Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About mjensen323
Stats
Member since
04-28-2011
58
Posts
0
Helpful
0
Solutions
11-05-2017
10:52 AM
Hello,
My network design consists of 8 remote locations in a Hub Spoke EIGRP. Each link is 10 gig or more.
Each remote site is a 3750-x connected to 2(4500-X) in VSS for distribution. From there the 4500's are connected to a 3750-X which contains connections to the server farm, call manager, 8 gig lag from the 5508 wireless controller, etc. It also contains a connection to the ASA / Internet connection (1 gigabit).
Would the ASA be better suited in EIGRP connected to the distribution switch using a Copper SFP? About 75% of the users are coming back to the Core using wireless.
... View more
Labels:
10-24-2017
01:52 PM
And by making the route changes / distribution lists, does that speed up the routing or make a network impact?
... View more
10-24-2017
01:02 PM
Thanks for the reply. I really appreciate it.
If I had a site design as below, but then another building was linked to it, would that also be a stub?
... View more
10-24-2017
10:25 AM
I recently deployed EIGRP via 10 Gig fiber. Everything is working, but I feel like some summarization may make the network faster, etc.
The network design is currently-
Internet < - ASA <- Core 3750-x stack <-> 4500-X
Core Stack contains Cisco Call Manager, 2 x WLC, etc. 2 - 10 Gig connections to the UCS / Nimble Array
4500-X stack is in VSS, 2 - 10 Gig Connections to 3750-X
Each remote is connected via 10 Gig fiber to the 4500-X
4500-X is the main distribution with EIGRP with the 10.x being the adjacency.
router eigrp 100 network 10.0.2.0 0.0.0.7 network 10.0.3.0 0.0.0.7 network 10.0.5.0 0.0.0.7 network 10.0.7.0 0.0.0.7 network 10.0.9.0 0.0.0.7 network 10.0.10.0 0.0.0.7 network 10.0.100.0 0.0.0.7 network 10.0.200.0 0.0.0.7 network 192.168.0.0 0.0.255.255 (This is all the data / voice / etc..) redistribute static metric 10000 10 255 1 1500 (this goes to the ASA) eigrp router-id 1.1.1.1
This is sh ip route on the Distribution
S* 0.0.0.0/0 [1/0] via 192.168.210.2 1.0.0.0/32 is subnetted, 1 subnets C 1.1.1.1 is directly connected, Loopback0 10.0.0.0/8 is variably subnetted, 16 subnets, 2 masks C 10.0.2.0/29 is directly connected, Port-channel2 L 10.0.2.1/32 is directly connected, Port-channel2 C 10.0.3.0/29 is directly connected, Port-channel3 L 10.0.3.1/32 is directly connected, Port-channel3 D 10.0.4.0/29 [90/768] via 10.0.2.2, 16:30:03, Port-channel2 C 10.0.5.0/29 is directly connected, Port-channel5 L 10.0.5.1/32 is directly connected, Port-channel5 C 10.0.7.0/29 is directly connected, Port-channel7 L 10.0.7.1/32 is directly connected, Port-channel7 D 10.0.8.0/29 [90/768] via 10.0.3.2, 17:03:14, Port-channel3 C 10.0.9.0/29 is directly connected, Port-channel9 L 10.0.9.1/32 is directly connected, Port-channel9 C 10.0.10.0/29 is directly connected, Port-channel100 L 10.0.10.1/32 is directly connected, Port-channel100 C 10.0.200.0/29 is directly connected, Port-channel200 L 10.0.200.1/32 is directly connected, Port-channel200 D 192.168.3.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.8.0/22 [90/3072] via 10.0.10.2, 17:03:14, Port-channel100 D 192.168.13.0/24 [90/3072] via 10.0.10.2, 17:03:14, Port-channel100 D 192.168.14.0/24 [90/3072] via 10.0.10.2, 17:03:14, Port-channel100 D 192.168.20.0/24 [90/3072] via 10.0.2.2, 16:30:03, Port-channel2 D 192.168.21.0/24 [90/3072] via 10.0.2.2, 16:30:03, Port-channel2 D 192.168.22.0/24 [90/3072] via 10.0.2.2, 16:30:03, Port-channel2 D 192.168.30.0/24 [90/3072] via 10.0.3.2, 17:03:14, Port-channel3 D 192.168.31.0/24 [90/3072] via 10.0.3.2, 17:03:14, Port-channel3 D 192.168.32.0/24 [90/3072] via 10.0.3.2, 17:03:14, Port-channel3 D 192.168.40.0/24 [90/3328] via 10.0.2.2, 16:27:33, Port-channel2 D 192.168.41.0/24 [90/3328] via 10.0.2.2, 16:27:33, Port-channel2 D 192.168.42.0/24 [90/3328] via 10.0.2.2, 16:27:33, Port-channel2 D 192.168.50.0/24 [90/3072] via 10.0.5.2, 16:59:30, Port-channel5 D 192.168.51.0/24 [90/3072] via 10.0.5.2, 16:59:30, Port-channel5 D 192.168.52.0/24 [90/3072] via 10.0.5.2, 16:59:30, Port-channel5 D 192.168.60.0/24 [90/3328] via 10.0.2.2, 16:27:33, Port-channel2 D 192.168.61.0/24 [90/3328] via 10.0.2.2, 16:27:33, Port-channel2 D 192.168.62.0/24 [90/3328] via 10.0.2.2, 16:27:33, Port-channel2 D 192.168.70.0/24 [90/3072] via 10.0.7.2, 17:03:13, Port-channel7 D 192.168.71.0/24 [90/3072] via 10.0.7.2, 17:03:13, Port-channel7 D 192.168.72.0/24 [90/3072] via 10.0.7.2, 17:03:13, Port-channel7 D 192.168.80.0/22 [90/3328] via 10.0.3.2, 16:22:43, Port-channel3 D 192.168.84.0/24 [90/3328] via 10.0.3.2, 16:22:43, Port-channel3 D 192.168.85.0/24 [90/3328] via 10.0.3.2, 16:22:43, Port-channel3 D 192.168.86.0/24 [90/3328] via 10.0.3.2, 16:22:16, Port-channel3 D 192.168.90.0/24 [90/3072] via 10.0.9.2, 17:03:13, Port-channel9 D 192.168.91.0/24 [90/3072] via 10.0.9.2, 17:03:13, Port-channel9 D 192.168.92.0/24 [90/3072] via 10.0.9.2, 17:03:13, Port-channel9 D 192.168.98.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.99.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.100.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.101.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.115.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.116.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.126.0/24 [90/3072] via 10.0.10.2, 17:03:14, Port-channel100 D 192.168.127.0/24 [90/3072] via 10.0.10.2, 17:03:14, Port-channel100 D 192.168.128.0/24 [90/3072] via 10.0.10.2, 17:03:14, Port-channel100 D 192.168.136.0/21 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.144.0/20 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.160.0/21 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.169.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.200.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.201.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.210.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.220.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.221.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.222.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.223.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.224.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200 D 192.168.225.0/24 [90/3072] via 10.0.200.2, 17:03:11, Port-channel200
And this is a sample building that only utilizes 192.168.50.x, 51.x, 52.x
All buildings are point to point links with only a single path
router eigrp 100 network 10.0.5.0 0.0.0.7 -> To the 4500-X (20 gig) network 192.168.50.0 Data network 192.168.51.0 Voice network 192.168.52.0 Access Points eigrp router-id 1.1.1.5
show ip route:
D*EX 0.0.0.0/0 [170/258816] via 10.0.5.1, 17:00:59, Port-channel5 1.0.0.0/32 is subnetted, 1 subnets C 1.1.1.5 is directly connected, Loopback0 10.0.0.0/8 is variably subnetted, 10 subnets, 2 masks D 10.0.2.0/29 [90/768] via 10.0.5.1, 17:00:59, Port-channel5 D 10.0.3.0/29 [90/768] via 10.0.5.1, 17:00:59, Port-channel5 D 10.0.4.0/29 [90/1024] via 10.0.5.1, 16:31:32, Port-channel5 C 10.0.5.0/29 is directly connected, Port-channel5 L 10.0.5.2/32 is directly connected, Port-channel5 D 10.0.7.0/29 [90/512] via 10.0.5.1, 17:00:59, Port-channel5 D 10.0.8.0/29 [90/1024] via 10.0.5.1, 17:00:59, Port-channel5 D 10.0.9.0/29 [90/512] via 10.0.5.1, 17:00:59, Port-channel5 D 10.0.10.0/29 [90/512] via 10.0.5.1, 17:00:59, Port-channel5 D 10.0.200.0/29 [90/512] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.3.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.8.0/22 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.13.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.14.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.20.0/24 [90/3328] via 10.0.5.1, 16:31:32, Port-channel5 D 192.168.21.0/24 [90/3328] via 10.0.5.1, 16:31:32, Port-channel5 D 192.168.22.0/24 [90/3328] via 10.0.5.1, 16:31:32, Port-channel5 D 192.168.30.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.31.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.32.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.40.0/24 [90/3584] via 10.0.5.1, 16:29:02, Port-channel5 D 192.168.41.0/24 [90/3584] via 10.0.5.1, 16:29:02, Port-channel5 D 192.168.42.0/24 [90/3584] via 10.0.5.1, 16:29:02, Port-channel5 192.168.50.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.50.0/24 is directly connected, Vlan50 L 192.168.50.1/32 is directly connected, Vlan50 192.168.51.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.51.0/24 is directly connected, Vlan51 L 192.168.51.1/32 is directly connected, Vlan51 192.168.52.0/24 is variably subnetted, 2 subnets, 2 masks C 192.168.52.0/24 is directly connected, Vlan52 L 192.168.52.1/32 is directly connected, Vlan52 D 192.168.60.0/24 [90/3584] via 10.0.5.1, 16:29:02, Port-channel5 D 192.168.61.0/24 [90/3584] via 10.0.5.1, 16:29:02, Port-channel5 D 192.168.62.0/24 [90/3584] via 10.0.5.1, 16:29:02, Port-channel5 D 192.168.70.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.71.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.72.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.80.0/22 [90/3584] via 10.0.5.1, 16:24:12, Port-channel5 D 192.168.84.0/24 [90/3584] via 10.0.5.1, 16:24:12, Port-channel5 D 192.168.85.0/24 [90/3584] via 10.0.5.1, 16:24:12, Port-channel5 D 192.168.86.0/24 [90/3584] via 10.0.5.1, 16:23:45, Port-channel5 D 192.168.90.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.91.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.92.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.98.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.99.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.100.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.101.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.115.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.116.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.126.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.127.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.128.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.136.0/21 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.144.0/20 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.160.0/21 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.169.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.200.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.201.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.210.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.220.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.221.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.222.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.223.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5 D 192.168.224.0/24 [90/3328] via 10.0.5.1, 17:00:59, Port-channel5
... View more
Labels:
Created by
mjensen323
in Network Security
in Network Security
09-28-2017
07:48 PM
09-28-2017
07:48 PM
Internet traffic only.
... View more
Created by
mjensen323
in Network Security
in Network Security
09-28-2017
07:01 PM
09-28-2017
07:01 PM
Any thoughts on why everything would slow down and then a reload of the firewall immediately resolves the issue?
... View more
Created by
mjensen323
in Network Security
in Network Security
09-28-2017
04:10 PM
09-28-2017
04:10 PM
show resource usage summary Resource Current Peak Limit Denied Context Telnet 1 1 5 0 System ASDM 1 1 30 0 System Syslogs [rate] 0 918 N/A 0 System Conns 6354 56977 500000 0 System Xlates 7300 74572 N/A 0 System Hosts 2838 8624 N/A 0 System Conns [rate] 48 11287 N/A 0 System Inspects [rate] 23 781 N/A 0 System Routes 7 7 unlimited 0 System show resource usage resource Xlates Resource Current Peak Limit Denied Context Xlates 7192 74572 N/A 0 System
... View more
Created by
mjensen323
in Network Security
in Network Security
09-28-2017
01:17 PM
09-28-2017
01:17 PM
Hello - We have a 5525-X with 1 gig connection, we introduced a fairly large number of users to our environment in the last few weeks and notice in the afternoons a slowdown until a reboot of the firewall. We are on 9.6.1. Our show conn count: 54914 in use, 54914 most used sh xlate 64270 in use, 74572 most used Bandwidth is peaking around 500MB, Avergages around 300. Is the firewall undersized?
... View more
Labels:
08-03-2017
12:18 PM
Hello,
Installing new Distribution Switches (4500-X in VSS) connecting to 3750-X's stacks with NM-10G cards. We are going to setup 1 x 10G connection via dark fiber to start with, and will more than likely buy the SFP's (using fiber mux) at a later date. If I setup EIGRP with a Port Channel encompassing 2 x 10 Gig ports but only connect 1, is there any issues with that? Obviously it's only 10 Gig. But I wasnt sure if it would have any negative effects.
Objective would be to plug n play when necessary without switch configs
Thanks in advance.
... View more
Labels:
07-07-2017
07:32 PM
I think these switches would just be layer 2. They will have access points and voip. But perhaps I should extend layer 3 to the end point?
... View more
07-07-2017
08:44 AM
3750's at the remote site edge with 3560 / 2960 for access layer.
... View more
07-07-2017
08:36 AM
Is EIGRP Stub mode sufficient for the remote site 3750's? to connect to the distribution?
... View more
07-07-2017
06:49 AM
Hello,
I recently purchased a pair of 4500-x switches with enterprise licenses for our distribution.
We have 8 remote sites coming online with 2 - 10 gig fiber links.
Each site will have a pair of 3750-x's stacked (and 2-4 switches in sub closets). There will be 300-1200 clients at each site (mainly wireless) with WLC's in the distribution site.
These switches came with IP Base licenses.
We are currently using NSF for our networking and want to migrate to OSPF or EIGRP.
Would using a single OSPF Area 0 and maintaining Area 0 be a viable option? or would purchasing IP Services upgrades and separating each site in Areas be a better option? I was not sure how OSPF For Routed Access fit into this either.
The topology is hub and spoke, the sites do not connect to one another and do not share resources between each other. All data / resources reside in distribution.
Thanks in advance.
... View more
- Tags:
- OSPF DESIGN
Labels:
03-06-2017
01:04 PM
Hello,
I've been researching some campus design documents the last few weeks. Attached is the layout to an 8 building campus I am working on. Each building would have a stack of 3750-X (1-2) with 1-2 2960S switches. All running 10 Gig links internally and between each building. The buildings are pretty small but are pretty high density. There are between 30-100 AP's per building, and 250-2000 devices per building. The datacenter would house 2 - 4500-x switches in VSS mode for the distribution layer. The core already exists with 2 - 3750-x switches connected to nexus 6248's to the blade chassis. I may just connect the 6248's directly to the 4500 in a collapsed core, but I may leave them separate to allow the traffic to stay separate.
The question is would you break apart each building in their own network and setup OSPF areas between each building? Or would it be one big Area 0? I'm trying to work out licensing and the best way to create speed / efficiency. There are no local resources inside the buildings. All the users are wireless and all the traffic will come back to the datacenter. The ISP is terminated in the datacenter for all the buildings as well. We also have utilize Cisco VOIP back at the datacenter.
Thanks in advance.
... View more
- Tags:
- LAN DESIGN
Labels:
02-24-2017
08:11 AM
Hello,
When cabling between switches in an IDF, are there any gains when using GLC-SX-MM vs plain GLC-T's?
This is when the switches are not stack compatible.
Thanks.
... View more
- Tags:
- IDF LAN Basic
Labels:
11-05-2017
Hello, My network design consists of 8 remote locations in a Hub Spoke
EIGRP. Each link is 10 gig or...
10-24-2017
And by making the route changes / distribution lists, does that speed up
the routing or make a netwo...
10-24-2017
Thanks for the reply. I really appreciate it. If I had a site design as
below, but then another buil...
10-24-2017
I recently deployed EIGRP via 10 Gig fiber. Everything is working, but I
feel like some summarizatio...
Created by
mjensen323
in Network Security
09-28-2017
09-28-2017
Any thoughts on why everything would slow down and then a reload of the
firewall immediately resolve...
Created by
mjensen323
in Network Security
09-28-2017
09-28-2017
show resource usage summaryResource Current Peak Limit Denied
ContextTelnet 1 1 5 0 SystemASDM 1 1 3...
Created by
mjensen323
in Network Security
09-28-2017
09-28-2017
Hello -We have a 5525-X with 1 gig connection, we introduced a fairly
large number of users to our e...
08-03-2017
Hello, Installing new Distribution Switches (4500-X in VSS) connecting
to 3750-X's stacks with NM-10...
07-07-2017
I think these switches would just be layer 2. They will have access
points and voip. But perhaps I s...
07-07-2017
Is EIGRP Stub mode sufficient for the remote site 3750's? to connect to
the distribution?
07-07-2017
Hello, I recently purchased a pair of 4500-x switches with enterprise
licenses for our distribution....
03-06-2017
Hello, I've been researching some campus design documents the last few
weeks. Attached is the layout...
Public Statistics
| Date Registered | 04-28-2011 02:00 PM |
| Date Last Visited | 11-05-2017 03:08 PM |
| Total Messages Posted | 58 |
