Presales: HWIC-4ESW= on 2821 to increase Ethernet port?

Hi there,
I was not able to receive help from Cisco partner and distributor so I'm hoping that I'll get response from here.
We have CISCO2821-V3PN/K9 whose two Gigabit ports are already used. I need additional Ethernet port to connect the router to the Internet Leased Line.
Below "appears to be" the right product but the module is a switch which to my understanding is meant for connecting to the inside LAN rather than to the Internet.
HWIC-4ESW= Four port 10/100 Ethernet switch interface card
Grateful if someone could shed some light and give me the right product (part no.) we need to buy.
Thanks in advance.
Archie

Hello Archie,
a configuration for a VLAN on your 2821 would look like this:
interface Vlan2
ip address 192.168.1.1 255.255.255.0
You can assign that VLAN, 2 in this case, to one of the switchports, just like you would assign it to a ´normal´, or better, external switch:
interface FastEthernte0/1/0
switchport access vlan 2
Here is a link that provides information regarding VLANs in conjunction with the HWIC:
How to Configure EtherSwitch HWICs
http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00804554c7.html#wp1027188
For more general information regarding VLANs, chekc this document:
Creating and Maintaining VLANs
http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration_guide_chapter09186a00800c9fd8.html
HTH,
GP

Similar Messages

2821 and a HWIC-4ESW=

I have a 2821 with a HWIC-4ESW= installed int slot 0. I cannot see the FastEthernet interfaces in my NAT list.
Specifically I have a a 1300 series AP in my defauly VLAN (1) and I cannot ping it when I have it connected to f0/1/1. I have f0/1/1 configured in trunk mode (for grins I have tried both). I can ping my 1300 when I plug it in to a Catalys Express 500 with the port configured via smartports as an access point with a native VLAN of 1.
To me it seems that the HWIC-4ESW= is not configured correctly in the 2821 or the 2821 is not allowng the fastethernet interfaces to talk to the gigabitethernet interfaces. Any thoughts?
Thanks,
Mike

I do not have an IP address on the VLAN 1 interface. I do have an IP address on the same subnet on interface g0/0.1 - 10.1.l.254/24 in vlan1.
The device on f0/1/1 is 10.1.1.55/24 also in vlan1.
Can I have the g0/0 segmented in to sub-interfaces and still brige it to a hwic-4esw port?
I could make the 1300 series bridge that connects to the hwic-4esw (f0/1/1) part of a different vlan, but would like to have the APs in the managment vlan along w/ the switches and router.
Thanks,
Mike

HWIC-4ESW

folks
i have a 2821 ISR with a HWIC-4ESW installed and a firewall running ospf on the end of one of the switch ports
the switchport is assigned to a vlan and the vlan interface has an ip
my problem
the switchport is layer 2 and won't see the firewall, i can't even see a mac-address! the line is up as is the protocol so figure its a config problem
i've tried setting the firewall interface in the same vlan number - no joy
i need ospf to run between the firewall and the router - has anyone any idea of what i can do
i think there's a compatibility problem with the HWIC-4ESW and may need another L3 card - can i get one for the 2821?
thanks to anyone taking the time to reply

This should have no problem communicating. Can you try to provide the following:
1. show diag
2. show run int fa x/x >> the switchport connecting to the firewal.
3. sho run inter vlan x >> the vlan created for the port connecting to the firewall.
4. Is the interface vlan up/up? You mentioned the l2 port but was the interface vlan up/up?
Did you try pinging from 2821 to the firewall's interface ip address, the interface connecting to the L2 port.
Please rate all posts.

Re: Difference between HWIC-1FE and HWIC-4ESW

Hi
I am trying to find out the main difference between the HWIC-1FE and HWIC-4ESW cards.
Also I have a cisco 2811 router that is configured with one Fastethernet connected to DSL and the other port connects to mt LAN and METRO (using subinterfaces), is this the best practice?

HWIC-4ESW is the 4-port single-wide 10/100BaseT Ethernet switch HWIC. The 4ESW is a L2 switch and is cost effective.
HWIC-1FE is 1-port Fast Ethernet HWIC. The HWIC-1FE is a true L3 interface and is expensive. It has feature parity with an onboard FE interface except for OAM support, which is delayed.
HWIC-4ESW has the capability to setup VLAN but they are not the routed ports Whereas, HWIC-1FE has the same characteristics as Onboard FE ports.

I am trying to get NAT working on a Cisco 2801 with HWIC-4ESW.

I have a 2801 that had a failed Fe0/1 port. The Fe0/1 port was used to give sub-interface Fe0/0.200 access to internet. We installed a HWIC-4ESW into the 2801. I have successfully moved the sub-interfaces ( 0/0.1 , 0/0.100 , and 0/0.200 ) from the Fe0/0 to the HWIC-4ESW. I have reconfigured the Fe0/0 to connect to my ISP. However, I cannot get traffic from vlan200 to pass to the internet over Fe0/0. I have a guest wireless network set for vlan 200. Clients get an IP address in the appropriate range (192.168.200.0), but they cannot get to the internet. Below I have included the results of "sh ip int brief" and some of the "sh run". I think that it is something simple, but I canot get it working.
Help would be appreciated.
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 ***.**.244.194 YES manual up up
FastEthernet0/0.200 unassigned YES unset deleted down
Service-Engine0/0 192.168.100.254 YES TFTP up up
FastEthernet0/1 unassigned YES NVRAM administratively down down
FastEthernet0/1/0 unassigned YES unset up up
FastEthernet0/1/1 unassigned YES unset up up
FastEthernet0/1/2 unassigned YES unset administratively down down
FastEthernet0/1/3 unassigned YES unset administratively down down
Serial0/3/0:0 unassigned YES unset down down
Serial0/3/0:1 unassigned YES unset down down
Serial0/3/0:2 unassigned YES unset down down
Serial0/3/0:3 unassigned YES unset down down
Serial0/3/0:4 unassigned YES unset down down
Serial0/3/0:5 unassigned YES unset down down
Serial0/3/0:6 unassigned YES unset down down
Serial0/3/0:7 unassigned YES unset down down
Serial0/3/0:8 unassigned YES unset down down
Serial0/3/0:9 unassigned YES unset down down
Serial0/3/0:10 unassigned YES unset down down
Serial0/3/0:11 unassigned YES unset down down
Serial0/3/0:12 unassigned YES unset down down
Serial0/3/0:13 unassigned YES unset down down
Serial0/3/0:14 unassigned YES unset down down
Serial0/3/0:15 unassigned YES unset down down
Serial0/3/0:23 unassigned YES NVRAM up up
Vlan1 192.168.1.254 YES NVRAM up up
Vlan100 192.168.100.254 YES NVRAM up up
Vlan200 192.168.200.254 YES NVRAM up up
NVI0 ***.12.244.194 YES unset administratively down down
ip source-route
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.100.1 192.168.100.99
ip dhcp excluded-address 192.168.100.200 192.168.100.254
ip dhcp excluded-address 192.168.200.1 192.168.200.99
ip dhcp excluded-address 192.168.200.200 192.168.200.254
ip dhcp pool Phones
network 192.168.100.0 255.255.255.0
option 150 ip 192.168.100.254
default-router 192.168.100.254
dns-server 192.168.1.8
ip dhcp pool guestwireless
network 192.168.200.0 255.255.255.0
default-router 192.168.200.254
dns-server 8.8.8.8 8.8.4.4
ip cef
no ip domain lookup
ip domain name pwa.com
ip name-server 8.8.8.8
ip name-server 8.8.4.4
controller T1 0/3/0
pri-group timeslots 1-16,24
controller T1 0/3/1
shutdown
gw-accounting aaa
gw-accounting syslog
interface FastEthernet0/0
description Guestwireless route to internet
ip address ***.**.244.194 255.255.255.240
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
interface Service-Engine0/0
ip unnumbered Vlan100
service-module ip address 192.168.100.200 255.255.255.0
service-module ip default-gateway 192.168.100.254
no cdp enable
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface FastEthernet0/1/0
description trunk to switch
switchport mode trunk
duplex full
speed 100
interface FastEthernet0/1/1
description voice
switchport access vlan 100
interface FastEthernet0/1/2
shutdown
interface FastEthernet0/1/3
shutdown
interface Serial0/3/0:23
no ip address
encapsulation hdlc
isdn switch-type primary-ni
isdn incoming-voice voice
isdn supp-service name calling
no cdp enable
interface Vlan1
description Data
ip address 192.168.1.254 255.255.255.0
interface Vlan100
description voice vlan
ip address 192.168.100.254 255.255.255.0
h323-gateway voip bind srcaddr 192.168.100.254
interface Vlan200
description Guestwireless Data
ip address 192.168.200.254 255.255.255.0
ip nat inside
ip virtual-reassembly
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip http path flash:
ip nat inside source list 10 interface FastEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip route 192.168.100.200 255.255.255.255 Service-Engine0/0
ip route 192.168.200.0 255.255.255.0 FastEthernet0/0
ip radius source-interface Vlan100
access-list 10 permit 192.168.200.0 0.0.0.255

So, I just built this in the lab, and it seemed to work ok. I attached a sparse config, but it does let my host on the GuestWireless get the internet via NAT.
R2#sh ip nat translations vrf GuestWireless
Pro Inside global Inside local Outside local Outside global
icmp 17.12.244.194:5 192.168.200.1:5 1.1.1.1:5 1.1.1.1:5
R2#sh ip route vrf GuestWireless
Routing Table: GuestWireless
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 17.12.244.195 to network 0.0.0.0
17.0.0.0/28 is subnetted, 1 subnets
C 17.12.244.192 is directly connected, FastEthernet0/0
C 192.168.200.0/24 is directly connected, Vlan200
S* 0.0.0.0/0 [1/0] via 17.12.244.195

HWIC-4ESW having same MAC address with fa0/0 from CISCO2811 router.

Hi Expert, I Have a situation where a 2811 is configured with 2 VLANs from HWIC-4ESW module, different ports configured, however the VLAN interfaces have the same mac-address with fa0/0 which causes ARP poisoning problem. It that anyway to solve this problem?

Hi Lee,
My understanding is, this is expected behavior and is due to the hardware limitation of the HWIC-4ESW Module. And I think the HWIC-4ESW Module (at least from my lab testing) always takes the MAC Address of the first on board LAN Interface.
Also, I am able to change the MAC Address of the first on board LAN Interface (Ex.Gig0/0) but I cannot change the MAC Address of the VLAN SVI.
I hope it helps.
Regards,
Arul
** Please rate all helpful posts **

How to enable routing between HWIC-4ESW and Onboard FE on cisco 1841 router..?

Hello All,
I have a cisco 1841 router, recently i have purchased HWIC-4ESW slot for my router. The module is working fine i could able to see additional FE ports(fe0/0/0,fe0/0/1...).Now problem comes in routing i.e. these HWIC-4ESW ports and Onboard FEs are not communicating.If any bode knows the solution kindly let me know the configuration details..
Thanks,Sazz

Hi,
Look at the configs below.
How can I use IP Routing so communication is possible across all subnets?
Router>en
Router#config t
Router(config)#int fa0/0
Router(config-if)#description ***INTERNET***
Router(config-if)#ip address xxx.xxx.xxx.xxx 255.255.255.252
Router(config-if)#no shut
Router(config-if)#ip nat outside
Router(config-if)#exit
!On-board interface
Router(config)#int fa0/1
Router(config-if)#description ***LAN***
Router(config-if)#ip address 10.0.xxx.xxx 255.255.255.0
Router(config-if)#no shut
Router(config-if)#ip nat inside
Router(config-if)#exit
Router#vlan database
% Warning: It is recommended to configure VLAN from config mode,
as VLAN database mode is being deprecated. Please consult user
documentation for configuring VTP/VLAN in config mode.
Router(vlan)#vlan 10
VLAN 10 modified:
Router(vlan)#vlan 20
VLAN 20 added:
Name: VLAN0020
Router(vlan)#exit
APPLY completed.
Exiting....
Router#config t
Router(config)#int vlan 10
Router(config-if)#ip address 172.16.xxx.xxx 255.255.255.0
Router(config-if)#ip nat inside
Router(config-if)#no shut
Router(config-if)#exit
Router(config)#int vlan 20
Router(config-if)#ip address 192.168.xxx.xxx 255.255.255.0
Router(config-if)#ip nat inside
Router(config-if)#no shut
Router(config-if)#exit
!HwIC-4ESW interface
Router(config)#int fa0/0/0
Router(config-if)#switchport mode access
Router(config-if)#switchport access vlan 10
Router(config-if)#exit
!HWIC-4ESW Interface
Router(config)#int fa0/0/1
Router(config-if)#switchport mode access
Router(config-if)#switchport access vlan 20
Router(config-if)#exit
Router(config)#exit
Router#copy run start
Destination filename [startup-config]?
Building configuration...
[OK]
Router#config t
Router(config)#ip name-server xxx.xxx.xxx.xxx
Router(config)#ip name-server xxx.xxx.xxx.xxx
Router(config)#exit
Regards,

Can the number of ethernet ports be increased from 3?

Clearly I know that we cant weld another port onto the airport extreme but, I have 5 devices I need to run through the wireless network and the box only has 3. Is there any way to increase this number with perhaps a splitter or some add on device? All 5 will never be active at the same time but, the thought of having to go behind the port daily and swap out cables is not an option. THX

Will the ports enabled by this product also be capable of "n" speeds if I purchase the new N router?
Sounds like you got wireless and wired a bit mixed up. The Ethernet (wired) ports on the AirPort Extreme Base Station (AEBS) are rated at 10/100 Mbps. The AEBS's wireless is 802.11a/b/g/(pre-n)-compliant...meaning that theoretically it can handle speeds from 11 Mbps to 540 Mbps.
Adding an Ethernet switch to one of the AEBS's 10/100 Mbps Ethernet ports, will only provide 10/100 Mbps throughput, not 802.11n speeds.
Anything that is a little more aesthetically pleasing than that big blue box? Anyone else make such a device?
Linksys has several other models, as well as, Belkin, D-Link, & Netgear (to name a few).

HWIC-4ESW routing

What are the routing capabilities of the HWIC-4ESW?
Can i configure a different IP subnet in each port?

Hi,
The following link gives full configuration guidelines for the HWIC-4ESW:
http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00802c6bb6.html
In answer to your question, yes - you can have a different IP subnet in each port. (And if it's a trunk you can have multiple IP subnets per port)
HTH
Andrew.

Hwic 4esw monitor Session

Currently running a hwic 4esw module in a 2800 series router and we are using websense so I’m trying to use Monitor session to mirror the traffic over for websense to see. The only problem is that the route locks up every week and doesn’t allow any traffic out. Any ideas?

I need some clarifications from your side to help you out with the problem.Are you able to normally ping the Websense server from the PIX? .When the problem occurs are you able to ping the websense server from the PIX?. Is the PIX reachable from the rest of the network when the problem occurs?
Send me these details so that I can help you further.

HWIC-4ESW capable of DSCP marking?

Hello. Does anyone know if the HWIC-4ESW card is capable of classifying traffic and marking DSCP values on those packets?
Thanks,
Mike

Hello Mike,
this is from the relevant Q&A: QoS to DSCP mapping is supported:
Q. What features are supported on the Cisco EtherSwitch HWICs?
A. The following features are supported on the Cisco EtherSwitch HWICs:
Up to 15 individual VLANs per 4- or 9-port Cisco EtherSwitch HWIC
IEEE 802.1Q tagged and untagged VLANs
Virtual Trunking Protocol (VTP) support for client, server, and transparent modes
Layer 2 MAC-related feature support:
Secure MAC addresses
Static and Dynamic MAC addressing
2000 MAC addresses
Port application support
SPAN port monitoring
Per-port storm control for broadcasts, unicasts, and multicasts
QoS feature support
IEEE 802.1p class-of-service (CoS) priority for 802.1Q tagged frame
Port-based priority for native frames
Port priority to overwrite the IEEE 802.1p priority
Strict priority and Weighted Round Robin CoS policies
CoS-to-differentiated services code point (DSCP) mapping
Internet Group Management Protocol (IGMP) snooping
Network Time Protocol (NTP) support
IEEE 802.1D spanning tree and Spanning Tree Protocol PortFast
Secure port filtering (200 secure MAC addresses)
Simple Network Management Protocol (SNMP) support
Telnet client and server support
Cisco Discovery Protocol Versions 1 and 2 support
Fallback bridging
802.1x authentication
IEEE 802.3af-compliant PoE
Q. What features are not supported on the 4- and 9-port Cisco EtherSwitch HWICs?
A. The following features are not supported on the Cisco EtherSwitch HWICs:
Layer 3 switching (this is done through the router)
Dynamic VLAN for access port
VTP pruning
Network port
Routed port
Per-port enabling and disabling of unknown multicast and unicast packets
Cisco Group Management Protocol (GMP) client
Rate limiting
Cisco Cluster Management Suite (CMS) support
HTH,
GP

Is the HWIC-4ESW card supported in the WAE-674-K9?

Hi,
In the datasheet of the WAE-674-K9 says that it supports (4-port network interface card (NIC) for inline Cisco WAAS deployment), but don't mention the HWIC-4ESW anywhere. Is it supported?
Any help is much appreciated!

Hi,
The WAE-674-K9 support 4 port NIC for Inline Deployment and the card is WAE-INLN-4CG.
HWIC-4ESW is not supported.
http://www.cisco.com/en/US/prod/collateral/contnetw/ps5680/ps6474/data_sheet_c78-495801.html
Regards
Kiran.

2801 with TWO HWIC-4ESW-POE

Hi,
2801 with AC-IP power, PVDM2-8 (c2801-advipservicesk9-mz.124-7a.bin) is being used at branch office.
They have four slots:
slot0: vic2-2fxo (for local call, 911, srst)
slot1: HWIC-4ESW-POE (IP Phones)
slot2: WIC-1DSU-T1-V2 (T1 internet)
slot3: HWIC-4ESW-POE (IP Phones)
The router recongize all the modules, but some reason, the IP phones wont register to CCM. PC wont get IP address from local DHCP pool from router itself.
It only happens at slot3, slot1 is working fine.
My questions are that: is 2801 support TWO HWIC-4ESW-POE at slot 1 and slot 3 at the same time?? If it does support, any reason why.
Thanks for help...
Ken

Ken, Are the phones in slot 3 powering up ?
are they in same vlan as slot 1 phones ? If you swap phones between slot 3 and slot 1, do the phones that were originally in slot3 do register , get an ip etc..?
It looks like two hwics esw are supported in 2801, the question is whether two hwics with poe are supported or not. If you get power on both slots for the phones, the router is definitely granting power to all 8 ports.
http://www.cisco.com/en/US/products/ps5855/products_qanda_item0900aecd8016c026.shtml
Also does the port show connected on slot 3?
Also try removing slot 1 hwic and see if slot3 phones do get registered.
HTH
Sankar
PS: please remember to rate posts!

Terminate IPsec on one of the ports of HWIC-4ESW (through VLAN)

Hi,
It's not clear to me whether it's possible to terminate IPSec on one of the ports of HWIC-4ESW (through VLAN)? The document on the link below suggests that it supports L3 with limitations but it's short in mentioning whether IPsec is one of the limitations.
http://www.cisco.com/en/US/customer/products/ps5855/products_qanda_item0900aecd8016c026.shtml
Thanks.
Regards, Archie

Yes, you can terminate IPSec on HWIC-4ESW .
here sample config:
interface Vlan100
description crypto int vlan
ip address 10.10.100.100 255.255.255.0
crypto map mymap
interface FastEthernet 0/0/1
description int for crypto vlan int
switchport access vlan 100
no ip address
duplex full
speed 100

Looking for an Access Point with 2 Ethernet ports

Hi,
I am looking for an AP with two ethernet ports. Is there any model of Cisco is available with 2 ethernet ports?
Regards,
Noman

pros:
If an access swich/switch port failed then AP still forward traffic through other switch once power restored through other port.
when PoE failed on its connected switch, it may still work via other port.
Having two ethernet port on AP may require to talk to different switches/stack to achieve AP port redundancy through lag or stateful switch over when cable/switch/AP port failure.
if one physical port become bad on AP, it can be still used with other.
(However, AP/physical port failure can be takencare at RF level using self healing.)
cons:
require additional switch and its config maintanece
currently, AP doesn't require 2 physical port for data transfer perspective.
Require x2 PoE ports.
Additional port increases the cost on AP.
it is possible cisco may make it in future.

Presales: HWIC-4ESW= on 2821 to increase Ethernet port?

Similar Messages

Maybe you are looking for