Vtp between 2 Catalyst switches across a router

I have in my domain :
C3750 ---.1Q G0/1---C2821 ISR---.1Q G0/2 --- C2950
C3750 is in vtp server mode
C2821 is in vtp transparent mode
C2950 is in vtp client mode
Will my vlans be distributed from C3750 to C2950 across ?

Hi,
Thanks for reply.
I thought that VTP could be forwarded across c2821 but it doesn't work like a switch/router such as C3750 in vtp transparent mode.
I suppose that C2821 has not the same switching backplane architecture than C3750.
I put a trunk link cable between c3750 and c2924
and set both in the same vtp domain.
Then now I get all my level 2 vlans on C2924, but they can be routed at IP level by C2821 or C3750.

Similar Messages

Cannot Establish Gigabit Link Between Catalyst Switches and GSR Router

The GSR Gigabit interface is configured for no negotiation auto and the line protocol goes up when connected to the Catalyst switch.
The Catalyst switch port remains unconnected even when it is physically attached to the GSR router.

The flow control settings must match on both sides for the link to come up. It is highly recommended that you configure auto-negotiation to on for both devices. (Auto-negotiation is enabled by default on all Catalyst switches.) Otherwise, if you have a layer 1 problem, the link remains up and a unidirectional link will result.
The initial software releases that support Gigabit Ethernet on the GSR router do not support gigabit auto-negotiation.
The following command configures gigabit auto-negotiation on the Catalyst 6000/6500:
set port negotiation module/port disable|enable

TCP delay on catalyst switch

i experienced a TCP delay on catalyst 4506, avoid the problem when i replaced 4506's with dummy unmanaged switches.
i used two PCs(PC 1 and PC 2) and two 4506 switches (S1 and S2)
PC 1 is connected to S1 (fast ethernet port)
PC 2 is connected to S2 (fast ethernet port)
S1 is connected to S2 (SFP gigabit ethernet port)
-I started continuous UDP,TCP,MULTICAST and PING from PC1 to PC2
-I unplugged link between Switch 1 and Switch 2
all communication stopped.
-I plugged link between Switch 1 and Switch 2
-UDP,MULTICAST and PING started immediately but TCP started with approximately 15 seconds delay. :-(
I repeated same procedure with unmanaged dummy switches instead of 4506, there wasnt 15 seconds delay. TCP showed up in 1 second.
How can I avoid TCP delay on catalyst switches? Probably some tuning with configuration would do the job?
tx for helping

hi gp and thank you very much for responding to this unusual problem.
- switch ports to the PCs are configured as portfast.
- switch ports between two catalyst switches are not configured (default)
- i didnt use the 'switchport access' command since they are default layer 2 interfaces. would 'switchport access vlan 1' command make any difference?
- i looked at the port status and confirmed connection is 100 mbps full duplex.
unusual issue is; ping, udp, multicast shows up in a very short time after I re-plug the uplink. that proves all ports are in forwarding state. only TCP shows up with delay, which doesnt occur on 200 $ unmanaged switch??
thanks in advance for any suggestions

The difference between VTP server and transparent mode on Catalyst Switch.

Hello
I have a question about the difference between VTP server mode and VTP transparent mode on general catalyst switch.
Basically VTP server mode can create and modify VLAN configuration but actually there is not any VLAN configuration through running-config, is it true? When I checked it on Cat3550, certainly there is not VLAN configuration on VTP server mode. But VTP transparent can create VLAN and configuration but does not synchronize with other switch VLAN status. I appreciate any related information and reason of the VTP server mode specification, thank you very much.
[VTP Transparent mode]
3550#sh vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 1005
Number of existing VLANs : 27
VTP Operating Mode : Transparent
VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
*omit
3550#
3550#sh run
Building configuration...
*omit
vlan 99
name TEST-VLAN
[VTP Server mode]
3550#sh vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 1005
Number of existing VLANs : 27
VTP Operating Mode : Server
VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
*omit
3550#
3550#sh run
Building configuration...
*no VLAN like above configuration on VTP transparent mode.
Best Regards,
Masanobu Hiyoshi

Hi mhiyoshi,
3550#sh vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 1005
Number of existing VLANs : 27
VTP Operating Mode : Transparent
VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
*omit
3550#
3550#sh run
Building configuration...
*omit
vlan 99
name TEST-VLAN
The above out put indicates that Vlan is created and then mode changed to transparent. i.e why revision no is 0.
3550#sh vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 1005
Number of existing VLANs : 27
VTP Operating Mode : Server
VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
*omit
3550#
3550#sh run
Building configuration...
*no VLAN like above configuration on VTP transparent mode.
This indicates that vlan never created in server mode nor learnt from another switch as revision no is 0

The difference of the IEEE802.1x Auth between Cisco Routers and Catalyst switches

Hello
I am investigating the difference of the IEEE802.1x Auth between Routers and Switches.
Basically dot1x auth is availlable on Catalyst Switches. however if I want to check to
PortBased Multi-Auth , MAC address Auth and any certification Auth with this feature,
Is it possible to integrate into Cisco Router such as Cisco 891F ?
In my opinion Cisco891F is also available to use basic IEEE802.1x but if it compares with Catalyst switches such as Cat3560X
I think there might be any unsupported feature on Cisco 891F.
I appreciate any information. thank you very much in advance.
Best Regards,
Masanobu Hiyoshi

Many time in interviews asked comaprison between cisco routers and switches that i was answerless bcoz i dont have much knowledge about that.Can anyone provide me the compariosin sheet of the same.how are the cisco devices differ with each other how much Bandwidth each routres support and Etc...
Ummmm ... The most common question I get is "what is the difference between a router and a switch".
However, if you get a question like this, then my impression to this line of questioning are:
1. The candidate they are looking for has in-depth knowledge of routers and switches. And I mean IN-DEPTH!;
2. They are not looking for a candidate. They just want to stroke their ego. There is not alot of people who can give you the "names and numbers" of routers and switches at a snap of a finger. And if you do happen to know the answer, then and there, then expect a tougher follow-up question.

Differences between MSFC1 and MSFC2 in Catalyst switches

Hi,
Want to know the differences between MSFC1 and MSFC2 in Catalyst switches.

Hi,
There is not much difference between MSFC1 and MSFC2, the main difference is how the MSFCs send the hardware programming to the PFC. The MSFC1 uses MLS to program the hardware by using the first packet of the traffic. While the MSFC2 uses CEF-based MLS to program the PFC so that the supervisor can make the hardware switching of the packet. NOtice the difference if the MSFC1 needs to see the first packet while the MSFC2, in theory will not need to see a first packet as it uses the CEF routing table to program the PFC2. Now, the kicker, if MSFC2 in sup1A , all this CEF-based MLS is not used since it needs PFC2 to be able to do this. Sup1A does not come with PFC2 only Sup2 comes with PFC2. The MSFCs gives the Cat6K a L3 ability and it's important but the switching performance of the switch depends on the PFC.
Here is a link on MSFC2 data sheet:
http://www.cisco.com/en/US/products/hw/switches/ps708/products_data_sheet09186a00800887fd.html
Please rate helpful posts.

Standard Catalyst switch vs. Enhanced routing version

I have question regarding the Cisco catalyst switches with the enhanced routing option.
As I understand it to do layer 3 routing between vlans on a standard catalyst switch IOS requires me to configure a port on the switch with 802.1Q, plug that port into a seprate router and configure the router's port (also configured with 802.1Q) as a 'router on a stick' for each vlan i need to route. Then any additional switches I want to add to the network I would simply trunk them back to the switch that has the router plugged in so i could have inter-vlan routing. Does this sound correct?
Now if I used a switch with the enhanced layer-3 IOS (A WS-C3560G-24TS-E for example) would i be able to remove the extra router from the design? would the packet routing go at the speed of the back-pane of the enhanced switch, rather than the wire-speed of the connection to a external router? I would also be able to get a gigabit SFP for each of my additional switches (3500XL's) and plug them into a trunked port on the 3560 thus giving a full gigabit trunk to each access layer switch.
Or would a router on a stick be a fine solution for inter-vlan routing? There will be a need for a integrated services router in the future to act as our CME for this site, so we will be purchasing a router anyways.

Hi Friend,
If you have layer 3 switch with standard image then also you will be able to configure intervlan routing on layer 3 switch.
Enhance image on layer 3 switch will let you configure routing protocols like ospf, bgp and enhance qos features whih is not possible with standard images.
But just for intervlan routing any layer 3 switch like 3550,3560 will let you achieve inter vlan routing without using external router.
Have a look at this link for intervlan routing on layer 3 switch like 350/3560 switches
http://www.cisco.com/en/US/tech/tk389/tk815/technologies_configuration_example09186a008015f17a.shtml
HTH, if yes please rate the post.
Ankur

KEYNOTE DIFFERENCES BETWEEN A CATALYST LAN SWITCH & A STORAGE SWITCH (MDS)

Hi Guys,
I had a very simple query. I had a very basic query. I wanted to know the difference between a switch which we connect to our campus netorks and switches connected to storage area networks. I dont mean the cost and stuff, but more into how they forward packets and the technologies. If I have a catalyst switch with 10Gb ports and a SAN switch with 10Gb ports , what would be the performance difference. what would be the difference in their forwarding mechanisms.

Hi Rustom,
The big difference is that the 10Gb ports on the Catalyst are ethernet and the 10Gb ports on the MDS switch are for Fibre Channel only. You can't use the MDS ports for ethernet.
Jim

I don't understand correlation between ACL and dACL. If dACL is downloaded to the Catalyst switch what is the status of the ACL

Understanding ISE and dACL.
I don't understand correlation between ACL and dACL.
If dACL is downloaded to the Catalyst switch what is the status of the ACL attached to physical port. Is dACL appended to the existing ACL? When I typed ‘sh ip access-list int fa0/1’ I can see only dACL for access domain and dACL for voice domain appended to the previous dACL and no ACL lines.
Regards,
Vice

Hi,
Downloadable ACLs (dACL) are applied from your RADIUS server based on authentication and authorization policies. It overrides any standard interface ACL.
Standard interface ACLs are in place to limit traffic on the port before 802.1x or MAB authentication.
When an authenticated session terminates on the interface the standard ACL will be re-applied until the next authentication.

Router "snmp-server contact" command for catalyst switches??

From the router you can configure the "snmp-server contact <text>" command
to set the system contact for SNMP. Is there any equivalent command for
Catalyst switches? I know that there's a "set system contact" command for
CatOS but i'm sure if it has something to do with SNMP.
Thanks in advance.

Yes, set system contact on switch is the same that on the router for the above command. Once you use this this command to enter the contact info, it can be polled via the SNMP MIB Object sysContact (.1.3.6.1.2.1.1.4) from RFC1213-MIB. Example, if I use 'set system contact foo', I see the following using the 'show system' output:
System Name System Location System Contact CC
foo
Polling the above via the above MIB object on the switch:
% snmpwalk .1.3.6.1.2.1.1.4
system.sysContact.0 = foo
Similarly, if you set the 'System Name' on the switch using the command 'set system name ', can be polled via sysName (.1.3.6.1.2.1.1.5) from RFC1213-MIB
Lastly, 'set system location ', once set can be polled via sysLocation (.1.3.6.1.2.1.1.6) from RFC1213-MIB

InterVlan Trunking between Catalyst 500 Express and Router 1841

Hello,
I am currently attempting to configure 2 VLANs on a Router 1841 and allow them to communication with my Catalyst 500 Express switch. The Router Setup is simple
its 3 Sub-ints on the FE0/0 interface.
interface FastEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$
no ip address
duplex auto
speed auto
interface FastEthernet0/0.1
description *** ADMINISTERING VLAN ***
encapsulation dot1Q 1 native
ip address 10.19.1.1 255.255.255.0
interface FastEthernet0/0.2
description *** DATA VLAN ***
encapsulation dot1Q 2
ip address 10.19.2.1 255.255.255.0
interface FastEthernet0/0.3
description *** VOICE VLAN ***
encapsulation dot1Q 3
ip address 10.19.3.1 255.255.255.0
ip helper-address 10.19.2.2
FE 0/0 Port on the Router is connected to port 24 on my Catalyst. I set the Smartport on port 24 of the Catalyst to be Router for trunking purposes
I get a notification error on the Catalyst saying "Undersized frames detected from the connected device" (which is my ROUTER).
does anyone have a suggestion? Or Is it supported this scenario?
Thanks,
Eduardo

I had the same issue when I was working on CE500s and a WLC.
In the CE500 Device Manager, go to Configure->VLANs
Create your VLAN 2 and 3.
Then go back to smartports, click customize, and verify that VLAN-1 is default (native).
Sending information through a port on the CE500 that it is not expecting will set alerts in the log.
Hope this helps.
RB

Re: Difference between switcher component and router activity

Hi all,
Here i want to know the difference between switcher component and router activity.
Can anybody give the difference between them or suggest any blog for this.
Thanks,
Syam

<af:switcher> component is an ADF Faces component. You can use it within (the source of) a JSF page or fragment to include a particular group of other JSF components depending on the switcher expression's value.
Router activity is not a JSF component, i.e. you cannot use it within a JSF page of fragment. It is an ADF taskflow activity. You can use it as an activity within an ADF Taskflow to route transitions between some other activities in the taskflow depending on the router's expression.
Dimitar

VLAN's, subinterface, access-lists and 3560 catalyst switch?

Hi,
How can I isolate VLAN 121 from all others?
I have a cisco 2811 router connected to a 3560 catalyst switch which has 5 VLAN's of which I need to protect IP traffic of 4 from 1.
The following VLANs configured on the switch:
VLAN 0 192.168.132.0 /24
VLAN 135 ..135.0 /24
VLAN 137 ..137.0 /24
VLAN 139 ..139.0.24 and lastly,
VLAN 121 192.168.121.0 /24 which I wish to isolate all IP from VLAN 0, 135, 137, and 139 but have internet out the 2811's other interface. Currently all VLAN's and routing are working perfectly.
I need some advice please. Here is my plan: to split the FA0/0 into FA0/0.1 for VLAN 121 using dot1q and apply an access-list to deny 192.168.121.0 to the FA0/0 interface. Since I'm essentially creating VLAN's with the router can or will that interfere with the Switch VLAN configuration? router on a stick vs. a Layer 4 Cisco 3560 Catalyst switch?
Thank you!

I will have to assume VLAN 0 is the native VLAN / default interface on the router? All VLANs are numbered native or not. Just ensure the VLAN numbering matches between the router and the trunking on the switch.
Yes, you could create a sub interface on the 2811 and use the router to route the VLAN. Apply an access list on the other interfaces to block access to the VLAN you want to protect. If you have routing enabled on the 3560 as well you would complicate the situation a bit more.
Please rate helpful posts! :-)

Intel MAC Compatibility with 3560/Other Catalyst Switches

Some of our users recently reported problems with their new Intel based Macintosh computers when we upgraded from old Extreme Summits to Catalyst 3560 series switches. They report sluggish response from the network. We have checked the ports for negotiation issues and errors and do not find any. Suspect the Intel Mac; but wanted to find out if anyone else is experiencing the same or has suggestions. Thanks.

Hello,
to my understanding MAC issues should not be the cause of your issues. Either the Ethernet frame is standard compliant, then there should not be an issue with Catalyst switches and no port errors. Or the Ethernet frames or MAC in use is non standard then the switch would report an error.
Network response times depend on many things and negotiation might be the first thing to check - as you did. I would still recommend fixed settings for port speed and especially duplex. Just to avoid also intermittend problems (f.e. between PC reboots).
Have you also checked for MTU and TCP window size settings? What else did change when you upgraded to the 3560s? Did you also check Router and switch ports for duplex and speed settings?
Hope this helps! Please rate all posts.
regards, Martin

Cryptographic IOS versions on Catalyst Switches

1. Where can one find the differences between Catalyst switch IOS with cryptographic features and without cryptographic features?
2. In order to access Cat switches over SSH and HTTPS, do we require Cryptographic versions of the Cat IOS?
3. What does "k9" stands for in IOS names? e.g. "3560-ipservicesk9"
Thanks

Hi
Answer to Q1 :
Best plase to compare the Catos and IOS is
www.cisco.com/go/fn
there you can search by ios names or platforms or features and compare images.
Answer to Q2 :
Yes you need Cryptographic version
Answer to Q3 :
K9 stand for Cryptographic version if you have ipservicesk9 you can do SSH in the feature navigator if you search the ios without K9 you will find this :
IP SERVICES W/O Crypto
that means this catos does not support Cryptographic.
Best Regards Bahman Mozaffari.
Please Rate if Helpful.

Vtp between 2 Catalyst switches across a router

Similar Messages

Maybe you are looking for