Port suspended on Cisco ESW-520-24P

Hi experts,
I appreciate if anyone can help me with this. I just bought 4 units of Cisco ESW-520 24Ports switches. I did some testing and found out for PORTS 1 and 12 is in "Suspended" mode and thus not able to use.
This not happened to 1 but all 4 switches. Why is this so ? Can anyone guide me to disable the ports from going into "suspended" mode automatically ? I wouldn't want the ports to be in "Suspension" mode when it goes live and thus block the desktops from having internet access.
Thanks!

Ok, I think I found out what the priblem is. It seems that from factory, the ports come locked. You have to go to Security>Traffic Control>Port Security and unlock each port. Click the EDIT tab on the port you want to edit. Then un-check the ENABLE TRAP> (apply). Un-check LOCK INTERFACE> (apply). Change LEARNING MODE to CLASSIC LOCK> (apply). That should do it, but you'll have to do that for every port you want unlocked. I'm not to sure if there is a way to unlock then all at once.
Daniel

Similar Messages

About the Maximum of Source Ports to ONE Destination Port on ESW 520 24P

Does the ESW 520 24P Support Mirroring 20 Ports Traffic to 1 Destination Port?

Hi Andy
No the ESW supports mirroring groups that can each mirror 8 ports to a destination port.
This is great for normal problem determination purposes. I can guess at your application.
regards dave

Can't Console into ESW-520-24P Switch, Need help.

Hi,
We have 3 ESW-520-24P series switches.
I can not console them because by default they have a security profile attached into it for "Console Only" and It is set as "Deny".
I can't modify or delete it because it's a default security policy.
We can do console into ESW-540-24P series switches without any problems.
Can someone share any solutions to gain console access for these switches?
Any one from Cisco TAC support?
Thanks in advance.
Mansur.

Hi Devicarr,
Thanks for your reply.
I can set the VLAN and Management IP address using the web interfaces.
But when I am trying to connect it via console it is not responding. I reset it to factory default and then found from the web control panel/interface that the switch has an "Access Authentication" under that it has a "Access Profile" and the profile has a default or built in profile attached says "Console Only" and it has a rule like "IP Source = 0.0.0.0/32 Permit = Deny".
I tried to delete or modify it even I tried to add a new rule to allow the console access but failed.
Does this switch series "ESW-520-24P" by default Console disabled when manufactured or ELSE? Please provide me your valuable suggestions.
Thanks in advance.
Mansur.

Cisco ESW 520 in Cisco LMS

Hi,
I have a question whether CicoWorks LMS can manage Cisco ESW 520 SWITCHS.
I can import it in RME but it says unknown device.
Thanks
Ashley

No, these switches are not supported by LMS. These switches are designed to be managed by the Cisco Network Assistant.

Support for WRT610N for ESW-520-24P-K9

Hi to whom may concern,
Can the following switches (ESW-520-24P-K9) x3 & ESW-520-48P-K9 able to support inline power for 74 x WRT610N ?
Thanks

Hello batumibatumi,
The ESW series does not have supported CLI feature. If you are looking for a CLI supported switch, please look into our Sx300 series.

Error in switch ports POE model, "Cisco Catalyst 2960S-24PS-L Switch"

I have problem with the poe switch Cisco Catalyst 2960S-24PS-L posts does not respond, and me the following error resporta was t
%PLATFORM_ENV-3-ILP_PORT_POST_ERR: %s can’t be brought up because it failed POST
in Inline Power test.
he source of that error and what are the possible causes

Hey Dustin,
Device needs to be RMA'ed. The inline power supply has failed.
HTH.
Regards,
RS.

ESW-520-24P - New GUI?

We're testing out the ESW series to replace the existing small business series for many of our customers. I was disappointed to see it run the same GUI as the SFE and SGE series switches! It's so clumsy and takes 10x as long to configure. And yes, we modify the clumsy config file offline but it's not that straight forward and always results in some type of error.
Anybody know when the ESW series switches will run the new GUI that the SF 300-24P new small business series runs? I gotta say, I'm very impressed with that GUI as it seem to collapse all the best features of all 3 previous GUI's together.
For now, we will plan on sticking with the SF 300 series until the ESW has the updated GUI.
Thanks
-robert

Hi Robert,
I also really like the new look and feel of the new 300 series.
We are trying to use a standard look and feel for the GUI on the small business products.
So the Small Business Routers, WAPs.Switches, Security appliances that are coming online and are online for sale at the moment, all have the same look and feel. I think the ESW switch, because it is really only used on UC5XX will stay the way it is, I have heard no mention of upgrading it's GUI.
Anyway currently, the ESW family of switches has an advantage of being managed by Cisco Configuration Assistant (CCA).
Robert, for other folks that look at this posting, I will include a link below to the newer 300 series product comparison pages.
As you will have noticed already, the 300 series is generations ahead of the older SRW series switches, even allows for Layer 3 routing between VLANs.
But for consistency of changeover from old part to new part , if you ordered in the past a part number SRW224G4, the 300 series replacement is now SRW224G4-K9-XX (where XX can be UK NA EU.......... country code of some kind.)
http://www.cisco.com/en/US/products/ps10898/prod_models_comparison.html
regards Dave

CAM-Table over SNMP(ESW-520-48P)

Hi everyone,
I could need some help with our Cisco ESW-520-48P Switches. I want to read the CAM-Table over SNMP and assign each interface the appropiate client device. The problem is that I don't really know how to achive that. I've tested some different MIBs but I can't get the infos which I need.
Thank you very much in forward!

I need to decide on few things
regarding this switch before recommending this switch to my customer. I
have the following questions that i need some expert advice.
Questions
1.)
Does this switch support POE 15.4W on all 48 10/100 ports
(ESW-520-48P-K9). The total power rating of this switch is only 370W
and if this divided with 48 ports, each port can only drive 7W. So thus
the confusion.
2.) Can the ESW Series be Monitored and Managed using Ciscoworks LMS?
3.) Is MGBSX1 compatible with GLC-SX-MM
Thanks.
Hi,
Please see the attached document for your queries !!
Hope to Help !!
Ganesh.H
Remember to rate the helpful post

ESW 520 8-port PoE switch cannot ping

Hello
I have an ESW 520 8-Port switch with a management ip address of 192.168.10.2 /24
After I reboot it, I can successfully ping it from a pc with an ip of 192.168.10.123 for about 50 consecutive times.
After that, I get a "Destination host unreachable" (this icmp message is sent by my pinging pc (192.168.10.123).
This obviously seems like a bug.
Has anybody seen this before.
Whenever I reboot it, it goes through the same sequence.
Thanksj

Hi David,
I figured out what the problem was.
The switch was obtaining an ip via dhcp, as it is a DCHP client by default.
I am used to working with Enterprise level Cisco equipment, so this simple oversight was the cause of the problem.
The ip that was obtained via dhcp was obviously different than the default ip of 192.168.10.2
So when the switch was rebooted, it would start off with its default ip of 192.168.10.2.
As soon as it obtained an ip via dhcp, I could not ping it of course
Thanks for the input though

ESW 520 8-port - firmware upgrade

Hi,
We have a ESW 520 8-port currently on firmware version 2.1.1.19 (boot version 1.0.0.07, VID V01) - Serial number CBT15100AN2
The latest firmware version is 2.1.1.21, which we downloaded and via Maintenance, Software Upgrade, via HTTP performed an upgrade to this latest version - the upgrade appears to complete, logs show successful however when we restart the switch it still shows as 2.1.1.19 . Very strange!
Can someone please advise how to get the upgrade to successfully apply?
Kindest regards,
Dale.

David,
Thanks for such a question reply - I had tried that and after reboot still shows as 2.1.1.19
I decided to install the firmware upgarde again, change the active firmware to 2.1.1.21 again, restarted and this time it held.
Thank you for your assistance, all resolved.
Cheers,
Dale.

ESW-520-24-K9 and Cisco Network Assistant

HI,
Is this switch model ESW-520-24-K9 is supported by Cisco Network Assistant.
In the leatest release notes of CNA are supported Catalyst Express 520 Series Switches and this model WS-CE520-24TT-K9 is on the supported list.
But the mention model above is EoL and the new one is ESW-520-24-K9.
Thanks,
Kamil

Hi Dave,
Thanks for your replay.
Yes, you are right that this switch model is supported by CCA but not by Cisco Network Assistant.
These programs are different in functionality.
The situation has become clearer, since the customer bought the Cisco Catalyst 2960 series switch.
Kamil

ESW 520 QoS questions

Hello,
just to put this out there, I am a noob to the world of Cisco, just got my CCNA, and am now working as an intern.
Can you set esw 520 switches to use auto QoS? We are putting the 520's into an environment of more configurable catalyst switches, and they all use auto QoS. I am basically wondering how to get the QoS on the 520's to play nice with the auto qos on the nicer catalyst switches...
I have tried just using basic QoS, but that wont work, because when I use the port wizard, I use the macro "ip phone + desktop"
It insists on setting qos, but fails because voice-map does not exists. The only way I have found to get the macro to work, is to set QoS to advanced, and create a policy map called "voice-map" of course, after that the macro works, but then I am left with advanced QoS enabled, and hardly configured...how am I supposed to know how to configure it if the other switches ( catalyst series) are set to auto?
Im sorry for the seemingly dumb question, but I know next to nothing about QoS other than it is used to prioitize traffic based on data types.

Hey cole, typically with theses switches the smartports will do the QOS with the port role, however you can manually create the QOS for the switch, by creating a ACL to identify the specific traffic comming through the switch port. Then Create a class map/ policy map/ and then bind it to the ports your wanting to setup QOS on.

New UC560 and 3 ESW-540-24P Switches, best way to wire them

We are installing a UC560 and 3 ESW-540-24P switches at a client in a couple of weeks. I have installed many of these but have never installed one with multiple switches. What is the best way to connect these together physically. They will be all in the same rack. Was just wondering the best way to "series" the switches together and what ports to plug them into. Any suggestions would be appreciated.

There is a Smart Design: Implementation Guide at :http://www.cisco.com/web/partners/sell/smb/tools_and_resources/smart_business_comm_system.html
Implementation Guide
Smart Business Communications System 2.0 – Implementation Guide
The implementation guide complements the SBCS 2.0 Design Guide through the detailed guidance for SBCS 2.0 based Main Office deployment. This document leverages the GUI configuration capability with easy-to-follow step-by-step network deployment guidance using CCA v2.2. It also includes an installation checklist to assist during the installation process. It is recommended that users refer to the SBCS 2.0 Design Guide for underlying design guidance and considerations.
In this (figure 6) it shows a 48 and a 24 port switch connecting to each of the UC560 expansion ports (there are 2 GE ports for expansion on the 560).
These could also be 2 48 port switches (96 total ports). (In your scenario, I would connect 2 this way and the third to one of those 2.)

ESW 520 802.1x MAB authentication problem

Hello,
I am having problem with 802.1x MAB authentication on ESW 520 switch, the authentication server is ACS 5.3.
The Authentication method on ESW is 802.1x & MAC, and Host Authentication mode is Multi Session. When i plug ip phone it never authenticate the phone, and on ACS I get following error message:
Radius authentication failed for USER: aa1effbb8fd4 MAC: aa-1E-FF-bb-8F-D4 AUTHTYPE: Radius authentication failed
RADIUS Status:Authentication failed : 11509 Access Service does not allow any EAP protocols
15004 Matched rule
15012 Selected Access Service - MAB
11507 Extracted EAP-Response/Identity
11509 Access Service does not allow any EAP protocols
11504 Prepared EAP-Failure
11003 Returned RADIUS Access-Reject
For that Access Service I have configured only Host Lookup.
The same ACS configuration is working perfectly on Catalyst 3560G switche.
It seems that ESW switch is not telling ACS that authentication is going to be by MAC address.
Do you have any idea what can be the problem.

Are you hitting the same selection rule? Also is "mab eap" configured globally on the switch, or on the port itself?
Also can you post the port configuration and the show ver of the ESW?
Thanks,
Tarik Admani
*Please rate helpful posts*

ESW 520 802.1x re authentication problem

Hello
I have problem with ESW 520, on 802.1x authentication. The problem is when host authenticates successfully it works about couple of minutes, after it truest too authenticate again but it lags. On network interface it shows notification that if Failed authentication. On ACS I see only one authentication attempt which is successful. This problem is happening on Win7 and Win XP. If I unplug and plug cable it authenticates successfully, but then about couple of minutes it again lags. Switch sees port as authenticated. On Win7 event viewer I have following error:
                Reason: 0x70004
                Reason Text: The network stopped answering authentication requests
                Error Code: 0x0
If I connect same hosts on Catalyst 2960 switch, they work successfully.

Hi ngtransge
There are tree possible explanations about why the authentications fails.
A)the network interface is shut down after failed computer authentication. You can see this on the switch as line protocol down for that port.
To verify the client has a domain certificate:
1. Click Start and click Run.
2. Type mmc, and then press ENTER.
3. On the File menu, click Add/Remove Snap-in.
4. Click Certificates, click Add, select Computer account, and then click Next.
5. Verify that Local computer: (the computer this console is running on) is selected, click Finish, and then click OK.
6. In the console tree, double-click Certificates (Local Computer), double-click Personal, and then click Certificates.
On a domain joined client, you should see a certificate here with Intended Purposes of Client Authentication. Make sure this certificate is not expired. If it is expired, you will need to regain connection to your CA to request a new one.
B) You should check your switch's configuration, perhaps a port or some ports could be blocked by an access-list and interrupt the re authentication.
C) If this two solutions don't work, you have to try to change the authentication method (PEAP-MSCHAPv2 or PEAP-EAP-TLS)
Greetings, Johnnatn Rodriguez Miranda

Port suspended on Cisco ESW-520-24P

Similar Messages

Maybe you are looking for