I have 3 sites which need to be connected with a site-to-site VPN tunnel and all internal networks between them should be routable. Do i need 2 (i have single point of failure, if the "central" one dies i loose connectivity between all 3 sites) or 3 tunnels (each ASA is connected to another 2) ?
... View more
1 thing i nocited on DHCP server: Superscope is configured with 10.0.0.10-250 and 10.0.1.10-250, i added 172.16.0.10-172.16.1.250 to that superscope and probably that could be the problem. I now created new scope for VLAN50 and soon i'll head out to location. This might be the solution to my problem.
... View more
Hi, here is the diagram. http://img9.imageshack.us/img9/112/dhcpdiagram.jpg HP Port 48 i used as a trunk port. vlan 1 name "Data" untagged 5-14,16-48 ip address 10.0.0.254 255.255.255.0 no untagged 1-4,15 exit vlan 10 name "Voice" untagged 1-4 qos priority 6 ip helper-address 10.0.0.11 ip address 10.0.1.254 255.255.255.0 tagged 5-46,48 exit vlan 300 name "WiFi" no ip address exit vlan 40 name "BellSystem" no ip address exit vlan 50 name "New_LAN_Subnet" untagged 15 ip helper-address 10.0.0.11 ip address 172.16.0.254 255.255.254.0 tagged 48 exit Cisco 3550 interface GigabitEthernet0/6 description link to HP2910al switchport trunk encapsulation dot1q switchport mode trunk no ip address interface Vlan1 ip address 10.0.0.253 255.255.255.0 ! interface Vlan10 no ip address ip helper-address 10.0.0.11 ! interface Vlan20 no ip address ! interface Vlan50 no ip address ! interface Vlan100 no ip address ! interface Vlan200 no ip address ! ip default-gateway 10.0.0.254 ip classless ip route 0.0.0.0 0.0.0.0 10.0.0.254 ip http server Cisco 3500XL interface FastEthernet0/40 ! interface FastEthernet0/41 ! interface FastEthernet0/42 ! interface FastEthernet0/43 ! interface FastEthernet0/45 description New_LAN switchport access vlan 50 spanning-tree portfast ! interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/2 ! interface VLAN1 ip address 10.0.0.250 255.255.255.0 no ip directed-broadcast no ip route-cache ! ip default-gateway 10.0.0.254 Message was edited by: Damir Reic
... View more
Hello, i have strange problem with MS DHCP server which i am unable to understand. One server hosts 3 DHCP scopes (data1, voice, data50). I also have 3 VLANs 1 (defualt) for data, 10 voice, 50 data. IP helper address is configured for VLAN 50 and 10. DHCP scope for data 1 : 10.0.0.10-250 DHCP scope for data 50 : 172.16.0.10-172.16.1.250 I have HP 2910al-48G configured as default gateway, every VLAN has it's IP. That HP is connected to Cisco 3550, and 6 more Cisco 3500XL are connected to Cisco 3550. Now the problem On some cisco 3500XL i configured port to be access port for vlan50. When i plug computer there i get the IP from data50 range and everything is great. Now when i plug the cable to some other port that has default configuration (so part of VLAN 1) i get the IP AGAIN from the DHCP range of VLAN50 ( 172.16.0.10-172.16.1.250) . This is what is confusing me a lot and i don't know the explanation or how to fix it. When i disable data50 DHCP scope on the server and do ipconfing /release /renew i get the DHCP lease from data1 DHCP scope like i am supposed to. Anyone have explanation for this? Thanks!
... View more
Hi, thanks for answer, i know 3500XL is L2 switch but this is what troubles me: interface Vlan1 ip address 10.10.0.253 255.255.255.0 interface Vlan11 ip address 192.168.0.253 255.255.255.0 This is configured between two 3500XL switches and i can't ping IPs on VLAN11 between 2 3500XL (trunk port passes all). Can i have 2 VLAN with IP on this switch?
... View more
Hi, I have several Cata 3500XL switches connected to one 1 HP L3 switch which is connected Sonicwall router. Vlan1 has subnet of 10.10.0.0/24 and Microsoft DCHP server lays inside VLAN1. Now i want to add VLAN11 (192.168.10.0/24) as second data VLAN but DHCP requests should go to microsoft DCHP server. This is what i did: Configured VLAN11 IP on each cisco switch IP default gateway with IP from other subnet (i guess this is bad since maybe it should be IP of VLAN11 on HP L3 switch?) Trunk ports are configured to pass everything on cisco switches On VLAN11 i configured IPhelper IP to be MS DHCP server on each Cisco switch I haven't tested this yet but i have problem in process.I can't ping VLAN11 IPs between switches (i configured VLAN1 and VLAN11 with IP). When client plugs computer to a port that belongs to VLAN11 will i be sure that client will get IP from the 192.168 range or there is possiblity that he gets IP from the management VLAN range?
... View more
SCC_Sanctuary#sh run Building configuration... Current configuration: ! version 12.0 no service pad service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname SCC_Sanctuary ! enable password 7 112A1016141D ! username global privilege 15 password 7 045C5A560D201D0D2A2D54 username stockdale privilege 15 password 7 113A0D0A14195A5F51 ! ! ! ! ! ip subnet-zero ! ! ! interface FastEthernet0/1 switchport access vlan 20 spanning-tree portfast ! interface FastEthernet0/2 ! interface FastEthernet0/3 ! interface FastEthernet0/4 ! interface FastEthernet0/5 ! interface FastEthernet0/6 ! interface FastEthernet0/7 ! interface FastEthernet0/8 ! interface FastEthernet0/9 ! interface FastEthernet0/10 ! interface FastEthernet0/11 switchport trunk encapsulation dot1q switchport mode trunk switchport voice vlan 10 ! interface FastEthernet0/12 switchport trunk encapsulation dot1q switchport mode trunk switchport voice vlan 10 ! interface FastEthernet0/13 ! interface FastEthernet0/14 ! interface FastEthernet0/15 ! interface FastEthernet0/16 ! interface FastEthernet0/17 ! interface FastEthernet0/18 ! interface FastEthernet0/19 ! interface FastEthernet0/20 ! interface FastEthernet0/21 ! interface FastEthernet0/22 ! interface FastEthernet0/23 ! interface FastEthernet0/24 ! interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/2 ! interface VLAN1 ip address 10.0.0.246 255.255.255.0 no ip directed-broadcast no ip route-cache ! ip default-gateway 10.0.0.254 snmp-server engineID local 0000000902000007EB81D240 snmp-server community private RW snmp-server community public RO ! line con 0 transport input none stopbits 1 line vty 0 4 login local line vty 5 15 login local ! end SCC_Core# sh run Building configuration... Current configuration : 1856 bytes ! version 12.1 no service pad service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname SCC_Core ! enable password 7 0802455D0A16 ! username global privilege 15 password 7 06015E714E4F585A262343 username stockdale privilege 15 password 7 097F5A061A0E46415E ip subnet-zero ip routing ! ! spanning-tree mode pvst spanning-tree extend system-id ! ! ! interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk no ip address ! interface GigabitEthernet0/2 switchport trunk encapsulation dot1q switchport mode trunk no ip address ! interface GigabitEthernet0/3 switchport mode dynamic desirable no ip address ! interface GigabitEthernet0/4 switchport trunk encapsulation dot1q switchport mode trunk no ip address ! interface GigabitEthernet0/5 switchport trunk encapsulation dot1q switchport mode trunk no ip address ! interface GigabitEthernet0/6 switchport trunk encapsulation dot1q switchport mode trunk no ip address ! interface GigabitEthernet0/7 switchport trunk encapsulation dot1q switchport mode trunk no ip address ! interface GigabitEthernet0/8 switchport mode dynamic desirable no ip address ! interface GigabitEthernet0/9 switchport mode dynamic desirable no ip address ! interface GigabitEthernet0/10 switchport mode dynamic desirable no ip address ! interface GigabitEthernet0/11 switchport mode dynamic desirable no ip address ! interface GigabitEthernet0/12 switchport access vlan 20 switchport mode access no ip address ! interface Vlan1 ip address 10.0.0.253 255.255.255.0 ! interface Vlan10 no ip address ip helper-address 10.0.0.11 ! ip default-gateway 10.0.0.254 ip classless ip route 0.0.0.0 0.0.0.0 10.0.0.254 ip http server ! ! snmp-server community scc RO ! line con 0 line vty 0 4 login local line vty 5 15 login local ! end WLC is connected to Core, AP is on other switch. VLAN 20 is wireless VLAN. EDIT: i tried plugging laptop on the port where AP is and it didn't get the IP even though DHCP server is running inside VLAN 20. Now i am confused...
... View more
Unfortunatley it's Sonicwall WLC and sonicwall APs , will have to check the configuration on it. EDIT: In case someone faces same problem. http://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=5133
... View more
AP gets the IP from the wireless controller, but wireless client that authenticates on AP isn't getting IP. Hmm maybe problem lies inside wireless controller since it has ability to have multiple virutal SIDS on it. Could be that they also have their own VLAN that i have to pass over switch imo.
... View more
AP's are connected over trunk ports, i am not currently at the locaiton wher switches are but what i did is this: conf t interface gigabitethernet 0/12 switchport access vlan 20 spanning-tree portfast no shut exit exit write memory Ports are configured like that and vlan is allowed over trunk also. Aside from that i didn't make any other changes. Thx!
... View more
Hi, i have several cisco 3500XL switches with trunking. I created a VLAN lets say 20 which purpose is for wireless clients. I installed wireless controller with 4 APs and controllers sees all 4 APs. Controller is also DCHP server. When wireless client authenticates it's DCHP requests in not getting to DHCP server (controller). If i connect all equipment in non managed switch everything works. What could be the problem? Thanks!
... View more
Hi Daniel, so this ANM has all these feature that i mention in the 1st post? I did some reaserch on that link and it's funny that Cisco gives sooo little information about that ANM software and it's capabilties. Regards, Damir
... View more