SCE vlan translation with connection-mode inline on-failure bypass

Hi guys,
Can anyone tell me the behaviour of the SCE (1010 or 2020) in a failure scenario when configured with the following commands?
connection-mode inline on-failure bypass
VLAN translation increment value 5
While the SCE is in failure mode, will the VLAN increment between the SUB and NET ports still be applied (ie. applied in hardware while the control engine is being bypassed), or will all frames be passed from the SUB to the NET ports unaltered?
Regards,
Brett.

Reading through the CLI :
int LineCard 0
connection-mode inline on-failure bypass
VLAN translation ?
decrement Vlan will be decremented on network port and incremented on subscriber port
increment Vlan will be incremented on network port and decremented on subscriber port
So on traffic that is either coming in on either the network side or sub side will get either incremeneted or decremented for vlan translation.
Is there a need to do this ? what scenario are you considering using it in ? if the traffic is bypassed as is shown why you need to further massage it ?

Similar Messages

Two switches in server mode do not advertise their vlan info. with each other

Hello All,
I have some queries regarding the VTP advertisement as below.
Scenario.....
I have taken two switches named as switch-A and Switch-B connected with each other with port f0/1.I have defined f0/1 as trunk on both the switches.
Then i created the Vlan 2,3,4 on switch-A ,Switch-A configurations revision number got changed from 0 to 3.But when i look up the same on switch-B the revision number is 0 and the vlan that was created on Switch-A is not replicated to Switch-B.
Both Switch-A and Switch-B has default VTP domain configured i.e Null
Both the Switches are in Server mode.
On both the Switches domain password set to null.
Why the vlan is not getting advertise from Switch-A to Switch-B?.According to the vtp configuration they both belong to the same vtp domain i.e null.
So they should advertise the vlan information with each other.
Your suggestion will be appreciated on this.Awaiting for your reply
Thanks,
Mrityunjay singh

Hi Jon,
The trunk is up and running fine.Please find the output for trunk and vtp status as below.
SWITCH-A output---------
SWITCH-A(config)#do sh int f0/1 switch
Name: Fa0/1
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
SWITCH-A(config)#do sh vtp status
VTP Version : 2
Configuration Revision : 3
Maximum VLANs supported locally : 255
Number of existing VLANs : 8
VTP Operating Mode : Server
VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0x58 0xD0 0x3C 0x06 0x01 0xE3 0xD7 0x4D
Configuration last modified by 0.0.0.0 at 3-1-93 00:03:02
Local updater ID is 0.0.0.0 (no valid interface found)
SWITCH-B output.......
SWITCH-B(config)#do sh int f0/1 swit
Name: Fa0/1
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
SWITCH-B(config)#do sh vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 255
Number of existing VLANs : 5
VTP Operating Mode : Server
VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0x7D 0x5A 0xA6 0x0E 0x9A 0x72 0xA0 0x3A
Configuration last modified by 0.0.0.0 at 0-0-00 00:00:00
Local updater ID is 0.0.0.0 (no valid interface found)
I have tried by changing the vtp domain name instead of null and it is working fine in that scenario.But my question is why not is works when the vtp domain is set to null on both the switches.
Your update would be appreciated.
Thanks,
Mrityunjay Singh

Error in Remote Connect Oracle with MTS Mode

I've configed my database to run MTS.
My db is 8.1.5 with x86 Unix SunOS 5.7
If I connect db through local area network, I can connect it with MTS mode.
But if I try to connect db from a remote site, I can't connect and the following error shown :
ERROR:
ORA-12545: Connect failed because target host or object does not exist
By adding a clause (SERVER = DEDICATED) in my remote client's tnsnames.ora
I can connect it.
Rgds,
Edward
The following is my configuration.
init.ora :
mts_dispatchers = "(PROTOCOL=TCP)(DISP=3)"
mts_dispatchers = "(PROTOCOL=TCP)(PRE=oracle.aurora.server.SGiopServer)"
mts_servers = 1
mts_max_servers = 40
mts_max_dispatchers = 4
listener.ora :
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC0))
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = QQQQdb)(PORT = 1521))
(DESCRIPTION =
(PROTOCOL_STACK =
(PRESENTATION = GIOP)
(SESSION = RAW)
(ADDRESS = (PROTOCOL = TCP)(HOST = QQQQdb)(PORT = 2481))
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = /u01/app/oracle/product/8.1.5)
(PROGRAM = extproc)
(SID_DESC =
(GLOBAL_DBNAME = QQQQdb.net)
(ORACLE_HOME = /u01/app/oracle/product/8.1.5)
(SID_NAME = QQQQdb)
tnsnames.ora :
QQQQDB =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = QQQQdb)(PORT = 1521))
(CONNECT_DATA =
(SERVICE_NAME = QQQQdb.net)
EXTPROC_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC0))
(CONNECT_DATA =
(SID = PLSExtProc)
(PRESENTATION = RO)
null

I have run into the same problem using oracle 8.1.6.1 with redhat 6.2..
I have found out that only when I specify host ip in the mts_dispatchers the mts will work correctly..(specifying host domain name is no use)
Here is a sample of the configuration, hope that helps..
mts_dispatchers = "(address=(protocol=tcp)(host=192.168.0.1))(dispatchers=4)"

Architecture Limitations with Replication of VM connected with Physical Mode RDM

what are Architecture Limitations with Replication of VM connected with Physical Mode RDM in vsphere replication. Why VMware is not supporting this?

vSphere Replication does not work with physical mode RDMs. This is because of the way that vSphere Replication and physical mode RDMs work.
As outlined in this: VMware KB: Difference between Physical compatibility RDMs and Virtual compatibility RDMs
It isn't currently possible for VR to do what it needs to do with physical mode RDMs.
Does this answer your question?

Can i have a connected mode with lightroom 5 for my SONY SLT-A77V ?

can i have a connected mode with lightroom 5 for my SONY SLT-A77V ?
thanks for anwers.

Hi,
Haveee a look here for Tethered Camera Support: http://helpx.adobe.com/lightroom/kb/tethered-camera-support-lightroom-4.html

LR 5.3 "Capture in connected mode" with D610

Hi,
The Lightroom 5.3 Capture in Connected Mode does not recognize my Nikon D610. Could you please help?
Thanks
Regards
Cyril

Thanks a lot Tony for your quick and clear answer.
Hope LR 5.4 will be ready soon !
Cyril
Le Lundi 10 mars 2014 10h38, Tony Jay <[email protected]> a écrit :
Re: LR 5.3 "Capture in connected mode" with D610 created by Tony Jay in Photoshop Lightroom - View the full discussion

Can't connect to ftp servers with Passive Mode

Hello,
I can't connect to ftp servers with Passive Mode.
I have Linksys WRT54GL.
Msg i have:
[R] 200 PORT Command successful.
[R] LIST -al
[R] 150 Opening ASCII mode data connection for /bin/ls.
[R] 426 Data connection closed, transfer aborted.
[R] List Error
and:
[R] 200 Type set to A.
[R] MODE Z
[R] 200 MODE Z ok.
[R] PASV
[R] 227 Entering Passive Mode (*,*,114,11,8,147)
[R] Opening data connection IP: *.*.114.11 PORT: 2195
[R] Data Socket Error: Connection timed out
[R] List Error
Thanks for the help !

Maybe you need to do Port Forwarding on your router...Check for the Port Numbers for your FTP Server...

We recently switched ISPs. To connect to the new ISP our Airport Extreme has to be in bridge mode. Now our Nintendo Wii won't connect to the Airport. Is it an issue with bridge mode that is causing this?

We recently switched ISPs. To connect to the new ISP our Airport Extreme has to be in bridge mode. Now our Nintendo Wii won't connect to the Airport. Is it an issue with bridge mode that is causing this? We're running two Macs wirelessly with no problems. And the Wii did connect before the switch.

Hello and thanks for the reply. I gave this a try, turned off Airport on one of the computers and tried the Wii again. Still no connection. I should say that we're also running an old G4 (wired) off the Airport as well, with no problems. I've tried many things to make the Wii to work, including power cycling the Airport, turning off the security settings in the Airport, resetting the Airport to it's default and redoing the network, resetting the network setting on the Wii (several times), moved the Airport closer to the Wii, all with no luck. The Wii "sees" the Airport but won't connect to it. I'm at a loss for anything else to try, so any help is appreciated.

Problem with Internet Connection Mode

I followed the manual instruction, but nothing shows under my PC's list of available wifi connections.
I have a Dell Inspiron 1501 running Windows Vista.
HTC Sync is latest version (3.0.5517) and shows connection to phone.
Phone shows Internet Connection Mode as selected.
Data connection is on (Mobile network is checked)
What's the problem? Thanks.
Erin

Hello Erin,
Just to clarify, the cost for the mobile hotspot/ mobile broadband connect has not been determined after 6/15. You will receive a message on the device asking if you would like to continue the service at a cost.
As stated by a previous member, there is an app on the device that needs to be setup to use the mobile hotspot feature. It does require some setup, like a security password, but it really easy to complete. I would verify that the router name (SSID) is filled out & that the security is set to WPA2 (AES). Also, I would recommend changing the default password for added security.
Hope this helps...

Vlan translation on SCE8000 version 3.8.5

i have the version on sce 3.8.5, in the version 3.1 exist a command vlan translation decrement value, but i cant find in the version 3.8.5. how i can configure vlan translation on the sce new version. thanks
regards

If you have to work with it, I would simply import through the finder to a folder on your hard disk and then import from there. You might have to set up the USB communication mode on your camera to Mass storage isntead of PtP (should be somewhere buried in the menus). Changing that setting might help with the direct Lightroom import too. You might also get better results going through a card reader (you can get them at many places for <$10) instead of connecting directly to the camera which is always a recipe for problems and slow imports. A card reader is a good investment as they usually are MUCH faster than going through the camera's USB connection.
A Lightroom upgrade to v5 is $79 dollars. It might be worth it to think about. I understand tight money though and sometimes even $80 is a big deal but you might not have been aware you can get upgrade pricing if you have LR 3. ANother option is getting the creative cloud photographer deal which is $10/month and includes both the full version of Photoshop and Lightroom. I don't like the idea of rental software but that is quite the deal.

Dynamic VLAN assignments with ACS

Hello all.
I am trying to do dynamic vlan assignments with dot1x auth. I am using ACS5.3 and Cisco 3560.
I have configured them correctly to the best of my knowledge but it doesn't seem to be working correctly.
aaa group server radius nac_serversserver-private 84.93.219.163 auth-port 1812 acct-port 1813 key 7 xxxxxxaaa authentication dot1x default group nac_serversaaa authorization network default group nac_serversinterface FastEthernet0/2 switchport mode access switchport voice vlan 364 srr-queue bandwidth share 10 10 60 20 srr-queue bandwidth shape 10 0 0 0 priority-queue out authentication event no-response action authorize vlan 303 authentication host-mode multi-domain authentication port-control auto mls qos trust cos auto qos voip trust dot1x pae authenticator
When the user connects I get the following via debug:
Apr 30 15:19:36.303: %AUTHMGR-5-VLANASSIGN: VLAN 300 assigned to Interface Fa0/2 AuditSessionID 000000000000001F8B7214D7
However "show int status" still shows the port on vlan 1 and the end device is stuck with a 169.x.x.x address (Windows PC).
Any idea what config I'm missing?
Thanks
Paul

Hello.
Here is whats left in the log.
Apr 30 15:19:36.253: dot1x-ev:Enqueued the eapol packet to the global authenticator queue
Apr 30 15:19:36.253: EAPOL pak dump rx
Apr 30 15:19:36.253: EAPOL Version: 0x1 type: 0x0 length: 0x007B
Apr 30 15:19:36.253: dot1x-ev:
dot1x_auth_queue_event: Int Fa0/2 CODE= 2,TYPE= 25,LEN= 123
Apr 30 15:19:36.253: dot1x-ev(Fa0/2): Received pkt saddr =70cd.6066.988a , daddr = 0180.c200.0003,
                    pae-ether-type = 888e.0100.007b
Apr 30 15:19:36.253: dot1x-ev(Fa0/2): dot1x_sendRespToServer: Response sent to the server from 0x55000021 (70cd.6066.988a)
Apr 30 15:19:36.269: dot1x-ev(Fa0/2): Sending EAPOL packet to 70cd.6066.988a
Apr 30 15:19:36.269: dot1x-ev(Fa0/2): Role determination not required
Apr 30 15:19:36.278: dot1x-ev(Fa0/2): Sending out EAPOL packet
Apr 30 15:19:36.278: dot1x-ev(Fa0/2): Role determination not required
Apr 30 15:19:36.278: dot1x-ev:Enqueued the eapol packet to the global authenticator queue
Apr 30 15:19:36.278: EAPOL pak dump rx
Apr 30 15:19:36.278: EAPOL Version: 0x1 type: 0x0 length: 0x002B
Apr 30 15:19:36.278: dot1x-ev:
dot1x_auth_queue_event: Int Fa0/2 CODE= 2,TYPE= 25,LEN= 43
Apr 30 15:19:36.286: dot1x-ev(Fa0/2): Received pkt saddr =70cd.6066.988a , daddr = 0180.c200.0003,
                    pae-ether-type = 888e.0100.002b
Apr 30 15:19:36.286: dot1x-ev(Fa0/2): dot1x_sendRespToServer: Response sent to the server from 0x55000021 (70cd.6066.988a)
Apr 30 15:19:36.286: dot1x-ev(Fa0/2): Sending EAPOL packet to 70cd.6066.988a
Apr 30 15:19:36.286: dot1x-ev(Fa0/2): Role determination not required
Apr 30 15:19:36.294: dot1x-ev(Fa0/2): Sending out EAPOL packet
Apr 30 15:19:36.294: dot1x-ev(Fa0/2): Role determination not required
Apr 30 15:19:36.294: dot1x-ev:Enqueued the eapol packet to the global authenticator queue
Apr 30 15:19:36.294: EAPOL pak dump rx
Apr 30 15:19:36.294: EAPOL Version: 0x1 type: 0x0 length: 0x002B
Apr 30 15:19:36.294: dot1x-ev:
dot1x_auth_queue_event: Int Fa0/2 CODE= 2,TYPE= 25,LEN= 43
Apr 30 15:19:36.294: dot1x-ev(Fa0/2): Received pkt saddr =70cd.6066.988a , daddr = 0180.c200.0003,
                    pae-ether-type = 888e.0100.002b
Apr 30 15:19:36.294: dot1x-ev(Fa0/2): dot1x_sendRespToServer: Response sent to the server from 0x55000021 (70cd.6066.988a)
Apr 30 15:19:36.303: %DOT1X-5-SUCCESS: Authentication successful for client (70cd.6066.988a) on Interface Fa0/2 AuditSessionID 000000000000001F8B7214D7
Apr 30 15:19:36.303: dot1x-ev(Fa0/2): Sending event (2) to Auth Mgr for 70cd.6066.988a
Apr 30 15:19:36.303: %AUTHMGR-7-RESULT: Authentication result 'success' from 'dot1x' for client (70cd.6066.988a) on Interface Fa0/2 AuditSessionID 000000000000001F8B7214D7
Apr 30 15:19:36.303: %AUTHMGR-5-VLANASSIGN: VLAN 300 assigned to Interface Fa0/2 AuditSessionID 000000000000001F8B7214D7
Apr 30 15:19:37.167: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to up
Apr 30 15:19:37.335: %AUTHMGR-5-SUCCESS: Authorization succeeded for client (70cd.6066.988a) on Interface Fa0/2 AuditSessionID 000000000000001F8B7214D7
Apr 30 15:19:37.335: dot1x-ev(Fa0/2): Received Authz Success for the client 0x55000021 (70cd.6066.988a)
Apr 30 15:19:37.335: dot1x-ev(Fa0/2): Sending EAPOL packet to 70cd.6066.988a
Apr 30 15:19:37.335: dot1x-ev(Fa0/2): Role determination not required
Apr 30 15:19:37.335: dot1x-ev(Fa0/2): Sending out EAPOL packet
Hope that helps

Guest Portal Using ISE with Flexconnect Mode

Folks,
I have configured my guest web authentication using ISE with flexconnect mode like this:
http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080bcb905.shtml
After done, I connect the SSID but cannot log in. I cannot get IP address and in the ISE I can see that my device has already hit my authorization profile and the status is pending. Can anyone help me with this?

As Richard says, check to see if you have an IP address. If not check the AP settings for FlexConnect. Is the mode on the AP set right? Please confirm that you are using FC local switching and not centralised switching?
Is the VLAN tagging enabled on the AP, and/or the VLANs on the AP switchport set right?

How to plan Failover for the following Scenarios in Flex-connect mode.

The following queries are in respect to AP High availability (not SSO fail over or Controller HA), meaning if one controller fails, the AP will be failing over to the secondary controller which is in a different Geo location. the AP will be in Flex-connect mode with local switching and local auth. in this scenario, following are my queries
1: If i have an SSID that has an interface group linked to it, can i fail it over on other controller where there may be a single WLAN linked to it.?
2:Do we need the subnet masks to be same at both ends?
3: if i have an SSID with open authentication, can i configure the remote network SSID with no authentication?
4: can any one link me up with a document that explains configuration case study of the flex-connect mode fail over scenarios.
All the help given would be really appreciated.
Thanks.

hi Scott,
Sorry for replyimg late. and thanks for your reply and suggestion.
it did help me a lot, but now i am in a tiff.
the thing is my client has following existing scenario:
he has 6 disparate locations with a standalone 5508 WLC at each location.
he is now planning to configure AP failover for every location.
we are using the Flex-connect design as he has not procured a HA-SSO license.
also the WLC are not in same location.
the Flex-connect design is with Local Switching and local Auth.
there are 2 SSID which are causing me issues.
1: SSID A is linked to an interface group which has multiple vlans.
2: SSID B shares its WLAN interface with another SSID (the wlan is split between 2 different SSID)
we need local switching for these and also they need to have local auth.
so if i remove the interface group for SSID A and use a bigger subnet, what will be the best possible mask to use considering that the ARP and DHCP broadcast shouldn't choke up the network (existing subnets are /21 and /22). or any workaround to minimise the network activity.
and for SSID b what is the configuration i would need to do on the secondary controller or is it just that the SSID needs to be present on the controller and the mask need not be same.
sorry for troubling you and thanks in advance
Niiketan Sutar.

Vlan Translations, 6500

Looking to verify if the version IOS on the 6500 will work. This is the document for 12.2SX
http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/vlans.html#wp1044990
The version running is 12.2(33)SXI2a. It has the appropriate cards, so just need to verify this version has the commands. I dont have direct access to ty them myself, nor attempt to walk someone through on a production switch.
Thanks in advance.

Hi,
From the IOS master commands link
http://www.cisco.com/en/US/docs/ios-xml/ios/interface/command/ir-s7.html#wp3252950350
switchport vlan mapping
To map the traffic arriving on the VLAN original-vlan-id to the VLAN translated-vlan-id and the traffic that is internally tagged with the VLAN translated-vlan-id with the VLAN original-vlan-id before leaving the port, use the switchportvlanmapping command in interface configuration mode. To clear the mapping between a pair of VLANs or clear all the mappings that are configured on the switch port, use the no form of this command.
switchport vlan mapping original-vlan-id translated-vlan-id
no switchport vlan mapping { original-vlan-id translated-vlan-id | all }
Syntax Description
original-vlan-id
Original VLAN number; valid values are from 1 to 4094.
translated-vlan-id
Translated VLAN number; valid values are from 1 to 4094.
all
Clears all the mappings that are configured on the switch port.
Command Default
No mappings are configured on any switch port.
Command Modes
Interface configuration
Command History
Release
Modification
12.2(17b)SXA
Support for this command was introduced on the Supervisor Engine 720.
12.2(18)SXE
This command is not supported on GE Layer 2 WAN ports.
12.2(33)SRA
This command was integrated into Cisco IOS Release 12.2(33)SRA.
So 12.2.33SX is supported
Regards,
Alex.
Please rate useful posts.

VLAN translation, Cisco 3750G 12S-E

Hi
I need to do some VLAN translation where I achieve the following:
On port 1 translate VLAN 101 -> 1001. VLAN 102 -> 1002. VLAN 103 -> 1003.
On port 2 translate VLAN 104 -> 1001. VLAN 105 -> 1002. VLAN 106 -> 1003.
On port 3 translate VLAN 107 -> 1001. VLAN 108 -> 1002. VLAN 109 -> 1003.
In example VLAN 1002 in on port 2 is translated to VLAN 105 internally on the Cisco.
How do I do this? :)

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
You might be able to cross link VLAN ports, e.g. port 1, VLAN 101, connects to port 2, VLAN 1001, to effect a "translation", but on a switch with only 12 ports, you can only do 5 such connections (I'm assuming you want 1 or 2 ports for connections to other devices to move the VLAN traffic in or out).

SCE vlan translation with connection-mode inline on-failure bypass

Similar Messages

Maybe you are looking for