3750 and 3550 Flapping

We have the 3750 and 3550 switches installed at our site and we are getting the following errors.
%LINK-3-UPDOWN: Interface GigabitEthernet2/0/13, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/13, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/7, changed state to down
%LINK-3-UPDOWN: Interface FastEthernet0/7, changed state to down
%LINK-3-UPDOWN: Interface FastEthernet0/7, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/7, changed state to up
%LINK-3-UPDOWN: Interface GigabitEthernet2/0/11, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/11, changed state to up
%LINK-3-UPDOWN: Interface GigabitEthernet1/0/18, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/18, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/11, changed state to down
%LINK-3-UPDOWN: Interface GigabitEthernet2/0/11, changed state to down
%LINK-3-UPDOWN: Interface GigabitEthernet2/0/11, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2/0/11, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/18, changed state to down
What might be causing these errors and what can we do to fix them. Also is there some software out there that can tell us what might be causing the errors, ie... excessive collisions or the such
Thanks
Steve

Here is most of the configuration for the 3750, it won't allow me to post all of it
show running
Building configuration...
Current configuration : 5733 bytes
! Last configuration change at 10:02:01 UTC Fri Sep 29 2006 by enable
! NVRAM config last updated at 10:02:01 UTC Fri Sep 29 2006 by enable
version 12.2
no service pad
service timestamps debug datetime
service timestamps log datetime
service password-encryption
service sequence-numbers
hostname CLO511204
no logging console
enable secret 5 $1$FQBc$HnhMngh.vj1ShB8AclhsX0
aaa new-model
aaa authentication login default local
aaa session-id common
clock timezone UTC -7
clock summer-time UTC recurring
ip subnet-zero
ip domain-name clovisprd
ip name-server 10.17.150.1
ip name-server 10.17.150.11
vtp mode transparent
no file verify auto
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
vlan internal allocation policy ascending
vlan 150
name SWC-CONTROL
interface FastEthernet0/1
description PLC WS00-00
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/2
description PLC BC00-00
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/3
description PLC U300-00
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/4
description PLC P100-00
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/5
description PLC DRY1-00 NuCon
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/6
description PLC EVP1-00
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/7
description PLC DRY1-00
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/8
description PLC DRY1-10
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/9
description PLC DRY1-15
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/10
description SW PFR1-03
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/11
description PV+ PFR1-03 NotUse
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/12
description SW PFR1-02
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/13
description PLC PL20-01
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/14
description PV+ PFR1-02
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/15
description PLC IIC
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/16
description PLC angle
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
interface FastEthernet0/17
description Spare
switchport access vlan 150
switchport mode access
duplex full
spanning-tree portfast
Thanks in advance for any help you can provide

Similar Messages

Does 12.1 support ssh in 2950 and 3550

Hi,
We have 2950 and 3550 switches running IOS version 12.1
In this version can we implement ssh access?
Regards
SKRAO

Hi Rao,
The following images support SSH on 2950 24 switches.
12.1(22)EA9
12.1 doesn't support SSH for 3550 24 switches.The following images support SSH on 3550 24 switches.
12.2SEE
12.2SED
12.2SEB
Hope it helps you.
Thanks,
satish

2950 SX and 3550-12G Connection Problem

In a Network we have 2950-SX as edge switches and 3550-12G as access switches. In 2950-SX we have 24-Port 10/100 Ethernet ports and 2-Fixed F.O ports which connector is MTRJ. in 3550-12G we have 12-Giga bit module in which we are using SC-1000 Base SX port.
To connect these switches we are using one side MTRJ and other side SC connector Patch Cord (company manufactured). We have try MTRJ male and female both type of Patch cords to connect 2950 with 3550 but we fail every time. We have try to swap the RX-TX on the SC side but result is same and connection between 2950 and 3550 didnt up so please advice any suggestion.

Try to set the encapsulation on the 355012G to dot1q.
[switchport trunk encapsulation dot1q]

802.1x between Switch 3750 and ACS 4.2 Authentication faild --need help

I configured the Switch 3750 and ACS for 802.1x authentication.
when I used the windows as the 802.1x client, it prompted "click here to enter user name and pasword for the network " as normal.
The problem is that after I entered username and password (i am sure i enter the identical username and password as in ACS) the authentication failed,
What is the most possibly problem?
Thx in advance!!!
The configuration is Sw3750 is:
aaa new-model
aaa authentication login default local
aaa authentication enable default line
aaa authentication dot1x default group radius
aaa authorization network default group radius
dot1x system-auth-control
interface GigabitEthernet1/0/18
description Link to test 802.1x
switchport access vlan 119
switchport mode access
dot1x pae authenticator
dot1x port-control auto
spanning-tree portfast
radius-server host 10.1.1.333 auth-port 1645 acct-port 1646
radius-server source-ports 1645-1646
radius-server key keepopen0
In the ACS:
Network Configuration -->aaa client ip address: 10.1.119.1(the vlan 119's ip address), shared secret: keepopen0
user setup -->real name:test1, password: test1.
Attached is the debug information

What do you see in acs failed attempts?

Comparison between 3750 and 3750-metro

hi folks,
is there any links which will provide me on the comparison between 3750 and 3750-metro? for exapmple, isis is not support on 3750 but it support on 3750-metro. The product information from cisco site is insufficient in term of the main differences :p
rgd
josh.w

Hi Josh,
The Cisco Catalyst 3750 Metro Series is built for Metro Ethernet access in a customer location, enabling the delivery of more differentiated Metro Ethernet services. These switches feature bidirectional hierarchical QoS and Traffic Shaping, intelligent 802.1Q tunneling with class-of-service (CoS) mutation, VLAN translation, MPLS, EoMPLS, and Hierarchical Virtual Private LAN Service (H-VPLS) support, and redundant AC or DC power. They are ideal for service providers seeking to deliver profitable business services, such as Layer 2, Layer 3, and MPLS VPNs, in a variety of bandwidths and with different SLAs.
The metro switches have the PXF chips (which allow hierarchical QoS on the 2 "WAN" GigE ports, so several logical links can share a connection, and have soft bandwidth limits).
For more details on 3750-M switches have a look at this link
http://www.cisco.com/en/US/products/hw/switches/ps5532/products_qanda_item09186a00801eb822.shtml
HTH
Ankur
*Pls rate all helpfull post

Interconnecting Catalyst 3750 and 2948G-L3

I am trying to interconnect a Catalyst 3750 and a 2948G-L3 using fiber GBIC. The interfaces where the GBIC and fiber are attached show up as physically down. I have tried different ports and also changed both switches. No Luck. If I connect a 3524 to the 3750 using the same connection it works.
Are 2948G-L3 switches compatible with the 3750?
Thanks,
VT

Should have no problem. Can you try the following on the 3750's gig interface:
speed nonegotiate
See of the link comes up.
Please rate all posts.

VTP Between 3750 and 2811

Hey All,
I'm attempting to create a trunk between a 3750 and a Cisco 2811 router (with a 16 port switching module NM-16-ESW). I'm using an etherchannel trunk between the two. I'm trying to configure VTP on the 3750 (server) and make the 2811 a client. Below is a copy of the configs and output from relevant commands. Any clue why I'm not seeing vlans on the 2811?
2811 Router Config:
interface Port-channel1
switchport mode trunk
nterface FastEthernet1/14
switchport mode trunk
channel-group 1 mode on
interface FastEthernet1/15
switchport mode trunk
channel-group 1 mode on
MPLS-TEST#sh vlans
No Virtual LANs configured.
MPLS-TEST#sh vtp status
VTP Version : 2
Configuration Revision : 1
Maximum VLANs supported locally : 256
Number of existing VLANs : 6
VTP Operating Mode : Client
VTP Domain Name : VTP
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0xE7 0x0F 0xE8 0x89 0x47 0xAE 0x7E 0x7B
Configuration last modified by <IP of 3750> at 3-1-93 00:06:05
3750 Config and Shows:
interface Port-channel1
switchport trunk encapsulation dot1q
switchport mode trunk
interface FastEthernet1/0/47
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode on
interface FastEthernet1/0/48
switchport trunk encapsulation dot1q
switchport mode trunk
channel-group 1 mode on
sw-upstairs#sh vtp status
VTP Version : 2
Configuration Revision : 1
Maximum VLANs supported locally : 1005
Number of existing VLANs : 6
VTP Operating Mode : Server
VTP Domain Name : VTP
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0xE7 0x0F 0xE8 0x89 0x47 0xAE 0x7E 0x7B
Configuration last modified by <IP of VLAN 1> at 3-1-93 00:06:05
Local updater ID is 134.178.220.224 on interface Vl1 (lowest numbered VLAN interface found)
sw-upstairs#sh vlan
VLAN Name Status Ports
1 default active Fa1/0/1, Fa1/0/2, Fa1/0/3
Fa1/0/4, Fa1/0/5, Fa1/0/6
Fa1/0/7, Fa1/0/8, Fa1/0/9
Fa1/0/10, Fa1/0/11, Fa1/0/12
Fa1/0/13, Fa1/0/14, Fa1/0/15
Fa1/0/16, Fa1/0/17, Fa1/0/18
Fa1/0/19, Fa1/0/20, Fa1/0/21
Fa1/0/22, Fa1/0/23, Fa1/0/24
Fa1/0/25, Fa1/0/26, Fa1/0/27
Fa1/0/28, Fa1/0/29, Fa1/0/30
Fa1/0/31, Fa1/0/32, Fa1/0/33
Fa1/0/34, Fa1/0/35, Fa1/0/36
Fa1/0/37, Fa1/0/38, Fa1/0/39
Fa1/0/40, Fa1/0/41, Fa1/0/42
Fa1/0/43, Fa1/0/44, Fa1/0/45
Fa1/0/46, Gi1/0/1, Gi1/0/2
Gi1/0/3, Gi1/0/4
5 INTERNET active
I'm baffled why these vlans aren't showing on my 2811. Any ideas?
Thanks,
Mike

Hey All,
Thanks for the input! I was actually able to solve the issue. It appears that "sh vlans" is different on an IOS router than an IOS switch. On the router it shows sub-interface ISL/dot1q trunks to a switch. This is obviously different for me as I have a switching card. In order to see VTP in action on the router and verify it was working I actually needed to view it through the VLAN database. See below:
MPLS-TEST#vlan database
MPLS-TEST(vlan)#show
VLAN ISL Id: 1
Name: default
Media Type: Ethernet
VLAN 802.10 Id: 100001
State: Operational
MTU: 1500
VLAN ISL Id: 5
Name: INTERNET
Media Type: Ethernet
VLAN 802.10 Id: 100005
State: Operational
MTU: 1500
VLAN ISL Id: 10
Name: INTERNET-DMZ
Media Type: Ethernet
VLAN 802.10 Id: 100010
State: Operational
MTU: 1500
VLAN ISL Id: 20
Name: PRODUCTION
Media Type: Ethernet
VLAN 802.10 Id: 100020
State: Operational
MTU: 1500
VLAN ISL Id: 25
Name: LAPTOPS
Media Type: Ethernet
VLAN 802.10 Id: 100025
State: Operational
MTU: 1500
VLAN ISL Id: 30
Name: NETWORK-DISTRIBUTION
Media Type: Ethernet
VLAN 802.10 Id: 100030
State: Operational
MTU: 1500
VLAN ISL Id: 250
Name: BGP-ROUTING
Media Type: Ethernet
VLAN 802.10 Id: 100250
Certainly is confusing and left me scratching my head. Thanks for the help though! I through this up on my blog too so someone in the future isn't chasing his/her tail
-Mike
http://cs-mars.blogspot.com

RPS and Cisco Catalyst 2950 and 3550 switches

We are doing experiments with RPS and CC 2950 and 3550. When we unplug the main power, the RPS takes over and feeds the switch with power. But when we plug the main power back again, the switch contiues to take power from the RPS. How is the power reduncancy achieved with CC 2950 and/or 3550s?
Thanks in advance,
Dardan

You will need to press the active/standby button on the RPS for the internal power supply in the switch to take over. Note that this can cause the switch to reload and do it in your maintenance window if this switch is in production.
http://www.cisco.com/cgi-bin/bugtool/onebug.pl?bugid=CSCdx81023

Link between 3750 and 4908 (Lx, monomode fiber)

Hello,
I have a new swtich a C3750 and a 4908 works very well.
I try to link a 3750 and a 4908, my results :
- Port of 3750 and 4908 is up when I put "speed nonegociate" . And juste few packets arrive to the 4908 and I can't ping the 4908.
- Port of 3750 is up with "speed nonegociate", and the port of 4908 stays down....
- Port of 3750 and 4908 stay down without "speed nonegociate" ... :(
You can see the 3750's config in attachments.
Ps : Sorry for my english, i'm a french student :)
Thank in advance

Hi
In recent past i had tried interfacing 3750 installed with LX SFP with third party SFPs installed in Lucent DSLAMs with speed nonegotiate on the cisco 3750 side.
We did face some kinda wierd problems after the lucent DSLAMs get rebooted or sometimes even we disconnect and reconnect the fiber it happened that we failed to get the link(connectivity).
So i would suggest to go for an original Cisco SFP make to avoid all these intermittent issues which can result in unecessary downtimes..
regds

Cisco BE6k with CUCM 10.X integration with Siemens with Hipath 3350 and 3550

Dear Experts;
We have one requirment from customer.
They have 4 branches with Siemens Hipath 3350 and 3550 PBX and they want to integrate with cisco CUCM 10.x.
The Head Quater with complete CUCM as IPT and branches with with Hipath 3350 and 3550 PBX.
CIsco TAC says interoperability doc is not available and also I can see tehre is no doc.
TAC Reply As below.
We do not have any documents about CUCM integration with Hipath 3350 and 3550 on our interoperability portal. This means that their integration with CUCM was never properly tested. So we can not confirm that all features will be working. But from CUCM perspective this is third-party device that can be integrated using SIP or ISDN (with Voice Gateway between them).
Link for interoperability portal:
http://www.cisco.com/c/en/us/solutions/enterprise/interoperability-portal/networking_solutions_products_genericcontent0900aecd805b561d.html#callmgr10
Regards
Debashis

If the Siemens supports SIP or H323 you can attempt to simply create a trunk between the systems and route calls via it. If IP integration is not an option then as pointed by TAC integrate via PRI circuit (preferably QSIG). From CUCM side it will be just another GW, similarly from Siemens side. You'll need to select which side is going to be ISDN network (I always use Cisco side) and then make the other side user.

3750 and WCCP

Hi all
We have a cisco network and in our smaller branch offices, are using 3750 L3 switches as the core. From this switch, we are running WCCP to a pair of WAE-674 WAAS appliances.
This is all working well, and redirection is occuring in hardware on the 3750 (running 12.2(52))
I think I know the answer to this question, but would like validation.
If we apply a redirect list to the WCCP statement in the 3750, and then put a deny in the corresponding ACL, will this deny statement be processed in hardware, or punted to the cpu? My feeling is processed software, but haven't found a rock solid cisco dodument to confirm.
thx in advance
Michael

Michael,
Considering you are running latest code, deny statement will be processed in Software, if ACL is large and has lot of hits, then you may see CPU issues on the switch. Thanks
Ahsan

Trunk configuration (VTP) between 3750 and 2811

Hi,
I have a stack of 6 Cisco Catalyst 3750G with 6 VLANs acting as a VTP server and want to establish a trunk link to my Cisco 2811 router equiped with a switching module 16 ports. Can I set the 2811 as a VTP client to propagate the VLAN info from the 3750 and configure one of the port on the switching module of the 2811 as a trunk encapsulated DOT1q and will I be able to route to the outside world.
Thank you

I beleive the switching cards support vtp and that should be possible.
Table 2. Features Supported on Cisco EtherSwitch Modules
EtherSwitch Network Modules (NM-16ESW and NMD-36ESW)
EtherSwitch HWICs (HWIC-4ESW and HWICD-9ESW)
EtherSwitch Service Modules (NME-16ES-1G, NME-16ES-1G-P, NME-X-23ES-1G, NME-X-23ES-1G-P, NME-XD-48ES-2S-P, and NME-XD-24ES-1S-P)
VLANs
Multiple VLANs per Switch
Yes (varies by chassis; maximum of 64 on Cisco 3845)
Yes (maximum of 15 on any chassis)
Yes (maximum of 1,024 per switch or stack)
VLANs in 4,000 Range
No
No
Yes
IEEE 802.1Q Tagged and Untagged VLANs
Yes
Yes
Yes (802.1Q and Inter-Switch Link [ISL])
VLAN Trunking Protocol (VTP) Support for Client, Server, and Transparent Modes
Yes
Yes
Yes

Lost dust Jacket front and back flap

I composed a book in Aperture using the Journal theme. After making a couple of PDF previews, somehow???? I have lost the dust JAcket front and back flap pages. I can't find a way to re-insert these from a master or build them any other way. I have tried to show the master pages and select the front dust jacket flap master and then 'Add New Page From Master', but it won't allow me to select that option. I still have the front cover and Back cover in the Pages layout. So, how do I rebuild the dust jacket flaps? My pages are as follows: 1st is the Front Cover; 2nd is a Blank page; then 3rd is my Table of Contents page(currently showing as Page 1). I made a duplicate (to experiment with ways to solve it) and tried to rebuild it using the same theme, but it makes a mess of it, loosing all my layouts. After having spent dozens of hours on this book and it was almost ready to send, I don't want to have to start all over again. Help!!!

I composed a book in Aperture using the Journal theme. After making a couple of PDF previews, somehow???? I have lost the dust JAcket front and back flap pages. I can't find a way to re-insert these from a master or build them any other way. I have tried to show the master pages and select the front dust jacket flap master and then 'Add New Page From Master', but it won't allow me to select that option. I still have the front cover and Back cover in the Pages layout. So, how do I rebuild the dust jacket flaps? My pages are as follows: 1st is the Front Cover; 2nd is a Blank page; then 3rd is my Table of Contents page(currently showing as Page 1). I made a duplicate (to experiment with ways to solve it) and tried to rebuild it using the same theme, but it makes a mess of it, loosing all my layouts. After having spent dozens of hours on this book and it was almost ready to send, I don't want to have to start all over again. Help!!!

Large amount of traffic with 152x mesh and mac-flap

We have just had a Mesh designed by an external company, and when we plugged it in we began have large numbers of mac-flap notification and more than 700mb of traffic sent across our data network.
Our setup includes 2 5508 controllers and 9 152x APs
3 APs (RAP) with their 5.8 antennas are within close proximity on a vertical pole pointing to the other 6 about 1000mtrs away in an arc. With their ethernet ports plugged into the same switch (native vlan 111) as WLC1 (which is LAG'd to two ports)
Vlan 111 for management of Mesh
Vlan 201 for WLAN
DHCP scope on DC on Vlan 100 (helper address from router)
Q, will the closeness of the 5.8 antennas cause any problems with mac-flap or is likely to be the controllers with their LAG connections or something totally different?
Thanks for any help

Andrew,
the proximity of the antennas shouldn't cause the mac-flap notification, nor should the LAG connection cause this. That's more and indication that the client is flopping between ports on the switch, which generally happens when you are not configured for LAG on the WLC, nor a port-channel on the switch.
the mac address that is being reported in the mac-flap. Is it a client or is it the MAPs?
If it's one of hte MAPs, you may want to check the antennas of the RAPs, since the MAPs sholdl stabliaze once AWPP has run and optimized the path to the network. If they are flapping I would look at possible RF or antenna issues.
HTH,
Steve
Please remember to rate helpful posts or to mark the question as answered so that it can be found later.

802.1x, PEAP, WinXP, and 3550 (Radius)

I have everything configured according to Cisco documentation, but I am getting two different errors in ACS's log.
For a user it says: External DB account Restriction
For a machine it says: EAP-TLS or PEAP authentication failed during SSL handshake
Does anyone have any idea what those mean? I can provide the 3550 debug logs as well if that will help.

I didn't understand your answer. I also face similar problem like you, do you have any info on this.
Thanks,
Siddu
When "Authentication using computer" ie. machine authentication is selected in
Windows XP (SP1 or SP2) client, authentication are
failing for EAP type - Protected EAP (PEAP).
The server log is showing " No password found in the
request,” indicating during challenge/response, XP
client is not sending password in its response.
Since authentication will be done during computer boot up, I am not getting how to store the machine
password, I assume machine will use admin password by
default.
I order to send admin password during machine
authentication, do I need to store admin credentials?
If that is the case where and how?
Other than this do I need to do any other setup at XP
client and AAA Server side?
Did any one face similar problem?

3750 and 3550 Flapping

Similar Messages

Maybe you are looking for