SG/SF 300 switch configuration change in behaviour

Since upgrading the small business switches from the initial factory shipped image(1.0.0.27) to 1.1.1.8 or 1.1.2.0 we are seeing a failure of our config file being completely loaded. We have a manangement ip on vlan 99 which fails to take when you load the configuration thru HTTP/HTTPS interface. Cisco small business TAC states that the switch has to be switched to layer 3 mode in order for this config to be accepted.
If you manually paste the config via cli the config will take. Problem being is you are prompted at 2 points to enter yes during the input. The switch mode stays layer 2.
This was working previous to 1.1.1.8. If I have my template config loaded and I upgrade to 1.1.1.8 vlan 99 ip is working. The probem is when you get a unit from the factory that has 1.1.1.8 or 1.1.2.0 you have to jump thru hoops to get the template to work.
Our field techs use the http interface to upload the template config. This is broken and adds additional time to there install.
I am requesting some type of fix to allow me to use http to upload the config that uses a management ip on a different vlan and not have to switch to mode to layer 3.
Bottom line is uploading a config should not be this difficult and it was functional before the image upgrade to 1.1.1.8.

Hi Mr, to try to fix this, you can have the switch doing DHCP for you on the latest firmware.
On my switch I have vlan 1 and 2 vlan. I set up DHCP to service through my vlan 2.
My vlan 1 is 192.168.100.129
My vlan 2 is 192.168.2.254
config t
vlan database
vlan 2
int vlan 1
ipaddress 192.168.100.129 /24
int vlan 2
ip address 192.168.2.254 /24
ip dhcp server
ip dhcp pool network vlan 2
address low 192.168.2.10 high 192.168.2.50 255.255.255.0
lease infinite <-- make the least time to not expire
default-router 192.168.2.254 <--- specifies the vlan 2 SVI as the gateway
dns-server 8.8.8.8 <-- I chose random DNS
You can set up dhcp pools for every vlan and have the switch assign the connecting clients the IP within the SVI they connect to. Then to make the modem work you will need a static route pointing back to the switch to be able to route the traffic.
If you need a visual effect for a router that doesn't support vlans please look at this topic-
https://supportforums.cisco.com/thread/2123434
-Tom
Please mark answered for helpful posts

Similar Messages

Sf300 switch configuration

Hello , This is Shanker from India . can you tell me sf 300 switch configuration . how disable in traffic. .
my picture like i have ring network connect to my Gig port but i don't want to input 1 to 24 port .
so tell me how configuration

Hi Siva,
Now it would be good idea to upgrade boot code and firmware to the latest one:
firmware: 1.4.0.88
boot code: 1.3.5.06
to download:
http://software.cisco.com/download/release.html?mdfid=283019670&softwareid=282463181&release=1.4.0.88&relind=AVAILABLE&rellifecycle=&reltype=latest
for boot code upgrade:
http://sbkb.cisco.com/CiscoSB/ukp.aspx?vw=1&docid=f1e39061efb14c94a570bcbd6582167b_Firmware_Upgrade_Troubleshooting_on_300_and_500_Series_Manag.xml&pid=4&fcid=&fpid=&slnid=6
Regards,
Aleksandra

Help me configure Change request management !!!

Dear friends,
I am Going to Configure Change request Management, so just to ensure that the configuration is not erronous, i would need Expert advise..
Just want to know Clear few things before i proceed..
I am also refering SPRO and related notes
Scenario :
I have two SYSTEMS SAP ECC 6.0 with System id R03 and Soluiton manager with SYSTEM id SOL,
R03 has 3 clients, 300 600 700..
In R03 300 is the development client, 600 is quality client, 700 is the production client.
SOL has 2 clients, 100, 200
With 200 as the production client.
Q.1) Do i have to configure CHARM in both the client (100 and 200 of SOLMAN).
Q.2) Initially I had tried to set CHARM in client 100 of solman, but later on realized that it has to be set up in client 200.
When i logon to client 200 and Execute IMG activity Spro-> sap soltion manger->basic settings-> sap solution manager system->activate integration with change request management.
Then by default it take the previous client ( client 100) as the change request management client.
( as we know there are three steps in the above activity ), the other activity are executed properly, only prblem being that the default client is always set to 100, which should not be the case).
I do get the prompt saying ( "The change request clent is set to clent 100, do u want to change to client 200, on clicking yes, still it is always set the same client 100 as charm client ")
Plz let me know what do i do to set the change request client to 200??
Q.3) Regarding TMS, we have local domain controller in solman and local domain in R3.
We are planing to establish domain links between the two systems( ie both the domain controllers) ??
Is this the right strategy ??
Any other method that u can recommend ??
Q.4)One of the IMG activity says, Generate Destinations to client 000 of all the domain controllers..
Whenever i do this these, destinations are created with errors, i am not able to create trusted RFC destinations without errors.
When i logon to satellite domain controler and excecute sm59 there are 2 destinations created Trusted and BACK.
These destinations works well,
but when i logon to Solman, got to sm59 , when i test the TMW and TRUSTED rfc destinations i test these destinations using Remote Logon i get error,
" no authorization to logon as trusted system"
I went thru one note which recomended Kernel upgrades to solve the problem,
I r3 my kernel relaese is 700 with patch level 56, the note recomends to apply patch 80, did u have these problems??
what is your kernel patch levels in sateliite and solman systems.
Q.5) TO be able to raise tickets from R3 to solman we create RFC destinations.
We also create RFC destinations to client 000 of all the sateliite system,
dont u think these RFC destinations might interfere with each other??
Q.6) Is there anyone who has successfully configured CHARM. Can you plz share the configuration documents with me..
Please note :
All the contributors would be handesomely rewarded with points .

Hi,
Check this
Note 128447 - Trusted/Trusting Systems
For your Q4.
Q3.)
Establishing Domain link - That's the right way. Go ahead.
These are the steps.
1.Define Transport Routes for System Landscape
assign exactly one development system to a production system, and that these two systems are connected by exactly one unique transport track. If a development system and a production system are connected by more than one transport track, this may lead to inconsistencies within the transport distribution. This type of transport configuration cannot be supported by Change Request Management, and may cause inconsistencies within the tools involved.
2. Activate Extended Transport Control
The CTC parameter should be '1'
3.Configure Transport Strategy
Deactivate the QA Approval.
4. Activate Trusted Services.
5.Activate Domain Links.
You have to activate domain link between systems.
6. Generate RFC Destinations to Client 000
Hope this helps.
feel free to revert back.
--Ragu

Configuration archive after configuration change

Hello,
I'm assuming this can work with switches, routers, and controllers. I'm running PI 2.1 and am trying to get the configuration archive functionality working. I have both of these options checked under System Settings > Configuration Archive:
:: Archive configuration out-of-box
:: Archive configuration on receiving configuration change events
On the IOS device, these settings were configured for syslog/snmp:
logging buffered 100000
no logging event link-status
logging trap notifications
logging facility local6
logging source-interface Loopback0
logging <Prime IP>
snmp-server community ***** RW 13
snmp-server enable traps config
snmp-server enable traps syslog
snmp-server host <Prime IP> version 2c *****
I do not see any syslog messages in PI under alarms/alerts and the configuration never gets archived. I haven't run tcpdump yet to determine if PI is receiving these traps but I was hoping it was something simple I was overlooking. Thanks for any assistance that can be provided.

Thank you for the reply. To answer your question, yes. Community information matches with PI credentials.
I actually did get it to work yesterday. I did original testing on a 1921 router which is still not working, but when I tried configuring the same information on some switches (3750's) it worked. I thought routers would be configured the same - are there hardware limitations to this?
I look in the built-in CLI template 'Configure Logging' in PI and it only has switches and WLCs as available devices to push out to but I don't know what to make of it.

Log configuration changes to syslog on Nexus 7000?

I need to be able to log any configuration changes to syslog on our Nexus switches. On IOS this is easy with the archive commands, but I'm a little stuck trying to do this on our Nexus gear. On the IOS gear I run the commands:
archive
log config
logging enable
logging size 100
hidekeys
notify syslog
How do I do the equivalent on NX-OS?

Cisco NX-OS can log configuration change events along with the individual changes when AAA command accounting is enabled.
With command accounting enabled, all CLI commands entered, including configuration commands, are logged to the configured AAA server. Using this information, a forensic trail for configuration change events along with the individual commands entered for those changes can be recorded and reviewed.
Because of this capability, it is strongly advised that AAA command accounting be enabled and configured.
Refer to the “TACACS+ Command Accounting” section of this document for more information.
The Nexus 7000, by default keeps a local accounting log of all the configuration commands entered on the device; you can view this with the 'show accounting log' command.
In NX-OS, we changed the way logging works. We keep a local accounting log of all the
configuration changes ("show accounting log"), but if you want to send those logs to a
server, it must be done with through a TACACS server. Please see the below documentation:
Configuring AAA on Nexus
TACACS command accounting
-Thanks
Vinod
**Encourage Contributors. RATE Them.**

Cannot save configuration changes on catalyst 3548

i have an old switch that worked when last on network. powered on normally, but when i attempt to make configuration changes (copy running config startup config), it fails. where can i find information on working with file systems Version 12.0(5.3)WC(1), MAINTENANCE INTERIM SOFTWARE

hi, thanks for the followup. i appreciate it. i am sure the is corruption in the config.text file but am having a problem deleting it. i have copied a number of errors, listed below.......
va-research-3548-06#copy runn start
Destination filename [startup-config]?
Building configuration...
intel_28f320j5_write_bytes: flash busy error
flashfs[1]: writing to flash handle 0x4E4E34, device 0, offset 0x360000, length
0x208: Operation Failed
flashfs[1]: sector ptr: {0x1B, 0xA0}
nv_done: unable to open "flash:config.text.new"[OK]
va-research-3548-06#
va-research-3548-06#dir
Directory of flash:/
%Error opening flash:/ (Device or resource busy)
3612672 bytes total (476160 bytes free)
va-research-3548-06#
va-research-3548-06#sh ver
Cisco Internetwork Operating System Software
IOS (tm) C3500XL Software (C3500XL-C3H2S-M), Ve
INTERIM SOFTWARE
Copyright (c) 1986-2001 by cisco Systems, Inc.
Compiled Mon 30-Apr-01 07:51 by devgoyal
Image text-base: 0x00003000, data-base: 0x003331F4
ROM: Bootstrap program is C3500XL boot loader
va-research-3548-06 uptime is 4 days, 16 hours, 36 minutes
System returned to ROM by reload
System image file is "flash:c3500XL-c3h2s-mz-120-5.3.WC.1.bin"
cisco WS-C3548-XL (PowerPC403) processor (revision 0x01) with 16384K/1024K bytes
of memory.
Processor board ID FAB0528V1LZ, with hardware revision 0x00
Last reset from warm-reset
Processor is running Enterprise Edition Software
Cluster command switch capable
Cluster member switch capable
48 FastEthernet/IEEE 802.3 interface(s)
2 Gigabit Ethernet/IEEE 802.3 interface(s)
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:06:53:A9:14:40
Motherboard assembly number: 73-3903-08
Power supply part number: 34-0971-01
Motherboard serial number: FAB052572SW
Power supply serial number: PAC052300EI
Model revision number: A0
Motherboard revision number: C0
Model number: WS-C3548-XL-EN
System serial number: FAB0528V1LZ
Configuration register is 0xF
va-research-3548-06#
va-research-3548-06#dir flash:
Directory of flash:/
2 -rwx 1749748 Apr 30 2001 07:54:49 c3500XL-c3h2s-mz-120-5.3.WC.1.bin
3 -rwx 94375 Apr 30 2001 07:54:49 c3500XL-diag-mz-120-5.3.WC.1
4 drwx 10176 Feb 28 1993 16:00:55 html
5 -rwx 272 Dec 31 1969 16:00:20 env_vars
165 -rwx 4337 Feb 28 1993 18:06:35 config.text
166 -rwx 1096 Mar 01 1993 15:41:40 vlan.dat
3612672 bytes total (476160 bytes free)
va-research-3548-06#del
va-research-3548-06#delete flash:config.text
Delete filename [config.text]?
Delete flash:config.text? [confirm]
intel_28f320j5_write_bytes: flash busy error
flashfs[1]: writing to flash handle 0x4E4E34, device 0, offset 0x360000, length
0x208: Operation Failed
flashfs[1]: sector ptr: {0x1B, 0x9B}
flashfs[1]: filesystem marked down. Use "fsck" to recover.
%Error deleting flash:config.text (I/O error)
va-research-3548-06#

Can the ACE be configured for logging configuration changes to syslog server ?

Hi,
On all our routers, switches and firewalls we've configured syslog so we get logs when configuration changes occur.
Is this possible on the ACE too ?
regards,
Sebastian

Hi Sebastian,
Yes it is possible but depends upong the logging level you have set. So logging trap 5 should be able to get you the configuration changes or command execution logs.
Nov 1 2013 11:20:33 : %ACE-5-111008: User 'admin' executed the 'logging buffered 6' command.
Nov 1 2013 11:20:48 : %ACE-5-111008: User 'admin' executed the 'no rserver testlog' command.
So you should see these level 5 logs on syslog if logging trap 5 is configured.
Let me know if you have any questions.
Regards,
Kanwal

ACS Applying configuration changes failed

Hello
I have a problem with ACS version 5.1.0.44.6. running on 1120 appliance.
After making some changes to authorization rules of Device Admin access services, I can no loger access authorization page for Device admin access services. Error on Access Policies page is: . This System Faliure occurred: {0}. Your changes have not been saved. Click OK to return to the list page.
Logs recorded this:
Severity
FATAL
Message
Applaying configuration changes failed
Category
CSOacs_Internal_Opreations_Diagnostics
Code
31102
Details
LastErrorMessage=Policy DB problem: Policy value type is not supported. ConfigTransactionID=2968
After this we can no longer authenticate on any device with TACACS+. Telnet from switch to the ACS server on port 49 returns % Connection refused by remote host. RADIUS authentication and authorization for VPN users on same server is working fine.
Do you have any idea how to solve this problem?
Hrvoje

Thanks for the screenshot!
It appeared to be an issue in StatusMonitor that I also could reproduce: we don’t work correctly with the structure when virtual directories and applications are mixed, i.e. due to this bug we cannot find web application if it’s under the virtual directory,
that’s under the web site.
I.e. app named WebSite/Dir/App1 cannot be found by SM during adding application insights:
WebSite
   ---> Dir (virtual directory)
          ---> App1 (web application)
We'll triage this bug and address in one of the nearest StatusMonitor updates.
Thanks for finding this issue!

IviSwitch looses value when sending, "configure switch" configuration = TRUE

Hi all,
we are currently evaluating Teststand 4.1 with a keithley 3706 system switch multimeter.
After a first enthusiasm, thinking this tool together with the switch multimeter fits perfect our needs, real life seems some harder.
Between several other problems, we need to tell the device, that the channel "s1com1" and "s1com2" are configuration channels.
Configuring the teststand step : Edit IVI Switch Step -> IVI switching, Configure Switch : Channels "s1com1", Configuration = True
leads to two actions observable in Ni Spy:
GetAttributeViBoolean(...,"s1com1", _IS_CONFIGURATION_CHANNEL , VI_FALSE)
SetAttributeViBoolean(...,"s1com1", _IS_CONFIGURATION_CHANNEL , VI_FALSE)
manually calling this class functions from an interactive CVI fp works as expected (setting it to VI_TRUE)
Does anybody have any hint what we could do wrong? Currently we are just before writing wrappers in cvi and skipping all the wonderful IVIStep Types in teststand.
Looking forward to any feedback
David Clus
Solved!
Go to Solution.

David -
This might the same problem that we recently discovered in our internal testing. For the problem that we found, we will likely include our fix in an upcoming maintenance release. Can you verify whether the problem still occurs if you change your regional settings to English in the control panel? If the problem no longer occurs, can you use this as a workaround for now?
Message Edited by Scott Richardson on 10-06-2008 10:48 AM
Scott Richardson
National Instruments

SG 200-08 - configuration changes disappear on power cycling

it's my first smart switch, but i've set up a million routers, so i'm not a complete n00b.
the only change that survived power cycling is the change of default password that it forced me to do.
what am i doing wrong, or is the box defect?

You will need to save your configuration changes before exiting the switch. Below are the steps to do this taken from the Admin guide.
THANKS
Rick Roe
Cisco Small Business Support Center
Copying and Saving Configuration FilesThe
Copy/Save Configuration page enables you to copy files within the filesystem. For example, you can copy the Backup Configuration file to the Startup
Configuration file so that it will be used the next time you boot up the switch.
To copy a file to the Startup or Backup Configuration file:
STEP 1
Click Administration > File Management > Copy/Save Configuration in thenavigation window.
STEP 2
Select the Source File Name:
Running Configuration
—Current configuration, including any changesapplied in the current management session.
Startup Configuration—Configuration file type used when the switch lastbooted. This does not include any configuration changes applied but not yet
saved to the switch.
Backup Configuration—Backup configuration file type saved on the switch.
Mirror Configuration—If the Running Configuration is not modified for atleast 24 hours, it is automatically saved to the Mirror Configuration file type,
and a log message with severity level
Alert is generated to indicate that anew Mirror Configuration file is available. The Mirror Configuration file can be
used when the switch has problems booting with the Startup or Backup
Configuration file types. In such cases, the administrator can copy the Mirror
Configuration to either the Startup or Backup Configuration file type and
reboot.
STEP 3
For the Destination File Name, select the file type to be overwritten with the file
you are copying:•
Startup Configuration—Configuration file type used when the switch lastbooted. This does not include any configuration changes applied but not yet
saved to the switch.
Backup Configuration—Backup configuration file type saved on the switch.
STEP 4
Click Apply to begin the copy process.When complete, a window displays the message, Copy Operation Successful.

Accounting Command for Configuration Changes

Hi All,
i want the logs of command 0r configuration changes made in ROuters or Switches to ACS 4.1,
like the following
Wed Jun 27 03:46:47 2001 172.16.25.15 fgeorge tty3 5622329430/4327528 stop
task_id=3 service=shell priv-lvl=1 cmd=show version <cr>
the above is found in the Command Accounting of the Link
http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfacct.html#wp1000976

Anand
The information that you need about how to configure this is not so good in the link that you posted. But it is not difficult to configure. I use the following line in configuration of routers and get the accounting records in ACS for all privilege level commands including any configuration commands.
aaa accounting commands 15 default start-stop group tacacs+
You might want to change some details (like tacacs+) depending on how your routers are configured to talk to ACS.
HTH
Rick

1532E MAP disassociating - Cause=Radio reset due to configuration change.

Hello,
have a1532E MAP with WLC 2504 and 7.6.100.0 that shows oddly enough "Cause=Radio reset due to configuration change" and the interface resets.
Any idea how this comes about without any changes made.
Relevant log attached.

After updating to 7.6.120 we've noticed that some of our AP's wouldn't come up. After looking in the switch's logs I found this
chassis: Ports PoE usage has exceeded threshold of 80%.
The power drawn is 117w (show power-over-ethernet).
When I use the following command: show power-over-ethernet brief I get this:
PoE | Power Power Alloc Alloc Actual Configured Detection Power Pre-std
Port | Enable Priority By Power Power Type Status Class Detect
----- + ------ -------- ----- ----- ------ ----------- ----------- ----- ------
1 | Yes low lldp 17 W 7.0 W Delivering 3 off
2 | Yes low lldp 17 W 7.0 W Delivering 3 off
3 | Yes low lldp 17 W 6.8 W Delivering 3 off
4 | Yes low lldp 17 W 7.1 W Delivering 3 off
5 | Yes low lldp 17 W 7.0 W Delivering 3 off
6 | Yes low lldp 17 W 6.9 W Delivering 3 off
7 | Yes low lldp 17 W 6.8 W Delivering 3 off
8 | Yes low lldp 17 W 6.7 W Delivering 3 off
9 | Yes low lldp 17 W 6.9 W Delivering 3 off
10 | Yes low usage 17 W 0.0 W Disabled 3 off
Port 10 is where the missing AP is on.
How is it possible that after the update to 7.6.120 the AP won't work anymore?

Since the last FF update, the Tab is vanishing when I chose a tab. I there any possibility to change this behaviour back?

I use Firefox for android on my Tablet , the Asus tf700. Since the last update, I am now on 23.0, the tabs bar is always hiding as soon as I change the tab or touch the website, irrespective of screen orientation. Is there any configuration option to change this behaviour back?

I think such feature is being worked on.

Missing "Last configuration change at" into the config

On two Catalyst 3750 12.2.(25r) SE1
with the command "show run"
I don't see the info:
"Last configuration change at xx"
"NVRAM config last updated at xx"
I use the "normal command:
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
aaa new-model
aaa authentication login default group tacacs+ local
aaa authorization exec default group tacacs+ local
aaa accounting exec default start-stop group tacacs+
aaa session-id common
On all other switches with the same config i haven't this problem
IOS Bug?
Best Regards
Andrea

Great!
The clock was correct but the NTP server is not reachable (behind a Firewall)
I have removed the NTP server, until the FW permit the NTP Protocol.
Now all messages are written into the config
Many Thanks
Andrea

Update Switch Configuration from Switch Executive 2.1 to 3.5

Hi everybody,
I tried to update from Switch Executive 2.1 to 3.5 and had to find out, that my configurations have stoppped working. To me, it looks like 3.5 doesn't like my IVI configuration for the switching modules.
The Verify function in MAX tells me that the PXI cards are not accessible. The frontpage of the switch configuration shows no configurations / terminal blocks.
Since the configuration consists of nine matrix cards with a lot of hardwires, I'd really appreciate a way to properly import the old configurations (xml files are available)
Any ideas?
Cheers
Oli
Programming languages don't create bad code, programmers create bad code....
Solved!
Go to Solution.

Hey Oli,
Background:
By default, NISE 3.5 and later use the DAQmx API (instead of IVI) to directly control switch modules. This is different from previous versions, which required setting up an IVI session for each NI Switch module. You can still use IVI with NI Switch modules in NISE 3.5 and later, but this is not the default behavior.
The KB Sebastian referenced lists three different upgrade paths to use exported IVI Virtual devices in NISE 3.5 and later. As you've discovered, NISE 2.1 has fewer export formats, so we'll need to take the following steps:
Assumptions:
You have virtual devices created in NISE 2.1 (file format doesn't matter).
IVI Sessions and Logical names haven't been setup on your NISE 3.5 machine:
Action items:
Create IVI sessions and logical names. You could manually create the IVI sessions (as mentioned in the KB), but there's a MUCH easier method:
Right click on the NISE Virtual Devices tab and select 'Create New':
Click the 'auto create IVI devices' button. A dialogue will pop up... just click yes:
The NISE Create Virtual device window should now look like this:
Notice that we now have IVI devices. Sweet! So now just click cancel (yes, cancel)... we only used this dummy virtual device to simplify the IVI creation process.
If you look in MAX, it'll appear as if there still aren't any IVI devices:
Fear not, all we need to do is refresh. To do this, hit F5, and voila!:
So now all you need to do is change the IVI Logical name to whatever your old IVI Logical name was and then import as normal.
At this point, you should be operational using IVI devices in NISE 3.5 (if not, post up). If you'd like to go one step further and upgrade to purely DAQmx calls, just follow the steps in the 'Upgrading from IVI to NI-DAQmx' section. Note that once you've upgraded to DAQmx, you'll only be able to use exported Virtual devices with NISE 3.5 and later.
Have a great day!
-John Sullivan
Analog Engineer

SG/SF 300 switch configuration change in behaviour

Similar Messages

Maybe you are looking for