CISCO products and TACACS+

Hi,
Which are the cisco products that supports TACACS+ ?
Also please tell me about logging mechanism for that cisco products, that means where TACACS+ stores log etc.
Thanks in advance...

Hi Shailesh,
What is the end objective? If you could elloborate on it
Regards
Minakshi (do rate the helpful posts )

Similar Messages

Cisco products and services comparisons

Wasnt sure where to post this...was hoping somebody could point me in the right direction...
anybody have any site, whitepaper, document of any kind that gives an outline of products and services comparison between cisco products and other network equipment (ie...vs Juniper, vs Brocade, vs Nortel, etc...)
thanks in advance.
Bruce

Hi Bruce,
If youre a partner you can access the partner portal which has a small bit of competitive info.
http://www.cisco.com/web/partners/sell/competitive/routing.html
http://www.cisco.com/web/partners/sell/competitive/index.html
Cheers,
Conor

Cisco Ironport and heartbeat information disclosure - Vulnerability Note VU#720951

Has there been any word from Cisco if Ironport software is vulnerable to this issue/bug?
http://www.kb.cert.org/vuls/id/720951

Please note the updated announcement for our products:
As of Wednesday, April 9, Cisco Email and Web Security had been updated from our PSIRT, which handles all vulnerability and security responses for all Cisco products.
The official PSIRT information can be found at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140409-heartbleed
Please expand the Affected Products -> Products Confirmed Not Vulnerable to view the latest Cisco product listings. Our products, Email and Web Security (ESA, IEA, WSA, SMA), are listed and updated in this public facing information.
The Cisco PSIRT continues to investigate the impact of this vulnerability on Cisco products, and will disclose any vulnerabilities according to our security policy, which is available at:
http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html
For any and all inquires regarding this vulnerability and the public facing notification, please contact the Cisco PSIRT at [email protected]
Also, please see the following information released Tuesday, April 8, from our Security Intelligence Operations:
http://tools.cisco.com/security/center/viewAlert.x?alertId=33695

Cisco ISE with TACACS+ and RADIUS both?

Hello,
I am initiating wired authentication on an existing network using Cisco ISE. I have been studying the requirements for this. I know I have to turn on RADIUS on the Cisco switches on the network. The switches on the network are already programmed for TACACS+. Does anybody know if they can both operate on the same network at the same time?
Bob

Hello Robert,
I believe NO, they both won't work together as both TACACS and Radius are different technologies.
It's just because that TACACS encrypts the whole message and Radius just the password, so I believe it won't work.
For your reference, I am sharing the link for the difference between TACACS and Radius.
http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a0080094e99.shtml
Moreover, Please review the information as well.
Compare TACACS+ and RADIUS
These sections compare several features of TACACS+ and RADIUS.
UDP and TCP
RADIUS uses UDP while TACACS+ uses TCP. TCP offers several advantages over UDP. TCP offers a connection-oriented transport, while UDP offers best-effort delivery. RADIUS requires additional programmable variables such as re-transmit attempts and time-outs to compensate for best-effort transport, but it lacks the level of built-in support that a
TCP transport offers:
TCP usage provides a separate acknowledgment that a request has been received, within (approximately) a network round-trip time (RTT), regardless of how loaded and slow the backend authentication mechanism (a TCP acknowledgment) might be.
TCP provides immediate indication of a crashed, or not running, server by a reset (RST). You can determine when a server crashes and returns to service if you use long-lived TCP connections. UDP cannot tell the difference between a server that is down, a slow server, and a non-existent server.
Using TCP keepalives, server crashes can be detected out-of-band with actual requests. Connections to multiple servers can be maintained simultaneously, and you only need to send messages to the ones that are known to be up and running.
TCP is more scalable and adapts to growing, as well as congested, networks.
Packet Encryption
RADIUS encrypts only the password in the access-request packet, from the client to the server. The remainder of the packet is unencrypted. Other information, such as username, authorized services, and accounting, can be captured by a third party.
TACACS+ encrypts the entire body of the packet but leaves a standard TACACS+ header. Within the header is a field that indicates whether the body is encrypted or not. For debugging purposes, it is useful to have the body of the packets unencrypted. However, during normal operation, the body of the packet is fully encrypted for more secure communications.
Authentication and Authorization
RADIUS combines authentication and authorization. The access-accept packets sent by the RADIUS server to the client contain authorization information. This makes it difficult to decouple authentication and authorization.
TACACS+ uses the AAA architecture, which separates AAA. This allows separate authentication solutions that can still use TACACS+ for authorization and accounting. For example, with TACACS+, it is possible to use Kerberos authentication and TACACS+ authorization and accounting. After a NAS authenticates on a Kerberos server, it requests authorization information from a TACACS+ server without having to re-authenticate. The NAS informs the TACACS+ server that it has successfully authenticated on a Kerberos server, and the server then provides authorization information.
During a session, if additional authorization checking is needed, the access server checks with a TACACS+ server to determine if the user is granted permission to use a particular command. This provides greater control over the commands that can be executed on the access server while decoupling from the authentication mechanism.
Multiprotocol Support
RADIUS does not support these protocols:
AppleTalk Remote Access (ARA) protocol
NetBIOS Frame Protocol Control protocol
Novell Asynchronous Services Interface (NASI)
X.25 PAD connection
TACACS+ offers multiprotocol support.
Router Management
RADIUS does not allow users to control which commands can be executed on a router and which cannot. Therefore, RADIUS is not as useful for router management or as flexible for terminal services.
TACACS+ provides two methods to control the authorization of router commands on a per-user or per-group basis. The first method is to assign privilege levels to commands and have the router verify with the TACACS+ server whether or not the user is authorized at the specified privilege level. The second method is to explicitly specify in the TACACS+ server, on a per-user or per-group basis, the commands that are allowed.
Interoperability
Due to various interpretations of the RADIUS Request for Comments (RFCs), compliance with the RADIUS RFCs does not guarantee interoperability. Even though several vendors implement RADIUS clients, this does not mean they are interoperable. Cisco implements most RADIUS attributes and consistently adds more. If customers use only the standard RADIUS attributes in their servers, they can interoperate between several vendors as long as these vendors implement the same attributes. However, many vendors implement extensions that are proprietary attributes. If a customer uses one of these vendor-specific extended attributes, interoperability is not possible.
Traffic
Due to the previously cited differences between TACACS+ and RADIUS, the amount of traffic generated between the client and server differs. These examples illustrate the traffic between the client and server for TACACS+ and RADIUS when used for router management with authentication, exec authorization, command authorization (which RADIUS cannot do), exec accounting, and command accounting (which RADIUS cannot do).

AAA and TACACS servers

Hello All,
I want to download a free, yet reliable AAA and TACACS servers, can you guide me? Also, I need help with configuring them for study purpose.

You may download the eval version ACS 4.2.0.124, if you've access to cisco.com
ACS v4.2.0.124 90-Days Evaluation Software
eval-ACS-4.2.0.124-SW.zip
http://tools.cisco.com/squish/9B37e
Path:
Cisco.com > Downloads Home > Products > Cloud and Systems Management > Security and Identity Management
> Cisco Secure Access Control Server Products > Cisco Secure Access Control Server for Windows > Cisco Secure ACS 4.2 for Windows > Secure Access Control Server (ACS) for Windows-4.2.0.124
~BR
Jatin Katyal
**Do rate helpful posts**

Uploading YouTube videos/urls into Cisco Show and Share

We've just purchased the DMM 5.2 and the Show and Share appliance to host internal company videos but there are some YouTube videos out there that we want to pull into our Show and Share system as well. How can we do this? I've tried every possible combination of youtube url and embedded url that is out there, at least nothing that I've tried has worked thus far. I'm able to pull in other internal URLs of different videos (wmv format) without any trouble. Is this an issue with YouTube or perhaps with flv formatted video that YouTube uses (which should work according to the manual).
I know this is a new product, but is there anyone that can help?
Thank you in advance,
Chris

Chris,
The YouTube videos are typically Flash content.
The key here is that you need to download the Flash content
yourself and then Upload to the Show and Share.
Use the DIRECT URL of the Flash Content on YouTube to download
the FLV to you Personal device. After file successfully download, simply
upload the file to Show and Share.
For example:
Cisco Show and Share Flash Demo
http://www.youtube.com/watch?v=ZzquCVvS0qQ
* this link is the actual Dashboard URL not the video link
http://v4.lscache8.c.youtube.com/videoplayback?ip=0.0.0.0&sparams=id%2Cexpire%2Cip%2Cipbits%2Citag%2Calgorithm%2Cburst%2Cfactor%2Coc%3AU0dWRlRRVF9FSkNNNl9MS1hB&fexp=904405%2C901902&algorithm=throttle-factor&itag=34&ipbits=0&burst=40&sver=3&expire=1271466000&key=yt1&signature=1E65C92607546EA03DE0D1082884574D3F58AD0F.93FF9FDB00B10B44BBB52F31AADF3EB50FCEB7CC&factor=1.25&id=673aae095bd2d2a4&
* Actual URL of Video Content
========================================================
FOR THOSE THAT ARE USING OSX & SAFARI:
======================================
If you need to download FLASH Content for TESTING in your DMS Solution, You
can download Flash Videos from YouTube.
Note: The Video Quality is NOT HD or even SD... it is ID (Internet Definition)
      Also, the downloaded file will be a .flv Flash File.
1. Open a Video on YouTube, Google Video etc.
2. Press "Alt+Cmd(Apple-Key)+A" - A window opens named "Activity".
3. Select the ".flv" file (looking on filesize helps) and press "Cmd(Apple-Key)+C" to copy.
   Paste with "Cmd(Apple-Key)+V" the URL to your Adress Bar and press Enter.
4. If you need a different video format such as MPEG, WMV, or SWF; you will need to convert
   the downloaded ".flv" file with VisualHub or VLC
If this answers your question, Please take time to mark this
discussion answered & rate the response.
Thank You!
T.

Ask the Expert: Packet Capture Capabilities of Cisco Routers and Switches

With Rahul Rammanohar
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about packet capture capabilities of Cisco routers and switches.
In May 2013, we created a video that included packet capture capabilities across multiple Cisco routers and switches. For each product, we began with a discussion about the theory of the capabilities, followed by an explanation of the commands, and we concluded with a demo on real devices. In this Ask the Expert event, you’re encouraged to ask questions about the packet capture capabilities of these Cisco devices:
•       7600/6500: mini protocol analyzer (MPA), ELAM, and Netdr
•       ASR9k: network processor capture
•       7200/ISRs: embedded packet capture
•       Cisco Nexus 7K, 5K, and 3K: Ethanalyzer
•       Cisco Nexus 7K: ELAM
•       CRS: show captured packets
•       ASR1K: embedded packet capture
More Information
Blog URL: Packet Capture Capabilities of Cisco Routers and Switches
Watch the Video: https://supportforums.cisco.com/videos/6226
Hitesh Kumar is a customer support engineer in the High-Touch Technical Services team at Cisco specializing in routing protocols. He has been supporting major service providers and enterprise customers in routing, Multiprotocol Label Switching (MPLS), multicast, and Layer 2 VPN (L2VPN) issues on routing platforms for more than three years. He has more than six years of experience in the IT industry and holds a CCIE certification (number 38757) in service.
Rahul Rammanohar is a technical leader with the High-Touch Technical Support Team in India. He handles escalations in the area of routing protocols and large-scale architectures for devices running Cisco IOS, IOS-XR, and IOS-XE Software. He has been supporting major service providers and large enterprise customers for routing, MPLS, multicast, and L2VPN issues on all routing platforms. He has more than 13 years of experience and holds a CCIE certification (number 13015) in routing/switching and service provider.
Remember to use the rating system to let Hitesh and Rahul know if you have received an adequate response.
Because of the volume expected during this event, Hitesh and Rahul might not be able to answer each question. Remember that you can continue the conversation in the Service Provider, sub-community forum shortly after the event. This event lasts through November 1, 2013. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.

Hello Erick
    Thanks for the topology. The trigger will be different for labelled packet as you would need to mention the values of labels too in the trigger.
     Below are two examples of one or two labels being used, it depends on where you are capturing the packet in mplsvpn scenario which will decide teh number of labels being imposed on the packet.
Trigger for one label. (if the router on which you are capturing the packet PHP is being performed)
VPN label - 5678
Source Address - 111.111.111.111
Destination Address - 123.123.123.123
show platform capture elam trigger dbus others if data = 0 0 0 0x88470162 0xE0000000 0 0 0x00006F6F 0x6F6F 7B7B 0x7B7B0000 [ 0 0 0 0xffffffff 0xf0000000 0 0 0x0000ffff 0xffffffff 0xffff0000 ]
Trigger for two labels. (for other core routers)
IGP label - 1234
VPN label - 5678
Source Address - 111.111.111.111
Destination Address - 123.123.123.123
show platform capture elam trigger dbus others if data = 0 0 0 0x8847004D 0x20000162 0xE0000000 0 0 0x00006F6F 0x6F6F7B7B 0x7B7B0000 [ 0 0 0 0xffffffff 0xf000ffff 0xf0000000 0 0 0x0000ffff 0xffffffff 0xffff0000 ]
    You can check the labels being used (by using show ip cef <> details) and covert their values to hex and change the trigger accordingly.
     I have changed the colors for better understanding. If you notice carefully in the trigger the values for ip address, labels have just been converted to their respective hex values which could be replaced.
     Please let me know if this helps.
Thanks & Regards
Hitesh & Rahul

Cisco 871w and LAN (What did I get myself Into!)

Hey all,
Little background info:
- Took the CCNA1-4 via college course about 3 years ago, haven't used the knowlege since
- most of my experience in the real world has been non-managed networks, but taking care of Windows Terminal Servers.
- basically I think I need to re-educate myself
Current Network:
Windows Domain
45 workstations
4 buildings
Breakdown
Head Office:
- Main Distribution point
- WAN: Cisco Router and DSL modem owned by provider
- Firewall: WatchGuard Firewall (/w 5 VPN connections)
- 1 x 48 port Managed Switch (acting as simple switch)
- Windows SBS 2003 server with Exchange, SQL, and using VPN here as well
- We have about 6 other switches that are not managed in the build
- 1 cable run through building. At the end of this building is a fiber connection to the next building
- 15 workstations
BUilding 2:
- Fiber connection from Head Office
- 1 single CAT 5e from Fiber switch to Unmanaged Switch (Switch 1)
- 1 single CAT 5e from unamanaged switch to half-way point of building where we have another unmanaged switch (Switch 2)
- 1 single CAT 5e from from Switch 1 to another small building (building 4) with a small unmanaged switch and 2 workstations
- 1 single CAT 5e from Switch 2 - to end of building, underground to building 3
- 1 Workstation attached to Switch 2
Building 3:
1 x 24 port Managed Switch with connection from Building 2 (this switch being used as a normal switch)
25 workstations in here, various distances with small workstation switches throughout.
Working with new equipment:
- we upgraded DSL (cheaper) to a 5 Static IP package, this is a seperate circuit for now - so I can configure everything and
not disrupt current services.
- using test PC and connection on this DSL to make sure most everything is working.
- Purchased 871w to replace their router and to replace our Firewall which has a faulty nic and is limited in functionality.
- 6 months from now, adding Fortigate 100A Appliance
- over next 2 years - all switches will be managed
First question: Anyone have a real good resource on how inside local, inside global, outside local, outside global works for ACL's? Isn't there something similar for NAT/PAT?
Second Question: Just looking for some best practice solutions. Should I bother with VLAN's at this time, just leave everything on VLAN since
there can be no real seperation throughout the company. Suggestions?
Outside Services required:
- Webmail - using OWA:
- host header: webmail.companyname.com
- can the router block all requests to this that are made via port 80 and allow the HTTPS ones through?
- since i have 5 statics, using NAT can I have one of the external IP's used for webmail... this can be done using static NAT and firewall rules?
- Exchange Server forwards all SMTP requests to ISP mail server.
- No RDP directly to network resources without vpn activity - taken care of implicet deny.
- Will it be possible to use my other 4 static IP's, say I create a DNS entry for ftp.companyname.com. I assume a static entry in NAT will take care of sending all requests to another network box.
VPN:
Will require VPN connections, there seems to be a ton of different ones. What is the easiest to create for a few home systems
that the VPN client can be installed and configured? Can this be managed with a push policy, can different user accounts be
created with different policies:
i.e: * Steve logs in via VPN, can RDP to a desktop to access server resources but I don't want him to be able to connect to \\serverip\share
* Bob is a user, bob currently vpn's and obtains an IP 10.0.0.249, bob shares a printer that we use to print to. I don't want bob to be able to access any other resources on our network, but users can print to Bob's remote printer.
I'm over thinking all this, and getting confused - a nice simple step approach required - I feel like I'm drowning -lol

try the following links
inter vlan
http://www.cisco.com/en/US/products/hw/switches/ps672/products_configuration_example09186a00800941b4.shtml
NAT
http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_example09186a0080881718.shtml
how NAT works
http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094831.shtml
VPN
http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080235197.shtml
useful vpn links
http://www.cisco.com/en/US/products/sw/secursw/ps2308/prod_configuration_examples_list.html
good luck
Please, if helpful Rate

Need help cisco products.

i've got an request from an ISP for a cisco product but i really can't find a solution on Cisco web site or maybe i'm to blind to see what the product is?!!!
Product Description:
PGW 2200 Softswitch
MGC-X42K-AC216-2
PWG2000-UPG-TO-9.7.3
SFB22-upg-CC-9.7.3
SWP22-SIP-RTU
can anyone please help me define this product, i see its end of life but whats the successor of it?? thanks you...

Dear Shala,
We're happy to offer our product SVI_MGC which can not only act as a replacement for the PGW but can also provide Media Gateways Controller functionality for other 3rd party gateways such as AudioCodes & Lucent TNTs etc. Our product has been deployed in more than 50 countries around the world and our customer list includes names like Vodafone, Orange and many other Tier 1 & Tier 2 Telco's all over the world.
Please visit our website http://www.squire-technologies.co.uk/products/Cisco_SS7_Over_IP.php. for product information.
For further information and clarification please do not hesitate to contact me.
Kind regards,
Sanjeev Verma
Global Sales Director
Squire Technologies Ltd
www.squire-technologies.co.uk

RSS FEED FOR CISCO PRODUCT LAUNCHES

Get notified as soon as we launch new Cisco products.
See It in Action
What do you think about the RSS Feeds for Cisco products launches concept? Is it useful? Are there places on Cisco.com where you would like to see it? Do you think the idea should evolve into something different? Do you think this pilot should be dropped? Discuss it now.

I use it (just found it recently) and I like it. I would love to see one just for IOS features. It's nearly impossible to keep up on new IOS features (ie zone based firewalling) and I believe RSS would be a great help to us that use and sell Cisco products.

Can Prime Infastructure 2.1 support Non-Cisco Products? Import a MIB from a Non-Cisco Product?

I have an Non-cisco product that I which to manage by way of SNMP.
The product has MIB's so can PI support it, and can I import the MIB?
Thanks

You can design custom SNMP polling templates to monitor third-party or Cisco devices and device groups. Using this feature, you can:
Upload the SNMP MIB for the device type, then choose devices and attributes to poll and the polling frequency.
Upload a single MIB definition file, or a group of MIBs with their dependencies as a ZIP file.
Deploy the custom SNMP polling template the same way as other monitoring templates.
Display the results as a line chart or a table.
This feature enables you to easily repeat polling for the same devices and attributes, and can be used to customize the way Cisco devices are polled using SNMP.
You can create a maximum of 25 custom SNMP polling templates.
For more details on how to create custom SNMP Template, please the user guide.
-Thanks
Vinod
**Encourage Contributors. RATE Them.**

What version of Cisco software and firmware is supposed to be packaged with a new CISCO ASA5505-SEC-BUN-K9?

What version of ASA should be expected (8.2)?
What version of ASDM (6.3)?
Will registration of this product give me rights to download the latest version of these software package directly from Cisco?
The box has an NB date: 11-MAR-14. What does NB date mean?
I just bought this product and all the printed material and the CD are full of apparently dated material. I tried to use the "Cisco ASM-IDM launcher Installer Information" from the CD and it is asking for the JRE to be downloaded from http://java.sun.com/javase/downloads while I have the latest version already installed. What in the world? This is a security product and it is demanding that a inherently insecure product be installed?
I also got a three pronged power cable that seems to be a standard for latin America or Europe. Can someone give me a heads up on this?

What version of ASA should be expected (8.2)?
On my last order, which was about 6 months ago, I got an ASA with version 9.1. So I would assume that you would get atleast that version now if not a newer version.
What version of ASDM (6.3)?
Again, I got ASDM version 7.1 with my last purchase, so a new order should receive the same if not newer.
Will registration of this product give me rights to download the latest version of these software package directly from Cisco?
No, you will need to have a support contract with Cisco in order to download newer versions of software. Product registration only gives you rights to download software that was shipped with the device.
The box has an NB date: 11-MAR-14. What does NB date mean?
Not sure what that is.
I just bought this product and all the printed material and the CD are full of apparently dated material. I tried to use the "Cisco ASM-IDM launcher Installer Information" from the CD and it is asking for the JRE to be downloaded from http://java.sun.com/javase/downloads while I have the latest version already installed. What in the world? This is a security product and it is demanding that a inherently insecure product be installed?
I think Richard is right. Sounds like the box has been sitting on the shelf a while. Perhaps ask the reseller to provide you with a new image release?
I also got a three pronged power cable that seems to be a standard for latin America or Europe. Can someone give me a heads up on this?
In all the Cisco purchases I have made I have always received a 3 prong cable along with 2 others (a 2 prong and another...different...3 prong cable). I believe the devices are shipped in such a way that they do not need to be "customized" for each country. That way they can be shipped to whichever country and be good to go once they arrive.
Please remember to select a correct answer and rate

Cisco Show and Share – Last update?

Hi,
We’re currently using Cisco Show and Share as our internal video platform.
I believe there hasn’t been any form of update to the platform in more than 2 years and am wondering if we have missed something.
At the bottom of our interface we have the following text:
Show and Share and the Digital Media Manager are part of the Cisco Digital Media Suite.
© 2002-2011, Cisco Systems, Inc. All rights reserved. Warranty and End-User License Agreement
Does the 2011 date refer to our last update? This seems quite old if it does.
Any insight would be appreciated.
Regards,
Callan

Hi Callan:
That depends on the application(s) you're running, releases past 5.3.10 are supported only on a Cisco MXA UCS M3 server.
There is some info about that at http://www.cisco.com/c/en/us/products/collateral/conferencing/show-share/datasheet_c78-711706.html
Then there is also the following document covering 5.3.10:
http://www.cisco.com/c/en/us/td/docs/video/digital_media_systems/5_x/5_3/showandshare/upgrade/hardware/SNS_5-3-10_Rel_Notes.html
Systems that can be migrated to a Cisco MXA UCS M3 server for SnS are:
UCS 210-M2, UCS 200-M2, MCS 7835-H3, WAVE-574.
Systems that can be migrated to a Cisco MXA UCS M3 server for DMM are:
UCS 210-M2, and MCS 7835-H3.
If you are running on another hardware platform (7835-H3 or UCS210, very likely because of the version you are on) then the following upgrade and/or hotfix information will still be of interest to you and you may have a path to 5.3 depending on what you're working with. A critical hotfix may apply to your system, and the following document guides you in the form of "if you are running _____, then do ________."
http://www.cisco.com/c/en/us/td/docs/video/digital_media_systems/5_x/5_2/dms/release/notes/dms52rn.html#wp266747
5.3.7 still supports some older platforms, check this to see if your system is among them:
http://www.cisco.com/c/en/us/td/docs/video/digital_media_systems/5_x/5_3/showandshare/upgrade/sns537rn.html#wp301513
Regards,
-Rob
Any information provided as a member of public community support forums is provided as-is and is not warrantied by Cisco or endorsed by TAC.

Cisco Security Advisory: TCP State Manipulation Denial of Service Vulnerabilities in Multiple Cisco Products

can someone tell us if the SRW2024 affected by this :
http://www.cisco.com/warp/public/707/cisco-sa-20090908-tcp24.shtml
regards
tom

Hi Tom,
I checked that advisory, and noted that it was specifically looking at Layer three products. I will due to due diligence and direct your enquiry to one of the Cisco Product Managers responsible for the SRW series product.
Thanks for your enquiry and expect a response shortly.
regards Dave

Mixed environment with Cisco 3750 and SRW248G4

Dear Community,
as mentioned above in the subject field, we are evaluating Linksys for Business products.
We are using Cisco products (i.e. Cisco WS-C3750G-12S-S) for core networking, due to new investment planning, we are evaluation how to upgrade our access switches.
In fact, we would like to implement Linksys by Cisco products, SRW248G4 specific. These devices should be connected over fibre cabling using Linksys by Cisco MGBSX1 optical modules.
So for these reasons, I have to check, if this design is going to work. May you give any feedback to this?
Thank you in advance.

Ni hao Seng,
Without an understanding of what you are trying to achieve I can however say the following;
I have used the wonderful SRW platform (SRW2008P) in my network for two years now. I have no difficulty in setting up VLAN tags and trunking to a traditional Cisco equipment.
Most of the problems I have seen is not understanding how to setup VLANs correctly. I can appreciate that as VLANs took me a long time to understand.
I think for the benefit of the good people out there that use this community, I should put together a Video on Demand that goes through creating a VLAN that shows how to setup VLANs on a SRW switch, taking into account the three modes the switch ports can be set in (access,general and trunking modes).
regards Dave

CISCO products and TACACS+

Similar Messages

Maybe you are looking for