Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About M Talha
Online
M Talha
Member since
08-14-2013
Beginner
03-21-2019
02:21 AM
Hi karinatan, Firstly enable DHCP for IP Phones in Openscape business, secondly reserve a small range of IP addresses while configuring DHCP in your openscape business system. Now follow these steps. #int vlan 10 #ip add 192.168.0.5 255.255.255.0 <--- (define your voice subnet accordingly) #ip helper-address 192.168.0.1 <--- (Ip address of your unify openscape LAN segment) #description VOICE #end #int gig 0/1 #switchport mode access #switchport access vlan 5 <-- Vlan 5 represents your data vlan here for example) #switchport voice vlan 10 <-- Vlan 10 represents your voice vlan here for example) #end In this manner your phones and PC's will work on same switchport, secondly you won't be needing QOS as they will work fine without any hassle.
... View more
02-26-2019
12:46 AM
Dear Joseph, I have configured an ISP vlan (layer 2) on my Cisco 3750-1 and trunked to other Cisco 3750-2 where i have Layer 4 Firewall which does all the NAT stuff and it is working like charm. now i have trunked this ISP vlan to another Cisco 3750-3 switch which resides in another business unit nearby. I want only this business unit not to exceed the speed of 8 mbps download and upload. Hope this clears up of what i exactly want to achieve.
... View more
02-26-2019
12:26 AM
Dear Georg Pauwen, I am getting this message when applying this to vlan interface. What should i do now ? Switch(config)#int vlan 10 Switch(config-if)#service-policy input VLAN10_8MB %QoS: policy-map with police action at parent level not supported on Vlan10 interface.
... View more
02-22-2019
11:19 PM
Dear All, I am working on a scenario to limit the switch port on Cisco 3750 to have bandwidth of 8 mb/s up and down, currently this port is configured as trunk and i want to restrict vlan 10 (IP - 192.168.10.0/24) for 8 mb/s up and down. Need help in this regard. Regards, Talha
... View more
Labels:
01-28-2019
01:27 AM
Its not the Cisco ASA otherwise i would have share the configs with you, but i would like to say thanks a lot for your help regarding the scenario. It has certainly clear my doubts.
... View more
01-28-2019
12:36 AM
Dear Seb Rupik,
If i change my firewall subnet mask to /16 from /21 do firewall will automatically NAT the incoming subnets within the range ?? and i'll have eight more subnets from 192.168.8.0/24 - 192.168.15.254/24 and add route back from firewall to 3750 will resolve the vlans scenario.
... View more
01-27-2019
11:52 PM
Dear All,
I am working on a scenario where i have application firewall in place at edge of the network (internet edge) for the purpose of application and content filtering, besides that i have Cisco 3750 switch which is right now configured with a single vlan (in same subnet with firewall). Now as this subnet is getting full i am planning to add departmental vlans to distribute users. Right now the default gateway is firewall (192.168.0.1/21) for this vlan but if i add more vlans and after enabling ip routing i'll have to change the gateway to there respective vlan id in my Cisco 3750 switch. So my question here is how would i still implement the application and content filtering in this scenario to restrict my users in new and existing vlans ??
Current Network Topology
Internet <---- App Firewall (192.168.0.1/21) <---- Cisco 3750 (192.168.5.50/21) <---- Users switches
Regards,
Talha
... View more
Labels:
01-07-2019
10:23 PM
Dear All,
I am working on a scenario where i am using /21 mask with class C address. Now as i am running out of ip addresses i am thinking to increase my block size to /20 or /19. Right now with /21 mask no subnets have been configured except default vlan. There is an application firewall at the edge of network and has multiple internet connections and is doing all the NAT stuff and is configured with another class C address of 192.168.10.1 acting as a gateway for whole block of /21. what i want to do now is to increase the block size to /19 or /20 and configure subnets on my core switch so that i can make departmental vlans. My question here is with departmental vlans configured i have to change the gateway of to specific vlan ip so in this case how my application firewall which is acting as a gateway right now will function as i want users to restrict and follow policy on firewall. should i add this gateway ip 192.168.10.1 in proxy setting so that users are restricted accordingly ?? or there is something else i have to do in order to make this network work ?
Regards,
Talha
... View more
Labels:
12-04-2018
01:59 AM
Dear eliezecruz1,
This switch is a Layer 2 switch and its does not support IP routing functionality due to which it says "system does not recognize this command". Flashing to a new firmware won't resolve your issue since this switch does not support IP routing functionality. How ever you can perform inter vlan routing using this switch between vlan's but for that you will have to user a router other than a switch.
Hope this helps
Regards,
Talha
... View more
10-29-2018
01:31 AM
With these ACL statement my host having ip 192.168.10.135 can communicate with server on 192.168.11.13 ?? These acl's has made me so much confused.
Regards,
Talha
... View more
10-29-2018
01:14 AM
Thank you so much Georg pauwen for the help i was so confused on how i allow all these people access to the servers and stops all the rest. Thanks a lot for the help.
Regards,
Talha
... View more
10-27-2018
03:35 AM
Dear All,
I am working on a scenario to limit the access to servers as mentioned in below configuration. i am running a big subnet of 192.168.8.1/21, now as soon as i apply this VACL whole vlan traffic gets stopped. How should i resolve this issue that rest of the vlan users doesn't get affected ? Need help in this regard.
Talha
access-list 101 permit ip host 192.168.8.178 host 192.168.10.135 access-list 101 permit ip host 192.168.10.49 host 192.168.10.135 access-list 101 permit ip host 192.168.11.13 host 192.168.10.135 access-list 101 permit ip host 192.168.11.14 host 192.168.10.135
access-list 101 permit ip host 192.168.8.178 host 192.168.8.216 access-list 101 permit ip host 192.168.10.49 host 192.168.8.216 access-list 101 permit ip host 192.168.11.13 host 192.168.8.216 access-list 101 permit ip host 192.168.11.14 host 192.168.8.216
3750(conf)#vlan access-map SERVER_ACCESS 10 3750(config-access-map)#match ip address 101 3750(config-access-map)#action forward 3750(conf)#vlan access-map SERVER_ACCESS 20 3750(config-access-map)#action drop 3750(conf)#vlan filter SERVER_ACCESS vlan-list 1
... View more
Labels:
10-26-2018
04:39 AM
Thanks alot georg pauwen. It was really easy and helpfull.
Regards,
Talha
... View more
10-26-2018
04:06 AM
Dear All,
I came across a scenario where this network is running a 192.168.8.1/255.255.248.0 which basically starts a big host range of 192.168.8.1 - 192.168.15.254. Now i am asked to give server access to limited users. Server IP here is 192.168.11.13 and users from these IP's are only allowed to have access to the server (192.168.10.15, 192.168.8.35, 192.168.9.236). How should i accomplish this task since it is part of one big vlan ? Need help guys in this regard.
Thanks & Regards
... View more
Labels:
a month ago
Dear Joseph,I have configured an ISP vlan (layer 2) on my Cisco 3750-1
and trunked to other Cisco 37...
a month ago
Dear Georg Pauwen, I am getting this message when applying this to vlan
interface. What should i do ...
02-22-2019 11:19 PM
Dear All, I am working on a scenario to limit the switch port on Cisco
3750 to have bandwidth of 8 m...
01-28-2019 01:27 AM
Its not the Cisco ASA otherwise i would have share the configs with you,
but i would like to say tha...
01-28-2019 12:36 AM
Dear Seb Rupik, If i change my firewall subnet mask to /16 from /21 do
firewall will automatically N...
01-27-2019 11:52 PM
Dear All, I am working on a scenario where i have application firewall
in place at edge of the netwo...
01-07-2019 10:23 PM
Dear All, I am working on a scenario where i am using /21 mask with
class C address. Now as i am run...
12-04-2018 01:59 AM
Dear eliezecruz1, This switch is a Layer 2 switch and its does not
support IP routing functionality ...
10-29-2018 01:31 AM
With these ACL statement my host having ip 192.168.10.135 can
communicate with server on 192.168.11....
10-29-2018 01:14 AM
Thank you so much Georg pauwen for the help i was so confused on how i
allow all these people access...
10-27-2018 03:35 AM
Dear All, I am working on a scenario to limit the access to servers as
mentioned in below configurat...
Public Statistics
| Date Registered | 08-14-2013 11:54 PM |
| Date Last Visited | 03-25-2019 10:13 PM |
| Total Messages Posted | 86 |
Helpful Votes Given To
.jpg "VIP Advocate"){kind=icon}
.jpg "Hall of Fame Guru"){kind=icon}
