ISCSI traffic running across Cisco 3750 Switches

My customer has a small shop with 2 servers runnig iSCSI to a SAN device. They are looking for a switch recommendation and I would like to use a pair of Cisco 3750's, to take advantage of the VSS technology for redundancy,L3 and some other Core requirements, but I am concerned about performance.
I thought my other option is to use 3750E's but concerned about the added costs.

The fabric and pps ratings for the 3750Gs don't support wire-rate for more than 16 gig ports. (Max performance for 3750G models is 38.7 Mpps and 32 Gbps fabric; for 3750-E it's 101.2 Mpps and 128 Gbps fabric [NB: pps is enough, slightly insufficent fabric bandwidth for 48 port models - similar 4948 offers 102 Mpps, 136 Gbps].)
Another performance limitation of the 3750s (and to lessor extent the 3750-Es) is stack ring bandwidth. As best I can tell, the 32 Gbps is really dual 8 Gbps duplex (dual 16 Gbps duplex for -Es). An important distinction between the original StackWise technology and the later StackWise+, the former puts a copy of all traffic on the stack, the latter suppresses unnecessary unicast. The former also requires the sender to remove the traffic from the stack ring, the latter the destination removes the traffic. (I.e. the "+" technology, really is plus.)
For really, really demanding performance, a stack ring isn't the same as a chassis fabric (e.g. 4500s), and within a single switch, the lower end switch models, they can't always provide wire-rate for all their ports. However, the real question is whether you need this performance in a small shop even though iSCSI is being used.
In other words, its rare to see all ports demanding full bandwidth, so a stack of 48 port 3750Gs migtht work just fine for your customer if the actual need doesn't require more than the device can supply.
In similar situations, I present the customer with such facts. Based on what the expected load is, device "A" might work fine, but it can't guarantee performance beyond a certain level. If customer wants the capability for more performance, for growth or "just to be safe", can do too, here's your options (and extra cost) for that too.
BTW, if SAN devices can support 10gig, then you'll need something better than the 3750G since the model with a single 10gig port has been discontinued.

Similar Messages

  • How can I mirror all ports on CISCO 3750 switches to one Gigabyte port?

    Hi,
    I have a requirement to mirror all the ports on my 7 CISCO 3750 switches, which are in 3 separate stacks, to one single Gigabyte Ethernet port.
    Does anyone know how I can do that?
    Thanks in advance.

    Vlad, thanks a heap for your response.
    I want to apply to my sitation. Please let me know if I get them right in the following:
    Catalyst A
    vlan 901
    remote-span
    monitor session 1 source interface fastethernet 1-48 (I want to monitor all ports on the CISCO 3725)
    monitor session 1 destination remote vlan 901
    Catalyst B
    vlan 901
    remote-span (If I don't need to monitor this switch, do I still need to put anything into this switch at all?)
    Catalyst C
    vlan 901
    remote-span
    monitor session 1 source interface fastethernet 1-48 (I want to monitor all ports on this switch as well)
    monitor session 1 source remote vlan 901
    monitor session 1 destination interface gigabitethernet 3 (There are 4 Gigabit Ethernet Uplink in CISCO 3750, I want all the traffic to go to port 3, is this the right way to do?)
    Thanks in advance.

  • Cisco 3750 Switch SFP Module

    Hi all,
    I have one 3750 switch( ME-C3750-24TE )with IOS 12.2(25)EY4,
    Now I have two SFp Module GLC-SX-MM and i have inserted in four ports of Switch
    But nowhere I found it detected via "Sh inventory"
    Moreover I have also tried with loop cable (LCPC-FCPC-ATTENTUATOR-FCPC-LCPC)bUT NOT GETTING lED ON ANY PORT
    Pl. Guide
    I am attaching sh-tech for reference

    Hi,
    when inserted the SFP module in one port take a look at the output of "show interface gigabitethernetX/Y" watch for a line (I think it is line 5) including the word "media", there should be a short description of the SFP. Also look at the first line of "show interface gigabitethernetX/Y" it could be that the SFP doesn't work in the switch (maybe because it is a none cisco one) then there would be something like "err-disabled". And if you have logging enabled on the switch (e.g. logging buffered 8192 debugging) then there should be an error message also.
    The command "show idprom interface gigabitethernetX/Y" shows information about the SFP module in slotX/Y.
    Depending on the "err-disable" configuration of the switch ("show err-disable detect" and "show err-disable recovery") a looped interface maybe put in an 'err-disabled' state, see "show interface ..." or "show logging"
    HTH
    regards
    Mark

  • 802.1x on Cisco 3750 switch: How to stop retrying the authentication for the un-authorized guests

    Hi experts,
    I'm trying to stop the authentication retry for the guests. They won't have the credential to be authorzied and will be put in the guest VLAN. However the switch seems by default always retries the authentication every 15 seconds or so. It's fine if the guests are few but I'm implementing it at a hotel where most users are guests (like 1000 of them at the same time...).
    I really need to turn it off or at least find some timer to decrease the frenquency... It's urgent because the hotel is about to open... The following is the config I put on an interface:
    switchport access vlan 1055
    switchport mode access
    switchport nonegotiate
    switchport voice vlan 657
    ip access-group ACL_PortIso_IDF21 in
    authentication event fail action authorize vlan 1055
    authentication event no-response action authorize vlan 1055
    authentication host-mode multi-domain
    authentication port-control auto
    authentication violation protect
    mab
    no snmp trap link-status
    dot1x pae authenticator
    dot1x timeout quiet-period 300
    dot1x timeout tx-period 2
    dot1x timeout supp-timeout 2
    dot1x max-reauth-req 10
    dot1x timeout held-period 300
    no cdp enable
    spanning-tree portfast
    spanning-tree bpduguard enable
    no ip igmp snooping tcn flood
    Thanks!

    Elly,
    Soon I will have a Windows laptop plugged in. Then I will be able to run the wireshark. Now I have to run the "debug dot1x packets" since the attached device is a phone.
    So first I "clear dot1x session int f3/0/13". After a couple of "failure" eventually it will show this:
    "%AUTHMGR-5-SUCCESS: Authorization succeeded for client (Unknown MAC) on Interface Fa3/0/13"
    (Weird... why it's showing "success"? Anyway when the authentication restarts again after several minutes there won't be any "sucess" any more, as shown in my previous text file. They are)
    Then I have the debug turnned on:
    .Jan 25 12:47:21: %AUTHMGR-5-START: Starting 'dot1x' for client (0019.f302.a378) on Interface Fa3/0/13 AuditSessionID 0A8F7325000010629B960A41
    INDJWSW01-2104#
    .Jan 25 12:47:21: EAPOL pak dump Tx
    .Jan 25 12:47:21: EAPOL Version: 0x3  type: 0x0  length: 0x0005
    .Jan 25 12:47:21: EAP code: 0x1  id: 0x1  length: 0x0005 type: 0x1
    .Jan 25 12:47:21: dot1x-packet(Fa3/0/13): EAPOL packet sent to client 0x5600009F (0019.f302.a378)
    INDJWSW01-2104#
    .Jan 25 12:47:23: EAPOL pak dump Tx
    .Jan 25 12:47:23: EAPOL Version: 0x3  type: 0x0  length: 0x0005
    .Jan 25 12:47:23: EAP code: 0x1  id: 0x1  length: 0x0005 type: 0x1
    .Jan 25 12:47:23: dot1x-packet(Fa3/0/13): EAPOL packet sent to client 0x5600009F (0019.f302.a378)
    INDJWSW01-2104#
    .Jan 25 12:47:25: EAPOL pak dump Tx
    .Jan 25 12:47:25: EAPOL Version: 0x3  type: 0x0  length: 0x0005
    .Jan 25 12:47:25: EAP code: 0x1  id: 0x1  length: 0x0005 type: 0x1
    .Jan 25 12:47:25: dot1x-packet(Fa3/0/13): EAPOL packet sent to client 0x5600009F (0019.f302.a378)
    INDJWSW01-2104#
    .Jan 25 12:47:27: %DOT1X-5-FAIL: Authentication failed for client (0019.f302.a378) on Interface Fa3/0/13 AuditSessionID 0A8F7325000010629B960A41
    .Jan 25 12:47:27: %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'dot1x' for client (0019.f302.a378) on Interface Fa3/0/13 AuditSessionID 0A8F7325000010629B960A41
    .Jan 25 12:47:27: %AUTHMGR-7-FAILOVER: Failing over from 'dot1x' for client (0019.f302.a378) on Interface Fa3/0/13 AuditSessionID 0A8F7325000010629B960A41
    INDJWSW01-2104#
    .Jan 25 12:47:27: %AUTHMGR-5-START: Starting 'mab' for client (0019.f302.a378) on Interface Fa3/0/13 AuditSessionID 0A8F7325000010629B960A41
    .Jan 25 12:47:28: %MAB-5-FAIL: Authentication failed for client (0019.f302.a378) on Interface Fa3/0/13 AuditSessionID 0A8F7325000010629B960A41
    .Jan 25 12:47:28: %AUTHMGR-7-RESULT: Authentication result 'fail' from 'mab' for client (0019.f302.a378) on Interface Fa3/0/13 AuditSessionID 0A8F7325000010629B960A41
    .Jan 25 12:47:28: %AUTHMGR-7-FAILOVER: Failing over from 'mab' for client (0019.f302.a378) on Interface Fa3/0/13 AuditSessionID 0A8F7325000010629B960A41
    .Jan 25 12:47:28: %AUTHMGR-7-NOMOREMETHODS: Exhausted all authentication methods for client (0019.f302.a378) on Interface Fa3/0/13 AuditSessionID 0A8F7325000010629B960A41
    Then the message will repeat and repeat forever... It seems that the switch Tx the packets first... Any ideas???
    Thanks!

  • Etherchannel two cisco 3750 stacks for iscsi?

    I have two sites connected by 96 strands of fibre. At each site I have an IBMv7000 relicating to the other one. For iSCSI traffic I have two Cisco 3750 switches, each are in 2 switch stack. 
    SAN A                         Fibre Link                          SAN B
            |                                                                        |
    Cisco Stack A =========================Cisco Stack B
            |                                                                        |
            |                                                                        |
    iSCSI Clients                                                       iSCSI Clients
    My question: Is it ok to connect the the two stacks with etherchannel using the fibre links? Will is provide the necessary redundancy, if one of the interfaces goes down?

    What model numbers of 3750 are you using?
    What is the distance between the stacks as this will dictate your fiber run modules.

  • AAA Radius accounting command is not taking in 3750 switch

           Hi Cisco Support community,
    I am facing a issue with radius accounting in Cisco 3750 switch with version 12.2. I am unable to start accounting for radius server.
    This is the config that is on the switch for Radius.
    aaa authentication login default group radius local
    aaa authentication dot1x default group radius
    aaa authorization exec my-authradius group radius if-authenticated.
    radius-server attribute 6 on-for-login-auth
    radius-server dead-criteria time 20 tries 5
    radius-server host 10.100.1.225 auth-port 1645 acct-port 1646 key 7 14341A5801103F3904266021
    radius-server host 10.100.1.226 auth-port 1645 acct-port 1646 key 7 05280E5C2C585B1B390B4406
    When i try to add the following command for accounting, this is not saving.
    (aaa accounting commands 0 default start-stop group radius
    aaa accounting commands 1 default start-stop group radius
    aaa accounting commands 15 default start-stop group radius)
    If i do paste this command one by one after start-stop group it is showing only two options either tacacs+ or server, no radius option is there as well.
    I  tried to create a server group and add the radius server  in the group.  Even then when i am trying to implement the aaa accounting command with the server command it is not showing in show run.
    Can anyone please help me with this issue.

    Hi,
    thanks for your reply but the thing is that  i want to see the command that are being run by a user on  this particular device. If i use the network command it will only show me the  network-related service requests, including Serial Line Internet Protocol (SLIP), PPP, PPP Network Control Protocols (NCPs), and AppleTalk Remote Access Protocol (ARAP).
    I have read the document from this link and it is stating that we can use command accounting. Below is the link
    http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_a1.html. 
    Can anyone please tell me if this a version issue because even in version 15.4 i was not seeing the radius option in the end
    aaa accounting commands 15 default start-stop group (radius)- in radius place it was showing only Tacacs+ or group.

  • Question on ARP table on 3750 switch

    Hi,
    So I have a cisco 3750 switch directly connected to a 2851 router gig 0/0 interface.
    Should the show arp command on the switch show an entry for the IP and mac address of the routers gig 0/0 interface?
    I dont see one in there now and was just wondering.
    Connectivity between the switch and router work fine right now.
    thanks

    HI Bill,
    if u can ping from Swicth ro router,,,,then please check with this command: sh ip arp.
    Just for Info;
    To be able to ARP a device, you must have an interface (SVI) on that switch on that network. To ARP a device you must have an interface with a layer 3 IP on the same layer 2 vlan.
    You will need to connect to a switch that has an interface on that vlan on it. I would traceroute to the host, and hopefully the next to last hop is the layer 3 switch, or if it's a router, connect to it and do a show cdp neighbors and see if you can find the switch that way. (If you do connect to the router, you'll find the ARP entries there, if it's a layer 3 switch, then it's both a router and switch in one box)
    "sh mac address-table". This will give which MAC is connected to which port.
    "sh ip device tracking interface gigabitEthernet ". This will give which IP is connectd to a port.
    "sh ip arp" will give you a IP to MAC table
    Regards
    Dont forget to rate helpful posts.

  • Remote Command Tool for Cisco Routers/Switches

    Is anyone aware of any tools or scripts out there which allow preconfigured commands to be remotely run again Cisco Router/Switches and display the output result?
    I'm looking for a tool which I can give our Service Desk personnel that will allow them to select from a list of commands enter a target IP Address of a router/switch and then the tool will display the vlan table or the running config of a particular switch-port so they can see if its configured on the correct data vlan or its missing its voice vlan etc.
    For example a Service Desk Operator needs to check what vlan a switch-port is on. So they open the tool, enter the switches IP address and the port number and select an option like "display a switch-ports vlan" and the tool will login into the switch in the background run a show command on the switch and then output the result.
    Thanks.

    Check out rConfig. You will be able to run multiple instances of it i.e. one instance for your standard configuration backups and another for more specific configuration downloads info like show vlan bri commands etc for service desk staff to view.
    You could also use the IOS menu function and create menus or role based access on each of your devices for your users.
    Regards
    Stephen
    ==========================
    http://www.rConfig.com 
    A free, open source network device configuration management tool, customizable to your needs!
    - Always vote on an answer if you found it helpful

  • Stack issue on Cisco 3750

    Hi team,
    I have an issue with the stack basing on Cisco 3750 switches.
    Today on one of them, something went wrong and all ports are down.
    Could you please advise, what happened? In what direction I should work to find root cause?
    thank you

    Hi,
    I have found out what is the root cause.
    In stack, I have 4 switches:
    1. Member
    2. Master
    3. Member
    4. Member
    But right now I have next picture
    1. Member - status "Ready"
    2. Master - status "Ready"
    3. Member - status "Provisioned"
    4. Member - status "Ready"
    5. Member - status "Ready"
    I have checked MAC addresses, I have noticed, that member 3, became member 5.
    For resolving this issue, I just need make member 5 member 3, but I don't know how to do it exactly.
    My plan is:
    - remove member 3.
    - change number of the member 5 to member 3
    Is it correct?
    Thank you,
    Igor

  • 3750 switch and HP switch fiber connectivity issue

    I have connected 2 Cisco 3750 switches "WS-C3750-48TS-S" with the LC to LC Duplex Single Mode fiber cable. Both the switches are communicating with each other.
    As i have checked in the cisco document that GLC-SX-MM support only Multimode fiber cable. So i am surprised how does it support single mode fiber optic cable.
    Can anyone tell me the reason for supporting single mode fiber optic cable?
    But when i connect HP 4208 switch with the same Cisco 3750 the interface is showing up but the input packets are 0 and output packets are increasing on both ends.
    I have checked the SFP's and fiber cable are compatible with HP. 
    Can anybody suggest me what can be the possible cause of this?
    Regards,
    Mukesh Kumar
    Network Engineer
    Spooster IT Services

    I tried to troubleshoot this issue by using some show commands.
    As i have checked that there are some specific commands to check SFP transreceiver as given below:
    show hw-module subslot slot/subslottransceiver port idprom.
    show interfaces {{[int_name] transceiver {[detail]} | {transceiver [module mod] | detail [module mod]}}
    But these commands support only those transreceivers which support DOM. GLC-SX-MM doesn't support DOM.
    Can anyone tell me that are there some troubleshoting commands to solve out the issue?
    Regards,
    Mukesh Kumar
    Network Engineer
    Spooster IT Services

  • Need help for Fiber GLC-LH-SM connection between Cisco 3750

    Please help me. I want to connect my two Cisco 3750 switch by gbic GLC-LH-SM.Unfortunately, when i trying to connect,it's not uplink.
    More information about two switch below:
    Gi1/0/51 notconnect 1 auto auto 1000BaseLX SFP
    switch 2 show interface status
    Gi2/0/51 notconnect 1 auto auto 1000BaseLX SFP
    I have no idea to deal with it,any ideas ?

    are the gbics cisco original ?
    if yes then just make sure of the cable which should be Single mode.
    if still not working try to reverse the cable connectors on one side as well.

  • Challenge: Spanning Tree Control Between 2 links from Switch DELL M6220 to 2 links towards 2 switches CISCO 3750 connected with an stack (behavior like one switch for redundancy)

    Hello,
    I have an Spanning tree problem when i conect  2 links from Switch DELL M6220 (there are blades to virtual machines too) to 2 links towards 2 switches CISCO 3750 connected with an stack (behavior  like one switch  for redundancy, with one IP of management)
    In dell virtual machine is Spanning tree rapid stp, and in 3750 is Spanning tree mode pvst, cisco says that this is not important, only is longer time to create the tree.
     I dont know but do you like this solutions i want to try on sunday?:
     Could Spanning tree needs to work to send one native vlan to negociate the bdpus? switchport trunk native vlan 250
    Is it better to put spanning-tree guard root in both 3750 in the ports to mitigate DELL to be root in Spanning Tree?
    Is it better to put spanning- tree port-priority in the ports of Swicht Dell?
    ¿could you help me to control the root? ¿Do you think its better another solution? thanks!
     CONFIG WITH PROBLEM
    ======================
    3750: (the 2 ports are of 2 switches 3750s conected with a stack cable, in a show run you can see this)
    interface GigabitEthernet2/0/28
     description VIRTUAL SNMP2
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 4,13,88,250
     switchport mode trunk
     switchport nonegotiate
     logging event trunk-status
     shutdown
    interface GigabitEthernet1/0/43
     description VIRTUAL SNMP1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 4,13,88,250
     switchport mode trunk
     switchport nonegotiate
     shutdown
    DELL M6220: (its only one swith)
    interface Gi3/0/19
    switchport mode trunk
    switchport trunk allowed vlan 4,13,88,250
    exit
    interface Gi4/0/19
    switchport mode trunk
    switchport trunk allowed vlan 4,13,88,250
    exit

    F.Y.I for catylyst heroes - here is the equivalent config for SG-300 - Vlan1 is required on the allowed list on the catylyst side (3xxx/4xxx/6xxx)
    In this example:
    VLANS - Voice on 188, data on 57, management on 56.
    conf t
    hostname XXX-VOICE-SWXX
    no passwords complexity enable
    username xxxx priv 15 password XXXXX
    enable password xxxxxx
    ip ssh server
    ip telnet server
    crypto key generate rsa
    macro auto disabled
    voice vlan state auto-enabled !(otherwise one switch controls your voice vlan….)
    vlan 56,57,188
    voice vlan id 188
    int vlan 56
    ip address 10.230.56.12 255.255.255.0
    int vlan1
    no ip add dhcp
    ip default-gateway 10.230.56.1
    interface range GE1 - 2
    switchport mode trunk
    channel-group 1 mode auto
    int range fa1 - 24
    switchport mode trunk
    switchport trunk allowed vlan add 188
    switchport trunk native vlan 57
    qos advanced
    qos advanced ports-trusted
    exit
    int Po1
    switchport trunk allowed vlan add 56,57,188
    switchport trunk native vlan 1
    do sh interfaces switchport po1
    !CATYLYST SIDE
    !Must Explicitly allow VLan1, this is not normal for catalysts - or spanning tree will not work ! Even though it’s the native vlan on both sides.
    interface Port-channel1
    switchport trunk encapsulation dot1q
    switchport trunk allowed vlan 1,56,57,189
    switchport mode trunk

  • Connection of LC/APC fiber patch cords to Cisco Catalyst 6500 $ Cisco Access 3750 Switches

    I have an LC/APC fiber patch cord infrastructure and I want to connect it to Cisco Catalyst 6500 & Cisco Access 3750 Switches. what type of transceiver should be used?
    I read a note on Cisco website stating the following for Cisco SFP+ transceivers:
    Note: "Only connections with patch cords with PC or UPC connectors are supported. Patch cords with APC connectors are not supported. All cables and cable assemblies used must be compliant with the standards specified in the standards section"

    Thank you,  but my question is that I have a single mode fiber patch cord with LC/APC connector while cisco stating a note that only use LC/PC or LC/UPC type of connectors with SFP+ transceiver.  
    So what type of transceiver should I use to connect LC/APC patch cord to cisco switches?  Is there another type or SFP+ still can be used? 

  • Best way to connect 2 Cisco 3750 PoE 24-port Switches

    Hello. I have 2 Cisco 3750 PoE 24-port switches in a small office environment. Right now I have a trunk configured off my ASA 5505 to switch 1, and then just an access port configured on a port (switch 1) and an access port configured on a port (switch 2) to connect them together. These switches also have 2 GB SFP ports but they are not being used in this configuration.
    I was curious to know if anyone had any better recommend configurations for connecting these 2 switches together? I'm not sure if this particular model can be stacked? 

    What are the exact model numbers (should be written on a sticker)?
    You will know if they can be stacked as you will see the 2x stack ports on the back of each switch :)
    If they can then that is probably the way to go unless you want to keep them as separate switches for some reason.
    If you want them separate, I would connect them via a Trunk link at least so you can have the same Vlans on both.
    Thanks

  • How to priorities(QoS) the traffic for DSCP 46 and 34 in cisco 2960s switch

    HI,
    We are going to implement Microsoft Lyncs 2013 in our network, so how to priorities the traffic for DSCP 46 and 34 in cisco 2960s switch. Kindly replay with detailed QoS commands for enabling QOs in LAN.
    Thanks
    Sujish

    Hi,
    Have a look at this config guide for all the details:
    http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_53_se/configuration/guide/2960scg/swqos.html
    HTH

Maybe you are looking for

  • CSS 11150 Booting Problem

    Dear All, After a power outage, one of our CSS is failing to boot up properly. Every time its rebooted, it goes straight to the OFFDM although the Primary boot device has been selected to be Disk. I have formatted the Disk and loaded a new image, it

  • Verizon is charging my account for a service that was not provided.

    Verizon is charging my account for a service that was not provided. I am a LONG term Verizon customer and no one is helping..... I work in IT, with the Network and Mobility groups, so I know what I am talking about, network access, O/S, bandwidth, et

  • How to hold the result set

         We have a GUI swing screen in which we have navigation buttons.      when the user clicks the previous ,next, last,first buttons we have to show the records accordingly.      The min. size of the database is around 1 million.and each row has 60

  • Starting Multiple Meetings

    Hi !!! Can any one please give me procedure to start multiple meetings with single flash file using flash media server components. Let me explain clearly---- I started a meeting with flash media server components and deployed to tomacat. I can able t

  • Send me the sample coding of DI Server

    Hi DI Server Experts, Can you send the sample simple coding for the DI Server and what are the steps needs to be taken care? i have DI server license and when i run the coding of sample it showing 'Could commit the transaction login'. Please helping