I am trying to add an isolated guest network to my router/ap. I was able to trunk vlan 1 at the AP but I am unable to get a dhcp address or ping the router with a manual address from SSID 'tmp' on vlan100   Router LAR#sh run Building configuration...   Current configuration : 5519 bytes ! ! Last configuration change at 20:48:47 UTC Sat Oct 17 2015 by mlar version 15.3 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname LAR ! boot-start-marker boot-end-marker ! ! logging buffered 51200 warnings ! no aaa new-model service-module wlan-ap 0 bootimage autonomous ! ! ! ! !     ! ip dhcp excluded-address 10.0.0.1 ip dhcp excluded-address 10.0.0.1 10.0.0.64 ip dhcp excluded-address 192.168.1.1 ip dhcp excluded-address 192.168.1.1 192.168.1.64 !          ip dhcp pool LAR  import all  network 10.0.0.0 255.255.255.0  default-router 10.0.0.1   dns-server 10.0.0.2  ! ip dhcp pool TMP  import all  network 192.168.1.0 255.255.255.0  default-router 192.168.1.1   dns-server 192.168.1.1  ! ! ! no ip domain lookup ip domain name lariv ip host itxfiler 10.0.0.2 ip name-server 10.0.0.2 ip cef ipv6 spd queue min-threshold 62 ipv6 spd queue max-threshold 63 no ipv6 cef ! multilink bundle-name authenticated ! ! crypto pki... ! license accept end user agreement license boot module c1900 technology-package securityk9 license boot module c1900 technology-package datak9 hw-module ism 0 ! ! !          username mlar privilege 15 secret 5 ... ! redundancy ! ! ! ! ! !  ! ! ! ! ! ! ! ! interface Embedded-Service-Engine0/0  no ip address  shutdown ! interface GigabitEthernet0/0  description " *** LAN ACCESS PORT *** "  no ip address  shutdown  duplex auto  speed auto ! interface wlan-ap0  description " *** AP MGMT *** "  ip unnumbered Vlan1  arp timeout 0  no mop enabled  no mop sysid ! interface GigabitEthernet0/1  description " *** WAN DHCP ***  ip ddns update hostname lariv.servebeer.com  ip ddns update no-ip  ip address dhcp hostname lar  ip nat outside  ip virtual-reassembly in  duplex auto  speed auto ! interface Wlan-GigabitEthernet0/0  description " *** BUILTIN 3502 AP *** "  switchport mode trunk  no ip address ! interface GigabitEthernet0/1/0  description " *** LAN ACCESS PORT *** "  no ip address ! interface GigabitEthernet0/1/1  description " *** LAN ACCESS PORT *** "  no ip address ! interface GigabitEthernet0/1/2  description " *** LAN ACCESS PORT *** "  no ip address !          interface GigabitEthernet0/1/3  description " *** LAN ACCESS PORT *** "  no ip address  power inline never ! interface GigabitEthernet0/1/4  description " *** LAN ACCESS PORT *** "  no ip address ! interface GigabitEthernet0/1/5  description " *** LAN ACCESS PORT *** "  no ip address ! interface GigabitEthernet0/1/6  description " *** NAS 2x GE LACP *** "  no ip address  shutdown  no cdp enable ! interface GigabitEthernet0/1/7  description " *** NAS 2x GE LACP *** "  no ip address  no cdp enable ! interface Vlan1  ip address 10.0.0.1 255.255.255.0  ip nat inside  ip virtual-reassembly in ! interface Vlan100  description TMP  ip address 192.168.1.1 255.255.255.0  ip nat inside  ip virtual-reassembly in  no autostate ! ip forward-protocol nd ! no ip http server ip http access-class 1 ip http authentication local no ip http secure-server ip http timeout-policy idle 60 life 86400 requests 10000 ! ip nat inside source list 1 interface GigabitEthernet0/1 overload ip nat inside source static tcp 10.0.0.2 51413 interface GigabitEthernet0/1 51413 ip nat inside source static udp 10.0.0.2 51413 interface GigabitEthernet0/1 51413 ! ! route-map INCOMING permit 10  match ip address 199 ! ! access-list 1 permit 10.0.0.0 0.0.0.255 ! control-plane ! ! ! line con 0  login local line aux 0 line 2  no activation-character  no exec  transport preferred none  transport output ssh  stopbits 1 line 67  no activation-character  no exec  transport preferred none  transport input ssh  transport output ssh line vty 0 4  access-class 1 in  privilege level 15  login local  transport input ssh line vty 5 15  access-class 1 in  privilege level 15  login local  transport input ssh ! scheduler allocate 20000 1000 ! end LAR#sh vlans   No Virtual LANs configured.   LAR#sh vlan-switch    VLAN Name                             Status    Ports ---- -------------------------------- --------- ------------------------------- 1    default                          active    Gi0/1/0, Gi0/1/1, Gi0/1/2, Gi0/1/3, Gi0/1/4, Gi0/1/5, Gi0/1/6, Gi0/1/7 1002 fddi-default                     act/unsup  1003 token-ring-default               act/unsup  1004 fddinet-default                  act/unsup  1005 trnet-default                    act/unsup    VLAN Type  SAID       MTU   Parent RingNo BridgeNo Stp  BrdgMode Trans1 Trans2 ---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------ 1    enet  100001     1500  -      -      -        -    -        1002   1003 1002 fddi  101002     1500  -      -      -        -    -        1      1003 1003 tr    101003     1500  1005   0      -        -    srb      1      1002 1004 fdnet 101004     1500  -      -      1        ibm  -        0      0    1005 trnet 101005     1500  -      -      1        ibm  -        0      0     local.ap#sh run                 Building configuration...   Current configuration : 3584 bytes ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname local.ap ! logging rate-limit console 9 enable secret 5 $1$8CzD$PqkVaQHWA.tZ6F078QUgs/ enable password 7 073C71405D5A09 ! no aaa new-model no ip source-route ip domain name lariv ! ! dot11 syslog ! dot11 ssid lar    vlan 1    authentication open     authentication key-management wpa version 2    mbssid guest-mode    wpa-psk ascii 7 03075A0D031D204F4B1B ! dot11 ssid tmp    vlan 100    authentication open     authentication key-management wpa version 2    mbssid guest-mode    wpa-psk ascii 7 111D1C16031C0E18557878 ! ! ! username mlar privilege 15 password 7 ... ! ! bridge irb ! ! interface Dot11Radio0  no ip address  no ip route-cache  !  encryption mode ciphers aes-ccm tkip   !  encryption vlan 100 mode ciphers aes-ccm tkip   !  encryption vlan 1 mode ciphers aes-ccm tkip   !  ssid lar  !  ssid tmp  !  antenna gain 0  mbssid  speed  basic-1.0 basic-2.0 basic-5.5 basic-11.0 basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.  station-role root  beacon period 1000 ! interface Dot11Radio0.1  encapsulation dot1Q 1 native  no ip route-cache  bridge-group 1  bridge-group 1 block-unknown-source  no bridge-group 1 source-learning  no bridge-group 1 unicast-flooding ! interface Dot11Radio0.100  encapsulation dot1Q 100  no ip route-cache  bridge-group 100  bridge-group 100 block-unknown-source  no bridge-group 100 source-learning  no bridge-group 100 unicast-flooding  bridge-group 100 spanning-disabled ! interface Dot11Radio1  no ip address  no ip route-cache  !  encryption mode ciphers aes-ccm tkip   !  encryption vlan 100 mode ciphers aes-ccm tkip   !  encryption vlan 1 mode ciphers aes-ccm tkip   !  ssid lar  !          antenna gain 0  dfs band 3 block  speed  basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.  channel dfs  station-role root  beacon period 1000 ! interface Dot11Radio1.1  encapsulation dot1Q 1 native  no ip route-cache  bridge-group 1  bridge-group 1 subscriber-loop-control  bridge-group 1 block-unknown-source  no bridge-group 1 source-learning  no bridge-group 1 unicast-flooding  bridge-group 1 spanning-disabled ! interface Dot11Radio1.100  encapsulation dot1Q 100  no ip route-cache  bridge-group 100  bridge-group 100 subscriber-loop-control  bridge-group 100 block-unknown-source  no bridge-group 100 source-learning  no bridge-group 100 unicast-flooding  bridge-group 100 spanning-disabled ! interface GigabitEthernet0  description the embedded AP GigabitEthernet 0 is an internal interface connecting AP with the host router  no ip address  no ip route-cache  no keepalive  bridge-group 1  no bridge-group 1 source-learning  bridge-group 1 spanning-disabled ! interface GigabitEthernet0.100  encapsulation dot1Q 100  no ip route-cache  no keepalive  bridge-group 100  no bridge-group 100 source-learning  bridge-group 100 spanning-disabled ! interface BVI1  ip address 10.0.0.3 255.255.255.0  no ip route-cache ! ip default-gateway 10.0.0.1 no ip http server no ip http secure-server bridge 1 protocol ieee bridge 1 route ip bridge 100 protocol ieee ! ! ! line con 0  privilege level 15  login local  no activation-character line vty 0 4  login local  transport input all ! cns dhcp end     ... View more

I am running an absolutely barebones nat inside/outside-dhcp config with my local net as 10.0.0.2/24. Inside being vlan 1 using an ehwic 8-port switch and Gi0/0 shutdown and not in use.   I want to open my wan dhcp interface Gi0/1 51413 to inside 10.0.0.2 51413. After much research the tried and true way is: ip nat inside source static tcp 10.0.0.2 51413 int Gi0/1 51413 ip nat inside source static udp 10.0.0.2 51413 int Gi0/1 51413 ... This is the only access rule and list: ... ip http access-class 1 access-list 1 permit 10.0.0.0 0.0.0.255 ...   The ip nat inside command alone does not appear to open the wan port.   I am on IOS 15, what is missing? ... View more

Purpose: Provide a known method of installing the UCSM Emulator on KVM. Scope: Cisco UCS and Red Hat System Administrators Requirements: - An available LVM-VG with aproximately 20Gb free - Packages libvirt and virt-manager installed on the host - Provided TechZone virt-manager XML file Download Links: - UCSM Emulator 2.2.3a alternate zip download - UCSM Emulator 2.2.3a firmware metapackage 1. Convert vmdk files to raw for i in `ls *.vmdk` ; do qemu-img convert $i -O raw $i.raw ; done 2. Create logical volumes for kvm Locate a volume group with free space: [root@itxfiler qemu]# vgs VG #PV #LV #SN Attr VSize VFree vg_itxfiler 1 9 0 wz--n- 595.68g 165.23g Identify the size and create new logical volumes: # ls -l *.raw | awk '{print $5 " " $9}' 1073741824 ucspe.vmdk.raw 1073741824 ucspe-0.vmdk.raw 4294967296 ucspe-1.vmdk.raw 1073741824 ucspe-2.vmdk.raw Create the partitions: lvcreate -L 1073741824b -n ucsemu vg_itxfiler lvcreate -L 1073741824b -n ucsemu0 vg_itxfiler lvcreate -L 1073741824b -n ucsemu1 vg_itxfiler lvcreate -L 1073741824b -n ucsemu2 vg_itxfiler 3. Migrate raw partition data to volumes dd if=ucspe.vmdk.raw of=/dev/vg_itxfiler/ucsemu dd if=ucspe-0.vmdk.raw of=/dev/vg_itxfiler/ucsemu0 dd if=ucspe-1.vmdk.raw of=/dev/vg_itxfiler/ucsemu1 dd if=ucspe-2.vmdk.raw of=/dev/vg_itxfiler/ucsemu2 4. Import the UCSM Emulator Domain Profile XML [root@itxfiler qemu]# cat ucsEmu.xml <!-- UCSM Emulator Working-Minimal noSE --> <domain type='kvm'>   <name>UCS Emulator</name>   <uuid>87f8f4a3-3687-4a33-8f7f-7928523d1bf3</uuid>   <description>Cisco UCS Manager 2.2.3a Emulator</description>   <memory unit='KiB'>2097152</memory>   <currentMemory unit='KiB'>2097152</currentMemory>   <vcpu placement='static'>1</vcpu>   <os>     <type arch='x86_64' machine='rhel6.5.0'>hvm</type>     <boot dev='hd'/>   </os>   <features>     <acpi/>     <apic/>     <pae/>   </features>   <clock offset='utc'>     <timer name='rtc' tickpolicy='catchup'/>     <timer name='pit' tickpolicy='delay'/>     <timer name='hpet' present='no'/>   </clock>   <on_poweroff>destroy</on_poweroff>   <on_reboot>restart</on_reboot>   <on_crash>restart</on_crash>   <devices>     <emulator>/usr/bin/qemu-kvm</emulator>     <disk type='block' device='disk'>       <driver name='qemu' type='raw' cache='none' io='native'/>       <source dev='/dev/vg_itxfiler/ucsemu'/>       <target dev='hda' bus='ide'/>       <address type='drive' controller='0' bus='0' target='0' unit='0'/>     </disk>     <disk type='block' device='disk'>       <driver name='qemu' type='raw' cache='none' io='native'/>       <source dev='/dev/vg_itxfiler/ucsemu0'/>       <target dev='hdb' bus='ide'/>       <address type='drive' controller='0' bus='0' target='0' unit='1'/>     </disk>     <disk type='block' device='disk'>       <driver name='qemu' type='raw' cache='none' io='native'/>       <source dev='/dev/vg_itxfiler/ucsemu1'/>       <target dev='hdc' bus='ide'/>       <address type='drive' controller='0' bus='1' target='0' unit='0'/>     </disk>     <disk type='block' device='disk'>       <driver name='qemu' type='raw' cache='none' io='native'/>       <source dev='/dev/vg_itxfiler/ucsemu2'/>       <target dev='hdd' bus='ide'/>       <address type='drive' controller='0' bus='1' target='0' unit='1'/>     </disk>     <controller type='ide' index='0'>       <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x1'/>     </controller>     <controller type='virtio-serial' index='0'>       <address type='pci' domain='0x0000' bus='0x00' slot='0x08' function='0x0'/>     </controller>     <controller type='usb' index='0'>       <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x2'/>     </controller>     <interface type='bridge'>       <mac address='00:0c:29:08:a6:a0'/>       <source bridge='br0'/>       <model type='e1000'/>       <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/>     </interface>     <interface type='bridge'>       <mac address='00:0c:29:08:a6:aa'/>       <source bridge='br0'/>       <model type='e1000'/>       <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/>     </interface>     <interface type='bridge'>       <mac address='00:0c:29:08:a6:b4'/>       <source bridge='br0'/>       <model type='e1000'/>       <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/>     </interface>     <serial type='pty'>       <target port='0'/>     </serial>     <console type='pty'>       <target type='serial' port='0'/>     </console>     <channel type='spicevmc'>       <target type='virtio' name='com.redhat.spice.0'/>       <address type='virtio-serial' controller='0' bus='0' port='1'/>     </channel>     <input type='mouse' bus='ps2'/>     <graphics type='spice' autoport='yes' listen='127.0.0.1' keymap='en-us'>       <listen type='address' address='127.0.0.1'/>     </graphics>     <video>       <model type='qxl' ram='65536' vram='65536' heads='1'/>       <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/>     </video>     <memballoon model='virtio'>       <address type='pci' domain='0x0000' bus='0x00' slot='0x09' function='0x0'/>     </memballoon>   </devices> </domain> Now import it into virt-manager with virsh: #  virsh define /etc/libvirt/qemu/ucsEmu.xml *You may need to configure a static keymap of en-us in virt-manager to use the console. Launch CLI GUI w/o Browser: (survives upgrades) # javaws http://yourIpAddr/ucsm/ucsm.jnlp ! First-login: admin / password    Attachments: ! ! ... View more