------------------------------

  Here is a show ver of one of the switches that chassisview can not bring up ...

C3560 Software (C3560-IPBASEK9-M), Version 12.2(40)SE,
cisco WS-C3560-24PS (PowerPC405) processor (revision Q0)

Yes, you can copy the WS-C3560X-48T-S  .zip package from the PSU location to the active CV location.  Then restart dmgtd.


2014年2月23日星期日

Cisco Catalyst 3750-E

In the two previous posts I covered how to create multiple VLANs, trunk those VLANs between multiple stackable Avaya Ethernet Routing Switches utilizing Multi-Link Trunking and how to create Layer 3 IP interfaces to be used for routing IP packets between those VLANs.

In this post I thought I would expand the network topology of my previous two posts to include a Cisco Catalyst WS-C3750X-12S-S   . I’ll specifically cover how to trunk (bridge) multiple VLANs between a stackable Avaya Ethernet Routing Switch and the Cisco Catalyst 3750-E and how to configure multiple interfaces in a Link Aggregation Group (LAG) utilizing LACP similar to Avaya’s proprietary MLT feature.

Avaya Ethernet Routing Switch 4548

Avaya Ethernet Routing Switch 4548 – Show Commands

4548GT-PWR#show lacp port 45,46

Admin Oper         Trunk Partner

Port Priority Lacp    A/I Timeout Key   Key   AggrId Id    Port    Status

---- -------- ------- --- ------- ----- ----- ------ ----- ------- ------

45   32768    Active  A   Short   10    12298 8224   32    302     Active

46   32768    Active  A   Short   10    12298 8224   32    303     Active

4548GT-PWR#show mac-address-table

Mac Address Table Aging Time: 300

Number of addresses: 26

   MAC Address    Vid  Source         MAC Address    Vid  Source

00-02-B3-CB-77-A2    1 Port:19     00-04-61-9E-46-7E    1 Port:21

00-0C-29-64-33-F9    1 Port:19     00-0C-29-A5-CB-54    1 Port:19

00-0F-20-95-38-D5    1 Port:11     00-18-01-EA-F4-45    1 Port: 1

00-1C-11-6B-DC-6B    1 Port: 1     00-1C-11-6D-15-27    1 Port: 1

00-1C-11-6D-15-DC    1 Port: 1     00-1E-7E-7C-2C-00    1

00-1E-7E-7C-2C-40    1             00-1F-0A-CE-BC-01    1 Trunk:1

00-1F-0A-CE-BC-40    1 Trunk:1     00-1F-D0-D0-BE-2D    1 Port:17

00-23-EE-96-AA-21    1 Port: 1     00-24-B5-F6-94-02    1 Trunk:1

00-64-40-CF-4D-AD    1 Trunk:32    00-64-40-CF-4D-AE    1 Trunk:32

00-64-40-CF-4D-C0    1 Trunk:32    00-0A-E4-76-9C-C8    2 Port:44

00-24-DC-DF-0D-08    2 Port:43     00-A0-F8-5E-CE-BC    2 Port:39

00-1F-0A-CE-BC-41  100 Trunk:1     00-24-7F-99-84-70  100 Port:25

00-64-40-CF-4D-AD  100 Trunk:32    00-1E-CA-F3-1D-B4  200 Port:26

00-1F-0A-CE-BC-43  200 Trunk:1     00-64-40-CF-4D-AD  200 Trunk:32

4548GT-PWR#show mlt

Id Name             Members                Bpdu   Mode           Status  Type

-- ---------------- ---------------------- ------ -------------- ------- ------

1  MLT_to_ERS5520   47-48                  All    Basic          Enabled Trunk

2  Trunk #2         NONE                   All    Basic          Disabled

3  Trunk #3         NONE                   All    Basic          Disabled

4  Trunk #4         NONE                   All    Basic          Disabled

5  Trunk #5         NONE                   All    Basic          Disabled

6  Trunk #6         NONE                   All    Basic          Disabled

7  Trunk #7         NONE                   All    Basic          Disabled

8  Trunk #8         NONE                   All    Basic          Disabled

9  Trunk #9         NONE                   All    Basic          Disabled

10 Trunk #10        NONE                   All    Basic          Disabled

11 Trunk #11        NONE                   All    Basic          Disabled

12 Trunk #12        NONE                   All    Basic          Disabled

13 Trunk #13        NONE                   All    Basic          Disabled

14 Trunk #14        NONE                   All    Basic          Disabled

15 Trunk #15        NONE                   All    Basic          Disabled

16 Trunk #16        NONE                   All    Basic          Disabled

17 Trunk #17        NONE                   All    Basic          Disabled

18 Trunk #18        NONE                   All    Basic          Disabled

19 Trunk #19        NONE                   All    Basic          Disabled

20 Trunk #20        NONE                   All    Basic          Disabled

21 Trunk #21        NONE                   All    Basic          Disabled

22 Trunk #22        NONE                   All    Basic          Disabled

23 Trunk #23        NONE                   All    Basic          Disabled

24 Trunk #24        NONE                   All    Basic          Disabled

25 Trunk #25        NONE                   All    Basic          Disabled

26 Trunk #26        NONE                   All    Basic          Disabled

27 Trunk #27        NONE                   All    Basic          Disabled

28 Trunk #28        NONE                   All    Basic          Disabled

29 Trunk #29        NONE                   All    Basic          Disabled

30 Trunk #30        NONE                   All    Basic          Disabled

31 Trunk #31        NONE                   All    Basic          Disabled

32 Trunk #32        45-46                  Single DynLag/Basic   Enabled Trunk


You might be looking at the output above and asking yourself whats Trunk 32? Let me provide some quick background. You can have a total of 32 MLT/LAG trunks on a stackable Avaya Ethernet Routing Switch. When you create LACP trunks the switch automatically creates a LAG in the MLT table dynamically from the bottom up. While in the previous post I created Trunk 1 by trunking ports 47 and 48 together (see above), in this post Ive created an LACP trunk on ports 45 and 46 which will be reported it the WS-C3750V2-48PS-S   switch as Trunk 32. You can also see it in the MAC/FDB table above.

2014年2月20日星期四

3750s stack or Catalyst 6500?

i'm working in a government health network and we actually have a Cisco Catalyst 4503 as a Core Switch with a bunch of 2960Gs and 2950, etc. My question is regarding the best solution to have for having the Core Switch to change.

Scenario 1: 4x Catalyst 3750 24 Ports and 1x WS-C3750V2-24PS-S    12 ports all 5 stacked

Scenario 2: 1x Catalyst 6500 48 ports and another one 24 ports SFPs

I think both scenarios would be approximatly the same cost or around it, but it's not a matter of money. I would like to know what would be the best solution for us for scalability, fault tolerance, network management, etc.

The only flaw that I see going for 6500 is that it doesn't give me redundancy in terms of chassis. If you are planning to go for two supervisors in the chassis, it will be a better option.

1) You can add/remove modules from 6500 as & when you want without having to pay for any other switch, I assume that the modules would be cheaper than buyig a whole new switch.

2) It gives you more backplane speed.

3) Hardware forwarding.

4) Most of routing & other functions would be handled in hardware.

Overall, 6500 is much more advanced than 3750.


So, I would go for 6500. For more details, I would suggest going through the datasheet of both these WS-C3750X-24P-S    switches.

2014年2月17日星期一

cisco 3750 high cpu

We have a cisco WS-C3750X-24T-L    that sometimes shows high cpu.

Please see details below. When cpu was running high, we noticed

2 process that seems to be the culprit. One is VMATM Callback and one is IP Input.

What is VMATM? Can't seem to find much documentation with it.

Also, IP Input seems to be well documented but I'm wondering how it ties into VMATM if it does?

CPU utilization for five seconds: 99%/29%; one minute: 99%; five minutes: 90%

CPU utilization for five seconds: 73%/28%; one minute: 76%; five minutes: 77%

PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process

237          49        53        924  0.00%  0.00%  0.00%   0 VMATM Callback<----------normal usage

237      119304      3710      32157 31.74% 27.42% 17.27%   0 VMATM Callback

198      541972   1524333        355  1.11%  0.55%  0.41%   0 IP Input <------------------normal usage

198    21565303  54238166        397 25.30% 25.51% 25.52%   0 IP Input

Version:

c3750e-universalk9npe-mz.122-55.SE3.bin

CSCtj95182 - High CPU on 3750 when network scanner is run

CSCtf23298 - tacacs-server host ' ' single-connection causes high CPU utilization

 This 'VMATM' process mainly takes care of the removing the

addresses learnt on an interface when the interface goes down.


There are couple of things to be check on this kindly open a TAC case with cisco so that we provide you in depth WS-C3750X-24T-S   analysis on the same