Re: Catalyst 6513 - Initial setup

Anon01013 · ‎05-13-2020

Hello,

I started to configure a Cisco 6513 but I'm not sure on where to go from here. The goal is to test the ports on the blades. In this case I have multiple blades but right I'm just using one to make things more simple; eventually I'd like to be able to test the other blades.

I connected sup int gi7/3 to my firewall but there's no IP address. I've configured vlan1 and assigned int gi1/1 to vlan1 but there's no connection. I connected another computer that's in the same subnet into int gi1/1 and there's no connection. Also, how do I get into the switch config? Any help would be appreciated, thanks!~

Here's my setup:

Router#show ver
Cisco IOS Software, s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-M), Version 12.2(33)SXH, RELEASE SOFTWARE (fc5)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Sun 19-Aug-07 07:38 by prod_rel_team

ROM: System Bootstrap, Version 12.2(17r)SX5, RELEASE SOFTWARE (fc1)

Router uptime is 1 hour, 51 minutes
Uptime for this control processor is 1 hour, 51 minutes
Time since Router switched to active is 1 hour, 50 minutes
System returned to ROM by power cycle at 14:05:55 UTC Wed Jan 16 2008 (SP by power on)
System image file is "bootdisk:s72033-advipservicesk9_wan-mz.122-33.SXH.bin"

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C6513 (R7000) processor (revision 1.1) with 983008K/65536K bytes of memory.
Processor board ID SAL11477JYB
SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache
Last reset from s/w reset
1 Virtual Ethernet interface
54 Gigabit Ethernet interfaces
4 Ten Gigabit Ethernet interfaces
1917K bytes of non-volatile configuration memory.
8192K bytes of packet buffer memory.

65536K bytes of Flash internal SIMM (Sector size 512K).
Configuration register is 0x2102

Router#

Router#show module
Mod Ports Card Type Model Serial No.
--- ----- -------------------------------------- ------------------ -----------
1 48 48-port 10/100/1000 RJ45 EtherModule WS-X6148A-GE-TX SAD114901H7
7 5 Supervisor Engine 720 10GE (Active) VS-S720-10G SAD115104VE
8 5 Supervisor Engine 720 10GE (Hot) VS-S720-10G SAD115104XE

Mod MAC addresses Hw Fw Sw Status
--- ---------------------------------- ------ ------------ ------------ -------
1 001e.be69.1fb0 to 001e.be69.1fdf 1.6 8.4(1) 8.7(0.22)SXH Ok
7 001e.4aaa.d520 to 001e.4aaa.d527 2.0 8.5(2) 12.2(33)SXH Ok
8 0017.944a.a77c to 0017.944a.a783 2.0 8.5(2) 12.2(33)SXH Ok

Mod Sub-Module Model Serial Hw Status
---- --------------------------- ------------------ ----------- ------- -------
7 Policy Feature Card 3 VS-F6K-PFC3C SAD115103M1 1.0 Ok
7 MSFC3 Daughterboard VS-F6K-MSFC3 SAD115005AA 1.0 Ok
8 Policy Feature Card 3 VS-F6K-PFC3C SAD1152042L 1.0 Ok
8 MSFC3 Daughterboard VS-F6K-MSFC3 SAD1150059T 1.0 Ok

Mod Online Diag Status
---- -------------------
1 Pass
7 Pass
8 Pass
Router#

Router#show ip interface brief
Interface IP-Address OK? Method Status Protocol
GigabitEthernet1/1 unassigned YES unset up up
GigabitEthernet1/2 unassigned YES NVRAM down down
GigabitEthernet1/3 unassigned YES NVRAM down down
GigabitEthernet1/4 unassigned YES NVRAM down down
GigabitEthernet1/5 unassigned YES NVRAM down down
GigabitEthernet1/6 unassigned YES NVRAM down down
GigabitEthernet1/7 unassigned YES NVRAM down down
GigabitEthernet1/8 unassigned YES NVRAM down down
GigabitEthernet1/9 unassigned YES NVRAM down down
GigabitEthernet1/10 unassigned YES NVRAM down down
GigabitEthernet1/11 unassigned YES NVRAM down down
GigabitEthernet1/12 unassigned YES NVRAM down down
GigabitEthernet1/13 unassigned YES NVRAM down down
GigabitEthernet1/14 unassigned YES NVRAM down down
GigabitEthernet1/15 unassigned YES NVRAM down down
GigabitEthernet1/16 unassigned YES NVRAM down down
GigabitEthernet1/17 unassigned YES NVRAM down down
GigabitEthernet1/18 unassigned YES NVRAM down down
GigabitEthernet1/19 unassigned YES NVRAM down down
GigabitEthernet1/20 unassigned YES NVRAM down down
GigabitEthernet1/21 unassigned YES NVRAM down down
GigabitEthernet1/22 unassigned YES NVRAM down down
GigabitEthernet1/23 unassigned YES NVRAM down down
GigabitEthernet1/24 unassigned YES NVRAM down down
GigabitEthernet1/25 unassigned YES NVRAM down down
GigabitEthernet1/26 unassigned YES NVRAM down down
GigabitEthernet1/27 unassigned YES NVRAM down down
GigabitEthernet1/28 unassigned YES NVRAM down down
GigabitEthernet1/29 unassigned YES NVRAM down down
GigabitEthernet1/30 unassigned YES NVRAM down down
GigabitEthernet1/31 unassigned YES NVRAM down down
GigabitEthernet1/32 unassigned YES NVRAM down down
GigabitEthernet1/33 unassigned YES NVRAM down down
GigabitEthernet1/34 unassigned YES NVRAM down down
GigabitEthernet1/35 unassigned YES NVRAM down down
GigabitEthernet1/36 unassigned YES NVRAM down down
GigabitEthernet1/37 unassigned YES NVRAM down down
GigabitEthernet1/38 unassigned YES NVRAM down down
GigabitEthernet1/39 unassigned YES NVRAM down down
GigabitEthernet1/40 unassigned YES NVRAM down down
GigabitEthernet1/41 unassigned YES NVRAM down down
GigabitEthernet1/42 unassigned YES NVRAM down down
GigabitEthernet1/43 unassigned YES NVRAM down down
GigabitEthernet1/44 unassigned YES NVRAM down down
GigabitEthernet1/45 unassigned YES NVRAM down down
GigabitEthernet1/46 unassigned YES NVRAM down down
GigabitEthernet1/47 unassigned YES NVRAM down down
GigabitEthernet1/48 unassigned YES NVRAM down down
GigabitEthernet7/1 unassigned YES NVRAM administratively down down
GigabitEthernet7/2 unassigned YES NVRAM administratively down down
GigabitEthernet7/3 unassigned YES NVRAM up up
TenGigabitEthernet7/4 unassigned YES NVRAM administratively down down
TenGigabitEthernet7/5 unassigned YES NVRAM administratively down down
GigabitEthernet8/1 unassigned YES NVRAM administratively down down
GigabitEthernet8/2 unassigned YES NVRAM administratively down down
GigabitEthernet8/3 unassigned YES NVRAM administratively down down
TenGigabitEthernet8/4 unassigned YES NVRAM administratively down down
TenGigabitEthernet8/5 unassigned YES NVRAM administratively down down
Vlan1 172.16.0.99 YES manual up up
Router#

Router#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 172.16.0.1 to network 0.0.0.0

172.16.0.0/24 is subnetted, 1 subnets
C 172.16.0.0 is directly connected, Vlan1
S* 0.0.0.0/0 [1/0] via 172.16.0.1
Router#

Router#show run
Building configuration...

Current configuration : 4727 bytes
!
upgrade fpd auto
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
service counters max age 5
!
hostname Router
!
boot-start-marker
boot-end-marker
!
enable password 7 0307570A151C
!
no aaa new-model
call-home
alert-group configuration
alert-group diagnostic
alert-group environment
alert-group inventory
alert-group syslog
profile "CiscoTAC-1"
no active
no destination transport-method http
destination transport-method email
destination address email callhome@cisco.com
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
subscribe-to-alert-group diagnostic severity minor
subscribe-to-alert-group environment severity minor
subscribe-to-alert-group syslog severity major pattern ".*"
subscribe-to-alert-group configuration periodic monthly 14 11:08
subscribe-to-alert-group inventory periodic monthly 14 10:53
ip subnet-zero
!
!
!
mls netflow interface
no mls flow ip
no mls flow ipv6
mls cef error action reset
!
!
!
!
!
!
!
!
!
!
redundancy
keepalive-enable
mode sso
main-cpu
auto-sync running-config
spanning-tree mode pvst
spanning-tree extend system-id
diagnostic cns publish cisco.cns.device.diag_results
diagnostic cns subscribe cisco.cns.device.diag_commands
!
vlan internal allocation policy ascending
vlan access-log ratelimit 2000
!
!
!
!
!
interface GigabitEthernet1/1
switchport
!
interface GigabitEthernet1/2
no ip address
!
interface GigabitEthernet1/3
no ip address
!
interface GigabitEthernet1/4
no ip address
!
interface GigabitEthernet1/5
no ip address
!
interface GigabitEthernet1/6
no ip address
!
interface GigabitEthernet1/7
no ip address
!
interface GigabitEthernet1/8
no ip address
!
interface GigabitEthernet1/9
no ip address
!
interface GigabitEthernet1/10
no ip address
!
interface GigabitEthernet1/11
no ip address
!
interface GigabitEthernet1/12
no ip address
!
interface GigabitEthernet1/13
no ip address
!
interface GigabitEthernet1/14
no ip address
!
interface GigabitEthernet1/15
no ip address
!
interface GigabitEthernet1/16
no ip address
!
interface GigabitEthernet1/17
no ip address
!
interface GigabitEthernet1/18
no ip address
!
interface GigabitEthernet1/19
no ip address
!
interface GigabitEthernet1/20
no ip address
!
interface GigabitEthernet1/21
no ip address
!
interface GigabitEthernet1/22
no ip address
!
interface GigabitEthernet1/23
no ip address
!
interface GigabitEthernet1/24
no ip address
!
interface GigabitEthernet1/25
no ip address
!
interface GigabitEthernet1/26
no ip address
!
interface GigabitEthernet1/27
no ip address
!
interface GigabitEthernet1/28
no ip address
!
interface GigabitEthernet1/29
no ip address
!
interface GigabitEthernet1/30
no ip address
!
interface GigabitEthernet1/31
no ip address
!
interface GigabitEthernet1/32
no ip address
!
interface GigabitEthernet1/33
no ip address
!
interface GigabitEthernet1/34
no ip address
!
interface GigabitEthernet1/35
no ip address
!
interface GigabitEthernet1/36
no ip address
!
interface GigabitEthernet1/37
no ip address
!
interface GigabitEthernet1/38
no ip address
!
interface GigabitEthernet1/39
no ip address
!
interface GigabitEthernet1/40
no ip address
!
interface GigabitEthernet1/41
no ip address
!
interface GigabitEthernet1/42
no ip address
!
interface GigabitEthernet1/43
no ip address
!
interface GigabitEthernet1/44
no ip address
!
interface GigabitEthernet1/45
no ip address
!
interface GigabitEthernet1/46
no ip address
!
interface GigabitEthernet1/47
no ip address
!
interface GigabitEthernet1/48
no ip address
!
interface GigabitEthernet7/1
no ip address
shutdown
!
interface GigabitEthernet7/2
no ip address
shutdown
!
interface GigabitEthernet7/3
no ip address
!
interface TenGigabitEthernet7/4
no ip address
shutdown
!
interface TenGigabitEthernet7/5
no ip address
shutdown
!
interface GigabitEthernet8/1
no ip address
shutdown
!
interface GigabitEthernet8/2
no ip address
shutdown
!
interface GigabitEthernet8/3
no ip address
shutdown
!
interface TenGigabitEthernet8/4
no ip address
shutdown
!
interface TenGigabitEthernet8/5
no ip address
shutdown
!
interface Vlan1
ip address 172.16.0.99 255.255.255.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 172.16.0.1
!
!
ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
dial-peer cor custom
!
!
!
!
line con 0
password 7 05080A0E325F
login
line vty 0 4
password 7 05080A0E325F
login
transport input lat pad udptn telnet rlogin ssh acercon
line vty 5 15
login
transport input lat pad udptn telnet rlogin ssh acercon
!
monitor event-trace platform cmfi lc agg-label
monitor event-trace platform cmfi lc error
!
end

Router#

Reza Sharifi · ‎05-13-2020

Hi,

For testing, connect a PC/laptop to port 1/1 on the switch and give it static IP in the same subnet as vlan1 interface. So, give the PC IP 172.16.0.100 with the same mask. Now, ping from the PC to the switch and from the switch to the PC and see if it works.

interface Vlan1
ip address 172.16.0.99 255.255.255.0

PC IP 172.16.0.100 255.255.255.0

HTH

Anon01013 · ‎05-13-2020

Hello,

I assigned a static IP (172.16.0.100) / mask (255.255.255.0) and connected my computer to int gi1/1 but there's no network connection so I can't ping to the switch. I also tried connecting to the other ports on the switch interface and no network. Do I have to assign int gi7/3 an IP address since it's the network port? Also, how do I get into the switch interface/configuration? Right now I'm on the Router# interface.

Thank you!

Reza Sharifi · ‎05-13-2020

Hi,

When you say " assigned a static IP (172.16.0.100) / mask (255.255.255.0) and connected my computer to int gi1/1 but there's no network connection so I can't ping to the switch" Do you see a link light on the switch port? Do you see a link light on the computer NIC?

Config t

Interface g1/1

switchport

seitchport mode access

Now, the laptop should be connected to g1/1 with IP.

to verify the port is up after you connect your laptop to it try

sh ip int brief g1/1

is the port in up and up mode?

HTH

Anon01013 · ‎05-13-2020

Hello!

Yes, there is a link light on the switch port and on the computer NIC. I followed the steps to the link that Scott provided.

Router#show interfaces g1/1
GigabitEthernet1/1 is up, line protocol is up (connected)
Hardware is C6k 1000Mb 802.3, address is 001e.be69.1fb0 (bia 001e.be69.1fb0)
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 1000Mb/s, media type is 10/100/1000BaseT
input flow-control is off, output flow-control is on
Clock mode is auto
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:13:25, output 00:00:15, output hang never
Last clearing of "show interface" counters never
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
810 packets input, 57254 bytes, 0 no buffer
Received 810 broadcasts (96 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 3 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
1206 packets output, 94618 bytes, 0 underruns
0 output errors, 0 collisions, 3 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out
Router#

Router#show running-config interface g1/1
Building configuration...

Current configuration : 72 bytes
!
interface GigabitEthernet1/1
switchport
switchport mode access
end

Router#show interfaces gigabitEthernet 1/1 switchport
Name: Gi1/1
Switchport: Enabled
Administrative Mode: static access
Operational Mode: static access
Administrative Trunking Encapsulation: negotiate
Operational Trunking Encapsulation: native
Negotiation of Trunking: Off
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Operational Native VLAN tagging: disabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL

Unknown unicast blocked: disabled
Unknown multicast blocked: disabled

Router#

Scott Hodgdon · ‎05-13-2020

Anon01013,

I see you did the steps from the doc. Are you still not able to ping the VLAN 1 SVI from the host ?

Cheers,

Scott Hodgdon

Senior Technical Marketing Engineer

Enterprise Networking Group

Anon01013 · ‎05-14-2020

Scott,

Sorry, I've been busy all day doing other stuff but yes I can ping 172.16.0.99 from my host computer and vice versa from the supervisor but why is there no internet connection? I currently have a network cable going into sup 7/3, do I need to configure that port?

Scott Hodgdon · ‎05-14-2020

Anon01013,

In your first message, you indicated that you have connected port 7/3 on the Sup to your firewall. There was also no IP address on port 7/3, so you either need to make that port either L3 to match the other end that is connected to the firewall (probably the best thing to do) or make it a switchport to pass your VLAN 1 to the firewall (or a trunk if passing multiple VLANs).

What is the IP address on the firewall port that is connected to the 6513 , or is it also L2 with and SVI on the firewall ? Can you provide a diagram of the setup, the links being used, the VLANs being used and the IPs being used on each device ? That will help if further assistance is needed.

It is highly recommended that you do not use VLAN 1 in production, but it is OK to use it in a lab setting while you are testing.

Cheers,
Scott Hodgdon

Senior Technical Marketing Engineer

Enterprise Networking Group

Anon01013 · ‎05-14-2020

Hi Scott,

The 6513 is on a different subnet than my office computer. The 6513 has been sitting in the office for a while and my boss would like to have it up and running so we can test blades; as in running traffic through the ports etc.

Right now the lab setup is firewall > 6513 > lab computer. The firewall (172.16.0.1) is going into g7/3 which like you said isn't configured with an IP yet and the lab computer is hooked up to g1/1 that is setup with vlan1. Eventually, I would like to hook up another lab computer to the blade but for now we'll just do one computer.
Lab computer static IP (172.16.0.100)
Vlan1 (172.16.0.99)

Thank you for the assistance!

Scott Hodgdon · ‎05-14-2020

Anon01013,

What is the default gateway on your lab PC, and where is that gateway located ?

If you make 7/3 a switchport as you did g1/1, you should be able to ping the firewall (if it responds to pings). In most setups like this, the SVI for that VLAN would be on the FW and not the switch, and the SVI on the FW would be the default gateway. If you decide to change from VLAN 1 to another VLAN, just follow the doc I sent with regard to allowing a different VLAN on the port. Cheers,
Scott Hodgdon

Senior Technical Marketing Engineer

Enterprise Networking Group

Anon01013 · ‎05-15-2020

Hi Scott,

I had to change vlan1 IP to 172.16.1.99 and my lab computer is 172.16.1.100 with a default gateway of 172.16.1.99. I configured port g7/3 to be 172.16.0.99 and on the Sup I'm able to ping vlan1, lab computer and the FW (172.16.0.1) but still no network connection. From my lab computer I'm able to ping Vlan1 and g7/3 except the FW (172.16.0.1).

Router#show running-config interface gigabitEthernet 1/1
Building configuration...

Current configuration : 72 bytes
!
interface GigabitEthernet1/1
switchport
switchport mode access
end

Router#show running-config interface gigabitEthernet 7/3
Building configuration...

Current configuration : 74 bytes
!
interface GigabitEthernet7/3
ip address 172.16.0.99 255.255.255.0
end

Router#show running-config interface vlan1
Building configuration...

Current configuration : 61 bytes
!
interface Vlan1
ip address 172.16.1.99 255.255.255.0
end

Thank you~

Scott Hodgdon · ‎05-15-2020

Anon01013,

Sounds to me like you don't have a default route out of the 6513. Since you are not running a routing protocol between the switch and firewall, you will need to add a static default route. You will also need to ensure that the FW has a route to the 172.16.1.0 subnet fo your client.

Cheers,

Scott Hodgdon

Senior Technical Marketing Engineer

Enterprise Networking Group

Anon01013 · ‎05-15-2020

Hi Scott,

Which port is the default route out of the 6513, is it port gi7/3? A few weeks ago I was able to configure a Cisco 2851 router and had another small test lab going. The 2851 had a g0/0 and g0/1 port which I could configure and the lab worked fine but the 6500 is slightly different. Sorry, I just started dabbling into networking for about three months as I did mainly computer hardware for my background but learning and configuring routers and switches is a lot of fun and challenging. Appreciate all the help so far!

Scott Hodgdon · ‎05-17-2020

Anon01013,

Yes, it would be 7/3 as that is the path to the firewall which is the gateway to the Internet, or you can point the default route to the IP of the firewall interface. Remember to put a static on the firewall to point back to your client subnet. Also remember that you will need a NAT from your private IP to public IP somewhere (usually on the firewall).

Cheers,
Scott Hodgdon

Senior Technical Marketing Engineer

Enterprise Networking Group

Scott Hodgdon · ‎05-13-2020

Anon01013,

All ports on a Cat 6K are L3 by default. If you want the port to be an L2 port, you need to do https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/layer2.html#61391 .

Cheers,

Scott Hodgdon

Senior Technical Marketing Engineer

Enterprise Networking Group