Port Groups on Multiple switches

Is it possible to create a port group that contains ports from multiple physical switches. We are using Catalyst 3500 series switches that are connected to a Catalyst 6509 running layer 3.

The Etherchannel do not HAVE to be on the same switch.
You may configure an etherchannel between 3 physical switches :
cf http://www.cisco.com/en/US/products/hw/switches/ps5023/products_configuration_example09186a00806cb982.shtml
a document called "Cross-Stack EtherChannel on a Catalyst 3750 Switch Configuration Example"

Similar Messages

VMware ESX Cluster Port Groups not Replicated as Network Sites in SCVMM 2012 Logical Switch

To whom it may concern,
We have added our ESX 4.1 Update 2 Cluster that's being managed by VMware vCenter to SCVMM 2012 because we want to create a private cloud and use the resources of the ESX cluster. SCVMM is replicating all the vSwitch from the ESX cluster as a logical network
but it's not replicating the port groups on the vSwitch as Network Sites associated to the Logical Network.
May you please advise or confirm that this is the normal behaviour of SCVMM? Or is there any way that SCVMM would be able to recognize the port groups associated to the ESX vSwitch and replicate it a a Networks Sites associated to Logical Switches?
Your prompt response will be greatly appreciated.
Thanks in advance!

Hi Graham,
Thanks for your reply.
I understand that we need to configure the port groups in the vCenter server but SCVMM is only replicating the vSwitch as a Logical Network but not the port groups. It should also replicate the port group as a network site associated to the logical network.
On our VMware environment, we have port groups on different VLANs and being mapped to one physical NIC. When creating a VMware VM in a private cloud with a self-service user role we can't select the option to connect the port group that we've created from
the vCenter server. The only option it gives is the logical network (vSwitch) not the port groups within that logical network (vSwitch). Even if we create network site within the logical network (with assigned VLAN) in SCVMM, it randomly selects the port group
within the VMware vSwitch when we create a VM. We need the users with a self-service role to be able to select the port group from our vSwitch to assign the virtual NIC of the VM to a specific port group. In this way, they don't have to call or email us to
assign the VM to a port group.
I still don't understand why SCVMM does not map the port groups we've created from VMware vCenter server with user that has a self-service role. Is there any other way so that we can map the port group automatically to SCVMM?
Please advise. Thanks!

Channel-group on 2 switches

I have 2 Catalyst 3560 24-port switches (call them switch-a and switch-b). They are linked together with a patch cable and not stacked (the c3750 is stackable but not the c3560). Is it possible to have a port-channel group with 2 ports, where one port is on switch-A and the other one is on switch-B? If not, is it possible if the 2 switches were stackable like the c3750 switches? Many thanks in advance. -Sam

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
As Jody already noted, 3560 (not stackable) no, 3750 (stackable) yes.
Other Cisco stackables, such as the 3650 series, 3850 series and 2960S (and later) series, also allow port channels across multiple physical switches (when stacked).
But, beyond stackables, you could also have a port-channel across two Cisco physical switches, if they were a VSS pair (one logical device, so much like a stackable) or Nexus pair (two logical devices). The latter's vPC (virtual port channel), is the "interesting variant", as, in theory (?) it could be implemented on something like a 3560 or other non-stackable switches, but don't hold your breath. ;)

Static nat and service port groups

I need some help with opening ports on my ASA using firmware 9.1.2.
I read earlier today that I can create service groups and tie ports to those. But how do I use those instead of using 'object network obj-ExchangeSever-smtp' ?
I have the ACL -
access-list incoming extended permit tcp any object-group Permit-1.1.1.1 interface outside
Can this statement
object network obj-ExchangeSever-smtp
nat (inside,outside) static interface service tcp smtp smtp
reference the service port groups instead?
Thanks,
Andrew

Hi,
Are you looking a way to group all the ports/services you need to allow from the external network to a specific server/servers?
Well you can for example configure this kind of "object-group"
object-group service SERVER-PORTS
service-object tcp destination eq www
service-object tcp destination eq ftp
service-object tcp destination eq https
service-object icmp echo
access-list OUTSIDE-IN permit object-group SERVER-PORTS any object
The above would essentially let you use a single ACL rule to allow multiple ports to a server or a group of servers. (Depending if you use an "object" or "object-group" to tell the destination address/addresses)
I am not sure how you have configured your NAT. Are they all Static PAT (Port Forward) configurations like the one you have posted above or perhaps Static NAT configurations?
You can use the "object network " created for the NAT configuration in the above ACL rule destination field to specify the host to which traffic will be allowed to. Using the "object" in the ACL doesnt tell the ASA the ports however. That needs to be configured in the above way or in your typical way.
Hope this helps
- Jouni

Port groups in NX7000 F2 48-port 1G/10G Ethernet module in regard to VDC?

Have couple of questions about assigning ports on the F2 1G/10G Ethernet module to VDC. Thanks for any help.
1) The older 32-port 10G Ethernet module has port groups. When assigning ports to VDC, ports in the same port group should be assigned to the same VDC. Is it the same scenario with the newer F2 1G/10G Ethernet module? If so, where can I find information about mapping between ports and port groups?
2) The older 32-port 10G module has ports in dedicated mode or shared mode due to its 80G bandwidth to the switching fabrid. Is each port of the newer F2 10G module at 10G line rate? If that's the case, I can then assigned any ports to be vPC peer link, as oppsed to the older 32 port module where only one port from a port group can be in dedicated mode to be vPC peer link.
Thanks again

1) F2 has the same limitation. The port-group is grouped by the SoC. Meaning 1-4 is port-group 1, 5-8 is port-group 2, etc.
2) F2 is line rate if you have 5x Fab-2 module. Yes you can assign any port as vPC peer-link but you should consider the MAC limitation when designing such solution.
HTH,
jerry

NX7K VDC: port groups in F2 48-port 1G/10G Ethernet module?

Have couple of questions about assigning ports on the F2 1G/10G Ethernet module to VDC. Thanks for any help.
1) Does the newer F2 1G/10G 48-port Ethernet module have port groups as the older 32-port 10G Ethernet module? If so, where can I find information about mapping between ports and port groups?
2) The older 32-port 10G module has ports in dedicated mode or shared mode due to its 80G bandwidth to the switching fabrid. Is each port of the newer F2 10G module at 10G line rate or still the same as the older 32-port module? I want to make sure the 10G ports for vPC peer link are in line rate.
Thanks again

Hi there
The F2 line card use the SOC (Switch On Chip) architecture where each SOC manages a group of 4 contiguous ports called “Port-Group”
the port groups on the F2 are broken up into groups of four, 1, 2, 3, 4 are part of port-group1, and then so on down the line in groups of 12 groups
"12x4= 48 ports "
For changing the bandwidth and VDC allocation it is highly recommended to use the entire port group using same attribute/VDC
“N7K-F248 Requires allocation in port groups of four to align ASIC resources”
http://www.cisco.com/en/US/docs/switches/datacenter/sw/nx-os/virtual_device_context/configuration/guide/vdc_mgmt.html#wp1170127
the each interface of the F2 is a "10G line rate" which can provide you with up to 480G per line card
however you need to make sure that you have enough Fabric moduls to support the required bandwidth in the backbend/fabric
for example example each FAB2 can provide up to 110G per slot so to run the F2 with its full capacity you need 5x FAB2
hope this helps
If helpful rate

Nexus M1 Series 32 port 10G Module Local Switching Support ?

Hi,
Ive got d 32 port M1 series linecard asic architecture slide below.
There seems to be a local fabric asic on this M1 series card. Anyone knows whether if this module supports local switching and what is the capacity of local switching ?
We are all aware that this module sits 80G on the chassis fabric modules.
Thanks.

4:1 mux is downstream from replication ASIC which has total 10Gb toward each front panel port-group. So correct you can never put more than 10Gbit/s in/out combined across the ports in one port-group.
As an example say ports 1,3,5,7 each receive 10Gbit/s unicast for ports 9,11,13,15 (1->9, 3->11, ..) The port-group only has 10Gbit/s upwards so incoming excess is dropped at mux and depending on packet ordering you'd get around 2.5Gbit/s out on each port 9,11,13,15.
This is why the module has an 80Gb fabric connection, as there is only 80Gb from replication down to front-panel ports the fabric ASIC will never see more than 80Gbit/s so doesn't need any more channels.
Cheers,
/Phil

Prime 2.2 : Deploy template to port group

Dear Cisco guys,
We managed to make a port group, we managed to make a template, but how do you couple both ?
For example : Change description on fa0/1 & fa0/2 in switchA ?
Many thanks,
Lieven Stubbe
Belgian railways

Thanks for that Mahavir
Yes, I worked that out a little while ago, and can now see interface utilization by port group on the Performance > Network Interface page. I do have another question however (well two)....
I wanted to add graph over time for the utilization to the detail dashboard, but nothing shows up, even though I see the utilization in the network interface page, so I'm sure the monitoring is deployed. Why is the data missing from the graphs?
Also, I wanted to see interface packets per second graphs, but see that is not part of any default template, so I created a customer SNMP template from the IF-MIB to do this, but I can only deploy that against sites/devices or a list of interfaces, and not port groups. Why can't I deploy a customer SNMP template against a port group?
thanks for your help

C210 ESXI Port Group

Hi,
I had an issue where traffic on one of my ESXI port groups stopped passing traffic.
Port Group name :UCM vnic 1&2 - Catalyst 4500 Etherchannel Mode on, access vlan 100
Port Group name :Unity/Uccx vnic 3&4 - Catalyst 4500 Etherchannel Mode on, access vlan 100
My setup was in my UC environment was configured with 2 x vNics for my UCM VMs and 2 x vNics for my Unity/IUCCX VMs.
I am not trunking over the Etherchanels, and my Cisco switches are configured with mode on, and are access ports in Vlan 100.
Traffic stopped passing over Port Group Unity/UCCX and I was unable to access the VMs from the switch side of the network. As all VMs are in the same vlan, I moved my Unity and UCCX VMs into Port Group UCM and then they were reachable from the network. Only Port Group Unity/Uccx had failed.
The only way I could resolve the issue was to power down all VMs and reboot the C210 server.
They had been operational for a period of time before the fault appeared. Any ideas why this may have happed or how to resolve without a complete server reboot would be appreciated.
thanks
Ian.

Ian,
I would suggest you to open a TAC service request with following information
ESXi logs ( vm-support command output )
CIMC show tech
Upstream Switch show tech
Approx date & time of the problem event
So it worked when we moved the VMs to other port group on the vSwitch, right ?
We need to look into VMware messages log file for this event.
Padma

SG500 LAG over multiple switches

Hello, does SG500 support LAG with ports on multiple switches? I would like to stack a pair of SG500 and connect each client to both using LACP in order to achieve switch redundancy.

Hi Christopher,
Thank for your reply, could you help me out at the same time while testing the performance of a LACP over two switches of one stack?
Could you connect a SGE2000 switch with four CAT6 UTP cables to the SG500 stack (two cables to each switch of the stack) and test why the SGE2000 switche dont work correctly as simple access switches for end systems like desktops (the ports take very long to go into forwarding and it seems the LACP port on the SG500 stack turns off and on). When the ports start forwarding the connection is stable but i never had this with sg300-52 or srw2048 switches in the same setup. I added my configs and question here: https://supportforums.cisco.com/message/4155309#4155309
Thanks in advance,
Jelle

SSL Multiple Tunnel Groups with Multiple group policies

Hello folks.
Have a query and cant seem to find an answer on the web.
I have configured SSL Clientless VPN on a lab ASA5510, using 2 tunnel groups, one for enginneers and one for staff, mapped to 2 different group policies, each with different customisation. I have mapped the AD groups to the tunnel groups using both ACS and now LDAP (currently in use), both working successfully, using group lock and LDAP map of IETF-Radius-Class to Group name ensures engineers get assigned to the engineers tunnel group and staff get mapped to the staff tunnel group only.
The question i have is....is there a way to use a single tunnel group to map the user based on AD group which will then use the correct Group-policy (1 tunnel group to multiple group-polciies). I have seen examples of doing this with different URLs but want to know if they can all use the same URL and avoid using the drop down list using aliases.
It may be a simple "No" but it would be nice to know how to do it without using the URLs or drop down list. Users are easily confused ......

Easy. Disable the drop-down list, and use the authentication-server (LDAP or Radius) in the DefaultWEBVPNGroup. By default when you browse to the ASA, it will be using the DefaultWEBVPNGroup. Let LDAP or Radius take care of the rest.
You will get the functionality you are looking for.
HTH
PS. If this post was helpful, please rate it.

Tollerence group for multiple user

hii all
can any one tell me how shall i assign multiple tollerence group to multiple user? and also tell me, while creating tollerence group am i have to give the tollerence group with co code? or just only co code?? please solve
regards rajesh Kr Mahato

Hi,
'assign multiple tollerence group to multiple user'-it's not possible,in table V_T043 the key is USNAM
'while creating tollerence group am i have to give the tollerence group with co code? or just only co code??'-I don't understand. In table V_T043T you need to put CC and Tol.group

Grouping of multiple criterias as expression

Dear all
I want to do a grouping of multiple criterias as expression .
Single grouping is possible , but when group within a group comes things doesnt work for me.
User would define the comibination
For example i have 4 criterias
C1
C2
C3
C4
Basic grouping works for example :
(C1&C2) | (C3&C4)
Complicated grouping i have no idea how to implement it.
(((C1&C2) | (C3&C4))&(C1&C2) )
I need validate if the expression is correct and need to pick up all the groups and do the AND or OR.
Any help woul dbe appriciated
Regards
pacs

fiveohg wrote:
Complicated grouping i have no idea how to implement it.
(((C1&C2) | (C3&C4))&(C1&C2) )
I need validate if the expression is correct and need to pick up all the groups and do the AND or OR.As already suggested: you could write your own grammar and let a parser-generator create a lexer/parser for you.
Another option is to use some scripting engine and bind your C-variables before evaluating your expression:
import javax.script.*;
public class Foo {
public static void main(String[] args) throws Exception {
      String expression = "(((C1 && C2) || (C3 && C4)) && (C1 && C2))";
      ScriptEngineManager manager = new ScriptEngineManager();
      ScriptEngine engine = manager.getEngineByName("js");
      engine.put("C1", true);
      engine.put("C2", true);
      engine.put("C3", false);
      engine.put("C4", true);
      System.out.println(engine.eval(expression));
}Note that you cannot user '|' and '&', in that case.
The JavaScript (Rhino) engine is built-in in Java 6, but there are more that can be imported: [https://scripting.dev.java.net/]

E-mail group for multiple contacts

I want to creat an e-mail group for multiple contacts so I only need to select the group and then send an e-mail to all the contacts in that group. How do i creat a distribution group in icloud from my Outlook Address book?

Hi,
Yes, when logon to ePrint Center, at the top frame, left hand side, there is a place you can +Add Printer. Click to this and follow the instructions.
Regards.
BH
**Click the KUDOS thumb up on the left to say 'Thanks'**
Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

Handling Multiple Group ID - Multiple Departments of the same Enterprise

http://www.b2bgurus.com/2008/07/handling-multiple-group-id-multiple.html
In step 4 it is mentioned that we have to create just one agreement. Should i create one agreement for each department or will creating one agreement for any department will automatically process the documents for both the departments?

Create only one Agreement. Make sure to disable the validation.
Another way of enabling this feature is by using the following tip.property.
oracle.tip.adapter.b2b.edi.ignoreValidation=<values>
Provide those identifier which will be different from the configured one. Few of the sample identifiers are as follows:
InterchangeReceiverID,InterchangeSenderID,GroupReceiverID,GroupSenderID,GroupSenderQual,GroupReceiverQual,InterchangeSenderQual,InterchangeReceiverQual

Port Groups on Multiple switches

Similar Messages

Maybe you are looking for