Mysterious Blockage - 2950 & 2900XL Switches

LAN has Switch A (2900XL) connected to Router. Switch B (2950) is connected to Switch A. Both switches only have VLAN1 and each has its own IP address. Network info: 192.168.2.0/255.255.255.0.
Switch A has server 192.168.2.8 and workstation 192.168.2.226 connected.
Switch B has workstations 192.168.2.13, 192.168.2.229, and printer 192.168.2.232 connected.
Cluster management is not enabled; trunk is not enabled between switches.
Symptoms:
192.168.2.13 can not ping or tracert 192.168.2.232 or 192.168.2.229. Can ping and tracert 192.168.2.8 and 192.168.2.226.
192.168.2.229 can not ping or tracert 192.168.2.232 or 192.168.2.13. Can ping and tracert 192.168.2.8 and 192.168.2.226.
192.168.2.8 can ping and tracert everyone.
Switch B can ping everyone but can not trace ip to 192.168.2.232.
Switch A can ping everyone but can not trace ip to 192.168.2.232.
MAC Address table on Switch B is empty.
MAC Address table on Switch A is populated.
This problem didn't used to exist but don't know what changes caused it. Any ideas?

Current configuration : 2208 bytes
! Last configuration change at 16:38:55 CST Thu Feb 2 2006
! NVRAM config last updated at 15:59:41 CST Thu Feb 2 2006
version 12.1
no service pad
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
no service password-encryption
hostname ScheibMR
enable secret 5
clock timezone CST -6
clock summer-time CDT recurring
ip subnet-zero
spanning-tree extend system-id
interface FastEthernet0/1
description Community
no ip address
interface FastEthernet0/2
description Bea-II (not used)
no ip address
interface FastEthernet0/3
description Carmilita
no ip address
interface FastEthernet0/4
description Jodie
no ip address
interface FastEthernet0/5
description Nurse
no ip address
interface FastEthernet0/6
description Conference
no ip address
interface FastEthernet0/7
description Laura
no ip address
interface FastEthernet0/8
description Darleen
no ip address
interface FastEthernet0/9
description Printer (4100)
no ip address
interface FastEthernet0/10
description Behavior
no ip address
interface FastEthernet0/11
description Bea-I
no ip address
interface FastEthernet0/12
description Brenda
no ip address
interface FastEthernet0/13
description Printer (4000)
no ip address
interface FastEthernet0/14
description Donna
no ip address
interface FastEthernet0/15
description Michele
no ip address
interface FastEthernet0/16
description Susan
no ip address
interface FastEthernet0/17
no ip address
interface FastEthernet0/18
no ip address
interface FastEthernet0/19
no ip address
interface FastEthernet0/20
no ip address
interface FastEthernet0/21
no ip address
interface FastEthernet0/22
no ip address
interface FastEthernet0/23
no ip address
interface FastEthernet0/24
description Scheib MH Switch
no ip address
interface Vlan1
ip address 192.168.2.3 255.255.255.0
no ip route-cache
ip default-gateway 192.168.2.2
ip http server
snmp-server engineID local 800000090300000AF4FABF01
line con 0
line vty 0 4
password
login
line vty 5 15
password
login
ntp clock-period 17179909
ntp server 128.249.1.1
end

Similar Messages

Cisco 2950 l2 switch console problen

Hi all, I got 2 old Cisco 2950 catalyst switch yesterday. But when I try to open console of both switches I am getting only blank terminal. I tried to open with putty and scureCRT, I tried another console cable, tried on another PC, but no luck.
I think previous owners might have disabled console. So is there any other way to take console or delete start-up conf file??

Hello,
I don't have a 2950 around to test, but as far is I know disabling the console is achieved issuing the "no exec" command on the console line, so it is a command in the start-up config. Therefore booting the switch in the rescue image should not take into account that command, so the console should be available in that mode. Have you tried that? To do so hold down the MODE button located on the left side of the front panel, while you reconnect the power cable to the switch. Release the Mode button after approximately 5 seconds when the Status (STAT) LED goes out. When you release the Mode button, the SYST LED blinks amber.
Here is the rest of the procedure:
http://www.cisco.com/c/en/us/support/docs/switches/catalyst-2950-series-switches/12040-pswdrec-2900xl.html
PS: I presume you are using the correct COM port and terminal settings, however I mention them bellow just to make sure:
Bits per second (baud): 9600
Data bits: 8
Parity: None
Stop bits: 1
Flow Control: Xon/Xoff (or none, in some documents)
You can check if you are using the correct COM port in System Tools/Device Management if you are using a Windows device.
If this doesn't work check if the flash card can be removed (not sure on that old model), perhaps you can use it in other device and delete the startup config.

Implementing Firewall behind Catalyst 2950 SI Switch

Hi,
Current Scenario:
2 x 3700 series routers in active-standby configuration (HSRP) . They are implementing IOS SLB and NAT.
Behind these a 2950-24 switch. This box has only the Standard Image.
Behind this again are a number of Windows servers requiring protection.
Requirement:
Implement Firewall Solution with SonicWall in order to protect a subset of these hosts.
Questions:
1. Can the Firewall be 'hung' off the switch and create port-based VLAN's?
2. Would this involve sub-interfaces on the Firewall? I read in SonicWall doc. that with appropriate Firmware upgrade, it can implement sub-interfaces, but requires a 802.1q-capable switch.
3. Leading on from 2., I believe 2950-24 cannot run 802.1q since it runs only a Standard Image(SI), according to CCO. Is this true?
4. Any other advice appreciated.
Thanks again.

Hi,
Yes you can, create two VLAN's on the switch, say 20 and 30. Assign ports for external firewall interface and routers on vlan 20. Assign ports for servers and internal interface on firewall on vlan 30.
You should not not need sub-interfaces as the firewall will have a separate external and internal interface.
Let me know if I have pointed you in the right direction or if I not gotten the right end of your question.

Booting a 2900XL switch from TFTP

Hello,
Is there any way to boot the ios for a catalyst 2900XL switch from a tftp server ?
The switch doesn't seem to support directly booting from tftp but I heard something could be done with a helper image of some sort.
Sorry if I misplaced the question, but this seemeed the only reasonable forum to place it.

Dont worry.. u r on right forum :-))
Its doesnot support the TFTP boot and there is not other way you boot this switch.
Sorry, you wont be able to bbot the switch from TFTP.
HTH,
-amit singh

Cisco Prime 2.1 - Collection Failure 2950 Series Switch

Hi All,
I am trying to add various devices in the Cisco Prime Infrastructure 2.1, but with the followings I get a message: Collection Failure (Inventory Collection Status).
Cisco Catalyst 2950 24 Switch
Cisco Catalyst 2950G 24 EI DC Switch
¿Why I can't sync this devices?
Kind Regards!
JEFFERSSONQG

Leo,
I think you are not correct ...
( to be truth - I hope it ;- ) )
in PI 2.2 the Cat 3550 is listed under the supported devices whereas the Cat 2950, 2955 are not:
http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-2/release/notes/cpi_rn.html#pgfId-43885
But the latter are listed as being supported in PI 2.1 (while the Cat 3550 is not...)
http://www.cisco.com/c/dam/en/us/td/docs/net_mgmt/prime/infrastructure/2-1/supported/devices/pi21-supported-devices-list.xlsx?mdfid=284540974
So hopefully it is just a matter of time to get them ALL on the list of supported devices for the current version of PI 2.2 ...
I just saw that for Prime Network (Management SW for Service Providers) they even have Cat 3500XL on the list of supported devices... (but I do not know for which type of management they do support these devives, e.g. config, alarming,etc)
http://www.cisco.com/c/dam/en/us/td/docs/net_mgmt/prime/network/4-2/supported/vnes/CiscoPrimeNetwork-4-2-SupportedCiscoVNEs.pdf

802.1x "MachineorUser" Auth Mode strange behavior in 2950 & 3750 Switches

Good Day Support Team around the world,
Having started recently tests with 802.1x in a lab environment, I noticed a strange behavior related to authentication. First let me provide you with the network components I used.
supplicant:                    domain-joined laptop with Windows XP SP3 802.1x embedded client
authenticator1:              Cisco 2950-24
authenticator2:              Cisco 3750-24
authentication server:     MS NPS Windows Server 2008
1.     In the first scenario with 3750 switch when I connect the laptop to relevant port the machine authentication is successful. Then I try to login with a domain account and again the authentication is completed without any problem. Then I log off and user authentication is revoked and the machine authentication is used again without any issue. When I try to login again as local user the authentication fails as expected but the port remains disabled (port blinking amber) regardless the fact that port is configured for Auth-Fail Vlan. When I log off then the machine authentication is used again and the access is granted.
2.     In the second scenario with 2950 switch as authenticator, I follow the same steps as before and when I try to login as local user the authentication is failed and the port is assigned the Auth-Fail Vlan (as expected based on configuration). However when I log off it seems that the 2950 switch still use the Auth-Fail Vlan for that port and never authenticates again for machine authentication.
Could you please let me someone know if this is normal ( I suppose no). Please find attached the relevant debug output from the second scenario.
Thank you!!!

Hi,
basically what happens is that the maximum EAP packet size for communication between client and RADIUS server is negotiated. Therefore, in your case the switch notifies NPS that the client is capable of handling packets up to 9000 bytes in size.
EAP messages, especially those containing the server certificate, are usually bigger than 1500 bytes and arrive at the switch in multiple fragments:
Mar 6 15:50:11.881: RADIUS(0000002C): Received from id 1645/41
Mar 6 15:50:11.881: RADIUS/DECODE: EAP-Message fragments, 253+253+253+253+253+253+253+253+20, total 2044 bytes
Having learned that 2044 bytes is acceptable for the client, the switch forwards the full message in one chunk, but since your client is likely to have set the interface MTU to 1500, the packet is oversized and never reaches its destination.
And yes, I think changing the System Jumbo MTU to 1500 bytes would lead to the same result. If my memory serves me right, a new setting takes effect only after a reboot, so I'd suggest giving it a go in your lab first.
Best regards,
Josef

HOW TO DISABLE WEB CONSOLE IN A 2950 CISCO SWITCH

HOW TO DISABLE WEB CONSOLE IN A 2950 CISCO CATALYST SWITCH ?

I have disabled HTTP access but enabled HTTPS access on my switches.
switch(config)#no ip http server
(this will disable web or http access)
switch(config)#ip http secure-server
(this will enable https access or no ip http secure-server will disable https access)

Multicasting across 2948 and 2950 L2 switches

multicasting across the following routes yeilds different results:
2950---3508---6506---3508---2950 22mins
2950---3508---6506---3508---2948 146mins
2950---3508---2950 22mins
Is there an issue with 2948 switches?
TIA.

I'm going to try the following route:
2948---3508---2948

Cisco Architectures for 2950/2960 Switches and 2800 Routers

Hello,
I have a question regarding the architectures of these three series, i.e. the type of switch fabric they use and the general architecture (first, second, or third generation regarding the sharing of the bus, memory and the type of switch fabric). We have so far learned these three generation and our assumption is that the only generation being produced now is the third (crossbar) generation, but so far we have to information to back up this claim. We are doing a study on buffer sizing in edge routers/switches so knowing the exact architecture of each model is our priority.
Thank you for reading and thanks in advance for the answers.

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Exact details on Cisco switch and/or router architecture can be hard to come by, as much of the information, Cisco appears to consider proprietary.
Most switches have some kind of cross bar architecture. Overall bandwidth tends to be higher in later variants (to support higher port densities and/or higher bandwidth ports). Later switch architectures are less likely to block at ports. However, there are often other architecture changes which may improve or worsen performance. For example, 2960 tends to have more fabric bandwidth than the 2950, but the 2960 has different port buffer management (I believe) from the 2950, often resulting in more port drops with bursty traffic.
True routers, like the 2800 series, I believe use a PCI bus, with additional bandwidth restrictions to the modules. They will well support the WAN bandwidths they are recommended for, but they do not well support LAN port bandwidths. Again, specific architecture details can be hard to come by.

Cisco-2950-24 switch

Hi
i m facing problem in particular one switch.In clustering environment of same series of switches (Catalyst 2950G-24-EI Switch ),if i put a particular one switch my network got jammed and all the switch LED blink very fastly & when i remove this particular switch everything is normal.
so plz help me , is this problem due to this particular switch and plz tell where is problem too.
thanx in advance

yes its working fine,with standalone but when i cascade with other switch .all the switch LED blinking very fast and Jam the traffic
also there is no other redundatn link,just only its is connected with other switch by gigabit port.
Thanx

Catalyst 2950 Switch flash_init error

Hi Everyone,
I'm new to Cisco products and have a small home lab set up. I have a Catalyst 2950 switch that I would like to restore to factory defaults. Here is the issue I'm having and can't figure out.
I pull the power, telnet into the console port, hold the mode button and restore power. The boot loader (Version 12.1(11r) starts and says the usual message the system was interrupted prior to flash initialization (Paraphrasing here)
I get to the switch: command line, enter flash_init. Flash states it initialized and then all I get is a < with an underscore under it prompt. Anything I try to type comes up as bizarre characters and I can not get back to a switch: prompt unless I reboot the switch manually. Unsure of what to do here.
Thanks in advance!
-Matt
Telnet session:
C2950 Boot Loader (C2950-HBOOT-M) Version 12.1(11r)EA1, RELEASE SOFTWARE (fc1)
Compiled Mon 22-Jul-02 18:57 by antonino
WS-C2950T-24 starting...
Base ethernet MAC Address: 00:06:52:bb:c9:40
Xmodem file system is available.
The system has been interrupted prior to initializing the
flash filesystem. The following commands will initialize
the flash filesystem, and finish loading the operating
system software:
flash_init
load_helper
boot
switch: flash_init
Initializing Flash...
flashfs[0]: 4 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 7741440
flashfs[0]: Bytes used: 3726848
flashfs[0]: Bytes available: 4014592
flashfs[0]: flashfs fsck took 7 seconds.
...done initializing flash.
Boot Sector Filesystem (bs:) installed, fsid: 3
Parameter Block Filesystem (pb:) installed, fsid: 4
õíííííí <---These characters appear no matter what keys I hit.

Hi mattymattlynch
Check the workaround on the following documents:
http://www.cisco.com/c/en/us/support/docs/switches/catalyst-2950-series-switches/41845-192.html
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2950/software/release/12-1_22_ea11x/configuration/guide/scg/swtrbl.html
If no luck , the flash might be corrupted and requires a replacement.
Hope this helps
-Randy-

Catalyst switch model 2950 series need ios image flash is unable to load.

Hi, i'm in need of ios image for cisco 2950 series switch, because when its boots up its shows me a error message, Error loading "flash:c2950-i6q412-mz.121-13.EA1.bin"

when switch gets reload its show me this message.....
Xmodem file system is available.
Initializing Flash...
flashfs[0]: 1 files, 1 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 7741440
flashfs[0]: Bytes used: 1536
flashfs[0]: Bytes available: 7739904
flashfs[0]: flashfs fsck took 4 seconds.
...done initializing flash.
Boot Sector Filesystem (bs:) installed, fsid: 3
Parameter Block Filesystem (pb:) installed, fsid: 4
Loading ""...: permission denied
Error loading ""
Interrupt within 5 seconds to abort boot process.
Boot process failed...
The system is unable to boot automatically. The BOOT
environment variable needs to be set to a bootable
image

DHCP on Cisco Catalyst 2950 Switch

Hello
I need to configure my cisco catalyst 2950 series switch in order to act as DHCP server for devices connected to its ports.
Please say me, how to do that ?
Thank you
Narek

Please find the sample DHCP configuration for one of the VLANs.
Interface Vlan1
description Cisco DHCP
ip address 10.10.2.1 255.255.255.0
ip dhcp pool cisco
network 10.10.2.0 255.255.255.0
default-router 10.10.2.1
domain-name mydomain.com
dns-server 10.10.2.10
netbios-name-server 10.10.2.15
lease 7
A 24 hour lease is the default if left out and the netbios-name-server is WINS in the Windows world.
If you want to use DHCP server for other VLANs as well create similar DHCP pools and assign the DG to the corresponding VLAN interface IP.
HTH, rate if it does
Narayan

Does 12.1 support ssh in 2950 and 3550

Hi,
We have 2950 and 3550 switches running IOS version 12.1
In this version can we implement ssh access?
Regards
SKRAO

Hi Rao,
The following images support SSH on 2950 24 switches.
12.1(22)EA9
12.1 doesn't support SSH for 3550 24 switches.The following images support SSH on 3550 24 switches.
12.2SEE
12.2SED
12.2SEB
Hope it helps you.
Thanks,
satish

LAN design - how to implement a core switch?

Hi all,
First post here so please be gentle :-)
I'm looking for a bit of advice with a LAN setup I've been tasked with.
The basic requirements are to have a demonstration suite of servers/storage devices networked with internet access with certain devices segmented in different VLANs. Also, a separate VLAN is required for training and meeting rooms which will receive DHCP addresses from a WIN2K3 server.
The kit I've inherited consists of:
1 ADSL Modem/Router
1 2611XM router
2 Catalyst 4006 switches with Supervisor II engines (CatOS :-( ), one with a layer 3 routing module
Several Catalyst 2950/3500xl switches
Netscreen 100 Firewall
F5 Firepass for VPN
After a lot of fun resetting devices I've currently setup the LAN with a router on a stick configuration which routes between different VLANs (on the 3500/2950s) and which has internet access via the 2611 and ADSL modem router in turn. That's about as far as my current knowledge goes I'm afraid!
What I have to do is incorporate the 4006s but I don't really know how to go about it or what's the best way to use them. How would I use them as core switches?
I was hoping someone could point me in the right direction on the best way to connect the switches up, i.e. network design, cabling (fibre uplinks between switches) and some basic configuration advice with the layer 3 routing module.
Any advice will be most appreciated!! It's my first networking job and I'm a bit lost.
Thanks.

Peter,
I would do the same - with a twist...
Have 1 4006 as a VTP server, also the spanningtree root for all vlans.
Have a trunk between the two 4006's - and make it an etherchannel 2 or 3 ethernet links (redundancy).
Make the second 4006 also a vtp server (redundancy) and have that 4006 the secondary 4006 for spanningtree (more redundancy!)
That way if you decide to have a distribution layer - you have 2 uplinks into the core 1 into 4006-1 as the primary, and the second 4006-2 as the secondary.
You could then have a trunk (etherchannel) between the distribution switches, then have a access layer into the distribution layer with duel links. This way you could have multiple switch and or link failures and still work!!!
You use the layer 3 module to do the inter-vlan routing - correct. Then have your adsl modem/router as the gateway to the internet - you put a default route in the layer 3 module point to the adsl modem! then you have the routes for the various vlan subnets pointing from the modem back to the layer 3 module......done!
HTH.

Mysterious Blockage - 2950 & 2900XL Switches

Similar Messages

Maybe you are looking for