Switch config on poe

WHATS WRONG WITH THE BELOW CONFIG
FINDINGS;
-WHEN PHONE IS PLUGGED TO INT F0/13, IT WAS ABLE TO REGISTER TO THE CME ON THE VG.
-SOME PORTS ON F0/1-12 WORKS FOR PHONES AND SOME JUST DONT
COMMON CONFIG OF PORTS FO/1-12
interface FastEthernet0/1
description PHONE_PC
switchport access vlan 101
switchport trunk encapsulation dot1q
switchport mode access
switchport voice vlan 601
srr-queue bandwidth share 10 10 60 20
srr-queue bandwidth shape 10 0 0 0
mls qos trust device cisco-phone
mls qos trust cos
auto qos voip cisco-phone
spanning-tree portfast
CONNECTION TO THE VOICE ROUTER
interface FastEthernet0/24
description VOICE_GATEWAY
switchport access vlan 601
switchport trunk encapsulation dot1q
switchport mode access
switchport voice vlan 601
spanning-tree portfast
DEDICATED USER DATA VLAN
interface FastEthernet0/13
switchport access vlan 101
switchport mode access
INT VLAN 101
IP ADDRESS 10.101.1.1 255.255.255.1
INT VLAN 601
NO IP ADDRESS
interface FastEthernet0/24 IS CONNECTED TO THE VOICE ROUTER HAVING THE VG IP ADDRESS OF 10.61.1.1

Hi Celso,
Hope all is well with you :)
I would try removing this line from the Ports that connect to IP Phones;
switchport trunk encapsulation dot1q
It is unnecessary to configure the switchport in Trunk mode because when you use the Voice VLAN (with a native vlan) command a "special" dot1q trunk is automatically setup. The reasons I have seen to support this setup are many and vary from minimizing Trunking overhead to ease of configuration and everything in between :) On the older 3500XL Switches the Trunk method was the only way to go, but on all newer versions the need for Sitchport mode Trunk is not necessary. Here is one of the better threads I have ever read on this issue (with some Tac links as well). There are some great answers from Mahesh,Paolo Sankar and others here.
http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Unified%20Communications%20and%20Video&topic=IP%20Telephony&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1ddd5905/14#selected_message
This good link was kindly provided by Jaime;
How to configure a Catalyst switch port to connect to a Cisco IP phone
http://www.ciscotaccc.com/kaidara-advisor/lanswitching/showcase?case=K33524366
Hope this helps!
Rob

Similar Messages

Deploy Office 2010 by using Group Policy - Invalid switch - "/config"

Hi All,
We are following steps described in this article -
http://technet.microsoft.com/en-us/library/ff602181.aspx . However it won't work and will terminate with error code 1 - "Setup ended with error code 1". Further investigations has shown that error is produced by start-up batch script due to Invalid
switch - "/config". According to the above article to trigger an install we need the following:
start /wait %DeployServer%\setup.exe /config %ConfigFile%
However it will fail with the error: Invalid switch - "/config", because obviously "/config" switch does not belong to START command
It seems to work if we will use the following (without START /WAIT):
%DeployServer%\setup.exe /config %ConfigFile%
Could anyone please elaborate on the above?
Also why would we want to use START /WAIT at all?
TY

So, you figured out that this problem occures if path to deployment share, config.xml and setup.exe has spaces in it, that is absolutely true.
But I see another workaround, not changing your share path to have no spaces in it.
I suggest changing the setup script.
Do the following:
1) Find this part of the script:
REM If 1 returned, the product was not found. Run setup here.
:DeployOffice
start /wait %DeployServer%\setup.exe /config %ConfigFile%
echo %date% %time% Setup ended with error code %errorlevel%. >> %LogLocation%\%computername%.txt
2) Use quotes wisely to get something like this:
REM If 1 returned, the product was not found. Run setup here.
:DeployOffice
start /wait "%DeployServer%\setup.exe" /config "%ConfigFile%"
echo %date% %time% Setup ended with error code %errorlevel%. >> "%LogLocation%\%computername%.txt"
As you can see, I used quotes to mark those parts of scipt that will have spaces in UNC paths when running the script in cmd.
It did the trick for me and i have spaces in my UNC path to setup share :) Hope that helps.

NEEDED : ISE 1.1.3 Posture configuration and Switch Config (ACL, dACL)

hello,
could anyone please post screen capture of ISE posture configuration ( and remediation )
I need urgently a dACL and a redirection ACL that work at least in a mockup lab.
Authentification and authorizations policies not needed.
posture and remediation policies not needed.
The issue is about ACLs (I guess)
Also needed is a valid switch config file, with ACL (if necessary) a the DOT1x ethernet port.
My IOS is 122.55 SE or 52 SE
Thank you by advance.
Best regards.
V.

Hi Venkatesh,
Your the ultimate ISE Guru !!
You're right
Thanks a lot.
See screen captures and Sw config below
aaa new-model
aaa group server radius ISE
server 192.168.6.10 auth-port 1812 acct-port 1813
server 192.168.6.10 auth-port 1645 acct-port 1646
aaa authentication login default local
aaa authentication dot1x default group ISE
aaa authorization network default group ISE
aaa authorization network auth-list group ISE
aaa authorization auth-proxy default group radius
aaa accounting dot1x default start-stop group ISE
aaa server radius dynamic-author
client 192.168.6.10 server-key 123456789
ip dhcp snooping
ip device tracking
dot1x system-auth-control
dot1x critical eapol
interface FastEthernet1/0/1
switchport mode access
ip access-group ACL-ALLOW in
authentication port-control auto
authentication periodic
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
spanning-tree bpduguard enable
ip http server
ip http secure-server
ip access-list extended ACL-ALLOW
permit ip any any
ip access-list extended ACL-POSTURE-REDIRECT
deny   udp any any eq domain
deny   udp any host 192.168.6.10 eq 8905
deny   udp any host 192.168.6.10 eq 8906
deny   tcp any host 192.168.6.10 eq 8443
deny   tcp any host 192.168.6.10 eq 8905
deny   tcp any host 192.168.6.10 eq www
permit ip any any
snmp-server community snmp RO
snmp-server community RO RO
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps mac-notification change move threshold
snmp-server host 192.168.6.10 public
snmp-server host 192.168.6.10 version 2c snmp mac-notification
radius-server attribute 6 on-for-login-auth
radius-server attribute 6 support-multiple
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server dead-criteria time 5 tries 3
radius-server host 192.168.6.10 auth-port 1645 acct-port 1646 key 123456789
radius-server vsa send accounting
radius-server vsa send authentication
V.

Tag-switching config doubt

Hello everybody,
I would like to get some advise in a tag-switching config in order to perform a testing: I have a Cisco 12012 and a Cisco 7507 each with a GigE interface. I would like to establish several tdp sessions using this single interface. I was thinking in creating sub-interfaces and to add a dot1.q vlan tag to each of them and then to configure tag-swithching in all of the sub-interfaces. I wonder if this might work.
I cannot perform this test right now since I have my equipment in different sites so if I am certain of this to work I might transport them.
I would appreciate any help!! :)
Thanks in advance,
Regards,
Nataniel

Thanks Martin, thanks Harold,
In fact what I want to achieve is to establish several (as many as possible) tdp sessions among my 12K and any other Cisco router, so I am not seeking for the label switching functionalities.
Soon after I posted my message I created in my lab a FE back to back connection among two 7507s and configured as I said: sub-interfaces tagged with dot1q and added a /30 in each of them. Afterwards I configured tag-switching in all the subinterfaces and could see that the tdp sessions were created. Certainly I did not verify the TCP sessions linked to the tdp sessiones neither did debugging to see messages but I think that this scenario might work for what I want: to give some stress in tdp sessions to my 12K as I have in production.
Our core is based in 12Ks and runs tag-switching so I am figuring out how to test a migration scenario towards mpls, this is my final goal. I want to observe a 12012´s performance while handling tdp and ldp sessions at the same time. ANY SUGGESTIONS? :)
Thank you guys!
Regards,
Nataniel

Synthetic radius transactions - switch config purpose ?

The cisco ise user manual states that you should configure the switch with a radius user name in the switch config.
What is the purpose of this ?
Define a Local Username and Password for Synthetic RADIUS
Transactions
Enter the following command to enable the switch to talk to the Cisco ISE node as though it is the
RADIUS server for this network segment:username test-radius password 0 cisco123

It is connected to this command :
radius-server host <Cisco_ISE_IP_address> auth-port 1812 acct-port 1813 test username
test-radius key 0 <RADIUS-KEY>
Which is used so that the switch can use an authentication attempt to determine if ISE is actually responding correctly, and not just sending a reply on the udp port. This is used to declare an ise server (any radius server really) DOWN or UP.

Base Edge switch config

Hello,
Can someone provide a base switch config, i created my own, but still feels like I am missing something?
Thanks,
Chad

Hi Antony,
You can cofigure a seperate SVI and configure that SVI with the ip address in same subnet which you will be configuring on the lan interface of your router.
Once done you can configure any layer 2 port on your 4k switch with that vlan for which you have configure SVI.
Some thing like this on your on 4k switch
interface Vlan 7
description Router
ip address x.x.x.x x.x.x.x
interface fa4/20 <====any interface type/num
switchport mode access
switchport access vlan 7
Connect your fa4/20 to your lan interface of your router and assign an ip address in same subnet which is configured on SVI of vlan 7.
HTH, if yes please rate the post.
Ankur

Switch Config offering complete rent/sale

Switch Config offering complete rent/sale voip solution with quality server for your Voip Business.
Features:
VoIP Termination
Wholesale VoIP
PC2Phone Platform
Device2Phone
Calling Cards Platform
Softphones VPN/Tunnel ( Customized Skins )
DID and DID's Managment with intigration of ( Voxbone.com, DIDx.org and Local DIDs )
Web/ANI/DID/SMS Callback solutions
Portal (Builtin all the end user Modules)
Online Shop
Online Shop intigrated with verious type of Payment gateway ( Paypal, Saferpay, authorize.net, Money Broker etc..)
Invoice Generator
VOIP Tunnel
WebPhone
IVR Box
Web Based Real Time CDR.
VSR and VSC Modules. ( 3 Level Reseller Programme )
CRM (customer Relation Managment)
VSM (voipswitch Manager)
SIP/H323 Translation
PostPay/Prepay
For More Information And Technical Support Please Contact Us.
WebSite: www.switchconfig.com :: VoipSwitch Solution Provider

I had the same problem with my Radeon Mobility U1.
The solution is to downgrade the xf86-video-ati driver to the version 6.7.195-3 and it should work flawlessly.
Make sure pacman and/or yaourt don't upgrade this driver inadvertently to this latest, buggy version, until a fix is released.

POE Switches vs Non POE Devices

hi, since we installed our new POE switches in different point of services (C2960X Software (C2960X-UNIVERSALK9-M), Version 15.0 (2) EX5).
Sometimes power is discovered on non POE devices..And do a reset on the interface..
Generally these devices are UNIX cash register. The easy way to remedy to this problem is to disable the POE ..But we will eventually needs POE on each interfaces..
Someone has an idea of why the switch detect a POE device even if he is not? .. Or any workaround suggestion, we only need POE on our CISCO POE devices, LLDP is globally disabled.
Mar 17 10:55:14.022 EDT: %ILPOWER-7-DETECT: Interface Gi1/0/28: Power Device detected: IEEE PD
Mar 17 10:55:17.189 EDT: %ILPOWER-5-POWER_GRANTED: Interface Gi1/0/28: Power granted
Mar 17 10:55:17.301 EDT: %ILPOWER-5-IEEE_DISCONNECT: Interface Gi1/0/28: PD removed
Mar 17 10:55:18.325 EDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/28, changed state to down
Mar 17 10:55:20.335 EDT: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/28, changed state to up

Like everyone has already pointed out, a PoE device will need to be connected directly to a 802.3af compliant PoE switch. If you only have one jack for every workstation, then you will have to connect the phone to the wall/switch, and connect the computer to the phone. If you have separate data and voice vlans (like you should), 802.1q will need to be configured for the port as well.
PoE injectors are a great if you have them installed here and there, but if every port has one it will be a mess and PITA to work with since there will be double the Ethernet and as many power cords as you have injectors.
I stated 802.3af earlier because I've come across "PoE" devices (mainly from ubiquity) that still need an injector even though the switch is PoE.

3560 switch config

Having trouble configuring a new switch.Switch B port 48 is connecting to switch A port 37.
Don't know what i have done wrong.
Attached are the running config from both switchs.
Thanks for the help.

My dear let us begin from scratch.
why do you have below settings on switch A on port 37
switchport trunk allowed vlan 1,5,10,25,100
switchport mode access
let us do simple things first. ( make port setting of switch A prot 37 and switch B port 48 as default ).
and then simply trunk and check.
if all works well, and use vlan allow command on it.
hope this helps.

Cisco 2950 switch config issues

WOOHOO that worked! Have been on another site for a week trying to get this done.
Now, how do I change the default SSH port from 22 to the port I want?

Hello,I have a Cisco 2950 switch that I am trying to get working correctly. I want to be able to make console and SSH connections, but not Telnet.
Texten!config tusername admin secret Pa55w0rden secret Pa55w0rd!line con 0password Pa55w0rdlogin local!line vty 0 4password Pa55w0rdlogin localtransport input ssh!hostname GEMSWI0001ip domain-name domain.localntp server 192.168.217.10!crypto key generate rsa2048username admin priv 15 secret Pa55w0rdaaa new-model!service password-encryption!ip http serverip http port 65410!!vlan 128name Officeint vlan128ip address 192.168.128.254 255.255.255.0shut!vlan 217name GEMint vlan217ip address 192.168.217.254 255.255.255.0shut!vlan 999name GEM-Adminint vlan999ip address 192.168.255.251 255.255.255.248no shut!int fa0/47description GEMCON0000-1switch access vlan 999switchport mode accessswitchport...
This topic first appeared in the Spiceworks Community

Auto backing up switch configs

Hi,
Is there any way I can automate the backing up of my MDS 9120 and 9216 configurations. Currently when a change is made I manually use the Fabric Manager to tftp the start up and running configs to a tftp server. What I vision is a script where when log I into the switch it runs automatically and backs up all the fabric switches to the tftp server or something simular.
Thanks
Sid

Hello Sid Bartle,
There are two things you need to be aware of :
1 ) Your ftp server should not do authentication and authorization for the switch, otherwise scheduler does not work.
2) To copy the running configuration to a ftp server, you should use the following configuration :
MDS# copy system:running-config ftp://
without "system" keyword does not work.
I made a test for you, uploaded the running config to a tftp server and it worked well.
Here is my config :
# ***** Begin MDS SCHEDULER CONFIG *****#
scheduler enable
scheduler logfile size 16
scheduler job name ekin
copy system:running-config tftp://1.1.1.1
end-job
scheduler schedule name hakan
job name ekin
time start 2005:11:23:20:27 repeat 20:27:0
# ***** End MDS SCHEDULER CONFIG *****#
Arthur# sh scheduler job name ekin
Job Name: ekin
copy system:running-config tftp://1.1.1.1
==============================================================================
Arthur# sh scheduler schedule name hakan
Schedule Name : hakan
User Name : admin
Schedule Type : Run every 20 Days 27 Hrs 0 Mins
Start Time : Sun Nov 23 20:27:33 2005
Last Execution Time : Yet to be executed
Job Name Last Execution Status
ekin -NA-
==============================================================================
Arthur# sh scheduler schedule name hakan
Schedule Name : hakan
User Name : admin
Schedule Type : Run every 20 Days 27 Hrs 0 Mins
Start Time : Sun Nov 23 20:27:33 2005
Last Execution Time : Sun Nov 23 20:27:33 2005
Last Completion Time: Sun Nov 23 20:27:33 2005
Execution count : 1
Job Name Last Execution Status
ekin Success (0)
==============================================================================
Arthur# sh scheduler log
Job Name : ekin Job Status: Success (0)
Schedule Name : hakan User Name : admin
Completion time: Sun Nov 23 20:27:33 2005
--------------------------------- Job Output ---------------------------------
`copy system:running-config tftp://1.1.1.1`
Trying to connect to tftp server......
|
TFTP put operation was successful
==============================================================================
And It successfully uploaded the running config to the tftp server.
I hope this helps.
Cheers,
Hakan.

2950G-48-EI switch config archieve failure

Hi ,
I am facing the config archive failure error for 2950G-48-EI switch. mentioned below the error i am getting after adding the switch to RME.
LMS version : 2.6
RME version: 4.0.6
Protocol ==> Unknown / Not Applicable
CM00139 Could not archive config Cause: Action: Verify that device is managed and credentials are correct. Increase timeout value, if required
following error I have found in dcmaservice.log:
[ Fri Dec 25 07:13:56 GMT+05:30 2009 ],INFO ,[Thread-4],com.cisco.nm.rmeng.dcma.configmanager.CfgThreadManager,triggerConfigFetch,51,#### Start of Sweep Fri Dec 25 07:13:56 GMT+05:30 2009 ####
[ Fri Dec 25 07:14:05 GMT+05:30 2009 ],INFO ,[Thread-637],com.cisco.nm.rmeng.util.rmedaa.RMEDeviceContext,getCmdSvc,1525,Inside RMEDeviceContext's getCmdSvc
[ Fri Dec 25 07:14:05 GMT+05:30 2009 ],INFO ,[Thread-637],com.cisco.nm.rmeng.util.rmedaa.RMEDeviceContext,getCmdSvc,1535,Protocol and Platforms passed = TELNET , RMEIOS
[ Fri Dec 25 07:14:05 GMT+05:30 2009 ],INFO ,[Thread-637],com.cisco.nm.rmeng.util.rmedaa.RMEDeviceContext,getCmdSvc,1543,trying for Telnet
[ Fri Dec 25 07:14:14 GMT+05:30 2009 ],ERROR,[Thread-637],com.cisco.nm.rmeng.dcma.configmanager.ConfigManager,performCollection,3183,Error archiving config for device WBPO-UHG-1.1
[ Fri Dec 25 07:14:15 GMT+05:30 2009 ],INFO ,[Thread-1],com.cisco.nm.rmeng.dcma.configmanager.CfgThreadManager,run,94,#### End of Sweep Fri Dec 25 07:14:15 GMT+05:30 2009 ####
Please help me.
Regards,
Satya

Assuming you have already verified the credentials configured in DCR for this device, start a sniffer trace filtering on TCP port 23 traffic to this device, then run a new sync archive job. When the job fails, post the sniffer trace file.

Switch config

Can i get any sample configuration for core , Distribution and Access layer switches with 7206 router using OSPF as a routing protocol .
Please give some 5 to 6 VLANs in core switches ( i need three tier config)

Dear Anthony,
What you request is a bit too much for this forum. You should rather hire a professional to help you with this implementation.
Regards,
Leo

4900M switch config

Hi,
I need your help. I am trying to purchase 2 4900M switches for our DC but I'm a little stymied by the part 4900M-X2-CVR.
How many do I need (if any at all)? Config is as below: Please help.
Part Number
Description
Qty
WS-C4900M
Base system with 8 X2 ports and 2 half slots
2
CAB-CON-C4K-RJ45
Console Cable 6ft with RJ-45-to-RJ-45
2
PWR-C49M-1000AC
4900M AC power supply, 1000 watts
2
PWR-C49M-1000AC/2
Redundant AC PS for 4900M
2
CAB-CEE77-C15-EU
CEE 7/7 to IEC-C15 8ft Europe
2
4900M-X2-CVR
X2 cover on 4900M
No idea
S49MESK9-12254SG
Cisco CAT4900M IOS ENTERPRISE SERVICES SSH
2
WS-X4908-10GE
8 port 2:1 10GbE (X2) line card for 4900M series
4
CVR-X2-SFP
Cisco TwinGig Converter Module
32
GLC-T
1000BASE-T SFP
4
GLC-SX-MMD
1000BASE-SX SFP transceiver module MMF 850nm DOM
56

Hi Antony,
You can cofigure a seperate SVI and configure that SVI with the ip address in same subnet which you will be configuring on the lan interface of your router.
Once done you can configure any layer 2 port on your 4k switch with that vlan for which you have configure SVI.
Some thing like this on your on 4k switch
interface Vlan 7
description Router
ip address x.x.x.x x.x.x.x
interface fa4/20 <====any interface type/num
switchport mode access
switchport access vlan 7
Connect your fa4/20 to your lan interface of your router and assign an ip address in same subnet which is configured on SVI of vlan 7.
HTH, if yes please rate the post.
Ankur

Problem with switch SG300-28P Poe and Avaya 1408 telephone

Hi Team
We have a model SG300-28P Switch 28-Port Gigabit PoE Managed Switch, in every port we are allowing the voice VLAN and data VLAN (trunk), happens to be off this type of phone, we reconnect the cable and port the switch is dropped, so that the voice vlan phone is lost and no longer work.
Thanks for your comments.
Regards

Hi Yesenia, did you contact Avaya support? Did you configure the phone for a voice and data vlan?
I'm trying to dig through the Avaya website and looking at the fact sheet and user guide it has no mention of VLAN.
Is the switch supported for the usage of Avaya Aura Communication Manager call processing system?
-Tom
Please mark answered for helpful posts

Switch config on poe

Similar Messages

Maybe you are looking for