ISL between switches

hi, I have a novice isl question.
I have 2 new 9506 switches, they are seperate fabrics. we have some older switches that I would like to ISL to them.
By looking at the older switches I see the way they are ISLed and want to understand if this is correct and I should replicate this setup.
Basically I see port trunks ISLs between the switches, port fc1/10 and fc1/10 are TE ports going from switch A to ports fc1/20 fc1/21 on switch B.
Should I replicate this setup on the new switches ?
1.
on 9506 switch A create 2 E ports, fc1/47 fc 2/47
on 9506 switch B create 2 E ports, fc1/47 fc 2/47
2.
on old Switch create 4 E ports, port fc1/1, fc1/2, fc1/6, fc1/7
3.
Connect the fiber cables
4.
create trunks on new and old switches
Do I need to be concerend about vsans's merging or disrupting any data ?
old switch has a vsan 2 that everything is in and new switches have vsan 2 and 3.
I want the targets that in vsan 2 on the old switch to be able to talk to targets in vsan 2 and 3 on the new switch. 
sorry if this is confusing, I am still learning as I go along. I dont have a lab so everything is in production and I have to be careful not to blow it up.

because the way you have your old switches interconnected, it's one fabric. If you connect your new switches to the same fabric and configure the same VSAN on both 9506 you will essentially merge them ..once again you will be in non-redundant configuration. The only way that i can think of making this work would be to use completely different set of VSAN on each 9506, connect them to your existing fabric and then use IVR. Is 9506 or "old "switch" licensed for IVR ?
@dynamoxxx

Similar Messages

  • How can I encrypt my data links between switch uplink ports ? I'm unable to use "cts Manual" command in C3560X switch.suggest me

    How can I encrypt my data uplinks between switch trunk ports ? I'm unable to use "cts Manual" command in C3560X switch.suggest me as I want to encrypt my switch-to-switch link with Cisco TrustSec.

    Hi 
    Login to switch & go to interface..
    There you can give tags.. (ISL & DONT1Q)
    Command switch-port mode trunk
    Switch-port trunk encapsulation ssl or dot1Q

  • Migrating between switches

    We have a small SAN based on a 9140 switch. We need to expand and have purchased a 9509. I'd like to connect the switches, migrate the connections in my production VSAN onto the 9509, leave the test VSAN on the 9140, and then disconnect the two switches, creating two fabrics. Is there an easy way to do this? I've tried setting up a trunk between the switches but I think I need to create a common domain; as this is disruptive I want to avoid that if possible.

    Here is what I would suggest. I assume that the 9140 has all active ports in a single VSAN. I would create that same VSAN number in the 9509, and assign it a different Domain ID. Then connect an ISL cable between the 2 devices. If the VSAN comes up on the E or TE port, the active zoneset from the 9140 should show up in the 9509. If the zone members were created by using the device PWWN, then you move devices over at your leisure. Once all devices are migrated, you can disconnect the ISL to the 9140 and do with it what you want.
    In the 9140 to view the current status, here are some commands for the CLI to help you determine what is currently in place.
    show vsan membership (shows which physical ports are in which vsan)
    show flogi database (shows which devices are logged into the 9140)
    show zoneset active vsan x (shows the currently active zoning database for the vsan noted in the command by x)
    Steps to do on the 9509.
    create the vsan
    place the desired number of ports into the vsan
    take these ports out of shutdown mode
    bring up the ISL between the 2 swtiches
    check for the zoneset to show up in the 9509
    Again, if the zone members are PWWN, then you can move the devices at your own pace from the 9140, to the 9509. If the zone members are not by PWWN, then you would need to generate the corresponding zones to maintain connectivity as devices are migrated.
    If the host/storage are dual attached to the 9140, you can make the migration 1 path at a time and incur no down time.
    I hope this helps,
    Mike

  • 802.1X Authentication issues when moving between switch ports

    Hi Guys,
    We are having some issues at our office where when users move from one switch to another, the 802.1X authentication does not want to take place. The PC just gets an APIPA address. Now I have read about features that MAC Move and MAC replace but they seem to be used when moving from one port a switch to another port on that same switch. Will MAC move help for issues between switches? And should I focus my attention on the switch's configuration or have a look at the NPS server that might be blocking that authentication as the user is already authenticated?
    My configuration we have on the switch ports look as follows:
    authentication host-mode multi-domain
    authentication order dot1x mab
    authentication priority dot1x mab
    authentication port-control auto
    dot1x pae authenticator
    Your help is greatly appreciated.
    Grant

    Hi Neno,
    Thanks for the reply. We are using NPS on a Server 2008 R2 virtual machine. The switches are stacked 2960S-48FPS-L running 15.0(2)SE. I will quickly do the debugs and get back to you.
    Here is the config:
    aaa group server radius customer-nps
     server name radius1
     server name radius2
    aaa authentication dot1x default group radius
    dot1x system-auth-control
    radius server radius1
     address ipv4 172.28.130.52 auth-port 1645 acct-port 1646
     key 7 05392415365959251C283630083D2F0B3B2E22253A
    radius server radius2
     address ipv4 172.28.131.52 auth-port 1645 acct-port 1646
     key 7 107C2B031202052709290B092719181432190D000C
    interface GigabitEthernet1/0/1
     switchport access vlan 300
     switchport mode access
     switchport voice vlan 2
     srr-queue bandwidth share 1 30 35 5
     queue-set 2
     priority-queue out
     authentication host-mode multi-domain
     authentication order dot1x mab
     authentication priority dot1x mab
     authentication periodic
     authentication timer reauthenticate 28800
     authentication timer inactivity 1800
     mab
     no snmp trap link-status
     mls qos trust cos
     dot1x pae authenticator
     auto qos trust cos
     storm-control broadcast level 1.00
     storm-control multicast level 1.00
     spanning-tree portfast
     spanning-tree bpdufilter enable

  • Speed between Switches & IDF MDF

    Hello,
    I had a question reguarding the types of speed and cable one should use when connecting switches in an IDF togeather, and then connecting those swtiches back to an MDF.
    If I connect each switch in the idf togeather with gigabit ethernet, probably cat 6 cables,  how do I know that these 1 gigabit inter-connections will support all the traffic between the switches without issues? What if the right speed that I should have used was 10 gigabit? How often is 10gigabit used to interconnect switches in the idf?
    And this is the same issue im trying to figure out with connecting the IDF back to the MDF. Would 1 cat6 via gigabit ethernet speed be enough for all that traffic goign back to the MDF? Is there a general rule or something to follow so that I know what speeds to use when?
    Also, why use fiber 1gb vs 1gb over cat6 if distance between mdf and idf is less than 100m.
    Thank you for your time

    Disclaimer
    The  Author of this posting offers the information contained within this  posting without consideration and with the reader's understanding that  there's no implied or expressed suitability or fitness for any purpose.  Information provided is for informational purposes only and should not  be construed as rendering professional advice of any kind. Usage of this  posting's information is solely at reader's own risk.
    Liability Disclaimer
    In  no event shall Author be liable for any damages whatsoever (including,  without limitation, damages for loss of use, data or profit) arising out  of the use or inability to use the posting's information even if Author  has been advised of the possibility of such damage.
    Posting
    Regarding your questions about bandwidths between switches, that really depends on traffic volume.  An old rule-of-thumb has been uplink bandwidths might be good at about 24:1 for users and 4:1 to 8:1 for servers.  Such a rule-of-thumb doesn't account for your hosts their bandwidth requirements, and I believe, with higher bandwidth links, ratios can be increased.
    For various technical reasons, fiber is generally considered superior to copper, and so is often preferred by many for inter-network-device links, even when copper offers equivalent performance.  I, though, have used gig copper for inter-network-device links with no notable issues (but with huge cost savings).

  • Difference between Switching Structure in CCA and Transfer Structure in PC

    Hi experts,
    Could anybody define the difference between Switching Structure in CCA and Transfer Structure in CO-PCP? I can't also define when we create Primary Cost Component Split, do we use only range of Primary Cost Elements in the Cost Components for the Primary Cost Component Structure? Thanks for the help!
    Best Regards,
    Georgi

    This has been discussed please check it in forum
    https://forums.sdn.sap.com/click.jspa?searchID=480466&messageID=114309
    https://forums.sdn.sap.com/click.jspa?searchID=480466&messageID=1419481
    https://forums.sdn.sap.com/click.jspa?searchID=480466&messageID=1479212
    Shortly:
    Append structures are used for enhancements that are not included in the standard. An append structure is a structure that is assigned to exactly one table or structure. There can be more than one append structure for a table or structure.
    http://help.sap.com/saphelp_erp2004/helpdata/en/cf/21eb61446011d189700000e8322d00/content.htm
    Includes are used to group fields, an include structure can be assigned to many tables. If you add a fields to an include structure, all tables/structures, which contain that include structure, will be updated too.
    http://help.sap.com/saphelp_erp2004/helpdata/en/cf/21ea6a446011d189700000e8322d00/content.htm
    Regards,
    Santosh

  • Difference between Switch -off and disable of an aggregate.

    Hi All,
    Can any one please tell me whats the difference between Switch-off and Disable an aggregate?
    Appreciate ur help.
    Thanks,
    Soumya.

    Hi,
    You can temporarily switch off an aggregate to check if you need to use it. An aggregate that is switched off is not used when a query is executed.
    To do this select the relevant aggregate and choose This graphic is explained in the accompanying text Switch On/Off. An aggregate that is switched off is marked in column Filled/Switched off with This graphic is explained in the accompanying text.
    Since aggregates that are switched off must also be consistent, you do not have to activate the aggregate again or to fill it when you switch it back on.
    Execute a query or trace that would use the aggregate that was switched off. Compare the time that the database needs with the time that the query needs when using the aggregate. If the query is not significantly slower without the aggregate, you can deactivate or delete the aggregate.
    The system deletes all the data and database tables of an aggregate. The definition of the aggregate is not deleted.
    Deactivation
    Select the required aggregate and choose This graphic is explained in the accompanying text Deactivate.
    The status display in the columns Status and Filled/switched off change back to This graphic is explained in the accompanying text.
    If you want to, you can activate and fill the aggregate again later.
    More information:
    http://help.sap.com/saphelp_nw70ehp1/helpdata/en/26/4bc0417951d117e10000000a155106/frameset.htm
    Hope it helps.
    Regards,
    Ray

  • Re: Difference between switcher component and router activity

    Hi all,
    Here i want to know the difference between switcher component and router activity.
    Can anybody give the difference between them or suggest any blog for this.
    Thanks,
    Syam

    <af:switcher> component is an ADF Faces component. You can use it within (the source of) a JSF page or fragment to include a particular group of other JSF components depending on the switcher expression's value.
    Router activity is not a JSF component, i.e. you cannot use it within a JSF page of fragment. It is an ADF taskflow activity. You can use it as an activity within an ADF Taskflow to route transitions between some other activities in the taskflow depending on the router's expression.
    Dimitar

  • Nokia E71 Difference between Switch mode and Profi...

    I have Nokia E71, Phone having option to switch modes and also we have profile option.
    Can some body explain the difference between switch mode and having different profile ?.
    Thanks

    The profile impacts things like default ringtone, vibration settings, etc.
    With the mode switching you can also switch active standby applications and plugins (e.g., work vs. free time).
    Personally, I don't use the modes, and with profiles, I only use "General" and "Silent" and don't bother with others.

  • Can two WRT610N routers be used to create a wireless connection between switches?

    I am getting somewhat lost in the jargon involved with routers and access points and need better understanding of the functionality of the WRT610N router. The questions I need answered are:
    To eliminate the need for WUSB600N USB adapters for each of the happily switched office computers: can I use two WRT610N routers to connect one end of the building to the other without wires in between? One end has the switched LAN the other has the internet connection.
    If this is not the highest bandwidth solution... what is?
    Sorry to go off topic but, whether the above is feasable or not, can I establish more than one wireless network - one internal and one for guests - using a WRT610N router?

    Firstly thank you for your interest
    It is not possible to connect the two parts of our network with a physical connection such as a wire. The goal is therefore to wirelessly join one end of the building to another with as much bandwidth as possible. I am hoping to use high end dual band N equipment. However as linksys does not seem to have an access point which - with my limited understanding - suspect I could connect to an existing gigabit switch. I wish to know if a router can be configured to slave itself to the internet connected router.
    One end of the building has the internet and a reception room workstaion, the other end currently has 3 computers and a NAS which need to be connected to the internet and each other, as efficiently as possible. I am concerned that USB adapters for each computer would drain workstation resources and be quite expensive.
     I am pleased with every aspect of the WRT610N as a router but need guidance as to how to best deal with the other end of the building.
    Furthermore I would like to provide a separate independent wireless network for guests to access the internet. Can one dual band router produce two networks? One for internal use only - secured against the outside world and a separate network for guests. If not can a/the second router pull this off?
    Does this explain more?
    Thank you for any assistance

  • Encrypting vlan-trunk traffic between switches

    Hi,
    Can anyone guide me to some papers or other resources on how to encrypt traffic between 2 switches. The switchces will be connected with fiber and use dot-1q tagging. And I wan't to encrypt all of the trunked traffic.
    I was thinking of L2TP, but I haven't found any good description on how to implement this. I have two 3750 switches I thought I might use.
    Thanks for any input,
    Regards,
    Oyvind Mathiesen
    mnemonic
    Norway

    Hi,
    Thanks for the response. I had a look at MACsec and it looks good. I would have liked to employ something P2P though, to also limit the ammount of MAC addresses broadcasted on the "wire". But let me first give you an understanding of the task:
    We have two sites, connected via fibre and we want to create a VLAN trunk across and order to expand the broadcast domains to te other site.
    The IDIOT carrier, has a limitation on the number of MAC addresses they allow on the fibre service, 100.
    We also need to encrypt the datatraversing this connectivity.
    MACsec wuold work 100% exept the source and dstination MAC addresses are still sent (at least according to https://docs.google.com/viewer?a=v&q=cache:LEf2qOmYZyYJ:www.ieee802.org/1/files/public/docs2011/bn-hutchison-macsec-sample-packets-0511.pdf+&hl=en&gl=za&pid=bl&srcid=ADGEESgmAHXpDOY0RBAE-Rv1HDpu_C_gkeSPN4cv6NGgyP0M1aXVu0UqzCfxo8t_P41ep6J37k4OLKnjfp1M9hoTDHxY22WGz2h7yB7YRLyPvRUbGS8TICzvEMlG92xqbhy6RWFugmnj&sig=AHIEtbTfu0LQIJejdYidE6yzq4lpPifxjQ
    And that would cause me to eat into the 100 MAC limit.
    Ridiculous I know, but we are looking for an out-of-the-norm plan...
    Thanks

  • Optical linkup procedure between switches 3500 XL

    In our lab we have 2 switches of the series 3500 XL and 2 GBICs (850 nm). If we connect both switches directly we can see both switches via network (ping possible). If we add an DWDM device (optical/electrical multiplexer) into the optical line to extend the distance between both switches there is no connection possible between the switches it means the leds near the GBIC's don't switch to yellow or green, they do nothing. The DWDM device works correctly with GE tester. So I think it's a startup problem. My question is: it's possible to get more information about the linkup procedure ? Which logical or other sequence is minimally necessary that both switches recognize each other.
    Can everybody help me ?
    Thanks

    Hi,
    Thanks for answer. After further investigations I found out that both switches send an configuration sequence to find the other side. This sequences are constructed with /C1/, /C2/ configuration sequences according the GE standard. In case of transmission of these configuration sequences over our DWDM equipment this sequences will be sometimes destroyed so that the switches are not able to build up an logical link. The question is: how reacts the switch if it gets a wrong configuration sequence, maybe 1 sequence is lost or /c1/ and /C2/ don't change in the data stream in the demand order.
    In summary: the described problem is not an optical one, is't a problem of configuration sequence transmission in the startup phase
    Best regards

  • ?switchport protected between switches

    Hi,
    I have several 2950's and 3550's hung on trunks off a common 3550 EMI.
    Configuring switchport protected on interfaces disables L2 communications between these interfaces on the same switch.
    Can anyone tell me a sane/simple way to disable L2 between interfaces on the same VLAN on different switches?
    Thanks.

    Thanks.
    As I understand it then, all hosts connected to associated primary and secondary private vlans occupy the same ip subnet with a gateway configured on the primary vlan's svi.
    Short of replacing all switches with 3560/3750's, could I get L2 isolation by
    1. replace the 3550 at the root with a 3560 trunked to both 2950's.
    2. configure the 3560 with private primary vlan X with associated private isolated vlan Y
    3. configure all 2950 ports connected to workstations as switchport access vlan Y and switchport protected.
    4. configure the 2950 ports connected to the server as switchport access vlan X and no switchport protected.

  • How to configure two links between switches SG300

    Hello!
    I have two SG300 serie switches and two Gigabit connection between them. How do I configured these two links to work toghether like a one 2 Gigabit channel?
    thanks a lot.

    Hi Angel,
         I think what you are trying to do is called a LAG on the SG300. This option is located under the "Port Management" tab and you can manage which ports you want to be in the LAG under "Link Aggregation" and there you will see "LAG Management" where you can edit your LAG 1 with the 2 ports that needs to act as one 2 Gigabit port.
    I hope that was able to help you as that is what I have gathered from your question. Please reply back if you still need more assistance.
    Thanks,
    Brian Ng

  • Vlan passing traffic between switches

    I have a client that has two WAP321s, two Catalyst 2960s, one SG500X-48, and a Watchguard Router/Firewall (Model is not important).
    I am trying to get the guest wireless network setup to pass traffic on VLAN2 to the router across the network. All regular traffic is on VLAN1. (yes I know it really should be on a different VLAN)
    Background:  I had originally had everything working till one of the unmanaged switches died. I move one of the Catalyst 2960s to replace the dead switch and then replaced the Catalyst 2960 with a SG500X-48.
    Network layout: One WAP321 is connected to one of the Catalyst 2960s, which is connected to the Firewall/Router. (All traffic is passed as expected on both VLANS)
    The second WAP321 is connected to the second Catalyst 2960, which connects to the SG500X-48, which connects to the first Catalyst 2960, and then to the Firewall/Router. The Default VLAN 1 works fine. VLAN2 does not.
    What I have tried to do is set the ports on the second Catalyst 2960 which is connected to the WAP321 and the SG500X-48 to Trunk. I also set the port on the first Cataylst 2960 that connects to the SG500X-48 to trunk. (Although it was not set and passing traffic before moving switches around.) When I do this all traffic between the first Catalyst 2960 and the SG500X-48 stops. The Catalyst 2960 reports a port error and then shuts down the port. Only way to recover is to clear the port setting and then reboot the switch.
    Does anyone have any ideas as to what is happening and what I am doing wrong?  

    Aniketalashe
    I was able to get the port on the Catalyst 2960 set to trunk finally, not sure what did the trick, although that does not seem to be my problem.
    Back to your question of the error report. I am unable to figure out how to get the log out of the 2960. I saw the error in the webGUI, when I moused over the port in question when the problem was happening.
    I am starting to think that maybe the switch is starting to go.

Maybe you are looking for