Trunking on Cisco SF300 Issue

Hello Friends,
Issue: I have 3 Cisco SF300 multilayer switches, I have configured one switch as a core switch and changed the mode to Router (from layer2 to Layer3) and configured Vlans and DHCP pools accordingly, but when i am trying to connect another SF300 to this switch by using VTP it's giving error then i tried searching a solution and found that it does not support VTP protocol, can someone please help me on that, how i can connect other SF300 to this core switch by using trunking.
My goal is to connect the Switch1 and Switch2 to the CoreSwitch by using trunking so that CoreSwitch can advertise all Vlan information to Switch1 and 2. and PC connected to Switch1 & 2 on different Vlans can communicate to each other.
Network Diagram:
CoreSwitch fast-Ethernet port 1 to 8 are connected to Huwai Router Port 1 to 8 using a dedicated physical enter phase to connect each Vlan to the internet. using Nat overload. CoreSwitch's fastethernet Port 9 to 24 are disabled, gigabit port 1 to 4 are trunk port and allowed vlan are 11, 12,13,14,15,16,17 and 20.
Note: All 3 switches are in Layer3 mode.
CoreSwitch Gigabit ethernet Port1 connected to = Switch1 gigabit ethernet port 1
CoreSwitch Gigabit ethernet Port2 connected to = Switch2 gigabit ethernet port 2
Switch1 Gigabit ethernet Port4 connected to = Switch2 gigabit ethernet port 4
Configuration:
CoreSwitch:
User Name:cisco
Password:XXXXXXX
Welcome to CoreSwitch.
Regards,
Sandy
CoreSwitch#show run
config-file-header
CoreSwitch
v1.3.7.18 / R750_NIK_1_35_647_358
CLI v1.0
set system mode router
file SSD indicator encrypted
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0
spanning-tree priority 0
vlan database
vlan 11-17,20
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
gvrp enable
ip dhcp excluded-address 192.168.11.1 192.168.11.2
ip dhcp excluded-address 192.168.12.1 192.168.12.2
ip dhcp excluded-address 192.168.13.1 192.168.13.2
ip dhcp excluded-address 192.168.14.1 192.168.14.2
ip dhcp excluded-address 192.168.15.1 192.168.15.2
ip dhcp excluded-address 192.168.16.1 192.168.16.2
ip dhcp excluded-address 192.168.17.1 192.168.17.2
ip dhcp pool network CashOfficedepo
address low 192.168.12.1 high 192.168.12.254 255.255.255.0
default-router 192.168.12.1
dns-server 192.168.20.3 192.168.20.4
exit
ip dhcp pool network Churn5StarPayrollWeb
address low 192.168.11.1 high 192.168.11.254 255.255.255.0
default-router 192.168.11.1
dns-server 192.168.20.3 192.168.20.4
exit
ip dhcp pool network Commission
address low 192.168.13.1 high 192.168.13.254 255.255.255.0
default-router 192.168.13.1
dns-server 192.168.20.3 192.168.20.4
exit
ip dhcp pool network Inventory
address low 192.168.15.1 high 192.168.15.254 255.255.255.0
default-router 192.168.15.1
dns-server 192.168.20.3 192.168.20.4
exit
ip dhcp pool network Managers
address low 192.168.17.1 high 192.168.17.254 255.255.255.0
default-router 192.168.17.1
dns-server 192.168.20.3 192.168.20.4
exit
ip dhcp pool network ReportingAccount
address low 192.168.14.1 high 192.168.14.254 255.255.255.0
default-router 192.168.14.1
dns-server 192.168.20.3 192.168.20.4
exit
ip dhcp pool network TechDept
address low 192.168.16.1 high 192.168.16.254 255.255.255.0
default-router 192.168.16.1
dns-server 192.168.20.3 192.168.20.4
exit
bonjour interface range vlan 1
hostname CoreSwitch
snmp-server location
snmp-server contact
clock timezone " " 0 minutes 0
ip name-server 202.XXX.XXX.XXX
ip telnet server
interface vlan 1
ip address 192.168.10.3 255.255.255.0
no ip address dhcp
interface vlan 11
name Churn5StarPayrollWeb
ip address 192.168.11.1 255.255.255.0
interface vlan 12
name CashOfficedepo
ip address 192.168.12.1 255.255.255.0
interface vlan 13
name Commission
ip address 192.168.13.1 255.255.255.0
interface vlan 14
name ReportingAccount
ip address 192.168.14.1 255.255.255.0
interface vlan 15
name Inventory
ip address 192.168.15.1 255.255.255.0
interface vlan 16
name TechDept
ip address 192.168.16.1 255.255.255.0
interface vlan 17
name Managers
ip address 192.168.17.1 255.255.255.0
interface vlan 20
name SERVERS
ip address 192.168.20.1 255.255.255.0
interface fastethernet1
switchport trunk allowed vlan add 11
interface fastethernet2
switchport trunk allowed vlan add 12
interface fastethernet3
switchport trunk allowed vlan add 13
interface fastethernet4
switchport trunk allowed vlan add 14
interface fastethernet5
switchport trunk allowed vlan add 15
interface fastethernet6
switchport trunk allowed vlan add 16
interface fastethernet7
switchport trunk allowed vlan add 17
interface fastethernet8
switchport trunk allowed vlan add 20
interface fastethernet9
shutdown
interface fastethernet10
shutdown
interface fastethernet11
shutdown
interface fastethernet12
shutdown
interface fastethernet13
shutdown
interface fastethernet14
shutdown
interface fastethernet15
shutdown
interface fastethernet16
shutdown
interface fastethernet17
shutdown
interface fastethernet18
shutdown
interface fastethernet19
shutdown
interface fastethernet20
shutdown
interface fastethernet21
shutdown
interface fastethernet22
shutdown
interface fastethernet23
shutdown
interface fastethernet24
shutdown
interface gigabitethernet1
gvrp enable
switchport trunk allowed vlan add 11-17,20
interface gigabitethernet2
switchport trunk allowed vlan add 11-17,20
interface gigabitethernet3
switchport trunk allowed vlan add 11-17,20
interface gigabitethernet4
switchport trunk allowed vlan add 11-17,20
exit
banner login ^C
Welcome to CoreSwitch.
Regards,
Sandy
^C
banner exec ^C
Welcome to CoreSwitch.
Regards,
Sandy
^C
ip default-gateway 192.168.11.2   (huwai router's fast ethernet port1 ip address)
ip default-gateway 192.168.12.2   (huwai router's fast ethernet port2 ip address)
ip default-gateway 192.168.13.2   (huwai router's fast ethernet port3 ip address)
ip default-gateway 192.168.14.2   (huwai router's fast ethernet port4 ip address)
ip default-gateway 192.168.15.2   (huwai router's fast ethernet port5 ip address)
ip default-gateway 192.168.16.2   (huwai router's fast ethernet port6 ip address)
ip default-gateway 192.168.17.2   (huwai router's fast ethernet port7 ip address)
ip default-gateway 192.168.20.2   (huwai router's fast ethernet port8 ip address)
CoreSwitch#
=====================
Switch1: no configuration yet (Tried configuring VTP but got no luck, it's not supported so i turned on the GVRP...running RSTP and spanning-tree priority is 4096)
=====================
Switch2: no configuration yet.....
Thanks,
Sandy

Please find the below mentioned show vlan output of both the Switches :
CoreSwitch#show vlan
Created by: D-Default, S-Static, G-GVRP, R-Radius Assigned VLAN
Vlan       Name                   Ports               Created by
1           1             fa1-24,gi1-4,Po1-8             D
11 Churn5StarPayroll          fa1,gi1-4                 S
     Web
12   CashOfficedepo            fa2,gi1-4                 S
13     Commission              fa3,gi1-4                 S
14 ReportingAccount           fa4,gi1-4                 S
15      Inventory              fa5,gi1-4                 S
16      TechDept               fa6,gi1-4                 S
17      Managers               fa7,gi1-4                 S
20       SERVERS               fa8,gi1-4                 S
AccessLayer1#show vlan
Vlan       Name                   Ports                Type     Authorization
1           1             fa1-24,gi1-4,Po1-8        Default      Required
AccessLayer1#
I just wondering that i have enabled GVRP on both side and made them trunk then why Switch1 is not showing me the Vlan i created on CoreSwitch :(
Thanks,
Sandy

Similar Messages

VLAN trunking from Cisco Catalyst 3750 to Cisco SF300-48P issue and related

Hello expert,
I'm having difficulties to configure VLAN trunking between Cisco Catalyst 3750 switch with Cisco SF300-48P switch and my workstation unable to get any DHCP IP from our DHCP server via Cisco SF300-48P switch. Below is the snippet of configuration on both switches:
[Cisco Catalyst 3750 Switch]
interface GigabitEthernet1/0/45
description NCC-CC-1stFlr
no switchport trunk encapsulation dot1q
no switchport trunk allowed vlan 101-103
spanning-tree portfast
[Cisco SF300-48P Switch]
interface fastethernet48
spanning-tree link-type point-to-point
switchport trunk allowed vlan add 101-103
macro description switch
!next command is internal.
macro auto smartport dynamic_type switch
interface fastethernet29
switchport mode general
switchport general allowed vlan add 103 tagged
switchport general pvid 103
Are these are correct? Kindly advice!
Thank you very much!
Regards,
Alex

Hi Alex,
for the trunk port on Catalyst on port GE 1/0/45, we need to enable the trunk and for on encapsulation dot1q because this catalyst model is ISL capable also and the SF300 working only with Dot1q Encapsultion
The configuration on catalyst should :
#config terminal
#interface Gi 1/0/45
# switchport encapsulation
#switchport trunk encapsulation dot1q
#switchport mode trunk
#switchport trunk allowed vlan 101-103
#spanning-tree portfast
For SF300 the port trunk it looks fine but for the port where the PC should receive an IP address
#interface fastethernet29
#switchport mode access
#switchport ccess vlan 103
Please let me know after this configuration
Thanks
Mehdi
Please rate or mark as answered to help other Cisco Customers

Cisco SF300-24 IP Configuration Issue

Hi,
I have purchased Cisco SF300-24 few days before. I have created 3nos of new Vlan. I am not able to assign IP to each Vlan.
When ever I aggign the IP to the next vlan, previouly assigned ip is not visible.
need help.

Hello,
Do you have the switch in Layer 2 or Layer 3 mode. In layer 2 mode the switch can have only one IP address. This can either be static or DHCP. The switch must be in layer 3 mode to assign IP addresses to each VLAN. Please see page 258 of the admin guide for how to set IP address for each VLAN. If you need to set to layer 3 please see page 61. Also, please make sure your device is on the latest firmware version 1.3.0.59. If you still have trouble try using a different browser. I tried this using Firefox and experienced a similar issue to what you describe. I switched to IE9 and it worked fine.
If you have completed these steps and are still having difficulties please call the Cisco SBSC at 866-606-1866 between 9am and 6pm your local time for further assistance.
~Mike Vandergrift
SBSC Engineer

How to setup a static multicast ARP entry with Cisco SF300-08?

We're running a cluster in multicast mode as a loadbalancer.
We have Cisco SF300-08 and when we adding a static ARP entry results in an error message telling the user that the hardware address needs to be a valid unicast MAC address.
So how to setup a static multicast in Cisco SF300 or maybe someone know other solution to setup multicastes mode in Cisco SF300.

Hi, Tom!
We have two watchguard xtm505(cluster active-active) in our network. Watchguard interfaces have one ip and one mac adresses. IP 192.168.111.1(Unicast) and MAC 01:00:5e:02:02:03(multicast). Cisco SF300 is router to outside networks(to internet). Cisco IP adresss is 192.168.111.254. There are another some hosts in this network.
Ping from hosts to 192.168.111.254 works well. Ping from hosts to 192.168.111.1 works well too. But there is no ping from watchguard cluster(192.168.111.1) to Cisco(192.168.111.254). And there is no routing to internet
This is well-known situation. We need to do following(example for cisco 3750):
1.    Start the Cisco 3750 command line interface.
2.    Add a static ARP entry for the multicast MAC address of the FireCluster interface.
Type this command:
arp arpa
For this example, type:
arp 192.168.111.1 01:00:5e:02:02:03 arpa
3.    Add an entry to the MAC address table.
Type this command:
mac-address-table static vlan interface <#>
For this example, type:
mac-address-table static 01:00:5e:02:02:03 vlan 1 interface gi1/0/11
But we can't add arp entry on Cisco SF300. CLI tells us "MAC address illegal"!
We tried enable igmp snooping, but is not helps.
Could you tell more detailed about MAC groups?

Cisco SF300-24: Searching OIDs

Hello all,
I've got a Cisco SF300-24 and would like to monitor trough snmp:
- Memory Used, Free
- Interface CRC
- cpu utilization
- Memory Buffer Used
I checked your website related technical documentation for the Cisco MIB file, and the two species are listed below
•1.     Cisco Small Business 300 Series Managed Switch Administration Guide Release 1.2.5.PDF
•2.     SRW-US_v10_UG_A-Web. PDF
•3.     Sx300_MIB_1.1.2.ZIP
And I could not confirm that such OID values
Don't its hard to find the right OIDs.
Could someone help me please?
Thanks in advance

Hi,
I believe the device you mentioned is the IOS based device. If it is so then you may use following MIBs depending on the version of IOS.
Memory statistics via CISCO-ENHANCED-MEMPOOL-MIB and CISCO-MEMORY-POOL-MIB
http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a0080094a95.shtml
CPU statistics via CISCO-PROCESS-MIB and OLD-CISCO-CPU-MIB
http://www.cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a0080094a94.shtml
Interface CRC via OLD-CISCO-INTERFACES-MIB (specifically "locIfInCRC"). If you want to get the interface related statistics then you have to go for IF-MIB.
You may refer to following links additionally if you want help with some FAQs.
http://www.cisco.com/en/US/tech/tk648/tk362/tk605/tsd_technology_support_sub-protocol_home.html
http://www.cisco.com/en/US/tech/tk648/tk362/technologies_q_and_a_item09186a0080094bc0.shtml
http://www.cisco.com/en/US/tech/tk648/tk362/technologies_q_and_a_item09186a00800c2612.shtml
Regards
K. Lakshmi Ganesh

Difference between Linksys SRW224G4 & Cisco SF300-24

Hi Guys
I was wondering if there was a difference between the Linksys SRW224G4 & Cisco SF300-24 switches. Going through the support docs I see the SF300 has limited L3 functionality in terms of being able to establish static routes between VLANS. Any further information would be of use.
Also any recommendations for an equivalent switch for access layer/distribution layer use would be most welcome
Thanks
GR

SF300-24 is a brand new product with vast improvements over SRW224G4. Here's a few of the major ones:
1) 1) Overall Value:
-          > 80 New software features:
o   Layer 3 Routing for improved network performance where multiple VLANs are used
o   IPv6 support to protect investments as you evolve your network to the Next Generation Internet
o   Advanced VLAN Services enabling new application support (Voice VLAN, Guest VLAN, MAC-based VLAN, Protocol-based VLAN, Dynamic VLAN assignment)
o   Advanced Security – Denial of Service Attack prevention, Protected ports, Private VLAN Edge
o   Unique things to Cisco - like CDP, Auto Smartports, CCA, FindIT - deliver simplified management and autodiscovery
o   Others including Energy Efficiency, IGMP Querier, LLDP-MED, Time-based 802.1x, etc
-          Numerous hardware enhancements
o   Energy-efficient technology, helping save power and reduce costs
o   Fanless designs on many models for silent operation
o   Advanced and latest silicon with larger memory and flash footprints deliver confidence in this state of the art solution
-          More ports per Gigabit switch. In the case of low density (10 port), equates to 25% more ports. With 24-port switches, 16% more ports
-          Very competitively priced – in most cases below comparative competitive products while delivering more capabilities
2)    2) Unique Cisco Value deliver simplified management and autodiscovery – CDP, Smartports, CCA, FindIT
3)   3) Lifetime Warranty with Next Business Day Advanced Replacement (where available) and lifetime warranty on power supplies and fans
4)    4) Localization into seven languages - English, German, French, Italian, Spanish, Simplified Chinese, and Japanese

Cisco 3650 Issue with 1231 AP

hi all,
i've got an issue with a new cisco 3650 48 port wherein older AP 1231 keeps on disconnecting.
the connection is just a simple trunk.
#sh run int g1/0/47
Building configuration...
Current configuration : 62 bytes
interface GigabitEthernet1/0/47
switchport mode trunk
end
1231 is working fine on a 3560.
could someone advice if anything else need to do on 3650?
*Apr 21 09:32:33.243: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/47, changed state to down
*Apr 21 09:32:34.255: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/47, changed state to down
*Apr 21 09:32:37.369: %ILPOWER-7-DETECT: Interface Gi1/0/47: Power Device detected: IEEE PD
*Apr 21 09:32:40.406: %ILPOWER-5-IEEE_DISCONNECT: Interface Gi1/0/47: PD removed
*Apr 21 09:32:40.407: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/47: Power given, but Power Controller does not report Power Good
*Apr 21 09:32:48.994: %ILPOWER-7-DETECT: Interface Gi1/0/47: Power Device detected: Cisco PD
*Apr 21 09:32:49.473: %ILPOWER-5-POWER_GRANTED: Interface Gi1/0/47: Power granted
*Apr 21 09:32:53.355: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/47, changed state to up
*Apr 21 09:32:55.356: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/47, changed state to up
*Apr 21 09:34:27.142: %ILPOWER-5-IEEE_DISCONNECT: Interface Gi1/0/47: PD removed
*Apr 21 09:34:27.142: %ILPOWER-3-CONTROLLER_PORT_ERR: Controller port error, Interface Gi1/0/47: Power Controller reports power Imax error detected
*Apr 21 09:34:27.847: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/47, changed state to down
*Apr 21 09:34:28.855: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/47, changed state to down
*Apr 21 09:34:39.384: %ILPOWER-7-DETECT: Interface Gi1/0/47: Power Device detected: Cisco PD
*Apr 21 09:34:40.235: %ILPOWER-5-POWER_GRANTED: Interface Gi1/0/47: Power granted
*Apr 21 09:34:43.875: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/47, changed state to up
*Apr 21 09:34:45.874: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/47, changed state to up

pre,
i don't think it's a cable issue. correction on the working AP, it's supposed to be a AIR-SAP1602E.
this AP is working on the 3650.
i've searched and i think the AIR-AP1231 isn't supported on this switch platform.
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3650/software/release/3e/release_notes/OL3264701.html#18425
this new switch isn't friendly. first, i had the issue with PVLAN and now this :(

F3507g mobile broadband driver - Windows 7 - and Cisco Vpn issue

Hi All,
After 3 days trying to install / update latest drivers on my X200/ Windows 7 / 32b, it seems now that my F3507g is now installed correctly…
I can go the a connection over internet and ping some servers BUT when I initiate my Cisco Vpn, ( working perfectly with my Ethernet connection and my Wifi 5300 AGN ) the connection is ok but no incoming or outgoing traffic !!!
Any idea on how to solve that issue ?

Yes, this is a problem with the IPSEC VPN NDIS driver binding your Mobile Broadband driver. You need to read this article and it is explains why and how to work around this issue:
http://www.customsoftwareframeworks.com/blog/fix-vpn-problems-cellular-win7
Good luck

[svn:fx-trunk] 10635: * Fixed FB issue with FXG in library projects.

Revision: 10635
Author:   [email protected]
Date:     2009-09-28 06:49:45 -0700 (Mon, 28 Sep 2009)
Log Message:
Fixed FB issue with FXG in library projects.
QE notes:
Doc notes:
Bugs: FB-22197
Reviewer: pfarland
Cycloner: gcomnino
Tests run: checkintests
Is noteworthy for integration: Yes, fixes FB issue
Code-level description of changes:
Modified getSourceListMimeTypes() to include FXG mime type.
Ticket Links:
    http://bugs.adobe.com/jira/browse/FB-22197
Modified Paths:
    flex/sdk/trunk/modules/compiler/src/java/flex2/tools/WebTierAPI.java

Cisco AP541 Issues.... (DHCP, Multicast, etc...)

RegardsHello everyone,
I bought the AP541 since I thought I might just as well take the plunge and get a "real" AP rather than the Netgear 102's that I had in the past
( and been working perfectly fine I might add ).
First issue is DHCP - I just cant get an IP from my W2K3 server and or router... so I call Cisco and Cisco tells me to call my wendor and my wendor
tells me to call Cisco...
Eventually I find out that if you do a registry hack on W2K3 and disable the multcast/bradcast limit in the AP I actually get an IP.
Weeey - Happiness.... for a while... but whenever I use my IP TV (which uses broadcast) I loose connectivety to the AP *bummer*
Oh well... I will soon get a Cisco Switch where I can manage the broadcasts so no biggie....
Well - turns out the IP TV wants the IP from my router/modem and not from my server which means I'm back to square one.
AP wont "pass through" DHCP requests and it will "die" on excessive multicasts/broadcasts.
Ironic how a $70 AP does just fine and a $500 Cisco AP makes you want to throw the thing out the window.
Thoughts / ideas ?
Regards,
//Magnus

What firmware version are you running? I recently installed one of these and upgraded to 2.0.0 firmware and I don't have the DHCP problem. I don't have Multicast in the network so I can't comment on this issue.
However I do have a strange problem with a network printer that I use on the network though. I can't print when I'm using the wireless network (enabled by the AP) but I can ping the printer from a wired device.
Also, pings to the printer don't work from wireless but they work from a wired connection. But I can access the web management console of the printer! Very strange. It's almost as if the AP is filtering in some way. I have the WAP connected to an ESW500 switch and I suspect it may have something to do with the smart port setting on the ESW500 when the AP is connected. I can't find a way to force the port settings to anything other than AP through CCA (ver. 3.0(1)). I don't have the ping issue when the AP is connected through another switch but I still can't print to the printer when on wireless through the AP. I didn't have this problem with a regular linksys AP/Router. I'll have to do some more investigating to isolate whether the problem is the AP or the switch or both.
How is your AP connected to the rest of the network? Are you also using a switch with Smartport configurations?
TJ
Message was edited by: Tarquin Joseph
Update:
I logged into my ESW500 switch and forced the port that the printer is plugged into as a printer role (this is not available from CCA). I still could not ping the printer. I then configured the port the AP is plugged into, as a switch port and not AP. Voila! I can ping the printer. I had to remove and re-add the printer to be able to print though. So the problem seems to be with the Smart port definitions for APs. CCA now alerts me that I have an error in my configuration because the smartport definition is incorrect for the port the AP is connected to.
If you have configured smartports on your switch for your AP, try forcing the switch role and see if that solves the problems you are having.
TJ

[svn:fx-trunk] 12982: Fix for issue with exposing accessible names for combobox list items

Revision: 12982
Revision: 12982
Author:   [email protected]
Date:     2009-12-15 20:44:23 -0800 (Tue, 15 Dec 2009)
Log Message:
Fix for issue with exposing accessible names for combobox list items
QE notes: none
Doc notes: none
Bugs: n/a
Reviewer: Gordon
Tests run: checkintests
Is noteworthy for integration: no
Modified Paths:
    flex/sdk/trunk/frameworks/projects/spark/src/spark/accessibility/ComboBoxAccImpl.as
    flex/sdk/trunk/frameworks/projects/spark/src/spark/accessibility/ListBaseAccImpl.as

Add this to the end of your nav p CSS selector at Line 209 of your HTML file, after 'background-repeat...':
margin-bottom: -2px;
Your nav p will then look like this:
nav p {
          font-size: 90%;
          font-weight: bold;
          color: #FFC;
          background-color: #090;
          text-align: right;
          padding-top: 5px;
          padding-right: 20px;
          padding-bottom: 5px;
          border-bottom-width: 2px;
          border-bottom-style: solid;
          border-bottom-color: #060;
          background-image: url(images/background.png);
          background-repeat: repeat-x;
          margin-bottom: -2px;

CWA using Cisco ISE issue

Good morning everyone,
I have some trouble to use my Cisco ISE to do Central Web Authentication. I followed this following configuration example : http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116087-configure-cwa-wlc-ise-00.html
But for the moment, clients can't seee the web portal. My WLC and my Cisco ISE are well configured as presented in the document, when clients connect to the AP, they are listed into the Cisco ISE with the good authorization profile but, the URL redirection doesn't work as well as I want, clients have to enter manually the IP address in the web browser to log-in trough the Cisco ISE.
If anyone already had this problem, maybe could tell me more about that.
Thanks in advance!

Good news!
I have resolved my problem 15 minutes ago. For people who have the same problem, I have just changed my static route in my WLC. The issue was that I broadcast the same VLAN used for the management interface and in adding the network allowing admin to reach service-port, all traffic of my broadcasted VLAN was sent to the service-port. A simple netmask modification resolved the problem.
I have still a problem with CoA which doesn't work properly and I have to disconnect/reconnect to the SSID to have a complete access but I'm going to continue my research for that.
Thanks all for your help !!!!

CISCO ISE ISSUE 24206 User disabled

Hi there,
We have here an issue with Cisco ISE. When I create a guest account with the sponsor portal We can´t access the Wlan. On tne Cisco ISE Operations \ Authentications returns the error message Event "Authentication" Faulure Reason "24206 User Disabled" Auth Method "PAP_ASCII" Authentication Protocol "PAP_ASCII"
In order to fix this issue, what can I do? I don´t understand why because I can create the user withou error message.
At the sponsor portal the user that I have created doens´t show at the list...
Any help??
Regards
Adriano

Select the affected account and click Reinstate.
It is possible, that your sponsor account does not have the permission to Reinstate/Suspend accounts. Check/change this in your ISE admin page:
- Go to Administration > Guest Management > Sponsor Groups.
- Click the Sponsor Group your sponsor account is a member of to edit.
- Select tab Authorization Levels: view/modify the permission listed for the option Suspend/reinstate Accounts.
ref: https://supportforums.cisco.com/discussion/11431386/ise-guest-user-problem

Brocade DCX Fiberchannel trunk via Cisco ONS not working

We have a SAN environment over 2 locations. On each location they placed a Brocade DCX 8510 SAN switch. The Inter site link is provided via CISCO ONS.
We use at both sites a MXP_MR_10DME card with two interfaces. We created two circuits and configured the ports at FC4G.
So when we connect the brocade switches directly to the ONS it works perfect. We then have 2 4GB fiberchannel connections.
However we would like to trunk these connection to a 2x 4GB channel.
On the Brocade switches we configured both interfaces connected to the ONS as Trunk.
Both switches see each other but no traffic will run over this trunk. When we disable one port of the Brocade in this trunk then traffic starts to flow.
Questions:
Is it possible to create a trunk between the brocades via ONS?. ( we know that it will work with a direct fiber connection).
I know you can do trunking by using other cards but is this possible with the 1-DMEX-C cards.
So is the ONS aware of a trunk. I suppose that the ONS should be transparent.
If anybody has done did before, do we need to configure something specific on the ONS or Brocade switches..?
THX.

Nevermind...
I have been given the wrong SFP modules.

[svn:fx-trunk] 5819: Fix asdoc issue for event description getting copied over to the class definition .

Revision: 5819
Author: [email protected]
Date: 2009-03-31 13:15:14 -0700 (Tue, 31 Mar 2009)
Log Message:
Fix asdoc issue for event description getting copied over to the class definition.
QE Notes: None.
Doc Notes: None.
tests: checkintests, asdoc tests
Modified Paths:
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/asdoc/TopLevelClassesGenerator.ja va

THank you , Nancy. Appreciate the input.
So instead of this:
<a class="brand" href="index.html"><img src="../img/logo-ca.png"alt="Consumers Advocate Review"> </a>
Would it be something like this?:
<a class="brand" href="index.html"><img src="http://ConsumersAdvocate/img/logo-ca.png"alt="Consumers Advocate Review"> </a>
And if I do that, is there a way to cope with that locally so that DW can still display the images?
jeff

Trunking on Cisco SF300 Issue

Similar Messages

Maybe you are looking for