2960 switch fiber connection over 40km single strand SM fiber

Hello everyone,
We are having an issue with the connection in the subject. We just gost dark fiber for connecting 2 2960 switches with single strand single mode fiber over more than 10Km.
Looking at the compatibility matrix and the SFP gigabit applications the 1000BASE-BX10 is the best I could find but cannot reach more than 10Km.
Can anyone please propose a solution? If media converters are the only way to go can please sugest manufacturer/model (even with SC connector) since Cisco does not make Media converters.
Thank you
Mario

A 40 km link is usually run using 1550nm wavelength due to lower light loss on the fiber at this wavelength. The 1000BaseEX module is spec'd to 40km and runs at 1310 nm wavelength, but you will lose light through a WDM filter (which is integrated in the single fiber SFP) which would reduce the link's length. I would check with some of the 3rd party media converter manufactures to see if any of them have a lower cost solution that operates over a single fiber at >40km.
Sorry... a link loss budget is the sum of:
Fiber cable loss + fiber connector losses + fiber splice losses + impairment losses (dispersion or PMD) + aging losses (safety margin).
If the transceiver's Loss Budget is greater than the Link Loss Budget, then the link should operate.
www.thefoa.org has some good videos for understanding fiber terminology at an easy to understand level.

Similar Messages

Connecting 2 3750 Switches in Stack with 2 2960 switches in full Mesh

Hi Friends,
I have attached a pics which DC design of one of our customer , as network engineer i have design this , so i am responsible for implementing it, now request you all to kindly guide me what would be technical problem i have to face in achieving this and how can i over come .Please be in detail. Waiting for your response .
Regards
Amit Kulshrestha

I have attached modified diagram , please suggest.
The major issue I see is that you have not mentioned whether the 2960's are stacked? For the design to work, they need to be stacked because you cannot create port-channels between them and the Core switches unless then 2960's are stacked.
==> You are right , surely 2960 Switch need to be in stack form.
Personally I would look at more powerful switches than the 2960's, something along the lines of the 3750x range or probably now the 3850's.
==> This is constrain of customer, not our responsibility.
The second issue I see is that your servers are connected to the WAN switches. Is there a reason for this? Usually they would be connected to the core switches.
==> For this If 1 separate 2960 series switch can be used ?.
The final point is that you only have single connections from each of your WAN connections which begs the question as to the purpose of having two WAN switches?
==> Customer is having 1900 series of router , only two ports one used for WAN and other used for LAN.
The objective of having two switches is to provide redundancy/resiliency. If you have only one connection from each WAN then why do you need two switches as there is no redundancy?
==> Customer has agreed to have manual change at the time of failure.

3550 Switch -Fiber interface VLAN question

Hello,
I will deploying two Cisco 3550 Switches and connecting them via a ordinary multimode fiber with GBIC 1000BASE-SX - transceivers installed on each switch. Here is my question: I will be configureing about half of the ports on each of the switches to be in one of two VLANS. I would like to configure the two vlans to run over the single fiber line. Is is possible to configure one fiber port, with the GBIC 1000BASE-SX - transceiver installed, with two vlans and/or subinterfaces each with half of the 1000mb of bandwidth, or will I need to run an additional fiber line connected to the second fiber interface on the 3550 to accomplish this. I really hope not to as I don't have the funds to run a second line at this time. If this configuration is possible could someone please point me to documentation on how to configure this and\or give some advice. Thank you.
Regards,
JPS

Just set up the link as a trunk , this allows you to send as many vlans across that link as you want . On each side just do the following.
switchport
switchport trunk encapsulation dot1q
switchport trunk mode dynamic desirable
Verify trunk status with the "show int trunk " command.
More info at http://www.cisco.com/en/US/products/hw/switches/ps5528/products_configuration_guide_chapter09186a00803a9af5.html#wp1200245

Number of connections over WLAN bridge?

I have a network that has been working flawlessly for many years but when I recently added a printer I ran into some problems. The printer is connected to a switch that is connected to an Airport Express that is connected over WLAN to an Airport Extreme. My problem is that I can only connect four devices to the switch. If I connect a fifth device it does not get an IP adress until I disconnect one of the other four devices. Please see the attached overview of the network. Red dotted lines represent wireless connections.
Any ideas about what causes this behavior is appreciated. Thank you.

on a jetpack or mi-fi 5 GB is nothing. Streaming Netflix can use 2.3 GB an HOUR. Even streaming YouTube in HD can use 1 or 2 GB per hour. I'm not sure why people think 5 GB is a lot for a regular internet connection. it's not. That why people should be using cable or DSL or fiber for internet

Randomly losing network connection over wireless

Shortly after installing the 10.4.5 software update, my G4 iBook with built-in Airport Extreme card has been losing connection with increasing frequency. Built-in Ethernet use is unaffected. I'm calling this problem thrash-and-drop.
1. When it's losing signal, processor activity goes through the roof. I had Activity Monitor running during a thrash-and-drop. kernel_task CPU consumption goes from under 1% before the event, to over 80% during the thrashing, and back under 1% after the thrashing stops. The activity is so bad the cursor can't be controlled: using the track pad sends the pointer all over the screen or nowhere at all.
2. This has been observed to occur with two different wireless base stations: A Linksys WRT54G and an older SMC 802.11b router. Either router is within 10 feet of the computer. Only one is running at a time. There are no other base stations in range.
3. Another iBook G4 (OS 10.3, Airport Extreme card (not built-in)), sitting next to it, shows no change and its wireless behavior is unaffected.
Initially, this seemed more likely to happen when Safari was loading Flash-heavy pages. And after thrashing and dropping a connection, it was able to reconnect after either a reboot or a five minute sleep. Currently, it can't connect to a base station for more than a minute. Most recently, it thrashed and dropped while I was selecting the base station to use. This is true regardless of the application running. In fact, it will thrash-and-drop when there are no user applications running at all, after a fresh reboot.
I've tried the following things to address the problem. None have affected the thrash-and-drop problem. Admittedly, most of this is random:
1. Back up and delete network preferences in /Library/Preferences/SystemConfiguration
2. Turn off IPv6 in System Preferences/Network
3. Back up and delete network preferences in ~/Library/Preferences (com.apple.NetInfoManager.plist and com.apple.NetworkUtility.plist)
Has anybody else seen this problem? I want to blame it on the 10.4.5 upgrade but I haven't seen anybody else complaining about 10.4.5 doing this to them. If there's something I can do to fix this in a software setting, I'd much prefer that to yet another roadtrip to the Apple store.
1.33 GHz G4 iBook Mac OS X (10.4.5)

Hi!
I have the same problem of randomly losing network connection over wireless, though mine is hardly related to surfing.
I have an external storage drive in which I use for backup of my stuff, and I access the drive via my modem, using the airport. Of late, I noticed that when copying files from my iBook to the external drive, the connection would suddenly drop before the transfer is completed. This began to occur with increasing frequency, particularly when transferring large files.
I have since abandoned wireless connection, and reverted to my trusty cable. Still, I admit that I'm really curious about the cause of the apparent lack of reliability with my wireless connection. Has it something to do with the airport?
1.33 GHz iBook G4 Mac OS X (10.4.5) New to Mac, just switched from Windows 4 months ago.

Aironet 1142 as supplicant to 2960 switch (NEAT/CISP/MAB)

Hello!
First, my configuration, (then the problem down below):
I have an Aironet 1142 with mulitple SSIDs [mapped to VLANs] connected to Gi1/0/2 on a 2960 switch in a user-accessible area. This switch is uplinked to another 2960 switch in a wiring closet, and the Microsoft NPS server is connected to the wiring closet 2960.
Aironet -- 2960 [user area] --- 2960 [closet] -- NPS RADIUS
I have the user-area 2960 configured as an authenticator switch for dot1x, and port Gi1/0/2 is authenticating the Aironet via MAB to RADIUS. RADIUS is sending VSA device-traffic-class=switch to the 2960. The closet-2960 has no special 802.1x configuration, nor is it an authenticator swtich; it just has a manually-configured trunk port to the user-area 2960 [for now; i'm trying to take this one step at a time!].
The user-area 2960 correctly converts port Gi1/0/1 to a trunk port when the Aironet is authenticated [via MAB]. The Aironet boots up, the port is opened, I can ping the Aironet on the native VLAN, and all is well [so it seems]. The Aironet's dot11Radio is configured for two SSIDs and mapped to VLANs, which are being spanned via STP thru the user-area 2960 and the closet-2960. STP is correct and verified on all switches.
I have DHCP snooping configured on the user-area 2960 but only for VLAN 1 [but NOT the wireless user VLANs], the trunk port to the closet 2960 is a trusted port. Hosts on the wired ports on the user-area 2960 are able to get DHCP IPs. On the Aironet, "show dot11 associations" shows hosts on the SSIDs are getting DHCP addresses. Again, I am *NOT* running dhcp snooping on wireless SSID VLANs [i read elsewhere that can cause problems as users roam between Aironets].
I do have CISP configured on the user-area 2960. I do not have CISP configured on the closet-2960 [best I can tell, that's not required at this stage, but I could be wrong].
Despite the alleged documentation, I could not get the Aironet to use a dot1x credentials profile to authenticate to NPS/RADIUS as an 802.1x supplicant, which is why I resorted to MAB for this exercise. The Aironet simply would not run dot1x [best I could tell]. The documentation and configuration didn't seem complex, so I was quite confused.
I have upgraded the Aironet to the latest 12.4(25d)JA2 software, and the 2960 is at 12.2(55)SE7 [i saw 12.2(58) has some issues, but i'm willing to be persuaded otherwise, based on sound advice].
Ok, now the problem:
Users on the guest wireless SSID (Vlan 20) say they cannot connect. Yep, classic. VLAN 20 is trunked and spanned to all the sufficient places. The Aironet shows users in the associations list for that SSID with IP addresses from the DHCP server! DHCP snooping is not configured on that VLAN.
I read another support forum post saying CISP and MAB could cause problems with "disappearing" ARP entries. I appear to have that problem. However, the user on the Staff wireless (VLAN 10) has full access. Am I running into a problem with "multi-host" authentication config? Via tcpdump on my firewall, I see nothing but broadcast and multicast traffic coming from a host on VLAN 20. What puzzles me is how I do see *SOME* traffic from a VLAN 20 host on this SSID, but no unicast traffic! Argh!
Since you're going to ask, here is my port config for this AP on the 2960 authenticator switch in the user-area, and the AAA config pieces:
#sh run br | in ip dhcp
ip dhcp snooping vlan 1
no ip dhcp snooping information option
ip dhcp snooping database flash:dhcp_snoop.txt
ip dhcp snooping
#sh ip dhcp snoop
Switch DHCP snooping is enabled
DHCP snooping is configured on following VLANs:
1
DHCP snooping is operational on following VLANs:
1
DHCP snooping is configured on the following L3 Interfaces:
Insertion of option 82 is disabled
   circuit-id default format: vlan-mod-port
   remote-id: ccd5.3947.7980 (MAC)
Option 82 on untrusted port is not allowed
Verification of hwaddr field is enabled
Verification of giaddr field is enabled
DHCP snooping trust/rate is configured on the following Interfaces:
Interface                  Trusted    Allow option    Rate limit (pps)
GigabitEthernet1/0/46      no         no              15
Custom circuit-ids:
GigabitEthernet1/0/48      yes        yes             unlimited
Custom circuit-ids:
GigabitEthernet1/0/52      yes        yes             unlimited
Custom circuit-ids:
#sh run br | incl aaa auth
aaa authentication login default local group rad_eap
aaa authentication dot1x default group radius
aaa authorization console
aaa authorization exec default local group rad_eap
aaa authorization network default group rad_eap local
#sh run int gi1/0/2
interface GigabitEthernet1/0/2
description Wireless Access Points
switchport mode trunk
switchport nonegotiate
srr-queue bandwidth share 1 30 35 5
srr-queue bandwidth limit 50
priority-queue out
authentication host-mode multi-host
authentication order mab dot1x
authentication port-control auto
authentication violation restrict
mab
mls qos trust cos
macro description CISCO_WIRELESS_AP_EVENT
auto qos trust
spanning-tree portfast
#sh int gi1/0/2 sw
Name: Gi1/0/2
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: Off
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk associations: none
Administrative private-vlan trunk mappings: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none
#sh auth sess int gi1/0/2
            Interface: GigabitEthernet1/0/2
          MAC Address: acf2.c5f2.8e27
           IP Address: 10.100.32.42
            User-Name: acf2c5f28e27
               Status: Authz Success
               Domain: DATA
       Oper host mode: multi-host
     Oper control dir: both
        Authorized By: Authentication Server
           Vlan Group: N/A
      Session timeout: N/A
         Idle timeout: N/A
    Common Session ID: 0A64200B00000CDA41AFBEDF
      Acct Session ID: 0x00000D00
               Handle: 0xDE000CDA
Runnable methods list:
       Method   State
       mab      Authc Success
       dot1x    Not run
#sh mab int gi1/0/2
MAB details for GigabitEthernet1/0/2
Mac-Auth-Bypass           = Enabled
#sh int trunk
Port        Mode             Encapsulation Status        Native vlan
Gi1/0/1     on               802.1q         trunking      1
Gi1/0/2     on               802.1q         trunking      1
Gi1/0/48    on               802.1q         trunking      1
Gi1/0/52    on               802.1q         trunking      1
Port        Vlans allowed on trunk
Gi1/0/1     1-4094
Gi1/0/2     1-4094
Gi1/0/48    1-2,10,20
Gi1/0/52    1-2,10,20
Port        Vlans allowed and active in management domain
Gi1/0/1     1-2,10,20
Gi1/0/2     1-2,10,20
Gi1/0/48    1-2,10,20
Gi1/0/52    1-2,10,20
Port        Vlans in spanning tree forwarding state and not pruned
Gi1/0/1     1-2,10,20
Gi1/0/2     1-2,10,20
Gi1/0/48    2
Gi1/0/52    1-2,10,20
Ok, what am I missing??

The problem lies in the wired Ethernet port on the Aironet. I did not submit that configuration because I thought it was simple and unrelated. Here is what I had:
interface GigabitEthernet0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
no bridge-group 20 unicast-flooding
bridge-group 20 spanning-disabled
The correct configuration should have been:
interface GigabitEthernet0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
no bridge-group 20 source-learning
bridge-group 20 spanning-disabled
The line "no bridge-group 20 unicast-flooding" should not be applied to the wired port. That's stupid. With that erroneous command, the wired port will forward only broadcast and multicast traffic! Unicast traffic will be dropped. Oops.
However, I do not understand why applying this to the radio interfaces has no effect there. I have yet to find any conclusive detailed answers, either. Regardless, my original problem is fixed.

TS3274 My Air Ipad keeps switching to voice-over, it will not allow me to enter my password. It keeps saying that I've entered the wrong password. It's asking for a password of zero value. How can I correct this.

My Air Ipad keeps switching to voice-over, and it will not allow me to enter my password. It keeps saying that I've entered the wrong password. It's asking for a password of zero value. When I enter my personal password that I created, it say it the wrong password, then it say try again in 5 minutes and shuts itself down. Is anyone else having this issue and how can I fix it?

Hello SharonLo
Your best bet would be to restore your iPad if it is not accepting your passcode. Check out the article below to walk you putting your iPad into recovery mode and using iTunes to restore it.
iOS: Forgotten passcode or device disabled after entering wrong passcode
http://support.apple.com/kb/ht1212
Disconnect the USB cable from the device, but leave the other end of the cable connected to your computer's USB port.
Turn off the device: Press and hold the Sleep/Wake button for a few seconds until the red slider appears, then slide the slider. Wait for the device to shut down.
While pressing and holding the Home button, reconnect the USB cable to the device. The device should turn on.
Continue holding the Home button until you see the Connect to iTunes screen.
iTunes will alert you that it has detected a device in recovery mode. Click OK, and then restore the device.
Regards,
-Norm G.

Trouble uplinking to 2960 switch

Hello,
Just installed a new 2960 switch.
Everything is working except that I am no longer to uplink a small unmanged linksys switch that is leftover from previous configuration.
I am using x-over cable and have tried adjusting switchport modes.
If I use a straight through cable, The link goes up and down constantly. If I use a x-over cable, the link stays up but no communications.
What am I doing wrong?
-Brian
www.jaydien.com

Brian,
I would guess that the problem your having is a line speed negotiation problem. Without the specific models numbers of the equipment and the ports being used on the equipment for the uplink, it is just a guess.
All Linksys switches auto cross over. While this function can be disabled (on most models), it should not be an issue.
You may be plugging your Linksys into the 10/100/1000 of the 2960 which may be confusing the Linksys terribly if it is only 10/100. Try one of the 10/100 ports on your 2960 or statically set the line speeds on one or both devices, where available.
Get those model and port numbers and we will look deeper.
Thanks,
Chris

How to configure a cisco 2960 switch to support two routers(data and voice), please give me any suggestions

HI, I need to configure a 2960 switch at a client site. They have routers already been installed on site, one is for data traffic another is for voice. I have created two vlans on switch for data and voice. Now I couldn't get any idea what would be the default gateway on switch.
Please give me any suggestions.

HI Leo,
Many thanks for your reply.
But there are two up-links going from Gi 0/1 and Gi 0/2. I have configured the S/W like below,
interface GigabitEthernet0/1
description UPLINK TO Data router
switchport access vlan 100
switchport mode access
interface GigabitEthernet0/2
description UPLINK TO voice router
switchport access vlan 100
switchport mode access
interface Vlan1
no ip address
no ip route-cache
shutdown
interface Vlan60
ip address 192.168.1.253 255.255.255.0
ip helper address 192.168.1.1
no ip route-cache
interface Vlan100
ip address 172.16.1.253 255.255.255.0
ip helper address 172.16.1.1
no ip route-cache
I have used IP helper address, but I am getting some connecting issues on PCs and IP phones. Please suggest me, Can I manage it with two uplinks with different IP addresses.
Thanks in advance.

Discover Switch and router over VPN

i am in contact with a company having many branches connecting over VPN tunnel and with different IP range in each branch
how can i configure the LMs to discover my switch and my router over VPN

LMS 3.0.1 and higher can use non-CDP discovery methods which should be able to find your remotely connected VPN devices. You could use the Ping Sweep or Route Table modules to accomplish what you want.
See https://supportforums.cisco.com/docs/DOC-9005 for more details.

How to connet cisco 2960S switch to sony nexus 7?

I want to buy an cisco WS-C2960S-24TS-S switch to help me solve business networking problem. Can someone help me to connect cisco 2960s switch to nexus 7 ?

I don't need to do anything config on the new switch, I just need to upgrade the new switch's IOS version as the existing stack.
Correct. Upgrade using the command "archive download-sw" instead copying the BIN files.
After doing above task, I connect all stack cable and power cord as you said, and then the new switch can be synchronized with the MASTER switch. right??
Correct. The new switch should NOT have any configuration. This includes VLAN.dat file.

SG 300-28 28-Port Gigabit Managed Switch -Lan connectivity issues

Hello,
Our office lan running on 2 * SG 300-28 28-Port Gigabit Managed Switch.
PID VID:SRW2024-K9 V01
Firmware Version (Active Image):1.0.0.27
The users are seeing there connection to fileservers(mapped network drives) slowing down over the period.
We have to re-boot the offending switch to get the normal traffic back.
I have raised a ticket with cisco small business people and they said to upgrade the firmware to latest version.
But I am wondering why I need to upgrade this switch as the other switch which also brought at the same time with the same spec have no such issues.
Even if I decided to upgrade the firmware, they have recommended that I need to reset the switch to factory settings and try to put the previous configuration manually which is a worry for me.
I have logged on to the web console and I have found out, I can use TFTP or HTTP to backup the config,how do I use those services and what parameters i need to pass those to work, does using that functionality can rollback the switch to previous running configuration?
PS: Both the switch have connected together using a FC trunk with link aggregation eanbled.So how do I get all those settings back if I upgrade/rollback?
I just have to come up with some solution as it is affecting the business, so any help would be much appreciated.
Please see the attachment and let me know if any other info needed?
Thanks in advance,
Regards
Suji

Hi,
Please see the difference between the connected switches configuration.
Maybe the vlan 10 and 30 has been created wrongly.
Please see the config for both the switches and give me some advice/suggestions.
I really appreciate that.
                              Bad Switch Config
/* This is the config for the bad switch */
interface port-channel 1
flowcontrol auto
exit
interface port-channel 2
description netAppFiler1
exit
interface port-channel 3
description Switch
flowcontrol auto
exit
port jumbo-frame
vlan database
vlan 10,30
exit
interface ethernet g12
switchport trunk native vlan 10
exit
interface ethernet g24
switchport trunk native vlan 30
exit
interface vlan 10
name Private
exit
interface vlan 30
name "Private 2"
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
port-channel load-balance layer-2-3
interface range ethernet g(25-26)
channel-group 2 mode on
exit
interface range ethernet g(27-28)
channel-group 3 mode on
exit
interface range ethernet g(27-28)
lacp timeout short
exit
interface range ethernet g(1-26)
lacp port-priority 2
exit
ip dhcp relay address 192.168.0.1
ip dhcp relay enable
ip dhcp information option
interface vlan 1
ip dhcp relay enable
exit
bonjour service enable csco-sb
bonjour service enable http
bonjour service enable https
bonjour service enable ssh
bonjour service enable telnet
hostname switchbad
line console
exec-timeout 0
exit
line ssh
exec-timeout 0
exit
line telnet
exec-timeout 0
exit
username admin password xxxxxxxxxxxxxxxxxxxxxxxxxx level 15 encrypted
no snmp-server enable
snmp-server location "Server Rack"
ip http exec-timeout 0
ip https exec-timeout 0
clock timezone 1
clock dhcp timezone
ip name-server 192.168.0.1 192.168.0.9
snmp-server set rlAutomaticClockSetFromPCEnabled rlAutomaticClockSetFromPCEnabled true
                         Good Switch Config
/* Good switch run config *
interface port-channel 1
description Switch
flowcontrol auto
exit
port jumbo-frame
lacp system-priority 2
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
port-channel load-balance layer-2-3
interface range ethernet g(27-28)
channel-group 1 mode on
exit
interface range ethernet g(27-28)
lacp timeout short
exit
interface range ethernet g(1-26)
lacp port-priority 2
exit
interface port-channel 1
switchport protected-port
exit
ip dhcp relay address 192.168.0.1
ip dhcp relay enable
ip dhcp information option
bonjour service enable csco-sb
bonjour service enable http
bonjour service enable https
bonjour service enable ssh
bonjour service enable telnet
hostname switchbaebf1
line console
exec-timeout 0
exit
line ssh
exec-timeout 0
exit
line telnet
exec-timeout 0
exit
aaa authentication enable Console local
aaa authentication enable SSH local
aaa authentication enable Telnet local
aaa authentication login Console local
aaa authentication login SSH local
aaa authentication login Telnet local
line telnet
login authentication Telnet
enable authentication Telnet
password xxxxxxxxxxxxxxxxx encrypted
exit
line ssh
login authentication SSH
enable authentication SSH
password xxxxxxxxxxxxxxx encrypted
exit
line console
login authentication Console
enable authentication Console
password xxxxxxxxxxxxxx encrypted
exit
username admin password xxxxxxxxxxxxxx level xy encrypted
ip ssh server
snmp-server location "Comms rack"
ip http exec-timeout 0
ip https server
ip https exec-timeout 0
clock summer-time recurring eu
sntp unicast client enable
sntp unicast client poll
sntp broadcast client enable
sntp server xx.yyy.zz.70 poll
sntp server zz.yyy.xx.201 poll
sntp server zz.yy.xxx.2 poll
sntp server xzz.xxx.xy.149 poll
clock dhcp timezone
ip name-server 192.168.0.1 192.168.0.9
ip telnet server
snmp-server set rlAutomaticClockSetFromPCEnabled rlAutomaticClockSetFromPCEnabled true
Regards
Smith

VLAN IDs not showing up in 2960 switch configuration

We have Layer 2 2960 switches that all connect back to our 4500 core. the core has the Interface VLAN defs. But, in the access switches I can do a SHO VLAN and see all the VLANs in my network, but they do not show up in my running config. The guides all say to use the VLAN global command to define VLANs, but will just entering the switchport access vlan x put them in the VLAN database as well? We also do not have VTP defined. Any ideas?

Hello Kmattison,
>> but will just entering the switchport access vlan x put them in the VLAN database as well?
yes this is correct. And it may explain what you see vlan entries in the vlan database without a corresponding vlan command in the running config.
Hope to help
Giuseppe

Configure a different DHCP pool on a 1921 Router for a VLAN 2960 switch

Hello guys,
I have a cisco 1921 router with the LAN interface connected to a Cisco 2960 switch.
My 2960 switch is configured to work in VLANs
What I would like to do is create IP pools for each VLAN in my switch.
This will allow a PC on a VLAN to get an IP in a different subnet as PCs connected in other VLANs
thanks!
Martin

i sent the wrong switch configuration
here is the right one
Current configuration : 6892 bytes
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname Switch
boot-start-marker
boot-end-marker
enable secret 5 $1$VuOI$5qvm59Nk9BBuIBqYRmAJW.
no aaa new-model
clock timezone UTC -4
switch 1 provision ws-c2960s-48lps-l
authentication mac-move permit
ip subnet-zero
vtp mode transparent
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
vlan internal allocation policy ascending
vlan 2
name Administracion
vlan 3
name Micros
vlan 4
name VoIP
vlan 5
name WiFi-Publico
vlan 6
name Otros
vlan 7
name Libres
interface FastEthernet0
description Management Port
no ip address
interface GigabitEthernet1/0/1
switchport mode trunk
interface GigabitEthernet1/0/2
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/3
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/4
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/5
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/6
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/7
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/8
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/9
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/10
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/11
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/12
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/13
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/14
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/15
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/16
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/17
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/18
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/19
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/20
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/21
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/22
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/23
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/24
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/25
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/26
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/27
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/28
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/29
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/30
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/31
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/32
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/33
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/34
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/35
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/36
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/37
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/38
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/39
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/40
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/41
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/42
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/43
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/44
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/45
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/46
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/47
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/48
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/49
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/50
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/51
switchport access vlan 7
switchport mode access
interface GigabitEthernet1/0/52
switchport access vlan 7
switchport mode access
interface Vlan1
no ip address
ip http server
ip http secure-server
ip sla enable reaction-alerts
line con 0
line vty 0 4
login
line vty 5 15
login
end

Will 2 routers running in server mode with no vtp domain defined conflict with each other when connecting over layer 2 sonet?

Our remote site has a 3845 router running MPLS to connect back to our other 3845 locally. The ISP has provided us a layer 2 sonet connection with no other configurations necessary with the exception of configuring the layer 2 portion on our side. Both of these 3845 routers are in "server mode" with "no vtp domain" specified. Will this cause an issue/conflict when the remote router bypasses the MPLS for the faster 100MB layer 2 connection?

Jon,
Excellent answer. Our two 3845 routers are about 400 miles away and we're trying to bring up a layer 2 100MB sonet connection over fiber connected to the GIG0/1 port on each router. I was worried that essentially having these 2 routers back to back over layer 2 may cause issues since our remote site has a higher revision number than our local site. It appears since we're configuring an ip address on each router and then adding the network to ospf this shouldn't conflict with our 2 routers. Below is how each router VTP is configured with the exception our remote site has 1 extra VLAN and a higher revision number.
VTP Version                     : 2
Configuration Revision          : 0
Maximum VLANs supported locally : 68
Number of existing VLANs        : 5
VTP Operating Mode              : Server
VTP Domain Name                 :
VTP Pruning Mode                : Disabled
VTP V2 Mode                     : Disabled
VTP Traps Generation            : Enabled
MD5 digest                      : 0xBF 0x86 0x94 0x45 0xFC 0xDF 0xB5 0x70

2960 switch fiber connection over 40km single strand SM fiber

Similar Messages

Maybe you are looking for