Connecting router to switch

Hi all,
I'm using packet tracer version 6.0.1 and I need to connect a switch to a router. My goal is to setup a very small LAN. So far I have two 2900 switches and a computer. The computer can ping each interface vlan IP of the layer 2 switches. The two switches are trunked together. Now I need to connect one of those switches to a router and on the other end of the router will be the internet/ISP connection. So these are my questions:
1. Do I trunk the router and switch just like I did the two switches, any recommendations on that?
2. What type of cabling do I use on the router to connect to the internet/ISP?
3. Do I give the outside interface of the router a public IP address?
4. How do I set the default gateway on the router so all the devices can reach it?
5, How do I route the internal traffic that goes to the router to the internet?
Thanks for your help and any suggestions.

1. Do I trunk the router and switch just like I did the two switches, any recommendations on that?
     Yes you need a trunk connection between switch and the router to support multiple VLAN traffic to reach the router.
2. What type of cabling do I use on the router to connect to the internet/ISP?
     I don't think that PT has this option. (Don't mind if i'm wrong because i never tried it).
3. Do I give the outside interface of the router a public IP address?
     Obviously the outside interface of the router should be a public IP if it is going to connect to ISP.
4. How do I set the default gateway on the router so all the devices can reach it?
     You need to configure sub-interfaces on the router for each VLAN and that sub-interface IP address will be the gateway for all the devices in that particular VLAN. (This is called as Router on-a Stick configuration)
5, How do I route the internal traffic that goes to the router to the internet?
     Once you configure the above steps, since your router is directly connected to the ISP your local devices can access internet.
Please rate if it is helpful for you. And please don't mind if i'm wrong somwheter because i too prapraing for my CCNA with PT.
Regards,
Chandu

Similar Messages

Connecting Router between Switch and Ethernet Port

I uploaded both of the router configurations I used on the 1750 router and I unable to get pass E1/0 which should put me on my companies Lan. Thanks

Well I guess the best way to explain what I trying to accomplish it create my own LAN off my companies LAN
Wall Jax-------------1751 E 1/0-----------1751 FA 0/0-------------2950 Switch
Nat the 1751 Router with FA 0/0 with this interface address 192.168.3.1 /24
And E 1/0 with a static address of 192.168.2.253 or preferable use the
"ip address dhcp Command.

Help with connecting MacBook Pro with Cisco Routing and Switches?

I'm running a CiscoASA 5510 router with several Cisco WS-C2960-48TT-L switches on a local network to connect with MacBook Pro. I need to be able to restrict access to specific users via their computer MAC address. ie: Joe Blow is limited to connecting through Switch 1 on port 10 and anywhere else he tries to plug in will simply not work.

You need to look at the documentation that came with your router and switches. Or ask your network admin to set it up. Your question has nothing to do with your Macbook Pro configuration. MAC filtering is done in the router not in the computers/devices connecting to the router.

Access Connections Ethernet Location Switching only saves one port at a time

Like many other people, I cannot get automatic location switching between two Ethernet networks to work properly.
I have two stored network locations; one for home and one for work. Both of these are set up as Best Available Network with both Ethernet and Wireless.
Under Tools - Location Switching, both networks are listed, and "Include Ethernet connections in automatic switching and prompt me to save Ethernet ports" is checked. However, in the details column, the current location has 1 saved port(s), and the other has 0 saved ports. The saved port is always the one most recently connected.
If I go to Edit Saved Ports, only one location is listed, with the correct IP address and MAC address for the router. If I connect at the other location, only that location is listed, again with the correct IP address and MAC address.
The router IP addresses are different (work is 192.168.0.1, and home is 192.168.1.254), and obviously the MAC addresses are different, so it should be possible for Access Connections to distinguish them. Unfortunately the only "editing" that is possible is to delete the saved port. I would be happy to add a saved port manually, but that is not an option. In addtion, despite the "...prompt me to save Ethernet ports" being checked, I have never received a prompt. Even if I delete the saved port, it resaves automatically next time without any prompt.
I have also tried setting up both locations as Ethernet only, but have exactly the same problem.
My T520 was supplied with Access Connections 5.85 preinstalled. I tried upgrading to 5.97 in the hope that it had been fixed in the meantime. Unfortunately it has not.
Access Connections is still marginally useful to me for automatic switching between Wireless and Ethernet, and for a simple manual switch of settings such as default printer, home page, and file sharing. However, it would be very useful for the home and work locations to be autodetected and switched.
From the number of unresolved questions on this board on the same topic, it appears that this is a long standing deficiency with Access Connections. Is there any chance of this being fixed?

I found from another bulletin board that ethernet location switching seemed to work OK with Access Connections 3.82, but stopped working with releases after that, and from my experience still does not work with 5.97
http://www.thinkpads.com/forum/viewtopic.php?f=18&t=38514
Two questions:
1. Does anyone know if Access Connections 3.82 works with Windows 7?
2. If so, where could I get a copy? The oldest version on the Lenovo website appears to be 5.50
I will refrain from commenting on the necessity of going back to such an old version to recover basic functionality for this utility......

How can i delay the present of direct connected route?

Hi, I got 2 3550SMI switch interconnecting by Etherchannel. Each 3550 has an uplink to its upstream router (R1-SW1=SW2-R2). R1 and R2 connects to the remote site routers (say R3 and R4).
With EIGRP redistribute connected, R1 update the direct connected network via WAN link A to R3 where R2 does the same thing updating R4 via WAN link B.
The failover is fine after SW2 powered off. However, problem occured when I powered up SW2. During the bootup of SW2, there was carrier signal which brought up the ethernet port of R2 and the direct connected route presented in R2 then updating R4. Some of the traffic had started to come over from R4 via WAN link B to R2 while SW2 is still booting. (or Etherchannel was not yet ready). As a result, workstation connecting to SW1 cannot be reached for those traffic came from R4->R3->SW2.
I have tried to use "carrier-delay 60"on the ethernet port of R2. It seems solve the problem since the direct connected route delay 60sec. Within that 60 sec, no update via EIGRP from R2 to R4 so that all traffic still went through R3->R1. After that 60 sec, SW2 had already bootup and the etherchannel was also ready.
However, i can only do it with C3725 router. I've tried 1750, 25xx, 26xx and 3640-12.3T but the behavior was not expected (route still present immediately after carrier signal detected).
My questions are:
Is that command valid on Eth or FE interface?
Is there any different using that command with diff. router series, eg. ISR (18xx,28xx,38xx)?
Is there any condition that I could make it work? (at least 3725 worked)
Is there any other way to delay the present of that direct connected route?
Thanks.

Hello,
instead of the 'carrier-delay' command, you could try to change the EIGRP hello and hold-time intervals (which default to 5 and 15 seconds respectively on broadcast media such as Ethernet), in order to delay EIGRP convergence. So, on your Ethernet interfaces when you use the interface commands:
ip hello-time eigrp x 60
ip hold-time eigrp x 180
the redistributed routes will show up only after 60 seconds, which effectively does the same as the 'carrier-delay'...
Can you try that and see if that works for you ?
Regards,
GP

Link b/w router and switch

I am useing 2600 series router and trying to link it with a 2950 switch,
2950 switch is attached with a internet connection & layer 3 switches, 2600 series router is connecting with 2950 at the client permises, what will be the port configuration at both 2950 & 2600 series devices,
currently i configure sw mod trunk at 2950,
and IP at the fastethernet port of 2600 series router.
But when ever i try to telnet the router it cannot telnet

What VLAN are the devices from which you wish to telnet to the router ?
You need to configure the router as follows:
interface fastethernet0/1.10
encapsulation dot1q
ip address
Where VLAN is the VLAN you want to get to the router from ...
Pls do remember to rate posts.
Paresh

Does Airport Express support multiple ethernet connections via a switch?

If I use the following configuration, with the Airport Express extending my network, will it handle multiple devices connected via a switch?
Modem---Airport Extreme- - -802.11n- - -Airport Express---Switch---multiple devices (eg. network printer and iMac).
Or do I need to use a second Airport Extreme instead?

It works for me—even when the AirPort Express device is configured to extend the wireless network created by the AirPort Extreme router.

Using a router or switch with Airport Extreme

I currently have an Airport Extreme 5th generation working great for my home network! My ISP Modem (on ground floor "Level-B" of 3 story house including basement) attaches to the Airport Extreme via an ethernet cable into the WAN port. Then each of the 3 LAN ports is in use:
#1 going to my "main Mac" - MBP-13" just a few feet from the Airport Extreme in my lower level basement office (Level-A)
#2 going upstairs to a non-WiFi eMac (Feb 2005) - that's on Level-C
#3 going to my Canon MP640 printer/scanner so that I can use it for scanning (it is attached via USB to the Airport Extreme but that does not permit scanning) This is located next to my MBP on Level-A
OK but now I want to try to get my 1997 LaserWriter 12/640 PS (works great!) (and I have 2 expensive toner cartridges left!) set-up and I have some instructions on how to do this. It will likely necessitate me having my Mac Pro G4-733 running OS 9.2.2 and the LW 12/640 both connected to my network via ethernet cables. That's 5 connections and I only have 3 ports going out.
But I do own a D-Link DIR-635 router and also an 8 port Peabird 8 por 10/100 Switch. Can I use either of these to do the setup?
OR - can I simply unplug the MP640 printer and the eMac for an hour or so that it will take to configure (if I can) the LW 12/640?
OK but then if I do configure it, I won't need the G4-733 Power PC any longer, but I will want the LW 12/640 as part of my network so will at least need a 4th ethernet port at that time. Do I then need to attach the router (or switch) and then connect the LW12/640 (and something else as the router or switch will use up one of the 3 Airport Extreme ethernet LAN ports…)
Thanks for any comments on how to proceed here.
Best regards,
Steve Schulte
Monday 14 January 2013

Still have not found time to try to connect the Apple LaserWriter 12/640 but it is on my list-- have gotten that list down to just a few items--- so making progress!
Now how to get my Apple Stock…………
Best regards,
Steve Schulte
Thursday 24 January 2013

Airport express connected to a switch?

I have a Airport Extreme and a Airport express which I havent used yet. I want to connect my QNAP nas and two mac pro desktops to eachother and the internet. What is the best way to do this?
I've currently networked the two macs together with a dlink dgl-4500 router which isnt connected to the net (ie wireless is off) and then just use the wireless cards inside to get outside the network. But I've just bought this NAS, so I have to make changes. I connnected the qnap to the router and I do get a IP and the macs can see it/share etc.
I have this Airport Express and a simple dlnk dgs-2205 5 port switch lying around. Can I connect the airport express to the swtich and share the connection via the switches ethernet ports? I guess I could just connect the airport to the QNAP but then all of my traffic is going over the wireless network and it will be a lot slower than a gigabit switch.
Thoughts?

I think I have it on the right setting - what do I select in the settings?!
To activate ProxySTA, you must set up the Express to join a wireless network and then enable the Allow Ethernet Clients setting; both settings are located in the Wireless tab of AirPort Utility.
It said it was going to take an hour to transfer a 250meg file, so thats definitely still going over wifi.
It still going over wireless is correct. Remember your Mac Pros are connecting to the network over a wireless connection. So, for example, when you send a file from one Mac Pro to the QNAP, that file must first travel to the AEBSn (by wireless), then to the AXn (by wireless), before it makes it to the QNAP by wire.
The other option, which theoretically, should improve the data transfer rate, would be to configure both base stations into an extended network. In this type of network, the AXn would be an extension of the AEBSn's wireless network and its Ethernet port would still be enabled for the Ethernet switch.

%CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet0/0 (not full duplex) between Router and switch

On Router
rAWKRdae01 uptime is 1 day, 23 hours, 47 minutes
System returned to ROM by power-on
System restarted at 06:13:17 GMT Wed Aug 13 2014
System image file is "flash:c2800nm-advipservicesk9-mz.124-15.T9.bin"
interface FastEthernet0/0
no ip address
duplex auto
speed auto
end
Logs
================================
034146: Aug 15 05:55:40.231 UTC: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet0/0 (not full duplex), with sALKRdae01.baxter.com GigabitEthernet1/1/1 (full duplex).
034147: Aug 15 05:56:40.228 UTC: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet0/0 (not full duplex), with sALKRdae01.baxter.com GigabitEthernet1/1/1 (full duplex).
034148: Aug 15 05:57:04.420 UTC: %SEC-6-IPACCESSLOGP: list SecureInternet denied udp 192.230.123.37(53) -> 119.201.190.90(44014), 1 packet
034149: Aug 15 05:57:40.229 UTC: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet0/0 (not full duplex), with sALKRdae01.baxter.com GigabitEthernet1/1/1 (full duplex).
034150: Aug 15 05:58:40.230 UTC: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet0/0 (not full duplex), with sALKRdae01.baxter.com GigabitEthernet1/1/1 (full duplex).
034151: Aug 15 05:59:40.227 UTC: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet0/0 (not full duplex), with sALKRdae01.baxter.com GigabitEthernet1/1/1 (full duplex).
034152: Aug 15 06:00:05.707 UTC: %SEC-6-IPACCESSLOGP: list SecureInternet denied tcp 60.169.77.13(6000) -> 119.201.190.90(8088), 1 packet
034153: Aug 15 06:00:27.476 UTC: %SEC-6-IPACCESSLOGP: list SecureInternet denied tcp 109.120.169.206(80) -> 112.217.135.50(11), 1 packet
034154: Aug 15 06:00:40.224 UTC: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet0/0 (not full duplex), with sALKRdae01.baxter.com GigabitEthernet1/1/1 (full duplex).
034155: Aug 15 06:01:40.225 UTC: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on FastEthernet0/0 (not full duplex), with sALKRdae01.baxter.com GigabitEthernet1/1/1 (full duplex).
================================
On Switch
interface GigabitEthernet1/1/1
description connection to rAWKRdae01
switchport trunk native vlan 100
switchport trunk allowed vlan 100
switchport mode trunk
load-interval 30
speed 100
duplex full
service-policy output 3850_QUEUE_2P6Q3T
end
Log:
=================================
000440: Aug 15 05:44:59 GMT: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on GigabitEthernet1/1/1 (not half duplex), with rAWKRdae01.baxter.com FastEthernet0/0 (half duplex).
000441: Aug 15 05:45:59 GMT: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on GigabitEthernet1/1/1 (not half duplex), with rAWKRdae01.baxter.com FastEthernet0/0 (half duplex).
000442: Aug 15 05:46:59 GMT: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on GigabitEthernet1/1/1 (not half duplex), with rAWKRdae01.baxter.com FastEthernet0/0 (half duplex).
000443: Aug 15 05:47:59 GMT: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on GigabitEthernet1/1/1 (not half duplex), with rAWKRdae01.baxter.com FastEthernet0/0 (half duplex).
000444: Aug 15 05:48:22 GMT: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.5.35.33
000445: Aug 15 05:48:59 GMT: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on GigabitEthernet1/1/1 (not half duplex), with rAWKRdae01.baxter.com FastEthernet0/0 (half duplex).
000446: Aug 15 05:49:59 GMT: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on GigabitEthernet1/1/1 (not half duplex), with rAWKRdae01.baxter.com FastEthernet0/0 (half duplex).
000447: Aug 15 05:50:59 GMT: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on GigabitEthernet1/1/1 (not half duplex), with rAWKRdae01.baxter.com FastEthernet0/0 (half duplex).
==================================
I did try to change duplex setting on fa0/0 of router to Full, but the interface went down and I lost the connectivity to the switch.

> I did try to change duplex setting on fa0/0 of router to Full, but the interface went down and I lost the connectivity to the switch.
Did you wait some time to let the divices reestablish the connection again?
I would configure the Switchport to auto/auto in that case. Autonegotiation works (most of the times ;-) ).

Using Time Capsule with a router or switch

I have a Time Capsule and I need to extend my network. I am wondering what the best way to do it is. Here's the situation. I am currently using the Time Capsule for both wired ethernet and wireless connections. But I need to expand the number of wired connections. From reading posts I gather that I can indeed connect an ethernet switch downstream of the Time Capsule to increase the number of available nodes in the network. My question is would there be any strong advantage to putting a router between the DSL Modem and the Time Capsule? Obviously, that would mean reconfiguring the Time Capsule to bridge mode which is not that hard.
The main advantage I can think of of putting a router upstream of the Time Capsule is the security of a build in firewall in the router. But using a Switch down stream is physically, with my set up, easier and cheaper as I have a spare switch. Is there a reason to choose one course over the other?
Thanks,
J. Latta

Operationally it won't make any difference. The operation of NAT on the Time Capsule offers an effective firewall.

How to identify which server are connected in a switch?

Hi,
Many servers are connected to a switch?
How to identify what server are connected to which port remotely?
Thanks!
Samuel

Hi Sam,
just issue the command show ip arp , it will display some thing like this for know the MAC address & the VLAN number.
Protocol Address Age (min) Hardware Addr Type Interface
Internet 10.2.1.18 9 0800.6913.710e ARPA Vlan2
to know on which port it is connected, just issue the command as mentioned below
sh mac-address-table address 0800.6913.710e
Mac Address Table
Vlan Mac Address Type Ports
2 0800.6913.710e DYNAMIC Po1
hpe this will help you to identify your servers.
rate this post.

Server with 3 NICs wants to connect to 2 switches

I have two 6509 on the distro layer ( distro 1 and distro2 ), running layer 2 only. They are connected to two 6509s on the core layer. One of the server admins has a 3 port NIC on his server bundled together to increase bandwidth. He wants to connect it to 2 ports on the distro1 and 1 port on the other distro2 switch. All 3 distro ports he is connecting to are in the same VLAN and the VLAN is allowed on all port channel connections between distro and core switches.
Will this even work since he is connected on different switches?

Those stating that a NIC channel is not allowed to two individual switches should know that a NIC teaming is usually not a link aggregation (port-channel). If it is an active-standby-standby NIC team then all you need is to make sure all 3 ports belong to the same VLAN. Traffic will leave the server on the active link and the switches will learn that the MAC address is on this port. No Port-channel config is necessary on the switches.
Load-balanced NIC teaming usually requires Port-channel if the same src MAC address can appear on multiple ports. In this case multichassis link aggregation is mandatory and you cannot connect to individual switches.

Using "route-target import" only connected routes?

When using the route-target import, the only routes imported are ones directly connected on one of the other PE routers. How does one get the advertised routes and the connected routes imported?
PE1 -- PE2
|
|
PE3
Customer's remote site attaches to PE1 which peers to PE2. PE2 connects to Customer HQ.
Another VRF (100:110) provides a centralized service that will be used by several different customers. Some of the subnets for this shared service are directly connected to PE2 while other subnets are directly connected to PE3.
Since PE1 and PE2 were already peered, I thought all that was needed was an import statement to get the routes from the shared service vrf into the customer's vrf.
PE1:
ip vrf customer1
rd 100:105
route-target export 100:105
route-target import 100:105
route-target import 100:110
When I do a 'show ip route vrf Customer1' the only routes that appear are the ones directly connected to PE2. I then peered PE1 to PE3, creating a full mesh but no other routes appeared in the routing table.
PE1 -- PE2
\ |
\ |
\ PE3
I plan to use an export map and import map to filter the networks to the desired ones, but in this example, should not all routes be seen from the shared services VRF (100:110)?
Thanks!

Frank,
Performing the import on one PE doesn't cause that one PE to start advertising the imported prefixes to other member of the same VRF on other PEs.
If you want the prefixes from the shared services VRF to show up in the customer VRF on all PEs, you need to import RT 100:10 in VRF Customer1 on all PEs.
Hope this helps,

Which server is connected to a switch interface

Hi all,
We have a few switches in our company and we wanted to know an easy and quick way to find out which servers are connected to that switch (even if possible on which interface).
For example:
Firewall -> Switch1 interface Gig 0/1
Mail or 10.10.10.10 -> Switch2 interface Gig 0/3
I'm using at this moment the following command:
show cdp neighbors
It gives me all cisco device connected to that switch.
Is there an other command that does the same? Displaying the DNS or IP of a server that is connected to that interface of the switch.
Kind Regards

Hi,
a) there are some free tools available to track the end devices.
SolarWinds User Device Tracker might be an example (not tested personally).
b) If you want to run a CLI command, you usually need to take an opposite way: find out the device IP or MAC address and track to which switch port it's connected.
So you can list the FW ARP cache in your case.
And then to use "trace mac ip ..." switch CLI command, e.g.
See
http://www.cisco.com/en/US/customer/docs/switches/lan/catalyst3750/software/release/12.2_25_sec/command/reference/cli3.html#wp1917847
or
http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_25_sec/command/reference/cli3.pdf
for details.
HTH,
Milan

Connecting router to switch

Similar Messages

Maybe you are looking for