I have a 2960X POE switch that I have used to isolate a server. I am using an ACL to limit user access to it and also have a backup appliance that needs to connect to the server to keep the backup's up to date. BUT... the backup server keeps losing connection to the server I'm trying to isolate. What's weird is... after removing the ACL from the interface... trace-routes still fail.    I'd assume the switches would find where they're supposed to go via L2 discovery... but I've even tried static routes with ip routing enabled and it's still flaky. Every other device we have can connect without any issues.   Any thoughts?  ... View more

Hello, I have a 4351-ISR and am experiencing Heavy packet loss with one of the subnets I have uplinked. Is there a command to use in order to look at the health and or logs that the NIM might have which aren't showing on the traditional show commands?   The command I'm using is... 4351#sh hw-module subslot 0/1 ? ! attribute   Show module attribute information   entity   entity MIB details - not intended for production use oir   Show oir summary sensors   Environmental sensor summary subblock   subblock details - not intended for production use tech-support   Show subslot information for Tech-Support ! Entity state for SPA in subslot 0/1 SPA type: (0xC72) NIM-ES2-4 last spa type: (0xC72) NIM-ES2-4 oper_status: (1) ok card status: (2) full last trap: spa type: (0xC72) NIM-ES2-4 last trap: oper status: (1) ok last_spa_env_get_ok: false last_spa_env_read_time: (28760970478) 4294967295 msecs ago resync_reqd: false resync_count: 0 SPA physical index: 1245 SPA container index: 1001 SPA has no transceiver subblock non-zero port indices: port 0 has index 1246 port 1 has index 1247 port 2 has index 1248 port 3 has index 1249 non-zero SPA temp sensors: all temp sensor indices are zero non-zero SPA volt sensors: all volt sensor indices are zero non-zero SPA power sensors: sensor 0 has index 1302   I don't get much beyond the actual hardware and status.   Here's the packet loss I'm getting...   Request timed out. Request timed out. Request timed out. Request timed out. Reply from 192.168.X.X: bytes=32 time=5ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Request timed out. Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Request timed out. Request timed out. Request timed out. Request timed out. Request timed out. Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Request timed out. Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Request timed out. Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Request timed out. Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Request timed out. Reply from 192.168.X.X: bytes=32 time=8ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Reply from 192.168.X.X: bytes=32 time=8ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Reply from 192.168.X.X: bytes=32 time=10ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252 Reply from 192.168.X.X: bytes=32 time=2ms TTL=252     ... View more

Is there any way to use a SM-ES3G-16-P service module (originally for a 3945) on a 4351? It appears you can use the SM for the 4351 ( SM-X-ES3-16-P)  on the 3945. Can we not go the other way? ... View more

We have a Radius(RSA) server that provides MFA or our Remote VPN connections. Is it possible to add a secondary Radius IP under the "Radius Server Group" in the case that one Radius sever goes down the other will still authenticate the authentication requests? AND is it as simple as adding the second sever IP to the "IP/Hostename" field. ... View more

We have a Point-to-Point E-line between to local branches and I was wondering if it is possible to link two switches together over it? No available ports on the router at the remote branch.    One switch is a Cisco 3750 and the other is a Cisco 2960X. My theory was to create a NEW vlan for the two switches to route between each other on the connected interfaces. I researched EFP and EVC discovering neither of these switches support service instances or Domain bridging... just searching for a work around. The 3750 has ip routing enabled... I could enable it on the 2960X so they could route between each other. Looking for input before execution as these devices are used for critical systems. The E-Line is for DR.   Thanks! ... View more