09-27-2010 11:16 PM - edited 03-06-2019 01:12 PM
Hi All:
recently, i have deployed some new 2960 stackable switch to replace 3750 switches(will be used in other location),
I enabled IP dhcp snooping, DAI and IPSG feature, some as previous configuration in 3750 switches.
I found some strange behavior.
I turned on IP dhcp snooping first, and run for a few days to make sure the switch has the binding entry for every clients/ip phone, (i manually reset the phone), then i enable DAI for data vlan and voice vlan, everything works fine.
finally, i enable IPSG, the ip phone with PC attached behind works fine, but some ip phones without pc attached lost connection and screen shows registering. i check the switch IPSG info, it shows
2960PT_21FLR_ES01#show ip verify source
Interface Filter-type Filter-mode IP-address Mac-address Vlan
--------- ----------- ----------- --------------- ----------------- ----
Gi1/0/21 ip active 10.167.153.112 53
Gi1/0/21 ip active deny-all 34
Gi1/0/40 ip active 10.167.153.116 53
Gi1/0/40 ip active deny-all 34
Gi1/0/41 ip active 10.167.153.166 53
Gi1/0/41 ip active 10.167.134.103 34
Gi2/0/7 ip active 10.167.153.160 53
Gi2/0/7 ip active 10.167.134.164 34
[voice vlan 34, data vlan 53]
Gi1/0/21 is connecting to a phone without PC attached, and the phone works fine.
Gi1/0/40 is also connecting to a phone without PC attached, and lost connection immediately.
once i disable the IPSG at the respective port (gi1/0/40), the phone returns to normal.
--------switch configuration-----------
ip dhcp snooping vlan 34,53
no ip dhcp snooping information option
ip dhcp snooping database flash:dhcpsnooping.dat
ip dhcp snooping database write-delay 15
ip dhcp snooping
ip arp inspection vlan 34,53
interface GigabitEthernet1/0/40
switchport access vlan 34
switchport mode access
switchport voice vlan 53
srr-queue bandwidth share 10 10 60 20
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust cos
auto qos voip cisco-phone
spanning-tree portfast
service-policy input AutoQoS-Police-CiscoPhone
ip dhcp snooping limit rate 10
any one encountered the some problem before? any suggestion?
thanks a lot
Solved! Go to Solution.
01-02-2011 10:24 AM
I have tried the version 12.2(55)SE1. This version is working properly.
Regards,
Aliaksandr
11-04-2010 08:29 AM
I have the same issue with IPSG. But in my case the IP phone and PC loose connection when PC is connected trough the phone. I'm using 2960S with 12.2.55SE. When the PC or phone are connected to switch separatly every thing is working fine. I have not found the solution yet.
12-03-2010 07:06 AM
I have consulted with Cisco TAC. They ansvered that this issue is related to the following bugs CSCtj11377
and CSCtj59404.
The workaround is to reload the switch. I have tried this and the IPSG is working properly after reload. But the issue arise again after disabling and enabling IPSG on the interface. I have desided to not using IPSG in production before the bug will be fixed.
12-05-2010 06:00 PM
12-06-2010 12:09 AM
I have not tried this version yet. I will try and inform you about the results.
12-06-2010 12:52 AM
I have found that 12.2(55)SE1 is not published yet for download. So we need to wait when this version will be published.
12-09-2010 01:14 AM
Dear Cisco Stars,
I do have the same issue with all my 250 New IP Phones connected on stacked 3750. I am currently running 12.2 53 SE2.
When i remove IPSG, the IP Phone works fine.
Please keep us posted with any possible developments..
Thanks a lot
Jafy
01-09-2011 11:22 PM
hi :
12.2(55)SE1works fine.
thanks
12-28-2010 11:40 PM
hi Apatotski:
merry x'mas~~
The version 12.2(55)se1 are available for downloading, you manage to find a chance to try it out??
please let me know, thanks a lot~~
regards
Jason
12-29-2010 12:50 AM
I have not tried it. I will try and keep you updated.
01-02-2011 10:24 AM
I have tried the version 12.2(55)SE1. This version is working properly.
Regards,
Aliaksandr
01-09-2011 11:10 PM
just roll out this version on a small site, so far it works fine.
Some laptop/PCs were not able to work, i just did a ipconfig/release & renew, then they started to work.
thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide