Converged 10gig server adapters and Cisco switches

I have little network with 4 vsphere servers connected to clustered 3750x with 4*1Gig NICs per server.
Servers are connected to central storage with two 8Gbps FC links per server. I don’t have FO switches cause central storage is equipped with 4 FO ports per controller.
I want to upgrade servers and central storage. Servers will have two converged 10gig (HP FlexFabric) and 4*1 Gig interfaces
I need to upgrade 3750x switches with new one with 10 gig interfaces.
I am looking for two new Cisco switches that can handle converged traffic from server 10gig interfaces (iSCSI, FCoE).
Nice feature will be if it is possible to connect existing FC storage to the new switches.
Kind regards,
Vice Lacmanovic

Hello, vlacmanov.
I recommend at least the Nexus 5000 to support iSCSI and FCoE over your 10GE interface. (http://cs.co/9001SoyL) Do you already have any existing Cisco Nexus on your network?
Let me know if you have additional concerns or e-mail ([email protected]) me directly. Kind regards.

Similar Messages

Remote span between Extreme and Cisco switches

Hello,
I need to configure remote span between Extreme Networks X460-24p and Cisco Cataylst 2960X switches. 2 IP phones are connected to ports 15 and 17 on Extreme switch, and should be monitored to port 1/0/47 on Cisco switch. Extreme and Cisco switches are interconnected with trunk (port 28 on Extreme with port 1/0/51 on Cisco).
I configured the following:
On Extreme switch:
configure mirror mode enhanced
enable mirroring to port 28 remote-tag 1000
configure mirroring add port 17 ingress-and-egress
configure mirroring add port 15 ingress-and-egress
On Cisco switch:
vlan 1000
name RemoteSPAN
remote-span
monitor session 1 destination interface Gi1/0/47
monitor session 1 source remote vlan 1000
But this is not working :(
Does enyone have experience with this? I really need help to make this work.
Thanks.

OK, this configuration is actually working :)

ARD and Cisco switches (multicast storm issue)?

We had Cisco bring in an engineer to look into our problem where ARD stalls/fails to push packages or pull reports (etc.). We never have a problem remotely controlling computers.
They told us "Multicast" needs to be on at every switch that has Macs connected. In one environment all Macs are on the 10.100.9.xx subnet, and Macs are at different locations. All the switches these dot-9 subnet Macs are connected to need "Multicast" turned on.
I've read numerous threads regarding how Macs drift in and out and ARD is not able to do what it's advertised to do. Has anyone run into this issue where Cisco switch configuration caused ARD to not perform properly?
I will summarize once Cisco resolves the issue. They're due in for another test or two before we can make the necessary switch adjustments.
Thanks,
Don

I have 3COM switches and they appear to be performing as your CISCOs are. I have computers drift in and out all day as well as my task server not responding to input at all. When trying to browse the LAN for computers, I don't receive any information regarding my computers, or I only get 5 out of 2100. I will talk with my Network Administrator and find out if Multicast is turned on. I have sent Apple 300 crash reports over the past 3 months, but have not received any word on a fix for ARD issues.

Windows 7 LLDP and Cisco Switches

Does Windows 7 support IEEE LLDP (not to be confused with MS LLTP). We have LLDP enabled on are Cisco Switches and want to be able to see are what ports the Windows 7 devices are connected to. Using the Cisco Show LLDP neighbors.

Hi,
I suggest you refer to the following article in MSDN blog:
Link Layer Topology Discovery Protocol Specification
http://msdn.microsoft.com/en-us/library/windows/hardware/gg463061.aspx
Thanks,
Vincent Wang
TechNet Community Support

3com and cisco switches (802.1q)vlan integration problem - broadcast storm?

Hi forum,
we are using 3com switches, the 3com switches implement open vlans, which mean if an ieee 802.1q packet is received at a port and the port is not a member of that vlan, the switch does not perform vlan filtering. if the address is previously learned, it will be forwarded correctly, but if it is not, it will be flooded to all ports within that VLAN.
my questions:
1) if another cisco switch connected with the 3com switch are placed in the same vlan, and the 3com switch received a 802.1q packet from a rogue device, it will be flooded to all the ports(including the cisco ports) within that VLANs, will it cause a broadcast storm?
2) how do i configure the cisco switch to filter off unknown tagged packet on a port? by using vlan prunning?
3) how do i blocked the broadcast from the 3com switches? using broadcast suppression?
4) is there a way on the design side to effectly counter this problem?
Kind regards,
paul

It sounds like setup of your 3com switch is not quite up to your requirements. If a port is declared as tagged, it's ok to receive tagged frames for VLAN's that were not previously known on this port. However if your policy requires that only specific VLAN's are permitted on given tagged port, then you need to add some extra command on your 3com switch. Check with documentation and possibly with your 3com support partner.
As for cisco routers, tagged ports in Cisco-speach are trunks (this might be confusing for you as 3com calls trunks what in Cisco world is known as either Etherchannel or port aggregation). By default a trunk (tagged) port allows any VLAN. If your policy requires so, you can explicitly specify which VLAN's are allowed on given trunk (tagged) port. If a frame arrives with a tag that is not on the allowed list, the frame will be discarded. So you don't need any fancy broadcast supression to block traffic from disallowed vlans coming from your 3com switch to cisco.
P.S.: Make sure that you don't mistake 'member of VLAN' with 'native VLAN'. Some parts of your message suggest that you do.

Cisco Transparent firewall and cisco switch issues.

Dears,
I have a very plain scenario
LAN cisco switch <2 vlans> ----------> cisco transparent firwall with bvi interface ------------> crypto box ---------> cisco router ------ <remote/other site>
i have vlan 61 configured on bvi interface of firewall, crypto box and also on the switch port and vlan of 61 is up up .
The issue is i can connect remotely to cisco transparent firewall but cannot ping or connect to cisco switch. ???????????
Need to know some trobuleshooting tips and basic settings that i need to verify. I simply want lan switch with 2 vlans to pass through the cisco transparent firewall and go to other site/remote site.

Well,
i have put the inspection icmp turned on for the sessions , and the version i am using is 9.1
moreover, i have put u p the ACLs for inbound and outboudn traffic, and while i ping across the firewall from the inside interface towards outside interface PC, i can see packet counts increasing on the acl , during the show access-llist command.
i have requested the client to verify his part. do let me know further tips if you have any.
[ moreover we cannot try to use packet-tracer from cli in transparent mode ]

Clients not able to connect to MS exchange server over a cisco switch

Hello,
I have a Cisco L3 switch.
I have a Exchange server and until i split the network into every thing was working ok, meaning the clients can connect to the Exchange without issues.
But after i split the network into 2 vlans, moving the exchange in one vlan and the clients in another vlan, i have complains saying that the users are not able to connect to exchange periodically.
Even users from the same subnet also cannot connect to the exchange often.
Meaning the clients can connect to the exchange and suddenly it will stop working. at the same time i can ping the exchange and that shows there is no routing issue or LAN issue.
But still clients cant connect to the exchange, when i reboot it will start working again for some time.
wondering whether it could be related to any network related issue or MTU or PMTUD issues.
The whole issue started only after we split the network into two vlans.

If you have physical access to the switch, it may save time to look at the port LEDs which give you the link status or may indicate an error condition (if red or orange). The table below describes the LED status indicators for Ethernet modules or fixed-configuration switches:
http://www.cisco.com/en/US/customer/products/hw/switches/ps700/products_tech_note09186a008015bfd6.shtml

Cisco Fax Server (Captaris) and Cisco Fax Relay

Hello all!
i know that Captaris Cisco Fax Server works well with T.38 Fax Relay...and what about Cisco Fax Relay? Is it compatible?
thanks,
met

Hi!
Please check the following link, specially Pg. 9 "ISDN/MGCP Cisco Fax Relay Mode" . You'll see the deployment models of the Cisco Fax server: IP T.38 Fax Relay, ISDN E1/T1 Direct Connection and ISDN/MGCP Cisco Fax Relay Mode:
*** Installation Guide Supplement for Cisco Fax Server ***
www.cisco.com/en/US/docs/voice_ip_comm/fax_server/90/faxigsup.pdf
Hope this helps!
Regards,
Teresa.
If it helps, please rate! :)

Cisco Switches and HP Interoperability with Spanning-Tree (RSTP)

Hello All.
I read a lot of information from this forum about Spaning-Tree interoperability between HP Switches and Cisco Switches.
Rather than having questions I would like to post that I manage to configure successfully HP and Cisco using RSTP (802.1w).
SWPADRAO]display stp root
MSTID Root Bridge ID        ExtPathCost IntPathCost Root Port
  0    32768.cc3e-5f3a-2939 0           0
[SWPADRAO]display stp brief
MSTID      Port                         Role STP State     Protection
  0        GigabitEthernet1/0/47        DESI FORWARDING    NONE
  0        GigabitEthernet1/0/48        DESI FORWARDING    NONE
[SWPADRAO]display stp instance 0
-------[CIST Global Info][Mode RSTP]-------
CIST Bridge         :32768.cc3e-5f3a-2939
Bridge Times        :Hello 2s MaxAge 20s FwDly 15s MaxHop 20
CIST Root/ERPC      :32768.cc3e-5f3a-2939 / 0
CIST RegRoot/IRPC   :32768.cc3e-5f3a-2939 / 0
CIST RootPortId     :0.0
BPDU-Protection     :enabled
Bridge Config-
Digest-Snooping     :disabled
TC or TCN received :17
Time since last TC :0 days 0h:1m:52s
SWNHAM17#show spanning-tree VLAN0001
Spanning tree enabled protocol rstp
Root ID    Priority    32768
            Address     cc3e.5f3a.2939
            Cost        4
            Port        26 (GigabitEthernet0/2)
            Hello Time   2 sec Max Age 20 sec Forward Delay 15 sec  Bridge ID Priority    61441 (priority 61440 sys-id-ext 1)
            Address     001b.54db.7200
            Hello Time   2 sec Max Age 20 sec Forward Delay 15 sec
            Aging Time 300 Interface        Role Sts Cost      Prio.Nbr Type
Gi0/1            Altn BLK 4         128.25   P2p
Gi0/2            Root FWD 4         128.26   P2p
SWNHAM18#show spanning-tree VLAN0001
Spanning tree enabled protocol rstp
Root ID    Priority    32768
            Address     cc3e.5f3a.2939
            Cost        4
            Port        26 (GigabitEthernet0/2)
            Hello Time   2 sec Max Age 20 sec Forward Delay 15 sec  Bridge ID Priority    61441 (priority 61440 sys-id-ext 1)
            Address     001b.0cbc.4300
            Hello Time   2 sec Max Age 20 sec Forward Delay 15 sec
            Aging Time 300 Interface        Role Sts Cost      Prio.Nbr Type
Gi0/1            Desg FWD 4         128.25   P2p
Gi0/2            Root FWD 4         128.26   P2p

Hello, David.
Your command doesn't work because it's made only for tha ports that has command "spanning-tree portfast" in them. Try change spanning tree mode at the HP switch to MSTP if this is possible.

RedHat Enterprise Cluster and Cisco IGMP Snooping/Querying

Has anyone else had any experience with IGMP Snooping/Querying and RedHat Enterprise Cluster?
We have been experiencing a large amount of problems with this functionality.
We are running IGMP Querying in our environment and we recently set up a second querier.
Here's the steps we took
Existing querier: 192.168.3.248
Everything was running fine.
Added a new querier on a different switch: 192.168.3.247
At this point, all of our RedHat Enterprise Clusters fenced themselves and needed to be restarted in order to restore
access. In order to restart the RedHat Enterprise Clusters, the physical servers must be rebooted.
Are there any known issues with RedHat Enterprise Clustering and Cisco Switches (3750
series)? I would expect the querier change to be seamless, but it does not seem that this
is the case.

Hi,
In our organizaiton we have Red Hat Cluster with 2 cisco switch (Model: cisco WS-C2960S-24TD-L, Version: "flash:/ c2960s-universalk9-mz.122-55.SE3/c2960s-universalk9-mz.122-55.SE3.bin").
- We are using HP Chassis c7000 and Server is on the chassis. There are 2 service IC & Med. Each server has one service primary and other secondary running.
- The two cluster switches are connected each other with Ether channer trunk (1+1) link. Also these 2 switches are connected to our Mgmt switch for Server Admin access to HP Chassis via OA port. The Red Hat system has cluster lan (pri & sec) & OA lan (01 & 02 of HP chassis) connected to Cluster switches. The Mgmt VLAN is 501 - 172.31.10.0/24.
Problem:
When the CluserSW01 goes down the cluser shifted to CluseterSW02 with Cluser_Secondary_LAN and OA2. But when the ClusterSW01 switch comes again than the communication breaks and cluster don come up.
I was thinking this is either STP or IGMP, well sure though. As these are production systems hence we also couldn't do much more test as well.
If you have face any such issue or have experience with it or know what the problem might be... kindly share with me.
Thanks,
Adnan

Physical port security on Cisco switching

We have a security problem I would like to resolve. Like most sites our wired network has live ports that periodically, non corporate PCs and laptops connect up to without our knowledge. In our network we do not filter for valid MAC addresses although Ive learned this is a poor approach to security as MAC can be changed in about 10 seconds.
I would like a solution that would validate corporate systems and let them through the Cisco layer 3 switching and block out all other devices which attempt connection. We do not currently have IDS or IPS and are not likely to in short term.
Is there a hardware or software or combination solution out there that works well for this ?
Thank you

Steve
2 solutions spring to mind
1) 802.1x authentication. Microsoft XP/Vista has built in 802.1x supplicant and Cisco switches support Network EAP used to pass the 802.1x messages. What you also need is an authentication server such as Cisco Secure ACS server although Microsoft IAS server also supports 802.1x.
Basically before a client is allowed access to the network they have to authenticate to the network with valid credentials otherwise the port is shutdown.
2) NAC - Network Admission Control. This goes one step further than 1) whereby the client is also checked to see if it conforms to company policy eg. does it have the right virus checker on it etc.. and if it doesn't the client can be quarantined.
A search on Cisco's website for both NAC and 802.1x will provide a lot of useful links.
Jon

"Genuine" SFP/GBIC's in Cisco switches

I've heard some rumbling that not all GBIC/SFP products will work in Cisco switches because they are not "genuine Cisco" and Cisco switches have some way of checking to make sure they are. I can't seem to get any search hits confirming this. Can anyone point me to a document that references this?
Searching for vendors of "genuine Cisco" SFP/GBIC products we've noticed amazing pricing disparity! Can anyone comment on their experiences in the marketplace.
Thanks for your help - Steve

I've heard some rumbling that not all GBIC/SFP products will work in Cisco switches because they are not "genuine Cisco" and Cisco switches have some way of checking to make sure they are.
Starting with the 2960, 3560 & 3750, Cisco switches will interrogate the SFPs by computing the IDProm value. If the IDProm value of the SFP is incorrect, the port goes into error-disable.
I can't seem to get any search hits confirming this. Can anyone point me to a document that references this?
I won't post the command here but the command can be found in this forum. I have seen one guy approach the manufacturer of the SFP+ and he asked the manufacturer to reflash the SFP+ so it'll show up as Cisco. And it worked.

3COM and cisco link Fiber

Hi
I am using a 3COM and cisco switch. I have a GBIC GLC-SX-MM on one side and a 3com SFP Transeciver on the other side)
My machines on each side canot ping.
On the same side its ok.
I htought there was little or no config in cases like this?
I have never worked with 3com nor fibre. any help wouldbe great!
Sinead

GBIC GLC-SX-MM on CISCO
3com has SFP Transeciver 1000base - SX

How to view the login log in window NPS after login cisco switch and without SQL server database

how to view the login log in window NPS after login cisco switch and without SQL server database
in summary
there is only log with event id 4400
A LDAP connection with domain controller XCPAWS20.cyberport.noc for domain NOC2 is established.

Hi adil,
For your issue, you can create a custom security token service (STS) and then set up a trust relationship between a SharePoint 2010 farm and the custom STS.
For more information, you can refer to the articles:
http://forums.asp.net/t/1335229.aspx?Sharing+Authentication+Ticket+Between+ASP+NET+and+Sharepoint
https://msdn.microsoft.com/en-us/library/office/ff955607(v=office.14).aspx
http://www.paraesthesia.com/archive/2011/02/01/working-with-windows-identity-foundation-in-asp-net-mvc.aspx/
Best Regards,
Eric
Eric Tao
TechNet Community Support

Can I use DHCP snooping and IOS DHCP server on the same switch stack

Hello,
I am shortly going to be deploying a Cisco CallManager solution for a customer whose network comprises stacks of Catalyst 3850 switches.
There is no separate core/server farm switch so the CallManager servers, voice gateways and IP phones will all plug into the same stack and be in the same VLAN (not my choice!).
For security we want to enable DHCP snooping and were planning on using the IOS DHCP server on the Catalyst switch stack.
Will this work? - when I enable DHCP snooping in networks with separate access layer switches I set the uplinks to the core as trusted links.
I am not sure whether DHCP snooping will work in this case. Do I need to set the VLAN interface on the switch as trusted, is this even possible?
Unfortunately I do not have access to a layer 3 switch to test this at the moment.
Thanks

Nope. That's the issue.
They'll sync on a third device acting as a hotspot, but the device sending a signal is not "on" the network it creates so the airport is all by itself on that network. At least that is what it looks like to me. Anyone have another take on it? Seems pretty silly that an iPad can put out a wifi signal, an Airport Express can receive a wifi signal, and yet there is no simple way to get them to communicate under this particular condition.

Converged 10gig server adapters and Cisco switches

Similar Messages

Maybe you are looking for