Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Rafael Garcia
08-29-2018
Stats
Member since
12-30-2008
103
Posts
5
Helpful
1
Solution
Created by
Rafael Garcia
in Switching
in Switching
02-08-2016
12:23 PM
02-08-2016
12:23 PM
Hi...I have a 3929 router that I am connecting to a 6509E using port-channel configuration; however, it seems like the router created a port-channel for each of the switch default vlans. Here is the configuration:
------
Router
interface Port-channel1 no ip address hold-queue 150 in
interface Port-channel1.35 description Voice encapsulation dot1Q 35 ip address 10.10.10.5 255.255.254.0 ip virtual-reassembly in
interface Port-channel1.45 description Edge encapsulation dot1Q 45 ip address 20.20.20.5 255.255.255.0 ip virtual-reassembly in
------
Switch
interface Port-channel40 description = EDGE & VOICE = switchport switchport trunk native vlan 999 switchport trunk allowed vlan 35,45 switchport mode trunk switchport nonegotiate end . Current configuration : 195 bytes ! interface GigabitEthernet1/3/40 switchport switchport trunk native vlan 999 switchport trunk allowed vlan 35,45 switchport mode trunk switchport nonegotiate channel-group 40 mode on end ! interface GigabitEthernet2/3/40 switchport switchport trunk native vlan 999 switchport trunk allowed vlan 35,45 switchport mode trunk switchport nonegotiate channel-group 40 mode on
However after carefully looking at the configuration, I noticed that now a port channel exists for each of the pre-defined switch vlans (see below). Has anyone noticed this behavior? Is there anything I am doing incorrectly?
Port-channel1.35 10.10.10.5 YES NVRAM up up Port-channel1.36 unassigned YES unset deleted down Port-channel1.37 unassigned YES unset up up Port-channel1.38 unassigned YES unset up up Port-channel1.39 unassigned YES unset up up Port-channel1.40 unassigned YES unset up up Port-channel1.41 unassigned YES unset up up Port-channel1.42 unassigned YES unset up up Port-channel1.43 unassigned YES unset up up Port-channel1.44 unassigned YES unset up up Port-channel1.45 20.20.20.5 YES NVRAM up up
Thank you.
... View more
- Tags:
- port-channel 3925
Labels:
04-02-2015
07:05 PM
Take a look at this post: https://supportforums.cisco.com/document/63281/local-host-routes-routing-table hope it helps.
... View more
04-02-2015
06:56 PM
Hi Jon, the traffic being filtered is Internet traffic. Location B users need to go to the Internet through location A. Now, I understand that the ASA doesn't support GRE but what about letting the traffic (GRE) pass throught the ASA and use the 6500 as tunnel endpoint? Is this a bad practice?
... View more
04-01-2015
04:20 AM
I have a few more questions though. In terms of the 6500 not having any word-routable public IPs, is there any way to do a NAT on the firewall and let the isakmp pass-thru as I currently have with some of my DMZ routers. Our firewall is not running any IGP so you would you go about doing this? If it is not too much of an effort, can we talk in terms of configuration examples? Do you have any idea on how to get this accomplished? Location B - Subnets 2.2.2.2 Location A - Subnets 1.1.1.1 3.3.3.3 0.0.0.0 Thanks.
... View more
03-31-2015
11:46 AM
I just confirmed that the 6500 does support GRE as well as IPSec and PBR so I can do this tunnel endpoint-to-endpoint with no issues. Am I correct? Do you have any suggestions about this or any other setup?
... View more
03-30-2015
07:30 PM
I have a set of users that are using Citrix and they should use the MPLS to reach location A while the rest of the users should use the tunnel to get to resources located at location A. I probably have to add another VLAN in location B to capture the traffic and send it through the tunnel. I think is a good idea to use EIGRP to do the routing and failover. My next question is that I have a proxy behind the ASA so, how do I send the Internet traffic in and and back out in order to get filtered?
... View more
03-30-2015
02:13 PM
Hi, We are trying to setup a tunnel between Location A and B (see diagram) to pass some traffic since our MPLS bandwidth is limited. However, I am not an expert at this type of configuration so I need help from the community. I am sure that more questions are going to come up as this evolves but this is it for now: What type of configuration (GRE, VRF, etc) do you suggest? And, Where should I terminate this tunnel (Firewall, 6509)? I was thinking to route this traffic based on destination since I have a clear understanding of where it should go but I am open for suggestions? For you to know: 6509 is running EIGRP with static route pointing to MPLS. No redistribution here Remote locations do not have a routing protocol currently Two Vlans are configured at the remote location 1.1.1.1 and 2.2.2.2 Thanks in advanced. Ralph
... View more
- Tags:
- #gre
Labels:
11-17-2014
08:27 AM
Thank you for your feedback. The idea is to start small as you said. Just to log and monitor the activity until we identify what is really valid and what's not. Then we will proceed to work on specific access by device type; however, I am looking for those pieces I need to clarify with my cisco partner at the time of the purchase since I have specific budget for the product. I have been told that the biggest expense here is the professional services which was an outrageous number. Any ideas on this arena?
... View more
11-16-2014
06:17 AM
Hi, I am currently evaluating two NAC systems: ISE and Bradford and I wanted to see if anyone has had the opportunity to see both systems. Although we are a Cisco shop, I am looking for simplicity due to staff shortage. In the event I decide to go with ISE, I would like to hear your personal challenges with the product during the deployment phase and those little things I need to keep in mind to avoid future headaches. Thanks in advance !
... View more
Labels:
Created by
Rafael Garcia
in IP Telephony and Phones
in IP Telephony and Phones
08-26-2014
10:48 AM
08-26-2014
10:48 AM
The only thing I would add is that the tool is not error-free and some things may not work as you expect. In our case, creating the publisher was a simple task however we faced some difficulties with a subscriber. We had to do it completely separate. Make sure you ask for the proper OVA if you are deploying in a virtual environment.
... View more
08-25-2014
07:54 AM
Hi... I am in the process of redesigning a location with about 150 users using PoE IP Phones, printers, etc. We currently don't have any storage or servers at this location but we are looking at adding a few in the next years as well as wireless. I need suggestions regarding the type of chassis I need for this location. On the table, we have the following switches: 4507 Dual supervisor Dual power supply PoE cards Based on the head-count we have an open slot for growth; however, we can always us 4510E 3850 Stack Dual power stack Understanding that switches can have 10Gbps modules Support wireless by default Stack can have up to 9 switches providing growth room Based on this and your experience, I would like to hear your suggestions and/or questions on what to use for this location. Thank you for you help in advanced.
... View more
- Tags:
- #lan #switch
Labels:
02-24-2014
06:09 AM
You are correct. I am referring to my existing Public IPs and the fact I have to get another address space for this implementation. I do not have BGP at this point since I only have one carrier and firewall. My preference is to move away from the last mile carrier due to some big outages in the area and get someone else (like Comcast or FPL) that has their own network. I agree with you that keeping the same ISP for both is a much simpler solution. What's your take on doing DNS failover? Wouldn't this work as well until I re-engineer the whole BGP strategy. I currently use DNS to monitor some of my web server so in case the primary is down, it rolls over to my DR site. I'll post the diagram soon.
... View more
02-22-2014
07:26 PM
Marius...Thank you for providing such a good feedback. I like to the idea of using the 6500 to configure the dmz vlans and connect them to the firewall. Because of their features, it will help to minimize any type of downtime. Perhaps, you can help me with the two ISP configuration. I want to have BGP configured between the two IPSs but I have a non-portable block of IPs. I have a few questions on this regard: How do I keep my existing IPs? When traffic goes through the second ISP, how do I nat the traffic to keep the same public IPs? Do I have to double-NAT? Any other feedback is greatly appreciated.
... View more
02-10-2014
07:53 PM
Hi, I am about to purchase two 5515-X next generation firewalls and I need to decide what to do as far as the design goes so I need some help from the experts. This appliances seem to come with 6 1Gbps ports which is enough. In our LAN, we have two 6500 running on VSS mode and we are also going to get our second ISP. Doing the obvious which is cross-connect each firewall with the two 6500s and possibly with the internet routers. Is it something else you recommend? Planning to trunk a couple interfaces and connect them to a DMZ switch; however, how do I make that one switch redundant? Some of the vendors currently connected do not offer a redundant link in case of failure. I'll be deploying the devices as active/standby and this is because I have VPNs configured which it is my understanding that both devices can't be active with this type of configuration. Can someone advise on this matter? However, the company wants to use them both at the same time. Using two ISPs, how do I deal with the Public-Internal NAT? Any help is greatly appreciated. Thanks.
... View more
Labels:
02-08-2016
Hi...I have a 3929 router that I am connecting to a 6509E using
port-channel configuration; however,...
04-02-2015
Take a look at this post:
https://supportforums.cisco.com/document/63281/local-host-routes-routing-t...
04-02-2015
Hi Jon, the traffic being filtered is Internet traffic. Location B users
need to go to the Internet ...
04-01-2015
I have a few more questions though. In terms of the 6500 not having any
word-routable public IPs, is...
03-31-2015
I just confirmed that the 6500 does support GRE as well as IPSec and PBR
so I can do this tunnel end...
03-30-2015
I have a set of users that are using Citrix and they should use the MPLS
to reach location A while t...
03-30-2015
Hi, We are trying to setup a tunnel between Location A and B (see
diagram) to pass some traffic sinc...
11-17-2014
Thank you for your feedback. The idea is to start small as you said.
Just to log and monitor the act...
11-16-2014
Hi, I am currently evaluating two NAC systems: ISE and Bradford and I
wanted to see if anyone has ha...
08-26-2014
The only thing I would add is that the tool is not error-free and some
things may not work as you ex...
08-25-2014
Hi... I am in the process of redesigning a location with about 150 users
using PoE IP Phones, printe...
02-24-2014
You are correct. I am referring to my existing Public IPs and the fact I
have to get another address...
02-22-2014
Marius...Thank you for providing such a good feedback. I like to the
idea of using the 6500 to confi...
Public Statistics
| Date Registered | 12-30-2008 11:10 AM |
| Date Last Visited | 08-29-2018 12:01 AM |
| Total Messages Posted | 103 |
| Total Helpful Votes Received | 5 |
.jpg "VIP Advocate"){kind=icon}
