I configured the DHCP Server on my Catalyst 3750G switch to use a DHCP database (text file)?  Can I assign static IP Addresses to the devices on my network by editing the DHCP Database text file (#1 below) or it better to do it by creating DHCP sub pools (#2 below)?   1) DHCP Database File *time* Jun 03 2019 05:20 PM *version* 3 !IP address     Type    Hardware address       Lease expiration                VRF 10.x.x.1           id       xxxx.xxxx.8eba           Jun 03 2019 07:52 PM 10.x.x.2           id       xxxx.xxxx.8ebb           Jun 03 2019 06:16 PM 10.x.x.3           id       xxxx.xxxx.8ebc           Jun 04 2019 02:40 PM 10.x.x.4           id       xxxx.xxxx.8ebd           Jun 04 2019 04:32 PM etc.   !IP address     Type    Hardware address       Interface-index !IP address     Interface-index     Lease expiration     Server IP address     Hardware address     Vrf *end*   2) DHCP Sub Pool ip dhcp pool Office1  network 10.x.x.0 255.255.255.0  dns-server 10.x.x.x  default-router 10.x.x.x     address 10.x.x.1 hardware-address xxxx.xxxx.8eba     address 10.x.x.2 hardware-address xxxx.xxxx.8ebb     address 10.x.x.3 hardware-address xxxx.xxxx.8ebc     address 10.x.x.4 hardware-address xxxx.xxxx.8ebd etc.   ... View more

1) Does a  NME-AIR-WLC6-K9  work with a Cisco 2911/k9 router 2) Would  a used one include the SRE? 3) If not, can the SRE be purchased separately -what is the part number? 4) I want to add 1-2 access points (AIR-CAP3702i) to my home network - would I be better off getting a 2504 or 3504?   Thanks ... View more

Hi, Could someone please tell me what's wrong with my switch configuration.  I cannot ping devices from my access point or access its web-browser interface.   IP address for vlan 10 interface on the switch is 10.x.x.2 IP address for BVI1 interface on access point is 10.x.x.5 Native VLAN on both the switch and access point is set to vlan 98   FROM THE ACCESS POINT I cannot ping the switch 10.x.x.2 I cannot ping a device connected to the access point10.x.x.246   FROM THE SWITCH I can ping a device connected to the access point 10.x.x.246 I can ping the sub-interface for vlan 10 on the router 10.x.x.1 I cannot ping BVI1 on the access point 10.x.x.5   FROM A WIRELESS DEVICE I can ping the sub-interface for vlan 10 on the switch 10.x.x.2 I can ping the sub-interface for vlan 10 on the router 10.x.x.1 I cannot ping BVI1 on the access point 10.x.x.5         ********************************************************************* SWITCH sh ip int brief   sw-public#sh ip int brief Interface                      IP-Address      OK?    Method      Status                        Protocol Vlan1                           unassigned      YES     NVRAM      administratively down  down Vlan10                         10.x.x.2           YES     NVRAM      up                                 up Vlan98                         unassigned      YES     unset          up                                 up Vlan666                       unassigned      YES     unset         down                           down GigabitEthernet1/0/1   unassigned      YES     unset          up                               up … GigabitEthernet1/0/52  unassigned      YES unset  up                    up sw-public#   Should the IP address for BVI1 appear next to GigabitEthernet1/0/1?   ********************************************************************* ACCESS POINT sh ip int brief   ap#show ip interface br Interface                         IP-Address       OK?         Method        Status              Protocol BVI1                               10.10.10.5      YES        manual         up                    up Dot11Radio0                  unassigned      YES        NVRAM       up                    up Dot11Radio0.10             unassigned      YES        unset           up                    up Dot11Radio0.98             unassigned      YES        unset           up                    up Dot11Radio1                  unassigned      YES        NVRAM        up                    up Dot11Radio1.10             unassigned      YES        unset           up                    up Dot11Radio1.98             unassigned      YES        unset           up                    up GigabitEthernet0            unassigned      YES         NVRAM     up                    up GigabitEthernet0.10       unassigned      YES         unset          up                    up GigabitEthernet0.98        unassigned      YES unset  up                    up ap#   ********************************************************************* SWITCH CONFIGURATION   switch#show config Using 14534 out of 524288 bytes ! ! Last configuration change at 17:30:48 UTC Sat Feb 16 2019 by ares ! NVRAM config last updated at 17:30:56 UTC Sat Feb 16 2019 by ares ! version 15.0 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname switch ! boot-start-marker boot-end-marker ! enable secret 5 ######### ! username ######### privilege 15 secret 5 ######### no aaa new-model clock timezone UTC -5 0 clock summer-time UTC recurring switch 1 provision ws-c3750g-48ps system mtu routing 1500 ip routing ip domain-name #######.local ip dhcp database nvram:dhcp_public.txt ip dhcp excluded-address 10.x.x.1 10.x.x.10 ! ip dhcp pool public  network 10.x.x.0 255.255.255.0  dns-server 10.x.x.1                   IP ADDRESS OF THE VLAN 10 SUB-INTERFACE ON THE ROUTER  (10.x.x.1)  default-router 10.x.x.2               IP ADDRESS FOR VLAN 10 INTERFACE ON THIS SWITCH  (10.x.x.2) ! ! spanning-tree mode pvst spanning-tree extend system-id vlan internal allocation policy ascending ! ! interface GigabitEthernet1/0/1              CONNECTS TO AIRONET   description aironet1  switchport trunk encapsulation dot1q  switchport trunk native vlan 98  switchport trunk allowed vlan 10,98,666  switchport mode trunk ! abbreviated ! interface GigabitEthernet1/0/52             CONNECTS TO ROUTER  description rt-core G0/1  switchport trunk encapsulation dot1q  switchport trunk native vlan 98  switchport trunk allowed vlan 10,98,666  switchport mode trunk ! interface Vlan1  no ip address  shutdown ! interface Vlan10  description guest_vlan  ip address 10.x.x.2 255.255.255.0  no ip route-cache ! interface Vlan98  description native_vlan  no ip address  no ip route-cache ! interface Vlan666  description quarantine_vlan  no ip address  no ip route-cache ! no ip http server no ip http secure-server ! ip route 0.0.0.0 0.0.0.0 10.x.x.1       IP ADDRESS OF THE VLAN 10 SUB-INTERFACE ON THE ROUTER (10.x.x.1)       ! ! line con 0  exec-timeout 15 0  logging synchronous  login local  length 0 line vty 0 4  exec-timeout 15 0  logging synchronous  login local  length 0  transport input telnet ssh line vty 5 15  no login ! ntp peer 10.x.x.1 end   switch#     ********************************************************************* ACCESS POINT CONFIGURATION   ap#show config Using 3347 out of 32768 bytes ! ! Last configuration change at 00:51:16 EDT Sat May 29 1993 by ares version 15.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname ap ! ! logging rate-limit console 9 enable secret 5 ########### ! no aaa new-model clock timezone EST -5 0 clock summer-time EDT recurring no ip source-route no ip cef ip domain name ###########.local ! ! ! ! dot11 pause-time 100 dot11 syslog dot11 vlan-name native_vlan vlan 98 dot11 vlan-name public_vlan vlan 10 ! dot11 ssid public_SSID    vlan 10    authentication open    authentication key-management wpa version 2    guest-mode    mbssid guest-mode    wpa-psk ascii 7 ########### ! ! dot11 arp-cache optional ! no ipv6 cef ! ! username ########### privilege 15 secret 5 ########### ! ! bridge irb ! ! ! interface Dot11Radio0  no ip address  no ip route-cache  !  encryption vlan 10 mode ciphers aes-ccm tkip  !  ssid #########  !  antenna gain 0  stbc  station-role root  no dot11 extension aironet ! interface Dot11Radio0.10  encapsulation dot1Q 10  no ip route-cache  bridge-group 10  bridge-group 10 subscriber-loop-control  bridge-group 10 spanning-disabled  bridge-group 10 block-unknown-source  no bridge-group 10 source-learning  no bridge-group 10 unicast-flooding ! interface Dot11Radio0.98  encapsulation dot1Q 98 native  no ip route-cache  bridge-group 1  bridge-group 1 subscriber-loop-control  bridge-group 1 spanning-disabled  bridge-group 1 block-unknown-source  no bridge-group 1 source-learning  no bridge-group 1 unicast-flooding ! interface Dot11Radio1  no ip address  no ip route-cache  !  encryption vlan 10 mode ciphers aes-ccm tkip  !  ssid public_SSID  !  antenna gain 0  peakdetect  dfs band 3 block  stbc  mbssid  channel width 80  channel dfs  station-role root  no dot11 extension aironet ! interface Dot11Radio1.10  encapsulation dot1Q 10  no ip route-cache  bridge-group 10  bridge-group 10 subscriber-loop-control  bridge-group 10 spanning-disabled  bridge-group 10 block-unknown-source  no bridge-group 10 source-learning  no bridge-group 10 unicast-flooding ! interface Dot11Radio1.98  encapsulation dot1Q 98 native  no ip route-cache  bridge-group 1  bridge-group 1 subscriber-loop-control  bridge-group 1 spanning-disabled  bridge-group 1 block-unknown-source  no bridge-group 1 source-learning  no bridge-group 1 unicast-flooding ! interface GigabitEthernet0  no ip address  no ip route-cache  duplex auto  speed auto ! interface GigabitEthernet0.10  encapsulation dot1Q 10  no ip route-cache  bridge-group 10  bridge-group 10 spanning-disabled  no bridge-group 10 source-learning ! interface GigabitEthernet0.98  encapsulation dot1Q 98 native  no ip route-cache  bridge-group 1  bridge-group 1 spanning-disabled  no bridge-group 1 source-learning ! interface BVI1  mac-address #################  ip address 10.x.x.5 255.255.255.0  no ip route-cache ! ip default-gateway 10.x.x.2 ip forward-protocol nd ip http server no ip http secure-server ip http help-path www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag ! ! bridge 1 route ip ! ! ! line con 0  exec-timeout 15 0  logging synchronous  login local  length 0 line vty 0 4  exec-timeout 15 0  logging synchronous  login local  length 0  transport input all ! end   ap# ... View more

Hi, I'm a newbie and have been stuck trying to find answers to a few basic questions for several weeks.  I'm not sure why I have not been able to find this information on the web - probably using the wrong search terms.  Per the attached diagram, the network consists of a router, 2 switches, an access point and multiple VLANs, but we may need to add a router in each location as we grow. My questions are:   1) Should I assign a static IP address to the ports that connect the router (g0/1 & g0/2) and switches (GigabitEthernet1/0/52) and access point (BVI1)?  If so, should I assign all of the ports to the same subnet, i.e. each of these ports has an address in the subnet 172.16.1.x? 1a) If router port g0/1 IP address is 172.16.1.1, should I use that as the address for the ip default gateway on switch1? 1b) Does the subnet automatically become the management vlan?   2) What is a good practice to use for assigning IP addresses to the VLAN sub-interfaces on the router? SO far, I have to assign ip addresses to both router ports to the radio sub-interfaces for each vlan on the access point.   I would appreciate any suggestions on how to manage this as the network grows?   ROUTER PORT G0/1 (connects to switch1)                   ROUTER PORT g0/2 (connects to switch2)      GigabitEthernet0/1.10 IP address = 10.10.10.1            GigabitEthernet0/2.10 IP address = 10.10.10.2  GigabitEthernet0/1.20 IP address = 10.20.20.1            GigabitEthernet0/2.10 IP address = 10.20.20.2 GigabitEthernet0/1.30 IP address = 10.30.30.1            GigabitEthernet0/2.10 IP address = 10.30.30.2 GigabitEthernet0/1.40 IP address = 10.40.40.1            GigabitEthernet0/2.10 IP address = 10.40.40.2 GigabitEthernet0/1.50 IP address = 10.50.50.1            GigabitEthernet0/2.10 IP address = 10.50.50.2   3)  I want to change the native VLAN and configured the trunk ports on both switches with the command switchport trunk native vlan 666. I also created a sub-interface for the (new) native vlan on each radio on the access point and configured it using the command and encapsulation dot1q 777 native.  I assume that I need to create a sub-interface for this VLAN on both internal-facing router ports. Do I need to assign an IP address to this sub-interface?   4) If some of the people/devices at Site A, i.e. connected to VLAN20 and switch1, move to Site B, i.e. connected to switch2, what is the best way to support their access to VLAN20.        Option 1: Add VLAN20 to switch2 - I assume that I would need to add the VLAN and create an SVI.  Does the SVI on both switches need an IP address?      Option 2: Create a new VLAN and enable inter-VLAN routing between them   5) I currently have DHCP servers on each switch providing ip addresses for the VLANs, should I move to a single DHCP server on the router for all VLANs?   6) Should I use the IP address of the router sub-interface as the DHCP dns-server and DHCP default router?   I would greatly appreciate any suggestions. ... View more