Cisco 2950 Vs. 2960
May 12, 2008Is there much advantage to going with the 2960 series switches vs. the 2950 series? Basically I'm looking at 24 port and 48 port switches (10/100) with GBIT (copper) uplinks.
View 2 Replies
ADVERTISEMENT
New Cisco 2960 Switch Keeps Going Offline Every 12 Hours.
Dec 9, 2007new Cisco 2960 switch keeps going offline every 12 hours.
I will power cycle it, then about 12 hours later it goes off again. This is a brand new switch.
802.3ad (bonding/link Aggregation) On Cisco 2960 W/linux
Aug 14, 2009I thought with 802.3ad I could aggregate the links and thus turn a 3x100 megabit pipes to one 300 meg pipe. The problem is when using the default options (and layer2 xmit mode) I only get the bandwidth of a single connection and I see no other traffic on the other two. Here is output from /proc/net/bonding/bond0:
Code:
Ethernet Channel Bonding Driver: v3.3.0 (June 10, 2008)
Bonding Mode: IEEE 802.3ad Dynamic link aggregation
Transmit Hash Policy: layer2 (0)
MII Status: up
MII Polling Interval (ms): 100
Up Delay (ms): 0
Down Delay (ms): 0
802.3ad info
LACP rate: slow
Active Aggregator Info:
Aggregator ID: 2
Number of ports: 3
Actor Key: 9
Partner Key: 3
Partner Mac Address: 00:1e:f6:xx:xx:xx
Slave Interface: eth0
MII Status: up
Link Failure Count: 0
Permanent HW addr: 00:1e:8c:xx:xx:xx
Aggregator ID: 1
Slave Interface: eth2
MII Status: up
Link Failure Count: 0
Permanent HW addr: 00:04:23:xx:xx:xx
Aggregator ID: 1
Slave Interface: eth3
MII Status: up
Link Failure Count: 0
Permanent HW addr: 00:04:23:xx:xx:xx
Aggregator ID: 1
Basically it works in that I get a connection but its no different from being on a regular 100/100 connection. Downloading files my machine from completely different networks always only goes out one connection. I don't even see any received/sent packets from the other two interfaces.
When I tell it to use layer3+4 via the xmit_hash_policy paramter when loading the module IE:
modprobe bonding mode=4 xmit_hash_policy=layer3+4 miimon=100
It seems to work as expected except it looks like all incomming traffic comes in on the same interface and its not much different from a normal load balancing (except from a single IP address). I will stick to this method if I have no choice as I don't really care about the download all that much and it seems to do a good job.
Here is /proc/net/bonding/bond0 from that config:
Code:
Ethernet Channel Bonding Driver: v3.3.0 (June 10, 2008)
Bonding Mode: IEEE 802.3ad Dynamic link aggregation
Transmit Hash Policy: layer3+4 (1)
MII Status: up
MII Polling Interval (ms): 100
Up Delay (ms): 0
Down Delay (ms): 0
802.3ad info
LACP rate: slow
Active Aggregator Info:
Aggregator ID: 2
Number of ports: 3
Actor Key: 9
Partner Key: 3
Partner Mac Address: 00:1e:f6:xx:xx:xx
Slave Interface: eth0
MII Status: up
Link Failure Count: 0
Permanent HW addr: 00:1e:8c:xx:xx:xx
Aggregator ID: 2
Slave Interface: eth2
MII Status: up
Link Failure Count: 0
Permanent HW addr: 00:04:23:xx:xx:xx
Aggregator ID: 2
Slave Interface: eth3
MII Status: up
Link Failure Count: 0
Permanent HW addr: 00:04:23:xx:xx:xx
Aggregator ID: 2
My understanding is that with layer2 it should just be one big fat pipe. IE: packets are fragmented and thus even a single connection should be able to sustain 300 megabits (if the other end could provide it). It seems like it just doesn't use my other interfaces at all when doing this.
Here is my config on the cisco 2960:
Code:
interface Port-channel3
switchport access vlan 100
switchport trunk allowed vlan 100
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 100
switchport trunk allowed vlan 100
switchport mode access
switchport nonegotiate
channel-protocol lacp
channel-group 3 mode active
spanning-tree portfast
!
interface FastEthernet0/38
switchport access vlan 100
switchport trunk allowed vlan 100
switchport mode access
switchport nonegotiate
channel-protocol lacp
channel-group 3 mode active
spanning-tree portfast
!
interface FastEthernet0/40
switchport access vlan 100
switchport trunk allowed vlan 100
switchport mode access
switchport nonegotiate
channel-protocol lacp
channel-group 3 mode active
spanning-tree portfast
Cisco 2950 - How To Enable "Cisco Network Assistant"
Dec 16, 2007My host has helped me to install a switch. However, I don't know how to configure using the command line. Could anyone help me?
I need to be able to connect to my Cisco switch using Cisco Network Assistant. If you know the command sequence,
Cisco 2950
May 12, 2008I'm trying to learn about network. I bought Cisco 2950 for testing. I set it up and finding out the way to cap its ports at 20Mbps or 50Mbps. Do you know what command or how to do this?
Also what command to check the port speed or to uncap the port?
MRTG For Cisco 2950
May 19, 2008I'm trying to learn setting up MRTG for my Cisco 2950. Can you please give me some guide or instruction? My server runs CentOS and cPanel.
View 8 Replies View RelatedHow To 2 Cisco 2950 Switch Connect Together
Jun 6, 2006I have 2 racks in a DC that cross connected together. Now, the datacenter gives me 1 port and I would like to put 1 switch at each rack. I have successfully set up 1 switch and connect to the internet. But, I am unable to set up the other.
Below is a diagram of what I want to do: ...
Switch Cisco 2924 Or 2950
Nov 26, 2007Since now I utilize Cisco 2924 in my racks, now I am going to install a new rack and I want to know if to install again 2924 or you recommend me 2950? what important differences (pros and cons) offers the 2950 front to 2924?
View 11 Replies View RelatedHP ProLiant DL380 G5 Vs Dell Poweredge 2950 III
Jul 1, 2008Right im about to invest in some new equipment for the business and am looking at one of the 2 above servers. Does anyone have any experience with both or either?
The spec of the machine to start is as follows:
HP Proliant DL380 G5
Intel Quad-Core Xeon 2.5Ghz
4GB Ram
3x 146GB SAS Hotswap RAID5 (OS)
5x 146GB SAS Hotswap RAID5 (Storage)
Dell Poweredge 2950 III
Intel Quad-Core Xeon 2.5Ghz
4GB Ram
3x 146GB SAS RAID5 (OS)
5x 146GB SAS RAID5 (Storage)
Both are near identical specs and the price of the HP is slightly more, is it worth it?
Cisco Pix 501
Jan 6, 2008Anyone know anything about cisco pix 501s? i need help setting one up if anyone can give me a hand.
View 14 Replies View RelatedCisco PIX 501
Jan 13, 2008I just got a Cisco PIX 501 from my IT Guy for home use and he didn't reset the firewall to default settings so there are ton of old commands in here.
Is there a command I can use to reset the firewall back to the factory default settings?
Or is there anyway I can flash it back to factory default settings?
Cisco ASA
Apr 19, 2008I am interested to buy a Cisco ASA firewall. So far I have never played with this gears and I wonder if it is easy to setup.
Is there any software provided by Cisco to setup rules and ACL thru some graphic interface software ?
Which Cisco Firewall?
Aug 21, 2007We are looking to replace our existing WatchGuard Firebox's with a hopefully more reliable firewall from Cisco's range although I'm a bit lost when it comes to the different ranges.
Could somebody suggest a firewall that is capable of:
1: Both NAT & Drop-in (bridge) mode
2: Pretty low bandwidth requirements, no more than 10mbit/s traffic
3: SNMP Monitoring
4: High availability pairing
Cisco Routers
Mar 25, 2009I am on a tight budget for a Cisco firewall. I am browsing and seeing some affordable options in the x600 series.
Please tell me, which series is best?:
1600
2600
3600
The higher the better?..
Also what about submodels, like is 1650 better than 1600?
And how can I tell how much DRAM each one can take up to?
Cisco Guard
Apr 22, 2009I see a lot of DDos related articles here at WHT. We've got hit multiple times by DDos and had to handle those attacks everytime with a different approach.
The largest one and the most well know one (we were in Times Mag, AP news, CNN, slashdot, you name it - just do a search about us on WHT) was Russian botnet cyberattack - we had to anaylyze netflow and then block everything on our edge routers, then on the firewall and then locally on the servers.
Since then we had number of other attacks, some of them we were not able to defend on the server level, while, as you can understand we can't do netwflow and manual intervention evey time somebody gets an attach.
We have very good scripts which allow to mitigate huge number of DDos attack, whet our scripts are finding attacking IPs and blocking them automatically - still some attacks could be blocked only on the router level.
I've read that Cisco Guard (I am interesed in 65xx version of it) suppose to mitigate DDos attacks in automatic mode.
Cisco Redundancy
Sep 25, 2009after months of disruption moving servers into a new data centre, our once reliable colocation company has now had nearly 6 hours downtime in the last 16 hours. So much for network redundancy.
View 5 Replies View RelatedCisco Switch
Sep 23, 2009I am looking at picking up a switch to mess around with at home. I found the following within driving distance but have no idea of which one will give me more up to date, hands on experience. Any feedback is greatly appreciated.
Used Cisco WS-C5509 Chassis with power supply ( POWER SUPPLY 34-0870-01), and fan (WSC5509FAN)
Cisco WS-X5530-E2 Supervisor Engine III Modules
Cisco Systems WS-U5537-FETX CISCO 4 PORT 100BASETX UPLINK MODULE
Cisco WS-X5234-RJ45 Switch Modules X 8
$160 each.
Cisco WS-C5500 Chassis
POWER SUPPLY 34-0773-03
Cisco Ws-x5550 Supervisor Engine Iii G-series
WS-X5234-RJ45 X 11
For $200
Cisco WS-C5505 Chassis
Cisco WS-X5530-E2 Supervisor Engine III Modules
Cisco WS-U5533-FEFX-MMF Supervisor Engine III Uplink Modules
Cisco WS-X5225R Switch Modules X 2
For $140
Used Cisco Gear
Jun 5, 2007Other than eBay does anyone know of a supplier of Cisco gear that has good prices and knows their Cisco equipment?
View 14 Replies View RelatedCisco Routing
Jul 27, 2007I am setting up a small ccna lab and i have RIP working and i can ping my lan from both routers, but only certain hosts on the lan from the one router the setup is
LAN (192.168.1.0/255.255.255.0)
|
/
router 1 E0 192.168.1.45
Serial0 10.10.10.1
|
/
Serial0 10.10.10.2 (of router2)
|
/
E0 192.168.3.250
E1 192.168.2.250
Lo 192.168.5.4
I can ping 192.168.1.102 from router 2 and 192.168.1.45 but no not 192.168.1.201 ... or 192.168.1.1
also i can ping 192.168.5.4 from 192.168.1.102 which is a linux box and an ip route to tell it that 192.168.5.0 can be gotten from 192.168.1.45
Cisco Firewall
Jul 12, 2007What is the difference between the Cisco PIX and Cisco ASA Firewall Systems?
Also which firewall do you guys recommend for a rack of servers
Which Cisco Router To Use
Jul 11, 2007I am currently looking at these Cisco switches:
- Cisco 2924 WS-C2924-XL-EN Enterprise Switch
- Cisco 2950 WS-C2950-24 Catalyst Switch
- Cisco 3512 WS-C3512-XL-EN Enterprise Switch
- Cisco 3524 WS-C3524-XL-EN Enterprise Switch
- Cisco 3548 WS-C3548-XL-EN Enterprise Switch
1) I was recommended to chose the XL-EN model switches because it seems they have more Memory, but the second one in the list (Catalyst) is not a XL-EN, is that going to have any affect performance wise? or it doesn't really matter?
2) I was also recommended to choose managed switches because that way I can use the SNMP features to measure bandwidth, are any of the switches above unmanaged?
3) I also want to be able to manage the switch remotely, web managed, are any of the switches above web-manageable?
4) Most importantly, when my datacenter give me a 100mbit drop, I dont know which port to plug it in in the 29** series. In the 35** I see it clearly but I am not able to see it in the 29**, any ideas?
5) On some of these switches I see a special port called "Console", what is it? where does that connect to?
6) Do any of the switches above not have a console port?
Cisco ASA Security
Sep 28, 2007My network currently looks like this :
ISP ->> L3 Switch ->> Firewall (Transparent Mode) ->> Switch ->> Servers
I have a single /24 and my firewall is on x.2 and routes traffic for each of the servers.
Now i have a new Cisco ASA 5510 that i want to replace the aging firewall currently in place, however i dont want to put the firewall into transparent mode because i dont want to lose all the functionality.
Now with most firewalls your outside subnet cannot be the same as your inside subnet, which is fine if you are using NAT but i dont want to NAT. I need all of my servers to remain with their public ip addresses.
So what is the ideal way to setup something like this? Request my ISP give me a /30 for the ASA outside interface or something? And then ask them to route my /24 through the /30 new subnet?
Qos Cisco 3600
Sep 18, 2007whether I can grant a specific vlan priority over all other traffic..and if so does anyone know an appropriate site where I can find documentation on how to do so?
View 0 Replies View RelatedCisco Switches
Jun 19, 2007Is there such a switch?
Do cisco do a 24 port 1000Mbs switch that you can control each port speed through a web based software?
Cisco Pix Firewall
Apr 27, 2007Does anyone know of a place or have for sale a Cisco PIX firewall? I have looked into ebay but was wondering what else is out there?
View 3 Replies View RelatedCisco Licensing
May 16, 2007From the posts in this forum it would appear that a number of forumites are colocation service providers and web hosters that use Cisco gear.
I was reviewing the Cisco End User License Agreement that was included in the router box. Under the General Limitations section, "Customer shall have no right, and Customer specifically agrees not to:", item (iv) states, "use or permit the Software to be used to perform services for third parties, whether on a service bureau basis or time sharing basis or otherwise, without the express written authorization of Cisco".
Does this mean that a service provider is required to acquire
a separate license similar to the Microsoft Service provider license?
Cisco 2960G
Mar 1, 2007I have a cisco 2960G switch that I used for colocation, the colocation provider does all the routing all I need is this switch. It's just a plug and play operation, however I now need to do some more difficult stuff.
So, I plugged their bandwidth uplink into port 20.
I have really no idea on how to setup anything other than the basic of the switch.
Is it possible to setup Private Vlans in this situation? I am in need of a setup like this:
All port 1-19 in private vlans, but still able to communicate with port 20 to get internet access. Port 1-19 cannot communicate with each other except by going through port 20, through the internet.
I also want to know if it's possible to statically assign each port with a specific IP? Just say I want all traffic to a static ip to only go to port 1? Is that possible? I want to be able to limit the control of IPs through the switch not through the server.
Right now all my IPs are assign on the server level, meaning the server can take each other IPs and mess with each other connections.
Cisco 2851
Oct 1, 2007at 11x 2851's. When we got the quote they had added on Cisco Advanced IP SERVICES.
We arent sure if that is just the security bundle, or something they are trying to toss on for more money.
2851 w/ AC PWR,2GE,4HWIC,3PVDM,1NME-XD,2AIM,IP BASE,64F/256D
Cisco 2800 ADVANCED IP SERVICES
Maximum Compact and USB Flash
Four port 10/100 Ethernet switch interface card
Updated 1-Port T1/Fractional T1 DSU/CSU WAN Interface Card
64 to 256 MB CF Factory Upgrade for Cisco 2800 Series
256MB USB Flash Token for Cisco 1800/2800/3800 series
Cisco 2821/51 AC power supply
Power Cord,110V
Device manager for routers
256MB DDR DRAM Memory factory default for the Cisco 2800
8X5XNBD Hardware Replacement 2851 w/ AC PWR,2GE,4HWIC,3 (1 Year)
Cisco IOS Licensing
Aug 3, 2007My understanding is that the IOS software running in most of their products is non-transferable. So clearly this prevents a user from receiving updates if they purchase used hardware (i.e. ebay). However, isn't it possible to purchase an IOS software license from Cisco for any of their supported product?
Their web site is a mess! I've spent, literally, hours on their site trying to figure out how to purchase such a license, or how to purchase a service plan that might entitle me to IOS updates.
And how does "SMARTnet" fit into this puzzle? Do I need a SMARTnet contract to download maintenance updates, even for *new* hardware that I've purchased?
Which Cisco Firewall Is Suitable For Me
Oct 16, 2009i want a Cisco firewall suitable for one dedicated server protection, that server would host up to 30 vps
and i may buy another server in future, so what do you recommend?
Cisco Firewall Price
Oct 16, 2009from where can i get the price of cisco firewall?
View 4 Replies View Related