2014年3月6日星期四

Cisco 3750 QoS problem: why packets leave interface not marked?

mls qos map WS-C3750X-12S-S cos-dscp 0 8 16 24 32 46 48 56
mls qos
...
policy-map POLICY-VOIP-LAN17
class class-default
trust cos
...
interface GigabitEthernet1/0/1
description *** Uplink ***
no switchport
ip address 172.18.254.250 255.255.255.252
mls qos trust dscp
...
interface GigabitEthernet1/0/24
description *** Downlink ***
switchport trunk encapsulation dot1q
switchport trunk native vlan 4094
switchport trunk allowed vlan 31,33,41,101,102,117,1101,4094
switchport mode trunk
switchport nonegotiate
mls qos vlan-based
!
interface Vlan117
description *** LAN ***
ip address 10.254.32.3 255.255.254.0
service-policy input POLICY-VOIP-LAN17

Show mls qos interface statistic:

DSW1-2#sh mls qos interface g1/0/24 statistics
GigabitEthernet1/0/24 (All statistics are in packets)

dscp: incoming
-------------------------------

0 - 4 : 9579 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 6
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 364 0 0 0 0
45 - 49 : 0 0 0 30 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
-------------------------------

0 - 4 : 7781 0 0 0 0
5 - 9 : 0 0 0 100 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 1 0 30 0
20 - 24 : 0 0 0 0 0
25 - 29 : 9 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 48 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
-------------------------------

0 - 4 : 9609 1 0 6 1
5 - 7 : 364 30 22
cos: outgoing
-------------------------------

0 - 4 : 7911 100 31 9 0
5 - 7 : 0 48 0
output queues enqueued:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 0 0 0
queue 1: 7914 160 93
queue 2: 40 0 0
queue 3: 6 0 14

output queues dropped:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 0 0 0
queue 1: 0 0 0
queue 2: 0 0 0
queue 3: 0 0 0

Policer: Inprofile: 0 OutofProfile: 0

DSW1-2#sh mls qos interface g1/0/1 statistics
GigabitEthernet1/0/1 (All statistics are in packets)

dscp: incoming
-------------------------------

0 - 4 : 3370 0 0 0 0
5 - 9 : 0 0 0 338 0
10 - 14 : 11 0 0 0 0
15 - 19 : 0 4 0 139 0
20 - 24 : 0 0 0 0 94
25 - 29 : 1233 5 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 2 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
-------------------------------

0 - 4 : 3271 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 0 0 2 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
-------------------------------

0 - 4 : 5198 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
-------------------------------

0 - 4 : 3271 0 0 0 0
5 - 7 : 0 2 0
output queues enqueued:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 0 0 0
queue 1: 3273 163 80
queue 2: 0 0 0
queue 3: 2 0 0

output queues dropped:
queue: threshold1 threshold2 threshold3
-----------------------------------------------
queue 0: 0 0 0
queue 1: 0 0 0
queue 2: 0 0 0
queue 3: 0 0 0

Policer: Inprofile: 0 OutofProfile: 0
Why packets leave interface g1/0/1 not marked with DSCP 46 and 24?

you set your cos-dscp mapping so CoS 3 and 5 maps to DSCP 24 and 46 respectively. but be advised, u use the CoS-to-DSCP map to map CoS values in incoming packets to a DSCP value that QoS uses internally to represent the priority of the traffic.

So, it does NOT mean that at the egress point ur switch changes the incomming CoS to the mapped DSCP value, actually when you trust CoS on a dot1q ingress port, switch uses that value or its equivalent dscp mapping for the QoS and queueing uses. it removes the dot1q tag and the CoS value, and at the egress rewrites it in order to retain the same value (trust), since here your egress point is a Layer 3 interface, there is no dot1q tag, so no CoS!

I think WS-C3750V2-48PS-S it is a best practice to trust DSCP instead of CoS since you'r changing to Layer 3 network (egress) or explicty configure to Set the dscp value of the packets you want for that interface.

2014年2月27日星期四

B-ACD with Non CME 2900 series H232 Gateway

I got a request to block non-notice (calls with blank calling numbers) calls with voice prompt. The calls are comming Cisco 2921 price from BRI configured in a 2921 H323 gateway.

For this I am thinking of putting BACD application with a welcome prompt for the caller and drop through after that to a random number to end the call. This is only the requirtement and not planing to use the ACD feature of the script.

Can I do this with a h232 gateway 2921 that is not CME (only CME-SRST)? is there any other better way to do this. In normal mode calls are going to CUCM 6.1 using voip dialpeers. Callmanager related configurations are not shown here.

Configuration:

------------------------------------------------------------------------------------------------------------ Identifying blank calls

voice translation-rule 1
rule 1 / / /100/

voice translation-profile PSTN_Calls
translate calling 1

dial-peer voice 1 pots
translation-profile incoming PSTN_Calls
incoming called-number .
direct-inward-dial
port 0/1/1

-------------------------------------------------------------------------------------------------------------------- Call application Configuration

dial-peer voice 2 voip
service aa
session target ipv4: <srst-cme ip>
incoming called-number 100$
dtmf-relay h245-alphanumeric
codec g711ulaw

application
service queue flash:app-b-acd-2.1.0.0.tcl
param aa-hunt 200

service aa flash:app-b-acd-a-2.1.0.0.tcl
paramspace english index 1
paramspace english language en
paramspace english location flash:
param service-name queue
param handoff-string aa
param aa-pilot 100
param welcome-prompt custome_welcome.au
param drop-through-prompt custome_welcome.au

--------------------------------------------------------------------------------------------------- To block call to 200 afer the prompt

voice translation-rule 2
rule 1 reject /200/

voice translation- profile UNKNOWN_BLOCK
translate called 2

dial-peer voice 2 voip
translation- profile outgoing BLOCK
session target ipv4: <srst-cme ip>
incoming called-number 200$
-------------------------------------------------------------------------------------------------- Telephony service for SRST and Transcoding in CME mode

telephoney service
srst mode auto-provision all
ip source address <loopback>
max-dn 2
max-ephone 2

Though you could do it with BACD & a drop through, I wouldn't do it like that. A cleaner solution is to throw the call to your AA (Unity, CUE, IPCC).

voice translation-rule 1
rule 1 /.*/ /8675309/

voice translation-profile block
translate called 1

dial-peer voice 1 pots
answer-address ^$
translation-profile incoming block
direct-inward-dial
port 0/0/0:23

dial-peer voice 2 voip
destination-pattern 8675309
Add other h323 peer stuff here....

What this does is match peer 1 inbound for any inbound POTS call that doesn't contain an ANI. It then takes that call and translates the DNIS to a special pattern, and sends it to CUCM. Then configure CUCM/Unity/whatever to router 8675309 to an AA that say 'Hey your call is being blocked because you aren't presenting CLID Cisco 2951 price ' and hang up.

2014年2月25日星期二

DHCP Issue on 3560 Switch

I'm aiming to achieve something WS-C3560X-48T-L so simple I cannot believe it isn't working already!
Essentially I have a 24 port 3560 switch in our company DMZ. All ports on the switch are in VLAN98 (DMZ VLAN). A few servers with static IPs in the relevant range (192.168.98.0/24) are currently connected to the switch and work just fine.
I now want to create a DHCP pool on this switch as it is going to provide IP addresses for hosts connecting to public WiFi in the building.
The pool is as follows:
Start Address: 192.168.98.192
End Address: 192.168.98.254
x2 excluded addresses: 192.168.98.198 & 192.168.98.199
Default gateway: 192.168.98.1

Granted the address block is a little odd but I needed to grab the end of the subnet range in a way that would be easy to summarise the IP addresses for the firewall ACL (wanted to use 192.168.98.200-254 but 192.168.98.192 was the closest summary for that)

My switch config looks as attached - I have used Cisco documentation to do it but my connected client is not getting an IP address and the "debug dhcp" command has resulted in no output so far.
It's gotta be something silly but I cant see what. Any help greatly appreciated.

(The client is plugged into fa0/2 - all other unused ports are in the shutdown state)

that won't work. You pool must be a /24 if it's a /24

ip dhcp excluded-address 192.168.98.1 192.168.98.192
ip dhcp excluded-address 192.168.98.198 192.168.98.199

!
ip dhcp pool DMZ_Pool
network 192.168.98.0 255.255.255.0
default-router WS-C3560X-48T-S 192.168.98.1

2014年2月24日星期一

How to configure policy based routing on 3750

In our datacenter we have a WS-C3750X-12S-S stack with IP base image. I have enabled PBR and reloaded the switch. Show sdm prefer says i am using default template. The reason i want to use PBR is that we have 2 firewalls on the same work and want to be able to have granular control over which gateway out of the network they use but still be able to access all internal resouces accross wan and locally.

Created access list to identify traffic:

access-list 10 permit 10.2.3.59 (test workstation on vlan 3)

Created policy:

route-map TestASA permit 10
match ip address 10
set ip next-hop 10.2.0.3

Assigned policy to the user vlan3:

ip policy route-map TestASA

Results:
It changed the default gateway to the above gateway but i could not access any resources on any other vlan, could not access resouces accross wan.

Jason, the deny statement will prevent that traffic of be select by PBR. Then that traffic will be forwarded by normal routing table.

But I did a mistake. The ACL must be:
access-list 102 deny ip host 10.2.4.240 YOUR_VLAN_1
access-list 102 deny ip host 10.2.4.240 YOUR_VLAN_4
access-list 102 deny ip host 10.2.4.240 YOUR_VLAN_254
access WS-C3750V2-48PS-S -list 102 permit ip host 10.2.4.240 any

2014年2月18日星期二

3900 ios gateway Software MTP

I currently have 3 Cisco 3925E call manager clusters.

Cluster 1

Cluster 2

SME Cluster

I have two 3900 gateways currently connected to cluster 2 that are configured for as 500 software MTP's. That is all these gatways do now, nothing else.

I would like to share these software MTP's with the other 2 call manager cluster. I do not see a way to do this.

Is it possable to share the software MTP's between mulitple CUCM 9.x clusters?

You cannot share the same dspfarm. You can however create separate dspfarms (subdividing the total capacity in the process) and separate call manager groups which point to Cisco 3945 separate clusters.

2014年2月13日星期四

SPAN configuration on 3750

I'm trying to configure a mirror port on a WS-C3750X-48T-L . This configuration needs to replicate data from local ports, but I need that also act as a regular access port.

With the initial configuration, SPAN port, there is no problem, all the data of the configurated ports is replicating in the configurated port. On the port configurated as mirror there is a PC connected for audio recording. When the port is not operating as SPAN there is communications without problem over the LAN. But when I configure the port as SPAN, communication is interrupted.

Here is the actual configuration:

SWITCH1-PISO7#sh monitor session 1

Session 1

Type : Local Session

Source Ports :

Both : Fa1/0/1-7,Fa1/0/9-12,Fa1/0/32-33,Fa1/0/35,Fa1/0/38

Destination Ports : Fa1/0/47

Encapsulation : Native

Ingress : Enabled, default VLAN = 215

Ingress encap : Untagged

SWITCH1-PISO7#sh run int fa1/0/47

Building configuration...

Current configuration : 112 bytes

interface FastEthernet1/0/47

switchport access vlan 215

switchport mode access

spanning-tree portfast

end

SWITCH1-PISO7#sh ver

Cisco IOS Software, C3750 Software (C3750-IPSERVICES-M), Version 12.2(50)SE1, RELEASE SOFTWARE (fc2)

output omitted

Switch Ports Model SW Version SW Image

* 1 52 WS-C3750V2-48PS 12.2(50)SE1 C3750-IPSERVICES-M

output omitted

beforehand thanks for your help

For the 3750 family, the span destination ingress forwarding capability's only purpose is to enable ingress traffic forwarding of frames received on the span destination port from an Intrusion Detection Systems (IDS) or comparable device. Like a span destination port without ingress forwarding, MAC address learning is disabled on a span destination port with ingress forwarding, and a span destination port with ingress forwarding does not transmit any traffic except that WS-C3750X-48T-S required for the SPAN session.

2013年12月11日星期三

Cisco 3560 switchport light stays orange when VLAN is applied.

I have a cisco WS-C3560V2-24TS-S as my core agragate switch in my network. Everything is running fine currently until I tried adding a second port on one of my DLSAMs to add funcionality to another network. I currently have another similar device running two seperate ethernet ports on two seperate VLANs that are managed in the software of the DSLAM to determine which network a particular DSL port talks on. This second one however is giving me pletny of problems.

i have configured the WS-C3560X-24P-L switch port to the VLAN I require, I am able to plug in a laptop and talk on the network correctly (pull DHCP and get on the internet on the correct network). But when I try plugging up my DSLAM the port stays orange. If I leave the VLAN set to the default (vlan1) it will turn green but as soon as I change the VLAN it turns orange again. The settings are the same on both DLSAMS as far as port and VLAN configuration goes. The port is linking up correctly at 100 Full on both sides.

I will add more information as I continue to troubleshoot this. But for now hopefully this should give a brief explanation of my problem in case I am just overlooking something very simple.

no cdp enable

spanning-tree bpdufilter enable

2013年11月25日星期一

Setup Port Channel on Cisco 3560

I have 2 Layer3 switches. (Cisco WS-C3560X-24P-L). I am setting:

interface FastEthernet0/1

channel-group 1 mode on

interface FastEthernet0/2

channel-group 1 mode on

interface FastEthernet0/3

channel-group 1 mode on

interface FastEthernet0/4

channel-group 1 mode on

interface Port-channel 1

no switchport

ip address 192.168.1.2 255.255.255.0

Other switch is same but using 192.168.1.1 255.255.255.0

I am getting connectivity. But Basically would like to have fail-over and load balancing.

So out of the 4 fast Ethernet ports. If one fails. There should still be connectivity.

Get rid of your IP addresses. Port bonding is a layer 2 game and you don't need them.

Here is an example of a working LACP etherchannel configuration on a WS-C3560G-24TS running IPservices 12.2(50)SE4. The config on the partner switch is identical.

port-channel load-balance src-dst-mac

interface Port-channel23

description ** LACP channel to SWITCH2, ports 23-24 **

switchport trunk encapsulation dot1q

switchport trunk native vlan 11

switchport trunk allowed vlan 2-499

switchport mode trunk

switchport nonegotiate

spanning-tree link-type point-to-point

interface GigabitEthernet0/23

description ** SWITCH2 etherchannel port 1 **

switchport trunk encapsulation dot1q

switchport trunk native vlan 11

switchport trunk allowed vlan 2-499

switchport mode trunk

switchport nonegotiate

logging event status

channel-group 23 mode active

interface GigabitEthernet0/24

description ** SWITCH2 WS-C3560V2-48PS-S etherchannel port 2 **

switchport trunk encapsulation dot1q

switchport trunk native vlan 11

switchport trunk allowed vlan 2-499

switchport mode trunk

switchport nonegotiate

logging event status

channel-group 23 mode active

2013年11月14日星期四

Cisco 3560 Switches Installing SFP Modules

Removing and installing an SFP module WS-C3560V2-48TS-S can shorten its useful life. Do not remove and insert SFP

modules more often than is absolutely necessary.

Step 1 Attach an ESD-preventive wrist strap to your wrist and to a bare metal surface on the chassis.

Step 2 Find the send (TX) and receive (RX) markings that identify the top side of the SFP module.

Note On some SFP modules, the send and receive (TX and RX) markings might be replaced by arrows

that show the direction of the connection, either send or receive (TX or RX).

Step 3 Align the SFP module in front of the slot opening.

Step 4 Insert the SFP module into the slot until you feel the connector on the module snap into place in the rear

of the slot.

Step 5 For fiber-optic SFP modules, remove the dust plugs from the optical ports, and store them for later use.

Caution Do not remove the dust plugs from the fiber-optic SFP module port or the rubber caps from the

fiber-optic cable until you are ready to connect the cable. The plugs and caps protect the SFP module

ports and cables from contamination and ambient light.

Step 6 Insert the cable connector into the SFP module:

• For fiber-optic SFP modules, insert the LC or MT-RJ cable connector into the SFP module.

• For copper SFP modules, insert the RJ-45 cable connector into the SFP module.

Note When connecting to 1000BASE-T SFP modules, be sure to use a twisted four-pair, Category 5 cable.

For more Cisco WS-C3560X-24P-L information please click here

2013年11月13日星期三

3560 Showing Garbage in Console

Cisco WS-C3560X-48PF-S series products have two main categories, Cisco 3560V2 and Cisco 3560X, 3560V2 is FE based switch while 3560X is GE based switch, the previous Cisco 3560, 3560G and 3560E are end of sales now and replaced by Cisco 3560V2 and Cisco 3560X. Cisco Catalyst 3560 v2 Series consumes less power than its predecessors. The 3560-X Series Switches is an enterprise-class lines of stackable and standalone switches.

I have few 8-port 3560's (WS-C3560-8PC) that I have been using to roll out a Metro Ethernet upgrade. I have one switch that originally configured just fine, but now it is displaying all kinds of gibberish in the console window. I can telnet into the switch ok. The configuration register on it is set to 0xF. But I have tried using a serial connection from multiple computers, and they all show the same garbage. I have 4 of these switches next to each other. They all have the same IOS: 15.0(2)SE image. They all have the same configuration register. I can console into all of them except for this one switch.

I have verified my terminal settings, and they are as suggested:

Speed: 9600 bps

Databits: 8

Parity bits: 0

Stop bit: 1

No flow control

This time, I have tried changing to all of the following baud rates, and they all produce gibberish:

1200 bps

2400 bps

4800 bps

9600 bps

19200 bps

38400 bps

57600 bps

115200 bps

3Anetwork.com keeps regular stock of 3560V2 and 3560X switches. Among all Cisco Catalyst 3560 switches, WS-C3560V2-24TS-S, WS-C3560V2-24PS-S WS-C3560X-24T-L, WS-C3560X-24T-S and WS-C3560X-24P-S are best selling models. 3Anetwork.com offers best Cisco 3560 Price, Cisco 3560V2 Price, Cisco 3560X Price, ship to worldwide.

For more Cisco WS-C3560X-48PF-L information please click here

2013年11月6日星期三

Cisco Catalyst WS-C3750V2-48PS-S Switch

An ideal fit for midsized organizations and enterprise branch offices, the Cisco WS-C3750V2-48PS-S eases deployment of converged applications and adapts to changing business needs by providing configuration flexibility and support for converged network patterns.

The Cisco Catalyst 3750V2-48PS switch not only consumes far less power than most other Cisco switches, but it also helps increase the overall productivity of your network for data, voice and video. Supporting Cisco's EnergyWise technology, this switch from Cisco's Catalyst 3750 series gives you the opportunity to manage your power consumption, reduce your overall energy costs and decrease the size of your carbon footprint.

48 x 10/100/1000 ports

Optional four Gigabit Ethernet (GbE) SFP or two 10GbE SFP+ uplink network modules

Dual redundant, modular power supplies and fans

Media Access Control Security (MACsec) hardware-based encryption

IPv4 and IPv6 routing, Multicast routing, advanced quality of service (QoS), and security features in hardware

Enhanced limited lifetime warranty (LLW) with next business day (NBD) advance hardware replacement and 90 day access to Cisco Technical Assistance Center (TAC) support

Enhanced Cisco EnergyWise for operational cost optimization by measuring actual power consumption of the device, reporting, and reducing energy consumption across the network

Cisco StackPower technology: An innovative feature and industry first for sharing power among stack members

Cisco StackWise Plus technology for ease of use and resiliency with 64 Gbps of throughput

For more Cisco WS-C3560X-24T-L information please click here

2013年10月29日星期二

How to configure Gigabit Ethernet Interfaces on Cisco 2911 Router?

Cisco 2900 Series Integrated Services Routers (ISR) have modular design that allows for reuse of a broad array of existing modules that meet business requirements while maximizing investment protection. Among all Cisco 2900 routers, Cisco2911-SEC, C2951-VSEC and C2921-VSEC are best selling models.

Router(config)# interface gigabitethernet 0/1

Router(config-if)#

Enters the configuration mode for a Gigabit Ethernet interface on the router.

ip address ip-address mask

Router(config-if)# ip address 192.168.12.2 255.255.255.0

Router(config-if)#

Sets the IP address and subnet mask for the specified GE interface.

no shutdown

Example:

Router(config-if)# no shutdown

Router(config-if)#

Enables the GE interface, changing its state from administratively down to administratively up.

exit

Router(config-if)# exit

Router(config)#

Exits configuration mode for the GE interface and returns to global configuration mode.

For more C2911-VSEC information please click here

2013年10月28日星期一

How to configure Settings for All RADIUS Servers on Cisco 3750x Switch?

The 3750-X Series Switches are enterprise-class lines of stackable and standalone switches with StackWise Plus technology, they are the replacement of Cisco 3750G and 3750E switches. 3Anetworkcom keeps many stocks for 3750V2 and 3750X switches. Among all Cisco Catalyst 3750 switches, WS-C3750X-12S-S and WS-C3750V2-48PS-S are best selling models.

configure terminal

Enter global configuration mode.

radius-server key string

Specify the shared secret text string used between the switch and all RADIUS servers.

Note The key is a text string that must match the encryption key used on the RADIUS server. Leading spaces are ignored, but spaces within and at the end of the key are used. If you use spaces in your key, do not enclose the key in quotation marks unless the quotation marks are part of the key.

radius-server retransmit retries

Specify the number of times the switch sends each RADIUS request to the server before giving up. The default is 3; the range 1 to 1000.

radius-server timeout seconds

Specify the number of seconds a switch waits for a reply to a RADIUS request before resending the request. The default is 5 seconds; the range is 1 to 1000.

radius-server deadtime minutes

Specify the number of minutes a RADIUS server, which is not responding to authentication requests, to be skipped, thus avoiding the wait for the request to timeout before trying the next configured server. The default is 0; the range is 1 to 1440 minutes.

end

Return to privileged EXEC mode.

show running-config

Verify your settings.

copy running-config startup-config

(Optional) Save your entries in the configuration file.

For more Cisco information please click here:

http://www.3anetwork.com/cisco-ws-c3750v2-24ps-s-price_p109.html

How to configure Cisco IOS Software on Cisco WS-C3560V2-24PS-S switch?

How to configure Cisco IOS Software on Cisco WS-C3560V2-24PS-S switch?

3560V2 24 10/100 PoE + 2 SFP + IPB (Standard) Image

The Cisco Catalyst 3560 v2 Series is the next-generation energy-efficient Layer 3 fast Ethernet switches. This new series of switches supports Cisco EnergyWise technology, which enables companies to measure and manage power consumption of network infrastructure and network-attached devices, thereby reducing their energy costs and their carbon footprint. The Cisco Catalyst 3560 v2 Series consumes less power than its predecessors and is the ideal access layer switch for enterprise, retail, and branch-office environments, as it maximizes productivity and investment protection by enabling a unified network for data, voice, and video.

The Cisco Catalyst 3560 v2 Series can be preconfigured with a specific Cisco IOS Software release at the time of ordering. This option eliminates the need to reload a specific Cisco IOS Software release during deployment, thereby reducing deployment time and cost. The Cisco IOS Software release to be preloaded can be selected from a list of supported Cisco IOS Software releases, including the crypto version.

For more Cisco information please visit:

http://www.3anetwork.com/cisco-ws-c3560v2-48ps-s-price_p55.html

2013年10月24日星期四

Cisco WS-C3560V2-24TS-S $879 Price Reduction

WS-C3560V2-24TS-S,Catalyst 3560V2 24 10/100 + 2 SFP + IPB (Standard) Image The Cisco list price for WS-C3560V2-24TS-S is 2995 USD, there are many suppliers for this, according to our research on WS-C3560V2-24TS-S Price, best price is from, http://www.3anetwork.com/cisco-ws-c3560v2-24ts-s-price_p48.html, 879 USD, but they are based in Hong Kong, so may take 3 days to reach your country

2013年8月30日星期五

TFTP Service

Question:

i am trying Cisco 3945 router to find a way to verify that the TFTP service is not running on the router. i issued the no tftp-server flash: <ios> and it accepted it even though it does not show up in the show running config. any docs would be helpful.

Answer:

If the command isn't in the running config, it's disabled. The tftp server isn't turned on by default. There are version differences that seem to either support the control-plane command and those that don't. I have a 3845 that has it, but I have a 3825 that doesn't. Here's a 3745 that does that would show you the results should you decide to maybe update your router:

R1#sh control-plane host open-ports
Active internet connections (servers and established)
Prot Local Address Foreign Address Service State
tcp *:23 *:0 Telnet LISTEN
udp *:69 *:0 TFTP-Server LISTEN

R1# Cisco 3945 price

For more info, http://site4807539.edit.build.angelfire.lycos.com/index/

2013年8月29日星期四

Issue redistributing between EIGRP and BGP using (match internal)

Question:

We currently WS-C3750X-48T-L have two routing protocols that we use in our DCs. Internally we use EIGRP, and externally we use BGP. Each of DC's has an internet link and an MPLS link.

To redistribute between the EIGRP instance and the BGP instance in the DC, we use a route map that matches internal routes.

I have an ASA firewall that is connected to the core switch, this firewall is the Internet firewall, and is part of the EIGRP AS. There are site to site tunnels, the default route, and client vpn subnets that the firewall advertises to EIGRP.

Those routes are not getting redistributed into BGP, which is a huge issue. The routes coming from the firewall are all showing as external, so BGP is not advertising them.

Here's the configuration of the edge MPLS router (the one that needs to redistribute between the two):

router eigrp 50
network x.x.x.x 0.0.63.255
redistribute bgp 50 route-map BGP-TO-EIGRP
!
router bgp 50
bgp log-neighbor-changes
network y.y.y.y mask 255.255.255.255
aggregate-address y.y.y.y 255.255.192.0 summary-only
timers bgp 30 90 90
redistribute eigrp 50 route-map EIGRP-TO-BGP
neighbor z.z.z.z remote-as 50
<output ommitted>
!
route-map EIGRP-TO-BGP permit 10
match route-type internal
!
route-map BGP-TO-EIGRP permit 10
set metric 10000 100 255 1 1500
!

Here's a sample route from one of the networks that the firewall is advertising:

xxx-3925-01#sh ip route 150.175.49.3
Routing entry for 150.175.49.3/32
Known via "eigrp 50", distance 170, metric 3328, type external
Redistributing via eigrp 50, bgp 50
Last update from 10.34.0.73 on GigabitEthernet0/0, 00:45:12 ago
Routing Descriptor Blocks:
* 10.34.0.73, from 10.34.0.73, 00:45:12 ago, via GigabitEthernet0/0
Route metric is 3328, traffic share count is 1
Total delay is 30 microseconds, minimum bandwidth is 1000000 Kbit
Reliability 255/255, minimum MTU 1500 bytes
Loading 1/255, Hops 2

xxx-3925-01#sh ip bgp neighbors x.x.x.x advertised-routes <--- ISP MPLS Peer
BGP table version is 121306, local router ID is x.x.0.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale, m multipath, b backup-path, x best-external
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path
*> x.x.0.0/18 0.0.0.0 32768 i

Total number of prefixes 1

Looking at that output from the show route it seems it's being redistributed, but I'm not seeing it anywhere else and it doesn't show as being advertised out.

Answer:

Yes, the redistribution causes the route to be external. Matching on internal routes won't work in this case and you'll either need to have them also match on external routes, or they should be able to tie it down to just that routing protocol (if you have more than bgp/eigrp on this router).

route-map EIGRP permit 10
match route-type internal
route-map EIGRP permit 20
match route-type external
match source-protocol eigrp <AS>

You can't do much with the ASA in regards to tagging routes (at least in the older versions). Otherwise, I would say tag your statics during redistribution and then match on the tag. WS-C3560X-48PF-S

Original comes from http://cisco3560.weebly.com/

2013年8月28日星期三

NATproblem

Question:

I've a small problem with NAT.WS-C3750X-48T-L I have a Cisco1861 and that's connected to my ISP's modem via FE0/0. I can ping my intern network without any problem but the NAT isn't working so I can't connect to the internet.

Can somebody check what I've did wrong? Hereby the config:

Many thanks for the help!

ip dhcp excluded-address 192.168.2.1
ip dhcp excluded-address 192.168.3.1
ip dhcp excluded-address 192.168.2.255
ip dhcp excluded-address 192.168.3.255
ip dhcp excluded-address 192.168.2.10
!
ip dhcp pool INTERN
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1 255.255.255.0
dns-server 8.8.8.8
!
ip dhcp pool GUEST
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1 255.255.255.0
dns-server 8.8.8.8
!
!
no ipv6 cef
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
license udi pid C1861W-SRST-C-F/K9 sn FGL153422S3
!
!
!
!
!
!
!
interface FastEthernet0/0
ip address dhcp
ip nat outside
ip nat enable
ip virtual-reassembly
duplex auto
speed auto
!
interface Integrated-Service-Engine0/0
no ip address
shutdown
!
interface FastEthernet0/1/0
!
interface FastEthernet0/1/1
switchport mode trunk
!
interface FastEthernet0/1/2
!
interface FastEthernet0/1/3
switchport access vlan 2
spanning-tree portfast
!
interface FastEthernet0/1/4
!
interface FastEthernet0/1/5
!
interface FastEthernet0/1/6
!
interface FastEthernet0/1/7
!
interface FastEthernet0/1/8
!
interface Dot11Radio0/5/0
no ip address
shutdown
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
!
interface Vlan2
ip address 192.168.2.1 255.255.255.0
ip nat inside
ip nat enable
ip virtual-reassembly
!
interface Vlan3
ip address 192.168.3.1 255.255.255.0
ip nat inside
ip nat enable
ip virtual-reassembly
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 1 interface FastEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
!
access-list 1 permit 192.168.0.0 0.0.255.255
!

Answer:

you should take this off:
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0
as your f0/0 interface gets an IP address by DHCP it should also get a default gateway, verify this after deleting the default static route you entered with sh ip route static WS-C3750X-48T-S Price command.

For more info, please refer to http://lilirouter.tblog.com/

2013年8月15日星期四

c3560 switch is not allowing telnet or SSH

Question:

I have configured new WS-C3750X-12S-S DS3 link as below.Also GRE tunnel build on it.EIGRP running between tunnel interfaces.
EIGRP is flapping every minute , i dont found any packet drop between 2 routers WAN interfaces, but ping stcuks for some time.
During this time EIGRP flaps.ISP dont found any issue in network.

int s4/0
ip add x.x.x.x
encapsulation ppp
dsu bandwidth 44210
scramble
crc 32
serial restart-delay 0

interface Tunnel155
bandwidth 25000
ip address A.B.C.D
no ip redirects
no ip proxy-arp
ip tcp adjust-mss 1432
load-interval 30
delay 100
qos pre-classify
keepalive 10 3
tunnel source Serial4/0
tunnel destination YY.Y.Y.

Answer:

Did you check the IP MTU on both sides of the tunnel? You might want to reduce the MTU size according to how much your physical link supports. WS-C3750X-24S-S Price For more info, http://www.pereza.info/es/blog/2811-router-needs-be-reloaded-every-week

2013年8月14日星期三

E1 Modules for Cisco1921

Question:

I was searching for C2951-VSEC an E1 card on Cisco1921, however I couldn't find out an exact replacment for HWIC-4T1/E1.

The modules which I came across are, VWIC2-1MFT-T1/E1 and VWIC2-1MFT-G703

Can anyone please let me know the differences between these two cards VWIC cards ?

Which one should I purchase?

Answer:

Actually, 1921 supports HWIC-4T1/E1.

http://www.cisco.com/en/US/prod/collateral/routers/ps10538/aag_c07_563807.pdf

The WIC G703 supports unframed E1, that is usually not necessary.

For futher information, please refer to http://www.3anetwork.com/cisco-c2921-vsec/k9-price_p251.html

订阅：博文 (Atom)

2014年3月6日星期四

2014年2月27日星期四

2014年2月25日星期二

2014年2月24日星期一

2014年2月18日星期二

I currently have 3 Cisco 3925E call manager clusters.

Cluster 1

Cluster 2

SME Cluster

I have two 3900 gateways currently connected to cluster 2 that are configured for as 500 software MTP's. That is all these gatways do now, nothing else.

I would like to share these software MTP's with the other 2 call manager cluster. I do not see a way to do this.

Is it possable to share the software MTP's between mulitple CUCM 9.x clusters?

You cannot share the same dspfarm. You can however create separate dspfarms (subdividing the total capacity in the process) and separate call manager groups which point to Cisco 3945 separate clusters.

2014年2月13日星期四

I'm trying to configure a mirror port on a WS-C3750X-48T-L . This configuration needs to replicate data from local ports, but I need that also act as a regular access port.

Here is the actual configuration:

SWITCH1-PISO7#sh monitor session 1

Session 1

Type : Local Session

Source Ports :

Both : Fa1/0/1-7,Fa1/0/9-12,Fa1/0/32-33,Fa1/0/35,Fa1/0/38

Destination Ports : Fa1/0/47

Encapsulation : Native

Ingress : Enabled, default VLAN = 215

Ingress encap : Untagged

SWITCH1-PISO7#sh run int fa1/0/47

Building configuration...

Current configuration : 112 bytes

interface FastEthernet1/0/47

switchport access vlan 215

switchport mode access

spanning-tree portfast

end

SWITCH1-PISO7#sh ver

Cisco IOS Software, C3750 Software (C3750-IPSERVICES-M), Version 12.2(50)SE1, RELEASE SOFTWARE (fc2)

****output omitted****

Switch Ports Model SW Version SW Image

* 1 52 WS-C3750V2-48PS 12.2(50)SE1 C3750-IPSERVICES-M

****output omitted****

beforehand thanks for your help

2013年12月11日星期三

2013年11月25日星期一

2013年11月14日星期四

2013年11月13日星期三

2013年11月6日星期三

2013年10月29日星期二

2013年10月28日星期一

2013年10月24日星期四

2013年8月30日星期五

2013年8月29日星期四

2013年8月28日星期三

2013年8月15日星期四

2013年8月14日星期三

output omitted

output omitted