Problem in connecting ESW 520 POE switches

Hi
New on ESW 520 switches
Need help to configure the ESW 520 24 POE switches
How can i configure the last port of 24 to oonnect to another ESW 520 24 port switches ?

Why not use the GE ports at the far right to chain the switches one to the other from the UC540/UC560? They are best for this and gives you an extra port on the switch this way. Use straight thru ethernet cables.

Similar Messages

Creating a VLAN on a ESW 520 PoE Switch

Hi,
we have two Catalyst Express 500 switches and a ESW 520 just purchased. the VLAN on the other two is 2. how do I change the Default to be 2 instead of 100 in the ESW Switch.

Hi Prasanga,
Just to clarify, are you trying to change the Voice VLAN, or Management VLAN?
The Voice VLAN by default on the ESW is 100, and Management VLAN is 1.
Thanks!
Dave

Can't Console into ESW-520-24P Switch, Need help.

Hi,
We have 3 ESW-520-24P series switches.
I can not console them because by default they have a security profile attached into it for "Console Only" and It is set as "Deny".
I can't modify or delete it because it's a default security policy.
We can do console into ESW-540-24P series switches without any problems.
Can someone share any solutions to gain console access for these switches?
Any one from Cisco TAC support?
Thanks in advance.
Mansur.

Hi Devicarr,
Thanks for your reply.
I can set the VLAN and Management IP address using the web interfaces.
But when I am trying to connect it via console it is not responding. I reset it to factory default and then found from the web control panel/interface that the switch has an "Access Authentication" under that it has a "Access Profile" and the profile has a default or built in profile attached says "Console Only" and it has a rule like "IP Source = 0.0.0.0/32 Permit = Deny".
I tried to delete or modify it even I tried to add a new rule to allow the console access but failed.
Does this switch series "ESW-520-24P" by default Console disabled when manufactured or ELSE? Please provide me your valuable suggestions.
Thanks in advance.
Mansur.

UTP Cable Length for AP connect to POE Switch

Dear All,
What is the limitiation on the length of UTP Cable for connect AP to POE Switch.
Thanks.
C.K.

I believe it's consistent with the limits for structured cabling: 100 meters end-to-end, assuming the cabling system is compliant with EIA/TIA sandards.
Good Luck
Scott

CAM-Table over SNMP(ESW-520-48P)

Hi everyone,
I could need some help with our Cisco ESW-520-48P Switches. I want to read the CAM-Table over SNMP and assign each interface the appropiate client device. The problem is that I don't really know how to achive that. I've tested some different MIBs but I can't get the infos which I need.
Thank you very much in forward!

I need to decide on few things
regarding this switch before recommending this switch to my customer. I
have the following questions that i need some expert advice.
Questions
1.)
Does this switch support POE 15.4W on all 48 10/100 ports
(ESW-520-48P-K9). The total power rating of this switch is only 370W
and if this divided with 48 ports, each port can only drive 7W. So thus
the confusion.
2.) Can the ESW Series be Monitored and Managed using Ciscoworks LMS?
3.) Is MGBSX1 compatible with GLC-SX-MM
Thanks.
Hi,
Please see the attached document for your queries !!
Hope to Help !!
Ganesh.H
Remember to rate the helpful post

ESW-520-48 and Polycom IP phones

I am a managed switch n00b. Please forgive my lack of experience, but I think I have a relatively simple situation that I am just not totally clear on.
System configuration:
T1 from Cox => WAN Port of WRVS400N wireless Router
Port 1 of WRVS4400N to g1 of ESW-520-48 switch.
All Polycoms wired to switch ports (no desktop passthroughs)
All computer data on wireless
Switch is essentially default configuration out of box (sans static IP and gateway configuration to router)
Router set for high priority QoS for ports 5060-5080 (IP phones to remote hosted service)
There seems to be a large amount of bandwidth transferring between the WRVS4400N and the T1 (largest chunk aggregated as 802.1q or "wellfleet" according to Netprobe - screenshot attached). From what I understand, this is VLAN tagging. I am certain I may not be utilizing this correctly or at all.
Call quality is suffering due to bandwidth (or poor configuration)...it is a T1 after all.
Question is: What is the ideal configuration for the switch as I feel I have not utilized it at all here? The only components on the switch are the phones.
Any other comments welcome (even the flaming kind - I'll try to pick out the constructive bits).
Thanks in advance.
Dan

Hello Dimawerks,
On the switch you can only really change the untagged vlan to be 4. The option you are looking for should be available on the AP. Ideally you are wanting the management of the AP to be on vlan 4. The best way to set this is on the AP to have it's management vlan changed to 4 and to then to tag it on the AP and switch or untag it on both.

Port suspended on Cisco ESW-520-24P

Hi experts,
I appreciate if anyone can help me with this. I just bought 4 units of Cisco ESW-520 24Ports switches. I did some testing and found out for PORTS 1 and 12 is in "Suspended" mode and thus not able to use.
This not happened to 1 but all 4 switches. Why is this so ? Can anyone guide me to disable the ports from going into "suspended" mode automatically ? I wouldn't want the ports to be in "Suspension" mode when it goes live and thus block the desktops from having internet access.
Thanks!

Ok, I think I found out what the priblem is. It seems that from factory, the ports come locked. You have to go to Security>Traffic Control>Port Security and unlock each port. Click the EDIT tab on the port you want to edit. Then un-check the ENABLE TRAP> (apply). Un-check LOCK INTERFACE> (apply). Change LEARNING MODE to CLASSIC LOCK> (apply). That should do it, but you'll have to do that for every port you want unlocked. I'm not to sure if there is a way to unlock then all at once.
Daniel

ESW 520 give priority to IP addresses

I've got a LAN with private IPs for the computers, and public, static IPs for the VoIP phones. They are a Hosted VoIP provider, and I want to give priority to the public IPs with my ESW-520-48P switch. How do I implement that in this switch?
I have no roles assigned on the ports and no VLANs setup either. I had tried segregating the VLANs first, but eliminated that route. It's all VLAN 1 now in the switch again. For some reason when I implemented VLAN 100 for voice, voice stopped working on the phones, but data was still fine.

Hi netguy,
QOS by rewriting the DSCP (Differentiated Services Code Point) of a IP phone range by;
1. creating a ACL that specifies the IP range with reverse masking
2. Attaching that ACL to a advanced Class MAP and then
3. attach a class map to a QOS policy table that is configured to set the DSCP to a new value
4. attaching a QOS policy to a interface
5 But you have a default Advanced QOS configuration already in place, so that has to be modified or deleted.
It's tough if you have never played with Advanced QOS before or understand the last five statements.
I guess your hosted IP phones have DSCP (Differentiated Services Code Point) settings already set on the IP phones or settings that you can set directly to each IP phone ?
If that is possible, why not just put the switch into basic QOS mode and then tell the switch to trust DSCP.
That's far the easiest thing to do.
regards Dave

Looking for part numbers for ESW-520-24 rack mount brackets

We have missplaced the two L-shaped brackets to mount our ESW-520-24 switch into a rack. Does anyone have part numbers for them?

We have missplaced the two L-shaped brackets to mount our ESW-520-24 switch into a rack. Does anyone have part numbers for them?

ESW 520 8-port PoE switch cannot ping

Hello
I have an ESW 520 8-Port switch with a management ip address of 192.168.10.2 /24
After I reboot it, I can successfully ping it from a pc with an ip of 192.168.10.123 for about 50 consecutive times.
After that, I get a "Destination host unreachable" (this icmp message is sent by my pinging pc (192.168.10.123).
This obviously seems like a bug.
Has anybody seen this before.
Whenever I reboot it, it goes through the same sequence.
Thanksj

Hi David,
I figured out what the problem was.
The switch was obtaining an ip via dhcp, as it is a DCHP client by default.
I am used to working with Enterprise level Cisco equipment, so this simple oversight was the cause of the problem.
The ip that was obtained via dhcp was obviously different than the default ip of 192.168.10.2
So when the switch was rebooted, it would start off with its default ip of 192.168.10.2.
As soon as it obtained an ip via dhcp, I could not ping it of course
Thanks for the input though

ESW 520 24port PoE Switch Crashes

Hello,
I have deployed a new ESW 520 24 port with a UC520 system at a new site. The switch has been crashing periodically. Here is the error from the logs:
2147474387 11-Dec-2009 14:26:49 Emergency %SYSLOG-F-OSFATAL: FATAL ERROR: SW2M: ABORT DATA exception ***** FATAL ERROR ***** SW Version : 2.0.3 Version Date: 18-May-2009 Version Time: 19:32:29 Instruction 0x15F760 Exception vector 0x10 Program state register 0x20000013 0x0015f720 0x0091dfe0 0x06bf772c 0x014b6d0c %M NG_DIAG-E-DIAGATINIT: Init: Entries can't be created %MNG_DIAG-E-DIAGATINIT: Init: Wrong status received ***** END OF FATAL ERROR *****
I have not had any luck finding anything on this. It seems to occur about every 2 weeks since we have placed it out there. Does anyone have any ideas on this ?

Hi Rachel,
Thank you for posting. You may need to change the Smartport role of the ESW switch port to match what you are connecting to. If you are connecting to another switch, the role should be switch. This is usually what causes the ports to block traffic.

ESW 520 802.1x re authentication problem

Hello
I have problem with ESW 520, on 802.1x authentication. The problem is when host authenticates successfully it works about couple of minutes, after it truest too authenticate again but it lags. On network interface it shows notification that if Failed authentication. On ACS I see only one authentication attempt which is successful. This problem is happening on Win7 and Win XP. If I unplug and plug cable it authenticates successfully, but then about couple of minutes it again lags. Switch sees port as authenticated. On Win7 event viewer I have following error:
                Reason: 0x70004
                Reason Text: The network stopped answering authentication requests
                Error Code: 0x0
If I connect same hosts on Catalyst 2960 switch, they work successfully.

Hi ngtransge
There are tree possible explanations about why the authentications fails.
A)the network interface is shut down after failed computer authentication. You can see this on the switch as line protocol down for that port.
To verify the client has a domain certificate:
1. Click Start and click Run.
2. Type mmc, and then press ENTER.
3. On the File menu, click Add/Remove Snap-in.
4. Click Certificates, click Add, select Computer account, and then click Next.
5. Verify that Local computer: (the computer this console is running on) is selected, click Finish, and then click OK.
6. In the console tree, double-click Certificates (Local Computer), double-click Personal, and then click Certificates.
On a domain joined client, you should see a certificate here with Intended Purposes of Client Authentication. Make sure this certificate is not expired. If it is expired, you will need to regain connection to your CA to request a new one.
B) You should check your switch's configuration, perhaps a port or some ports could be blocked by an access-list and interrupt the re authentication.
C) If this two solutions don't work, you have to try to change the authentication method (PEAP-MSCHAPv2 or PEAP-EAP-TLS)
Greetings, Johnnatn Rodriguez Miranda

ESW 520 802.1x MAB authentication problem

Hello,
I am having problem with 802.1x MAB authentication on ESW 520 switch, the authentication server is ACS 5.3.
The Authentication method on ESW is 802.1x & MAC, and Host Authentication mode is Multi Session. When i plug ip phone it never authenticate the phone, and on ACS I get following error message:
Radius authentication failed for USER: aa1effbb8fd4 MAC: aa-1E-FF-bb-8F-D4 AUTHTYPE: Radius authentication failed
RADIUS Status:Authentication failed : 11509 Access Service does not allow any EAP protocols
15004 Matched rule
15012 Selected Access Service - MAB
11507 Extracted EAP-Response/Identity
11509 Access Service does not allow any EAP protocols
11504 Prepared EAP-Failure
11003 Returned RADIUS Access-Reject
For that Access Service I have configured only Host Lookup.
The same ACS configuration is working perfectly on Catalyst 3560G switche.
It seems that ESW switch is not telling ACS that authentication is going to be by MAC address.
Do you have any idea what can be the problem.

Are you hitting the same selection rule? Also is "mab eap" configured globally on the switch, or on the port itself?
Also can you post the port configuration and the show ver of the ESW?
Thanks,
Tarik Admani
*Please rate helpful posts*

ESW 520 ARP Inspection Problem

Hello,
I have observed strange behavior on ESW 520 switches, with ARP Inspection operation. ARP inspection is configured with static ip to mac bindings, and it work.Problem is with logs, switch generates tons of ARP inspection logs, during network normal operation, but network endpoints are working well. These logs are same witch are generated during ARP poisoning in network. This operation was observed in older and new firmware.
Here is sample log:
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e9 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:5a:85:2e SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.18
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e1 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:80:f5:03 SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.16
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e6 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:19:85:26 SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.15
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e1 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:80:f5:03 SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.16
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e9 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:12:85:2e SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.18
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e5 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:80:f5:10 SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.10
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e6 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:11:85:26 SRC I
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.1
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e5 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:80:f5:10 SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.10
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e8 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:14:85:0c SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.14
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e3 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:80:f5:3f SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.12
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e8 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:51:85:0c SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.14
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e5 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:80:f5:10 SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.10
Informational %ARPINSP-I-PCKTLOG: ARP packet dropped
from port e6 with VLAN tag 10 and reason: packet verification failed SRC MAC 13:71:05:57:85:26 SRC IP
0.0.0.0 DST MAC 00 :00:00:00:00:00 DST IP 10.0.10.15
It seems switch dont like ARP request which are going to local network addresses., but in that vlan all host can communicate which each other.
Do you have any idea what can be the problem ?

Hi ngtransge,
I will first come to say I do not know the answer. But, I will suspect the log entries are indicating a MAC address that arrived on the interface that did not recognize the IP or MAC address. If the MAC or IP is not found in the inspection list, it would revert to the DHCP snooping table if that is enabled.
I would suspect these entries are coming from an untrusted interface then goes through validation.
Can you show the trusted interfaces and the MAC bindings?
Are the MAC addresses on the log entry meaningful to you in any way?
Are those MAC addresses supposed to be going to a particular destination? Or conversely, are the MAC addresses supposed to be seen on an untrusted interface?
-Tom

1130AG Access Point PoE Problem with Cat 3750G-24PS-E switch

I am having a problem on the PoE negotiation of Catalyst 3750G-24PS-E and 1130AG Access point. I used straight and cross cable for physical connection since by default the auto mdix per port of the switch is enabled/on. I used CLI, CNA and Web Device Manager on both devices to isolate and troubleshoot the problem but still the PoE negotiation on both devices won't work out. But when I used the access point into other switch (CE500 PoE Switch), the access point is working properly. Does anyone can help me to distinguish what the problem really is? The IOS Version of 3750G switch is 12.2(25) SEE2 and the 1130AG access point IOS Version is 12.3(8)JEA.

Hi Rob,
Thanks for your reply. Yes, I tried shut/no shut on the switchport many times. I saw that the switch grant power inline on the port but the port still can't/won't provide any power to boot up the access point.
Thanks,
Nelmar

Problem in connecting ESW 520 POE switches

Similar Messages

Maybe you are looking for