tag:blogger.com,1999:blog-30125233323143708422024-02-02T10:08:47.688-05:00Cisco Network AdminAll about cisco sample commands and my day to day experience at work with our network.Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.comBlogger19125tag:blogger.com,1999:blog-3012523332314370842.post-52165937983995478002015-10-22T14:18:00.000-04:002015-10-22T14:52:32.353-04:00Allow HSRP on certain VLANs on Cisco OTVI was working with a vendor and one of their requirements was to split their two routers between the two sites and enable HSRP. We are running OTV to extend layer 2 between the two sites. To avoid sub optimal switching and routing, I created filters to prevent HSRP peers to see each other between the two data centers. Allowing HSRP traffic across OTV is NOT Cisco best practices but there times that we have to do exceptions right? So how do you allow HSRP to cross OTV? Follow the three simple steps below to allow HSRP. You need to allow this to all your OTV instances.<br />
<br />
<br />
<br />
<a href="https://www.blogger.com/blogger.g?blogID=3012523332314370842" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="" border="0" height="127" src="data:image/png;base64,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" style="cursor: move;" title="Allowing VLANS to allow HSRP on OTV " width="400" /></a><br />
Step 1. Do not add the VLAN in your VLAN filter list (VLAN 5 is the vlan we want to allow)<br />
<br />
<span style="color: #cc0000;">vlan filter HSRP_Localization vlan-list 2,3,4,7</span><br />
<br />
Step 2. Do not add the VLAN in your arp inspection filter list (VLAN 5 is the vlan we want to allow)<br />
<br />
<span style="color: #cc0000;">ip arp inspection filter HSRP_VMAC_ARP vlan 2,3,4,7 </span><br />
<br />
Notice that VLAN 5 is not included meaning it will not be filtered.<br />
<br />
Step 3. Identify the mac address of the HSRP you want to allow. You will most likely find this in the active router side since the standby router will not see the arp table for HSRP 1.1.1.1 because it still being filtered. <br />
<br />
<br />
SiteA-Nexus#sh ip arp | inc 1.1.1.1<br />
1.1.1.1 00:17:52 <span style="color: #cc0000;">0000.0c07.ac05</span> Vlan5<br />
<br />
<br />
Once you determine the mac address, add it to your route-map<br />
<br />
<span style="color: #cc0000;"><b>mac-list OTV_HSRP seq 5 permit 0000.0c07.ac05 ffff.ffff.ffff</b></span><br />
mac-list OTV_HSRP seq 10 deny 0000.0c07.ac00 ffff.ffff.ff00<br />
mac-list OTV_HSRP seq 11 deny 0000.0c9f.f000 ffff.ffff.f000<br />
mac-list OTV_HSRP seq 15 deny 0100.5e00.0000 ffff.ffff.ff00<br />
mac-list OTV_HSRP seq 20 permit 0000.0000.0000 0000.0000.0000<br />
route-map OTV_HSRP_filter permit 10<br />
match mac-list OTV_HSRP<br />
<br />
If you are wondering what is the ffff.ffff.ffff this is a wildcard to match all. <br />
<br />
<br />
<br />
<br />
<br />Anonymoushttp://www.blogger.com/profile/17947167929418704928noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-76844535369117195892011-04-15T15:15:00.006-04:002011-04-15T16:16:45.557-04:00Cisco ACE Appliance Admin Context Sample Configuration<span style="font-size:100%;">Below is a sample configuration of the Admin Context of the Cisco ACE Appliance not the MODULE.<br /><br /></span><span style="font-size:100%;">hostname ACE_ONE </span><span style="font-size:100%;"><span style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 204, 0);">-> Hostname of Primary ACE</span><br /></span></span><span style="font-size:100%;">peer hostname ACE_TWO <span style="color: rgb(255, 204, 51);">-> Optional if you have a secondary ACE</span><br /></span><span style="font-size:100%;"><span style="color: rgb(255, 0, 0);"><br /></span></span><span style="font-size:100%;">interface port-channel 1<span style="color: rgb(255, 204, 51);"> </span><span style="color: rgb(255, 204, 51);">-> Channel Group for ACE</span><br />description Port-Channel 1<br />switchport trunk allowed vlan 1-1024 <span style="color: rgb(255, 0, 0);"> <span style="color: rgb(255, 204, 51);">-> VLAN Trunks to allow</span></span><br />no shutdown<br /></span><span style="font-size:100%;"><span style="color: rgb(255, 0, 0);"><br /></span></span><span style="font-size:100%;"><span style="color: rgb(255, 204, 51);">Create a port channel on your switch and bind all 4 interfaces total 4 gig connections. </span><br /></span><span style="font-size:100%;">interface gigabitEthernet 1/1 </span><span style="font-size:100%;"><br /></span><span style="font-size:100%;"> speed 1000M<br />duplex FULL<br />channel-group 1<br />no shutdown<br /><br />interface gigabitEthernet 1/2<br />speed 1000M<br />duplex FULL<br />channel-group 1<br />no shutdown<br /><br />interface gigabitEthernet 1/3<br />speed 1000M<br />duplex FULL<br />channel-group 1<br />no shutdown<br /><br />interface gigabitEthernet 1/4<br />speed 1000M<br />duplex FULL<br />channel-group 1<br />no shutdown<br /><br /><br /><br />clock timezone standard EST<br />clock summer-time standard EDT<br />ntp server ntp.time.com<br /><br /><br />access-list ALL line 8 extended permit ip any any <span style="color: rgb(255, 0, 0);"> <span style="color: rgb(255, 204, 51);">-> This access will permit all traffic inbound</span></span><br /><br /><br />class-map type management match-any remote_access<span style="color: rgb(255, 204, 51);"> </span><span style="color: rgb(255, 204, 51);">-> Create a class map for management </span><br />2 match protocol xml-https any<br />3 match protocol icmp any<br />4 match protocol telnet any<br />5 match protocol ssh any<br />6 match protocol http any<br />7 match protocol https any<br />8 match protocol snmp any<br /><br />policy-map type management first-match remote_mgmt_allow_policy<span style="color: rgb(255, 0, 0);"> <span style="color: rgb(255, 204, 51);">-> Policy map for management</span></span><br />class remote_access<br />permit<br /><br />interface vlan 100<br />ip address 10.20.100.10 255.255.255.0<span style="color: rgb(255, 0, 0);"> <span style="color: rgb(255, 204, 51);">-> IP Address of main ACE</span></span><br /></span><span style="font-size:100%;">peer ip address 10.20.100.11 255.255.255.0<span style="color: rgb(255, 204, 51);"> </span><span style="color: rgb(255, 204, 51);">-> Optional if you have a secondary ACE</span><br /></span><span style="font-size:100%;"> access-group input ALL<span style="color: rgb(255, 204, 51);"> -> Access-list ALL </span><br />service-policy input remote_mgmt_allow_policy<span style="color: rgb(255, 204, 51);"> </span><span style="color: rgb(255, 204, 51);">-> Service Policy for management</span><br />no shutdown<br /><br /></span><span style="font-size:85%;"><span style="font-size:100%;">ip route 0.0.0.0 0.0.0.0 10.20.100.1<span style="color: rgb(255, 204, 51);"> </span></span> <span style="color: rgb(255, 0, 0);"><span style="font-size:100%;"><span style="color: rgb(255, 204, 51);">-> Create a Static Route. In this case, I use the gateway for the interface VLAN 100.</span></span></span></span><br /><br />username admin password 5 $0&uusanalljsd99865%$ role Admin domain default-domain <span style="font-size:85%;"><span style="color: rgb(255, 0, 0);"><span style="font-size:100%;"><span style="color: rgb(255, 204, 51);">-> Admin user for the admin context.</span></span></span></span><br /><span style="font-size:100%;"><br /><br /></span><span style="font-size:100%;"><span style="color: rgb(255, 204, 51);">Below is optional if you have a secondary ACE for high availability. FT interface can be a dedicated VLAN or one of the physical interface of the ACE. Note: If you use the physical interface for high availability you can only bind 3 physical interfaces on your ACE. </span><br /></span><span style="font-size:100%;">ft interface vlan 800<span style="color: rgb(255, 0, 0);"> </span><br />ip address 192.168.200.1 255.255.255.252<br />peer ip address 192.168.200.2 255.255.255.252<br />no shutdown<br /><br />ft peer 1 </span><span style="font-size:100%;"><span style="color: rgb(255, 204, 51);">-> Optional if you have a secondary ACE for high availability</span><br /></span><span style="font-size:100%;"> heartbeat interval 300<br />heartbeat count 20<br />ft-interface vlan 800<br /><br />ft group 2<span style="color: rgb(255, 204, 51);"> </span></span><span style="font-size:100%;"><span style="color: rgb(255, 204, 51);">-> Optional if you have a secondary ACE for high availability</span><br /></span><span style="font-size:100%;"> peer 1<br />priority 101<br />peer priority 90<br />associate-context Admin<span style="color: rgb(255, 0, 0);"> <span style="color: rgb(255, 204, 51);">-> Add the Admin context to ft group 2</span></span><br />inservice<br /><br /></span><span style="font-size:85%;"><span style="font-size:100%;"><br /></span><span style="color: rgb(255, 0, 0);"><span style="font-size:100%;"><span style="color: rgb(255, 204, 51);"></span><br /><br /><br /><span style="color: rgb(0, 0, 0);">On my next post, I will show you how to create a virtual context in the admin context. </span></span><br /></span></span>Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-32084111052771414692011-04-12T15:28:00.006-04:002011-04-12T15:38:55.225-04:00Our New Mini Server RoomWe finally finish our mini server room. The server room are mostly for our virtual servers and our Netapps.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibFkm-tKEYZ9yc2b9gNOeQL6CUTo_W1v1Oh60E95HOMKEX4PueYJq8Ny1ta1E8O0Hi6uW74o1OtosOjYF8HwESjsJZ_UOafHs-VTwR2qzEVoESW8OmIy8wTavOoKCxfvAEwAqmmsN5wJmd/s1600/IMG00036-20110125-1026.jpg"><img style="cursor: pointer; width: 320px; height: 240px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibFkm-tKEYZ9yc2b9gNOeQL6CUTo_W1v1Oh60E95HOMKEX4PueYJq8Ny1ta1E8O0Hi6uW74o1OtosOjYF8HwESjsJZ_UOafHs-VTwR2qzEVoESW8OmIy8wTavOoKCxfvAEwAqmmsN5wJmd/s320/IMG00036-20110125-1026.jpg" alt="" id="BLOGGER_PHOTO_ID_5594782245440529794" border="0" /></a><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZvUX7f-a7iKSsupSPNnxXxC1aDJJTcJ-SnCEEyKDp4ZbS3yxvQKhgs-Vtt2cki4vSMdHO54cUzXdov9cRIxQeKBY2OvCQk8eyq4vvqa5VoxIQ0ogQn8GmusUBWjeBC8Q-IaZV8dc97YLD/s1600/IMG00035-20110125-1025.jpg"> <img style="cursor: pointer; width: 320px; height: 240px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZvUX7f-a7iKSsupSPNnxXxC1aDJJTcJ-SnCEEyKDp4ZbS3yxvQKhgs-Vtt2cki4vSMdHO54cUzXdov9cRIxQeKBY2OvCQk8eyq4vvqa5VoxIQ0ogQn8GmusUBWjeBC8Q-IaZV8dc97YLD/s320/IMG00035-20110125-1025.jpg" alt="" id="BLOGGER_PHOTO_ID_5594782043238266290" border="0" /></a><br /><br /><div style="text-align: center;">We have one of our 6509 VSS in this datacenter & the other VSS is in another closet.<br /></div><div style="text-align: center;"><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhstxlQ5sP-DrACLtdvbaotoybQVj1TGS-18i2IUu06YtyHhANZmi2tB5oHRzij2KxvUrrb5fwjeudCUTnct-tYQ03nYbkvUnYJaNh07uaNL2npf6iE4_e01aOo1M7LqwOVtl6EksCteEpz/s1600/IMG00028-20110125-1024.jpg"><img style="cursor: pointer; width: 240px; height: 320px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhstxlQ5sP-DrACLtdvbaotoybQVj1TGS-18i2IUu06YtyHhANZmi2tB5oHRzij2KxvUrrb5fwjeudCUTnct-tYQ03nYbkvUnYJaNh07uaNL2npf6iE4_e01aOo1M7LqwOVtl6EksCteEpz/s320/IMG00028-20110125-1024.jpg" alt="" id="BLOGGER_PHOTO_ID_5594781841268031618" border="0" /></a><br /></div>Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-34681657510070748862010-07-28T13:20:00.013-04:002010-07-28T14:18:17.681-04:00Single Sign on with Cisco SSL VPN and SharepointWe just deployed sharepoint at my job and I was looking for a way to have a single sign on with our ssl vpn using our Cisco ASA and Sharepoint. I was looking at cisco forums and couldn't get any answer. After playing around with the ASA settings 4 hours later, I was able to make it work and it was so simple to do. Make sure that you are using the same authentication you are using with SSL VPN and Sharepoint. Our VPN SSL is setup using LDAP or NTDomain authentication. With SSO enable, it will pass the credential you use to log in to SSL VPN to Sharepoint.<br /><br />First you have to enable single sign by going in to<br /><br />Configuration->Clientless SSL VPN Access->Group Policy choose the policy you want to enable single sign on click edit-> more options -> single sign on and click add<br />URI=*<br />Auhtentication Type=Basic,NTLM, and FTP click OK.<br /><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2DY4O-CbfpM7-9aIehXqtzdmvmqbKezou1hTihNuvcIUvt3r913dtHs7uEzRZZFGc61_206MDUScopsJJVm0x78Ozx_Zt-5QKaJF8bgTchv-8yFHQaXDiFnLSrS0556bg6LqMsgPupa3o/s1600/ASA+Group+Policy.JPG"><img style="WIDTH: 320px; HEIGHT: 219px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5499010672064304034" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2DY4O-CbfpM7-9aIehXqtzdmvmqbKezou1hTihNuvcIUvt3r913dtHs7uEzRZZFGc61_206MDUScopsJJVm0x78Ozx_Zt-5QKaJF8bgTchv-8yFHQaXDiFnLSrS0556bg6LqMsgPupa3o/s320/ASA+Group+Policy.JPG" /></a><br /><br />Then go to Configuration->Clientless SSL VPN Access->Portal Customization If you don't have a customize page yet click add and name it SharepointSSO you can name it anything you want then click Edit, another browser will open up.<br /><br /><br /><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOeG31ffTF6HnB9-iG1bP8UURZV8wxMf2I0N94AQEyeP6qR2XlywnWVpkBbzA-tTK7PCDnY9ZrWcJGnIZ6Hv72EdasgWzrIntfCEIzPj7ik59ctmCtXOEiZYWpwyiucZqg5UochRGmZMC9/s1600/custom.JPG"><img style="WIDTH: 320px; HEIGHT: 139px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5499021236973637154" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOeG31ffTF6HnB9-iG1bP8UURZV8wxMf2I0N94AQEyeP6qR2XlywnWVpkBbzA-tTK7PCDnY9ZrWcJGnIZ6Hv72EdasgWzrIntfCEIzPj7ik59ctmCtXOEiZYWpwyiucZqg5UochRGmZMC9/s320/custom.JPG" /></a><br /><br /><br /><br />Under Portal on the left side disable everything in title panel, toolbar, navigation panel, application. Under Homepage choose<br />Mode=Custom Intranet Web Page<br />Custom Intranet Web Page URL=http://sharepointserver/_layouts/Authenticate.aspx (The site that let the users authenticate)<br />URL List Mode= No Group.<br /><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnrEYjMdUuFXlRT2nSAPJ-xjaRzeh1toGk5CVSvm2WCLtwWQb3Y6-73-2uN-s2gvFqIU4yfmX4x8_4Ql1moNgAVTZoDxd8otq1VPu7fAAoL8BN9V8PHyWOuhVscKKwo6Yd9MgdJnTHpOtB/s1600/homepage+redirect.JPG"><img style="WIDTH: 320px; HEIGHT: 143px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5499014275580958802" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnrEYjMdUuFXlRT2nSAPJ-xjaRzeh1toGk5CVSvm2WCLtwWQb3Y6-73-2uN-s2gvFqIU4yfmX4x8_4Ql1moNgAVTZoDxd8otq1VPu7fAAoL8BN9V8PHyWOuhVscKKwo6Yd9MgdJnTHpOtB/s320/homepage+redirect.JPG" /></a><br /><br />Save the custom page and login to your SSL VPN. You should automatically log in to sharepoint.<br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkkAm48KP2E_E58Bla9bDJ0HEw8E7cud-SkBTuaHLRXnZegGwJeihaeOGvHuHPqZ6RjX_JQjQceVDsnzqDQnaO6tZNPfm4huAbruajirhYjQ4fBgV0DSTIpWunrzPlEYs8vcYRvCOJz_hD/s1600/login.JPG"><img style="WIDTH: 320px; HEIGHT: 34px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5499016709189178482" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkkAm48KP2E_E58Bla9bDJ0HEw8E7cud-SkBTuaHLRXnZegGwJeihaeOGvHuHPqZ6RjX_JQjQceVDsnzqDQnaO6tZNPfm4huAbruajirhYjQ4fBgV0DSTIpWunrzPlEYs8vcYRvCOJz_hD/s320/login.JPG" /></a><br /><br />There are other ways to accomplish this but this is the simplest way so far. There is also a post plugin that you can download and use but I couldn't get it to work at the time I was doing this. Please let me know if you tried the same settings I did and how it work for you.<br /><br />This settings also works with Citrix Web Interface as long as the client detection feature is NOT enabled.Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com5tag:blogger.com,1999:blog-3012523332314370842.post-69596434368975997202010-04-21T17:03:00.000-04:002010-04-21T17:15:03.760-04:00McAfee false positive detection of w32/wecorl.a when using 5958 DAT fileMcAfee has identified an issue where a specific DAT file version is causing a false positive detection of the w32/wecorl.a virus. When this false positive occurs, Svchost.exe is blocked and quarantined, which will cause the machine in question to shut down with a DCOM error, and can in some circumstances cause a blue-screen. This issue appears to only occur on Windows XP SP3 clients.<br /><br />This issue is known to occur with version 5958 of the McAfee DAT file, released on April 21, 2010. McAfee has released an EXTRA.DAT file to suppress this false detection. After installing the EXTRA.DAT, you can restore the effected file from Quarantine within McAfee. To restore a file from Quarantine, please carry out the following steps:<br /><br /> 1. Open the VirusScan Console.<br /> 2. Double-click Quarantine Manager Policy.<br /> 3. Click the Manager tab.<br /> 4. Right-click the required item and select Restore.<br /><br />For more information, please refer to the following McAfee articles:<br /><br />https://kc.mcafee.com/corporate/index?page=content&id=KB68780<br /><br />https://kc.mcafee.com/corporate/index?page=content&id=KB51109Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-64452510944316167632010-04-07T07:57:00.003-04:002010-04-07T08:31:04.628-04:00Cheap free internet hotspot gatewayI was given a task by our upper management to setup a free wireless access on our remote locations. I have been searching for an appliance or software that can provide a splash screen for end users to see to agree on the Terms of Use. I first look at nomadix which I know is popular but very expensive. I also tested the zone cd which was very easy to set up but there was a recurring cost. So I went ahead and tested antamedia hotspot software which really work well and very easy to configure even the splash screen was easy to customized. The caveat to this is that you still need a PC with dual NICs for it to work and it will cost you around $400 just for the software not including the PC. I was determine to get this software but when we were ready to get it, we had issues paying for it because we only do purchse orders not credit cards plus the company is not in the United States. It was a blessing in disguise that this company that I called before (citrusmicro.com) finally got back to me and told me that a new box just came in. I went ahead and ordered it and when I got the boxes it literraly took me less than 15 minutes to set it up with terms and conditions with customized splash screen. The box looks like a small router that runs on unix. The best part, It only cost us $190.00 per box without the need of another PC. For more info about the hotspot gateway from GIS follow the link below.<br /><br />http://www.guest-internet.com/hotspot_gateway_for_guest_internet_access.html<br /><br /><br />This is where I got it from<br />http://www.citrusmicro.com/GIS-R2-Hot-Spot-Internet-Gateway-p/gis-r2.htCisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com1tag:blogger.com,1999:blog-3012523332314370842.post-55997070222084123212010-02-18T15:57:00.008-05:002010-02-18T16:09:35.644-05:00Nexus 7018 Cable Management Part 2Below is the final outcome of our cable management to the Nexus.<br /><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKNki5gfEzMVJ_mkzMl-akod2LCr81LUaQg4SN8t2Gr8Z-zqtRXRlTwTJ3GdOTJRRoVqVD2igX13sGrvCQAZBeXBZ_TGGskHiKN30kQwX6gPvR0_5Q90a_wYrraY2a5BHfLUjE2z5khDBh/s1600-h/nexus+7018+1.JPG"><img style="WIDTH: 180px; HEIGHT: 320px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5439692012801961906" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKNki5gfEzMVJ_mkzMl-akod2LCr81LUaQg4SN8t2Gr8Z-zqtRXRlTwTJ3GdOTJRRoVqVD2igX13sGrvCQAZBeXBZ_TGGskHiKN30kQwX6gPvR0_5Q90a_wYrraY2a5BHfLUjE2z5khDBh/s320/nexus+7018+1.JPG" /></a><br />We ran all the cables on the left side so that we don't cover the air flow of the Nexus switch.<br /><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQiFS3hEB3gg4VASiaxhG4ATGpPe2yzfuGSeWd1uZUlrLS-wdzpsxvLQRQcS406h3PKqjFajkxSkMGJ5suyxjQRBpuHN4R3DFJaOcc3f4HGDJWGxx_R0EMsRUNUlrk0ARt2-reZjgU61zz/s1600-h/Nexus+7018+2.JPG"><img style="WIDTH: 180px; HEIGHT: 320px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5439691887939698162" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQiFS3hEB3gg4VASiaxhG4ATGpPe2yzfuGSeWd1uZUlrLS-wdzpsxvLQRQcS406h3PKqjFajkxSkMGJ5suyxjQRBpuHN4R3DFJaOcc3f4HGDJWGxx_R0EMsRUNUlrk0ARt2-reZjgU61zz/s320/Nexus+7018+2.JPG" /></a> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVuxQyO45tWl7S-7GKD-VafSTKII8HBIINan0fWPi8nI7Kyc9G42742mDjh6JMX6YNX9tF3vBPw2-vJ4w30vQ59_qoFAQK0V7iE5Gci2baeIA80P5IARQ3VQJlpiuVmgdYM4kU2LyBNIm3/s1600-h/Nexus+7018+3.JPG"><img style="WIDTH: 180px; HEIGHT: 320px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5439691784190518514" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVuxQyO45tWl7S-7GKD-VafSTKII8HBIINan0fWPi8nI7Kyc9G42742mDjh6JMX6YNX9tF3vBPw2-vJ4w30vQ59_qoFAQK0V7iE5Gci2baeIA80P5IARQ3VQJlpiuVmgdYM4kU2LyBNIm3/s320/Nexus+7018+3.JPG" /></a><br /><br /><br /><br /><div><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3uxVRPRhzG_OBKVEd4fAyGPPTfs4WnbtpNMx9vbD0xlleNkHrQtRQhu7z8H36lqf3G3bV1KCRA9EhZIhk1Yy2imVzeaIDibaOW-8u438Lel4d-a_3Ark2dnFpbxaIjxESu4ylzJTEnhMs/s1600-h/DSC02739.JPG"></a><br /><br /><br /><br /><br /><div><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmsvVCFWqYBrHhnnwiaxO2YHw6Bnejt7wiZ97vKPairOEvfOxgUtZU_-6qFPgDESPxtevPsY7L7GyhKPtWzaHAIAua4HdDcXhPn5_WWdKz6Q1rdxzvJvoT9XxuotOWBKzfNeEFaNBEv4fa/s1600-h/DSC02737.JPG"></a><br /><br /><br /><br /><br /><br /><div></div></div></div>Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com2tag:blogger.com,1999:blog-3012523332314370842.post-74038236530918154542010-02-18T15:07:00.011-05:002010-07-01T23:06:32.481-04:00Nexus 7018 Cable Management Part 1<div><div><div></div><div></div><div><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-mJDnQzOK5KwGxgJSoGjaLHSFFLV2BnjwKbfoyGi3UfOb8TFpin_7QT5fRl90mcYQ-wCc9KA5JBenD1bczD632TnwoKVnfu7XQBs4bmVrK6kmmhtRNrvrAQ0A2biciGFOQtmPbJd-7Px0/s1600-h/IMG00084-20091214-1547.jpg"><img style="MARGIN: 0px 10px 10px 0px; WIDTH: 240px; FLOAT: left; HEIGHT: 320px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5439679305914046626" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-mJDnQzOK5KwGxgJSoGjaLHSFFLV2BnjwKbfoyGi3UfOb8TFpin_7QT5fRl90mcYQ-wCc9KA5JBenD1bczD632TnwoKVnfu7XQBs4bmVrK6kmmhtRNrvrAQ0A2biciGFOQtmPbJd-7Px0/s320/IMG00084-20091214-1547.jpg" /></a><br /></div><br /><div> </div><br /><br /><br /><div>I promised that I will post some pictures as soon as we are done running the cables to the Nexus. We have 10 N7K-M148GT-11 module cards. We decided to have racks on two separate aisles in our data center and both going to Nexus. On the left picture, we ran the cables underneath the floor going from Nexus to the 1st rack. </div><br /><br /><div><br /> </div><div> </div><div> </div><div> </div><div>Below are the final cable runs underneath our data center.<br /></div><div><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEid1NVMQUIsheRCDCe6EG8IheBhvGFmkWpmYPtbjhAZ9oOTaR1FKubFr8bbz3sdtTLIGsw3-1SsuqKuhzhcXLk1rNKwLGpXKW9fPk1SR2gQzEUGi0P10gi8S43O1pOhcrwN29CZkVxQ4Rrj/s1600-h/DSC02744.JPG"><img style="WIDTH: 320px; HEIGHT: 180px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5439680270737772818" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEid1NVMQUIsheRCDCe6EG8IheBhvGFmkWpmYPtbjhAZ9oOTaR1FKubFr8bbz3sdtTLIGsw3-1SsuqKuhzhcXLk1rNKwLGpXKW9fPk1SR2gQzEUGi0P10gi8S43O1pOhcrwN29CZkVxQ4Rrj/s320/DSC02744.JPG" /></a> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBTVVo2yFnbzkCEzVcjuLa5OK4YKZNlVg3DvxV3PiL-VZFWqN-qfU7shlaJp3Vz3Or4XggyGQ_Ch75TgN30Y3yHNuZh20Up0lh2xi4Z4LSHwmmrysulafNDaVNs0I_1oBaFKP3-bjXyQr2/s1600-h/DSC02745.JPG"><img style="WIDTH: 320px; HEIGHT: 180px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5439680778003862322" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBTVVo2yFnbzkCEzVcjuLa5OK4YKZNlVg3DvxV3PiL-VZFWqN-qfU7shlaJp3Vz3Or4XggyGQ_Ch75TgN30Y3yHNuZh20Up0lh2xi4Z4LSHwmmrysulafNDaVNs0I_1oBaFKP3-bjXyQr2/s320/DSC02745.JPG" /></a></div></div><div> </div></div><div><div><div>Below is the 1st rack we finished where all the servers will be connected. All the cables on the 1st rack goes underneath the floor.<br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhC2iIgZfUUX7K2eVnv7zCVcac6lTQk7ZWD2ZWVyC5X2-tScfkag-zyazfN395BN2S8X1UpgaENNQX0Ye4PMpG0NgCZh5WZ6Y5lbGyAluPQsbx-ExlCASA7Alsp0ARlflMtFKknlHN9DRHn/s1600-h/DSC02747.JPG"><img style="WIDTH: 320px; HEIGHT: 180px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5439681284813755170" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhC2iIgZfUUX7K2eVnv7zCVcac6lTQk7ZWD2ZWVyC5X2-tScfkag-zyazfN395BN2S8X1UpgaENNQX0Ye4PMpG0NgCZh5WZ6Y5lbGyAluPQsbx-ExlCASA7Alsp0ARlflMtFKknlHN9DRHn/s320/DSC02747.JPG" /></a> <img style="WIDTH: 180px; HEIGHT: 320px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5439682550671919538" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGnC1HildbC0gEjYBK35dItzmEnj2cZkNycfVCQ8TkNWdDdeUhHEQtHGulK60NIp5AoIEO6et3dc_iIh5oBrmJbgoh6ScVFu7nZkYZr8PtZTCihfiFE-ymO574DwSbrLOceeZ4_46Z0gh2/s320/DSC02746.JPG" /> </div><br /><div></div><div></div><div></div><div>The 2nd rack below is next to the Panduit rack and we ran all the cables on top.</div></div></div><div><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVxmPR3ZbO8E9WH_j_abHKQ4nBNjpwCDNUew5GwVueSiNnivkSw2P9Tn9cdgxGzj3oggNo3jodvnVCeBbmAeMOXAta_Mfy4hyxAMeU5RdnBhqsrxDqJt_WJwriyN03RTIsq_Sd8pIzc7VW/s1600-h/DSC02740.JPG"><img style="WIDTH: 180px; HEIGHT: 320px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5439686784150016738" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVxmPR3ZbO8E9WH_j_abHKQ4nBNjpwCDNUew5GwVueSiNnivkSw2P9Tn9cdgxGzj3oggNo3jodvnVCeBbmAeMOXAta_Mfy4hyxAMeU5RdnBhqsrxDqJt_WJwriyN03RTIsq_Sd8pIzc7VW/s320/DSC02740.JPG" /></a></div><br /><div></div><div></div>Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-54545217892080379682010-02-03T09:59:00.007-05:002010-02-19T12:58:01.891-05:00Cisco VPN Client support for 64bit OSFinally Cisco is doing something with this. As of February 18, 2010, Cisco published a VPN IPsec client beta support for Win-7 and Vista 64-bit.<br /><br />Key Capabilities available for Beta Testing:<br />New Platform support – Windows 7 & Windows Vista 64-bit platform compatibility<br />Software Access: http://tools.cisco.com/support/downloads/go/Redirect.x?mdfid=281940730 (under 5.BETA)<br /><br />Software is available for download by any customer with a Cisco.com SMARTnet™ enabled login.<br />Please have customers communicate feedback (both positive and problems) to <a href="mailto:cvc-beta@cisco.com">cvc-beta@cisco.com</a>.<br /><br />Original post below: <br /><br />Almost everyday we are getting calls from our remote users that they bought a new 64bit computer and they cannot work remotely because the Cisco VPN client does not support 64bit OS. It seems like Cisco has no plans on creating a VPN Client for 64 bit OS's. You can try to have Cisco change their hearts by opening up a TAC case. Request for them to create a VPN IPsec client support for 64bit. Also refer to BUG ID# CSCsb35984.<br /><br />Cisco Support number 1 800 553 2447<br /><br /><br />You can also use a third party VPN Client that supports 64bit OS and it works with cisco.<br /><a href="http://www.ncp-e.com/fileadmin/pdf/datenblaetter/NCP_DS_Entry_Client_Win32_64.pdf">http://www.ncp-e.com/fileadmin/pdf/datenblaetter/NCP_DS_Entry_Client_Win32_64.pdf</a>Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-55293494048653593822009-11-13T11:30:00.005-05:002009-11-13T11:55:43.540-05:00Busy busy busyIt's been a while since I updated my blog. We have been so busy with all the upgrades and a lot of late weekend nights. On top of our core upgrade, we are also cleaning up all the closets and replacing old switches with 3750E's. We also replaced our 6509 with two 6509E sup 720 VSS.<br /><br /><br /><br /><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj77mZdrR3Tnz406i-4yz7EYwA-qcx0HxKHeijF6y4EYMz32eBUuBfSnvtoqkQ2D_jHqcw0Kl9QOmbBY-R2dkSDnZ6pUEAM6chWzGhQeKVhah4eYiakx9NEGbiz6xtL3Vhk5vf0ExrJhL4F/s1600-h/bn.jpg"><img style="MARGIN: 0px 10px 10px 0px; WIDTH: 240px; FLOAT: left; HEIGHT: 320px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5403626966868323890" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj77mZdrR3Tnz406i-4yz7EYwA-qcx0HxKHeijF6y4EYMz32eBUuBfSnvtoqkQ2D_jHqcw0Kl9QOmbBY-R2dkSDnZ6pUEAM6chWzGhQeKVhah4eYiakx9NEGbiz6xtL3Vhk5vf0ExrJhL4F/s320/bn.jpg" /></a> We fired up our Nexus 7018 a month ago and started to move our layer 2 connections to the Nexus. our next step will be moving all our servers to this switch but that is not going to happen until we figure out how we going to run all the cables to the Nexus.<br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><p></p><p></p><p></p><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0AeNJE83-dG-hNhfjFT2lEWMUepY16X0O8Y1aOkeh3H4bpi_-TxzfTFrdkL3105KfHVUZtez_Lo4mhW3tVKt-A2XBUFbs25sStX5LZObuYaDHGsFrmoVo04Od5LcVhW8idUIrItMyvDNQ/s1600-h/nexus.gif"><img style="MARGIN: 0px 10px 10px 0px; WIDTH: 190px; FLOAT: left; HEIGHT: 320px; CURSOR: hand" id="BLOGGER_PHOTO_ID_5403630187983881058" border="0" alt="" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0AeNJE83-dG-hNhfjFT2lEWMUepY16X0O8Y1aOkeh3H4bpi_-TxzfTFrdkL3105KfHVUZtez_Lo4mhW3tVKt-A2XBUFbs25sStX5LZObuYaDHGsFrmoVo04Od5LcVhW8idUIrItMyvDNQ/s320/nexus.gif" /></a><br /><br /><br /><br /><br /><br />Eventually we want it to look like this. This picture was taken from a Cisco white paper. The reason why the cables are ran like this is to make sure that the cables are not blocking the air flow of the Nexus.Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-32769272869722465042009-10-09T17:02:00.003-04:002009-10-09T17:16:43.831-04:00Upgrading Nexus IOSNote: this box was upgraded when nothing was on it. Although the upgrade process is supposed to be non disruptive always follow your downtime procedure especially in a live environment. In the upgrade process, its normal for the supervisor to reset or switch to active/standby. Make sure to watch on the upgrade process for any errors that might occur during this process. <br /><br />Login to your console<br /><br /><span style="font-style:italic;"><span style="font-weight:bold;">!---- Connect your device (PC) to interface Ethernet5/1 and configure it layer 3 and put an IP address. 10.1.1.1 is the ip for E5/1.</span><br /></span><br />switch# conf t<br /><br />Enter configuration commands, one per line. End with CNTL/Z.<br />switch(config)#int e 5/1<br /><br />switch(config-if)# no switchport <br /><br />switch(config-if)# ip address 10.1.1.1 255.255.255.0<br /><br />switch(config-if)# no shut<br /><br /><br /><span style="font-style:italic;"><span style="font-weight:bold;">!------ Put static ip on your device 10.1.1.2 and ping. </span></span><br /><br /><br /><br />switch# ping 10.1.1.2<br /><br /><br /><br />PING 10.1.1.2 (10.1.1.2): 56 data bytes<br />64 bytes from 10.1.1.2: icmp_seq=0 ttl=127 time=0.846 ms<br />64 bytes from 10.1.1.2: icmp_seq=1 ttl=127 time=0.504 ms<br />64 bytes from 10.1.1.2: icmp_seq=2 ttl=127 time=0.458 ms<br />64 bytes from 10.1.1.2: icmp_seq=3 ttl=127 time=0.477 ms<br />64 bytes from 10.1.1.2: icmp_seq=4 ttl=127 time=0.492 ms<br /><br />--- 10.1.1.2 ping statistics ---<br />5 packets transmitted, 5 packets received, 0.00% packet loss<br />round-trip min/avg/max = 0.458/0.555/0.846 ms<br /><br /><br /><span style="font-style:italic;"><span style="font-weight:bold;">!------- We have 2 way communication between Nexus and your device</span></span><br /><br /><br /><span style="font-style:italic;"><span style="font-weight:bold;">!---- We tried copying the image using TFTP but it was failing for us so we used ftp instead. We had to install filezilla server in our local device.</span></span><br /><br /><br />switch# copy tftp://10.1.1.2/n7000-s1-dk9.4.2.2a.bin bootflash:<br /><br />Enter vrf (If no input, current vrf 'default' is considered): <br /><br />Trying to connect to tftp server......<br />Connection to Server Established.<br />[ ] 0.50KB<br />[# ] 4.50KB <br /><br />TFTP get operation failed:Connection timed out <br /><br /><span style="font-weight:bold;">!---- NOT SURE WHY IT FAILED ON TFTP BUT I HAD SIMILAR ISSUE WHEN I WAS UPGRADING OUR CISCO ACE</span><br /><br /><br /><span style="font-weight:bold;"><br /><span style="font-style:italic;">!--- Copying n7000-s1-dk9.4.2.2a.bin</span></span><br /><br />switch#copy ftp://10.1.1.2/n7000-s1-dk9.4.2.2a.bin bootflash:<br /><br />Enter vrf (If no input, current vrf 'default' is considered): <br /><br />Enter username: cisco<br /><br />Password: <br /><br />[ ] 0.98KB<br />[# ] 2.44KB<br />[## ] 4.39KB<br />[### ] 6.84KB<br />[#### ] 7.81KB<br />[##### ] 9.77KB<br />[###### ] 13.18KB<br />[####### ] 17.09KB<br />[######## ] 21.09KB<br />[######### ] 21.48KB<br />[########## ] 25.48KB<br />[########### ] 26.37KB<br />[############ ] 30.37KB<br />[############# ] 31.74KB<br />[############## ] 35.74KB<br />[############### ] 37.60KB<br />[################ ] 41.60KB<br />[################# ] 43.95KB<br />[################## ] 47.95KB<br />[################### ] 50.78KB<br />[#################### ] 54.78KB<br />[##################### ] 58.11KB<br />[###################### ] 62.11KB<br />[####################### ] 65.92KB<br />[######################## ] 69.92KB<br />[#########################] <br /><br /><span style="font-style:italic;"><span style="font-weight:bold;">!--- Output ommited <br /><br />!--- IMAGE n7000-s1-dk9.4.2.2a.bin IS IN BOOTFLASH</span></span><br /><br /><br />switch# dir<br /><br /> 273 Aug 21 07:54:18 2009 TBM13332870_130926862.lic<br /> 16384 Aug 21 06:37:57 2009 lost+found/<br /> 92000595 Aug 21 07:54:55 2009 n7000-s1-dk9.4.1.4.bin<br /> 99698682 Oct 05 22:03:52 2009 n7000-s1-dk9.4.2.2a.bin<br /> 24718848 Aug 21 07:55:12 2009 n7000-s1-kickstart.4.1.4.bin<br /> 4096 Aug 21 08:17:00 2009 vdc_2/<br /> 4096 Aug 21 08:17:00 2009 vdc_3/<br /> 4096 Aug 21 08:17:00 2009 vdc_4/<br /><br />Usage for bootflash://<br /> 343744512 bytes used<br /> 1496145920 bytes free<br /> 1839890432 bytes total<br /><span style="font-style:italic;"><br /><span style="font-weight:bold;">!----------- Copying kickstart n7000-s1-kickstart.4.2.2a.bin</span></span><br /><br /><br /><br />switch#copy ftp://10.1.1.2/n7000-s1-kickstart.4.2.2a.bin bootflash:\<br /><br /><br /><br />Enter vrf (If no input, current vrf 'default' is considered): <br /><br /><br />Enter username: cisco<br /><br />Password: <br /><br />[ ] 0.98KB<br />[# ] 2.44KB<br />[## ] 4.39KB<br />[### ] 5.86KB<br />[#### ] 6.84KB<br />[##### ] 9.77KB<br />[###### ] 10.74KB<br />[####### ] 13.18KB<br />[######## ] 14.16KB<br />[######### ] 17.09KB<br />[########## ] 17.58KB<br />[########### ] 21.48KB<br />[############ ] 25.48KB<br />[############# ] 26.37KB<br />[############## ] 29.79KB<br />[############### ] 31.74KB<br />[################ ] 35.64KB<br />[################# ] 39.64KB<br />[################## ] 41.99KB<br />[################### ] 45.99KB<br />[#################### ] 48.83KB<br />[##################### ] 52.83KB<br />[###################### ] 56.15KB<br />[####################### ] 60.15KB<br />[######################## ] 62.50KB<br />[#########################] <br /><br /><span style="font-weight:bold;"><span style="font-style:italic;">!--- Output ommited <br /><br />!--- IMAGE n7000-s1-kickstart.4.2.2a.bin IS IN BOOTFLASH</span></span><br /><br /><br />switch# dir<br /><br /> 273 Aug 21 07:54:18 2009 TBM13332870_130926862.lic<br /> 16384 Aug 21 06:37:57 2009 lost+found/<br /> 92000595 Aug 21 07:54:55 2009 n7000-s1-dk9.4.1.4.bin<br /> 99698682 Oct 05 22:03:52 2009 n7000-s1-dk9.4.2.2a.bin<br /> 24718848 Aug 21 07:55:12 2009 n7000-s1-kickstart.4.1.4.bin<br /> 23875072 Oct 05 22:10:19 2009 n7000-s1-kickstart.4.2.2a.bin<br /> 4096 Aug 21 08:17:00 2009 vdc_2/<br /> 4096 Aug 21 08:17:00 2009 vdc_3/<br /> 4096 Aug 21 08:17:00 2009 vdc_4/<br /><br />Usage for bootflash://<br /> 367648768 bytes used<br /> 1472241664 bytes free<br /> 1839890432 bytes total<br /><br /><br /><br /><br /><br /><span style="font-style:italic;"><span style="font-weight:bold;">!------ INSTALLING THE NEW IMAGES</span> </span><br /><br /><br /><span style="font-style:italic;">switch# install all kickstart bootflash:n7000-s1-kickstart.4.2.2a.bin system bootflash:n7000-s1-dk9.4.2.2a.bin</span><br /><br /><br />Verifying image bootflash:/n7000-s1-kickstart.4.2.2a.bin for boot variable "kickstart".<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Verifying image bootflash:/n7000-s1-dk9.4.2.2a.bin for boot variable "system".<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Verifying image type.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "bios" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "system" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "kickstart" version from image bootflash:/n7000-s1-kickstart.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "cmp" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Extracting "cmp-bios" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.<br />[# ] 0% [####################] 100% -- SUCCESS<br /><br />Notifying services about system upgrade.<br /> [####################] 100% -- SUCCESS<br /><br /><br /><br />Compatibility check is done:<br />Module bootable Impact Install-type Reason<br />------ -------- -------------- ------------ ------<br /> 1 yes non-disruptive rolling <br /> 3 yes non-disruptive rolling <br /> 5 yes non-disruptive rolling <br /> 6 yes non-disruptive rolling <br /> 7 yes non-disruptive rolling <br /> 8 yes non-disruptive rolling <br /> 9 yes non-disruptive reset <br /> 10 yes non-disruptive reset <br /> 11 yes non-disruptive rolling <br /> 12 yes non-disruptive rolling <br /> 13 yes non-disruptive rolling <br /> 14 yes non-disruptive rolling <br /> 15 yes non-disruptive rolling <br /> 16 yes non-disruptive rolling <br /><br /><br /><br />Images will be upgraded according to following table:<br />Module Image Running-Version(pri:alt) New-Version Upg-Required<br />------ ---------- ---------------------------------------- -------------------- ------------<br /> 1 lc1n7k 4.1(4) 4.2(2a) yes<br /> 1 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes<br /> 3 lc1n7k 4.1(4) 4.2(2a) yes<br /> 3 bios v1.10.5(03/25/08): v1.10.5(03/25/08) v1.10.6(11/04/08) yes<br /> 5 lc1n7k 4.1(4) 4.2(2a) yes<br /> 5 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes<br /> 6 lc1n7k 4.1(4) 4.2(2a) yes<br /> 6 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes<br /> 7 lc1n7k 4.1(4) 4.2(2a) yes<br /> 7 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes<br /> 8 lc1n7k 4.1(4) 4.2(2a) yes<br /> 8 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes<br /> 9 system 4.1(4) 4.2(2a) yes<br /> 9 kickstart 4.1(4) 4.2(2a) yes<br /> 9 bios v3.17.0(03/23/08): v3.17.0(03/23/08) v3.19.0(03/31/09) yes<br /> 9 cmp 4.1(3) 4.2(1) yes<br /> 9 cmp-bios 02.01.05 02.01.05 no<br /> 10 system 4.1(4) 4.2(2a) yes<br /> 10 kickstart 4.1(4) 4.2(2a) yes<br /> 10 bios v3.17.0(03/23/08): v3.17.0(03/23/08) v3.19.0(03/31/09) yes<br /> 10 cmp 4.1(3) 4.2(1) yes<br /> 10 cmp-bios 02.01.05 02.01.05 no<br /> 11 lc1n7k 4.1(4) 4.2(2a) yes<br /> 11 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes<br /> 12 lc1n7k 4.1(4) 4.2(2a) yes<br /> 12 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes<br /> 13 lc1n7k 4.1(4) 4.2(2a) yes<br /> 13 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes<br /> 14 lc1n7k 4.1(4) 4.2(2a) yes<br /> 14 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes<br /> 15 lc1n7k 4.1(4) 4.2(2a) yes<br /> 15 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes<br /> 16 lc1n7k 4.1(4) 4.2(2a) yes<br /> 16 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes<br /><br /><br />Do you want to continue with the installation (y/n)? [n] y<br /><br /><br />Install is in progress, please wait.<br /><br />Syncing image bootflash:/n7000-s1-kickstart.4.2.2a.bin to standby.<br />[# ] 0% <br />[###### ] 25% <br />[########### ] 50% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Syncing image bootflash:/n7000-s1-dk9.4.2.2a.bin to standby.<br />[# ] 0% <br />[###### ] 25% <br />[########### ] 50% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Setting boot variables.<br />[# ] 0% <br />[####################] 100% -- SUCCESS<br /><br />Performing configuration copy.<br />[# ] 0% <br />[###### ] 25% <br />[########### ] 50% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 1: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 3: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 5: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 6: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 7: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 8: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 9: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 10: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 11: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 12: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 13: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 14: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 15: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br />Module 16: Refreshing compact flash and upgrading bios/loader/bootrom.<br />Warning: please do not remove or power off the module at this time.<br />[# ] 0% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[# ] 0% <br />[# ] 0% <br />[###### ] 25% <br />[###### ] 25% <br />[########### ] 50% <br />[########### ] 50% <br />[################ ] 75% <br />[################ ] 75% <br />[####################] 100% <br />[####################] 100% -- SUCCESS<br /><br /><br />2009 Oct 5 22:35:34 switch %$ VDC-1 %$ %PLATFORM-2-MOD_REMOVE: Module 10 removed (Serial number XXXXXX)<br /><br />2009 Oct 5 22:37:32 switch %$ VDC-1 %$ %PLATFORM-2-MOD_REMOVE: Module 10 removed (Serial number XXXXXX)<br /><br />2009 Oct 5 22:43:29 switch %$ VDC-1 %$ %IDEHSD-STANDBY-2-MOUNT: logflash: online <br /><br />2009 Oct 5 22:43:30 switch %$ VDC-1 %$ %CMPPROXY-STANDBY-2-LOG_CMP_UP: Connectivity Management processor(on module 10) is now UP<br /><br /><br />Module 10: Waiting for module online.<br /> -- SUCCESS<br /><br />Notifying services about the switchover.<br /> [####################] 100% -- SUCCESS<br /><br /><br />"Switching over onto standby".<br />Raw time read from Hardware Clock: Y=2009 M=10 D=5 22:44:35<br /><br /> writing reset reason 7, SAP(93): Swover due to install<br /><br /><br />NX7 SUP Ver 3.19.0<br />Serial Port Parameters from CMOS <br />PMCON_1: 0x200 <br />PMCON_2: 0x0 <br />PMCON_3: 0x3a <br />PM1_STS: 0x101 <br />Performing Memory Detection and Testing <br />Testing 1 DRAM Patterns <br />Total mem found : 4096 MB<br />Memory test complete.<br />NumCpus = 2.<br />Status 61: PCI DEVICES Enumeration Started<br />Status 62: PCI DEVICES Enumeration Ended <br />Status 9F: Dispatching Drivers<br />Status 9E: IOFPGA Found<br />Status 9A: Booting From Primary ROM<br />Status 98: Found Cisco IDE<br />Status 98: Found Cisco IDE<br />Status 90: Loading Boot Loader<br /> Reset Reason Registers: 0x0 0x10 <br /> Filesystem type is ext2fs, partition type 0x83<br /><br /><br /> GNU GRUB version 0.97 <br /><br />Autobooting bootflash:/n7000-s1-kickstart.4.2.2a.bin bootflash:/n7000-s1-dk9.4.<br />2.2a.bin...<br /> Filesystem type is ext2fs, partition type 0x83<br />Booting kickstart image: bootflash:/n7000-s1-kickstart.4.2.2a.bin....<br />..............................................................................I<br />mage verification OK<br /><br />Starting kernel...<br /><br /><br />INIT: version 2.85 booting<br /><br />Checking all filesystems..r.r.r.. done.<br />Setting kernel variables: sysctlnet.ipv4.ip_forward = 0<br />net.ipv4.ip_default_ttl = 64<br />net.ipv4.ip_no_pmtu_disc = 1<br />. <br />Setting the System Clock using the Hardware Clock as reference...System Clock set. Local time: Mon Oct 5 22:46:30 UTC 2009<br />Loading system software<br />/bootflash//n7000-s1-dk9.4.2.2a.bin read done<br />Uncompressing system image: bootflash:/n7000-s1-dk9.4.2.2a.bin<br /><br />Load plugins that defined in image conf: /isan/plugin_img/img.conf<br />Loading plugin 0: core_plugin...<br />num srgs 1<br />0: swid-core-supdc3, swid-core-supdc3<br />num srgs 1<br />0: swid-supdc3-ks, swid-supdc3-ks<br /><br />INIT: Entering runlevel: 3<br /><br />Exporting directories for NFS kernel daemon...done. <br />Starting NFS kernel daemon:rpc.nfsd. <br />rpc.mountddone.<br /><br />System is coming<br /><br /><br />User Access Verification<br />switch(standby) login: 2009 Oct 5 22:48:24 switch %$ VDC-1 %$ %CMPPROXY-2-LOG_CMP_UP: Connectivity Management processor(on module 9) is now UP<br /><br />2009 Oct 5 22:48:26 switch %$ VDC-1 %$ %IDEHSD-2-MOUNT: logflash: online <br /><br /><br /><br />User Access Verification<br />switch(standby) login: admin<br />Password: <br />Cisco Nexus Operating System (NX-OS) Software<br />TAC support: http://www.cisco.com/tac<br />Copyright (c) 2002-2009, Cisco Systems, Inc. All rights reserved.<br />The copyrights to certain works contained in this software are<br />owned by other third parties and used and distributed under<br />license. Certain components of this software are licensed under<br />the GNU General Public License (GPL) version 2.0 or the GNU<br />Lesser General Public License (LGPL) Version 2.1. A copy of each<br />such license is available at<br />http://www.opensource.org/licenses/gpl-2.0.php and<br />http://www.opensource.org/licenses/lgpl-2.1.php<br /><br />switch(standby)# sh mod<br /><br />This command is only applicable on the active supervisor<br />switch(standby)# <br /><br /><br /><br />Please don't hesitate to leave any comments.Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-25261868523062874642009-10-09T15:15:00.003-04:002009-10-09T15:26:44.794-04:00Show Version, inventory and module command in Nexus<span style="font-weight:bold;">SHOW VERSION</span> <br /><br />switch#sh ver<br /><br />Cisco Nexus Operating System (NX-OS) Software<br />TAC support: http://www.cisco.com/tac<br />Copyright (c) 2002-2009, Cisco Systems, Inc. All rights reserved.<br />The copyrights to certain works contained in this software are<br />owned by other third parties and used and distributed under<br />license. Certain components of this software are licensed under<br />the GNU General Public License (GPL) version 2.0 or the GNU<br />Lesser General Public License (LGPL) Version 2.1. A copy of each<br />such license is available at<br />http://www.opensource.org/licenses/gpl-2.0.php and<br />http://www.opensource.org/licenses/lgpl-2.1.php<br /><br />Software<br /> BIOS: version 3.17.0<br /> loader: version N/A<br /> kickstart: version 4.1(4)<br /> system: version 4.1(4)<br /> BIOS compile time: 03/23/08<br /> kickstart image file is: bootflash:/n7000-s1-kickstart.4.1.4.bin<br /> kickstart compile time: 2/6/2009 17:00:00 [03/14/2009 07:45:28]<br /> system image file is: bootflash:/n7000-s1-dk9.4.1.4.bin<br /> system compile time: 2/6/2009 17:00:00 [03/14/2009 07:02:41]<br /><br /><br />Hardware<br /> cisco Nexus7000 C7018 (18 Slot) Chassis ("Supervisor module-1X")<br /> Intel(R) Xeon(R) CPU with 4129600 kB of memory.<br /> Processor Board ID XXXXX<br /><br /> Device name: switch<br /> bootflash: 2030616 kB<br /> slot0: 0 kB (expansion flash)<br /><br />Kernel uptime is 2 day(s), 18 hour(s), 41 minute(s), 39 second(s)<br /><br />Last reset <br /> Reason: Unknown<br /> System version: 4.1(4)<br /> Service: <br /><br />plugin<br /> Core Plugin, Ethernet Plugin<br /><br />CMP (Module 9) ok<br /> CMP Software<br /> CMP BIOS version: 02.01.05<br /> CMP Image version: 4.1(3) [build 4.1(3)]<br /> CMP BIOS compile time: 7/13/2008 19:44:27<br /> CMP Image compile time: 2/6/2009 17:00:00<br /><br />CMP (Module 10) ok<br /> CMP Software<br /> CMP BIOS version: 02.01.05<br /> CMP Image version: 4.1(3) [build 4.1(3)]<br /> CMP BIOS compile time: 7/13/2008 19:44:27<br /> CMP Image compile time: 2/6/2009 17:00:00<br /><br /><br /><span style="font-weight:bold;"><br />SHOW INVENTORY</span><br /><br />switch# sh inventory <br /><br />NAME: "Chassis", DESCR: "Nexus7000 C7018 (18 Slot) Chassis " <br />PID: N7K-C7018 , VID: V01 , SN: xxxxxx <br /><br />NAME: "Slot 1", DESCR: "10 Gbps Ethernet Module" <br />PID: N7K-M132XP-12 , VID: V06 , SN: xxxxxx <br /><br />NAME: "Slot 3", DESCR: "1000 Mbps Optical Ethernet Module" <br />PID: N7K-M148GS-11 , VID: V02 , SN: xxxxxx <br /><br />NAME: "Slot 5", DESCR: "10/100/1000 Mbps Ethernet Module" <br />PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx <br /><br />NAME: "Slot 6", DESCR: "10/100/1000 Mbps Ethernet Module" <br />PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx<br />NAME: "Slot 7", DESCR: "10/100/1000 Mbps Ethernet Module" <br />PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx <br /><br />NAME: "Slot 8", DESCR: "10/100/1000 Mbps Ethernet Module" <br />PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx <br /><br />NAME: "Slot 9", DESCR: "Supervisor module-1X" <br />PID: N7K-SUP1 , VID: V08 , SN: xxxxxx <br /><br />NAME: "Slot 10", DESCR: "Supervisor module-1X" <br />PID: N7K-SUP1 , VID: V08 , SN: xxxxxx <br /><br />NAME: "Slot 11", DESCR: "10/100/1000 Mbps Ethernet Module" <br />PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx <br /><br />NAME: "Slot 12", DESCR: "10/100/1000 Mbps Ethernet Module" <br />PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx <br /><br />NAME: "Slot 13", DESCR: "10/100/1000 Mbps Ethernet Module" <br />PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx <br /><br />NAME: "Slot 14", DESCR: "10/100/1000 Mbps Ethernet Module" <br />PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx <br /><br />NAME: "Slot 15", DESCR: "10/100/1000 Mbps Ethernet Module" <br />PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx <br /><br />NAME: "Slot 16", DESCR: "10/100/1000 Mbps Ethernet Module" <br />PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx <br /><br />NAME: "Slot 19", DESCR: "Fabric card module" <br />PID: N7K-C7018-FAB-1 , VID: V02 , SN: xxxxxx <br /><br />NAME: "Slot 20", DESCR: "Fabric card module" <br />PID: N7K-C7018-FAB-1 , VID: V02 , SN: xxxxxx <br /><br />NAME: "Slot 21", DESCR: "Fabric card module" <br />PID: N7K-C7018-FAB-1 , VID: V02 , SN: xxxxxx <br /><br />NAME: "Slot 33", DESCR: "Nexus7000 C7018 (18 Slot) Chassis Power Supply"<br />PID: N7K-AC-6.0KW , VID: V01 , SN: xxxxxx <br /><br />NAME: "Slot 34", DESCR: "Nexus7000 C7018 (18 Slot) Chassis Power Supply"<br />PID: N7K-AC-6.0KW , VID: V01 , SN: xxxxxx <br /><br />NAME: "Slot 35", DESCR: "Nexus7000 C7018 (18 Slot) Chassis Power Supply"<br />PID: N7K-AC-6.0KW , VID: V01 , SN: xxxxxx <br /><br />NAME: "Slot 37", DESCR: "Nexus7000 C7018 (18 Slot) Chassis Fan Module"<br />PID: N7K-C7018-FAN , VID: V01 , SN: xxxxxx <br /><br />NAME: "Slot 38", DESCR: "Nexus7000 C7018 (18 Slot) Chassis Fan Module"<br />PID: N7K-C7018-FAN , VID: V01 , SN: xxxxxx <br /><br /><br /><span style="font-weight:bold;">SHOW MODULE</span><br />switch# sh mod <br /><br />Mod Ports Module-Type Model Status<br />--- ----- -------------------------------- ------------------ ------------<br />1 32 10 Gbps Ethernet Module N7K-M132XP-12 ok<br />3 48 1000 Mbps Optical Ethernet Modul N7K-M148GS-11 ok<br />5 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok<br />6 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok<br />7 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok<br />8 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok<br />9 0 Supervisor module-1X N7K-SUP1 active *<br />10 0 Supervisor module-1X N7K-SUP1 ha-standby<br />11 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok<br />12 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok<br />13 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok<br />14 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok<br />15 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok<br />16 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok<br /><br />Mod Sw Hw<br />--- -------------- ------<br />1 4.1(4) 1.6 <br />3 4.1(4) 1.2 <br />5 4.1(4) 1.5 <br />6 4.1(4) 1.5 <br />7 4.1(4) 1.5 <br />8 4.1(4) 1.5 <br />9 4.1(4) 1.5 <br />10 4.1(4) 1.5 <br />11 4.1(4) 1.5 <br />12 4.1(4) 1.5 <br />13 4.1(4) 1.5 <br />14 4.1(4) 1.5 <br />15 4.1(4) 1.5 <br />16 4.1(4) 1.5 <br /><br /><br />Mod MAC-Address(es) Serial-Num<br />--- -------------------------------------- ----------<br />1 00-26-0b-47-75-54 to 00-26-0b-47-75-78 xxxxxx<br />3 00-25-84-e7-11-48 to 00-25-84-e7-11-7c xxxxxx<br />5 00-23-eb-8e-f8-7c to 00-23-eb-8e-f8-b0 xxxxxx<br />6 00-23-eb-51-7f-ac to 00-23-eb-51-7f-e0 xxxxxx<br />7 00-23-eb-51-88-30 to 00-23-eb-51-88-64 xxxxxx<br />8 00-26-0b-d5-98-74 to 00-26-0b-d5-98-a8 xxxxxx<br />9 00-26-51-c8-e6-80 to 00-26-51-c8-e6-88 xxxxxx<br />10 00-26-51-c8-e9-58 to 00-26-51-c8-e9-60 xxxxxx<br />11 00-26-0b-d5-9a-18 to 00-26-0b-d5-9a-4c xxxxxx<br />12 00-26-0b-de-2b-a4 to 00-26-0b-de-2b-d8 xxxxxx<br />13 00-26-0b-d5-98-a8 to 00-26-0b-d5-98-dc xxxxxx<br />14 00-23-eb-51-7e-a8 to 00-23-eb-51-7e-dc xxxxxx<br />15 00-26-0b-de-2c-40 to 00-26-0b-de-2c-74 xxxxxx<br />16 00-23-eb-51-83-88 to 00-23-eb-51-83-bc xxxxxx<br /><br />Mod Online Diag Status<br />--- ------------------<br />1 Pass<br />3 Pass<br />5 Pass<br />6 Pass<br />7 Pass<br />8 Pass<br />9 Pass<br />10 Pass<br />11 Pass<br />12 Pass<br />13 Pass<br />14 Pass<br />15 Pass<br />16 Pass<br /><br />Xbar Ports Module-Type Model Status<br />--- ----- -------------------------------- ------------------ ------------<br />1 0 Fabric Module 1 N7K-C7018-FAB-1 ok<br />2 0 Fabric Module 1 N7K-C7018-FAB-1 ok<br />3 0 Fabric Module 1 N7K-C7018-FAB-1 ok<br /><br />Xbar Sw Hw<br />--- -------------- ------<br />1 NA 1.1 <br />2 NA 1.1 <br />3 NA 1.1 <br /><br /><br />Xbar MAC-Address(es) Serial-Num<br />--- -------------------------------------- ----------<br />1 NA xxxxxx<br />2 NA xxxxxx<br />3 NA xxxxxxCisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com1tag:blogger.com,1999:blog-3012523332314370842.post-39324401955550090202009-10-08T20:24:00.001-04:002009-10-12T18:40:21.339-04:00Nexus 7018 1st time powering upWe finally put our Nexus in the Panduit rack (pictures coming soon) We powered this monster and everybody was like WOW it turned on!! Below is the boot up process of the Nexus 7018.<br /><br />NX7 SUP Ver 3.17.0<br />Serial Port Parameters from CMOS <br />PMCON_1: 0x200 <br />PMCON_2: 0x0 <br />PMCON_3: 0x3a <br />PM1_STS: 0x101 <br />Performing Memory Detection and Testing <br />Testing 1 DRAM Patterns <br />Total mem found : 4096 MB<br />Memory test complete.<br />NumCpus = 2.<br />Status 61: PCI DEVICES Enumeration Started<br />Status 62: PCI DEVICES Enumeration Ended <br />Status 9F: Dispatching Drivers<br />Status 9E: IOFPGA Found<br />Status 9A: Booting From Primary ROM<br />Status 98: Found Cisco IDE<br />Status 98: Found Cisco IDE<br />Status 90: Loading Boot Loader<br /> Reset Reason Registers: 0x0 0x10 <br /> Filesystem type is ext2fs, partition type 0x83<br /><br /><br /> GNU GRUB version 0.97 <br /><br />Autobooting bootflash:/n7000-s1-kickstart.4.1.4.bin bootflash:/n7000-s1-dk9.4.1<br />.4.bin...<br /> Filesystem type is ext2fs, partition type 0x83<br />Booting kickstart image: bootflash:/n7000-s1-kickstart.4.1.4.bin....<br />...............................................................................<br />.Image verification OK<br /><br />Starting kernel...<br /> INIT: version 2.85 booting <br />Checking all filesystems....r.. done.<br />Setting kernel variables: sysctlnet.ipv4.ip_forward = 0<br />net.ipv4.ip_default_ttl = 64<br />net.ipv4.ip_no_pmtu_disc = 1<br />. <br />Setting the System Clock using the Hardware Clock as reference...System Clock set. Local time: Sat Oct 3 01:55:24 UTC 2009<br />Loading system software<br />/bootflash//n7000-s1-dk9.4.1.4.bin read done<br />Uncompressing system image: bootflash:/n7000-s1-dk9.4.1.4.bin<br /><br />Load plugins that defined in image conf: /isan/plugin_img/img.conf<br />Loading plugin 0: core_plugin...<br />num srgs 1<br />0: swid-core-supdc3, swid-core-supdc3<br />num srgs 1<br />0: swid-supdc3-ks, swid-supdc3-ks<br /> INIT: Entering runlevel: 3 <br />Exporting directories for NFS kernel daemon...done. <br />Starting NFS kernel daemon:rpc.nfsd. <br />rpc.mountddone.<br /><br />2009 Oct 3 01:56:03 %$ VDC-1 %$ %KERN-2-SYSTEM_MSG: Starting kernel... - kernel <br />2009 Oct 3 01:56:24 %$ VDC-1 %$ %IDEHSD-2-MOUNT: logflash: online <br />2009 Oct 3 01:56:38 %$ VDC-1 %$ %VDC_MGR-2-VDC_ONLINE: vdc 1 has come online <br />2009 Oct 3 01:56:40 switch %$ VDC-1 %$ %PLATFORM-2-PS_OK: Power supply 1 ok (Serial number DTMXXXXX) <br />2009 Oct 3 01:56:40 switch %$ VDC-1 %$ %PLATFORM-2-PS_FANOK: Fan in Power supply 1 ok <br />2009 Oct 3 01:56:40 switch %$ VDC-1 %$ %PLATFORM-2-PS_OK: Power supply 2 ok (Serial number DTMXXXXX) <br />2009 Oct 3 01:56:40 switch %$ VDC-1 %$ %PLATFORM-2-PS_FANOK: Fan in Power supply 2 ok <br />2009 Oct 3 01:56:40 switch %$ VDC-1 %$ %PLATFORM-2-PS_OK: Power supply 3 ok (Serial number DTMXXXXX) <br />2009 Oct 3 01:56:40 switch %$ VDC-1 %$ %PLATFORM-2-PS_FANOK: Fan in Power supply 3 ok <br />2009 Oct 3 01:56:40 switch %$ VDC-1 %$ %PLATFORM-2-PS_AC_IN_MISSING: Power supply 1 present but all AC inputs are not connected, ac-redundancy might be affected <br />2009 Oct 3 01:56:40 switch %$ VDC-1 %$ %PLATFORM-2-PS_AC_IN_MISSING: Power supply 2 present but all AC inputs are not connected, ac-redundancy might be affected <br />2009 Oct 3 01:56:40 switch %$ VDC-1 %$ %PLATFORM-2-PS_AC_IN_MISSING: Power supply 3 present but all AC inputs are not connected, ac-redundancy might be affected <br />2009 Oct 3 01:56:41 switch %$ VDC-1 %$ %PLATFORM-2-XBAR_DETECT: Xbar 1 detected (Serial number XXXXX) <br />2009 Oct 3 01:56:42 switch %$ VDC-1 %$ %PLATFORM-2-XBAR_DETECT: Xbar 2 detected (Serial number XXXXX) <br />2009 Oct 3 01:56:42 switch %$ VDC-1 %$ %PLATFORM-2-XBAR_DETECT: Xbar 3 detected (Serial number JXXXXX) <br /><br /><br /> ---- System Admin Account Setup ----<br /><br /><br />Do you want to enforce secure password standard (yes/no) [y]: 2009 Oct 3 01:56:46 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 1 detected (Serial number XXXXX) Module-Type 10 Gbps Ethernet Module Model <br />2009 Oct 3 01:56:46 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 1 powered up (Serial number XXXXX) <br />2009 Oct 3 01:56:53 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 2 detected (Serial number XXXXX) Module-Type 1000 Mbps Optical Ethernet Module Model <br />2009 Oct 3 01:56:53 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 3 detected (Serial number XXXXX) Module-Type 10/100/1000 Mbps Ethernet Module Model <br />2009 Oct 3 01:56:54 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 4 detected (Serial number XXXXX) Module-Type 10/100/1000 Mbps Ethernet Module Model <br />2009 Oct 3 01:56:56 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 5 detected (Serial number XXXXX) Module-Type 10/100/1000 Mbps Ethernet Module Model <br />2009 Oct 3 01:56:56 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 2 powered up (Serial number XXXXX) <br />2009 Oct 3 01:56:56 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 3 powered up (Serial number JXXXXX) <br />2009 Oct 3 01:57:59 switch %$ VDC-1 %$ %IDEHSD-STANDBY-2-MOUNT: logflash: online <br />2009 Oct 3 01:56:57 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 6 detected (Serial number XXXXX) Module-Type 10/100/1000 Mbps Ethernet Module Model <br />2009 Oct 3 01:56:57 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 4 powered up (Serial number XXXXX) <br />2009 Oct 3 01:57:00 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 7 detected (Serial number XXXXX) Module-Type 10/100/1000 Mbps Ethernet Module Model <br />2009 Oct 3 01:57:00 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 5 powered up (Serial number XXXXX) <br />2009 Oct 3 01:57:03 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 8 detected (Serial number XXXXX) Module-Type 10/100/1000 Mbps Ethernet Module Model <br />2009 Oct 3 01:57:03 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 6 powered up (Serial number XXXXX) <br />2009 Oct 3 01:57:03 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 11 detected (Serial number XXXXX) Module-Type 10/100/1000 Mbps Ethernet Module Model <br />2009 Oct 3 01:57:04 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 12 detected (Serial number XXXXX) Module-Type 10/100/1000 Mbps Ethernet Module Model <br />2009 Oct 3 01:57:04 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 7 powered up (Serial number XXXXX) <br />2009 Oct 3 01:57:04 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 13 detected (Serial number XXXXX) Module-Type 10/100/1000 Mbps Ethernet Module Model <br />2009 Oct 3 01:57:04 switch %$ VDC-1 %$ %PLATFORM-2-MOD_DETECT: Module 14 detected (Serial number XXXXX) Module-Type 10/100/1000 Mbps Ethernet Module Model <br />2009 Oct 3 01:57:04 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 8 powered up (Serial number XXXXX) <br />2009 Oct 3 01:57:04 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 11 powered up (Serial number XXXXX) <br />2009 Oct 3 01:57:04 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 12 powered up (Serial number XXXXX) <br />2009 Oct 3 01:57:04 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 13 powered up (Serial number XXXXX) <br />2009 Oct 3 01:57:04 switch %$ VDC-1 %$ %PLATFORM-2-MOD_PWRUP: Module 14 powered up (Serial number XXXXX) <br />2009 Oct 3 01:57:12 switch %$ VDC-1 %$ %PLATFORM-2-FANMOD_FAN_OK: Fan module 1 (Fan1(sys_fan1) fan) ok <br />2009 Oct 3 01:57:12 switch %$ VDC-1 %$ %PLATFORM-2-FANMOD_FAN_OK: Fan module 2 (Fan2(sys_fan2) fan) ok <br />2009 Oct 3 01:57:33 switch %$ VDC-1 %$ %CMPPROXY-2-LOG_CMP_UP: Connectivity Management processor(on module 9) is now UP <br />2009 Oct 3 01:58:35 switch %$ VDC-1 %$ %CMPPROXY-STANDBY-2-LOG_CMP_UP: Connectivity Management processor(on module 10) is now UP <br /><br /><br /> Enter the password for "admin": <br /> Wrong Password, Reason:<br /> [Password should be at least 8 characters.]<br /> Invalid admin password.<br /><br /> Enter the password for "admin": <br /> Confirm the password for "admin": <br /><br /> ---- Basic System Configuration Dialog VDC: 1 ----<br /><br />This setup utility will guide you through the basic configuration of<br />the system. Setup configures only enough connectivity for management<br />of the system.<br /><br />Please register Cisco Nexus7000 Family devices promptly with your<br />supplier. Failure to register may affect response times for initial<br />service calls. Nexus7000 devices must be registered to receive <br />entitled support services.<br /><br />Press Enter at anytime to skip a dialog. Use ctrl-c at anytime<br />to skip the remaining dialogs.<br /><br />Would you like to enter the basic configuration dialog (yes/no): n<br /><br /><br /><br /> <br />User Access Verification<br />switch login: admin<br />Password: <br />Cisco Nexus Operating System (NX-OS) Software<br />TAC support: http://www.cisco.com/tac<br />Copyright (c) 2002-2009, Cisco Systems, Inc. All rights reserved.<br />The copyrights to certain works contained in this software are<br />owned by other third parties and used and distributed under<br />license. Certain components of this software are licensed under<br />the GNU General Public License (GPL) version 2.0 or the GNU<br />Lesser General Public License (LGPL) Version 2.1. A copy of each<br />such license is available at<br />http://www.opensource.org/licenses/gpl-2.0.php and<br />http://www.opensource.org/licenses/lgpl-2.1.php<br /> switch#<br /><br /><br /><br /><span style="font-weight:bold;">SHOW RUN OUTPUT NEXUS DEFAULT CONFIG</span><br /><br /><br /><br />switch# sh run<br /><br /><br />version 4.1(4)<br /><br />username admin password 5 **** role network-admin<br /><br />ip domain-lookup<br /><br />ip host switch 10.1.1.1<br /><br />ipv6 access-list copp-system-acl-icmp6<br /><br /> 10 permit icmp any any echo-request <br /><br /> 20 permit icmp any any echo-reply <br /><br />ip access-list copp-system-acl-ftp<br /><br /> 10 permit tcp any any eq ftp-data <br /><br /> 20 permit tcp any any eq ftp <br /><br /> 30 permit tcp any eq ftp-data any <br /><br /> 40 permit tcp any eq ftp any <br /><br />ip access-list copp-system-acl-bgp<br /><br /> 10 permit tcp any gt 1024 any eq bgp <br /><br /> 20 permit tcp any eq bgp any gt 1024 <br /><br />ip access-list copp-system-acl-rip<br /><br /> 10 permit udp any 224.0.0.0/24 eq rip <br /><br />ipv6 access-list copp-system-acl-radius6<br /><br /> 10 permit udp any any eq 1812 <br /><br /> 20 permit udp any any eq 1813 <br /><br /> 30 permit udp any any eq 1645 <br /><br /> 40 permit udp any any eq 1646 <br /><br /><br /> 50 permit udp any eq 1812 any <br /><br /> 60 permit udp any eq 1813 any <br /><br /> 70 permit udp any eq 1645 any <br /><br /> 80 permit udp any eq 1646 any <br /><br />ip access-list copp-system-acl-vpc<br /><br /> 10 permit udp any any eq 3200 <br /><br />ip access-list copp-system-acl-vrrp<br /><br /> 10 permit 112 any 224.0.0.0/24 <br /><br />ip access-list copp-system-acl-igmp<br /><br /> 10 permit igmp any 224.0.0.0/3 <br /><br />ip access-list copp-system-acl-pim<br /><br /> 10 permit pim any 224.0.0.0/24 <br /><br /> 20 permit udp any any eq pim-auto-rp <br /><br />ip access-list copp-system-acl-msdp<br /><br /> 10 permit tcp any gt 1024 any eq 639 <br /><br /> 20 permit tcp any eq 639 any gt 1024 <br /><br />ip access-list copp-system-acl-telnet<br /><br /> 10 permit tcp any any eq telnet <br /><br /> 20 permit tcp any any eq 107 <br /><br /> 30 permit tcp any eq telnet any <br /><br /> 40 permit tcp any eq 107 any <br /><br />ip access-list copp-system-acl-tftp<br /><br /><br /> 10 permit udp any any eq tftp <br /><br /> 20 permit udp any any eq 1758 <br /><br /> 30 permit udp any eq tftp any <br /><br /> 40 permit udp any eq 1758 any <br /><br />ip access-list copp-system-acl-eigrp<br /><br /> 10 permit eigrp any any <br /><br />ip access-list copp-system-acl-ssh<br /><br /> 10 permit tcp any any eq 22 <br /><br /> 20 permit tcp any eq 22 any <br /><br />ip access-list copp-system-acl-glbp<br /><br /> 10 permit udp any eq 3222 224.0.0.0/24 eq 3222 <br /><br />ip access-list copp-system-acl-snmp<br /><br /> 10 permit udp any any eq snmp <br /><br /> 20 permit udp any any eq snmptrap <br /><br />ip access-list copp-system-acl-hsrp<br /><br /> 10 permit udp any 224.0.0.0/24 eq 1985 <br /><br />ip access-list copp-system-acl-ospf<br /><br /> 10 permit ospf any any <br /><br />ip access-list copp-system-acl-sftp<br /><br /> 10 permit tcp any any eq 115 <br /><br /> 20 permit tcp any eq 115 any <br /><br />ipv6 access-list copp-system-acl-bgp6<br /><br /><br /> 10 permit tcp any gt 1024 any eq bgp <br /><br /> 20 permit tcp any eq bgp any gt 1024 <br /><br />ip access-list copp-system-acl-tacacs<br /><br /> 10 permit tcp any any eq tacacs <br /><br /> 20 permit tcp any eq tacacs any <br /><br />ip access-list copp-system-acl-pim-reg<br /><br /> 10 permit pim any any <br /><br />ipv6 access-list copp-system-acl-ospf6<br /><br /> 10 permit 89 any any <br /><br />ip access-list copp-system-acl-traceroute<br /><br /> 10 permit icmp any any ttl-exceeded <br /><br /> 20 permit icmp any any port-unreachable <br /><br />ip access-list copp-system-acl-undesirable<br /><br /> 10 permit udp any any eq 1434 <br /><br />ipv6 access-list copp-system-acl-icmp6-msgs<br /><br /> 10 permit icmp any any router-advertisement <br /><br /> 20 permit icmp any any router-solicitation <br /><br /> 30 permit icmp any any nd-na <br /><br /> 40 permit icmp any any nd-ns <br /><br /> 50 permit icmp any any mld-query <br /><br /> 60 permit icmp any any mld-report <br /><br /> 70 permit icmp any any mld-reduction <br /><br /><br />ipv6 access-list copp-system-acl-tacacs6<br /><br /> 10 permit tcp any any eq tacacs <br /><br /> 20 permit tcp any eq tacacs any <br /><br />ipv6 access-list copp-system-acl-tftp6<br /><br /> 10 permit udp any any eq tftp <br /><br /> 20 permit udp any any eq 1758 <br /><br /> 30 permit udp any eq tftp any <br /><br /> 40 permit udp any eq 1758 any <br /><br />ipv6 access-list copp-system-acl-pim6<br /><br /> 10 permit 103 any ff02::d/128 <br /><br /> 20 permit udp any any eq pim-auto-rp <br /><br />ip access-list copp-system-acl-icmp<br /><br /> 10 permit icmp any any echo <br /><br /> 20 permit icmp any any echo-reply <br /><br />ip access-list copp-system-acl-radius<br /><br /> 10 permit udp any any eq 1812 <br /><br /> 20 permit udp any any eq 1813 <br /><br /> 30 permit udp any any eq 1645 <br /><br /> 40 permit udp any any eq 1646 <br /><br /> 50 permit udp any eq 1812 any <br /><br /> 60 permit udp any eq 1813 any <br /><br /> 70 permit udp any eq 1645 any <br /><br /><br /> 80 permit udp any eq 1646 any <br /><br />ipv6 access-list copp-system-acl-telnet6<br /><br /> 10 permit tcp any any eq telnet <br /><br /> 20 permit tcp any any eq 107 <br /><br /> 30 permit tcp any eq telnet any <br /><br /> 40 permit tcp any eq 107 any <br /><br />ip access-list copp-system-acl-ntp<br /><br /> 10 permit udp any any eq ntp <br /><br /> 20 permit udp any eq ntp any <br /><br />ipv6 access-list copp-system-acl-ntp6<br /><br /> 10 permit udp any any eq ntp <br /><br /> 20 permit udp any eq ntp any <br /><br />ipv6 access-list copp-system-acl-ssh6<br /><br /> 10 permit tcp any any eq 22 <br /><br /> 20 permit tcp any eq 22 any <br /><br />class-map type control-plane match-any copp-system-class-critical<br /><br /> match access-group name copp-system-acl-bgp<br /><br /> match access-group name copp-system-acl-bgp6<br /><br /> match access-group name copp-system-acl-eigrp<br /><br /> match access-group name copp-system-acl-igmp<br /><br /> match access-group name copp-system-acl-msdp<br /><br /> match access-group name copp-system-acl-ospf<br /><br /><br /> match access-group name copp-system-acl-ospf6<br /><br /> match access-group name copp-system-acl-pim<br /><br /> match access-group name copp-system-acl-pim6<br /><br /> match access-group name copp-system-acl-rip<br /><br /> match access-group name copp-system-acl-vpc<br /><br />class-map type control-plane match-any copp-system-class-exception<br /><br /> match exception ip option<br /><br /> match exception ip icmp unreachable<br /><br /> match exception ipv6 option<br /><br /> match exception ipv6 icmp unreachable<br /><br />class-map type control-plane match-any copp-system-class-important<br /><br /> match access-group name copp-system-acl-glbp<br /><br /> match access-group name copp-system-acl-hsrp<br /><br /> match access-group name copp-system-acl-vrrp<br /><br /> match access-group name copp-system-acl-icmp6-msgs<br /><br /> match access-group name copp-system-acl-pim-reg<br /><br />class-map type control-plane match-any copp-system-class-management<br /><br /> match access-group name copp-system-acl-ftp<br /><br /> match access-group name copp-system-acl-ntp<br /><br /> match access-group name copp-system-acl-ntp6<br /><br /> match access-group name copp-system-acl-radius<br /><br /> match access-group name copp-system-acl-sftp<br /><br /><br /> match access-group name copp-system-acl-snmp<br /><br /> match access-group name copp-system-acl-ssh<br /><br /> match access-group name copp-system-acl-ssh6<br /><br /> match access-group name copp-system-acl-tacacs<br /><br /> match access-group name copp-system-acl-telnet<br /><br /> match access-group name copp-system-acl-tftp<br /><br /> match access-group name copp-system-acl-tftp6<br /><br /> match access-group name copp-system-acl-radius6<br /><br /> match access-group name copp-system-acl-tacacs6<br /><br /> match access-group name copp-system-acl-telnet6<br /><br />class-map type control-plane match-any copp-system-class-monitoring<br /><br /> match access-group name copp-system-acl-icmp<br /><br /> match access-group name copp-system-acl-icmp6<br /><br /> match access-group name copp-system-acl-traceroute<br /><br />class-map type control-plane match-any copp-system-class-normal<br /><br /> match protocol arp<br /><br />class-map type control-plane match-any copp-system-class-redirect<br /><br /> match redirect dhcp-snoop<br /><br /> match redirect arp-inspect<br /><br />class-map type control-plane match-any copp-system-class-undesirable<br /><br /> match access-group name copp-system-acl-undesirable<br /><br />policy-map type control-plane copp-system-policy <br /><br /><br /> class copp-system-class-critical<br /><br /> police cir 39600 kbps bc 250 ms conform transmit violate drop <br /><br /> class copp-system-class-important<br /><br /> police cir 1060 kbps bc 1000 ms conform transmit violate drop <br /><br /> class copp-system-class-management<br /><br /> police cir 10000 kbps bc 250 ms conform transmit violate drop <br /><br /> class copp-system-class-normal<br /><br /> police cir 680 kbps bc 250 ms conform transmit violate drop <br /><br /> class copp-system-class-redirect<br /><br /> police cir 280 kbps bc 250 ms conform transmit violate drop <br /><br /> class copp-system-class-monitoring<br /><br /> police cir 130 kbps bc 1000 ms conform transmit violate drop <br /><br /> class copp-system-class-exception<br /><br /> police cir 360 kbps bc 250 ms conform transmit violate drop <br /><br /> class copp-system-class-undesirable<br /><br /> police cir 32 kbps bc 250 ms conform drop violate drop <br /><br /> class class-default<br /><br /> police cir 100 kbps bc 250 ms conform transmit violate drop <br /><br />control-plane<br /><br /> service-policy input copp-system-policy <br /><br />snmp-server user admin network-admin auth md5 ***<br /><br /> priv *** localizedkey<br /><br /><br /><br /><br />vrf context management<br /><br /> ip route 0.0.0.0/0 10.1.1.1<br /><br />vlan 1<br /><br />vdc switch id 1<br /><br /> limit-resource vlan minimum 16 maximum 4094<br /><br /> limit-resource monitor-session minimum 0 maximum 2<br /><br /> limit-resource vrf minimum 16 maximum 8192<br /><br /> limit-resource port-channel minimum 0 maximum 768<br /><br /> limit-resource u4route-mem minimum 32 maximum 32<br /><br /> limit-resource u6route-mem minimum 16 maximum 16<br /><br /> limit-resource m4route-mem minimum 48 maximum 48<br /><br /> limit-resource m6route-mem minimum 8 maximum 8<br /><br /><br /><br />interface Ethernet1/1<br /><br /><br /><br />interface Ethernet1/2<br /><br /><br /><br />interface Ethernet1/3<br /><br /><br /><br />interface Ethernet1/4<br /><br /><br />interface Ethernet1/5<br /><br /><br /><br />interface Ethernet1/6<br /><br /><br /><br />interface Ethernet1/7<br /><br /><br /><br />interface Ethernet1/8<br /><br /><br /><br />interface Ethernet1/9<br /><br /><br /><br />interface Ethernet1/10<br /><br /><br /><br />interface Ethernet1/11<br /><br /><br /><br />interface Ethernet1/12<br /><br /><br /><br />interface Ethernet1/13<br /><br /><br /><br />interface Ethernet1/14<br /><br /><br /><br />interface Ethernet1/15<br /><br /><br />interface Ethernet1/16<br /><br /><br /><br />interface Ethernet1/17<br /><br /><br /><br />interface Ethernet1/18<br /><br /><br /><br />interface Ethernet1/19<br /><br /><br /><br />interface Ethernet1/20<br /><br /><br /><br />interface Ethernet1/21<br /><br /><br /><br />interface Ethernet1/22<br /><br /><br /><br />interface Ethernet1/23<br /><br /><br /><br />interface Ethernet1/24<br /><br /><br /><br />interface Ethernet1/25<br /><br /><br /><br />interface Ethernet1/26<br /><br /><br />interface Ethernet1/27<br /><br /><br /><br />interface Ethernet1/28<br /><br /><br /><br />interface Ethernet1/29<br /><br /><br /><br />interface Ethernet1/30<br /><br /><br /><br />interface Ethernet1/31<br /><br /><br /><br />interface Ethernet1/32<br /><br /><br /><br />interface Ethernet2/1<br /><br /><br /><br />interface Ethernet2/2<br /><br /><br /><br />interface Ethernet2/3<br /><br /><br /><br />interface Ethernet2/4<br /><br /><br /><br />interface Ethernet2/5<br /><br /><br />interface Ethernet2/6<br /><br /><br /><br />interface Ethernet2/7<br /><br /><br /><br />interface Ethernet2/8<br /><br /><br /><br />interface Ethernet2/9<br /><br /><br /><br />interface Ethernet2/10<br /><br /><br /><br />interface Ethernet2/11<br /><br /><br /><br />interface Ethernet2/12<br /><br /><br /><br />interface Ethernet2/13<br /><br /><br /><br />interface Ethernet2/14<br /><br /><br /><br />interface Ethernet2/15<br /><br /><br /><br />interface Ethernet2/16<br /><br /><br />interface Ethernet2/17<br /><br /><br /><br />interface Ethernet2/18<br /><br /><br /><br />interface Ethernet2/19<br /><br /><br /><br />interface Ethernet2/20<br /><br /><br /><br />interface Ethernet2/21<br /><br /><br /><br />interface Ethernet2/22<br /><br /><br /><br />interface Ethernet2/23<br /><br /><br /><br />interface Ethernet2/24<br /><br /><br /><br />interface Ethernet2/25<br /><br /><br /><br />interface Ethernet2/26<br /><br /><br /><br />interface Ethernet2/27<br /><br /><br />interface Ethernet2/28<br /><br /><br /><br />interface Ethernet2/29<br /><br /><br /><br />interface Ethernet2/30<br /><br /><br /><br />interface Ethernet2/31<br /><br /><br /><br />interface Ethernet2/32<br /><br /><br /><br />interface Ethernet2/33<br /><br /><br /><br />interface Ethernet2/34<br /><br /><br /><br />interface Ethernet2/35<br /><br /><br /><br />interface Ethernet2/36<br /><br /><br /><br />interface Ethernet2/37<br /><br /><br /><br />interface Ethernet2/38<br /><br /><br />interface Ethernet2/39<br /><br /><br /><br />interface Ethernet2/40<br /><br /><br /><br />interface Ethernet2/41<br /><br /><br /><br />interface Ethernet2/42<br /><br /><br /><br />interface Ethernet2/43<br /><br /><br /><br />interface Ethernet2/44<br /><br /><br /><br />interface Ethernet2/45<br /><br /><br /><br />interface Ethernet2/46<br /><br /><br /><br />interface Ethernet2/47<br /><br /><br /><br />interface Ethernet2/48<br /><br /><br /><br />interface Ethernet3/1<br /><br /><br /><br />interface Ethernet3/2<br /><br /><br /><br />interface Ethernet3/3<br /><br /><br /><br />interface Ethernet3/4<br /><br /><br /><br />interface Ethernet3/5<br /><br /><br /><br />interface Ethernet3/6<br /><br /><br /><br />interface Ethernet3/7<br /><br /><br /><br />interface Ethernet3/8<br /><br /><br /><br />interface Ethernet3/9<br /><br /><br /><br />interface Ethernet3/10<br /><br /><br /><br />interface Ethernet3/11<br /><br /><br /><br />interface Ethernet3/12<br /><br /><br />interface Ethernet3/13<br /><br /><br /><br />interface Ethernet3/14<br /><br /><br /><br />interface Ethernet3/15<br /><br /><br /><br />interface Ethernet3/16<br /><br /><br /><br />interface Ethernet3/17<br /><br /><br /><br />interface Ethernet3/18<br /><br /><br /><br />interface Ethernet3/19<br /><br /><br /><br />interface Ethernet3/20<br /><br /><br /><br />interface Ethernet3/21<br /><br /><br /><br />interface Ethernet3/22<br /><br /><br /><br />interface Ethernet3/23<br /><br /><br />interface Ethernet3/24<br /><br /><br /><br />interface Ethernet3/25<br /><br /><br /><br />interface Ethernet3/26<br /><br /><br /><br />interface Ethernet3/27<br /><br /><br /><br />interface Ethernet3/28<br /><br /><br /><br />interface Ethernet3/29<br /><br /><br /><br />interface Ethernet3/30<br /><br /><br /><br />interface Ethernet3/31<br /><br /><br /><br />interface Ethernet3/32<br /><br /><br /><br />interface Ethernet3/33<br /><br /><br /><br />interface Ethernet3/34<br /><br /><br />interface Ethernet3/35<br /><br /><br /><br />interface Ethernet3/36<br /><br /><br /><br />interface Ethernet3/37<br /><br /><br /><br />interface Ethernet3/38<br /><br /><br /><br />interface Ethernet3/39<br /><br /><br /><br />interface Ethernet3/40<br /><br /><br /><br />interface Ethernet3/41<br /><br /><br /><br />interface Ethernet3/42<br /><br /><br /><br />interface Ethernet3/43<br /><br /><br /><br />interface Ethernet3/44<br /><br /><br /><br />interface Ethernet3/45<br /><br /><br />interface Ethernet3/46<br /><br /><br /><br />interface Ethernet3/47<br /><br /><br /><br />interface Ethernet3/48<br /><br /><br /><br />interface Ethernet4/1<br /><br /><br /><br />interface Ethernet4/2<br /><br /><br /><br />interface Ethernet4/3<br /><br /><br /><br />interface Ethernet4/4<br /><br /><br /><br />interface Ethernet4/5<br /><br /><br /><br />interface Ethernet4/6<br /><br /><br /><br />interface Ethernet4/7<br /><br /><br /><br />interface Ethernet4/8<br /><br /><br />interface Ethernet4/9<br /><br /><br /><br />interface Ethernet4/10<br /><br /><br /><br />interface Ethernet4/11<br /><br /><br /><br />interface Ethernet4/12<br /><br /><br /><br />interface Ethernet4/13<br /><br /><br /><br />interface Ethernet4/14<br /><br /><br /><br />interface Ethernet4/15<br /><br /><br /><br />interface Ethernet4/16<br /><br /><br /><br />interface Ethernet4/17<br /><br /><br /><br />interface Ethernet4/18<br /><br /><br /><br />interface Ethernet4/19<br /><br /><br />interface Ethernet4/20<br /><br /><br /><br />interface Ethernet4/21<br /><br /><br /><br />interface Ethernet4/22<br /><br /><br /><br />interface Ethernet4/23<br /><br /><br /><br />interface Ethernet4/24<br /><br /><br /><br />interface Ethernet4/25<br /><br /><br /><br />interface Ethernet4/26<br /><br /><br /><br />interface Ethernet4/27<br /><br /><br /><br />interface Ethernet4/28<br /><br /><br /><br />interface Ethernet4/29<br /><br /><br /><br />interface Ethernet4/30<br /><br /><br /><br />interface Ethernet4/31<br /><br /><br /><br />interface Ethernet4/32<br /><br /><br /><br />interface Ethernet4/33<br /><br /><br /><br />interface Ethernet4/34<br /><br /><br /><br />interface Ethernet4/35<br /><br /><br /><br />interface Ethernet4/36<br /><br /><br /><br />interface Ethernet4/37<br /><br /><br /><br />interface Ethernet4/38<br /><br /><br /><br />interface Ethernet4/39<br /><br /><br /><br />interface Ethernet4/40<br /><br /><br /><br />interface Ethernet4/41<br /><br /><br />interface Ethernet4/42<br /><br /><br /><br />interface Ethernet4/43<br /><br /><br /><br />interface Ethernet4/44<br /><br /><br /><br />interface Ethernet4/45<br /><br /><br /><br />interface Ethernet4/46<br /><br /><br /><br />interface Ethernet4/47<br /><br /><br /><br />interface Ethernet4/48<br /><br /><br /><br />interface Ethernet5/1<br /><br /><br /><br />interface Ethernet5/2<br /><br /><br /><br />interface Ethernet5/3<br /><br /><br /><br />interface Ethernet5/4<br /><br /><br />interface Ethernet5/5<br /><br /><br /><br />interface Ethernet5/6<br /><br /><br /><br />interface Ethernet5/7<br /><br /><br /><br />interface Ethernet5/8<br /><br /><br /><br />interface Ethernet5/9<br /><br /><br /><br />interface Ethernet5/10<br /><br /><br /><br />interface Ethernet5/11<br /><br /><br /><br />interface Ethernet5/12<br /><br /><br /><br />interface Ethernet5/13<br /><br /><br /><br />interface Ethernet5/14<br /><br /><br /><br />interface Ethernet5/15<br /><br /><br />interface Ethernet5/16<br /><br /><br /><br />interface Ethernet5/17<br /><br /><br /><br />interface Ethernet5/18<br /><br /><br /><br />interface Ethernet5/19<br /><br /><br /><br />interface Ethernet5/20<br /><br /><br /><br />interface Ethernet5/21<br /><br /><br /><br />interface Ethernet5/22<br /><br /><br /><br />interface Ethernet5/23<br /><br /><br /><br />interface Ethernet5/24<br /><br /><br /><br />interface Ethernet5/25<br /><br /><br /><br />interface Ethernet5/26<br /><br /><br />interface Ethernet5/27<br /><br /><br /><br />interface Ethernet5/28<br /><br /><br /><br />interface Ethernet5/29<br /><br /><br /><br />interface Ethernet5/30<br /><br /><br /><br />interface Ethernet5/31<br /><br /><br /><br />interface Ethernet5/32<br /><br /><br /><br />interface Ethernet5/33<br /><br /><br /><br />interface Ethernet5/34<br /><br /><br /><br />interface Ethernet5/35<br /><br /><br /><br />interface Ethernet5/36<br /><br /><br /><br />interface Ethernet5/37<br /><br /><br />interface Ethernet5/38<br /><br /><br /><br />interface Ethernet5/39<br /><br /><br /><br />interface Ethernet5/40<br /><br /><br /><br />interface Ethernet5/41<br /><br /><br /><br />interface Ethernet5/42<br /><br /><br /><br />interface Ethernet5/43<br /><br /><br /><br />interface Ethernet5/44<br /><br /><br /><br />interface Ethernet5/45<br /><br /><br /><br />interface Ethernet5/46<br /><br /><br /><br />interface Ethernet5/47<br /><br /><br /><br />interface Ethernet5/48<br /><br /><br />interface Ethernet6/1<br /><br /><br /><br />interface Ethernet6/2<br /><br /><br /><br />interface Ethernet6/3<br /><br /><br /><br />interface Ethernet6/4<br /><br /><br /><br />interface Ethernet6/5<br /><br /><br /><br />interface Ethernet6/6<br /><br /><br /><br />interface Ethernet6/7<br /><br /><br /><br />interface Ethernet6/8<br /><br /><br /><br />interface Ethernet6/9<br /><br /><br /><br />interface Ethernet6/10<br /><br /><br /><br />interface Ethernet6/11<br /><br /><br /><br />interface Ethernet6/12<br /><br /><br /><br />interface Ethernet6/13<br /><br /><br /><br />interface Ethernet6/14<br /><br /><br /><br />interface Ethernet6/15<br /><br /><br /><br />interface Ethernet6/16<br /><br /><br /><br />interface Ethernet6/17<br /><br /><br /><br />interface Ethernet6/18<br /><br /><br /><br />interface Ethernet6/19<br /><br /><br /><br />interface Ethernet6/20<br /><br /><br /><br />interface Ethernet6/21<br /><br /><br /><br />interface Ethernet6/22<br /><br /><br /><br />interface Ethernet6/23<br /><br /><br /><br />interface Ethernet6/24<br /><br /><br /><br />interface Ethernet6/25<br /><br /><br /><br />interface Ethernet6/26<br /><br /><br /><br />interface Ethernet6/27<br /><br /><br /><br />interface Ethernet6/28<br /><br /><br /><br />interface Ethernet6/29<br /><br /><br /><br />interface Ethernet6/30<br /><br /><br /><br />interface Ethernet6/31<br /><br /><br /><br />interface Ethernet6/32<br /><br /><br /><br />interface Ethernet6/33<br /><br /><br />interface Ethernet6/34<br /><br /><br /><br />interface Ethernet6/35<br /><br /><br /><br />interface Ethernet6/36<br /><br /><br /><br />interface Ethernet6/37<br /><br /><br /><br />interface Ethernet6/38<br /><br /><br /><br />interface Ethernet6/39<br /><br /><br /><br />interface Ethernet6/40<br /><br /><br /><br />interface Ethernet6/41<br /><br /><br /><br />interface Ethernet6/42<br /><br /><br /><br />interface Ethernet6/43<br /><br /><br /><br />interface Ethernet6/44<br /><br /><br />interface Ethernet6/45<br /><br /><br /><br />interface Ethernet6/46<br /><br /><br /><br />interface Ethernet6/47<br /><br /><br /><br />interface Ethernet6/48<br /><br /><br /><br />interface Ethernet7/1<br /><br /><br /><br />interface Ethernet7/2<br /><br /><br /><br />interface Ethernet7/3<br /><br /><br /><br />interface Ethernet7/4<br /><br /><br /><br />interface Ethernet7/5<br /><br /><br /><br />interface Ethernet7/6<br /><br /><br /><br />interface Ethernet7/7<br /><br /><br />interface Ethernet7/8<br /><br /><br /><br />interface Ethernet7/9<br /><br /><br /><br />interface Ethernet7/10<br /><br /><br /><br />interface Ethernet7/11<br /><br /><br /><br />interface Ethernet7/12<br /><br /><br /><br />interface Ethernet7/13<br /><br /><br /><br />interface Ethernet7/14<br /><br /><br /><br />interface Ethernet7/15<br /><br /><br /><br />interface Ethernet7/16<br /><br /><br /><br />interface Ethernet7/17<br /><br /><br /><br />interface Ethernet7/18<br /><br /><br /><br />interface Ethernet7/19<br /><br /><br /><br />interface Ethernet7/20<br /><br /><br /><br />interface Ethernet7/21<br /><br /><br /><br />interface Ethernet7/22<br /><br /><br /><br />interface Ethernet7/23<br /><br /><br /><br />interface Ethernet7/24<br /><br /><br /><br />interface Ethernet7/25<br /><br /><br /><br />interface Ethernet7/26<br /><br /><br /><br />interface Ethernet7/27<br /><br /><br /><br />interface Ethernet7/28<br /><br /><br /><br />interface Ethernet7/29<br /><br /><br /><br />interface Ethernet7/30<br /><br /><br /><br />interface Ethernet7/31<br /><br /><br /><br />interface Ethernet7/32<br /><br /><br /><br />interface Ethernet7/33<br /><br /><br /><br />interface Ethernet7/34<br /><br /><br /><br />interface Ethernet7/35<br /><br /><br /><br />interface Ethernet7/36<br /><br /><br /><br />interface Ethernet7/37<br /><br /><br /><br />interface Ethernet7/38<br /><br /><br /><br />interface Ethernet7/39<br /><br /><br /><br />interface Ethernet7/40<br /><br /><br /><br />interface Ethernet7/41<br /><br /><br /><br />interface Ethernet7/42<br /><br /><br /><br />interface Ethernet7/43<br /><br /><br /><br />interface Ethernet7/44<br /><br /><br /><br />interface Ethernet7/45<br /><br /><br /><br />interface Ethernet7/46<br /><br /><br /><br />interface Ethernet7/47<br /><br /><br /><br />interface Ethernet7/48<br /><br /><br /><br />interface Ethernet8/1<br /><br /><br /><br />interface Ethernet8/2<br /><br /><br /><br />interface Ethernet8/3<br /><br /><br /><br />interface Ethernet8/4<br /><br /><br /><br />interface Ethernet8/5<br /><br /><br /><br />interface Ethernet8/6<br /><br /><br /><br />interface Ethernet8/7<br /><br /><br /><br />interface Ethernet8/8<br /><br /><br /><br />interface Ethernet8/9<br /><br /><br /><br />interface Ethernet8/10<br /><br /><br /><br />interface Ethernet8/11<br /><br /><br /><br />interface Ethernet8/12<br /><br /><br /><br />interface Ethernet8/13<br /><br /><br /><br />interface Ethernet8/14<br /><br /><br />interface Ethernet8/15<br /><br /><br /><br />interface Ethernet8/16<br /><br /><br /><br />interface Ethernet8/17<br /><br /><br /><br />interface Ethernet8/18<br /><br /><br /><br />interface Ethernet8/19<br /><br /><br /><br />interface Ethernet8/20<br /><br /><br /><br />interface Ethernet8/21<br /><br /><br /><br />interface Ethernet8/22<br /><br /><br /><br />interface Ethernet8/23<br /><br /><br /><br />interface Ethernet8/24<br /><br /><br /><br />interface Ethernet8/25<br /><br /><br />interface Ethernet8/26<br /><br /><br /><br />interface Ethernet8/27<br /><br /><br /><br />interface Ethernet8/28<br /><br /><br /><br />interface Ethernet8/29<br /><br /><br /><br />interface Ethernet8/30<br /><br /><br /><br />interface Ethernet8/31<br /><br /><br /><br />interface Ethernet8/32<br /><br /><br /><br />interface Ethernet8/33<br /><br /><br /><br />interface Ethernet8/34<br /><br /><br /><br />interface Ethernet8/35<br /><br /><br /><br />interface Ethernet8/36<br /><br /><br />interface Ethernet8/37<br /><br /><br /><br />interface Ethernet8/38<br /><br /><br /><br />interface Ethernet8/39<br /><br /><br /><br />interface Ethernet8/40<br /><br /><br /><br />interface Ethernet8/41<br /><br /><br /><br />interface Ethernet8/42<br /><br /><br /><br />interface Ethernet8/43<br /><br /><br /><br />interface Ethernet8/44<br /><br /><br /><br />interface Ethernet8/45<br /><br /><br /><br />interface Ethernet8/46<br /><br /><br /><br />interface Ethernet8/47<br /><br /><br />interface Ethernet8/48<br /><br /><br /><br />interface Ethernet11/1<br /><br /><br /><br />interface Ethernet11/2<br /><br /><br /><br />interface Ethernet11/3<br /><br /><br /><br />interface Ethernet11/4<br /><br /><br /><br />interface Ethernet11/5<br /><br /><br /><br />interface Ethernet11/6<br /><br /><br /><br />interface Ethernet11/7<br /><br /><br /><br />interface Ethernet11/8<br /><br /><br /><br />interface Ethernet11/9<br /><br /><br /><br />interface Ethernet11/10<br /><br /><br />interface Ethernet11/11<br /><br /><br /><br />interface Ethernet11/12<br /><br /><br /><br />interface Ethernet11/13<br /><br /><br /><br />interface Ethernet11/14<br /><br /><br /><br />interface Ethernet11/15<br /><br /><br /><br />interface Ethernet11/16<br /><br /><br /><br />interface Ethernet11/17<br /><br /><br /><br />interface Ethernet11/18<br /><br /><br /><br />interface Ethernet11/19<br /><br /><br /><br />interface Ethernet11/20<br /><br /><br /><br />interface Ethernet11/21<br /><br /><br /><br />interface Ethernet11/22<br /><br /><br /><br />interface Ethernet11/23<br /><br /><br /><br />interface Ethernet11/24<br /><br /><br /><br />interface Ethernet11/25<br /><br /><br /><br />interface Ethernet11/26<br /><br /><br /><br />interface Ethernet11/27<br /><br /><br /><br />interface Ethernet11/28<br /><br /><br /><br />interface Ethernet11/29<br /><br /><br /><br />interface Ethernet11/30<br /><br /><br /><br />interface Ethernet11/31<br /><br /><br /><br />interface Ethernet11/32<br /><br /><br /><br />interface Ethernet11/33<br /><br /><br /><br />interface Ethernet11/34<br /><br /><br /><br />interface Ethernet11/35<br /><br /><br /><br />interface Ethernet11/36<br /><br /><br /><br />interface Ethernet11/37<br /><br /><br /><br />interface Ethernet11/38<br /><br /><br /><br />interface Ethernet11/39<br /><br /><br /><br />interface Ethernet11/40<br /><br /><br /><br />interface Ethernet11/41<br /><br /><br /><br />interface Ethernet11/42<br /><br /><br /><br />interface Ethernet11/43<br /><br /><br /><br />interface Ethernet11/44<br /><br /><br /><br />interface Ethernet11/45<br /><br /><br /><br />interface Ethernet11/46<br /><br /><br /><br />interface Ethernet11/47<br /><br /><br /><br />interface Ethernet11/48<br /><br /><br /><br />interface Ethernet12/1<br /><br /><br /><br />interface Ethernet12/2<br /><br /><br /><br />interface Ethernet12/3<br /><br /><br /><br />interface Ethernet12/4<br /><br /><br /><br />interface Ethernet12/5<br /><br /><br /><br />interface Ethernet12/6<br /><br /><br /><br />interface Ethernet12/7<br /><br /><br /><br />interface Ethernet12/8<br /><br /><br /><br />interface Ethernet12/9<br /><br /><br /><br />interface Ethernet12/10<br /><br /><br /><br />interface Ethernet12/11<br /><br /><br /><br />interface Ethernet12/12<br /><br /><br /><br />interface Ethernet12/13<br /><br /><br /><br />interface Ethernet12/14<br /><br /><br /><br />interface Ethernet12/15<br /><br /><br /><br />interface Ethernet12/16<br /><br /><br /><br />interface Ethernet12/17<br /><br /><br /><br />interface Ethernet12/18<br /><br /><br /><br />interface Ethernet12/19<br /><br /><br /><br />interface Ethernet12/20<br /><br /><br /><br />interface Ethernet12/21<br /><br /><br /><br />interface Ethernet12/22<br /><br /><br /><br />interface Ethernet12/23<br /><br /><br /><br />interface Ethernet12/24<br /><br /><br /><br />interface Ethernet12/25<br /><br /><br /><br />interface Ethernet12/26<br /><br /><br /><br />interface Ethernet12/27<br /><br /><br /><br />interface Ethernet12/28<br /><br /><br /><br />interface Ethernet12/29<br /><br /><br /><br />interface Ethernet12/30<br /><br /><br /><br />interface Ethernet12/31<br /><br /><br /><br />interface Ethernet12/32<br /><br /><br /><br />interface Ethernet12/33<br /><br /><br /><br />interface Ethernet12/34<br /><br /><br /><br />interface Ethernet12/35<br /><br /><br /><br />interface Ethernet12/36<br /><br /><br /><br />interface Ethernet12/37<br /><br /><br /><br />interface Ethernet12/38<br /><br /><br /><br />interface Ethernet12/39<br /><br /><br />interface Ethernet12/40<br /><br /><br /><br />interface Ethernet12/41<br /><br /><br /><br />interface Ethernet12/42<br /><br /><br /><br />interface Ethernet12/43<br /><br /><br /><br />interface Ethernet12/44<br /><br /><br /><br />interface Ethernet12/45<br /><br /><br /><br />interface Ethernet12/46<br /><br /><br /><br />interface Ethernet12/47<br /><br /><br /><br />interface Ethernet12/48<br /><br /><br /><br />interface Ethernet13/1<br /><br /><br /><br />interface Ethernet13/2<br /><br /><br /><br />interface Ethernet13/3<br /><br /><br /><br />interface Ethernet13/4<br /><br /><br /><br />interface Ethernet13/5<br /><br /><br /><br />interface Ethernet13/6<br /><br /><br /><br />interface Ethernet13/7<br /><br /><br /><br />interface Ethernet13/8<br /><br /><br /><br />interface Ethernet13/9<br /><br /><br /><br />interface Ethernet13/10<br /><br /><br /><br />interface Ethernet13/11<br /><br /><br /><br />interface Ethernet13/12<br /><br /><br /><br />interface Ethernet13/13<br /><br /><br />interface Ethernet13/14<br /><br /><br /><br />interface Ethernet13/15<br /><br /><br /><br />interface Ethernet13/16<br /><br /><br /><br />interface Ethernet13/17<br /><br /><br /><br />interface Ethernet13/18<br /><br /><br /><br />interface Ethernet13/19<br /><br /><br /><br />interface Ethernet13/20<br /><br /><br /><br />interface Ethernet13/21<br /><br /><br /><br />interface Ethernet13/22<br /><br /><br /><br />interface Ethernet13/23<br /><br /><br /><br />interface Ethernet13/24<br /><br /><br />interface Ethernet13/25<br /><br /><br /><br />interface Ethernet13/26<br /><br /><br /><br />interface Ethernet13/27<br /><br /><br /><br />interface Ethernet13/28<br /><br /><br /><br />interface Ethernet13/29<br /><br /><br /><br />interface Ethernet13/30<br /><br /><br /><br />interface Ethernet13/31<br /><br /><br /><br />interface Ethernet13/32<br /><br /><br /><br />interface Ethernet13/33<br /><br /><br /><br />interface Ethernet13/34<br /><br /><br /><br />interface Ethernet13/35<br /><br /><br /><br />interface Ethernet13/36<br /><br /><br /><br />interface Ethernet13/37<br /><br /><br /><br />interface Ethernet13/38<br /><br /><br /><br />interface Ethernet13/39<br /><br /><br /><br />interface Ethernet13/40<br /><br /><br /><br />interface Ethernet13/41<br /><br /><br /><br />interface Ethernet13/42<br /><br /><br /><br />interface Ethernet13/43<br /><br /><br /><br />interface Ethernet13/44<br /><br /><br /><br />interface Ethernet13/45<br /><br /><br /><br />interface Ethernet13/46<br /><br /><br /><br />interface Ethernet13/47<br /><br /><br /><br />interface Ethernet13/48<br /><br /><br /><br />interface Ethernet14/1<br /><br /><br /><br />interface Ethernet14/2<br /><br /><br /><br />interface Ethernet14/3<br /><br /><br /><br />interface Ethernet14/4<br /><br /><br /><br />interface Ethernet14/5<br /><br /><br /><br />interface Ethernet14/6<br /><br /><br /><br />interface Ethernet14/7<br /><br /><br /><br />interface Ethernet14/8<br /><br /><br /><br />interface Ethernet14/9<br /><br /><br />interface Ethernet14/10<br /><br /><br /><br />interface Ethernet14/11<br /><br /><br /><br />interface Ethernet14/12<br /><br /><br /><br />interface Ethernet14/13<br /><br /><br /><br />interface Ethernet14/14<br /><br /><br /><br />interface Ethernet14/15<br /><br /><br /><br />interface Ethernet14/16<br /><br /><br /><br />interface Ethernet14/17<br /><br /><br /><br />interface Ethernet14/18<br /><br /><br /><br />interface Ethernet14/19<br /><br /><br /><br />interface Ethernet14/20<br /><br /><br />interface Ethernet14/21<br /><br /><br /><br />interface Ethernet14/22<br /><br /><br /><br />interface Ethernet14/23<br /><br /><br /><br />interface Ethernet14/24<br /><br /><br /><br />interface Ethernet14/25<br /><br /><br /><br />interface Ethernet14/26<br /><br /><br /><br />interface Ethernet14/27<br /><br /><br /><br />interface Ethernet14/28<br /><br /><br /><br />interface Ethernet14/29<br /><br /><br /><br />interface Ethernet14/30<br /><br /><br /><br />interface Ethernet14/31<br /><br /><br /><br />interface Ethernet14/32<br /><br /><br /><br />interface Ethernet14/33<br /><br /><br /><br />interface Ethernet14/34<br /><br /><br /><br />interface Ethernet14/35<br /><br /><br /><br />interface Ethernet14/36<br /><br /><br /><br />interface Ethernet14/37<br /><br /><br /><br />interface Ethernet14/38<br /><br /><br /><br />interface Ethernet14/39<br /><br /><br /><br />interface Ethernet14/40<br /><br /><br /><br />interface Ethernet14/41<br /><br /><br /><br />interface Ethernet14/42<br /><br /><br />interface Ethernet14/43<br /><br /><br /><br />interface Ethernet14/44<br /><br /><br /><br />interface Ethernet14/45<br /><br /><br /><br />interface Ethernet14/46<br /><br /><br /><br />interface Ethernet14/47<br /><br /><br /><br />interface Ethernet14/48<br /><br /><br /><br />interface mgmt0<br /><br /> ip address 10.1.1.101/24<br /><br />line console<br /><br />boot kickstart bootflash:/n7000-s1-kickstart.4.1.4.bin sup-1<br /><br />boot system bootflash:/n7000-s1-dk9.4.1.4.bin sup-1<br /><br />boot kickstart bootflash:/n7000-s1-kickstart.4.1.4.bin sup-2<br /><br />boot system bootflash:/n7000-s1-dk9.4.1.4.bin sup-2<br /><br /><br /><br /><br />----------------------------------------------------------------------<br />Next time I will post the upgrade process that we did for this monster switch.Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-5008142319410371452009-09-03T14:02:00.000-04:002009-09-03T15:23:22.334-04:00Privilege command for Cisco IOS CAT 3750/3560/3550Recently, I showed you how to enable radius authentication using Microsoft Server 2003 IAS. Today I will show you how to control access to the switch and show logs of changes by user associated with the users name. Authorization and Accounting is important especially if you have multiple users do changes on your network switches. Instead of playing the guessing game of who made the boo boo in your network, you can actually pin point and show them all the commands they have entered before the issue. Not only that you can pin point who did it, you can also go back and undo the changes since you know what was done. This can also be done using a Cisco ACS server but if you don't have it in place, this is the cheap way to do it.<br /><br />Below is the command sample for privilege commands.<br /><br />enable secret level 2 poweruser <span style="color: rgb(51, 102, 255);">-> Creates enable password "poweruser" as the enable 2 password</span><br />privilege exec level 2 config t <span style="color: rgb(51, 102, 255);">-> Allows the use of "config t"</span> <span style="color: rgb(51, 102, 255);">for level 2 user</span><br />privilege exec level 2 show run <span style="color: rgb(51, 102, 255);">-> Allows the use of "show run"</span> <span style="color: rgb(51, 102, 255);">for level 2 user</span><br />privilege exec level 2 write mem <span style="color: rgb(51, 102, 255);">-> Allows the use of "write mem"</span> <span style="color: rgb(51, 102, 255);">for level 2 user</span> <span style="color: rgb(51, 102, 255);">saving changes</span><br />privilege configure level 2 interface<span style="color: rgb(51, 102, 255);"> -> Allows the use of "interface command" for level 2 user in config mode</span><br />privilege interface level 2 description <span style="color: rgb(51, 102, 255);"> -> Allows the use of "description command" for level 2 user in config mode</span><br /><br /><span style="color: rgb(51, 102, 255);">The commands below allows the user to change speed and duplex of an interface in config mode</span><br />privilege interface level 2 speed 10<br />privilege interface level 2 speed 100<br />privilege interface level 2 speed auto<br />privilege interface level 2 duplex half<br />privilege interface level 2 duplex full<br />privilege interface level 2 duplex auto<br /><br /><span style="color: rgb(51, 102, 255);">The commands below allows the user to change VLANs of an interface in config mode</span><br />privilege interface level 2 switchport access vlan<br /><br /><span style="color: rgb(51, 102, 255);">The command below allows the user to shutdown an interface in config mode</span><br />privilege interface level 2 shutdown<br /><br /><span style="color: rgb(51, 102, 255);">The commands below allows the user to set the portfast to an interface in config mode</span><br />privilege interface level 2 spanning-tree portfast<br /><br />You can pretty much add the commands that you would like them to be able to access.<br /><br />All we did was to create another enable password level 2. So when you login to the switch instead of using just enable, you will type " enable 2" and the password will be "poweruser"<br /><br /><br />After you enable the privilege commands you can also enable Archive this will allow you to see changes made on the switch by a user.<br /><br />archive<br />log config<br />logging enable<br />logging size 200<br />notify syslog contenttype plaintext<br />hidekeys<br /><br />- To show the arcvhive list<br />show archive log config all<br /><br />- To clear the archive list<br />clear archive log config<br /><br /><br /><br />Now let check the configuration<br /><br />rbautista_adm know the regular enable password and rbautista only knows the enable 2 password<br /><br />Below I can change the hostname since I have the access to everything.<br /><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDM4cjTBl5tL6PSg-yQS59Trk3oS2UxCxnAYQ_E4K02v099oBlY1kmHDaPhFIADhxyrg-9x0CbxDapF6UvPKlsvYPb8e3PafFT9soh4gwXl26tnUGTmWACN6hEDpQHSoCFPxk3Lm1SQzls/s1600-h/full+pri.gif"><img style="cursor: pointer; width: 314px; height: 320px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDM4cjTBl5tL6PSg-yQS59Trk3oS2UxCxnAYQ_E4K02v099oBlY1kmHDaPhFIADhxyrg-9x0CbxDapF6UvPKlsvYPb8e3PafFT9soh4gwXl26tnUGTmWACN6hEDpQHSoCFPxk3Lm1SQzls/s320/full+pri.gif" alt="" id="BLOGGER_PHOTO_ID_5377319139947101970" border="0" /></a><br /><br />Below rbautista logs in using enable 2 password<br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFzKsSlKi2Ot7m8_awEVpFQdLAPtFv_BuRCnrx4srHBpwYZxiNiqLRa9BQEWDW6INczKkOnrsIog_cglRyuXGZFWYSbkDtZJHYv5FRwOWvY2vkWCtkSEUij4RbQZCC4pzl6S6-Rpc7GTEG/s1600-h/no+pri.gif"><img style="cursor: pointer; width: 320px; height: 177px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFzKsSlKi2Ot7m8_awEVpFQdLAPtFv_BuRCnrx4srHBpwYZxiNiqLRa9BQEWDW6INczKkOnrsIog_cglRyuXGZFWYSbkDtZJHYv5FRwOWvY2vkWCtkSEUij4RbQZCC4pzl6S6-Rpc7GTEG/s320/no+pri.gif" alt="" id="BLOGGER_PHOTO_ID_5377320223216503586" border="0" /></a><br />The user that uses enable 2 password cannot change the hostname of the switch because hostname command is not listed on his access.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFZHpcX6T8pdhXykfn4SRCAIsCfyrXtLNGJ8alRa8i8EIiKoNqJBexTS5gGMkdzHX6cY3VfEegQCZjqYo0eOU5sZXSyWEg2yQWjpTJ-WasnUCifyHnhsXFWpHifIyohl5JdSGHTSlsNI-n/s1600-h/no+pri2.gif"><img style="cursor: pointer; width: 320px; height: 240px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFZHpcX6T8pdhXykfn4SRCAIsCfyrXtLNGJ8alRa8i8EIiKoNqJBexTS5gGMkdzHX6cY3VfEegQCZjqYo0eOU5sZXSyWEg2yQWjpTJ-WasnUCifyHnhsXFWpHifIyohl5JdSGHTSlsNI-n/s320/no+pri2.gif" alt="" id="BLOGGER_PHOTO_ID_5377320301143447010" border="0" /></a><br />He also have no access to show archive. Now lets login using the regular enable with rbautista_adm.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6geP1dtR_75on6oEq5iqYnWGk6DSieWSTRyCrrbRl08mYYizmnOvGi5mnb3Y-EfmkdqbC4V0-wO3buDrbFOFtifjMe_wky04UnOaNcPM4CFO2lVAA0Ot_P4YOAkyV_4yto9EYCfJvtNRA/s1600-h/show+archive2.gif"><img style="cursor: pointer; width: 320px; height: 150px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6geP1dtR_75on6oEq5iqYnWGk6DSieWSTRyCrrbRl08mYYizmnOvGi5mnb3Y-EfmkdqbC4V0-wO3buDrbFOFtifjMe_wky04UnOaNcPM4CFO2lVAA0Ot_P4YOAkyV_4yto9EYCfJvtNRA/s320/show+archive2.gif" alt="" id="BLOGGER_PHOTO_ID_5377322950184579378" border="0" /></a><br /><br />As you can see the changes I made was listed above. You can also clear the archive logs if it gets full. We set it up to have 200 queue length default is 100 maximum queue length is 1000.<br /><br />Note: Don't get confuse with rbautista_adm and rbautista. I can log in as rbautista_adm but if I use the enable 2 password I still have only access to commands we made available.Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-50467198549754220652009-09-03T13:32:00.000-04:002009-09-03T13:58:53.886-04:00Our network closets.I just wanted to share this network closets that we built in the past year. All our network closet does NOT look like this. We have plans to clean it up, it's just very overwhelming and with all the other projects we have we couldn't do it. We are actually outsourcing the closet clean up.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6IKQTdtjNYYj7IC03kfUQjl3gSRtRzN7O5XS0x8OYRQgXfjzUW3OjMmTEIRNdqxfQvpXpdy7oeG6o73IeZWfKyGstUkBo7H3wx5cQ-v5LzmLQzlVjCZfum5ws_63QUXjmy_75Hg0XJLPr/s1600-h/DSC03237.JPG"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer; width: 320px; height: 240px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6IKQTdtjNYYj7IC03kfUQjl3gSRtRzN7O5XS0x8OYRQgXfjzUW3OjMmTEIRNdqxfQvpXpdy7oeG6o73IeZWfKyGstUkBo7H3wx5cQ-v5LzmLQzlVjCZfum5ws_63QUXjmy_75Hg0XJLPr/s320/DSC03237.JPG" alt="" id="BLOGGER_PHOTO_ID_5377298348183616946" border="0" /></a><br /><br /><br />This closet was one of the first closet I ever built with 3 3750G all stacked together.<br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPctlEJaEEBmNJIQObGO-EkXOEXTZq4-nIra9eU9cMskwQXzbzhn4nCRFrSpsFMgMkHCGNhWaTTeg1kEMQ6-U1lNvQgfQbg9KvMxf_5kWTI-ZidUgQl2d5w4IMpA7MJZHkoRK0O1H0yamg/s1600-h/DSC05906.JPG"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer; width: 320px; height: 240px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPctlEJaEEBmNJIQObGO-EkXOEXTZq4-nIra9eU9cMskwQXzbzhn4nCRFrSpsFMgMkHCGNhWaTTeg1kEMQ6-U1lNvQgfQbg9KvMxf_5kWTI-ZidUgQl2d5w4IMpA7MJZHkoRK0O1H0yamg/s320/DSC05906.JPG" alt="" id="BLOGGER_PHOTO_ID_5377299214429238610" border="0" /></a><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />Before closet cleanup<br /><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcRr5j1c4MkoVW3fteLpF5-d4SsArMy_YJHzqepl7R4-N_U1u74RbxISY29jfuZ2s093d8G0HeCVfdW-HzWYvGp144jP0AKEfV0MIUOXJyGOPUHxhYvhzhPrTUcEmtCHtXE0w0HP610-nk/s1600-h/DSC05904.JPG"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer; width: 240px; height: 320px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcRr5j1c4MkoVW3fteLpF5-d4SsArMy_YJHzqepl7R4-N_U1u74RbxISY29jfuZ2s093d8G0HeCVfdW-HzWYvGp144jP0AKEfV0MIUOXJyGOPUHxhYvhzhPrTUcEmtCHtXE0w0HP610-nk/s320/DSC05904.JPG" alt="" id="BLOGGER_PHOTO_ID_5377299457761049906" border="0" /></a>After. We upgraded our 3500XL end of life switches with CAT 3560G's.<br /><br /><br />We plugged in everything from patch panel port to switch ports hoping that we can control it not having other people plugging anything to our switches.<br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />Below are other network closets that we setup.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUbBpZ5Geqo8EkkVY2ZTrhB3x26ipVa-WSR4dCHDBd1r0zjhecgLYzf0f1pl8o6e8QWPtRGp4layxY2fWCVFkE7-7rvWSsL9DNYvharnkNZP5U1zIIoi-REYjUQOrlu5e8WtQgbJiLyIpH/s1600-h/DSC05974.JPG"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer; width: 320px; height: 240px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUbBpZ5Geqo8EkkVY2ZTrhB3x26ipVa-WSR4dCHDBd1r0zjhecgLYzf0f1pl8o6e8QWPtRGp4layxY2fWCVFkE7-7rvWSsL9DNYvharnkNZP5U1zIIoi-REYjUQOrlu5e8WtQgbJiLyIpH/s320/DSC05974.JPG" alt="" id="BLOGGER_PHOTO_ID_5377300394801373154" border="0" /></a><br /><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjmT1-kCqHJze15wyW-sDiIUlSHkSyr6ULPZnvNf-r0S8nfFK1B5nVYEATHRXWYfsFNH_0MT9_UPaqyhchVAxjYBgbiCPA6YlDZd-Er1mgGQtl6xmUXJsSTb0hU7DIKwhl3ENfsX0cViHQ/s1600-h/DSC05975.JPG"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer; width: 320px; height: 240px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjmT1-kCqHJze15wyW-sDiIUlSHkSyr6ULPZnvNf-r0S8nfFK1B5nVYEATHRXWYfsFNH_0MT9_UPaqyhchVAxjYBgbiCPA6YlDZd-Er1mgGQtl6xmUXJsSTb0hU7DIKwhl3ENfsX0cViHQ/s320/DSC05975.JPG" alt="" id="BLOGGER_PHOTO_ID_5377300567913086114" border="0" /></a><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5Kkp367PJyG-FlLSCk3d3c_JsveO7LWGoSSfjolY681Q9OD3GiFiPJSiXrLeiZrK-cJgu1A3AylUqCo1ShskrwgpjniIKgXoOlEYC-35FTlq93fB9br0VxDrZO1DonKul_wxgCttFG0KG/s1600-h/DSC01097.JPG"><img style="cursor: pointer; width: 320px; height: 240px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5Kkp367PJyG-FlLSCk3d3c_JsveO7LWGoSSfjolY681Q9OD3GiFiPJSiXrLeiZrK-cJgu1A3AylUqCo1ShskrwgpjniIKgXoOlEYC-35FTlq93fB9br0VxDrZO1DonKul_wxgCttFG0KG/s320/DSC01097.JPG" alt="" id="BLOGGER_PHOTO_ID_5377300979274005858" border="0" /></a><br />2 CAT3750 G switches stacked together.<br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoWx5iHAffEYShqTwhmh-peYEUsOa0n1lypb_wtEZled7gGepemxRq_4XitCnTFyyFGn4N4ZQiVPGbit3gPdNhPz0HQUPT76rqqyVuV7hRECD9vfDSB0xS30H0yB0uSn95wzu9jhfWsN8P/s1600-h/DSC01100.JPG"><img style="cursor: pointer; width: 320px; height: 240px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoWx5iHAffEYShqTwhmh-peYEUsOa0n1lypb_wtEZled7gGepemxRq_4XitCnTFyyFGn4N4ZQiVPGbit3gPdNhPz0HQUPT76rqqyVuV7hRECD9vfDSB0xS30H0yB0uSn95wzu9jhfWsN8P/s320/DSC01100.JPG" alt="" id="BLOGGER_PHOTO_ID_5377301195557786306" border="0" /></a><br /><br /><br />Please feel free to add any comments or suggestions on how you do your network closets.Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-91672314145899013492009-09-03T12:35:00.000-04:002009-09-03T12:55:17.543-04:00Enabling Radius authentication with Cisco IOS switches (3750/3560/3550/3500XL) using IAS on Microsoft 2003 server.This documentation assumes that Internet Authentication Service or IAS on Microsoft Server 2003 is working properly. It's best practice to do this on a test environment and not in your live network. The configuration below is the actual configuration we use in our network switches <p class="MsoNormal" style="text-align: center;" align="center"><o:p> </o:p></p> <p class="MsoNormal"><br />In Windows Server under administration tools click on Internet Authentication Service.</p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" spt="75" preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f"> <v:stroke joinstyle="miter"> <v:formulas> <v:f eqn="if lineDrawn pixelLineWidth 0"> <v:f eqn="sum @0 1 0"> <v:f eqn="sum 0 0 @1"> <v:f eqn="prod @2 1 2"> <v:f eqn="prod @3 21600 pixelWidth"> <v:f eqn="prod @3 21600 pixelHeight"> <v:f eqn="sum @0 0 1"> <v:f eqn="prod @6 1 2"> <v:f eqn="prod @7 21600 pixelWidth"> <v:f eqn="sum @8 21600 0"> <v:f eqn="prod @7 21600 pixelHeight"> <v:f eqn="sum @10 21600 0"> </v:formulas> <v:path extrusionok="f" gradientshapeok="t" connecttype="rect"> <o:lock ext="edit" aspectratio="t"> </v:shapetype><v:shape id="_x0000_i1025" type="#_x0000_t75" style="'width:241.5pt;"> <v:imagedata src="file:///C:\DOCUME~1\RBAUTI~1\LOCALS~1\Temp\msohtml1\01\clip_image001.png" title=""> </v:shape><![endif]--><!--[if !vml]--><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL5F7sgwSbdfPtZZ6YtKIlWPrEFCTqqJRI-Bk7dBreLf1ZxmHH1ZNkbbeUgWkt2MyhS80CKQRilXWpZcs0KVmrPxB-kOzJgyIJ-T7pieTS5BSTYu150dQ4_mHVvGERC5JBgxIBKYmMUhcQ/s1600-h/ias.gif"><img style="cursor: pointer; width: 320px; height: 188px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL5F7sgwSbdfPtZZ6YtKIlWPrEFCTqqJRI-Bk7dBreLf1ZxmHH1ZNkbbeUgWkt2MyhS80CKQRilXWpZcs0KVmrPxB-kOzJgyIJ-T7pieTS5BSTYu150dQ4_mHVvGERC5JBgxIBKYmMUhcQ/s320/ias.gif" alt="" id="BLOGGER_PHOTO_ID_5377281286913019346" border="0" /></a><!--[endif]--></p> <p class="MsoNormal">Right click on RADIUS Clients and click on “new RADIUS client” enter a friendly name and Client address. Click Next.</p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><!--[if gte vml 1]><v:shape id="_x0000_i1026" type="#_x0000_t75" style="'width:373.5pt;height:281.25pt'"> <v:imagedata src="file:///C:\DOCUME~1\RBAUTI~1\LOCALS~1\Temp\msohtml1\01\clip_image003.png" title=""> </v:shape><![endif]--><!--[if !vml]--><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGLMMzUQwAf323sogtUiVXL0ZC-7hqkkfe_HBZNfZcbKB6wKKgbWCiGuzcHNEWoMzfVP9serVaRnabF6f9-ihCAYpI3Gx4DvAQuJFfs9SE4Tya-cmNcWtZ2-l4d4mKtkHZ_nnLEoO-kwyq/s1600-h/newradius.gif"><img style="cursor: pointer; width: 320px; height: 242px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGLMMzUQwAf323sogtUiVXL0ZC-7hqkkfe_HBZNfZcbKB6wKKgbWCiGuzcHNEWoMzfVP9serVaRnabF6f9-ihCAYpI3Gx4DvAQuJFfs9SE4Tya-cmNcWtZ2-l4d4mKtkHZ_nnLEoO-kwyq/s320/newradius.gif" alt="" id="BLOGGER_PHOTO_ID_5377282341351097202" border="0" /></a><!--[endif]--></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal">Type the shared secret password. You will need <span style=""> </span>this later when you configure the Cisco switch. I used <span style="color:red;">cisco </span>as the shared secret<span style="color:red;"> </span>for this example. Click finish and you should have this client added to your radius clients. </p> <p class="MsoNormal"><!--[if gte vml 1]><v:shape id="_x0000_i1027" type="#_x0000_t75" style="'width:374.25pt;height:285pt'"> <v:imagedata src="file:///C:\DOCUME~1\RBAUTI~1\LOCALS~1\Temp\msohtml1\01\clip_image005.png" title=""> </v:shape><![endif]--><!--[if !vml]--><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiT7RsoQrdY03kKKlA2JpGy2AlWS03bGOptNMw_5iIWgysuZTxcyyuoYj8NLyR6ueYyXNDcmr0Gob_b58DO1n4K8DgE1PmSxHMXfJsA_2ShiUrWuKTXSw6Wipy-J0JpJ6eElbs_ufrFiTfc/s1600-h/secret.gif"><img style="cursor: pointer; width: 320px; height: 242px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiT7RsoQrdY03kKKlA2JpGy2AlWS03bGOptNMw_5iIWgysuZTxcyyuoYj8NLyR6ueYyXNDcmr0Gob_b58DO1n4K8DgE1PmSxHMXfJsA_2ShiUrWuKTXSw6Wipy-J0JpJ6eElbs_ufrFiTfc/s320/secret.gif" alt="" id="BLOGGER_PHOTO_ID_5377282679018103394" border="0" /></a><!--[endif]--></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><br /></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal">Login to 1.1.1.1 which is the IP address you added in IAS<br /></p><p class="MsoNormal">from the Cisco switch configuration terminal enter the command below<br /></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal">aaa new-model<o:p></o:p></p> <p class="MsoNormal">aaa authentication login RADIUS group radius line<o:p></o:p></p> <p class="MsoNormal">radius-server host <span style="color:red;">192.168.1.200</span> auth-port 1645 acct-port 1646 key <span style="color:red;">cisco<o:p></o:p></span></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal">(Note: host is the ip address of your radius server and key is the shared secret key we entered from the Radius server when we created the client) If you have multiple radius servers you can add another one as a back up. Make sure that all the Radius servers are configured to accept request from all the radius clients. <o:p></o:p></p> <p class="MsoNormal">line vty 0 4<o:p></o:p></p> <p class="MsoNormal"><span style=""> </span>login authentication RADIUS</p> <p class="MsoNormal">line vty 5 15</p><p class="MsoNormal">password cisco<br /></p><p class="MsoNormal">(Note: if for some reason the switch cannot get to the radius server you will be ask for the telnet password) </p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal"><o:p> </o:p></p> <p class="MsoNormal">Log out and telnet to the switch you should get prompted for a username and password.<br /></p><p class="MsoNormal"><br /></p><p class="MsoNormal">Next time I will show you how to add privilege commands to allow power users certain commands without the use of Cisco ACS.<br /></p>Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0tag:blogger.com,1999:blog-3012523332314370842.post-10391154250859515002009-08-28T16:25:00.000-04:002009-08-28T16:40:59.352-04:00Our new Cisco Nexus 7018We just got our new Cisco Nexus 7018 and this switch is a monster!<br /><br />With the Panduit rack. The only rack for the Cisco Nexus<br /><div style="text-align: left;"><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_VcrrMr__6mnEVg1LxVx6yTS16kB-yev7Q2uAlz5XsvjLvIM5KQkJxYAgqeMFxx_Sr2fZykrMgaIK-XlzATNrC7JMSKXlQy48aj-RhyZwxLDsu5VxiX_h7fCZtz1Tpwy_4SUUyMWZG6LB/s1600-h/DSC04492.JPG">. <img style="cursor: pointer; width: 240px; height: 320px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_VcrrMr__6mnEVg1LxVx6yTS16kB-yev7Q2uAlz5XsvjLvIM5KQkJxYAgqeMFxx_Sr2fZykrMgaIK-XlzATNrC7JMSKXlQy48aj-RhyZwxLDsu5VxiX_h7fCZtz1Tpwy_4SUUyMWZG6LB/s320/DSC04492.JPG" alt="" id="BLOGGER_PHOTO_ID_5375115082586699794" border="0" /></a><br /></div><br /><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi97w0FEUnsiWLBEStdacRLu3wi0U5p6QZywsjbYhzi2qxDBzfZpcTS3-3ZMDCUdebfZP4p7fhoZfmxZCHr5uSN3oJqMAe5_QjnyTvthIhl2pkaJRh6HFFect_jbfoGxH2G-7kL427F4ZuU/s1600-h/DSC04490.JPG"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer; width: 240px; height: 320px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi97w0FEUnsiWLBEStdacRLu3wi0U5p6QZywsjbYhzi2qxDBzfZpcTS3-3ZMDCUdebfZP4p7fhoZfmxZCHr5uSN3oJqMAe5_QjnyTvthIhl2pkaJRh6HFFect_jbfoGxH2G-7kL427F4ZuU/s320/DSC04490.JPG" alt="" id="BLOGGER_PHOTO_ID_5375114907984415634" border="0" /></a><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrsavnUUX-7ODd_2fiEjOuCbvaFNHJNbUtYYO4kd8GEDcKz98CXPYqo8qyS06zU59ymUCeTL6N1tpLUDSj3YDC5w6qQRXZ2sGXrVYKc14M0D-eKHbfySODJfbN8iWssNvf7NOCMKgxsAAV/s1600-h/DSC04491.JPG"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer; width: 240px; height: 320px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrsavnUUX-7ODd_2fiEjOuCbvaFNHJNbUtYYO4kd8GEDcKz98CXPYqo8qyS06zU59ymUCeTL6N1tpLUDSj3YDC5w6qQRXZ2sGXrVYKc14M0D-eKHbfySODJfbN8iWssNvf7NOCMKgxsAAV/s320/DSC04491.JPG" alt="" id="BLOGGER_PHOTO_ID_5375114681536396738" border="0" /></a><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />We are still trying to decide where we going to place this box in our data center. in the next few days/weeks I'll be posting some sample configurations on the Nexus.<br /><br />We are also getting 2 more 6509E chassi with Sup 720 VSS, Cisco ACE, and Wireless Controllers. I'm very excited with all the new hardware that we are getting this year. Planning, planning, planning to make sure we do it right.Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com2tag:blogger.com,1999:blog-3012523332314370842.post-23976416957248307812009-08-25T16:03:00.000-04:002009-08-28T16:43:56.810-04:00Switchport configuration for NEC DT700 for phone and PCLast week I was struggling to find the switcport settings for the NEC DT700 for us to use with one cable going to the VOIP phone and PC with dual VLANS. After a couple of testing in my LAB I was able to to get the right configurations for the switchport. Below is a sample port settings in our Cisco 3750 switch for the NEC DT700.<br /><br />interface GigabitEthernet1/0/1<br />switchport trunk encapsulation dot1q<br />switchport trunk allowed vlan 2,3<br />switchport mode trunk<br />auto qos voip trust<br />spanning-tree portfast<br /><br />During my test I couldn't get an ip address from the DHCP server and I had to put ip helper address to each of the VLAN interfaces.<br /><br /><br />For the NEC DT700 enable VLAN and set the LAN settings to your voice VLAN and PC settings to your data VLAN. You can also enable CDP on the NEC DT700 if you like to see the devices connected to the switch using show cdp neighbor command.Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com6tag:blogger.com,1999:blog-3012523332314370842.post-55768853571340840282009-08-22T01:50:00.000-04:002009-08-22T11:16:13.837-04:00My first night bloggingI finally was able to create my own blogging page. I always wanted to do this but couldn't get the time to do so. Hopefully I can post a lot of sample configurations and my day to day network troubleshooting skills here hoping to help others and for me to use this as my own documentation page that I can share with my colleagues. Last night I spent about 2 hours trying to look for the documentation for the NEC DT700 VOIP phone. I found a couple of them but it doesn't tell you how to config the cisco 3750 switches for dual VLANS with the NEC DT700 phones. The engineer who set this up for us couldn't tell us what type of switchport settings we should use. I'm suppose to be on vacation the whole week but I couldn't resist finding the solution to our issue so I decided to bring home one of our cisco 3750 switch and the NEC DT700. Tomorrow I will post the config on how I set up the cisco 3750 switch.Cisco Guyhttp://www.blogger.com/profile/03963273972852878644noreply@blogger.com0