VTP config

Hi All,
I have just configured a 2950 to be a client, is there a way to change this back to server or transparent.
I did tried to by entering vlan database, but it will not go onto vlan config mode
Any help will be appreciated
thanks

hope this URL will answer your query.
http://www.cisco.com/en/US/products/hw/switches/ps628/products_configuration_guide_chapter09186a008007e8c7.html#xtocid22
rate if it does...

Similar Messages

Are VTP config lines not included in configurations?

I've multiple switches, with the core being in "Server" and the connecting switches being "Clients". All of these devices show information when executing "sh vtp status", for example - but none of them have any VTP-related configuration statements. I was expecting to see things like "vtp password <password>", "vtp mode server", etc. Are VTP configuration statements not included/displayed when you execute a "sh run", etc.?
Switch#show vtp status
VTP Version : 2
Configuration Revision : 51
Maximum VLANs supported locally : 1005
Number of existing VLANs : 19
VTP Operating Mode : Server
VTP Domain Name : netvtp
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0xD0 0x7A 0x76 0x01 0xA2 0x20 0xCB 0x4D
Configuration last modified by 10.10.10.10 at 6-16-04 17:59:15
Local updater ID is 10.10.10.10 on interface Vl1 (lowest numbered VLAN interface found)

Hi,
I believe this is down to the fact that the commands are configured using the "vlan database" which is not part of the privilege mode configuration, its a dat file stored in flash that must be loaded seperatly to the start-up config when the switch boots.
The same is true on my 3750 switches for VLANs and VTP information that's been configured in this way
ds-gsw-a#sh run | i vtp
ds-gsw-a#sh run | i vlan
switchport access vlan 4
switchport access vlan 4
switchport access vlan 104
switchport access vlan 4
switchport access vlan 4
switchport access vlan 4
The VLAN configuration only shows which ports have statically configured VLANs.
I believe all these commands are stored in the vlan.dat file in flash:
ds-gsw-a#dir flash:
Directory of flash:/
3 -rwx 1816 Mar 01 1993 00:03:11 vlan.dat
4 -rwx 47 Jul 05 2005 12:42:35 private-config.text
5 drwx 192 Mar 01 1993 00:05:05 c3750-i5-mz.121-19.EA1c
85 -rwx 199 Aug 02 2004 16:41:51 layout.text
86 -rwx 9959 Jul 05 2005 12:42:35 config.text
15998976 bytes total (8940544 bytes free)
Rgds
Paddy

VLAN/VTP config on 7206

Friends,
Can someone plz help me with this. I want to 7206 router as vtp server domain & Vlan database but I cant configure can someone plz help me?
R5-7206(config)#vlan database
^
% Invalid input detected at '^' marker.
R5-7206(config)#
R5-7206(config)#vlan ?
accounting VLAN accounting configuration
R5-7206(config)#vlan ac
R5-7206(config)#vlan accounting
R5-7206(config)#vlan accounting ?
input Input accounting
output Output accounting
<cr>
R5-7206(config)#sh run
mls rp ip
interface FastEthernet0/0
no ip address
ip nat inside
duplex full
mls rp vtp-domain VPNLAB
mls rp vlan-id 1
mls rp management-interface
mls rp ip
R5-7206#sh ver
Cisco Internetwork Operating System Software
IOS (tm) 7200 Software (C7200-JS-M), Version 12.3(6b), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Wed 19-May-04 17:56 by dchih
Image text-base: 0x60008AF4, data-base: 0x61FF4000
ROM: System Bootstrap, Version 11.1(13)CA, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
BOOTLDR: 7200 Software (C7200-BOOT-M), Version 12.0(9)S, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
R5-7206 uptime is 22 weeks, 4 days, 3 hours, 8 minutes
System returned to ROM by power-on
System image file is "slot0:c7200-js-mz.123-6b.bin"
cisco 7206 (NPE200) processor (revision B) with 114688K/16384K bytes of memory.
Processor board ID ******
R5000 CPU at 200MHz, Implementation 35, Rev 2.1, 512KB L2 Cache
6 slot midplane, Version 1.3
Last reset from power-on
Bridging software.
X.25 software, Version 3.0.0.
*Nov 9 21:08:55.658: %SYS-5-CONFIG_I: Configured from console SuperLAT software (copyright 1990 by Meridian Technology Corp).
TN3270 Emulation software.
Number of Fast PAs = 2
Number of Fast+Medium PAs = 2
Total number of PA bandwidth points = 400
2 FastEthernet/IEEE 802.3 interface(s)
125K bytes of non-volatile configuration memory.
4096K bytes of packet SRAM memory.
20480K bytes of Flash PCMCIA card at slot 0 (Sector size 128K).
16384K bytes of Flash PCMCIA card at slot 1 (Sector size 128K).
4096K bytes of Flash internal SIMM (Sector size 256K).
Configuration register is 0x2102
R5-7206#sh mls rp
ip multilayer switching is globally enabled
ipx multilayer switching is globally disabled
ipx mls inbound acl override is globally disabled
mls id is 0030.96e5.f400
mls ip address 10.1.1.1
mls ip flow mask is destination
mls ipx flow mask is unknown
number of domains configured for mls 1
vlan domain name: VPNLAB
current ip flow mask: destination
ip current/next global purge: false/false
ip current/next purge count: 0/0
current ipx flow mask: destination
ipx current/next global purge: false/false
ipx current/next purge count: 0/0
current sequence number: 1355201790
current/maximum retry count: 0/10
current domain state: no-change
domain uptime: 00:58:01
keepalive timer expires in 8 seconds
retry timer not running
change timer not running
fcp subblock count = 2
0 management interface(s) currently defined:
0 mac-vlan(s) configured for multi-layer switching
0 mac-vlan(s) enabled for ip multi-layer switching:
0 mac-vlan(s) enabled for ipx multi-layer switching:
router currently aware of following 0 switch(es):
no switch id's currently exists in domain
R5-7206#

Ritesh
You should be able to use this equipment and set up a reasonable lab to learn and practice routing and switching. My suggestion would be to first develop a plan and create a drawing (does not need to be fancy or elaborate, but I find putting it down on paper to be very helpful) focused on physical connectivity. What is goig to connect to what. Is the 7206 going to use just one Ethernet/FastEthernet or more than one. Which device will connect to the 7206, and so forth. After you have planned the physical connections, then use that plan and drawing to plan the logical connections. In this part you will figure how many vlans will you use. are some of the vlans on a single device and are some of the vlans spread over several devices. Which of the ports will function as trunk ports, and so forth. Once you have worked through that then add to the plan the layer 3 information. The plan already has the layer 1 and layer 2 information and you are adding the next layer. Will you use more than one major network, what subnet will you use on which vlan and so forth.
After you have worked through the plan from layer 1 to layer 2 to layer 3 you are ready to connect the devices and to begin to configure them.
Best of luck with doing this.
HTH
Rick

VTP Domain Topology

I have encountered an issue on ciscoworks in that if I request display view for a certain vtp domain it shows me all switches on that part of the network but does not show uplinks going to the core switch. I have attached a snapshot.
Thanks in advance.

Did you get any solution for this problem?
I'm experiencing the same problem with Ciscoworks 4.0 and topology view. If I open VTP view, I'm missing som uplinks connecting the devices, but if I open Network view I can see the uplinks and the topology view looks good. It's only when I open the view through VTP views I'm missing som uplinks.
I also have checked the same vtp config on the switches, snmp config is ok, uplinks looks ok and also the uplink config.
Wondering why?
Br
Geir

WLC 4402, LAP1242AG APs and Layer 2 Switch Network Design

Hi Every One,
I am new designer in the Wireless technology. During design i came accros through a confusing/complex existing topology which i have to integrate with WLC 4402 as below;
Existing:
1: I have 12 Switches; all vtp mode server. all in single vlan 1 with single subnet 192.168.0.0/24. All users ports in this single vlan 1.
2: All of these are old switches including 2950G, 350GXL, 4912.
3: All the switches gateway is Pix Firewall (192.168.0.1).
To Do:
1: I have to implement 1 * WLC 4402, 22 *LAP1242AG Access Points.
2: WLC will be connected to 350GXL or 4912 through Fiber.
3: Access Points will be connected to all other 20 switches randomely.
Confusion:
1: In my design i created separate vlan 450 for WLC and APs management. But this is not doable in this current setup because all the switches are vtp mode server. Also the gateway is Firewall. Which will require configuration on all existing switches + Pix.(I DONT WANT TO GO FOR THIS OPTION).
2: To make my work easy, is this possible to Put the WLC, APs in the same vlan 1 (192.168.0.0/24) that is currently used by the existing switches? The gateway for these WLC and APs will be Pix (192.168.0.1).
3: I tried to search Cisco examples, but in every example Cisco has made a separate vlan for WLC, APs management. So will Point 2 worK?
4: Do i require any specific changes for this?
5: ANY OTHER DESIGN SUGGESTION?????????
Please find the attached Diagram for more information.

Thanks for the reply.
1: U mean dat the switch port config will be as below;
int g0/10
description connected to WLAN Controller
switch mode access
switch access vlan 1
int g0/23
description connected to AP
switchport mode access
switchport access vlan 1
so below wil b the sumary of config:
All switches, WLC, APs, Wireless users and Wired users will be in the same subnet (192.168.0.0/24). Is it ok??
2: Wat do u mean by vtp config; Please clarify???
As i mentioned all switches are in vtp mode server. vtp domain name is configred on 12 out of 15 switch. Do i need to config same vtp domain name on all switches? I also have to check vtp pass??

3550 VLAN Interfaces Problem

I was setting up two VLAN interfaces for my 3550. I had two VLAN interfaces. One for VLAN 10 and one for VLAN 15. After configuring each VLAN Interface, VLAN 15 was down and wouldnt come up. VLAN 10 was up however. After issuing the no shutdown command for VLAN 15, it said VLAN 15 is not shutdown, but, when i checked the interface again, the VLAN interface was up. Now, I would think, if I had to do the no shutdown command on VLAN 15, why didnt I have to do that on the VLAN 10 interface? With switches, is the first VLAN interface automatically always up and all later VLAN interfaces automatically shut down.

A 'feature' of all the newer Catalyst switches and newer IOS is that the logical VLAN interface will remain down until a port in that VLAN is up.
The VTP config/status can also complicate this as a VTP client doesn't have the VLANs that the IOS config actually has because the VTP client hasn't learned the VLANs yet. In other words, the switch is in a state in which the IOS config puts a port in a VLAN that doesn't yet exist because VTP hasn't downloaded the VLAN database.
Keep in mind that VTP requires an operating trunk and if it is 802.1q then the native VLANs must match (so a native VLAN other than 1 will not work if the VLAN database hasn't been dowloaded by VTP or has been corrupted).
Not that you are running into the VTP issue, but in the effort of full disclosure...
Hope that helps...

When/how does VTP issue vlan config changes?

Hi,
On my VTP server switch I renamed a vlan. Does this change automatically get sent out after a set period of time or am I supposed to enter a command myself?
Thanks

According to:
http://www.cisco.com/en/US/tech/tk389/tk689/technologies_tech_note09186a0080094c52.shtml
Subset Advertisements
When you add, delete, or change a VLAN in a Catalyst, the server Catalyst where the changes were made increments the configuration revision and issues a summary advertisement, followed by one or several subset advertisements. A subset advertisement contains a list of VLAN information. If there are several VLANs, more than one subset advertisement may be required to advertise them all.

The difference between VTP server and transparent mode on Catalyst Switch.

Hello
I have a question about the difference between VTP server mode and VTP transparent mode on general catalyst switch.
Basically VTP server mode can create and modify VLAN configuration but actually there is not any VLAN configuration through running-config, is it true? When I checked it on Cat3550, certainly there is not VLAN configuration on VTP server mode. But VTP transparent can create VLAN and configuration but does not synchronize with other switch VLAN status. I appreciate any related information and reason of the VTP server mode specification, thank you very much.
[VTP Transparent mode]
3550#sh vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 1005
Number of existing VLANs : 27
VTP Operating Mode : Transparent
VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
*omit
3550#
3550#sh run
Building configuration...
*omit
vlan 99
name TEST-VLAN
[VTP Server mode]
3550#sh vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 1005
Number of existing VLANs : 27
VTP Operating Mode : Server
VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
*omit
3550#
3550#sh run
Building configuration...
*no VLAN like above configuration on VTP transparent mode.
Best Regards,
Masanobu Hiyoshi

Hi mhiyoshi,
3550#sh vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 1005
Number of existing VLANs : 27
VTP Operating Mode : Transparent
VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
*omit
3550#
3550#sh run
Building configuration...
*omit
vlan 99
name TEST-VLAN
The above out put indicates that Vlan is created and then mode changed to transparent. i.e why revision no is 0.
3550#sh vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 1005
Number of existing VLANs : 27
VTP Operating Mode : Server
VTP Domain Name :
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
*omit
3550#
3550#sh run
Building configuration...
*no VLAN like above configuration on VTP transparent mode.
This indicates that vlan never created in server mode nor learnt from another switch as revision no is 0

Need help with QoS config/setup for my home network.

I have a home network that spans two buildings, has and FTP download server, VoIP phones,and several computers among other IP devices. I run a home based business where my clients get access to the company FTP download server (NOT illegal file sharing). the problem is that when they are downloading files my VoIP takes a big hit and gets choppy when speaking to my customers. Below is the layout of the network.
Our Internet access is Verizon 4G, there are no other options available at this time or we would switch. The Verizon 4G MiFi connects to a TP-Link wifi router that then connects to port fa0/5 on the Office 3550PoE switch. There is a trunk between the Office switch to the House 3550PoE switch. The House switch then connects to the Shop 3524XL switch also using a trunk. Please note that EVERYTHING works fine other than the VoIP issue, VoIP makes and receives calls without connections issues.
Auto QoS has been run on the Office switch ports fa0/1 and fa0/2 as well as on the House switch ports fa0/3 and fa0/5. There is NO auto QoS on the 3524XL
What is the best way to give VoIP traffic top priority over FTP and web browsing when going out port fa0/5 on the Office Switch? Over the internal network we are not having any call quality issues between the IP phones, just calls to our SIP provider. Yes, I understand that once calls exit the Office switch to the TP-Link wifi router there will not be any QoS. But, if I can give priority to the packets at the layer 3 Office switch (or wherever you suggest) then at least I will not have to kill a users FTP download while I am on the phone.
Thank You

I can make ANY changes necessary, just need to know what to do.
First, did you notice the output of the command sh mls qos fa0/5 above? Is it working correctly?
Next, Yes I do have version W17 and can install if if needed. The lost of possible commands I listed above was from the conf t - config interface fa0/x level. There is class and policy mapping commands the the config global level along with all these other commands:
aaa                         Authentication, Authorization and Accounting.
access-list                 Add an access list entry
alias                       Create command alias
arp                         Set a static ARP entry
banner                      Define a login banner
boot                        Boot Commands
buffers                     Adjust system buffer pool parameters
cdp                         Global CDP configuration subcommands
cgmp                        Global CGMP configuration commands
class-map                   Configure QoS Class Map
clock                       Configure time-of-day clock
cluster                     Cluster configuration commands
default                     Set a command to its defaults
default-value               Default character-bits values
downward-compatible-config Generate a configuration compatible with older software
enable                      Modify enable password parameters
end                         Exit from configure mode
errdisable                  Error disable
exception                   Exception handling
exit                        Exit from configure mode
file                        Adjust file system parameters
help                        Description of the interactive help system
hostname                    Set system's network name
interface                   Select an interface to configure
ip                          Global IP configuration subcommands
line                        Configure a terminal line
logging                     Modify message logging facilities
mac-address-table           Configure the MAC address table
map-class                   Configure static map class
map-list                    Configure static map list
mvr                         Enable/Disable MVR on the switch
no                          Negate a command or set its defaults
ntp                         Configure NTP
policy-map                  Configure QoS Policy Map
power                       power configuration
priority-list               Build a priority list
privilege                   Command privilege parameters
queue-list                  Build a custom queue list
rmon                        Remote Monitoring
scheduler                   Scheduler parameters
service                     Modify use of network based services
shutdown                    Shutdown system elements
snmp-server                 Modify SNMP parameters
spanning-tree               Spanning Tree Subsystem
stackmaker                  Specify stack name and add its member
tacacs-server               Modify TACACS query parameters
tftp-server                 Provide TFTP service for netload requests
time-range                  Define time range entries
udld                        Configure global UDLD setting
username                    Establish User Name Authentication
vmps                        VMPS settings
vtp                         Configure global VTP state

Gf4MX440-VTP TV-Out doesnt work.

I've just buyed a dual gf4 mx440 with 64Mb and TV-Out, TV-In.
When I installed it I began working with two monitors witout problems, but when I've tried to connect de TV-Out, it doesnt word.
I've checked a hundred times the cable connecting, and it's ok because with my old graphic card I could.
I tried to upgrade the BIOS with an unofficial version and it didn't work, I downdated to the original version of BIOS again.
The graphic card detects the TV because it enables the TV-Out option in the configuration, but when I enable it I get a strange screen of one color on TV. The TV get's of a color brown or orange or something like that and I can't see nothing.
I've selected my country format (Pal/B, Pal/G). I've also tried all other formats whitout any result.
I'm running Windows 2000 Sp3
My motherboard is a DFI AD70-SC (With AGP 4x)
AMD Athlon XP 1.500
512Mb DDR RAM
I've tried all but it doesnt work.
Thank you very much.

Dunno if this thread is still going, but I figured why not
Well, I bought the GF4-mx440 VTP (8866) back in october, but haven't actually gotten around to testing it until last night, and I ran into the same issues.
For reference, the drivers on my cd are 30.00.
It was quite frustrating, but I did a ton of research and here is what I was able to find out. THis information isn't terribly organized, but bear with me because it's hopefully useful
TV-out on nvidia cards is not as simple as some may say. (Ie. all those who say nvidia has way better drivers than ati ).
Different detonator versions have WIDELY varying tvout support. In Some versions it works, some it works well, some it works poorly and others it doesn't work at all. Quite shocking, but sadly this is true.
Bits of info about the MSI-mx440 vtp itself. The tv out is based on a Seperate chip, the Phillips 7108. This chip handles the tv in and out features. (Geforce4 chips have themselves an "on chip" solution for tvout. But typically when manufactures use a Video In chip, you let that chip handle video out also).
Regarding the 440's bios. There is only one version (as listed through the live update running win9x). HOWEVER there are issues with this card and WinXP, to which the fix is to apply a bios update. I have not tried liveupdate on winxp (I run 98se), but I think that this bios update is only available upon special request to MSI. I'm not sure how it affects the situation(s) under win9x, but supposedly it fixes some winxp issues. (I will be installing XP in a dual boot config shortly, so I'l know for sure soon ). So according to the MSI support FAQ's, there is a bios update to address issues in winXP, that you can only get through special request (assuming you have winxp). I am not sure what the affects would be on win9x system, but since I am giong to dual boot soon, I'll probably have to apply the new bios and find out.
Okay, so how to find out if it's a software (driver) problem, or if it's hardware (a broken card that you can return). Here's what you do:
Unplug all monitors (vga connections) and plug in the TV out (I dont' have any s-vidoe tv's, so I just use the composite (RCA) jack) to a tv, and make sure the tv is on. Now boot your computer.
If you get output to the tv (usually the post info from the motherboard, followed by the win98 startup screen) this means your hardware works fine. (This is what happened to me). Strangely, it made it all the way into windows (on the tv), but typically what happens is that once windows loads you end up with the messed up pinkish brown screen. (I've never been able to have it boot into windows on the tv since then, heh).
SO if you do get picture during startup (before the os loads) then it means your card is fine, and it's a driver issue.
*Note: One thing I've noticed is that your tv-output is affected by which VGA out port you put your monitor on. For me, when booting with both connected (vga and tvout) if it's plugged into one socket, I see both monitor and tv, if it's plugged into the other socket, I don't see tv at boot. Not a big issue, but worth noting*
Okay, so now if you did see otuput on the tv during boot (before windows), you know your hardware is working. So you have to find a driver version that works for you. I'm going to list my own experiences.
MY cd came with the 30.00 MSI drivers. These gave me that icky pinkish brown flickering screen. Tv-out didnt' work with them. Tried the 31.00 MSI drivers, same thing. This was odd I thought, as the two most recent MSI drivers didn't work. So I tried the MSI 28.90 drivers, same thing with them too.
Finally I tried the MSI 27.20 drivers, and voilla, tv out worked! I was able to extend the desktop, and clone it, was even able to tape a downloaded episode of 24 on my vcr .
Of course using year old drivers is less than ideal (especially for 3d gamming). However, these are the ONLY MSI drivers that have tvout working.
I decided to move on to the nvidia detonator reference drivers, ideally you'd stick with the manufacture MSI, but what can you do. Here is what I have found so far:
27.20 MSI - Works with tv out
27.20 Nvidia - Works with tv out
27.30 Nvidia - This one is interesting, tv out works in extended desktop mode. BUT there is no tab in the options for cloning (the 'nview' tab is missing). So you can't clone, or overlay, only the extended desktop. So it's an "extended desktop only" driver.
27.42 Nvidia - Works with tv out (works same as 27.20s)
28.90 MSI - NO tv out
30.00 MSI - No tv out
31.00 MSI - No tv out
30.82 - Most resent 41.09 Nvidia - Tried them all, no tv out for any of them.
I have yet to try all the 28-29 nvidia reference drivers, so dunno if tvout works with them.
So what does this all mean? FIrst off, check if your cards hardware works (boot only with tv on and tvout connected, NO VGA). If your hardware works, then you have to find drivers that work with tvout. Give the ones that worked for me a shot, see if they work for you. (I typically plug in my vga and tvout at same time, so a see the POST in BOTH of them. Boot the computer with everything on, and then go to the settings and try to enable tvout).
This situation is less than ideal of course. It looks like you have to pick your drivers based on 3d performance, or tvout. But not both! Either use the most recent drivers for the best 3d support (but no tvout!), or 1yr old drivers for tv-out, but not the best 3d support. I'm an avid gamer personally, so this situation sucks.
What I find odd, is that MSI's own drivers (28.90, 30.00, 31.00) have these issues. They are privy to the peculiarities of the MSI cards, so they should be able to address it.
What the pattern (some drivers work, others don't) suggests to me is that MSI cards aren't fully compatible with the reference design. Possibly an issue with the bios.
I will try and get a hold of the bios update for the WinXp issue, and see how that affects the situation in win98se.
Hopefully this was helpful
(For reference, my system:
AMD xp1700, 256-DDR Kingston - Samsung chips, ECS k7s5a MB, seagate barracuda IV 40gb HD, LG 40x cdrw, onboard ac97 sound + lan, Usb keyboard + usb mouse).
Aggies

Can't archive nexus 5010 configs (LMS 3.2)

Using LMS 3.2 I can't archive configs from
our Nexus 5010 ( 4.2(1)N1(1) ) devices . I have installed
the   necessary device package Nexus.RME431.v2-4.zip. Following error occures:
*** Device Details for                          gf02na50050p                         ***
Protocol ==>                          Unknown / Not Applicable
Selected Protocols with order ==>                                                                                  SSH,SCP,TFTP,RCP,Telnet
Execution Result:
RUNNING
CM0151 PRIMARY RUNNING Config fetch failed for gf02na50050p Cause: Failed to fetch config using TFTPFailed to establish TELNET connection to 10.92.170.214 - Cause: Connection refused.
Action: Check if protocol is supported by device and required device package is installed. Check device credentials. Increase timeout value, if required.
Telnet on device is disabled, SSH enabled.
with only SSH on RME   followig error:
*** Device Details for                          gf02na50050p                         ***
Protocol ==>                          Unknown / Not Applicable
Selected Protocols with order ==>                                                                                  SSH
Execution Result:
RUNNING
CM0151 PRIMARY RUNNING Config fetch failed for gf02na50050p Cause: Failed to get the start tag-Building Configuration ... in the configuration. Action: Check if protocol is supported by device and required device package is installed. Check device credentials. Increase timeout value, if required.
Thanks
Igor

RME 4.3.1; windows platform
with one customer I have the same issue with a Nexus 5020. Software version is :
Software
BIOS:      version 1.3.0 [last: ]
loader:    version N/A
kickstart: version 4.2(1)N2(1)
system:    version 4.2(1)N2(1)
power-seq: version v1.2
BIOS compile time:       09/08/09 [last: ]
kickstart image file is: bootflash:///n5000-uk9-kickstart.4.2.1.N2.1.bin
kickstart compile time: 7/28/2010 18:00:00 [07/29/2010 03:10:19]
system image file is:    bootflash:/n5000-uk9.4.2.1.N2.1.bin
system compile time:     7/28/2010 18:00:00 [07/29/2010 07:18:12]
Hardware
cisco Nexus5020 Chassis ("40x10GE/Supervisor")
Intel(R) Celeron(R) M CPU    with 2074284 kB of memory.
===============
following RME packages are installed:
    SharedNetshowSS      1.1.2      SharedNetshowSS device package
    SharedSwimMDS9000    1.6.3      SharedSwimMDS9000 device package
    SharedInventoryMDS   1.5.1      SharedInventoryMDS device package
    SharedDcmaSS         2.2.2      SharedDcmaSS device package
    Nexus                2.4        Nexus device package
===============
>>> I see the following problems with SSH instrumentation of the Nexus Platform when looking into the debug file. The file I got is more or less the same then the one Marc posted.
The customer does not have a banner configured so the standard login procedure shows the following when login is done manually. RME automatically interpretes the first line after "Login as: " as a banner...
login as: Nexus
Nexus 5000 Switch
Using keyboard-interactive authentication.
Password:
Cisco Nexus Operating System (NX-OS) Software
TAC support: http://www.cisco.com/tac
Copyright (c) 2002-2010, Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under
license. Certain components of this software are licensed under
the GNU General Public License (GPL) version 2.0 or the GNU
Lesser General Public License (LGPL) Version 2.1. A copy of each
such license is available at
http://www.opensource.org/licenses/gpl-2.0.php and
http://www.opensource.org/licenses/lgpl-2.1.php
devicename#
>>> and RME wants to take the last line as the prompt, resulting in a non-fatal java exception:
[line 1471 ff.]
[ Mon Aug 30 08:58:01 CEST 2010 ],DEBUG,[Thread-38],com.cisco.nm.xms.xdi.transport.cmdsvc.LogAdapter,debug,31,Learning prompt: sA[0] == 'http://www.opensource.org/licenses/lgpl-2.1.php'
[ Mon Aug 30 08:58:01 CEST 2010 ],DEBUG,[Thread-38],com.cisco.nm.xms.xdi.transport.cmdsvc.LogAdapter,debug,31,Learning prompt: sA[1] == ''
[ Mon Aug 30 08:58:01 CEST 2010 ],DEBUG,[Thread-38],com.cisco.nm.xms.xdi.transport.cmdsvc.LogAdapter,printStackTrace,51,stacktracecom.cisco.nm.lib.cmdsvc.CmdSvcException: Prompt learning failed: 'http://www.opensource.org/licenses/lgpl-2.1.php' && '' do not match.
    at com.cisco.nm.lib.cmdsvc.Session.tune(Session.java:904)
    at com.cisco.nm.lib.cmdsvc.Session.tune(Session.java:833)
    at com.cisco.nm.lib.cmdsvc.AuthHandler.connect(AuthHandler.java:267)
    at com.cisco.nm.lib.cmdsvc.OpConnect.invoke(OpConnect.java:56)
    at com.cisco.nm.lib.cmdsvc.SessionContext.invoke(SessionContext.java:299)
>> Ok, RME proceeds, but the SSH implementation (SharedDcmaSS ?) cannot extract the config and a java exception occures which leads to "Closing the session":
[ Mon Aug 30 08:58:06 CEST 2010 ],DEBUG,[Thread-38],com.cisco.nm.xms.xdi.transport.cmdsvc.LogAdapter,debug,31,Returning from Session.send('show startup-config
[ Mon Aug 30 08:58:06 CEST 2010 ],DEBUG,[Thread-38],com.cisco.nm.xms.xdi.transport.cmdsvc.LogAdapter,debug,31,in trimPrompt(), prompt == ''
[ Mon Aug 30 08:58:06 CEST 2010 ],DEBUG,[Thread-38],com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.CliOperator,fetchConfig,490,Failed to get the start tag-Building Configuration ... in the configuration.com.cisco.nm.xms.xdi.ags.config.ConfigTransportException: Failed to get the start tag-Building Configuration ... in the configuration.
    at com.cisco.nm.xms.xdi.pkgs.SharedDcmaSS.transport.SSCliOperator.extractConfig2Buffer(SSCliOperator.java:176)
    at com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.CliOperator.fetchConfig(CliOperator.java:436)
    at com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.CliOperator.fetchConfig(CliOperator.java:510)
    at com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.SimpleFetchOperation.performOperation(SimpleFetchOperation.java:61)
    at com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.ConfigOperation.doConfigOperation(ConfigOperation.java:111)
    at com.cisco.nm.xms.xdi.pkgs.SharedDcmaSS.transport.SSConfigOperator.fetchConfig(SSConfigOperator.java:65)
    at com.cisco.nm.rmeng.dcma.configmanager.ConfigManager.updateArchiveForDevice(ConfigManager.java:1315)
    at com.cisco.nm.rmeng.dcma.configmanager.ConfigManager.performCollection(ConfigManager.java:3291)
    at com.cisco.nm.rmeng.dcma.configmanager.CfgUpdateThread.run(CfgUpdateThread.java:27)
[ Mon Aug 30 08:58:06 CEST 2010 ],DEBUG,[Thread-38],com.cisco.nm.xms.xdi.pkgs.LibDcma.persistor.SimpleFetchOperation,performOperation,62,FetchStatus - FAILURE for Protocol SSH for device x.x.x.x
>> As telnet and tftp are not allowed the config cannot be archived (Customer reports no problems with telnet...)
The config itself starts and ends with the following lines:
devicename# show startup-config
!Command: show startup-config
!Time: Mon Sep 6 16:41:02 2010
!Startup config saved at: Mon Aug 16 15:41:39 2010
version 4.2(1)N2(1)
no feature telnet
no telnet server enable
no feature http-server
cfs eth distribute
feature udld
feature interface-vlan
feature lacp
feature vpc
feature lldp
feature vtp
interface mgmt0
shutdown force
shutdown force
no snmp trap link-status
no snmp trap link-status
clock timezone MEZ 1 0
clock summer-time MEZS 5 sun mar 02:00 5 sun oct 03:00 60
line console
boot kickstart bootflash:/n5000-uk9-kickstart.4.2.1.N2.1.bin
boot system bootflash:/n5000-uk9.4.2.1.N2.1.bin
ip route 0.0.0.0/0 172.16.4.1
vtp mode transparent
vtp domain sap
logging server x.x.x.x 7 use-vrf default
logging server y.y.y.y 7 use-vrf default
devicename#
For me it looks like as a bug in the ssh implementation in RME, but I cannot find a bug id on CCO ....

Best practices for VTP / VLAN environment

Hi,
We currently have 1 VTP domain where all our network devices are configured.
We now want to join another VTP domain to this domain and I wander what the best approach will be to do this.
1. I can configure all the VLAN ID's at my own VTP server ( there are no overlapping ID's ) and configure the devices from the other domain as clients ( but what happens to the VLAN configurations made on the old VTP server ? ).
2. connect our 2 networks
or is it better to change only the VTP domain on the other VTP server ( the same as ours now ) and then connect the networks together ( what will happen with the VTP/vlan configuration of both servers, will they be added or will the sever with the highest revision number just copy his database to the other server and probably delete the current VTP/VLAN configuration ?
Is is good to have 2 VTP servers ?

I would like to warn you!
As soon as the VTP server you want to get rid of will be moved in the other domain, its config revision number will be 0 (The change of domain name will reset the config revision number). Its vlan database will be erased by the VTP server of the new domain. All the vlans of the old VTP domain will be lost.
I would proceed in this way (VTP A is the VTP you want to keep, VTP B is the VTP you want to merge into VTP A):
1) configure all the VLANs of VTP B in VTP A
2) reconfigure all VTP B's switches as VTP A client.
That's it.
Regards,
Christophe

Config archiving problem

Hi
am having problem in archiving config from switches in cisco works. am having problem in only 5 switches all others switch configurations archived when I try to do this I found following error.
TELNET: Failed to establish TELNET connection to 172.25.2.102 - Cause: Authentication failed on device 3 times. PRIMARY-RUNNING config Fetch Operation failed for TFTP. Failed to detect SSH version running on the device. Failed to fetch config using RCP.Connection refused: connect Verify RCP is enabled or not.
can any one help me to fix this
Thanks

Hi
Thanks for that apparently nearly 200 switches are working only 5 switches we have a problem. please see snmp config below. I have added RW recently it is not taking effect. please see screen shot of working one and not working
snmp-server community comms RO
snmp-server community comms RW
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps fru-ctrl
snmp-server enable traps entity
snmp-server enable traps cpu threshold
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps flash insertion removal
snmp-server enable traps port-security
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps license
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps hsrp
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency
snmp-server enable traps syslog
snmp-server enable traps vlan-membership
snmp-server host 172.16.25.12 comms
snmp-server host 172.16.25.13 comms

Cisco Security Manager & Cat6k in client/server vtp mode

Why won't CSM parse the config of a cat6k that is in client or server vtp mode?
Why does it have to be transparant mode?

Hi,
I am the TME for CSM. Currently CSM will only support VTP transparent since we only parse the running-config file. If you are running server/client it means that your vlan configuration will NOT be in the running-config (but in a seperate file). CSM doesn't read this file so things break. Next version of CSM (3.2 Q1CY08) will work with VTP server/client. The way it works is that it still won't read this extra file but instead it will ignore the whole vlan configuration. So you won't be able to create new vlans when running server/client but still you can assign vlans to interfaces using CSM. You will be personally responsible in making sure the vlan really exist when you configure it in CSM..(so you do this via CLI).
Erik Lenten
TME CSM
[email protected]

Basic Small LAN Config Changes

I have a few questions on setting up (re-configuraing) a small business LAN. The network consists of 2 core switches, both cisco 3750G and a Microsoft Threat Management Gateway as the router / firewall. The TMG has 3 NIC, DMz, Internal LAN, and External. The 2 3750G's are in two separate rooms connected via trunked VTP. I have a number of vlan's: vlan 9 (DMz) int ip192.168.0.2 | vlan10 (INT_LAN) int ip 10.0.10.2 | vlan20 (vMotion) int ip 10.0.20.2 | vlan30 (iSCSI) int ip 10.0.30.2. ip routing is enabled on switch. I do not have ip default-gateway set.
Threat Management Gateway (TMG) Server NIC Config: DMz, IP: 192.168.0.9 connected to gi1/0/x switchport access vlan9. INT_LAN, IP: 10.0.10.1 connected to gi/1/0/x switchport access vlan10. Ext, IP: Public connected to ISP. All internal servers / workstations use the TMG INT_LAN IP as their gateway. Internal AD DNS server forwards to DMz DNS 192.168.0.9. DMz DNS forwards to External Public for all external resolution.
With the above configuration, I'm noticing SYN_PACKET_DROPPED error in the TMG firewall logs. I've come across some information that might relate to having the gateway set as the TMG instead of the VLAN those servers / workstations are in, vlan10. i.e. their gateway should be set to 10.0.10.2 with a route to the TMG INT_LAN IP. My question being what is the best way to go about configuring this? Since the TMG is essentially a router, should / can I change it's INT_LAN IP to say 10.0.1.1 and set ip default-gateway to 10.0.1.1? -or- would adding a route like 10.0.10.0 255.255.255.0 10.0.1.1 work -or- 0.0.0.0 0.0.0.0 10.0.1.1. What would the port settings for the TMG NIC INT_LAN be? Would it be a routed port or still remain a switchport in a vlan i.e. vlan1 10.0.1.2?
Any assistance would be greatly appreciated with this configration. Thank you!
-SK

I've made the changes noted and I'm still experiencing a wrath of SYN_PACKET_DROPPED in the firewall logs still. I have to constantly refresh or press enter in the address bar of internet sites I'm trying to visit from clients in the Internal VLAN 10.
I think I need to have the TMG act as the router so-to-speak in the environment. What I'm trying to figure out is how to configure my core switch in this situation. What I'm thinking is configuring one of the interfaces on the 3750 as layer 3, no switch port. assigning it an IP address of say 201.1.1.2 with SN 255.255.255.248 Configuring the INT_LAN NIC of the TMG as IP 200.1.1.1 255.255.255.248 Would I need to add a route 0.0.0.0 0.0.0.0 200.1.1.1 on the 3750 for all internet traffic to end up at the TMG INT_LAN interface and most likely have the TMG routing set properly for the 200.1.1.x and 10.0.10.x subnets as part of the INT_LAN?
If the above scenario is taken, do I have to make any changes on the 2nd 3750? I have 3 VLAN's only. Management, VLAN 10, and VLAN 5. could the ip default-gateway of the 2nd 3750 be the management interface IP address with the core1 3750 having the static 0.0.0.0 route, or do both switches need a static route to the TMG 200.1.1.1 IP? Thanks.
-SK

VTP config

Similar Messages

Maybe you are looking for