for the hardware warranty that is easy understand. but for ios. it is confusing. this is what I find from cisco.com from my understanding, I can get on-going ios upgrade for some certain level switch only without purchase. for L3 or licensed software, yes, I need smartnet for on-going support. are you from Cisco company?  and know the rules? Q. Why should I purchase a technical service contract for these switches when they include a limited lifetime warranty (LLW)? A. Cisco service and support has received numerous industry recognitions and awards for excellence in technology service and support. Adding a Cisco Technical Services contract to warranty coverage provides access to the Cisco TAC beyond the 90-day period allowed by the LLW. It also can provide a variety of hardware replacement options to meet critical business needs, as well as updates for licensed premium Cisco IOS Software and registered access to the extensive Cisco.com knowledge base and support tools. Q. Can I obtain a Cisco IOS Software updates for the Cisco Catalyst Series at no additional cost? A. Yes. Cisco offers ongoing Cisco IOS Software updates for certain fixed-configuration and stackable Cisco Catalyst switches at no additional cost. For the life of the product, updates within the Cisco IOS Software package purchased (LAN Lite and LAN Base) will be made available. ... View more

                   here is show run from one of a CE Router ... View more

thanks I will post it tomorrow. ... View more

no. One router only to MPLS network eachsite at this time. We redistributing this into BGP because of MPLS and let each site can talks to each other if allowed. we use ACL in these router to control the access. ... View more

Hi, Pronoy Gupta Thanks first Here is our QoS template. ********************************************* class-map match-any VoIP description Voice IP Phone RTP match access-group 162 . . class-map match-any Signaling description SCCP (skinny) signaling match access-group 166 . . class-map match-any BACKUP description Generic TSM, NFS match access-group 169 ********************************************* policy-map QOS . class VoIP    set dscp ef .    class Signaling    set dscp cs3 . . class BACKUP    set dscp af11 class class-default set dscp default ********************************************* access-list 162 remark * VoIP class (IP Precedence 5) access-list 162 remark *** UDP 16384-32767 IP Conference Video & Audio Stream *** access-list 162 permit udp any gt 16384 any range 16384 32767 access-list 162 permit udp any range 16384 32767 any gt 16384 . . . . ********************************************* interface config in 6509 Distrition layer: int range g1/1 - 48 description 1P3Q8T wrr-queue bandwidth 255 120 40 wrr-queue queue-limit 100 100 100 wrr-queue random-detect min-threshold 1 70 70 70 70 70 70 80 90 wrr-queue random-detect min-threshold 2 70 70 70 70 70 70 80 90 wrr-queue random-detect min-threshold 3 70 70 70 70 70 70 80 90 wrr-queue cos-map 1 6 0 wrr-queue cos-map 1 7 1 wrr-queue cos-map 1 8 2 wrr-queue cos-map 2 7 3 wrr-queue cos-map 2 8 4 wrr-queue cos-map 3 7 6 wrr-queue cos-map 3 8 7 mls qos trust dscp same for mod 2 - 8 (all the inferface are connected to L2 Access Layer switches, such as 3750 or 4507.) interface vlan xxx ip address x.x.x.x standby 0 ip x.x.x.x service-policy input QOS We have over 90 vlan interfaces in each 6509. only put service-policy into 35 vlans. and it take  64% of TCAM already. it will shows tcam exceed limited if over 60 vlans with service-policy. Config in access-layer Class-map Policy-map ACL interface G0/25 des uplink to Distribution layer A mls qos trust dscp interface G0/26 des uplink to Distribution layer B mls qos trust dscp interface range g0/1 - 24 srr-queue bandwidth share 8 30 60 2 srr-queue bandwidth shape 0 0 0 0 priority-queue out mls qos vlan-based interface vlan 200 service-policy input QOS ****************************** 6509#show mod Mod Ports Card Type                              Model              Serial No. --- ----- -------------------------------------- ------------------ -----------   1   48  CEF720 48 port 1000mb SFP              WS-X6748-SFP       SAL1432PYL8   2   48  CEF720 48 port 1000mb SFP              WS-X6748-SFP       SAL1432PYJW   3    8  CEF720 8 port 10GE with DFC            WS-X6708-10GE      SAL1431P87P   4    8  CEF720 8 port 10GE with DFC            WS-X6708-10GE      SAL1431P8C2   5    5  Supervisor Engine 720 10GE (Active)    VS-S720-10G        SAL1426LQ6M   7   48  CEF720 48 port 10/100/1000mb Ethernet  WS-X6748-GE-TX     SAL1431P7TS   8   24  SFM-capable 24-port 100FX Multi mode   WS-X6524-100FX-MM  SAL085283ZD   9   10  WiSM WLAN Service Module               WS-SVC-WISM-1-K9   SAL1442WSBG #show tcam counts            Used        Free        Percent Used       Reserved            ----        ----        ------------       -------- Labels:(in) 49        4023            1                    24 Labels:(eg)  0        4072            0                    24 ACL_TCAM --------   Masks:    100        3996            2                    72 Entries:    150       32618            0                   576 QOS_TCAM --------   Masks:   2644        1452           64                    25 Entries:   9965       22803           30                   200     LOU:     19         109           14   ANDOR:      0          16            0   ORAND:      0          16            0     ADJ:      4        2044            0 #show ver Cisco IOS Software, s72033_rp Software (s72033_rp-IPSERVICESK9_WAN-M), Version 12.2(33)SXI6, RELEASE SOFTWARE (fc4) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2011 by Cisco Systems, Inc. Compiled Mon 28-Mar-11 12:09 by prod_rel_team ... View more

then we have another problem. our distribution is 6509 with sup720-10G. it has too many vlans inside and it will cause tcam exceed limited if I put service-policy in all. Any good way to reduce it? ... View more

Hi, Shashank based on *************** pc1 ------->XX-F3/1(SwitchA)--------->XX-6509---------->XX-(SwitchB)F4/1------------>pc2 As per your switch A and switch B config, pc1--->pc2 traffic will hit the input policy map ONLY on switch A (F3/1). This traffic is egress traffic on f4/1 on switch B and hence will not hit input policy map on switch B. I hope that explains why pc1--->pc2 traffic is not affected when you change the policy map to output on switch A. ************** 4507 sup6 only support output pc1 ------->XX1-F3/1(SwitchA) yy1--------->XX2-6509 YY2---------->XX3-(SwitchB)F4/1 YY3------------>pc2 where the traffic will be marked (PC1 TO PC2)? YY1? and how about L2 traffic in the same switch? will be marked? Thanks a lot. There are over 300 4507 needs to be replaced. I need to fully understand this. Thanks. ... View more