cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
806
Views
1
Helpful
3
Replies

Upgrade from 3750 to 9300 Devices Help (Configs Included)

EmpResultsHelp
Level 1
Level 1

Hey Cisco Community,

I work for an organization and have been tasked with taking the lead to update our infrastructure of switches in preparation for DNA implementation from our old Catalyst 3750 switches to our new Catalyst 9300 switches.

I have exported the startup/running configs of our old switches and have applied those same settings to the best of my ability and *most* things look the same. However, when testing our deployment in a 1 switch environment we were unable to get connectivity from the switch with the config applied to the 9300. It's confirmed WAN connection is still working and we ended up leaving the old 3750 running until we figure out exactly why the 9300 isn't working.

The main problem is when we connect the WAN to our 9300 devices are not able to connect to the internet nor is the switch able to ping out to the internet. I will post the configs of both below (with some sensitive information changed). Any help would be much appreciated. We really want to start using our new 9300 switches. Thank you to anyone reading/responding!

------------------------

Some info about our network:

We have a 'Main Site' that hosts our core devices (Nexus 3k series) and we have several remote sites that connect back to the main site and each other through SDWAN. The switch we are testing with is in one of our remote environments that connects back to our 'main site'. This is a 1 switch environment where a 48 port switch isn't needed and we have elected to install a 24 port switch in it's place. There is 1 (one) wireless access point (connected to Meraki) and two offices that are patched into the switch. Connectivity works as expected with the 3750 but when trying to replace the old device with our 9300 we get no connectivity.

-----------------------------------------------

CONFIG OF 3750 (CURRENTLY WORKING)

version 12.2
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
!
hostname *OUR HOST NAME*
!
boot-start-marker
boot-end-marker
!
enable secret 5 111111111111111111111111111
!
username XXXXXXXXXXXX privilege 15 secret 5 111111111111111111111111
username XXXXXXXXXXXX privilege 15 secret 5 1111111111111111111111111111111
!
!
no aaa new-model
clock timezone gmt -5
clock summer-time EST recurring
switch 2 provision ws-c3750-48p
system mtu routing 1500
vtp mode transparent
authentication mac-move permit
ip subnet-zero
ip routing
no ip domain-lookup
ip domain-name *OUR DOMAIN NAME*
!
!
!
mls qos map cos-dscp 0 8 16 24 32 46 48 56
mls qos srr-queue input bandwidth 90 10
mls qos srr-queue input threshold 1 8 16
mls qos srr-queue input threshold 2 34 66
mls qos srr-queue input buffers 67 33
mls qos srr-queue input cos-map queue 1 threshold 2 1
mls qos srr-queue input cos-map queue 1 threshold 3 0
mls qos srr-queue input cos-map queue 2 threshold 1 2
mls qos srr-queue input cos-map queue 2 threshold 2 4 6 7
mls qos srr-queue input cos-map queue 2 threshold 3 3 5
mls qos srr-queue input dscp-map queue 1 threshold 2 9 10 11 12 13 14 15
mls qos srr-queue input dscp-map queue 1 threshold 3 0 1 2 3 4 5 6 7
mls qos srr-queue input dscp-map queue 1 threshold 3 32
mls qos srr-queue input dscp-map queue 2 threshold 1 16 17 18 19 20 21 22 23
mls qos srr-queue input dscp-map queue 2 threshold 2 33 34 35 36 37 38 39 48
mls qos srr-queue input dscp-map queue 2 threshold 2 49 50 51 52 53 54 55 56
mls qos srr-queue input dscp-map queue 2 threshold 2 57 58 59 60 61 62 63
mls qos srr-queue input dscp-map queue 2 threshold 3 24 25 26 27 28 29 30 31
mls qos srr-queue input dscp-map queue 2 threshold 3 40 41 42 43 44 45 46 47
mls qos srr-queue output cos-map queue 1 threshold 3 5
mls qos srr-queue output cos-map queue 2 threshold 3 3 6 7
mls qos srr-queue output cos-map queue 3 threshold 3 2 4
mls qos srr-queue output cos-map queue 4 threshold 2 1
mls qos srr-queue output cos-map queue 4 threshold 3 0
mls qos srr-queue output dscp-map queue 1 threshold 3 40 41 42 43 44 45 46 47
mls qos srr-queue output dscp-map queue 2 threshold 3 24 25 26 27 28 29 30 31
mls qos srr-queue output dscp-map queue 2 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue output dscp-map queue 2 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue output dscp-map queue 3 threshold 3 16 17 18 19 20 21 22 23
mls qos srr-queue output dscp-map queue 3 threshold 3 32 33 34 35 36 37 38 39
mls qos srr-queue output dscp-map queue 4 threshold 1 8
mls qos srr-queue output dscp-map queue 4 threshold 2 9 10 11 12 13 14 15
mls qos srr-queue output dscp-map queue 4 threshold 3 0 1 2 3 4 5 6 7
mls qos queue-set output 1 threshold 1 138 138 92 138
mls qos queue-set output 1 threshold 2 138 138 92 400
mls qos queue-set output 1 threshold 3 36 77 100 318
mls qos queue-set output 1 threshold 4 20 50 67 400
mls qos queue-set output 2 threshold 1 149 149 100 149
mls qos queue-set output 2 threshold 2 118 118 100 235
mls qos queue-set output 2 threshold 3 41 68 100 272
mls qos queue-set output 2 threshold 4 42 72 100 242
mls qos queue-set output 1 buffers 10 10 26 54
mls qos queue-set output 2 buffers 16 6 17 61
mls qos
!
!
!
!
!
port-channel load-balance src-dst-ip
!
spanning-tree mode rapid-pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 2
name Voice
!
vlan 3
name IOT
!
vlan 4
name Remediation
!
vlan 5
name Web_Only
!
vlan 6
name Isolation
!
vlan 7
name Future
!
vlan 8
name Wireless
!
!
!
!
interface FastEthernet2/0/1
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/2
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/3
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/4
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/5
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/6
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/7
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/8
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/9
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/10
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/11
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/12
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/13
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/14
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/15
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/16
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/17
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/18
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/19
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/20
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/21
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/22
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/23
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/24
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/25
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/26
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/27
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/28
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/29
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/30
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/31
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/32
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/33
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/34
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/35
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/36
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/37
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/38
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/39
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/40
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/41
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/42
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/43
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/44
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/45
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/46
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/47
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface FastEthernet2/0/48
srr-queue bandwidth share 10 10 60 20
priority-queue out
mls qos trust cos
auto qos voip trust
spanning-tree portfast
!
interface GigabitEthernet2/0/1
description CONNECTION TO FIB
no switchport
ip address 10.1.100.31 255.255.255.0
speed 1000
srr-queue bandwidth share 10 10 60 20
srr-queue bandwidth shape 10 0 0 0
queue-set 2
priority-queue out
mls qos trust dscp
auto qos voip trust
!
interface GigabitEthernet2/0/2
!
interface GigabitEthernet2/0/3
!
interface GigabitEthernet2/0/4
!
interface Vlan1
description Data Vlan
ip address 10.131.1.1 255.255.255.0
ip helper-address 10.0.0.68
ip helper-address 10.0.0.77
no ip redirects
no ip mroute-cache
!
interface Vlan2
description Voice
ip address 10.131.2.1 255.255.255.0
ip helper-address 10.0.0.68
ip helper-address 10.1.1.5
!
interface Vlan3
description IOT
ip address 10.131.3.1 255.255.255.0
!
interface Vlan4
description Remediation
ip address 10.131.4.1 255.255.255.0
ip helper-address 10.0.0.68
ip helper-address 10.1.1.5
!
interface Vlan5
description Web_Only
ip address 10.131.5.1 255.255.255.0
!
interface Vlan6
description Isolation
ip address 10.131.6.1 255.255.255.0
ip helper-address 10.0.0.68
ip helper-address 10.1.1.5
!
interface Vlan7
description Future
ip address 10.131.7.1 255.255.255.0
!
interface Vlan8
description Wireless
ip address 10.131.8.1 255.255.254.0
!
!
router eigrp 100
network 10.0.0.0
neighbor 10.1.100.1 GigabitEthernet2/0/1
!
ip classless
no ip http server
no ip http secure-server
!
!
ip sla enable reaction-alerts
logging 10.0.0.67
access-list 24 deny any
!
snmp-server community *Server Community* Confirmed same in both configs
snmp-server community *Server Community* Confirmed Same in both configs
snmp-server location *LOCATION OF SERVER*
snmp-server system-shutdown
snmp-server host 10.0.0.65 version 2c *Server Host*
!
banner motd ^CCCC
*********** WARNING ***********
* *
* You have entered a secured *
* system, your IP address has *
* been logged for security *
* purposes. If you do not *
* have authorized access *
* please leave immediately. *
* Violators will be *
* prosecuted to the fullest *
* extent of the law. *
* *
*******************************^C
!
line con 0
password 7 11111111111111111111111111
login
line vty 0 4
password 7 1111111111111111111111
login local
length 0
transport input ssh
line vty 5 15
login local
transport input ssh
!
ntp clock-period 36028748
ntp server 132.163.96.3
ntp server 130.207.244.240
end

 

--------------------------------------------------

*********************************************************

--------------------------------------------------

CONFIG OF 9300 Device (CURRENTLY NOT WORKING)

version 17.6
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
service sequence-numbers
service call-home
platform punt-keepalive disable-kernel-core
!
hostname *Hostname Confirmed Same*
!
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
logging buffered 51200 informational
enable secret 9 1111111111111111111111111111111111111111111111
!
no aaa new-model
clock timezone gmt -5 0
clock summer-time EST recurring
switch 1 provision c9300-24p
!
!
!
!
ip routing
!
!
!
!
!
!
!
!
login on-success log
!
!
!
!
!
!
!
vtp domain SCVTP
vtp mode transparent
authentication mac-move permit
!
!
table-map AutoQos-4.0-Trust-Cos-Table
default copy
table-map AutoQos-4.0-Trust-Dscp-Table
default copy
!
!
crypto pki trustpoint SLA-TrustPoint
enrollment pkcs12
revocation-check crl
!
!
crypto pki certificate chain SLA-TrustPoint
certificate ca 01
11111111111111111111111111111111111111111111111
11111111111111111111111111111111111111111111111
11111111111111111111111111111111111111111111111
11111111111111111111111111111111111111111111111
11111111111111111111111111111111111111111111111
11111111111111111111111111111111111111111111111
11111111111111111111111111111111111111111111111
quit
!
!
port-channel load-balance src-dst-ip
license boot level network-advantage addon dna-advantage
!
!
diagnostic bootup level minimal
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
memory free low-watermark processor 131688
!
errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause sfp-config-mismatch
errdisable recovery cause gbic-invalid
errdisable recovery cause psecure-violation
errdisable recovery cause mac-limit
errdisable recovery cause storm-control
errdisable recovery cause inline-power
username 111111111111 privilege 15 secret 9 11111111111111111111111111111111111111111111
username 111111111111 privilege 15 secret 9 11111111111111111111111111111111111111111111
!
redundancy
mode sso
!
!
!
!
crypto engine compliance shield disable
!
!
transceiver type all
monitoring
!
vlan 2
name Voice
!
vlan 3
name IOT
!
vlan 4
name Remediation
!
vlan 5
name Web_Only
!
vlan 6
name Isolation
!
vlan 7
name Future
!
vlan 8
name Wireless
!
!
class-map match-any system-cpp-police-ewlc-control
description EWLC Control
class-map match-any AutoQos-4.0-Output-Multimedia-Conf-Queue
match dscp af41 af42 af43
match cos 4
class-map match-any system-cpp-police-topology-control
description Topology control
class-map match-any system-cpp-police-sw-forward
description Sw forwarding, L2 LVX data packets, LOGGING, Transit Traffic
class-map match-any AutoQos-4.0-Output-Bulk-Data-Queue
match dscp af11 af12 af13
match cos 1
class-map match-any system-cpp-default
description EWLC Data, Inter FED Traffic
class-map match-any system-cpp-police-sys-data
description Openflow, Exception, EGR Exception, NFL Sampled Data, RPF Failed
class-map match-any AutoQos-4.0-Output-Priority-Queue
match dscp cs4 cs5 ef
match cos 5
class-map match-any system-cpp-police-punt-webauth
description Punt Webauth
class-map match-any AutoQos-4.0-Output-Multimedia-Strm-Queue
match dscp af31 af32 af33
class-map match-any system-cpp-police-l2lvx-control
description L2 LVX control packets
class-map match-any system-cpp-police-forus
description Forus Address resolution and Forus traffic
class-map match-any system-cpp-police-multicast-end-station
description MCAST END STATION
class-map match-any system-cpp-police-high-rate-app
description High Rate Applications
class-map match-any system-cpp-police-multicast
description MCAST Data
class-map match-any system-cpp-police-l2-control
description L2 control
class-map match-any system-cpp-police-dot1x-auth
description DOT1X Auth
class-map match-any system-cpp-police-data
description ICMP redirect, ICMP_GEN and BROADCAST
class-map match-any system-cpp-police-stackwise-virt-control
description Stackwise Virtual OOB
class-map match-any non-client-nrt-class
class-map match-any system-cpp-police-routing-control
description Routing control and Low Latency
class-map match-any system-cpp-police-protocol-snooping
description Protocol snooping
class-map match-any AutoQos-4.0-Output-Trans-Data-Queue
match dscp af21 af22 af23
match cos 2
class-map match-any system-cpp-police-dhcp-snooping
description DHCP snooping
class-map match-any system-cpp-police-ios-routing
description L2 control, Topology control, Routing control, Low Latency
class-map match-any system-cpp-police-system-critical
description System Critical and Gold Pkt
class-map match-any AutoQos-4.0-Output-Scavenger-Queue
match dscp cs1
class-map match-any system-cpp-police-ios-feature
description ICMPGEN,BROADCAST,ICMP,L2LVXCntrl,ProtoSnoop,PuntWebauth,MCASTData,Transit,DOT1XAuth,Swfwd,LOGGING,L2LVXData,ForusTraffic,ForusARP,McastEndStn,Openflow,Exception,EGRExcption,NflSampled,RpfFailed
class-map match-any AutoQos-4.0-Output-Control-Mgmt-Queue
match dscp cs2 cs3 cs6 cs7
match cos 3
!
policy-map AutoQos-4.0-Output-Policy
class AutoQos-4.0-Output-Priority-Queue
priority level 1 percent 30
class AutoQos-4.0-Output-Control-Mgmt-Queue
bandwidth remaining percent 10
queue-limit dscp cs2 percent 80
queue-limit dscp cs3 percent 90
queue-limit dscp cs6 percent 100
queue-limit dscp cs7 percent 100
queue-buffers ratio 10
class AutoQos-4.0-Output-Multimedia-Conf-Queue
bandwidth remaining percent 10
queue-buffers ratio 10
class AutoQos-4.0-Output-Trans-Data-Queue
bandwidth remaining percent 10
queue-buffers ratio 10
class AutoQos-4.0-Output-Bulk-Data-Queue
bandwidth remaining percent 4
queue-buffers ratio 10
class AutoQos-4.0-Output-Scavenger-Queue
bandwidth remaining percent 1
queue-buffers ratio 10
class AutoQos-4.0-Output-Multimedia-Strm-Queue
bandwidth remaining percent 10
queue-buffers ratio 10
class class-default
bandwidth remaining percent 25
queue-buffers ratio 25
policy-map AutoQos-4.0-Trust-Cos-Input-Policy
class class-default
set cos cos table AutoQos-4.0-Trust-Cos-Table
policy-map system-cpp-policy
policy-map AutoQos-4.0-Trust-Dscp-Input-Policy
class class-default
set dscp dscp table AutoQos-4.0-Trust-Dscp-Table
!
!
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet1/0/1
switchport mode access
shutdown
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/2
switchport mode access
shutdown
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/3
switchport mode access
shutdown
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/4
switchport mode access
shutdown
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/5
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/6
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/7
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/8
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/9
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/10
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/11
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/12
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/13
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/14
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/15
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/16
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/17
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/18
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/19
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/20
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/21
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/22
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/23
switchport mode access
snmp trap mac-notification change added
snmp trap mac-notification change removed
auto qos trust
spanning-tree portfast
service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/0/24
description CONNECTION TO 5440 FIB
no switchport
ip address 10.1.100.31 255.255.255.0
speed 1000
auto qos trust
service-policy input AutoQos-4.0-Trust-Dscp-Input-Policy
service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/1
!
interface TenGigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
!
interface TenGigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/5
!
interface TenGigabitEthernet1/1/6
!
interface TenGigabitEthernet1/1/7
!
interface TenGigabitEthernet1/1/8
!
interface FortyGigabitEthernet1/1/1
!
interface FortyGigabitEthernet1/1/2
!
interface TwentyFiveGigE1/1/1
!
interface TwentyFiveGigE1/1/2
!
interface AppGigabitEthernet1/0/1
!
interface Vlan1
description Data Vlan
ip address 10.131.1.1 255.255.255.0
ip helper-address 10.0.0.68
ip helper-address 10.0.0.77
no ip redirects
!
interface Vlan2
description Voice
ip address 10.131.2.1 255.255.255.0
ip helper-address 10.0.0.68
ip helper-address 10.1.1.5
!
interface Vlan3
description IOT
ip address 10.131.3.1 255.255.255.0
!
interface Vlan4
description Remediation
ip address 10.131.4.1 255.255.255.0
ip helper-address 10.0.0.68
ip helper-address 10.1.1.5
!
interface Vlan5
description Web_Only
ip address 10.131.5.1 255.255.255.0
!
interface Vlan6
description Isolation
ip address 10.131.6.1 255.255.255.0
ip helper-address 10.0.0.68
ip helper-address 10.1.1.5
!
interface Vlan7
description Future
ip address 10.131.7.1 255.255.255.0
!
interface Vlan8
description Wireless
ip address 10.131.8.1 255.255.254.0
!
!
router eigrp 100
network 10.0.0.0
auto-summary
!
ip default-gateway 10.135.1.1
ip forward-protocol nd
no ip http server
no ip http secure-server
ip ssh version 2
!
!
!
ip sla enable reaction-alerts
logging host 10.0.0.67
ip access-list standard 24
10 deny any
!
!
snmp-server community *Server Community Confirmed Same*
snmp-server community *Server Community Confirmed Same*
snmp-server location *Server Location* Confirmed Same
snmp-server system-shutdown
snmp-server enable traps snmp coldstart warmstart
snmp-server enable traps license
snmp-server host 10.0.0.65 version 2c *Server Host confirmed same*
!
control-plane
service-policy input system-cpp-policy
!
banner motd ^CCCCC
*********** WARNING ***********
* *
* You have entered a secured *
* system, your IP address has *
* been logged for security *
* purposes. If you do not *
* have authorized access *
* please leave immediately. *
* Violators will be *
* prosecuted to the fullest *
* extent of the law. *
* *
*******************************^C
!
line con 0
password 7 11111111111111111
login
stopbits 1
line vty 0 4
exec-timeout 60 0
password 7 11111111111111111
login local
length 0
transport input ssh
line vty 5 15
exec-timeout 60 0
login local
transport input ssh
line vty 16 31
login
transport input ssh
!
call-home
! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
contact-email-addr sch-smart-licensing@cisco.com
profile "CiscoTAC-1"
active
destination transport-method http
ntp server 130.207.244.240
ntp server 132.163.96.3
end

 

 

1 Accepted Solution

Accepted Solutions

balaji.bandi
Hall of Fame
Hall of Fame

Look at the configuration - i am more focussing on the routing to get user Internet as you mentioned why it was not working

couple of things you need to check :

1. From Cat 9300 are you able to ping p2p IP address ?

2. did the EIGRP formed peering with your Uplink sswitch ?

3. is the show ip interfaface brief show all the SVI and Physical interface up and working ?

4. If the Switch acting as Layer 3 - then remove from Cat 9300 (this command - ip default-gateway 10.135.1.1 (by adding no front) - so EIGRP will take care of the routing.

5, make sure end device in right VLAN.  Since you have couple of VLAN with SVI configured on the switches.

6. i always use no auto summary ineigrp process, and make sure interface you like to participated in eigrp should be no passive interface

Note : you are Migrating from MLS to MQC and you are using AutoQoS (that need to tweaked once you have connectivity).

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

View solution in original post

3 Replies 3

balaji.bandi
Hall of Fame
Hall of Fame

Look at the configuration - i am more focussing on the routing to get user Internet as you mentioned why it was not working

couple of things you need to check :

1. From Cat 9300 are you able to ping p2p IP address ?

2. did the EIGRP formed peering with your Uplink sswitch ?

3. is the show ip interfaface brief show all the SVI and Physical interface up and working ?

4. If the Switch acting as Layer 3 - then remove from Cat 9300 (this command - ip default-gateway 10.135.1.1 (by adding no front) - so EIGRP will take care of the routing.

5, make sure end device in right VLAN.  Since you have couple of VLAN with SVI configured on the switches.

6. i always use no auto summary ineigrp process, and make sure interface you like to participated in eigrp should be no passive interface

Note : you are Migrating from MLS to MQC and you are using AutoQoS (that need to tweaked once you have connectivity).

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Mr. Bandi,

Thank you very much for your reply and suggestions. These are some very helpful steps to take and I will be heading on-site to try out some of these suggestions.

I'll let you know what I am able to figure out and/or if your suggestions solve the issue.

Thanks again, your post is extremely helpful.

Mr. Bandi was correct in his diagnosis with EIGRP not forming an uplink. Setting the EIGRP neighbor properly resolved connectivity issues.

Review Cisco Networking for a $25 gift card