3750 switch stacks

I am new to the networking world and have some questions.
I have 1 stack of six 3750 switches with a 10.50.3.10 ip address
On the first stack (.10)I have int 6/0/19 , 20 and 21 assigned.
I have a second ip scheme with one switch with an ip of 10.50.3.11
Do I use a smartwise cable to connect the switches even though they have different ip schemes? Or do I use a only a cat 5 to connect the 2 differenet stacks. Also, do I need to configure the 6/0/19, 20 and 21 ports on the second ip scheme. I don't think it is possible now that I am writing this if the smartwise cables are not used. Any help would be appreciated.

I apologize but I am not following you entirely. If you stack the 3750, you must use the stacking port and use the stackwise cable.
You said: I have 1 stack of six 3750 switches with a 10.50.3.10 ip address
>> This would mean you stacked them using the stackwise cable and all these six switches are seen as one single device.
What do you mean by you have int 6/0/19-21 assigned? Assigned them what?
You said: I have a second ip scheme with one switch with an ip of 10.50.3.11
>> Sounds like you have another stack? Because the device will complaint if you address two different interfaces in teh same switch/router to the same subnet (10.50.3.10 and 10.50.3.11), unless these addresses are masked as host but I doubt that.

Similar Messages

Snmp for 3750 switch stack

Hi,
I have two 3750 switch stack together with one ip address mange the stack.
Can I monitor the memory and cpu for each individual switch? what is the oid then?
Thanks.
C.K.

Hello CK,
On the Catalyst 3750, the stack master handles the SNMP requests and traps for the whole switch stack.
The stack master transparently manages any requests or traps that are related to all stack members. When a new stack master is elected, the new master continues to handle SNMP requests and traps as configured on the previous stack master, assuming that IP connectivity to the SNMP management stations is still in place after the new master has taken control.
So to answer your question, with the OID for CPU and Mempory usage the switch will return only values for the active master. The other stack members are hot standby and do not produce SNMP information for CPU and/or Memory.
HTH
--Leon

ASA , 3750 Switch stack ,Etherchanel cross-stack and HA

Hi Guys,
I have run into a scenario where there they use a switch stack of four 3750’s and two ASA 5540 in Active-stanby HA Pair.
ASA's are connected with 4 interfaces across stack (1 interface to each switch).
1 Etherchannels (4 ports) is configured between ASA and switch. All vlans are terminated on ASA as a subiterfaces.
somehting like:
Port-channell1
no ip address
Port-channell1.10
vlan 10
ip address 192.168.10.1 255.255.255.0 stanby 192.168.10.2
Port-channell1.20
vlan 10
ip address 192.168.20.1 255.255.255.0 stanby 192.168.20.2
..and so on..
There is about different 60-70 vlans currently terminated on ASA.
We found a problem with failover testing:
When we test the failover and fail manually with “failover active” command,
It looks like only 29 vlans can fail to backup ASA instantly , the rest can take up to 5 min.
Is there a limitation for ASA or 3750 etherchannel in this scenario why it would not failover instantly for all vlans ?
Thanks
Martin

sory mistake there :
Port-channell1.20
vlan 20
ip address 192.168.20.1 255.255.255.0 stanby 192.168.20.2
Martin

ACL not working on 3750 Switch Stack on a trunk port

I cannot figure out why the ACL is not working on a 3750 running 12.2 (55)SE on a trunk port. For testing, there is 1 x IP (10.101.15.13) that should be denied to all VLANs on the trunk. I have tried standard and extended list, but neither seem to work.
What am I doing wrong?
Access-List:
Standard IP access list 10
    10 deny   10.101.15.13 log
    20 permit any log
Access-List Interface:
interface GigabitEthernet7/0/10
description ESX Trunk
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,2,60-63
switchport mode trunk
ip access-group 10 in
Mac-Address on the Switch Port:
63    0050.569a.6d9f    DYNAMIC     Gi7/0/10
Windows Machine MAC:
Description . . . . . . . . . . . : vmxnet3 Ethernet Adapter #4
Physical Address. . . . . . . . . : 00-50-56-9A-6D-9F
Windows Connection (which should be denied):
TCP    10.20.63.4:3389        10.101.15.13:21289     ESTABLISHED     InHost

PACL only apply to an L2 interface. On an L2 interface the only direction that can be applied is INBOUND. On an L3 interface INBOUND or OUTBOUND can be specified.
In any case, I have worked around the issue by applying VACLs. Marking this as resolved.

3750 switch not forwarding EAPoL to RADIUS server

I have a 3750 switch stack running version 12.2(53)SE2 IPBASEK9-M. I have dot1x configured on the switch and have a Windows 7 PC connected with 802.1x configured on the interface. I see the EAPoL start message from the PC, but I don't see any RADIUS packets from the switch to the RADIUS server. I have a simple dot1x config just to try to get it working prior to adding additional features such as guest-vlan...
Config and debug file attached.
I don't know if the ip dhcp snooping and arp inspection configuration is causing an issue with this or not. I see the EAPoL packet received on the switch as seen in the debug attachment, but I still never see the RADIUS packet. I did set both to trust on the interface but still the same outcome. I can't disable it since it is a production switch with a test interface.
Any ideas?
Thanks,
Mark

Hi Mark,
The config seems to be OK, nothing I would miss if I assume that mandatory
commands not shown in your config are in place
aaa-new-model is required for dot1x to function, I don't seee that command.
I have configured dot1x just a few times but I always used the commands
aaa authorization network default group radius
and
radius-server vsa send
(honestly, I'm not sure whether they are required, it's just a template which
I know as working)
Careful if this is a production system
AAA New-Model will radically change every authentication behaviour on the
switch if it is not already configured
The main issue seems that the catalys is not sending an "EAP-Request/Identity"
back, Radius-Packets will only be sent after the "EAP-Response/Identity":
(taken from http://www.cisco.com/en/US/docs/switches/lan/catalyst3750e_3560e/software/release/12.2_50_se/configuration/guide/sw8021x.html)
Do you have any other dot1x client?
You can use a cisco router for testing dot1x if you have
test system at hand:
conf term
dot1x credentials DOT1XTEST
username testuser
password testpassword
exit
interface [name-of-interface-connected-to-catalyst]
dot1x pae supplicant
dot1x credentials DOT1XTEST
Another approach:
use the classic config (not auth-manager but "dot1x syntax") you are
using a very new version of IOS, might be buggy:
Switch(config)# aaa new-model
Switch(config)# aaa authentication dot1x default group radius
Switch(config)# aaa authorization network default group radius
Switch(config)# radius-server host [IP-address] auth-port [port] key [port]
Switch(config)# dot1x system-auth-control
Switch(config)# interface [interface]
Switch(config-if)# switchport mode access
Switch(config-if)# dot1x port-control auto
Hope something is helpful
Additional debug hints:
use
show dot1x all
show dot1x interface [interface-name] detail
show dot1x interface [interface-name] satistic
Do see something like "RxResp = x" with x>0?
rgds, MiKa

Removing 4 out of 6 switches in a switch stack

Hi all,
A very simple question for the group (I hope!) regarding 3750 switch stacks.
I've inherited a stack of 6 3750 switches. I need to reduce this to two. All of my active connections have been moved over to the remaining two switches I plan to keep.
Here is the output of the show switch
DASW01_4STACK#sh switch
Switch/Stack Mac Address : 001c.b1d9.cb80
                                           H/W   Current
Switch# Role   Mac Address     Priority Version State
1       Member 0019.2f07.ab80     1      0       Ready
*2       Master 001c.b1d9.cb80     1      0       Ready
3       Member 001c.b1e1.5d80     1      0       Ready
4       Member 001c.b1f6.4a80     1      0       Ready
5       Member 0023.eabd.3500     1      0       Ready
6       Member 001c.0ea1.be80     13     0       Ready
The two switches I want to keep are # 5 and #6.
As you can see, for some reason the master is not on switch 6 even though it has the highest priority. All the switches are connected together with the proper redundant stack cables.
I've never worked with stacks before but would the actions be as simple as.
1. Backup configs!
2. Turn off switches 1 to 4 one at a time an allow for the stack to stabilize after each switch is powered down.
3. Verify that switch 6 is now the master and everything still works.
4. Turn off switch 5 & 6 and connect the stack cables of each switch to each other for redundancy (currently only one cable connects switch 5&6)
5. Turn on switch 5 & 6
Am I missing anything?
Thank you!
-Pete

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Leo Laohoo wrote:"Power off the switch that is to be added."But Joseph you are not ADDING switches. You are REMOVING switches from a stack and re-cabling.If one was adding a new switch, then yes, I recommend the new switch is to be powered OFF before connect the stacking cable.
Leo, an excellent point!
Powering of the switch, when "adding" to the stack, no doubt gets it to initiate itself as a stack member.
Re-cabling existing stacks members, shouldn't need that, but the question then is whether the hardware (stack connections) were designed for making "hot" (i.e. both sides powered on) connections. If they are, then you're correct, no need to power off switch 5.

Catalyst-3750-series-switches -stack switches

Hi,
I have to show the temperature of each of the stack members in the switch. The MIB that I am using is CISCO-ENVMON-MIB ;
I am trying to parse the ciscoEnvMonTemperatureStatusDescr to get the temp instance for each switch instance.
is this the correct way?.

Here is the output from one of the standalone 3750 switch in my lab:
SW01#sh switch
Switch/Stack Mac Address : 1111.1111.1111
                                           H/W   Current
Switch# Role   Mac Address     Priority Version State
*1       Master 1111.1111.1111     1      3       Ready
SW01#sh switch stack-ring s
Stack Ring Speed        : 16G           <<<<<<<<<<<<
Stack Ring Configuration: Half        <<<<<<<<<<<<
Stack Ring Protocol     : StackWisePlus
SW01#sh switch stack-ports
Switch #    Port 1       Port 2
    1          Down         Down
SW01#
-Terry

Switch stack connectivity question

x.x.x.10 = stack 1
x.x.x.11 = stack 2
my question since i have been thrown to the wolves is (with very little experience): I am at one site with 2 stacks. Is connecting stack 1 to stack 2 done with a crossover or straight through cable? On stack 1 I have 6/0/19 and 6/0/20 being used for avaya vm erver and avaya ip office. So I need to make sure that second stack can communciate to number 1 in order for the prots on the second stack to recognize the vm server and ip office locations. I'm a little confused. I know I shouldn't use a stackwise cable. Any help would be appreciated.

Not to be overly technical or picky, the term "stack" refers to the feature that the 3750 is capable of and stacking this platform would require a "stackwise" cable. It should come with the switch and it's silver. you connect the 3750 through stack port in the back of this switch. Now, if you are simply connecting two switches together, you will require a cross-over cable. A good rule of thumb is when connecting two alike devices you will need cross-over, like router to router or switch to switch. If they are not alike then you will need straight.

Can't write to flash1: in a 3 switch stack

I have a 3 switch stack at a remote office consisting of a 48 port 3750X, 24 port 3750X PoE, and a 48 port 3750v2. Currently this stack is functioning normally and is running 12.2(55)SE3 (universal on the X's, ipservices on the 3750v2). I want to upgrade to SE8 so that's 12.2(55)SE8 as I see in the release notes there are some vulnerabilities fixed in SSH.
For the life of me, I cannot copy the new file to flash1: which is the 24 port 3750X PoE. This switch has 20 IP phones and 2 Cisco Access points on it and is vital to the branch office. I have spare non poe switches but not spare poe switches (looking for approval), so go figure I am having the issue with the flash memory on this switch.
If I try to tftp the file c3750e-universalk9-mz.122-55.SE8.bin to flash1, I get Error opening flash1:/c3750e-universalk9-mz.122-55.SE8.bin (Bad file number).
I can get the file tftp'd to flash2 (the 48 port 3750X) fine, but if I try to copy it from flash2 to flash1, I get the same error (bad file number).
Cisco TAC reccomened format flash1: , so I tried that and get Error formatting flash1 (Device or resource busy). OK so on my own I figure maybe its corrupt, lets run fsck /test flash1: and see. NOPE can't run that either... Error fscking flash1: (Device or resource busy). Ok now lets see if any other sessions are hung where something or someone has locked flash1... so I run systat and I am the only user on the switch stack. Ok so no one else has a hung connection that may have had a write in process frozen.
So what should I do? The uptime is 30 weeks, 23 hours, 3 minutes. The last switch in the stack, the regular 3750v2 has an uptime of 15 weeks, 1 day, 20 hours, 28 minutes because it was added to the stack back then.
Anyway the network is fine and functioning... just looking to standardize all our 3750's to the 122-55.SE8 release because it is the one IOS that we've had the best luck with.

Well after a few days of SILENCE from Cisco TAC, they got back to me again and said to reseat the flash again! I said tell me how to reseat the flash when it is soldered onto the motherboard of a 3750X switch?
So they responded with this and they are going to replace the switch:
The error message( Error opening flash1:/c3750e-universalk9-mz.122-55.SE8.bin (Bad file number)) indicates that the flash is not visible,
This issue can be solved by the following steps :
Reseat the flash if you cannot,
Format the flash if you cannot,
Replace the device(hardware failure)
As I can see from this case that the device is unable to format the flash, the only way to solve the issue is to replace the switch 1,
I can tell you support has really gone downhilll. So much that I am considering Extreme Networks, Arista and Broacade for an upcoming 10gbps switching project. Another case we had with them was due to a random switch stack crash on 12.2.58SE2. Well they had the entire show tech ouput and they still reccomended to move to 15.0.2SE4. Well that was BAD advice. When you have 6 3750V2's and 3 3750X's in one stack of 9, release 15 doesn't have enough memory to even run a console. We had to break the stack and one by one go to 12.2.55SE8. I don't know what Cisco is thinking. How can they say oh run this release but then they see its a huge mixed breed stack with a large configuration and they don't take memory into consideration? I even asked are you sure, and they said yes we assure you this release will solve your problems.
So between that bad advice and this bad advice, I am really discouraged at throwing more money into "SmartNet" contracts.

Best IOS version for 3750 switch

I have just received 2 3750 switches, but both have a different IOS version.
One has -> IOS version 12.1(19)EA1d
and the other has -> IOS version 12.2(25)SEB2.
I just want to use the switches as Gb collectors for a serverfarm seperatly (so no stack configuration) with a redundant uplink to my distribution layer.
Can someone advise my which IOS is the best for my network?
Thanx, Marty

Switch 1:
Cisco Internetwork Operating System Software
IOS (tm) C3750 Software (C3750-I5-M), Version 12.1(19)EA1d, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Mon 05-Apr-04 22:06 by antonino
Image text-base: 0x00003000, data-base: 0x009206D8
ROM: Bootstrap program is C3750 boot loader
BOOTLDR: C3750 Boot Loader (C3750-HBOOT-M) Version 12.1(14r)EA1a, RELEASE SOFTWARE (fc1)
2224-3750-037000137 uptime is 23 hours, 52 minutes
System returned to ROM by power-on
System restarted at 09:02:42 GMT Thu Aug 11 2005
System image file is "flash:c3750-i5-mz.121-19.EA1d/c3750-i5-mz.121-19.EA1d.bin"
cisco WS-C3750G-24TS (PowerPC405) processor (revision H0) with 118776K/12288K bytes of memory.
Processor board ID CAT0904X00B
Last reset from power-on
Bridging software.
1 Virtual Ethernet/IEEE 802.3 interface(s)
28 Gigabit Ethernet/IEEE 802.3 interface(s)
The password-recovery mechanism is enabled.
512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address : 00:13:1A:65:50:00
Motherboard assembly number : 73-7058-12
Power supply part number : 341-0045-01
Motherboard serial number : CAT090400A0
Power supply serial number : LIT09020266
Model revision number : H0
Motherboard revision number : A0
Model number : WS-C3750G-24TS-E
System serial number : CAT0904X00B
Hardware Board Revision Number : 0x09
Switch Ports Model SW Version SW Image
* 1 28 WS-C3750G-24TS 12.1(19)EA1d C3750-I5-M
Configuration register is 0xF
Switch 2:
Cisco IOS Software, C3750 Software (C3750-IPSERVICES-M), Version 12.2(25)SEB2, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Wed 08-Jun-05 01:19 by yenanh
ROM: Bootstrap program is C3750 boot loader
BOOTLDR: C3750 Boot Loader (C3750-HBOOT-M) Version 12.1(14r)EA1a, RELEASE SOFTWARE (fc1)
2224-3750-037000138 uptime is 59 minutes
System returned to ROM by power-on
System image file is "flash:c3750-ipservices-mz.122-25.SEB2/c3750-ipservices-mz.122-25.SEB2.bin"
cisco WS-C3750G-24TS (PowerPC405) processor (revision L0) with 118784K/12280K bytes of memory.
Processor board ID CAT0925Z0WZ
Last reset from power-on
1 Virtual Ethernet interface
28 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.
512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address : 00:14:A8:71:CA:00
Motherboard assembly number : 73-7058-13
Power supply part number : 341-0045-01
Motherboard serial number : CAT09251J90
Power supply serial number : PHI09220165
Model revision number : L0
Motherboard revision number : A0
Model number : WS-C3750G-24TS-E
System serial number : CAT0925Z0WZ
Hardware Board Revision Number : 0x09
Switch Ports Model SW Version SW Image
* 1 28 WS-C3750G-24TS 12.2(25)SEB2 C3750-IPSERVICES-M
Configuration register is 0xF

QoS Questions for 3750 Switches

2x3750 switches are stacked and we are trying to simulate traffic congestion at the UTP ports by using Smartbit 6000C. The objective of the test is to see if the QoS setting works in reality even though we see from Wireshark that the packets are marked with DSCP for voice traffic.
Setup is as follows :
Smartbit<->Avaya IP Phone<->3750 switches<->6509 switch.
Please note that the configuration is set on the 3750 switch port as well as trusted on the Cat 6 switch port. However, when I set to continuous traffic with byte size of 64. Even though its a 100Mbps port, the Avaya IP Phone is already acting weird with hanged symptom. Just side note is that performing "show mls qos inter gi2/0/7 statistic" shows that data and voice traffic are marked on the different priority which seemed correct.
1) Is this the right way to test? If not, what should be the correct way?
2) The port that's connected to Smartbit is configured and it seemed that with the continuous traffic, even other IP Phones are hanged even though I have set Smartbit to hit on the IP address of the CAT6 Switch port. This is not normal right as this is supposed to be unicast traffic. Any idea what could be the reason?

Hello Brandon,
I understand your concern and how you want to test, but with the VoIP services you need to understand that there are 2 points (telephones if you want) involved. Your local one, where you might have taken all the necessary steps to protect and prioritize your voice traffic, and the oposite end which also need to have the voice packets prioritized.
Now, from your description, I understand that the packets (voice and data) marked correctly (I believe on C3750), but that's not enough. You need to use CBWFQ together with LLQ to give priority to the Voice traffic over data in case of congestion. Do you have such configuration? Can you show us some excerpt from it?
Next, during the testing, you said that your phone hang-up...where you in a call?
To respond to your questions:
1. The start is ok, but we need more details. You are pushing traffic from Smarbit, this is your local end, but where is the traffic pushed to (remote end), who is receiving the traffic?
2. In theory, you shouldn't have any impact over voice if links are 100Mbit, only if you have such a power packet generator that could fill 100Mbit. What do you mean by "This is not normal right as this is supposed to be unicast traffic"? VoIP is also unicast traffic...
I can see that you are determined to solve this issue, and this is OK as it will help you back with gained knowledge, but I have to warn you that troubleshooting QoS / Voice related problems may be more tricky than you think, as it will involve a strong know-how in these areas.
We will help, but you have to come back with more precise details.
Good luck!
Calin

How can I mirror all ports on CISCO 3750 switches to one Gigabyte port?

Hi,
I have a requirement to mirror all the ports on my 7 CISCO 3750 switches, which are in 3 separate stacks, to one single Gigabyte Ethernet port.
Does anyone know how I can do that?
Thanks in advance.

Vlad, thanks a heap for your response.
I want to apply to my sitation. Please let me know if I get them right in the following:
Catalyst A
vlan 901
remote-span
monitor session 1 source interface fastethernet 1-48 (I want to monitor all ports on the CISCO 3725)
monitor session 1 destination remote vlan 901
Catalyst B
vlan 901
remote-span (If I don't need to monitor this switch, do I still need to put anything into this switch at all?)
Catalyst C
vlan 901
remote-span
monitor session 1 source interface fastethernet 1-48 (I want to monitor all ports on this switch as well)
monitor session 1 source remote vlan 901
monitor session 1 destination interface gigabitethernet 3 (There are 4 Gigabit Ethernet Uplink in CISCO 3750, I want all the traffic to go to port 3, is this the right way to do?)
Thanks in advance.

Catalyst 3750 Switch

How many total Vlans can you create in Catalyst 3750 Switch ? I read a document about Catalyst 3750 Switch. This document is said that "Although the switch stack supports a total of 1005 (normal-range and extended-range) VLANs, the
number of routed ports". However, I am not sure. Can you confirm for me ? Thanks

this link should be of some help to answer your question.
http://www.cisco.com/en/US/products/hw/switches/ps5532/products_command_reference_chapter09186a00803ec324.html#wp1031710
HTH-Cheers,
Swaroop

Adding 3750 to stack

Hello,
I just moved a 3750 switch from a stack where it was #4. I wiped out the config by holding in the mode button, then checked it through the console port.
Then I installed it in another stack as the #3 switch, removing the stack cables while the other 2 switches were powered up and connecting them to the unpowered switch #3.
I then powered up the #3 switch. Everthing seemed to work fine except that the switch shows up as #4 instead of three. Did I miss something here?

If you manually change the stack member number by using the switch current-stack-member-number renumber new-stack-member-number global configuration command, the new number goes into effect after that stack member resets (or after you use the reload slot stack-member-numberprivileged EXEC command) and only if that number is not already assigned to any other members in the stack.
Here is the link for the bible of 3750 STACk :-
http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_20_se/configuration/guide/swstack.html
Regards,
Varun

CLI Template to run Archive Command to upgrade 3750 Switch in Prime

Does anyone have or know how to write a template to upgrade a mixed stack of 3750 switches in Prime Infrastructure 2.0? Prime does not support upgrading a mixed stack yet, but it can be done from command line.
the command line would be:
archive download-sw /allow /overwrite tftp://10.30.2.14/3750efilename tftp://10.30.2.14/3750filename

Hi,
Please check:
1. You need to download the correct .tar image file;
2. Copy it to the root of your FTP or TFTP server;
3. Upload, extract and install the .tar file to the switches (I always use the /imageonly option, because I don’t need the html files for management);
4. Reload the switch stack;
Please use this command:
sw-stack#archive download-sw /imageonly /overwrite /allow-feature-upgrade ftp://user:password@/image-file.tar
The boot parameters are automatically changed to the new IOS firmware. You can check the boot parameters with the show boot command.
Regards
Dont forget to rate helpful posts.

3750 switch stacks

Similar Messages

Maybe you are looking for