Cisco Catalyst 4948 Setup Problem

[Tarwyn]

Hello,

I have recently gotten a 4948-10GE and am trying to get it setup to be used for my home networking lab.  I am unable to get any type of connection to the switch with a direct connection from my PC plugged into the MGT port. 

I have the PC NIC setup to be 172.18.125.3 255.255.255.0

The TFTP server is 172.18.125.3 255.255.255.0

I am able to connect to the switch using the console cable, so I do have access to change the settings.

Any help would be great!

I am trying to access the TFTP server running on my PC so I can update the firmware.

Rom Monitor Program Version 12.2(31r)SGA to 12.2(31r)SGA7

iOS Version 12.2(25)EWA2 to 15.0.2-SG11 LAN BASE W/O CRYPTO

current config is:

Current configuration : 2314 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
service compress-config
!
hostname Switch
!
boot-start-marker
boot-end-marker
!
enable password ########
!
no aaa new-model
ip subnet-zero
ip tftp source-interface Vlan1
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
power redundancy-mode redundant
!
!
!
vlan internal allocation policy ascending
!
interface Port-channel1
no ip address
!
interface GigabitEthernet1/1
!
interface GigabitEthernet1/2
!
...

!
interface TenGigabitEthernet1/50
!
interface Vlan1
ip address 172.18.125.4 255.255.255.0
!
ip default-gateway 172.16.254.254
ip http server
!
!
!
!
!
line con 0
stopbits 1
line vty 0 4
password #############
login
line vty 5 15
password ############
login
!
!
end

[liviu.gheorghe]

Hello @Tarwyn ,

your configuration shown here doesn't have anything on the management port.

You can connect your PC in Gigabit 1/1 which is vlan 1 and then you can access the switch - confirm with a ping to 172.18.125.4 from the PC - should work. Then try accessing the TFTP server.

Hope this helps.

[Tarwyn]

Can ping to the switch from the PC, but not from the switch to the PC.  

Switch#show ip interface
Vlan1 is up, line protocol is up
Internet address is 172.18.125.4/24
Broadcast address is 255.255.255.255
Address determined by non-volatile memory
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Outgoing access list is not set
Inbound access list is not set
Proxy ARP is enabled
Local Proxy ARP is disabled
Security level is default
Split horizon is enabled
ICMP redirects are always sent
ICMP unreachables are always sent
ICMP mask replies are never sent
IP fast switching is enabled
IP Flow switching is disabled
IP CEF switching is enabled
IP CEF switching turbo vector
IP multicast fast switching is enabled
IP multicast distributed fast switching is disabled
IP route-cache flags are Fast, CEF
Router Discovery is disabled
IP output packet accounting is disabled
IP access violation accounting is disabled
TCP/IP header compression is disabled
RTP/IP header compression is disabled
Probe proxy name replies are disabled
Policy routing is disabled
Network address translation is disabled
WCCP Redirect outbound is disabled
WCCP Redirect inbound is disabled
WCCP Redirect exclude is disabled
BGP Policy Mapping is disabled
GigabitEthernet1/1 is up, line protocol is up
Inbound access list is not set
Outgoing access list is not set
GigabitEthernet1/2 is down, line protocol is down
Inbound access list is not set
Outgoing access list is not set
...
TenGigabitEthernet1/50 is down, line protocol is down
Inbound access list is not set
Outgoing access list is not set
Port-channel1 is down, line protocol is down
Internet protocol processing disabled

[balaji.bandi]

check PC has any Firewalls (disable and test it)

post below commands from PC

ipconfig /all

also check command line 

c:\> netsh advfirewall show allprofiles state

[Reza Sharifi]

If that is the case, as Balaji also mentioned, check the firewall on pc as it may be blocking ICMP traffic.

HTH 

[Reza Sharifi]

Hi,

You don't need a 10Gig port to connect your laptop to the switch. All you have to do it to plug your laptop into the mgmt port which is a 10/100 copper port, give that port an IP address in the same subnet as the PC and you should be good to go to connect to the switch. 

PC NIC 172.18.125.3 255.255.255.0 which is also the TFTP server.

switch mgmt port ip 172.18.125.1 255.255.255.0

Now ping from the pc to the switch and viceversa.

HTH

[Tarwyn]

Turned off the firewall and still unable to connect to the tftp server.

[liviu.gheorghe]

What do you want to do with the tftp server? If you want to upgrade the switch, check that the IOS image file is placed in the tftp root directory.

You can perform a simple test - upload a file to the tftp server. Issue the command copy running-config tftp and see it it is successful.

[Volgash]

Hi Tarwyn,

Hi Tarwyn,
I'm fortunate to have the same hardware, and I've replicated your steps. I want to follow the steps below and compare them with mine.

*** First switch ***
Switch#wr er
Switch#delete flash:vlan.dat
Switch#reload
*********************************
Switch#show ver | include Software
Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500-IPBASEK9-M), Version 15.0(2)SG2, RELEASE SOFTWARE (fc3)
*********************************
Switch(config)#interf vl
Switch(config-if)#no shutdown
Switch(config-if)#ip address 172.18.125.4 255.255.255.0
*********************************
Switch(config)#interface range gigabitEthernet 1/1- 48 
witch(config-if-range)#no shutdown
*********************************Don't add gateway in router and switch. In this moment you don't need to add. 
*** Second your computer ***
Set IP address 172.18.125.3 subnet: 255.255.255.0 and only it no more parameter.
If you use windows, disable all network card and later just enable only the one that directly connected to the switch.check the physical connection and light on the switch. have be on and green.
*************** Switch *********************
Switch#ping
Protocol [ip]:
Target IP address: 172.18.125.3
Repeat count [5]: 100
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to 172.18.125.3, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100), round-trip min/avg/max = 1/1/8 ms
Switch#
**********************************
if you have difficulty pinging from both sides, it's likely that your computer firewall is blocking the connection. and just focus on your firewall, driver of the NIC (Lan card), or physical layer.

[Tarwyn]

Thank you for your help.  I got the switch successfully updated to the latest firmware.