2014年3月20日星期四

Configuring HSRP

How to use Hot Standby Router Protocol (HSRP) on the Catalyst 3750X switch to provide routing redundancy for routing IP traffic not dependent on the availability of any single router. HSRP for IPv4 is supported on switches running the IP base or IP services image. To use HSRP for IPv6, see Chapter 39, "Configuring IPv6 Unicast Routing."

Routers in an HSRP group can be any router interface that supports HSRP, including Catalyst 3750 routed ports and switch virtual interfaces (SVIs).

When a device is participating in an HSRP standby routing and clustering is enabled, you can use the same standby group for command switch redundancy and HSRP redundancy. Use the cluster standby-group HSRP-group-name [routing-redundancy] global configuration command to enable the same HSRP standby group to be used for command switch and routing redundancy. If you create a cluster with the same HSRP standby group name without entering the routing-redundancy keyword, HSRP standby routing is disabled for the group.

This example shows how to bind standby group my_hsrp to the cluster and enable the same HSRP group to be used for command switch redundancy and router redundancy. The command can only be executed on the cluster command switch. If the standby group name or number does not exist, or if the switch is a cluster member switch, an error message appears.

 Switch# configure terminal
 Switch(config)# cluster standby-group my_hsrp routing-redundancy

 Switch(config)# end

2014年3月11日星期二

How to Save a Cisco 3560 Switch Configuration

Cisco Catalyst switches can be configured using a number of different utilities. The most common way to configure a Cisco Catalyst switch, such as the Catalyst WS-C3560X-24T-L , is using the command line interface (CLI) provided with the switch. When typing configuration commands into the switch, all configurations are held in active memory on the switch, but are not saved to the startup configuration until the command to save the configuration to flash is issued.  

Instructions
1 Click the Windows icon in the lower left corner of the desktop, then click “Programs” and click “Accessories.” Right-click the command line icon in the menu that appears, and then click “Run as Administrator.” The command line window will appear.

2 Type “telnet x.x.x.x” on the command prompt, replacing the “x.x.x.x” with the IP address of the Cisco Catalyst 3560 switch, and then press "Enter.”

Sponsored Links

Server Monitoring Tool
ServerSentinel - Always be sure your servers are up and running
www.jam-software.com/serversentinel
3 Type the telnet access password when requested on the command prompt and press “Enter.”

4 Type “enable” on the command line and press “Enter.” Type the Privileged Exec password on the command prompt when requested and press “Enter.”

5 Type “write memory” on the command line and press "Enter.” The running configuration stored in the switch memory has now been saved to the startup configuration in the flash memory of the Cisco Catalyst WS-C3560X-24T-S   switch.


—Original resource from eHow

2014年3月7日星期五

Cisco 2801 + WIC-1T problem

I've got a problem with my new 2801 router and HWIC-1T   card. My connection to Internet is 2Mbit/s sync HDSL by modem Schmidt with V.35 interface.
Everything works fine with old Cisco 2610 router + WIC-1T, but when putting the same WIC-1T to any slot of 2801 there is no link... Serial interface is detected and up, line protocol is up, but it is still not responding.

Configuration both of routers is the same, no changes with default clock rates or something... I've tested two different WIC-1T cards and there was the same behaviour, 2610 works fine, 2801 not...

Here is my config, sh ver, debug and all that can be helpful in diagnose.

2801#sh ver
Cisco IOS Software, 2801 Software (C2801-ADVSECURITYK9-M), Version 12.3(8)T8, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Wed 06-Apr-05 12:34 by yiyan

ROM: System Bootstrap, Version 12.3(8r)T8, RELEASE SOFTWARE (fc1)

2801 uptime is 7 minutes
System returned to ROM by power-on
System image file is "flash:c2801-advsecurityk9-mz.123-8.T8.bin"

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
cisco 2801 (revision 5.0) with 236544K/25600K bytes of memory.
Processor board ID FCZ092913UF
2 FastEthernet interfaces
1 Serial(sync/async) interface
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity disabled.
191K bytes of NVRAM.
62720K bytes of ATA CompactFlash (Read/Write)
Configuration register is 0x2102
2801#sh interfaces serial 0/3/0

Serial0/3/0 is up, line protocol is up
  Hardware is GT96K Serial
  Internet address is 62.87.128.94/30
  MTU 1500 bytes, BW 2048 Kbit, DLY 20000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation HDLC, loopback not set
  Keepalive set (10 sec)
  Last input 00:00:09, output never, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 92
  Queueing strategy: weighted fair
  Output queue: 594/1000/64/92 (size/max total/threshold/drops)
     Conversations  75/75/256 (active/max active/max total)
     Reserved Conversations 0/0 (allocated/max allocated)
     Available Bandwidth 1536 kilobits/sec
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     14 packets input, 336 bytes, 0 no buffer
     Received 14 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     1 packets output, 343 bytes, 0 underruns
     0 output errors, 0 collisions, 3 interface resets
     0 output buffer failures, 0 output buffers swapped out
     0 carrier transitions
     DCD=up  DSR=up  DTR=up  RTS=up  CTS=down

2801#sh run
Building configuration...

Current configuration : 1949 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname 2801
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings

mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
ip cef
ip ips po max-events 100
ip domain name yourdomain.com
no ftp-server write-enable

interface FastEthernet0/0
 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$
 ip address 192.168.231.1 255.255.255.0
 duplex auto
 speed auto
!
interface FastEthernet0/1
 no ip address
 shutdown
 duplex auto
 speed auto
interface Serial0/3/0
 bandwidth 2048
 ip address 62.87.128.94 255.255.255.252
!
ip classless
ip route 0.0.0.0 0.0.0.0 62.87.128.93
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
control-plane
!
line con 0
 login local
line aux 0
line vty 0 4
 privilege level 15
 login local
 transport input telnet ssh
line vty 5 15
 privilege level 15
 login local
 transport input telnet ssh
!
end

I've compared both releases and there should be no problem with 12.4, it has all of the 12.3T funcionality  WS-X45-SUP7L-E   and much more. With RAM there will be no problem, my 2801 has got 256MB while there's requirement of 128 megs.

2014年3月4日星期二

Receiving error - Can't find applicable device package - in CiscoView

 I have CiscoWorks LMS 2.6 with CiscoView 6.1.5 & with version 4.0 of the WS-C3560X-48T-L   device package. For some reaseon I'm getting the following when I try to bring up a 3560' in CiscoView's ChassisView

Message
Can't find applicable device package for 10.20.2.11.

Cause
Device package for this device type is not installed or device support for this device type might not be available or you are attempting to open a component inside a device.

Action
Please install a device package for the device type or open the parent device to manage the component.
--------------------------------

  Here is a show ver of one of the switches that chassisview can not bring up ...

C3560 Software (C3560-IPBASEK9-M), Version 12.2(40)SE,
cisco WS-C3560-24PS (PowerPC405) processor (revision Q0)

Yes, you can copy the WS-C3560X-48T-S  .zip package from the PSU location to the active CV location.  Then restart dmgtd.


2014年2月23日星期日

Cisco Catalyst 3750-E

In the two previous posts I covered how to create multiple VLANs, trunk those VLANs between multiple stackable Avaya Ethernet Routing Switches utilizing Multi-Link Trunking and how to create Layer 3 IP interfaces to be used for routing IP packets between those VLANs.

In this post I thought I would expand the network topology of my previous two posts to include a Cisco Catalyst WS-C3750X-12S-S   . I’ll specifically cover how to trunk (bridge) multiple VLANs between a stackable Avaya Ethernet Routing Switch and the Cisco Catalyst 3750-E and how to configure multiple interfaces in a Link Aggregation Group (LAG) utilizing LACP similar to Avaya’s proprietary MLT feature.

Avaya Ethernet Routing Switch 4548

Avaya Ethernet Routing Switch 4548 – Show Commands

4548GT-PWR#show lacp port 45,46

Admin Oper         Trunk Partner

Port Priority Lacp    A/I Timeout Key   Key   AggrId Id    Port    Status

---- -------- ------- --- ------- ----- ----- ------ ----- ------- ------

45   32768    Active  A   Short   10    12298 8224   32    302     Active

46   32768    Active  A   Short   10    12298 8224   32    303     Active

4548GT-PWR#show mac-address-table

Mac Address Table Aging Time: 300

Number of addresses: 26

   MAC Address    Vid  Source         MAC Address    Vid  Source

00-02-B3-CB-77-A2    1 Port:19     00-04-61-9E-46-7E    1 Port:21

00-0C-29-64-33-F9    1 Port:19     00-0C-29-A5-CB-54    1 Port:19

00-0F-20-95-38-D5    1 Port:11     00-18-01-EA-F4-45    1 Port: 1

00-1C-11-6B-DC-6B    1 Port: 1     00-1C-11-6D-15-27    1 Port: 1

00-1C-11-6D-15-DC    1 Port: 1     00-1E-7E-7C-2C-00    1

00-1E-7E-7C-2C-40    1             00-1F-0A-CE-BC-01    1 Trunk:1

00-1F-0A-CE-BC-40    1 Trunk:1     00-1F-D0-D0-BE-2D    1 Port:17

00-23-EE-96-AA-21    1 Port: 1     00-24-B5-F6-94-02    1 Trunk:1

00-64-40-CF-4D-AD    1 Trunk:32    00-64-40-CF-4D-AE    1 Trunk:32

00-64-40-CF-4D-C0    1 Trunk:32    00-0A-E4-76-9C-C8    2 Port:44

00-24-DC-DF-0D-08    2 Port:43     00-A0-F8-5E-CE-BC    2 Port:39

00-1F-0A-CE-BC-41  100 Trunk:1     00-24-7F-99-84-70  100 Port:25

00-64-40-CF-4D-AD  100 Trunk:32    00-1E-CA-F3-1D-B4  200 Port:26

00-1F-0A-CE-BC-43  200 Trunk:1     00-64-40-CF-4D-AD  200 Trunk:32

4548GT-PWR#show mlt

Id Name             Members                Bpdu   Mode           Status  Type

-- ---------------- ---------------------- ------ -------------- ------- ------

1  MLT_to_ERS5520   47-48                  All    Basic          Enabled Trunk

2  Trunk #2         NONE                   All    Basic          Disabled

3  Trunk #3         NONE                   All    Basic          Disabled

4  Trunk #4         NONE                   All    Basic          Disabled

5  Trunk #5         NONE                   All    Basic          Disabled

6  Trunk #6         NONE                   All    Basic          Disabled

7  Trunk #7         NONE                   All    Basic          Disabled

8  Trunk #8         NONE                   All    Basic          Disabled

9  Trunk #9         NONE                   All    Basic          Disabled

10 Trunk #10        NONE                   All    Basic          Disabled

11 Trunk #11        NONE                   All    Basic          Disabled

12 Trunk #12        NONE                   All    Basic          Disabled

13 Trunk #13        NONE                   All    Basic          Disabled

14 Trunk #14        NONE                   All    Basic          Disabled

15 Trunk #15        NONE                   All    Basic          Disabled

16 Trunk #16        NONE                   All    Basic          Disabled

17 Trunk #17        NONE                   All    Basic          Disabled

18 Trunk #18        NONE                   All    Basic          Disabled

19 Trunk #19        NONE                   All    Basic          Disabled

20 Trunk #20        NONE                   All    Basic          Disabled

21 Trunk #21        NONE                   All    Basic          Disabled

22 Trunk #22        NONE                   All    Basic          Disabled

23 Trunk #23        NONE                   All    Basic          Disabled

24 Trunk #24        NONE                   All    Basic          Disabled

25 Trunk #25        NONE                   All    Basic          Disabled

26 Trunk #26        NONE                   All    Basic          Disabled

27 Trunk #27        NONE                   All    Basic          Disabled

28 Trunk #28        NONE                   All    Basic          Disabled

29 Trunk #29        NONE                   All    Basic          Disabled

30 Trunk #30        NONE                   All    Basic          Disabled

31 Trunk #31        NONE                   All    Basic          Disabled

32 Trunk #32        45-46                  Single DynLag/Basic   Enabled Trunk


You might be looking at the output above and asking yourself what’s “Trunk 32″? Let me provide some quick background. You can have a total of 32 MLT/LAG trunks on a stackable Avaya Ethernet Routing Switch. When you create LACP trunks the switch automatically creates a LAG in the MLT table dynamically from the bottom up. While in the previous post I created “Trunk 1″ by trunking ports 47 and 48 together (see above), in this post I’ve created an LACP trunk on ports 45 and 46 which will be reported it the WS-C3750V2-48PS-S   switch as “Trunk 32″. You can also see it in the MAC/FDB table above.

2014年2月20日星期四

3750s stack or Catalyst 6500?

i'm working in a government health network and we actually have a Cisco Catalyst 4503 as a Core Switch with a bunch of 2960Gs and 2950, etc. My question is regarding the best solution to have for having the Core Switch to change.

Scenario 1: 4x Catalyst 3750 24 Ports and 1x WS-C3750V2-24PS-S    12 ports all 5 stacked

Scenario 2: 1x Catalyst 6500 48 ports and another one 24 ports SFPs

I think both scenarios would be approximatly the same cost or around it, but it's not a matter of money. I would like to know what would be the best solution for us for scalability, fault tolerance, network management, etc.

The only flaw that I see going for 6500 is that it doesn't give me redundancy in terms of chassis. If you are planning to go for two supervisors in the chassis, it will be a better option.

1) You can add/remove modules from 6500 as & when you want without having to pay for any other switch, I assume that the modules would be cheaper than buyig a whole new switch.

2) It gives you more backplane speed.

3) Hardware forwarding.

4) Most of routing & other functions would be handled in hardware.

Overall, 6500 is much more advanced than 3750.


So, I would go for 6500. For more details, I would suggest going through the datasheet of both these WS-C3750X-24P-S    switches.

2014年2月17日星期一

cisco 3750 high cpu

We have a cisco WS-C3750X-24T-L    that sometimes shows high cpu.

Please see details below. When cpu was running high, we noticed

2 process that seems to be the culprit. One is VMATM Callback and one is IP Input.

What is VMATM? Can't seem to find much documentation with it.

Also, IP Input seems to be well documented but I'm wondering how it ties into VMATM if it does?

CPU utilization for five seconds: 99%/29%; one minute: 99%; five minutes: 90%

CPU utilization for five seconds: 73%/28%; one minute: 76%; five minutes: 77%

PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process

237          49        53        924  0.00%  0.00%  0.00%   0 VMATM Callback<----------normal usage

237      119304      3710      32157 31.74% 27.42% 17.27%   0 VMATM Callback

198      541972   1524333        355  1.11%  0.55%  0.41%   0 IP Input <------------------normal usage

198    21565303  54238166        397 25.30% 25.51% 25.52%   0 IP Input

Version:

c3750e-universalk9npe-mz.122-55.SE3.bin

CSCtj95182 - High CPU on 3750 when network scanner is run

CSCtf23298 - tacacs-server host ' ' single-connection causes high CPU utilization

 This 'VMATM' process mainly takes care of the removing the

addresses learnt on an interface when the interface goes down.


There are couple of things to be check on this kindly open a TAC case with cisco so that we provide you in depth WS-C3750X-24T-S   analysis on the same

2014年2月13日星期四

OSPF on 3750 with IP Base?

Just doing a quick sanity check on my decision before I purchase but have found some conflicting information that I do with help clarifying!

I'm purchasing a WS-C3750X-24T-L   and need to run OSPF, can I do this with IP Base? The Cisco product page would appear to say Yes, I quote:

"Software versions

LAN Base: Enterprise Access Layer 2 Switching

IP Base: Enterprise Access Layer 3 Switching, including OSPF (Open Shortest Path First) for routed access

IP Services: Advanced Layer 3 Switching (IPv4 and IPv6) "

But from everything else I've read on these forums only static routing is available in IP Base along with RIP, can anyone shed some light on this? By Routed Access does it simply mean OSPF can be used but only as a Stub area (much like EIGRP with IP Base?)


Newly released IOS version 12.2(55)SE WS-C3750X-24T-S   support OSPF v1 ONLY.

2014年2月12日星期三

problem getting iOS 15.0.2 to run on 3750-x 48ps-s

Trying to get the 10Gbps service module to be recognised requires V15 according to cisco  WS-C3750V2-24PS-S  docs

Upgrading from V12.2 55 (or .58) fails on some switches I have tried

Process fails and I finish up at the switch: prompt

I can recover....

The switch can be regressed back to v12.2.55 or .58

But I can't get all of them up to v15

I have tried 5 to date

Same methods producing different results

2 worked

3 failed

All our problematic switches are 48 ports ones, we have some 24 port ones but they're newer and aren't affected. Our testing of the affected switches suggests it's related to their age/hardware revision:

VO1 – fail to load image, get stuck in continual reboot, eventually fail to ROMMON.

VO2 serial number beginning FDO15 – freeze whilst loading image.


VO2 serial number WS-C3750X-24P-S    beginning FDO16 and up – work fine.

2014年1月1日星期三

add swich to stack (cisco 3750)

I want to add 2 switches to my stack of 2.
Switch 1 is the top switch in rack and has a priority of 15
Switch WS-C3750X-24P-S   2 the is second switch in rack and has priority of 14
How can I configure the stack (provision configuration) so that the 3rd switch  in rack will get switch number 3 and the 4th switch in rack gets number 4
All swiches are exact same module

    Just do one-by-one method with following configuration only from the stack master.

Switch(config)# switch 3 provision switch_PID - put your 3rd switch into stack.

Verify the status of the provisioned switch. For stack-member-number, enter the same number as in Step 1.

Switch(config)# switch 4 provision switch_PID - put your 4th switch into stack.

Verify and save the config.

Note - switch_PID:
For type, enter the model number of a supported switch that is listed in the command-line help strings.

change the stack member number by using the switch <current-stack-member-number>  renumber <new-stack-member-number> global configuration command,

show swithc will show the current swithc number and priority
  3750-Stk>show switch
                                                   Current
    Switch#  Role      Mac Address     Priority     State
    --------------------------------------------------------
     1       Slave     0016.4748.dc80     1         Ready
    *2       Master    0016.9d59.db00     5         Ready

the new number goes into effect after that stack member resets (or after you use the reload slot stack-member-number privileged EXEC command) and only if that number is not already assigned to any other members in the stack.

A higher priority value for a stack member increases its likelihood to be elected stack master and to retain its stack member number. The priority value can be 1 to 15. The default priority value is 1. You can display the stack member priority value with the show switch user EXEC mode command.

    3750-Stk>show switch
                                                   Current
    Switch#  Role      Mac Address     Priority     State
    --------------------------------------------------------
     1       Slave     0016.4748.dc80     1         Ready
    *2       Master    0016.9d59.db00     5         Ready

Cisco recommends that you assign the highest priority value to the switch that you prefer to be the stack master. This ensures that the switch is re-elected as stack master if a re-election occurs.

How do you change the priority value?

    From the global configuration mode, issue the command switch stack-member-number priority new-priority-value .

    From the bootloader switch: prompt, issue the command set SWITCH_PRIORITY new-priority-value .

Even though the priority value applies immediately to the member, it will not affect the status of the current stack master. New priority value will play a role in the next stack-master election.

Yes the switches will retain their numbers even if you set different priorities.

The priority sets which switch in the stack becomes the master.  The number is just that - the number of the switch WS-C3750X-24P-L    in the stack.  Once it's set the number won't change unless you change it in the config.

2013年12月31日星期二

Create an Etherchannel link

Catalyst WS-C3560X-24T-L  switch EtherChannel provides fault-tolerant high-speed links between switches, routers, and servers. You can use it to increase the bandwidth between the wiring closets and the data center, and you can deploy it anywhere in the network where bottlenecks are likely to occur. EtherChannel provides automatic recovery for the loss of a link by redistributing the load across the remaining links. If a link fails, EtherChannel redirects traffic from the failed link to the remaining links in the channel without intervention.

 I would like to create an etherchannel link between two cisco 3560 switches.
My question is: do all ports involved (4 in this case 2 on each switch) need to be the same number channel? or does the pair on one switch need to be a different channel from the  pair on the other switch.

Probably identifiable number on both sides will make maintenance easier, but technically it does not negotiate any channel name on the wire.


Configuring Layer 3 EtherChannels section of Configuring EtherChannel (Catalyst WS-C3560X-24T-S switch)

Configuring a GPON ONT

The Huawei MA5600  /MA5680T /MA5608T provides end users with services through the ONT. The MA5600T/MA5603T/MA5608T can manage the ONT and the ONT can work in the normal state only after the channel between the MA5600T/MA5603T/MA5608T and the ONT is available.

huawei(config)#interface gpon 0/2
huawei(config-if-gpon-0/2)#ont add 0 password-auth 0100000001 always-on profile-id 10 manage-mode omci
huawei(config-if-gpon-0/2)#ont add 0 password-auth 0100000002 always-on profile-id 10 manage-mode omci
huawei(config-if-gpon-0/2)#ont add 0 password-auth 0100000003 always-on profile-id 10 manage-mode omci
huawei(config-if-gpon-0/2)#ont add 0 password-auth 0100000004 always-on profile-id 10 manage-mode omci
huawei(config-if-gpon-0/2)#ont add 0 password-auth 0100000005 always-on profile-id 10 manage-mode omci
To add an ONT that is managed by the OLT through the OMCI protocol, confirm this ONT according to the SN 3230313185885B41 automatically reported by the system, and bind the ONT with capability profile 3 that match the ONT, do as follows:
huawei(config)#interface gpon 0/2
huawei(config-if-gpon-0/2)#port 0 ont-auto-find enable
huawei(config-if-gpon-0/2)#ont confirm 0 sn-auth 3230313185885B41 profile-id 3 manage-mode omci
To add an ONU that is managed as an independent NE and whose SN is known as 3230313185885641, bind the ONU with capability profile 4 that matches the ONU, configure the NMS parameters for the ONU, and set the management VLAN to 100, do as follows:
huawei(config)#snmp-profile add profile-id 1 v2c public private 10.10.5.53 161 huawei
huawei(config)#interface gpon 0/2
huawei(config-if-gpon-0/2)#ont add 0 2 sn-auth 3230313185885641 profile-id 4 manage-mode snmp
huawei(config-if-gpon-0/2)#ont ipconfig 0 2 static ip-address 10.20.20.20 mask 255.255.255.0 gateway 10.10.20.1 vlan 100 
huawei(config-if-gpon-0/2)#ont snmp-profile 0 2 profile-id 1
huawei(config-if-gpon-0/2)#ont snmp-route 0 2 ip-address 10.10.20.190 mask 255.255.255.0 next-hop 10.10.20.100

If the ONU is an independent NE and is directly managed by the NMS through the SNMP management mode, select the SNMP management mode. For this mode, you only need to configure the parameters for the GPON line and the parameters for the management channel on the OLT.
If the ONU is not an independent NE and all its configuration data is issued by the OLT through OMCI, select the OMCI management mode. For this mode, you need to configure all parameters (including line parameters, UNI port parameters, and service parameters) that are required for the ONU on the OLT.

Generally, the ONT management mode is set to the OMCI mode.

2013年12月16日星期一

Cisco 3750 Stacking Q

I have two WS-C3750X-48T-L  and I want to stack them together to create one switch with 96 ports.  Do I just cable them together and the 3750s will become a stack automagically?  Or is there more that needs to be done?


 So here is what I would do with two switches that were already in production with configs on them.

#1 - make sure they have the same IOS on each them.  If not update one or the other so they are the same.  This just makes things easier.

#2 - Whichever switch will be on the bottom - issue a write erase and turn it off.

#3 - Cable the switches together with the stack cables criss crossing each other.

#4 - Power on the bottom switch

After it boots the top switch should recognize the 2nd switch as part of the stack and if you do a show ver it should show you that there are 2 switches in the stack.  The boot up takes a good bit on the WS-C3750X-48T-S   so be patient.

2013年12月10日星期二

Police policy on SVI Cisco 3750

I'm trying to rate limit traffic from a couple of IPs in a VLAN (920). The traffic is incoming from 6 physical trunk ports. The VLAN 920 interface on this WS-C3750X-24P-S  is the default gateway in VLAN 920, the 3750 routes traffic to other VLANs.

I've created the policy as below, but I get this error when I try to apply it to the VLAN interface;
QoS: class(IdentifyPorts) Unsupported classification [Vlan920]
Service Policy attachment failed

添加图片说明
int range gi 1/0/1-3
mls qos vlan-based

int range gi 2/0/1-3
mls qos vlan-based

access-list 102 permit ip host 192.168.143.3 host 192.168.178.8

class-map match-any IdentifyTraffic
match access-group 102

class-map IdentifyPorts
match input gi 1/0/1 - gi 1/0/3
match input gi 2/0/1 - gi 2/0/3

policy-map Port-Policy
class IdentifyPorts
police 8000000 1000000 exceed-action drop

policy-map VLAN-policy
class IdentifyTraffic
set ip precedence 1
service-policy Port-Policy

int vlan 920

service WS-C3750V2-48PS-S-policy input VLAN-policy

2013年12月9日星期一

. Bandwidth Threshold on Cisco 3750

Does anyone know if at layer 3 an interface has a limit ?

I have been told that even thought our WS-C3750V2-48PS-S  switch has 1GB ports that we can expect much lower bandwidth throughput on the ports if we are using layer 3 on those ports

I'm trying to find some documentation that explains this but nothing clear is coming up

All switches have a limit in layer 2 forwarding, usually expressed in Gbps or Mbps. It's sometimes called the backplane bandwidth.

Layer 3 switches also have a limit in routing, expressed in (IP) packets per second: Mpps.

For a routing device, routing a 16 byte ICMP 'ping' packet is the same effort as routing a 1450 byte TCP packet carrying HTTP. If you multiply your average packet size with this Mpps value, you get an average Mbps value that indicates your L3 performance.


Not sure about the 3750 (and it'll depend on the exact model), but from memory even the 3550-48 had the horsepower to do layer3 at 1Gbps with 800byte packets; and compared to that, even a first generation WS-C3750X-24T-L  is a monster.

2013年12月4日星期三

Cisco 3750 trunks

I am currently replacing our backbone switches (2 x 3560's) linked together via
trunked ether channels.

The user switches (2960's) connect to each 3560 using their 2 x 1GB trunked
Ports.

Install a stack of (3 x WS-C3750V2-24TS-S 's) as the main backbone and server connections.

Install a stack  of ( 2 x 3750's) for the user switches to connect to . This will
Connect to the 3750X's using multiple trunked ether channels (2 x to
each 3750X)

Then ether channel and trunk each user 2960' to each the 3750's (2 x to
each 3750) using the two 1GB Ethernet ports.

This allows us to use the 3750x's for the high bandwidth requirements and
The user switches are kept away from the main backbone.

Not sure if you've already purchased the 3750x's, but if you haven't, see if you can order the new 3850 switches. They are the successor the to 3750X. Some cool features are a 480G stack cable (versus 64G with the 3750x), have netflow enabled on ALL ports, up to 4 10G ports (2 10G ports on the 3750X), and has a built in wireless controller (activated via licensing, but if not needed... just don't license it).
Here's the kicker - it's the exact same list price as the 3750X.

If you have an "ordinary office" network load, there is no advantage in putting the the 2x 3750 for the client switches to connect to. Even with etherchannel, you will have multiple client connections sharing each 1GB link, from the 3750 switches to the 3750 X switches

If your budget permits, I've be tempted to do a stack of 5x 3750 X, if it doesn't then even a stack of 4x 3750 X with the client switches distributed across would be better, then you can utilize the stack bandwidth between the switches.

As you are stacking the 3750 X switches, the trunks to/from each trunked server and switch should be across two switches, for example port 1 on switch 1 and port 1 on switch 2 rather than ports 1 & 2 on switch 1.


Much as I like the WS-C3750X-48T-S  series of switches (and manage several stacks of them), for a L2 network, or even one with "light" L3 requirements (inter VLAN routing, but not BGP etc) I would usually specify the HP 5400zl series.

2013年11月28日星期四

Cisco Netflow on 3750s

Can someone please tell me why I can't apply the following configuration to out cisco WS-C3750V2-48PS-S?

flow record FlowRecord1
 match ipv4 protocol
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 match interface input
 collect interface output
 collect flow direction
 collect counter bytes
 collect counter packets
 collect timestamp sys-uptime first
The router show version is:
Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 12.2(55)SE5, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Thu 09-Feb-12 18:14 by prod_rel_team
Image text-base: 0x00003000, data-base: 0x02800000

ROM: Bootstrap program is C3750E boot loader
BOOTLDR: C3750E Boot Loader (C3750X-HBOOT-M) Version 12.2(53r)SE2, RELEASE SOFTWARE (fc1)

MX-C3750-FL1-N uptime is 18 weeks, 4 days, 3 hours, 14 minutes
System returned to ROM by power-on
System restarted at 11:47:29 UTC Sat Apr 27 2013
System image file is "flash:/c3750e-universalk9-mz.122-55.SE5/c3750e-universalk9-mz.122-55.SE5.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

License Level: ipbase
License Type: Permanent
Next reload license Level: ipbase

ciscoWS-C3750V2-48PS-S Price (PowerPC405) processor (revision K0) with 262144K bytes of memory.
Processor board ID FDO1702Z2R1
Last reset from power-on
3 Virtual Ethernet interfaces
1 FastEthernet interface
208 Gigabit Ethernet interfaces
8 Ten Gigabit Ethernet interfaces

The password-recovery mechanism is enabled.