cisco core switch_4503e management IP address

mfouad.jahmi · ‎11-02-2011

dear guys,

am trying to upgrade the software of the core siwtch 4503e, i could not get the managemenet ip address up and running.

what i did is the following :

interfave vlan 1

ip address 192.168.1.1 255.255.255.0

no shu

then my laptop ip address is 192.168.1.100 255.255.255.0

result pinging from CLI is request time out.

is there any els command where i need to input ?

appreciate the quick support plss

thanks,

MJ

terrencepayet · ‎11-03-2011

Hi Mohamad,

Have you configured any vlan on the switch? If yes make sure that you're in the right vlan.
Can you post your config.

HTH.

Regards,

Terence

flokki123 · ‎11-03-2011

hi mohamad,

do you try to ping from the CLI of the switch to the pc? if yes, try it vice versa as maybe the firewall of the pc is blocking the ping. you can also disable the firewall for the test on the pc.

can you post the output of the show interface command for the interface where the pc is connected to.

regards,

florian

mfouad.jahmi · ‎11-03-2011

thanks guus,

dear terrence,

yes i am configuring Vlans . and herein the config;

show run

Building configuration...

Current configuration : 1522 bytes

!

version 12.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

service compress-config

!

hostname dwtc-core4503-cr

!

boot-start-marker

boot system flash bootflash:cat4500e-ipbase-mz.122-53.SG2.bin

boot-end-marker

!

enable secret 5 $1$tt3q$U0tUmQD6HeDwIybnKEt4n1

!

no aaa new-model

ip subnet-zero

!

ip vrf mgmtVrf

--More-- !

vtp mode transparent

!

power redundancy-mode redundant

!

spanning-tree mode rapid-pvst

spanning-tree extend system-id

spanning-tree vlan 1-1042 priority 0

!

vlan internal allocation policy ascending

!

vlan 30

name CCTV

!

vlan 40

name Car_Park

!

vlan 50

--More-- name Management

!

vlan 60

name Storage_1

!

vlan 70

name Storage_2

!

vlan 100

name DWTC_HQ

!

interface FastEthernet1

ip vrf forwarding mgmtVrf

no ip address

speed auto

duplex auto

!

interface TenGigabitEthernet1/1

no switchport

no ip address

! interface TenGigabitEthernet1/2

switchport mode trunk

interface GigabitEthernet1/3

switchport mode trunk

!

interface GigabitEthernet1/4

switchport mode trunk

!

interface GigabitEthernet1/5

switchport mode trunk

!

interface GigabitEthernet1/6

switchport mode trunk

!

interface Vlan1

ip address 192.168.1.1 255.255.255.0

!

interface Vlan30

ip address 10.100.30.1 255.255.255.0

!

interface Vlan40

ip address 192.168.100.1 255.255.255.0

--More-- !

interface Vlan50

ip address 10.100.50.1 255.255.255.0

!

ip http server

!

line con 0

password cisco

login

stopbits 1

line vty 0

password cisco

login

line vty 1 4

login

!

end

dwtc-core4503-cr#show vla

dwtc-core4503-cr#show vlan

VLAN Name Status Ports

---- -------------------------------- --------- -------------------------------

1 default active Te1/2, Gi1/3, Gi1/4, Gi1/5

Gi1/6

30 CCTV active

40 Car_Park active

50 Management active

60 Storage_1 active

70 Storage_2 active

100 DWTC_HQ active

1002 fddi-default act/unsup

1003 token-ring-default act/unsup

1004 fddinet-default act/unsup

1005 trnet-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2

---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------

1 enet 100001 1500 - - - - - 0 0

30 enet 100030 1500 - - - - - 0 0

40 enet 100040 1500 - - - - - 0 0

50 enet 100050 1500 - - - - - 0 0

60 enet 100060 1500 - - - - - 0 0

--More--

dear fiokii,

yes i did ping from both sides but request time out.

i was surfing the doucment of configuration of 4500 series and i fund out the following, pls let me if i am correct to do the following commands,

The Ethernet management port, also referred to as the Fa1 or fastethernet1 port, is a Layer 3 host port

to which you can connect a PC

If you want to use Fa1 port for TFTP operation, configure the Fa1 port as the source interface for TFTP

as follows:

Switch# ip tftp source-interface fastEthernet1

* i guess i should clear the config of interface vlan 1 and instead of that configuring the interface fastethernet1 with the same IP_Address 192.168.1.1/24 and then input the command which is :

Switch# ip tftp source-interface fastEthernet1

the above command might give me the access to the tftp server which installed in my PC and then i get connectivity.

let correct if am wrong , am gonna do the above right now and will see the result.

the following task to do are the follwing :

1- clear the config of interface vlan 1

2-configuring the interface fa1

3- input the command Switch# ip tftp source-interface fastEthernet1

4-configuring the PC in the same subnet 192.168.1.100/24

regards,

MJ

terrencepayet · ‎11-03-2011

Hi Mohamad,

This management port doesn't rely on VLAN. You'll need to configure a static ip address on the fa0 (lets say 192.168.1.2/24). Once you've configured, you should be able to ping the interface from your laptop/pc (192.168.1.100/24).

The input command for the tftp is correct.

HTH.

Regards,

Terence

mfouad.jahmi · ‎11-03-2011

Terrance,

Thanks for your input.

I did the tftp coomand as the following ;

#ip tftp source-interface fas 1

#interface fast 1

#ip add 192.168.1.1 255.255.255.0

# no shut

Then , PC ip address is;

192.168.1.100/24

Gateway is 192.168.1.1

I ping from CLI but no chance , request time out.

I ping from PC to switch. YES i got reply.

The. WhT could be the problem?

terrencepayet · ‎11-03-2011

Hi Mohamad,

Arent you using 192.168.1.1/24 on interface vlan 1??

In case you've cleared vlan 1, then you might have a firewall issue on your pc as suggested by florian.

Regards,

Terence

mfouad.jahmi · ‎11-03-2011

Terrance,

I cleared the vlan 1 config with coomand no ip address.

NOte that without ip routing coomand the PC cant reqch the switch

Also i found something while booting,

In the rommon mode, u know that u configure the ip address and subnet mask and tftp server ip addresses, actually i did configure them thru romon mode with different ip range addresss, i guess now it is conflicting with configuration i made thru normal mode.

What do u think? Am confused :s

mfouad.jahmi · ‎11-03-2011

Terrance,

Shall i erase everything ans start again..

Then what is the orooer command to do so ?

Ijust wanna clear all the miss and start with fresh switch.

terrencepayet · ‎11-03-2011

Hi Mohamad,

Nop i dont think so. The issue is that you're unable to ping your pc from the switch. You'll need to sort out this issue before troubleshooting tftp.

Have you check your firewall on your pc?

and also post sh int fa1

Regards,

Terence

mfouad.jahmi · ‎11-03-2011

terrance,

show show inte

dwtc-core4503-cr#show interfaces fa

dwtc-core4503-cr#show interfaces fastEthernet 1

FastEthernet1 is up, line protocol is up

Hardware is Fast Ethernet for out of band management, address is 0025.84b1.8c57 (bia 0025.84b1.8c57)

Internet address is 192.168.1.1/24

MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA, loopback not set

Keepalive set (10 sec)

Full-duplex, 1000Mb/s, 100BaseTX/FX

ARP type: ARPA, ARP Timeout 04:00:00

Last input 00:00:00, output never, output hang never

Last clearing of "show interface" counters never

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

535 packets input, 49686 bytes

Received 0 broadcasts (0 IP multicasts)

0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

0 watchdog

0 input packets with dribble condition detected

--More-- 144 packets output, 12198 bytes, 0 underruns

--More-- 0 output errors, 0 collisions, 2 interface resets

0 babbles, 0 late collision, 0 deferred

0 lost carrier, 0 no carrier

0 output buffer failures, 0 output buffers swapped out

dwtc-core4503-cr#ping 192.168.1.100

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.100, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

dwtc-core4503-cr#

and about the firewall settings, i did the following:

windows firewall > turn windows firewall on or of > i make it off

and am connecting point to point to switch.

let me know what shall i do in order to upgrade the software ?

am not able to get connectivity from the swich to the PC , it sounds really wired issue but surly there is something missing,

am on site actually and whaterver in your mind, pls let me know

glen.grant · ‎11-03-2011

You should be able to do the following . Step A , turn off any pc firewall before you begin anything . You are using vlan 1 as your management , by your config the following ports are in vlan 1 ,

1 default active Te1/2, Gi1/3, Gi1/4, Gi1/5

Gi1/6

Plug your pc into one of those gigabit ports 1/3 -6 . Give your pc a address in the vlan 1 address range 192.168.1.X , your pc nic gateway will be 192.168.1.1 . On your tftp software on your pc make sure you are pointed to the correct directory where your image is stored . If using windows verify your address setup on your pc . From a DOS command prompt issue ipconfig /all . This will give you your nic addressing setup, if correct try pinging the default gateway 192.168.1.1 . If it pings start your download to bootflash: .

mfouad.jahmi · ‎11-03-2011

Dear glen,

The 4503 have 2 modules, supervisor6L-E where I have two uplinks X2 SFP module, the other one is SFP12-E .

All the ports are SFP modules for connectivity between edge and core switches. The only Ethernet port is the management 10/100/1000 MGT where I pluged my PC to it directly.

What other things to do ?

flokki123 · ‎11-03-2011

hi mohamad,

if you cant ping the pc from the CLI of the switch, but you can ping the switch from the pc then i guess there is still some security software on your pc preventing the ping.

if the settings on the switch would be wrong then the ping wouldnt work at all.

check your anti virus software. can you connect your pc to another pc and try to ping again?

Regards,

Florian