Hello, I have recently inherited an existing network which has two stacked Cisco 2960's that connect to a Cisco 5510 ASA. Currently the Cisco 2960's handles its own routing for gateways via the VLAN classifications. Which look like this: interface Vlan1 description Production ip address 10.x.99.1 255.255.255.0 ip helper-address 192.168.x.4 no ip redirects no ip unreachables no ip proxy-arp ! interface Vlan5 description IP Phones ip address 10.x.50.1 255.255.255.0 ip helper-address 192.168.x.4 no ip redirects no ip unreachables no ip proxy-arp ! interface Vlan11 description Production ip address 10.x.100.1 255.255.255.0 ip helper-address 192.168.x.4 no ip redirects no ip unreachables no ip proxy-arp ! interface Vlan22 description Legacy Production ip address 192.168.x.254 255.255.255.0 ip helper-address 192.168.x.4 no ip redirects no ip unreachables no ip proxy-arp ! 192.168.x.4 is the DC for the domain. ip route 0.0.0.0 0.0.0.0 192.168.x.250 ip http server ip http secure-server We are experiencing a 2 to 14 % packet loss on our traffic from the 10.x.100.1 network to the 192.168.x.254. The other issue we seem to be having is that same traffic is making its way out to our firewall. For example back up server (Port 1/0/30 VLAN11) 10.x.100.22 (Subnet 255.255.255.0 - GW: 10.x.100.1) is backing up (Port 1/0/45 VLAN22) 192.168.x.15 (Subnet 255.255.255.0 - GW: 192.168.x.254) using Netbackup. The traffic for this operation is still going through the firewall which is creating unnecessary traffic for the network. Do we need to have a layer 3 switch to do the gateway routing? Why is there such high packet loss on a local switch? Why does local traffic go outside of the switch? Help on any one of these would be great.
... View more
Hello, I am looking to transition from VLAN 1 to VLAN 11 on my Catalyst 2960s as per Cisco best practices. When I look at 'show vlan' I get the following output: VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------- 1 default active Gi1/0/13, Gi1/0/14, Gi1/0/15 Gi1/0/16, Gi1/0/17, Gi1/0/18 Gi1/0/19, Gi1/0/20, Gi1/0/21 Gi1/0/22, Gi1/0/23, Gi1/0/24 Gi1/0/25, Gi1/0/26, Gi1/0/27 Gi1/0/28, Gi1/0/29, Gi1/0/30 Gi1/0/31, Gi1/0/32, Gi1/0/33 Gi1/0/34, Gi1/0/35, Gi1/0/36 Gi1/0/37, Gi1/0/38, Gi1/0/39 Gi1/0/40, Gi1/0/41, Gi1/0/42 Gi1/0/43, Gi1/0/44, Gi1/0/47 Gi1/0/48, Gi1/0/49, Gi1/0/50 Gi1/0/51, Gi1/0/52, Gi2/0/13 Gi2/0/14, Gi2/0/15, Gi2/0/16 Gi2/0/17, Gi2/0/18, Gi2/0/19 Gi2/0/20, Gi2/0/21, Gi2/0/22 Gi2/0/23, Gi2/0/24, Gi2/0/25 Gi2/0/26, Gi2/0/27, Gi2/0/28 Gi2/0/29, Gi2/0/30, Gi2/0/31 Gi2/0/32, Gi2/0/33, Gi2/0/34 Gi2/0/35, Gi2/0/36, Gi2/0/37 Gi2/0/38, Gi2/0/39, Gi2/0/40 Gi2/0/41, Gi2/0/42, Gi2/0/43 Gi2/0/44, Gi2/0/49, Gi2/0/50 Gi2/0/51, Gi2/0/52 5 IP_Phones active Gi1/0/2, Gi1/0/13, Gi1/0/14 Gi1/0/15, Gi1/0/16, Gi1/0/17 Gi1/0/18, Gi1/0/19, Gi1/0/20 Gi1/0/21, Gi1/0/22, Gi1/0/23 Gi1/0/24, Gi1/0/25, Gi1/0/26 Gi1/0/27, Gi1/0/28, Gi1/0/29 Gi1/0/30, Gi1/0/31, Gi1/0/32 Gi1/0/33, Gi1/0/34, Gi1/0/35 Gi1/0/36, Gi1/0/37, Gi1/0/38 Gi1/0/39, Gi1/0/40, Gi1/0/41 Gi1/0/42, Gi1/0/43, Gi1/0/44 Gi2/0/2, Gi2/0/13, Gi2/0/14 Gi2/0/15, Gi2/0/16, Gi2/0/17 Gi2/0/18, Gi2/0/19, Gi2/0/20 Gi2/0/21, Gi2/0/22, Gi2/0/23 Gi2/0/24, Gi2/0/25, Gi2/0/26 Gi2/0/27, Gi2/0/28, Gi2/0/29 Gi2/0/30, Gi2/0/31, Gi2/0/32 Gi2/0/33, Gi2/0/34, Gi2/0/35 Gi2/0/36, Gi2/0/37, Gi2/0/38 Gi2/0/39, Gi2/0/40, Gi2/0/41 Gi2/0/42, Gi2/0/43, Gi2/0/44 Does this indicate that Gi1/0/13,Gi1/0/14...etc are associated to both VLANS? According to everything I have read once I figure out the port configurations - I will move all of the ports from VLAN1 to VLAN11 and change: Remove interface Vlan1 description Production ip address 10.1.1.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp Add interfaceVlan11 description Production ip address 10.1.1.1 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp I just wanted to confirm this before I make the move this evening. Thanks
... View more