HWIC-4ESW capable of DSCP marking?

Hello. Does anyone know if the HWIC-4ESW card is capable of classifying traffic and marking DSCP values on those packets?
Thanks,
Mike

Hello Mike,
this is from the relevant Q&A: QoS to DSCP mapping is supported:
Q. What features are supported on the Cisco EtherSwitch HWICs?
A. The following features are supported on the Cisco EtherSwitch HWICs:
Up to 15 individual VLANs per 4- or 9-port Cisco EtherSwitch HWIC
IEEE 802.1Q tagged and untagged VLANs
Virtual Trunking Protocol (VTP) support for client, server, and transparent modes
Layer 2 MAC-related feature support:
Secure MAC addresses
Static and Dynamic MAC addressing
2000 MAC addresses
Port application support
SPAN port monitoring
Per-port storm control for broadcasts, unicasts, and multicasts
QoS feature support
IEEE 802.1p class-of-service (CoS) priority for 802.1Q tagged frame
Port-based priority for native frames
Port priority to overwrite the IEEE 802.1p priority
Strict priority and Weighted Round Robin CoS policies
CoS-to-differentiated services code point (DSCP) mapping
Internet Group Management Protocol (IGMP) snooping
Network Time Protocol (NTP) support
IEEE 802.1D spanning tree and Spanning Tree Protocol PortFast
Secure port filtering (200 secure MAC addresses)
Simple Network Management Protocol (SNMP) support
Telnet client and server support
Cisco Discovery Protocol Versions 1 and 2 support
Fallback bridging
802.1x authentication
IEEE 802.3af-compliant PoE
Q. What features are not supported on the 4- and 9-port Cisco EtherSwitch HWICs?
A. The following features are not supported on the Cisco EtherSwitch HWICs:
Layer 3 switching (this is done through the router)
Dynamic VLAN for access port
VTP pruning
Network port
Routed port
Per-port enabling and disabling of unknown multicast and unicast packets
Cisco Group Management Protocol (GMP) client
Rate limiting
Cisco Cluster Management Suite (CMS) support
HTH,
GP

Similar Messages

  • Re: Difference between HWIC-1FE and HWIC-4ESW

    Hi
    I am trying to find out the main difference between the HWIC-1FE and HWIC-4ESW cards.
    Also I have a cisco 2811 router that is configured with one Fastethernet connected to DSL and the other port connects to mt LAN and METRO (using subinterfaces), is this the best practice?

    HWIC-4ESW is the 4-port single-wide 10/100BaseT Ethernet switch HWIC. The 4ESW is a L2 switch and is cost effective.
    HWIC-1FE is 1-port Fast Ethernet HWIC. The HWIC-1FE is a true L3 interface and is expensive. It has feature parity with an onboard FE interface except for OAM support, which is delayed.
    HWIC-4ESW has the capability to setup VLAN but they are not the routed ports Whereas, HWIC-1FE has the same characteristics as Onboard FE ports.

  • I am trying to get NAT working on a Cisco 2801 with HWIC-4ESW.

    I have a 2801 that had a failed Fe0/1 port.  The Fe0/1 port was used to give sub-interface Fe0/0.200 access to internet.  We installed a HWIC-4ESW into the 2801.  I have successfully moved the sub-interfaces ( 0/0.1 , 0/0.100 , and 0/0.200 ) from the Fe0/0 to the HWIC-4ESW.  I have reconfigured the Fe0/0 to connect to my ISP.  However, I cannot get traffic from vlan200 to pass to the internet over Fe0/0.   I have a guest wireless network set for vlan 200.  Clients get an IP address in the appropriate range (192.168.200.0), but they cannot get to the internet.  Below I have included the results of "sh ip int brief" and some of the "sh run".  I think that it is something simple, but I canot get it working.  
    Help would be appreciated.
    Interface IP-Address OK? Method Status Protocol
    FastEthernet0/0 ***.**.244.194 YES manual up up
    FastEthernet0/0.200 unassigned YES unset deleted down
    Service-Engine0/0 192.168.100.254 YES TFTP up up
    FastEthernet0/1 unassigned YES NVRAM administratively down down
    FastEthernet0/1/0 unassigned YES unset up up
    FastEthernet0/1/1 unassigned YES unset up up
    FastEthernet0/1/2 unassigned YES unset administratively down down
    FastEthernet0/1/3 unassigned YES unset administratively down down
    Serial0/3/0:0 unassigned YES unset down down
    Serial0/3/0:1 unassigned YES unset down down
    Serial0/3/0:2 unassigned YES unset down down
    Serial0/3/0:3 unassigned YES unset down down
    Serial0/3/0:4 unassigned YES unset down down
    Serial0/3/0:5 unassigned YES unset down down
    Serial0/3/0:6 unassigned YES unset down down
    Serial0/3/0:7 unassigned YES unset down down
    Serial0/3/0:8 unassigned YES unset down down
    Serial0/3/0:9 unassigned YES unset down down
    Serial0/3/0:10 unassigned YES unset down down
    Serial0/3/0:11 unassigned YES unset down down
    Serial0/3/0:12 unassigned YES unset down down
    Serial0/3/0:13 unassigned YES unset down down
    Serial0/3/0:14 unassigned YES unset down down
    Serial0/3/0:15 unassigned YES unset down down
    Serial0/3/0:23 unassigned YES NVRAM up up
    Vlan1 192.168.1.254 YES NVRAM up up
    Vlan100 192.168.100.254 YES NVRAM up up
    Vlan200 192.168.200.254 YES NVRAM up up
    NVI0 ***.12.244.194 YES unset administratively down down
    ip source-route
    no ip dhcp use vrf connected
    ip dhcp excluded-address 192.168.100.1 192.168.100.99
    ip dhcp excluded-address 192.168.100.200 192.168.100.254
    ip dhcp excluded-address 192.168.200.1 192.168.200.99
    ip dhcp excluded-address 192.168.200.200 192.168.200.254
    ip dhcp pool Phones
    network 192.168.100.0 255.255.255.0
    option 150 ip 192.168.100.254
    default-router 192.168.100.254
    dns-server 192.168.1.8
    ip dhcp pool guestwireless
    network 192.168.200.0 255.255.255.0
    default-router 192.168.200.254
    dns-server 8.8.8.8 8.8.4.4
    ip cef
    no ip domain lookup
    ip domain name pwa.com
    ip name-server 8.8.8.8
    ip name-server 8.8.4.4
    controller T1 0/3/0
    pri-group timeslots 1-16,24
    controller T1 0/3/1
    shutdown
    gw-accounting aaa
    gw-accounting syslog
    interface FastEthernet0/0
    description Guestwireless route to internet
    ip address ***.**.244.194 255.255.255.240
    ip nat outside
    ip virtual-reassembly
    duplex auto
    speed auto
    interface Service-Engine0/0
    ip unnumbered Vlan100
    service-module ip address 192.168.100.200 255.255.255.0
    service-module ip default-gateway 192.168.100.254
    no cdp enable
    interface FastEthernet0/1
    no ip address
    shutdown
    duplex auto
    speed auto
    interface FastEthernet0/1/0
    description trunk to switch
    switchport mode trunk
    duplex full
    speed 100
    interface FastEthernet0/1/1
    description voice
    switchport access vlan 100
    interface FastEthernet0/1/2
    shutdown
    interface FastEthernet0/1/3
    shutdown
    interface Serial0/3/0:23
    no ip address
    encapsulation hdlc
    isdn switch-type primary-ni
    isdn incoming-voice voice
    isdn supp-service name calling
    no cdp enable
    interface Vlan1
    description Data
    ip address 192.168.1.254 255.255.255.0
    interface Vlan100
    description voice vlan
    ip address 192.168.100.254 255.255.255.0
    h323-gateway voip bind srcaddr 192.168.100.254
    interface Vlan200
    description Guestwireless Data
    ip address 192.168.200.254 255.255.255.0
    ip nat inside
    ip virtual-reassembly
    ip forward-protocol nd
    ip http server
    ip http authentication local
    ip http secure-server
    ip http timeout-policy idle 60 life 86400 requests 10000
    ip http path flash:
    ip nat inside source list 10 interface FastEthernet0/0 overload
    ip route 0.0.0.0 0.0.0.0 192.168.1.1
    ip route 192.168.100.200 255.255.255.255 Service-Engine0/0
    ip route 192.168.200.0 255.255.255.0 FastEthernet0/0
    ip radius source-interface Vlan100
    access-list 10 permit 192.168.200.0 0.0.0.255

    So, I just built this in the lab, and it seemed to work ok. I attached a sparse config, but it does let my host on the GuestWireless get the internet via NAT.
    R2#sh ip nat translations vrf GuestWireless
    Pro Inside global      Inside local       Outside local      Outside global
    icmp 17.12.244.194:5   192.168.200.1:5    1.1.1.1:5          1.1.1.1:5
    R2#sh ip route vrf GuestWireless
    Routing Table: GuestWireless
    Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
           D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
           N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
           E1 - OSPF external type 1, E2 - OSPF external type 2
           i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
           ia - IS-IS inter area, * - candidate default, U - per-user static route
           o - ODR, P - periodic downloaded static route
    Gateway of last resort is 17.12.244.195 to network 0.0.0.0
         17.0.0.0/28 is subnetted, 1 subnets
    C       17.12.244.192 is directly connected, FastEthernet0/0
    C    192.168.200.0/24 is directly connected, Vlan200
    S*   0.0.0.0/0 [1/0] via 17.12.244.195

  • HWIC-4ESW having same MAC address with fa0/0 from CISCO2811 router.

    Hi Expert, I Have a situation where a 2811 is configured with 2 VLANs from HWIC-4ESW module, different ports configured, however the VLAN interfaces have the same mac-address with fa0/0 which causes ARP poisoning problem. It that anyway to solve this problem?

    Hi Lee,
    My understanding is, this is expected behavior and is due to the hardware limitation of the HWIC-4ESW Module. And I think the HWIC-4ESW Module (at least from my lab testing) always takes the MAC Address of the first on board LAN Interface.
    Also, I am able to change the MAC Address of the first on board LAN Interface (Ex.Gig0/0) but I cannot change the MAC Address of the VLAN SVI.
    I hope it helps.
    Regards,
    Arul
    ** Please rate all helpful posts **

  • How to enable routing between HWIC-4ESW and Onboard FE on cisco 1841 router..?

    Hello All,
    I have a cisco 1841 router, recently i have purchased HWIC-4ESW slot for my router. The module is working fine i could able to see additional FE ports(fe0/0/0,fe0/0/1...).Now problem comes in routing i.e. these HWIC-4ESW ports and Onboard FEs are not communicating.If any bode knows the solution kindly let me know the configuration details..
    Thanks,Sazz

    Hi,
    Look at the configs below.
    How can I use IP Routing so communication is possible across all subnets?
    Router>en
    Router#config t
    Router(config)#int fa0/0
    Router(config-if)#description ***INTERNET***
    Router(config-if)#ip address xxx.xxx.xxx.xxx 255.255.255.252
    Router(config-if)#no shut
    Router(config-if)#ip nat outside
    Router(config-if)#exit
    !On-board interface
    Router(config)#int fa0/1
    Router(config-if)#description ***LAN***
    Router(config-if)#ip address 10.0.xxx.xxx 255.255.255.0
    Router(config-if)#no shut
    Router(config-if)#ip nat inside
    Router(config-if)#exit
    Router#vlan database
    % Warning: It is recommended to configure VLAN from config mode,
      as VLAN database mode is being deprecated. Please consult user
      documentation for configuring VTP/VLAN in config mode.
    Router(vlan)#vlan 10
    VLAN 10 modified:
    Router(vlan)#vlan 20
    VLAN 20 added:
        Name: VLAN0020
    Router(vlan)#exit
    APPLY completed.
    Exiting....
    Router#config t
    Router(config)#int vlan 10
    Router(config-if)#ip address 172.16.xxx.xxx 255.255.255.0
    Router(config-if)#ip nat inside
    Router(config-if)#no shut
    Router(config-if)#exit
    Router(config)#int vlan 20
    Router(config-if)#ip address 192.168.xxx.xxx 255.255.255.0
    Router(config-if)#ip nat inside
    Router(config-if)#no shut
    Router(config-if)#exit
    !HwIC-4ESW interface
    Router(config)#int fa0/0/0
    Router(config-if)#switchport mode access
    Router(config-if)#switchport access vlan 10
    Router(config-if)#exit
    !HWIC-4ESW Interface
    Router(config)#int fa0/0/1
    Router(config-if)#switchport mode access
    Router(config-if)#switchport access vlan 20
    Router(config-if)#exit
    Router(config)#exit
    Router#copy run start
    Destination filename [startup-config]?
    Building configuration...
    [OK]
    Router#config t
    Router(config)#ip name-server xxx.xxx.xxx.xxx
    Router(config)#ip name-server xxx.xxx.xxx.xxx
    Router(config)#exit
    Regards,

  • QoS: make switch to trust PC's DSCP marking

    Hi,
    As you all know, it's possible to override 802.1p/CoS field coming from PC attached to Catalyst switch.
    This is accomplished in 2 (two) ways:
    - either by '(config-if)# mls qos trust extend cos <value>'
    - or via '(config-if)# switchport priority extend cos <value>'
    But what about to make Cisco IP Phone to trust PC's DSCP marking ? Is this possible ?
    P.S.
    Can you also explain, why there 2 (two) flavors of CLI to allow switch to trust to PC's 802.1p marking ?
    Thanks.

    Tobi,
    the PC basically send untagged frames to the switch, these will normally be send as CoS=0.
    the following link has some scenarios for you
    http://www.cisco.com/en/US/partner/products/hw/switches/ps5023/products_tech_note09186a0080883f9e.shtml#cg211
    I think you will find example 6 usefull

  • Presales: HWIC-4ESW= on 2821 to increase Ethernet port?

    Hi there,
    I was not able to receive help from Cisco partner and distributor so I'm hoping that I'll get response from here.
    We have CISCO2821-V3PN/K9 whose two Gigabit ports are already used. I need additional Ethernet port to connect the router to the Internet Leased Line.
    Below "appears to be" the right product but the module is a switch which to my understanding is meant for connecting to the inside LAN rather than to the Internet.
    HWIC-4ESW= Four port 10/100 Ethernet switch interface card
    Grateful if someone could shed some light and give me the right product (part no.) we need to buy.
    Thanks in advance.
    Archie

    Hello Archie,
    a configuration for a VLAN on your 2821 would look like this:
    interface Vlan2
    ip address 192.168.1.1 255.255.255.0
    You can assign that VLAN, 2 in this case, to one of the switchports, just like you would assign it to a ´normal´, or better, external switch:
    interface FastEthernte0/1/0
    switchport access vlan 2
    Here is a link that provides information regarding VLANs in conjunction with the HWIC:
    How to Configure EtherSwitch HWICs
    http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00804554c7.html#wp1027188
    For more general information regarding VLANs, chekc this document:
    Creating and Maintaining VLANs
    http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration_guide_chapter09186a00800c9fd8.html
    HTH,
    GP

  • HWIC-4ESW routing

    What are the routing capabilities of the HWIC-4ESW?
    Can i configure a different IP subnet in each port?

    Hi,
    The following link gives full configuration guidelines for the HWIC-4ESW:
    http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00802c6bb6.html
    In answer to your question, yes - you can have a different IP subnet in each port. (And if it's a trunk you can have multiple IP subnets per port)
    HTH
    Andrew.

  • Hwic 4esw monitor Session

    Currently running a hwic 4esw module in a 2800 series router and we are using websense so I’m trying to use Monitor session to mirror the traffic over for websense to see. The only problem is that the route locks up every week and doesn’t allow any traffic out. Any ideas?

    I need some clarifications from your side to help you out with the problem.Are you able to normally ping the Websense server from the PIX? .When the problem occurs are you able to ping the websense server from the PIX?. Is the PIX reachable from the rest of the network when the problem occurs?
    Send me these details so that I can help you further.

  • HWIC-4ESW

    folks
    i have a 2821 ISR with a HWIC-4ESW installed and a firewall running ospf on the end of one of the switch ports
    the switchport is assigned to a vlan and the vlan interface has an ip
    my problem
    the switchport is layer 2 and won't see the firewall, i can't even see a mac-address! the line is up as is the protocol so figure its a config problem
    i've tried setting the firewall interface in the same vlan number - no joy
    i need ospf to run between the firewall and the router - has anyone any idea of what i can do
    i think there's a compatibility problem with the HWIC-4ESW and may need another L3 card - can i get one for the 2821?
    thanks to anyone taking the time to reply

    This should have no problem communicating. Can you try to provide the following:
    1. show diag
    2. show run int fa x/x >> the switchport connecting to the firewal.
    3. sho run inter vlan x >> the vlan created for the port connecting to the firewall.
    4. Is the interface vlan up/up? You mentioned the l2 port but was the interface vlan up/up?
    Did you try pinging from 2821 to the firewall's interface ip address, the interface connecting to the L2 port.
    Please rate all posts.

  • 2821 and a HWIC-4ESW=

    I have a 2821 with a HWIC-4ESW= installed int slot 0. I cannot see the FastEthernet interfaces in my NAT list.
    Specifically I have a a 1300 series AP in my defauly VLAN (1) and I cannot ping it when I have it connected to f0/1/1. I have f0/1/1 configured in trunk mode (for grins I have tried both). I can ping my 1300 when I plug it in to a Catalys Express 500 with the port configured via smartports as an access point with a native VLAN of 1.
    To me it seems that the HWIC-4ESW= is not configured correctly in the 2821 or the 2821 is not allowng the fastethernet interfaces to talk to the gigabitethernet interfaces. Any thoughts?
    Thanks,
    Mike

    I do not have an IP address on the VLAN 1 interface. I do have an IP address on the same subnet on interface g0/0.1 - 10.1.l.254/24 in vlan1.
    The device on f0/1/1 is 10.1.1.55/24 also in vlan1.
    Can I have the g0/0 segmented in to sub-interfaces and still brige it to a hwic-4esw port?
    I could make the 1300 series bridge that connects to the hwic-4esw (f0/1/1) part of a different vlan, but would like to have the APs in the managment vlan along w/ the switches and router.
    Thanks,
    Mike

  • Is the HWIC-4ESW card supported in the WAE-674-K9?

    Hi,
    In the datasheet of the WAE-674-K9 says that it supports (4-port network interface card (NIC) for inline Cisco WAAS deployment), but don't mention the HWIC-4ESW anywhere. Is it supported?
    Any help is much appreciated!

    Hi,
    The WAE-674-K9 support 4 port NIC for Inline Deployment and the card is WAE-INLN-4CG.
    HWIC-4ESW is not supported.
    http://www.cisco.com/en/US/prod/collateral/contnetw/ps5680/ps6474/data_sheet_c78-495801.html
    Regards
    Kiran.

  • 2801 with TWO HWIC-4ESW-POE

    Hi,
    2801 with AC-IP power, PVDM2-8 (c2801-advipservicesk9-mz.124-7a.bin) is being used at branch office.
    They have four slots:
    slot0: vic2-2fxo (for local call, 911, srst)
    slot1: HWIC-4ESW-POE (IP Phones)
    slot2: WIC-1DSU-T1-V2 (T1 internet)
    slot3: HWIC-4ESW-POE (IP Phones)
    The router recongize all the modules, but some reason, the IP phones wont register to CCM. PC wont get IP address from local DHCP pool from router itself.
    It only happens at slot3, slot1 is working fine.
    My questions are that: is 2801 support TWO HWIC-4ESW-POE at slot 1 and slot 3 at the same time?? If it does support, any reason why.
    Thanks for help...
    Ken

    Ken, Are the phones in slot 3 powering up ?
    are they in same vlan as slot 1 phones ? If you swap phones between slot 3 and slot 1, do the phones that were originally in slot3 do register , get an ip etc..?
    It looks like two hwics esw are supported in 2801, the question is whether two hwics with poe are supported or not. If you get power on both slots for the phones, the router is definitely granting power to all 8 ports.
    http://www.cisco.com/en/US/products/ps5855/products_qanda_item0900aecd8016c026.shtml
    Also does the port show connected on slot 3?
    Also try removing slot 1 hwic and see if slot3 phones do get registered.
    HTH
    Sankar
    PS: please remember to rate posts!

  • DSCP marking for non WMM-clients

    hello,
    i just made several tries but didn´t find the result which i expected. i have the following scenario:
    non WMM-clients in branches in our WAN
    traffic over the wan line must be shaped
    there is no local breakout, the traffoic should be tunneled to the central datacenter
    so what i want to achieve is that every traffic from this non WMM-clients (which are using a special SSID (i call it here "EXTERNAL")) is getting marked in that way that the CAPWAP-packets are holding dscp-values so that i can refer on these packets beforer they are going over the WAN-connection
    what i did:
    the ssid uses the QOS-Profile "bronze"
    WMM is disabled
    the QOS-Profile itself has 802.1p enabled with a value of 1
    so i expected that every traffic via this ssid "EXTERNAL" gets a dscp marking in the capwap packet of 10 (perhaps also 12 or 14, i´m not sure whcih value really is used). in reality i see 0.
    i´m using Wismv1 with version 7.0.230. i also tried it with 5508 with the same version but it didn´t work. APs are 1142.
    is my expectation wrong that this scenario is working in this way? do i forget something??
    thanks for your help

    The WLAN can only re-mark client traffic that has existing DSCP values in the original packet, typically at the application layer. The platinum profile itself has 46 as VoWLAN, 48 as Mgmt traffic (CAPWAP etc), and 56 as network traffic, classifying them as such based on the original marking. The values are only remarked if the configured SSID is different.
    This link provides a few more details:
    http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807e9717.shtml

  • Terminate IPsec on one of the ports of HWIC-4ESW (through VLAN)

    Hi,
    It's not clear to me whether it's possible to terminate IPSec on one of the ports of HWIC-4ESW (through VLAN)? The document on the link below suggests that it supports L3 with limitations but it's short in mentioning whether IPsec is one of the limitations.
    http://www.cisco.com/en/US/customer/products/ps5855/products_qanda_item0900aecd8016c026.shtml
    Thanks.
    Regards, Archie

    Yes, you can terminate IPSec on HWIC-4ESW .
    here sample config:
    interface Vlan100
    description crypto int vlan
    ip address 10.10.100.100 255.255.255.0
    crypto map mymap
    interface FastEthernet 0/0/1
    description int for crypto vlan int
    switchport access vlan 100
    no ip address
    duplex full
    speed 100

Maybe you are looking for

  • SRM 7.0 Approver deleted after SC is ordered

    Hello Experts, I have created a 4 process level with custom expressions and agents for SC. All the approvers and agents are determined at each level successfully, however on the Financial approval level the agents are refreshed/disappear when the SC

  • Using Oracle Text in Materialized View

    Hi all, I have a situation like that: I create a MATERIALIZED VIEW select data from 2 normal view Create Materialized VIEW SEARCH_DNICT REFRESH COMPLETE NEXT SYSDATE + 1/4069 SELECT * FROM SEARCH_VIEW_CMS UNION ALL SELECT * FROM SEARCH_VIEW_TABLEAnd

  • Download instrument driver problem & doubts

    Hey friend, i encounter sme problems in displaying my waveform in my labview exercise..currently i am a student n wrking on proj. My present/ongoing task is to try out n understand a prev ex done by a student frm the last batch. The ex is a AM modula

  • No RAW batch processing like in LR

    I have spent about an hour on the forums looking for an answer to this.  In LR I can set up a RAW file the way I want it and then sync that setting to the remainder of the RAW files I have opened.  Or I can choose less than all the aspects of the pho

  • HT4623 my screen is locked it wont let me do anything tried to reboot alot but wont work help

    my screen is locked or something it wont even let me put my password in i tried to reboot it alot but didnt work help