access-group command doesnt exist
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-19-2007 08:36 AM - edited 03-05-2019 04:49 PM
Hello,
I just acquired a 2811 running IOS 12.4, but I cannot run the access-group command simply because it doesn't exist. Has anyone experience this before. I can run access-list no problem, but access-group is not existing. Please help me.
Thanks
- Labels:
-
Other Switching
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-20-2007 11:42 PM
Right Narayan!
Fa0/0 indeed supports the command access-group!
so this means that my Four (non-default) Ethernet ports cannot be configured with routing commands!!
How can I turn them to L3
Attached is my 'sh diag' result
Thank you for your help!
Mujos
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-20-2007 11:50 PM
Mujos,
The module HWIC-4ESW you have doesn't seem to support L3 interfaces as per the data sheet
http://www.cisco.com/en/US/products/ps5855/products_data_sheet0900aecd8016bf0b.html
HTH, rate if it does
Narayan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-21-2007 12:21 AM
Why would cisco sell L2 only interfaces to plug into a router? A router is supposed to do L3, right? It doesn't make sense to me!
Now I'm stick to 4 L2 ports, and there is no way to software-upgrade it.
Thanks for your light
Mujos
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-21-2007 12:30 AM
Mujos,
It is actually the other way. These modules are used on the router to give them some switch functionality.
There are few modules which do support L3 functioanlity as well
Narayan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-21-2007 06:02 AM
Mujos
What if you assign the switch ports to a VLAN (for example VLAN 20) and then try to create an SVI (for example interface vlan 20) and try to put an IP address on it and then try the ip access-group command. I think that should work.
HTH
Rick
Rick

- « Previous
-
- 1
- 2
- Next »