3560-X and Axis H264/RTSP issue

[lmcnett]

We've got a new building coming online, and with this being the first entirely cisco deployment for us, I've run into an unexpected issue.

We have a 3560-X distribution switch and a few 2960S switches at the access level.  We have Axis P3304-V cameras that we wish to use with H264 support.   I can see the MJPG streams, but the H264 streams do not work.  When I set up a test camera on a slightly older 3560 and both streams work.

I am not sure how to begin troubleshooting this, so I'm just going to list the details I feel are pertinent.

in the bulding we've got

1 3560X, running Version 12.2(55)SE5 and c3560e-universalk9-mz.122-55.SE5.bin

10 2960S, running Version 12.2(55r)SE and c2960s-universalk9-mz.150-2.SE4.bin

and they don't work for h264 streams.  The test lab is a C3560 running Version 12.2(55)SE5 and c3560-ipbasek9-mz.122-55.SE5.bin  and both streams work just fine.

The building does have some QOS set up for VOIP... I do not have any QOS on the test lab.

I've used the same make/model cameras with the same firmware and on the same VLAN... I'm fairly certain it isn't a camera configuration issue.

I've used several means of pulling the H264 stream (chrome/ie/firefox/vlc/quicktimeplayer/mediaplayer), and all fail in the building, and all work in the test lab.

The building is not yet inhabited, and is seeing minimal traffic, in fact. the test lab switch sees more traffic.

I'd appreciate any help you can give me.

[shanemoss]

When testing the switch on the building, are you connecting your pc into the same switch as the camera or is your test pc/client deprecated by a router or routers?

If connected to the same switch can you send your interface config?

Sent from Cisco Technical Support iPhone App

[lmcnett]

The test lab consists of the 3560 switch, the surveillance server itself, and a single camera.  The server can see the camera on the local switch, but not the cameras deployed to the building.  I'm currently setting up a new switch with the exact same configuration in the lab and placing the server on the new switch to rule out the hardware between the test lab and the deployed cameras.

Config for the deployed switch connecting the unviewable cameras:  http://pastebin.com/8rBZpnKW

Config for the test lab switch: http://pastebin.com/aqGaC2UA

interface Vlan61

description VLAN for Security Cameras

ip address 10.10.0.1 255.255.0.0

ip access-group 130 in

ip access-group 131 out

no ip redirects

!

access-list 130/131 allow for a few subnets to talk, like so:

access-list 130 permit ip 10.10.0.0 0.0.255.255 10.14.0.0 0.0.255.255

access-list 130 deny ip 10.10.0.0 0.0.255.255 any

The workstation is on 10.14.