Solved: Re: Basic 3850 Configuration

SeaLH · ‎04-04-2018

I just received a brand new out of the box 3850. I am configuring it for a very basic configuration, no VLANs nothing special.

I am new to the Cisco world, and all I am trying to do is give it a management IP. I am probably missing something, but I assigned the IP to VLAN1, and gave it a gateway. If I plugin my PC to the switch, I am not able to contact the switch in anyway.

Here is my running config

Building configuration...

*Apr  4 21:42:40.057: %SYS-5-CONFIG_I: Configured from console by console
Current configuration : 9794 bytes
!
! Last configuration change at 21:42:40 UTC Wed Apr 4 2018
!
version 16.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no platform punt-keepalive disable-kernel-core
!
hostname SMVCoreSW1
!
!
vrf definition Mgmt-vrf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
enable secret 5 $1$ivaa$wCo5BLPKCY6.C5M788W6g0
!
no aaa new-model
switch 1 provision ws-c3850-48p
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2512189159
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2512189159
 revocation-check none
 rsakeypair TP-self-signed-2512189159
!
!
crypto pki certificate chain TP-self-signed-2512189159
 certificate self-signed 01
  30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 32353132 31383931 3539301E 170D3138 30343034 32303138
  32355A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35313231
  38393135 39308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201
  0A028201 0100B0C5 C2D79A43 8BDC8E23 D0F5568D 3B74A732 9632B5E7 58D97EBC
  EC0D8C81 2E3364A7 C7EA094F FFE85754 5B4FE52C A0AA295A 0EE56123 131DFFBF
  E355627E 67B04F9D E09D4EC2 D24002B5 36D8E923 8A49EC8E 6781A21F ED55E56B
  328BB984 A54F7027 A70A6AC2 138F2BC8 B54504BF 0ECBDD1E 34B206EB 220741A4
  602ADFBD 42816535 ABA3BF0E 86795BD6 58CA83C6 3FC7FE7F 4C1B8FC6 F5377F85
  AD44152E 427706D1 9F225C1F 608BC30C 1278A9CD 37440A91 68306BCB A9B5FEBF
  2D0733F0 BAB51A01 28ED66D3 5CC35A20 198F57C5 772DA48A AA617D40 2DAF74D8
  BBE81BC4 5679C09B 0EFD0E3A 447FF8BE F27F80F5 1BAEC723 EC83D71B 5570A147
  63C1B76F FE730203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF
  301F0603 551D2304 18301680 141ED693 F19C746D 3AB71BF6 C0BECCE3 933F4E51
  A9301D06 03551D0E 04160414 1ED693F1 9C746D3A B71BF6C0 BECCE393 3F4E51A9
  300D0609 2A864886 F70D0101 05050003 82010100 52CE2346 6ADA0B34 660CD7F5
  4136861E 1130CFE1 E0750572 266B3FAB DEAA13C0 A79F806E EA64D0EB 8A374894
  6332648B F6B4BF0B 92D51110 731B43F1 F5122131 1066DF63 2771910D 6BCC0B3A
  FDAD3FE9 A6F3F7C7 53408C4C F2EEC0FF 6B15BB4B 5B1751BC 35D9E073 66292FAA
  32F8C22A F1D98395 79E19CDB 57364970 0760CC91 F528E09D 216CF11C 52145775
  DB5F8ABC 71910EF7 6FB04CA4 6906D265 739E0EC8 EC95561E C0053585 A550F138
  6C6C7E18 75F2759D 3C35A88C D80D0C10 72B02BC1 DF338C00 0357EAC1 FA23388B
  853B81BC 2874604B 46D06AD4 D5A0AF37 BE8FC5C3 A6303C71 C8BF4DE5 A5B79ECB
  C038647F CF9C6713 CEEA4D1E 2AC2F556 CCA86CB3
        quit
!
license boot level ipbasek9
diagnostic bootup level minimal
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
!
username admin password 7 111A0E0C030612000D3E3F3D
!
redundancy
 mode sso
!
!
!
class-map match-any system-cpp-police-topology-control
  description Topology control
class-map match-any system-cpp-police-sw-forward
  description Sw forwarding, SGT Cache Full, LOGGING
class-map match-any system-cpp-default
  description DHCP snooping, show forward and rest of traffic
class-map match-any system-cpp-police-sys-data
  description Learning cache ovfl, Crypto Control, Exception, EGR Exception, NFL SAMPLED DATA, Gold Pkt, RPF Failed
class-map match-any system-cpp-police-punt-webauth
  description Punt Webauth
class-map match-any system-cpp-police-forus
  description Forus Address resolution and Forus traffic
class-map match-any system-cpp-police-multicast-end-station
  description MCAST END STATION
class-map match-any system-cpp-police-multicast
  description Transit Traffic and MCAST Data
class-map match-any system-cpp-police-l2-control
  description L2 control
class-map match-any system-cpp-police-dot1x-auth
  description DOT1X Auth
class-map match-any system-cpp-police-data
  description ICMP_GEN and BROADCAST
class-map match-any system-cpp-police-control-low-priority
  description ICMP redirect and general punt
class-map match-any system-cpp-police-wireless-priority1
  description Wireless priority 1
class-map match-any system-cpp-police-wireless-priority2
  description Wireless priority 2
class-map match-any system-cpp-police-wireless-priority3-4-5
  description Wireless priority 3,4 and 5
class-map match-any non-client-nrt-class
class-map match-any system-cpp-police-routing-control
  description Routing control
class-map match-any system-cpp-police-protocol-snooping
  description Protocol snooping
!
policy-map port_child_policy
 class non-client-nrt-class
  bandwidth remaining ratio 10
policy-map system-cpp-policy
 class system-cpp-police-data
  police rate 200 pps
 class system-cpp-police-sys-data
  police rate 100 pps
 class system-cpp-police-sw-forward
  police rate 1000 pps
 class system-cpp-police-multicast
  police rate 500 pps
 class system-cpp-police-multicast-end-station
  police rate 2000 pps
 class system-cpp-police-punt-webauth
 class system-cpp-police-l2-control
 class system-cpp-police-routing-control
  police rate 1800 pps
 class system-cpp-police-control-low-priority
 class system-cpp-police-wireless-priority1
 class system-cpp-police-wireless-priority2
 class system-cpp-police-wireless-priority3-4-5
 class system-cpp-police-topology-control
 class system-cpp-police-dot1x-auth
 class system-cpp-police-protocol-snooping
 class system-cpp-police-forus
 class system-cpp-default
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
 vrf forwarding Mgmt-vrf
 no ip address
 negotiation auto
!
interface GigabitEthernet1/0/1
!
interface GigabitEthernet1/0/2
!
interface GigabitEthernet1/0/3
!
interface GigabitEthernet1/0/4
!
interface GigabitEthernet1/0/5
!
interface GigabitEthernet1/0/6
!
interface GigabitEthernet1/0/7
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
!
interface GigabitEthernet1/0/14
!
interface GigabitEthernet1/0/15
!
interface GigabitEthernet1/0/16
!
interface GigabitEthernet1/0/17
!
interface GigabitEthernet1/0/18
!
interface GigabitEthernet1/0/19
!
interface GigabitEthernet1/0/20
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
!
interface GigabitEthernet1/0/23
!
interface GigabitEthernet1/0/24
!
interface GigabitEthernet1/0/25
!
interface GigabitEthernet1/0/26
!
interface GigabitEthernet1/0/27
!
interface GigabitEthernet1/0/28
!
interface GigabitEthernet1/0/29
!
interface GigabitEthernet1/0/30
!
interface GigabitEthernet1/0/31
!
interface GigabitEthernet1/0/32
!
interface GigabitEthernet1/0/33
!
interface GigabitEthernet1/0/34
!
interface GigabitEthernet1/0/35
!
interface GigabitEthernet1/0/36
!
interface GigabitEthernet1/0/37
!
interface GigabitEthernet1/0/38
!
interface GigabitEthernet1/0/39
!
interface GigabitEthernet1/0/40
!
interface GigabitEthernet1/0/41
!
interface GigabitEthernet1/0/42
!
interface GigabitEthernet1/0/43
!
interface GigabitEthernet1/0/44
!
interface GigabitEthernet1/0/45
!
interface GigabitEthernet1/0/46
!
interface GigabitEthernet1/0/47
!
interface GigabitEthernet1/0/48
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/1
!
interface TenGigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
!
interface TenGigabitEthernet1/1/4
!
interface Vlan1
 ip address 192.168.110.2 255.255.255.0
 shutdown
!
ip default-gateway 192.168.110.1
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
!
!
ip access-list extended AutoQos-4.0-wlan-Acl-Bulk-Data
 permit tcp any any eq 22
 permit tcp any any eq 465
 permit tcp any any eq 143
 permit tcp any any eq 993
 permit tcp any any eq 995
 permit tcp any any eq 1914
 permit tcp any any eq ftp
 permit tcp any any eq ftp-data
 permit tcp any any eq smtp
 permit tcp any any eq pop3
ip access-list extended AutoQos-4.0-wlan-Acl-MultiEnhanced-Conf
 permit udp any any range 16384 32767
 permit tcp any any range 50000 59999
ip access-list extended AutoQos-4.0-wlan-Acl-Scavanger
 permit tcp any any range 2300 2400
 permit udp any any range 2300 2400
 permit tcp any any range 6881 6999
 permit tcp any any range 28800 29100
 permit tcp any any eq 1214
 permit udp any any eq 1214
 permit tcp any any eq 3689
 permit udp any any eq 3689
 permit tcp any any eq 11999
ip access-list extended AutoQos-4.0-wlan-Acl-Signaling
 permit tcp any any range 2000 2002
 permit tcp any any range 5060 5061
 permit udp any any range 5060 5061
ip access-list extended AutoQos-4.0-wlan-Acl-Transactional-Data
 permit tcp any any eq 443
 permit tcp any any eq 1521
 permit udp any any eq 1521
 permit tcp any any eq 1526
 permit udp any any eq 1526
 permit tcp any any eq 1575
 permit udp any any eq 1575
 permit tcp any any eq 1630
 permit udp any any eq 1630
 permit tcp any any eq 1527
 permit tcp any any eq 6200
 permit tcp any any eq 3389
 permit tcp any any eq 5985
 permit tcp any any eq 8080
!
!
!
control-plane
 service-policy input system-cpp-policy
!
!
no vstack
!
line con 0
 exec-timeout 60 0
 logging synchronous
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 exec-timeout 60 0
 password 7 120A121E061F1508233F3031
 logging synchronous
 login
line vty 5 97
 exec-timeout 60 0
 password 7 120A121E061F1508233F3031
 logging synchronous
 login
!
!
wsma agent exec
!
wsma agent config
!
wsma agent filesys
!
wsma agent notify
!
!
ap dot11 airtime-fairness policy-name Default 0
ap group default-group
ap hyperlocation ble-beacon 0
ap hyperlocation ble-beacon 1
ap hyperlocation ble-beacon 2
ap hyperlocation ble-beacon 3
ap hyperlocation ble-beacon 4
end

What did I miss?

mlund · ‎04-05-2018

Hi SeaLH

You told us you are new to cisco word. Maybe there is some confusing about what is what.

If you go int config mode and type vlan 1 like this

conf t

vlan 1

then you will be in the layer2 part of vlan 1, not much you can do there.

but if you type

conf t

interface vlan 1

then you will be in the layer3 part of vlan 1, and that's the place where you should do

"no shutdown"

maybe You have already figured this out.

/Mikael

View solution in original post

Dennis Mink · ‎04-04-2018

if you fro instance plugged your laptop into:

interface GigabitEthernet1/1/2
 switchport mode access
 switchport access vlan 1
 no shut

this puts the relavant physical port in the vlan1.

if you do sh ip int br, your interface vlan 1 should be up

Please remember to rate useful posts, by clicking on the stars below.

Julio E. Moisa · ‎04-04-2018

Hi

The vlan 1 is shutdown

You must execute:

interface vlan 1

no shutdown

:-)

>> Marcar como útil o contestado, si la respuesta resolvió la duda, esto ayuda a futuras consultas de otros miembros de la comunidad. <<

SeaLH · ‎04-04-2018

Do I really have to add each port to VLAN 1? I thought since it was default they are all part of VLAN 1 anyways?

I tried the shutdown command, it just says I can't run that command on VLAN 1.

Julio E. Moisa · ‎04-04-2018

Hi

By default all the ports are assigned to the VLAN 1 so you dont need to modify the current configuration, now you must execute the command: no shutdown under the interface vlan 1.

interface vlan 1

no shutdown

>> Marcar como útil o contestado, si la respuesta resolvió la duda, esto ayuda a futuras consultas de otros miembros de la comunidad. <<

Deepak Kumar · ‎04-04-2018

Hi,

Your default VLAN SVI is in administrator down condition. You have to make it active.

As below:

Interface VLAN 1

No shutdown

and As you are using this VLAN as management VLAN then I have to make L2 VLAN as active (Not compulsory)

VLAN 1

state active

Regards,

Deepak Kumar

Regards,
Deepak Kumar,
Don't forget to vote and accept the solution if this comment will help you!

mlund · ‎04-05-2018

Hi SeaLH

You told us you are new to cisco word. Maybe there is some confusing about what is what.

If you go int config mode and type vlan 1 like this

conf t

vlan 1

then you will be in the layer2 part of vlan 1, not much you can do there.

but if you type

conf t

interface vlan 1

then you will be in the layer3 part of vlan 1, and that's the place where you should do

"no shutdown"

maybe You have already figured this out.

/Mikael

SeaLH · ‎04-05-2018

This was exactly my problem. Thank you for the help everyone!