Migration of users in different vlans of 3750 Switches

I have 30 switches of access (3750). I require To migrate 1200 users connected to this switches of vlan 1 (172.23.8.0 /22) to vlan 2 (172.23.52.0 /22). They changed in server DHCP the rank 172.23.8.0 /22 to 172.23.52.0 /22. ¿In this case the only solution is to change the ports of switches of vlan 1 to vlan 2?. Can i configure 2 vlans in the ports of switches 3750?. What you recommend to make this migration in the efficient form?

well you could use the command interface range fastehternet 0/1 - 48 (change the command according to your ports) and then execute the switchport access vlan 2 command.
Like this all the ports will be changed in one shot. When to do it.....well during a weekend.
The biggest problem is see is that the workstations have to get a new IP address from DHCP after the migration so i suggest that you put the lease expiration to one day. Like this all the workstations will ask for a new ip address every day and after the change to vlan 2 they will ask an ip and everybody will have connectivity and it should be transparent for the user than.
FYI A switch port can always only belong to a single vlan or it has to be a trunk port to support multiple vlans what is not recommended in your situation.
Yves
rate this post if it helped
Yves

Similar Messages

Is there a way to migrate AD users to different domain?

Hello SharePoint Fam,
I have a 10,000 user environment and these users are spread across 15 different domains. Our data/network team are beginning to migrate and consolidate our environment down to one domain. We did a test and had them migrate a couple of accounts
to different domain and confirmed that this breaks the user access. Is there a script or recommendation that I could use to migrate specific users to this domain? This new domain is still under the same forest
Thanks n advance,

Hi,
According to your description, my understanding is that you want to migrate AD users to another domain.
The tool you need to migrate users between domains is ADMT (Active Directory Migration Tool) which will migrate users, groups, and computers.
After that, we need to use Move-SPUser to migrate the users to new accounts:
$user = Get-SPUser -web http://my.website.url -Identity DomainA\UserA
Move-SPUser -IgnoreSID -Identity $user -NewAlias 'DomainB\UserA'
More references:
http://technet.microsoft.com/en-us/library/ff607729(v=office.15).aspx
http://localhost25.blogspot.com/2012/06/sharepoint-2010-migrate-users-with-move.html
http://blogs.msdn.com/b/sowmyancs/archive/2012/01/07/migrate-users-groups-powershell-script.aspx
Thanks,
Victoria
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Victoria Xia
TechNet Community Support

Native vlan on 3750 switch

Is it possible to configure AAA and EAPFAST on a 3750G switch to use a vlan other than vlan1 for management/native vlan? We are working with RADIUS on Server 2008.

Hi John,
Yes, you can do that.
On 3750 you can take a look at the feature called 802.1x Authentication with VLAN Assignment:
http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst3750/software/release/12.2_52_se/configuration/guide/sw8021x.html#wp1289244.
Basically, you define on the RADIUS server what VLAN each User (or User Group) you want to assign, then when the user connects the PC to the port, it authenticates and the RADIUS server returns the required attributes for VLAN assignament to the switch. The switch interprets them and changes the switchport to the configured VLAN.
The switch will be a simple man-in-the middle during authentication and only processes the RADIUS Reject (if authe fails) or RADIUS Accept (if authe passes).
The authentication methods like EAP-FAST must be agreed between the RADIUS server (AAA Server) and the PC (AAA supplicant).
If you want to authenticate users based on certificates you have to use either EAP-FAST, EAP-TLS or EAP-TTLS.
The most widely spread (which comes by default on WinXP machines) authentication method is PEAP which uses MS-CHAP (username/password) to authenticate users.
HTH,
Tiago
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

VLAN on 3750 switch

I am trying to create a SVI on a catalyst 3750 switch but when I do a show int vlan , it indicates the line protocol is down.What could ve the problem and how do I get it up?
Here is my config:
Switch#vlan database
Switch(vlan)#vlan 700 name Management
Switch(vlan)#exit
Switch#conf t
Switch(config)#int vlan 700
Switch(config-if)#ip address 172.16.1.1 255.255.255.0
Switch(config-if)# no shut
Switch(config-if)#^z
What did I do wrong and whatz the way forward ?

Hi Friend,
It will remain in line down state till the time you ceate any active port for that vlan.
Suppose you craete SVI for vlan 700 you have to assign any physical port to that vlan or else create a trunk port and allow that vlan on that trunl and the line protocl will come up.
So in short any SVI should have a physical port assignment or there should be an active trunk for that vlan.
HTH, if yes please rate the post.
Ankur

Same SSID, different vlans

I currently have a 4402 in place, with my main office building working fine.
We are looking at bringing in the wireless at 4 other sites, but we want to use the same SSID.
How would I go about assigning different vlans (networks) to the same SSID.

You can use the "AAA Override" feature on controller. You need to have different dynamic interfaces for different vlans configured on the controller. After sucessful authentication, radius server could pass the dynamic interface information to the controller and controller can put users to different vlans according to the feedback from radius server:
http://www.cisco.com/univercd/cc/td/doc/product/wireless/control/c44/ccfig40/c40sol.htm#wp1086421
Zhenning

PEAP Windows Logon -Machine & User Authentication -Multiple VLANS

Windows Client <==> Access Point <==> Radius <==> Windows DC/AD
Windows OS : XP Client SP 2
Supplicant : Built-in Wireless Supplicant
Authentication : 802.1x PEAP(MS-Chapv2)
Access Point : Aironet 1200
Radius : ACS 3.3
Adaptors : Built-in
CA : Microsoft
I have a single SSID and am using a RADIUS server to assign users to different VLANs. When a computer boots up, machine authentication is used and the ACS tells the access point which VLAN to be on (i.e. VLAN1 192.168.1.x). Then when the user logs on the ACS tells the access point to switch the computer to a different VLAN (i.e. VLAN2 192.168.2.x). The problem is that the windows logon scripts do not run. Once the computer finishes booting, I quickly check its IP address and it still thinks it is on 192.168.1.x (VLAN1) when it is actually on VLAN2 and needs a 192.168.2.x address. If I give the machine time, it will eventually switch its IP to the 192.168.2.x address.
Has anyone else run across this? I assume that there is no fix and that it is a Microsoft problem. Obviously, it can't do the logon script if it does not have a valid IP for its VLAN. I also never know who will be logging into the computer to put the computer in the correct VLAN ahead of time.
Note: If the machine and user are both set to use the same VLAN, the computer does not have to switch IPs and the windows logon script works fine.
Thanks
Steve

Hi there.
I've tried that solution, and I had a similar problem. My problem was on the DHCP server side: there was a superscope defined with the different scopes for each VLAN. When I'd the MAC Address from one machine registered at the DHCP database, the settings were always the same. Then I deleted the superscope and only defined scopes for each VLAN. It's working fine now.
Hope this helps you.
Regards,
João

Does WCCP support traffic from different VLANs(mapped to VRFs)?

Hello,
I have the following scenario from the WAN to the Data Center and from the WAN to the Branch:
1. Router 2800/7200 with three (3) MPLS VRFs (VRF Lite)
2. Switch 3750 with three (3) WAN VLANs (one for each VRF) and three (3) LAN User Traffic VLANs (one for each ASA Context) and one WAE VLAN
3. WAE with WCCP enabled for one VLAN in the switch
4. ASA with three (3) Contexts
5. Three (3) Internal LANs (one for each Context)
In summary, there are three flows of traffic which are separated along the way from Branch to Data Center. WAEs are working for one VLAN(VRF1) and WCCP is enabled at the 3750 Switch to do the redirection (not in the router). The question is: does WCCP support traffic from different VLANs (similar to inline 802.1Q) and handle all three flows separate? If so, what should the configuration be at the switch and the WAE?
Thanks.

The VRF awareness for 12.4(T) is still probably 8-12 months out. VRF aware WCCP features are definitely in the pipeline, but nothing has been publically published on availability timelines.
It's now publically available on the forum... but , I've only found it on the 3750 and 3550 documentation.
at the 3750 you will need to place the redirect statement on each of the VLANs, ip wccp 61 redirect in
Kindly find here GRE Tunnel with VRF Configuration Example:
http://www.cisco.com/en/US/tech/tk436/tk428/technologies_configuration_example09186a00801e1294.shtml
I have gotten as far as the WAE registering the router:
"WCCP configuration for TCP Promiscuous service 61 and 62 succeeded.
WCCP configuration for TCP Promiscuous succeeded.Please remember to
configure WCCP service 61 and 62 on the corresponding router."
wae01#sh wccp router
Router Information for Service: TCP Promiscuous 61
Routers Configured and Seeing this Wide Area Engine(1)
Router Id Sent To Recv ID
0.0.0.0 209.1.1.1 0000022F
The router registers the WAE as a WCCP client:
router04#
"*Feb 4 18:56:09.892: %WCCP-5-SERVICEFOUND: Service 61 acquired on WCCP
client 209.1.1.2"
"*Feb 4 18:56:09.892: %WCCP-5-SERVICEFOUND: Service 62 acquired on WCCP
client 209.1.1.2"
The router however cannot figure out what its ID is and does not see
itself as a WCCP group router.
router04#sh ip wccp
Global WCCP information:
Router information:
Router Identifier: -not yet determined-
Protocol Version: 2.0
Service Identifier: 61
Number of Service Group Clients: 1
Number of Service Group Routers: 0
Total Packets s/w Redirected: 0
Process: 0
Fast: 0
CEF: 0
Redirect access-list: ACCELERATED-TRAFFIC
Total Packets Denied Redirect: 0
Total Packets Unassigned: 25957
Group access-list: -none-
Total Messages Denied to Group: 0
Total Authentication failures: 0
Total Bypassed Packets Received: 0
This is a short summary of important commands for working with VRF's.
View the VRF instances and the associated interfaces.
ml-mr-c6-gs#show ip vrf
Name Default RD Interfaces
blurvrf 100:2 Vlan215
Vlan326
tgvrf 100:1 Vlan132
Vlan325
TenGigabitEthernet1/1
ml-mr-c6-gs#
Show the routing table for a specific VRF.
ml-mr-c6-gs#show ip route vrf tgvrf
Routing Table: tgvrf
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external,
---More--
Gateway of last resort is 128.117.243.57 to network 0.0.0.0
O E2 192.52.106.0/24 [110/1] via 128.117.243.57, 1d19h, Vlan325
O E2 192.168.150.0/24 [110/160] via 128.117.243.57, 1d19h, Vlan325
172.17.0.0/29 is subnetted, 3 subnets
O E2 172.17.1.16 [110/0] via 128.117.243.57, 1d19h, Vlan325
O E2 172.17.1.8 [110/1] via 128.117.243.57, 1d19h, Vlan325
O E2 172.17.1.0 [110/1] via 128.117.243.57, 1d19h, Vlan325
--More--
Debugging should otherwise be similar to a regular switch or router.
Final Teragrid VRF Design and Diagrams
http://www.cisl.ucar.edu/nets/devices/routers/cisco/vrf/final.shtml
Teragrid Testbed Design
http://www.cisl.ucar.edu/nets/devices/routers/cisco/vrf/testbed.shtml
Cisco 4500 Series Switch Cisco IOS s/w config guide 12.1(20)EW
Configuring VRF-Lite
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.1/20ew/configuration/guide/vrf.html
sachin garg

Exchange Migration 2010 to 2013 different AD domains....

Here's my situation, I have migrated our users AD accounts to a new domain (newDomain.corp), but still use the exchange server in our old domain (oldDomain.corp) with linked mailboxes, which work fine.
I am now to the point where I want to decommission our old 2010 exchange server in the old domain, or at least have the users mailboxes on a new Exchange 2013 box belonging to the new domain.
I am looking for the best way to migrate the users mailboxes from the EXCH01oldDomain.corp (2010 Exchange server) to the new exchange 2013 server EXCH01.newDomain.corp, yet still have both servers online serving mailbox roles for users for a limited
time. So basically, can i have 2 exchange servers from different domains serving the same users in newdomain.corp?
Free busy and calendaring all have to work.
Thanks!
richard

Hi Richard,
Please make sure the two-way trust between the new domain and old domain has been set up.
Generally, when we run New-MoveRequest cmdlet to move a mailbox from an Exchange source forest (Old domain) to an Exchange target forest (New domain), the target forest must contain a valid Mail-Enabled user account with the set of AD attributes.
Since the mailboxes in old Exchange 2010 are all linked mailbox
which have Mail-enabled user accounts in new forest, we can directly move the mailbox from old Exchange 2010 to new Exchange 2013.
We can use the Prepare-MoveRequest.ps1 script with the -UseLocalObject to move mailbox with the existing AD account in new domain:
http://technet.microsoft.com/en-us/library/ee861103(v=exchg.150).aspx
Regards,
Winnie Liang
TechNet Community Support

Migration assistant doesn't migrate all user files

I Wanted to do a semi clean install, so I decided to erase everything and install a fresh OS X Yosemite.
i Used migration assistance to only migrate my user account and all its files. Everything seemed to work fine, until I realized I was missing things. Some fonts were not copied over (/User/name/Library/Fonts) and most of my music was not copied over (~/Music/iTunes etc.). The only music that seemed to transfer were ones I purchased from iTunes or imported recently (with the latest iTunes). I got fed up with the entire process and didn't do any more investigation or debugging and am now doing a full restore from time machine. Luckily I have two time machine backups... Can't always assume everything will go correctly (one time machine is stuffed as it was preparing to backup my new installation with lost user files).
has anyone else had the same problems?
As a note I was able to locate those fonts manually on one of the time machine backups but it said the links we broken (they must be aliases) but since I knew the absolute path I could find them. Maybe that's part of the problem? Also I wonder if user permissions (eg ownership) could affect the restore user account process...
Ps: Apple this site ***** on my iPad mini. Fonts are way too small!

I did exactly that
If so, that would have been Setup Assistant, not Migration Assistant. From the sound of it, I'm not so certain that is what you did. They are very similar, but may produce different results. Setup Assistant appears on the first boot of the new Mac. It is generally far more problem free than Migration Assistant. If you select the option to migrate later you get MA. Have you checked to see if you don't now have another User where all your settings now reside. This can be the result of using MA.
If you didn't use SA on the first boot, it might be far less time consuming and aggravating to simply reinstall the OS and the bundled apps. This will produce a brand new option to use SA on the first boot.

Same colour profile, but different users have different colour output!

Installed Snow Leopard on a new Mac mini. Migrated two users from a Leopard install, made one fresh user.
Sticking with the default profile for my monitor (HP 2159m), the freshly-made user matches the colour at the login window. The two migrated users, despite having the same profile selected, show darker colour than this. What gives?!
Tried the guest account, and that matched the login window too. Can only assume this is a preferences issue or something, but having deleted some likely-looking plists (~/Library/Preferences/com.apple.ColorSyncCalibrator.plist, ~/Library/Preferences/com.apple.ColorSyncUtility.plist and some .GlobalPreferences files in ~/Library/Preferences/ByHost/), nothing has changed. These two users still have odd colour.
You can watch it change. The new user will stay the same from the login window while the Finder loads, but for the migrated users the colour noticeably darkens immediately after the login window disappears. I'll reiterate: System Preferences claims they've all got the same profile selected.
Any ideas?

In case anyone else finds this, I discovered the root of my problem.
The users with the odd, inconsistent colour profiles had got "Increase Contrast" turned on in Universal Access. Both only slightly, both by the same amount. Highly suspicious, as I know these different users had not changed this setting. Wonder if it's a migration problem. Anyway, colour is now consistent.

Re:Can't able to access shared folders from different VLANs in SG300 series switches

Hi All,
I supplied 3 numbers of SG300 series switches for the sole reason to have inter-vlan routing. I created 4 VLANs in the switches and made one switch as Layer 3 switch and other 2 as Layer 2 switch. Inter-Vlan routing is working fine. I am able to ping PCs from different VLANs. But I am not to access shared folders. Customer has installed Window 2003 server installed and it is in VLAN 1. There are some folders created in this server and it is very important for users to have access to the folders.Also, I am not able to access shared folders in other VLANs. I have created a case with Cisco small business and I got a reply saying that the switches will not support shared folder feature, which I think is not real. I am getting a very time to implement this solution in the network. I have a Sonicwall firewall after Core switch which is connected to ISP.
ISP<----->Sonicwall FW<----->Core Switch<------>Layer 2 switch<------>Layer 2 switch
Kindly help me out to resolve this issue.
Regards,
Prashant K

Hi Prashant,
I think you're running into a Windows firewall issue. SMB file sharing, by default I believe, is only allowed on your local subnet. Please try disabling windows firewall on the computer hosting the shared folder, then see if you can access the shared file.
Best,
David
PS: It looks like this post got published twice. You can delete the other one using the task bar on the right.
Please remember to rate helpful resonses and identify correct answers.

Migrating a user

I posted this in the Tiger forums, but thought I would also post this question here:
My husband and I have 2 powerbooks. His is experiencing cursor freezes and it is frustrating. As an interim solution (and as a backup), I am going to migrate his user files from his pb to mine as a separate user.
My question: each of us has the identical (or as close to identical) iTunes library on each of our computers. I do not plan on migrating his library to my powerbook when I can place my iTunes library into the shared folder (and the fact that there is no room for another 20 gig of music).
He has different ratings, different play lists, etc that he syncs with his iPod. What files do I need to copy from his iTunes folder so that he has access to his ratings and play lists?
Any help is always appreciated!

A couple of additional posts I've found:
http://social.technet.microsoft.com/Forums/lync/en-US/5d67a5fc-8b4e-430b-872b-bfe7ac46fad0/migration-ocs-r2-users-to-lync-enterprise-failed?forum=ocsplanningdeployment
There's a related one out there where there was simply a typo in the merged topology for the OCS name.
And then there's this:
http://d1it.wordpress.com/2013/10/28/dcom-move-lync-user/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Hi, i have a MB Pro Intel C2D with Lion OS and i migrated the user to another MB Pro i5 Lion, after migrating I'm having a problem on Safari, it won't open and just crashing

Hi, i have a MB Pro Intel C2D with Lion OS and i migrated the user to another MB Pro i5 Lion, after migrating I'm having a problem on Safari, it won't open and just crashing

Shouldn't be having a problem, then. That's the version for ML. Try taking your question to the Safari forum - https://discussions.apple.com/community/mac_os/safari - that's where all the Safari experts hang out.
Clinton

I have two users with different music on each itunes and i can only use one library, how do i use both for one iTouch?

i have two users with different music on each itunes and i can only use one library, how do i use both for one iTouch?

Chris, I believe this link may have the information you're looking for. Welcome to discussions!
http://docs.info.apple.com/article.html?artnum=300432

How do you update software when there are multiple users with different (unknown) apple ID's?

We are a college with different users borrowing 'loaner' Macbooks.
several users with different ID's have installed software that is now tied to that Machines serial number, and cannot be updated or removed apparently. We are trying to update iPhoto for use with iBook author, but it was installed by an unknown user and cannot be removed.

The only practical solution is to wipe and re-provision the units when they're returned.

Migration of users in different vlans of 3750 Switches

Similar Messages

Maybe you are looking for