Where to install CCM, access or core switch?

What's the recommendation on where the CCM server should be, in access switch or core switch? Based on ipt readiness assessment seems servers should be on access switch. Thanks

If you have many wiring closets (access layer) that has phones plugged into them, its better to centrally colocate CCM and such to the core, or in a distribution block that is connected to the core.
HTh
Sankar.
PS: please remember to rate posts!

Similar Messages

2 locations, 2 core switch stacks, fibre in between, equal cost load balancing between?

Hi,
We've recently inherited a job that another company was doing, so we've had our hand slightly forced on the kit and overall topology involved, however that's all fine and we can make it work.
This is a collapsed core topology with core and access switches, split over 3 blocks (fibre connections between), one core switch/stack is in block B and the other in block C, with access switches throughout.
They require all access switches to be connected to the Core in B and the Core in C, and then obviously cross connects between the two cores.
They state:
"Core switches shall be linked with 2x 1Gbps links bonded into a standard compliant Etherchannel"
"Uplinks between access and core switches shall be non-blocking - for example equal cost load balancing at layer 3, or layer 2 bonded multi-chassis Etherchannel"
The specced kit for the core are 3850's, in an ideal world I'd use VSS (Virtual Switch System) to achieve the above statements beyond repute; but this is only supported on 4500/6500 and Nexus platforms.
Do we think a cross stack etherchannel (LACP between both core switch stacks) would satisfy the above statements? Or the statements may just be badly worded...
I look forward to your thoughts and views on this! Thanks!

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
As the others have noted, the 3850s, to stack, are restricted to the length of the longest stack cables.
As you have noted, VSS physical units would allow the "logical" unit to be far apart.
For a "small" VSS core, the 4500-X might be an idea unit. (Other than cost, the 4500 would be a better choice for a core device.)
Something to watch for, or understand, when running VSS, Etherchannel doesn't load balance as it does on a single chassis or stack. VSS will avoid using the VSL cross link unless it must.
As many access switches, today, support basic L3 routing, you might also determine whether a L3 edge would be a suitable alternative choice. It would allow retention of the 3850s and can offer some advantages even over VSS. (Where VSS is very nice [as too the Nexus] supporting servers with Etherchannels.)

How to create a Access list on core switch to bloxk all Internet Traffic & allow some specific Internet Traffic

Hellp Everyone,
I am trying to create a Access-List on my Core Switch, in which I want to allow few internet website & block the rest of them.
I want to allow the whole Intranet but few intranet websites also needs access to the internet.
Can we create such Access-List with the above requirement.
I tried to create the ACL on the switch but it blocks the whole internet access.
i want to do it for a subnet not for a specific IP.
Can someone help me in creating such access list.
Thanks in Advance

The exact syntax depends on your subnets and how they connect to the Internet. If you can share a simple diagram that would be much more informative.
In general just remember that access-lists are parsed from the top down and as soon as a match is found, the processing stops. So you put the most specific rules at the top. also, once you add an access-list, there is an implicit "deny any any" at the end.
The best approach is to create some network object-groups and then refer to them in your access list. From your description, that would be something like three object-groups - one for the Intranet (Intranet), one for the allowed servers that can use Internet (allowed_servers), and a third for the permitted Internet sites (allowed_sites).
You would then use them as follows:
ip access-list extended main_acl
permit any object-group intranet any
permit object-group allowed_servers object-group allowed_sites any
interface vlan
ip access-group main_acl in
More details on the syntax and examples can be found here:
http://www.cisco.com/en/US/docs/ios-xml/ios/sec_data_acl/configuration/15-2mt/sec-object-group-acl.html#GUID-BE5C124C-CCE0-423A-B147-96C33FA18C66

I can't seem to find where I need to access Find My Phone on my PC. I believe that everything is installed but have not found the icon or application used to locate the device. Can someone help me?

I can't seem to find where I need to access Find My Phone on my PC. I believe that I have installed the program properly but cannot find the application or ICON on my PC in order to locate the phone device????

You need to login to iCloud: https://www.icloud.com then click Find My and follow the on-screen directions.

HSRP between 2 access switches and 2 core switches

Hi I am looking for running HSRP between 2 access switches and 2 core switches for client PC and Server network’s next-hop redundancy as per attached setup.
As you can see I have used one /29 network for connecting CORE & ACCESS switches & configure Interface VLAN10 (Layer 3 SVI) with shown IPs and standby IP (VIP).G0/1 on Access Switches & G2/1 on Core Switches are access ports for VLAN10.
There is a L2 Trunk interconnecting Core-Main/Backup & as well as Access-Main/Backup Switches allowing VLAN10 to allow VLAN10’s HSRP packets to pass through (apart from other HSRP instances).
Below are the HRSP & Trunk configuration on Core and Access Switches please have a look and suggest if they are correct in term of HSRP implementation, as I can see on both side HSRP master & standby status are fine as desired, but I can’t ping VIP of ACCESS Switch from CORE switch, but the VIP of CORE switch I can ping from ACCESS switch.
Access-Main
interface GigabitEthernet0/1
description ***Connected to CR-SW-01 PORT G2/1***
switchport access vlan 10
switchport mode access
load-interval 30
interface GigabitEthernet0/2
description ***Connected to AC-SW-01 & AC-SW-02 for HRSP***
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 10,40
switchport mode trunk
load-interval 30
interface Vlan10
description ***Connected to CR-SW-01 PORT G2/1***
ip address 10.10.11.1 255.255.255.248
standby 1 ip 10.10.11.2
standby 1 timers msec 200 msec 750
standby 1 preempt delay minimum 180
standby 1 authentication accvlan10
Access-Backup
interface GigabitEthernet0/1
description ***Connected to CR-SW-02 PORT G2/1***
switchport access vlan 10
switchport mode access
load-interval 30
interface GigabitEthernet0/2
description ***Connected to AC-SW-01 & AC-SW-02 for HRSP***
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 10,40
switchport mode trunk
load-interval 30
interface Vlan10
description ***Connected to CR-SW-02 PORT G2/1***
ip address 10.10.11.3 255.255.255.248
standby 1 ip 10.10.11.2
standby 1 priority 10
standby 1 timers msec 200 msec 750
standby 1 preempt delay minimum 180
standby 1 authentication accvlan10
Core-Main
interface GigabitEthernet2/1
description ***Connected to AC-SW-01 PORT G0/1***
switchport access vlan 10
switchport mode access
load-interval 30
interface GigabitEthernet2/2
description ***Connected to CR-SW-01 & CR-SW-02 for HRSP***
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 10,20
switchport mode trunk
load-interval 30
interface Vlan10
description ***Connected to AC-SW-01 PORT G0/1***
ip address 10.10.11.4 255.255.255.248
standby 1 ip 10.10.11.5
standby 1 timers msec 200 msec 750
standby 1 preempt delay minimum 180
standby 1 authentication crvlan10
Core-Backup
interface GigabitEthernet2/1
description ***Connected to AC-SW-02 PORT G0/1***
switchport access vlan 10
switchport mode access
load-interval 30
interface GigabitEthernet2/2
description ***Connected to CR-SW-01 & CR-SW-02 for HRSP***
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 10,20
switchport mode trunk
load-interval 30
interface Vlan10
description ***Connected to AC-SW-02 PORT G0/1***
ip address 10.10.11.6 255.255.255.248
standby 1 ip 10.10.11.5
standby 1 priority 10
standby 1 timers msec 200 msec 750
standby 1 preempt delay minimum 180
standby 1 authentication crvlan10

Hi Rick thanks once again, so I am assuming I should use to configure as below and still one /29 subnet I can use to connect these Switches with the above static routings.
Access Switch-Main
interface Vlan10
description ***Connected to CR-SW-01 PORT G2/1***
ip address 10.10.11.1 255.255.255.248
standby 2 ip 10.10.11.2
standby 2 timers msec 200 msec 750
standby 2 preempt delay minimum 180
standby 2 authentication accvlan10
ip route 192.168.20.0 255.255.255.0 10.10.11.5
Access Switch-Backup
interface Vlan10
description ***Connected to CR-SW-02 PORT G2/1***
ip address 10.10.11.3 255.255.255.248
standby 2 ip 10.10.11.2
standby 2 priority 10
standby 2 timers msec 200 msec 750
standby 2 preempt delay minimum 180
standby 2 authentication accvlan10
ip route 192.168.20.0 255.255.255.0 10.10.11.5
Core Switch -Main
interface Vlan10
description ***Connected to AC-SW-01 PORT G0/1***
ip address 10.10.11.4 255.255.255.248
standby 1 ip 10.10.11.5
standby 1 timers msec 200 msec 750
standby 1 preempt delay minimum 180
standby 1 authentication crvlan10
ip route 192.168.40.0 255.255.255.0 10.10.11.2
Core Switch -Backup
interface Vlan10
description ***Connected to AC-SW-02 PORT G0/1***
ip address 10.10.11.6 255.255.255.248
standby 1 ip 10.10.11.5
standby 1 priority 10
standby 1 timers msec 200 msec 750
standby 1 preempt delay minimum 180
standby 1 authentication crvlan10
ip route 192.168.40.0 255.255.255.0 10.10.11.2

Where to install Thunderbird on Mac OSX for multiple users.

Hello,
I would like to install the email program Mozilla Thunderbird on my Mac OSX (10.4.6) computer which is set up with several different user accounts. I am not sure where to install it so that everyone may be able to use it. I would like to install it once so that everyone may use it rather than installing it multiple times (once for each user).
As you might already know, in Mac OSX when you install a program in the main applications folder, it is available for everyone who uses the computer (available to all accounts). However, the trouble is, that although the actual Thunderbird program is available to all users the profile is not. The profile obviously is an important component of the Thunderbird mail program as it contains all the actual mail messages. When Thunderbird is installed, by default the profile folder is placed in the users home Library folder at:
users home folder/Library/Thunderbird/Profiles/<Profile name>/
This location make it impossible for other users to access the profile and therefore Thunderbird will not work for the other users.
What should I do?
I have a couple solutions, however I would like to ask for some advice on what others do in this situation which I am sure is fairly common.
Here are my solutions:
1. Move the profile folder to a custom location that is accessible by all users in OSX such as the global Library folder (rather than the user's Library folder). Path of global Library folder:
/library/
Then let Thunderbird know it was moved to this custom location using Thunderbird's profile manager.
2. Try to figure out a way in mac OSX that allows the profile folder at this default location:
users home folder/Library/Thunderbird/Profiles/<Profile name>/
to be accessible by all users.
Ownership and permissions need to be changed for the profile folder maybe?
3. Install thunderbird multiple times - once for each user - each with their own profile. The problem with this is then there will be multiple installations of the same program and they will not be able to share the same profile folder - which is what I would like to do - if possible.
I have a feeling that solution 1 is the more logical solution.
PS I am using Mac OS 10.4.6 (Tiger) with Thunderbird 1.5.0.4
Thanks for any advice.

Yup, its me again Always seem to have a question for the group
Thanks Mulder and Scott! I am sure glad I asked for your advice. I am completely new to the multi-user environment of OSX - as you can tell. (I guess I am still in OS9 thinking mode where there was only one user.)
Scott wrote:
"Mail can be configured to download any new email, but not remove it from the server until it is removed from the Mail application. This way, the email can be downloaded to multiple clients across multiple accounts."
Interesting. Thanks for pointing this out Scott. Good to know. This would seem to me to be similar to IMAP in some ways. This would be a good way to work in a multi-user environment. This is good info to be aware of.
It sounds like an interesting way to work.
Thanks to both of you for steering me aware from the difficulty of attempting to place the profile folder outside the home directory. This sounds like it would have been more work than necessary.
Why am I not using Apple's Mail program? Good question. I thought I would try out Thunderbird for a while - and maybe switch to Apple Mail later - just to see which one I prefer. I am a web developer and I have always liked the open source community and I thought it would be beneficial for me to become as familiar as possible with all the Mozilla products (Firefox and Thunderbird). As well, it keeps me somewhat on the same wavelength as my PC friends, of whom many use this program too. I don't want to be too much out of touch with my mac. I might try Mail later. Thunderbird has been great so far. It has excellent spam recognition abilities and you can train it too to detect spam.
Scott the "Family account" idea is an awesome idea. Thanks.
I have learned a lot from this post. This gives me a few logical solutions. As Mulder points out it is best to keep users' profiles separate. This makes it simpler. Excellent advice. I could still install the Thunderbird application in the global application folder and then each user account can open this Thunderbird application from their own account and configure the mail client with their own profile. All users will be using the same Thunderbird application but with their own profiles. Yes, thats it. I tried this out and it seems to work now - didn't seem to work earlier because I didn't know what I was doing
Another idea could be, if I really need to share one single profile, would be to follow Scotts advice and just set up a "Family account". Very simple solution. Nice idea.
So, those are the two top solutions.
Furthermore, I could use a mix of both strategies. For mail accounts that could be shared ([email protected]) I could create a "Family account" in OSX, as Scott detailed above, and then for mail accounts that are for each individual user ([email protected]), I could be sure they have separate profiles as detailed in Mulder's post.
Thanks for all these helpful ideas!

HT4623 I trying to update my iPad using iTunes. After connecting to MacBook Pro where is installed all latest software iPad is recognised as iPad, Serial Number: n/a. iTunes run recovery mode, trying to restore iPad firmware, and in the end unknown error

There was some updayts for my iPad 4 automatically downloaded. After installing it, the iPad began to restart itself every few minutes.
I tryed to update my iPad using iTunes. After connecting to MacBook Pro, where is installed all latest software, iPad is recognised as "iPad", Serial Number: n/a. iTunes run recovery mode, trying to restore iPad firmware, and in the end unknown error occured (3). Tried many times, not results. And now iPad stays only in recovery mode, can't switch it off. How can I solve this problem please?

When I restart my iPad the connect to iTunes comes up and stays on until it shuts down again, I have read a report from Apple support suggesting I reinstall iTunes so I might try that again and also your suggestion which i shall also try, but thanks again - rg1547

Steps to upgrade Cisco MDS core switch

Hello,
We wanted to upgrade our Cisco SAN core switch firmware. Currently we are running below firmware version. We wanted to go to latest version NX OS 5.2 (x) but as per the white paper i need to go to 5.0 (X) and after that i need to upgrade it to 5.2 (x). Can some help me with the steps to follow the upgrade. I have th cook book but just need the main steps to perform the upgrade.
kickstart: version 4.1(1c)
system: version 4.1(1c)

are you using IVR non-NAT, if you are you need to convert to IVR-NAT before you go to 5.2. Other than that you just follow the normal procedure, look at the release notes for each firmware to make sure your hardware is supported and then do the usual
install all system bootflash:m9x00-xxx.bin kickstart bootflash:m9x00-xxx-kickstart-xx.bin
as a side note, i know you don't mark people replies to your questions as helpful/correct on EMC ECN ..at least do it here to show your appreciation.
@dynamoxxx

Core switch and sub switch gateway

I have a Layer 3 core switch(backbone) 10.18.16.0/24, and the core switch needs to connect to multiple Layer 2 sub switches.
The Layer 2 sub switches will connect to multiple workstations. The sub switches network will be 172.20.10.0/24, 172.20.40/24 and so on.
I use core switch IP 10.18.16.11 to connect to sub switch 172.20.10.0/24. Which gateway IP should I use for 172.20.10.0/24 ? Should I use 172.20.10.1 or 10.18.16.11 ?
Thank you for your help in advance.

I am not sure what you mean by "sup switches", but usually you need a management IP/vlan segment, so you can use it to access the devices. So if your management segment is 172.20.10.0/24 you assign an SVI to every layer-2 switch and give it an IP in this range and the gateway for all the SVIs should be on the core (172.20.10.1/24
example:
access switch-1 172.20.10.11/24
access switch-2 172.20.10.12/24
access switch-3 172.20.10.13/24
and so on
The default gateway for all your layer-2 switches should be the SVI on the core (172.20.10.1/24)
HTH

Connecting core switch to the internet ?

Hi,
We have 2 6506's connected through an ether-channel trunk.
On these 6506's we have configured a vlan, vlan interface and 2 access ports for 2 ASA's.
These ASA's run in failover mode but only one ASA is physically connected at the moment.
We want to be more resilient so our provider has provided us with a redundant setup of routers for our internet connection.
However, for this construction they would need a layer 2 connection on our side to have HSRP running.
There are 2 options in my opinion :
- Buy a set of switches to facilitate the layer-2 connection between te routers and to connect the outside of the ASA's.
- Instead of buying 2 new switches, create a new unrouted vlan on our core 6506's and use access-ports for the routers and the ASA's.
But how safe is it to connected the core switch with an unrouted vlan to the internet router ?
In terms of vlan hopping or other possible attacks ?
I think i have to disable DTP, Spanning-Tree, CDP and maybe a lot more ?

I am as far as applying this to secure the port :
switchport
switchport mode access
switchport access vlan X
switchport nonegotiate
spanning-tree bpdufilter enable
spanning-tree portfast edge
switchport port-security
switchport port-security maximum 3
switchport port-security violation restrict
no cdp enable
Any additions to this ?

Choosing a Core Switch

Hi,
What are the criterias when choosing a core switch? For example, in the Cisco product pages - the Catalyst 4500 and 6500 are already distribution/core switches while the Catalyst 3750 are access/edge switches.
Can I make a stack of Catalyst 3750 my core switch? What makes a core switch a "core" switch - what features does it have, performance, etc.?
Does Cisco have a guide - for example, you have X number of users - use Cisco Y model as your core switch?
Thanks,
Tony

There's many criteria one can use choosing a core device, but since such a device, by being at the center of your network, may carry the most traffic, performance is often given additional weight for core device choice.
With regard to making a choice on some X number of users, choice of core is often made more toward bandwidth usage of core ports. There's often a large difference between the nomimal bandwidth of a port and the substainable bandwidth to/from a port. (E.g. the difference between a 6500 with Sup32 and 6148 10/100/1000 Ethernet vs. 6500 with Sup720 with 6748 and DFC 10/100/1000 Ethernet. The former is suited as an edge device, the latter more suited for core device.)
A stack of 3750 might be used as a core for a very small and/or light usage network. Consider that a single 48 port 3750, I believe, is not an every port wire rate device, and the performance limitation of the stack ring. However similar performance limitations are also true for certain 4500 or 6500 hardware configurations.
Although performance is often a major factor, other considerations, such as other features, might be important too. For instance, a dual 48 port 3750G stack might be a viable choice vs. a 6704 with dual Sup32s and two 6148 line cards, but the 6500 likely will offer features not available with the 3750. For instance, believe 3750s only support 32 HSRP groups and don't support GLBP.

LAN design - how to implement a core switch?

Hi all,
First post here so please be gentle :-)
I'm looking for a bit of advice with a LAN setup I've been tasked with.
The basic requirements are to have a demonstration suite of servers/storage devices networked with internet access with certain devices segmented in different VLANs. Also, a separate VLAN is required for training and meeting rooms which will receive DHCP addresses from a WIN2K3 server.
The kit I've inherited consists of:
1 ADSL Modem/Router
1 2611XM router
2 Catalyst 4006 switches with Supervisor II engines (CatOS :-( ), one with a layer 3 routing module
Several Catalyst 2950/3500xl switches
Netscreen 100 Firewall
F5 Firepass for VPN
After a lot of fun resetting devices I've currently setup the LAN with a router on a stick configuration which routes between different VLANs (on the 3500/2950s) and which has internet access via the 2611 and ADSL modem router in turn. That's about as far as my current knowledge goes I'm afraid!
What I have to do is incorporate the 4006s but I don't really know how to go about it or what's the best way to use them. How would I use them as core switches?
I was hoping someone could point me in the right direction on the best way to connect the switches up, i.e. network design, cabling (fibre uplinks between switches) and some basic configuration advice with the layer 3 routing module.
Any advice will be most appreciated!! It's my first networking job and I'm a bit lost.
Thanks.

Peter,
I would do the same - with a twist...
Have 1 4006 as a VTP server, also the spanningtree root for all vlans.
Have a trunk between the two 4006's - and make it an etherchannel 2 or 3 ethernet links (redundancy).
Make the second 4006 also a vtp server (redundancy) and have that 4006 the secondary 4006 for spanningtree (more redundancy!)
That way if you decide to have a distribution layer - you have 2 uplinks into the core 1 into 4006-1 as the primary, and the second 4006-2 as the secondary.
You could then have a trunk (etherchannel) between the distribution switches, then have a access layer into the distribution layer with duel links. This way you could have multiple switch and or link failures and still work!!!
You use the layer 3 module to do the inter-vlan routing - correct. Then have your adsl modem/router as the gateway to the internet - you put a default route in the layer 3 module point to the adsl modem! then you have the routes for the various vlan subnets pointing from the modem back to the layer 3 module......done!
HTH.

How to install CCMS agent in MSCS cluster system?

Hi,
We just migrated our WAS 7.0 system from a single to a MSCS cluster system and we need re-install CCMS agent on it. New cluster system have two nodes. Each node we have local SAP instances. We have central instance for message server running on a shared drive, which can failover to one of the nodes. My question is when I install CCMS agent, where I should I install it? Each node of the cluster on local drive or only shared drive or I have to install on three places?
Thanks you.
Yujun Ran

Hallo.
Did you solve your issue?
I followed Oss note 536954, but I am not sure that it is for new cluster system.
Furthermore, the CCMS agent that you installed, point to a CEN system (as Solution manager for example) and as second system to the central instance ?
Thanks.
Mario

Where to install OSX?

Hello i have a mac pro 2.8 eight core. I currently have 2 drives, the stock 320GB drive and a new WD6400 AAKS, i have mixed opinions on where to install the OSX and where to place the Home folder.
1-I was planning on installing OSX on the stock drive and leaving the Home folder on the new drive but i was wondering if this was the correct way of doing it. Can someone please advising on which would give my system the best performance?
2- Also if I move my home folder, does that include the Applications folder as well, so when I launch my applications they will launch from the faster drive?
What would you do if you were in my situation?
Thank You

Without knowing exactly what apps you'll be running and how you use your system, it's difficult to be precise, but generally it's better to have your OS on the better-performing drive. Hatter has posted links to various drive benchmarks, including in this thread:
http://discussions.apple.com/thread.jspa?threadID=1670647&tstart=0
so you can look up tests for your two drives and see which one is the better performer, and that's where, in absence of any additional use information, I'd suggest you install the OS.
Also if I move my home folder, does that include the Applications folder as well
No. The Home folder and Applications folder are completely separate. Moving one does not move the other.

Where to install agents?

Hi,
I have following architecture:
- Server 1 - ODI installed with option Server
- Client 1 - ODI installed with option Client
- Client 2 - ODI installed with option Client
- Server 2 - Oracle DB installed - ODI Repositories created
- Server 3 - Oracle DB - source system
- Server 4 - MS SQL Server - source system
- Server 5 - Oracle DB installed - target system
I not sure where to install agents for this architecture:
- on Server 1?
or
- on Servers 3 or 4 (source systems)
or
- on Server 5 (target system)
What solution will be the best one in this case?
Thanks in advance!

It is best to install the agent as close to the target as possible. So, in your case it will be on Server 5.
Moreover, since you have only one target, then you have the advantage that you can install only one agent and it works.
Just keep in mind, that while installing the agent on the Server 5,
Server2, server3 and server4 should be visible to Server 5.
To explain more the above statement,
We have Filesystems FS1, FS2 on which the source files are located.
And the agent is located on ORADB1 which is the target Oracle DB. So, the filesystems FS1 and FS2 are visible to the system on which ORADB1 is installed and hence the agent on ORADB1 can also see the filesystems and hence access the files for processing.
HTH

Where to install CCM, access or core switch?

Similar Messages

Maybe you are looking for