Community Record
51
Posts
3
Kudos
0
Solutions
Badges
3 weeks ago
A client has configured an app on their Server 2022 that needs access from outside the domain. This app is on a physical server and is using port 8080. How do I NAT the internal IP Address so that users can log on to this web page from outside the office? How do I configure the subsequent IP Address to go through the Firewall? If I create a DMZ on the MX and then put this Server 2022 in it, how do I configure the server to be configured internally and externally? Can I configure a proxy server on an MX?
... View more
Oct 29 2024
8:31 AM
The MX is the default gateway for the network on 172.16.0.1 The 192.168.20.1 is the gateway for the voice VLAN 5. The ISR is connected to the network on 172.16.0.5. As I stated previously, only service taken off the ISR is the DHCP. As per your advise, I have changed the VLAN 5 Interface IP on the MX to 192.168.20.2. The vlans are configured on the MX
... View more
Oct 29 2024
8:09 AM
The MX is 172.16.0.1 The ISR has a data vlan 10 with IP 172.16.0.5 and the Voice vlan 5 on 192.168.20.1 Please advice on what I'm doing wrong and what is missing that needs to be done. Thanks
... View more
Oct 29 2024
7:26 AM
Yes, The MX is now the 192.168.20.1. From the Routing Table ip tftp source-interface Tunnel0 ip nat pool Pool-NAT-ISP1 x.x.x.x x.x.x.x netmask 255.255.255.248 ip nat inside source route-map ISP1 pool Pool-NAT-ISP1 overload ip route 0.0.0.0 0.0.0.0 x.x.x.x The 3945 ISR still carries the other configurations for the phones. Only services taken from the 3945ISR is the DHCP. ! tftp-server flash:SIP_English_United_States/sp-sip.jar tftp-server flash:SIP_English_United_States/g3-tones.xml tftp-server flash:sboot2.78xx.10-3-1-12.sbn tftp-server flash:sip8845_65.12-0-1SR1-1.loads tftp-server flash:vc48845_65.12-0-1SR1-1.sbn tftp-server flash:rootfs8845_65.12-0-1SR1-1.sbn tftp-server flash:kern8845_65.12-0-1SR1-1.sbn tftp-server flash:fbi8845_65.BEV-01-006.sbn tftp-server flash:SIP_English_United_States/sl-bev-sip.jar tftp-server flash:sb28845_65.BEV-01-015.sbn tftp-server flash:SIP_English_United_States/sl-be-sip.jar tftp-server flash:SIP_United_States/g3-tones.xml !
... View more
Oct 29 2024
6:24 AM
They worked fine when the 3945 ISR was issuing DHCP. When moved to the MX they haven't worked. Since Allowing the blocked events in the IDS there have been no new entry. ip dhcp excluded-address 192.168.20.1 192.168.20.100 ! ip dhcp pool VOICE network 192.168.20.0 255.255.255.0 default-router 192.168.20.1 domain-name transcoclsg.org dns-server 172.16.0.2 172.16.0.3 option 150 ip 192.168.20.1 ! ! ! ip domain name transcoclsg.org ip name-server 172.16.0.2 ip name-server 172.16.0.3 ip cef no ipv6 cef
... View more
Oct 29 2024
4:00 AM
I've added the blocked events to the IDS Allow List but still phones are just showing Registering or Not Registered. Even after a restart.
... View more
Oct 29 2024
3:17 AM
Hi, My MX84 issues DHCP for the Voice VLAN. However the phones are either showing Registering or Not registered as per the attached screenshots. I have taken a look at the MX Events log and seen IDS Alerts and that traffic for the phones are being blocked. Help needed. Thanks
... View more
Thanks for letting me know what happened. Here I was thinking I might have been doing wrong.
... View more
Hi RWelch, I've been replying to this post but something is not working properly as it is not appearing within the feed. I have changed a few configurations. I have transferred DHCP services from the 3945 ISR (VLAN 5 - Voice) and the Windows Server (VLAN 10 - Data) to the MX84 Security Appliance. I have connected the troubleshoot MS130-48P switch directly to the MX 84. However still having the problem of it using DHCP rather that the statically assigned address. Based on the config below of the 3850, can I simply connect all the MS130-48P switches to the MX84 and then cut out the 3850 switch? BACKBONE-SW#sh config Using 2684 out of 2097152 bytes, uncompressed size = 5832 bytes ! ! Last configuration change at 18:24:23 UTC Mon Oct 14 2024 by admin ! NVRAM config last updated at 12:02:19 UTC Fri Oct 25 2024 by admin ! version 15.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption service compress-config ! hostname BACKBONE-SW ! boot-start-marker boot-end-marker ! ! vrf definition Mgmt-vrf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! enable secret 5 ! username admin privilege 15 password 7 aaa new-model ! ! aaa session-id common switch 1 provision ws-c3850-24t ! ! ip name-server 172.16.0.2 ip name-server 172.16.0.3 ! ! qos queue-softmax-multiplier 100 vtp mode transparent ! crypto pki trustpoint TP-self-signed-311815890 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-311815890 revocation-check none rsakeypair TP-self-signed-311815890 ! ! crypto pki certificate chain TP-self-signed-311815890 certificate self-signed 01 nvram:IOS-Self-Sig#1.cer diagnostic bootup level minimal ! spanning-tree mode mst spanning-tree extend system-id ! spanning-tree mst configuration name OfficeHQ revision 1 instance 1 vlan 1-30 ! spanning-tree mst 0-2 priority 16384 hw-switch switch 1 logging onboard message level 3 ! redundancy mode sso ! ! vlan 5 name VOICEVLAN ! vlan 10 name DATAVLAN ! vlan 15 ! ! class-map match-any non-client-nrt-class ! ! interface GigabitEthernet0/0 vrf forwarding Mgmt-vrf no ip address negotiation auto ! interface GigabitEthernet1/0/1 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/2 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/3 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/4 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/5 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/6 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/7 description "SERVER ACCESS PORT" switchport access vlan 5 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/8 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/9 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/10 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/11 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/12 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/13 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/14 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/15 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/16 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/17 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/18 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/19 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/20 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/21 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/22 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/23 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/24 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/1/1 ! interface GigabitEthernet1/1/2 ! interface GigabitEthernet1/1/3 ! interface GigabitEthernet1/1/4 ! interface TenGigabitEthernet1/1/1 ! interface TenGigabitEthernet1/1/2 ! interface TenGigabitEthernet1/1/3 ! interface TenGigabitEthernet1/1/4 ! interface Vlan1 ip address dhcp ! interface Vlan10 ip address 172.16.0.10 255.255.254.0 ! ip forward-protocol nd ip http server ip http authentication local ip http secure-server ! ! ! line con 0 password 7 stopbits 1 line aux 0 stopbits 1 line vty 0 4 password 7 transport input telnet ssh line vty 5 15 transport input telnet ssh ! ntp server 172.16.0.1 wsma agent exec profile httplistener profile httpslistener ! wsma agent config profile httplistener profile httpslistener ! wsma agent filesys profile httplistener profile httpslistener ! wsma agent notify profile httplistener profile httpslistener ! ! wsma profile listener httplistener transport http ! wsma profile listener httpslistener transport https ! ap group default-group end Uplink port on the MS130-48P Configured Static Settings Configured VLAN for DHCP on the MX
... View more
Hi RWelch, So I've done some configuration changes. I have transferred all DHCP services for both the Voice and Data VLANs from the 3945 switch and the Windows Server 2016 to the MX84 Security Appliance. Native VLAN 1 is only used as the Trunk Port for the Uplink between the MS130-48P switches and the 3850 Catalyst Switch. DHCP Configured on MX84 I think this issue of the MS130-49P using DHCP instead the reason why I am having the problems of the APs going down when connected to that switch. Below is the config for the 3850 switch. BACKBONE-SW#sh config Using 2684 out of 2097152 bytes, uncompressed size = 5832 bytes ! ! Last configuration change at 18:24:23 UTC Mon Oct 14 2024 by admin ! NVRAM config last updated at 12:02:19 UTC Fri Oct 25 2024 by admin ! version 15.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption service compress-config ! hostname BACKBONE-SW ! boot-start-marker boot-end-marker ! ! vrf definition Mgmt-vrf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! enable secret 5 ! username admin privilege 15 password 7 aaa new-model ! ! aaa session-id common switch 1 provision ws-c3850-24t ! ! ip name-server 172.16.0.2 ip name-server 172.16.0.3 ! ! qos queue-softmax-multiplier 100 vtp mode transparent ! crypto pki trustpoint TP-self-signed-311815890 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-311815890 revocation-check none rsakeypair TP-self-signed-311815890 ! ! crypto pki certificate chain TP-self-signed-311815890 certificate self-signed 01 nvram:IOS-Self-Sig#1.cer diagnostic bootup level minimal ! spanning-tree mode mst spanning-tree extend system-id ! spanning-tree mst configuration name OfficeHQ revision 1 instance 1 vlan 1-30 ! spanning-tree mst 0-2 priority 16384 hw-switch switch 1 logging onboard message level 3 ! redundancy mode sso ! ! vlan 5 name VOICEVLAN ! vlan 10 name DATAVLAN ! vlan 15 ! ! class-map match-any non-client-nrt-class ! ! interface GigabitEthernet0/0 vrf forwarding Mgmt-vrf no ip address negotiation auto ! interface GigabitEthernet1/0/1 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/2 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/3 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/4 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/5 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/6 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/7 description "SERVER ACCESS PORT" switchport access vlan 5 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/8 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/9 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/10 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/11 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/12 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/13 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/14 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/15 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/16 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/17 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/18 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/19 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/20 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/21 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/22 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/23 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/24 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/1/1 ! interface GigabitEthernet1/1/2 ! interface GigabitEthernet1/1/3 ! interface GigabitEthernet1/1/4 ! interface TenGigabitEthernet1/1/1 ! interface TenGigabitEthernet1/1/2 ! interface TenGigabitEthernet1/1/3 ! interface TenGigabitEthernet1/1/4 ! interface Vlan1 ip address dhcp ! interface Vlan10 ip address 172.16.0.10 255.255.254.0 ! ip forward-protocol nd ip http server ip http authentication local ip http secure-server ! ! ! line con 0 password 7 stopbits 1 line aux 0 stopbits 1 line vty 0 4 password 7 transport input telnet ssh line vty 5 15 transport input telnet ssh ! ntp server 172.16.0.1 wsma agent exec profile httplistener profile httpslistener ! wsma agent config profile httplistener profile httpslistener ! wsma agent filesys profile httplistener profile httpslistener ! wsma agent notify profile httplistener profile httpslistener ! ! wsma profile listener httplistener transport http ! wsma profile listener httpslistener transport https ! ap group default-group end
... View more
Oct 26 2024
3:02 AM
Hi Nibss, Please find below the config on the 3850 switch and the settings as applied to the MS130-48P switch. Settings on the Uplink Port Configured Static Settings Displayed Settings currently in use BACKBONE-SW#sh config Using 2684 out of 2097152 bytes, uncompressed size = 5832 bytes ! ! Last configuration change at 18:24:23 UTC Mon Oct 14 2024 by admin ! NVRAM config last updated at 12:02:19 UTC Fri Oct 25 2024 by admin ! version 15.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption service compress-config ! hostname BACKBONE-SW ! boot-start-marker boot-end-marker ! ! vrf definition Mgmt-vrf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! enable secret 5 ! username admin privilege 15 password 7 aaa new-model ! ! aaa session-id common switch 1 provision ws-c3850-24t ! ! ip name-server 172.16.0.2 ip name-server 172.16.0.3 ! ! qos queue-softmax-multiplier 100 vtp mode transparent ! crypto pki trustpoint TP-self-signed-311815890 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-311815890 revocation-check none rsakeypair TP-self-signed-311815890 ! ! crypto pki certificate chain TP-self-signed-311815890 certificate self-signed 01 nvram:IOS-Self-Sig#1.cer diagnostic bootup level minimal ! spanning-tree mode mst spanning-tree extend system-id ! spanning-tree mst configuration name OfficeHQ revision 1 instance 1 vlan 1-30 ! spanning-tree mst 0-2 priority 16384 hw-switch switch 1 logging onboard message level 3 ! redundancy mode sso ! ! vlan 5 name VOICEVLAN ! vlan 10 name DATAVLAN ! vlan 15 ! ! class-map match-any non-client-nrt-class ! ! interface GigabitEthernet0/0 vrf forwarding Mgmt-vrf no ip address negotiation auto ! interface GigabitEthernet1/0/1 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/2 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/3 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/4 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/5 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/6 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/7 description "SERVER ACCESS PORT" switchport access vlan 5 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/8 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/9 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/10 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/11 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/12 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/13 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/14 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/15 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/16 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/17 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/18 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/19 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/20 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/21 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/22 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/23 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/24 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/1/1 ! interface GigabitEthernet1/1/2 ! interface GigabitEthernet1/1/3 ! interface GigabitEthernet1/1/4 ! interface TenGigabitEthernet1/1/1 ! interface TenGigabitEthernet1/1/2 ! interface TenGigabitEthernet1/1/3 ! interface TenGigabitEthernet1/1/4 ! interface Vlan1 ip address dhcp ! interface Vlan10 ip address 172.16.0.10 255.255.254.0 ! ip forward-protocol nd ip http server ip http authentication local ip http secure-server ! ! ! line con 0 password 7 stopbits 1 line aux 0 stopbits 1 line vty 0 4 password 7 transport input telnet ssh line vty 5 15 transport input telnet ssh ! ntp server 172.16.0.1 wsma agent exec profile httplistener profile httpslistener ! wsma agent config profile httplistener profile httpslistener ! wsma agent filesys profile httplistener profile httpslistener ! wsma agent notify profile httplistener profile httpslistener ! ! wsma profile listener httplistener transport http ! wsma profile listener httpslistener transport https ! ap group default-group end
... View more
Oct 26 2024
2:53 AM
Hi Nibss, I have attached the config of the 3850 switch to which the MS130-48P is connected. I've also attached the screenshot of the config of the Uplink port and the config for the switch. Uplink port config Currently used config even though static settings are applied. no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption service compress-config ! hostname BACKBONE-SW ! boot-start-marker boot-end-marker ! ! vrf definition Mgmt-vrf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! enable secret 5 ! username admin privilege 15 password 7 aaa new-model ! ! aaa session-id common switch 1 provision ws-c3850-24t ! ! ! ! ! ! ip name-server 172.16.0.2 ip name-server 172.16.0.3 ! ! qos queue-softmax-multiplier 100 vtp mode transparent ! crypto pki trustpoint TP-self-signed-311815890 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-311815890 revocation-check none rsakeypair TP-self-signed-311815890 ! ! crypto pki certificate chain TP-self-signed-311815890 certificate self-signed 01 nvram:IOS-Self-Sig#1.cer diagnostic bootup level minimal ! spanning-tree mode mst spanning-tree extend system-id ! spanning-tree mst configuration name OfficeHQ revision 1 instance 1 vlan 1-30 ! spanning-tree mst 0-2 priority 16384 hw-switch switch 1 logging onboard message level 3 ! redundancy mode sso ! ! vlan 5 name VOICEVLAN ! vlan 10 name DATAVLAN ! vlan 15 ! ! class-map match-any non-client-nrt-class ! ! interface GigabitEthernet0/0 vrf forwarding Mgmt-vrf no ip address negotiation auto ! interface GigabitEthernet1/0/1 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/2 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/3 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/4 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/5 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/6 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/7 description "SERVER ACCESS PORT" switchport access vlan 5 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/8 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/9 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/10 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/11 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/12 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/13 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/14 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/15 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/16 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/17 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/18 description "SERVER ACCESS PORT" switchport access vlan 10 switchport mode access spanning-tree portfast ! interface GigabitEthernet1/0/19 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/20 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/21 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/22 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/23 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/0/24 description "UPLINK TO ACCESS SW" switchport mode trunk ! interface GigabitEthernet1/1/1 ! interface GigabitEthernet1/1/2 ! interface GigabitEthernet1/1/3 ! interface GigabitEthernet1/1/4 ! interface TenGigabitEthernet1/1/1 ! interface TenGigabitEthernet1/1/2 ! interface TenGigabitEthernet1/1/3 ! interface TenGigabitEthernet1/1/4 ! interface Vlan1 ip address dhcp ! interface Vlan10 ip address 172.16.0.10 255.255.254.0 ! ip forward-protocol nd ip http server ip http authentication local ip http secure-server ! ! ! line con 0 password 7 stopbits 1 line aux 0 stopbits 1 line vty 0 4 password 7 transport input telnet ssh line vty 5 15 transport input telnet ssh ! ntp server 172.16.0.1 wsma agent exec profile httplistener profile httpslistener ! wsma agent config profile httplistener profile httpslistener ! wsma agent filesys profile httplistener profile httpslistener ! wsma agent notify profile httplistener profile httpslistener ! ! wsma profile listener httplistener transport http ! wsma profile listener httpslistener transport https ! ap group default-group end
... View more
I think I will go with the option of using VLAN 10 as the native VLAN (untagged) since that's what's already configured the other switches that are working and showing that the IPs are statically assigned. Only VLAN 5 & 10 are configured within the 3850 Catalyst switch.
... View more
VLAN 1 is not defined within the network. It is just listed as the Native VLAN for the uplink between the switches. VLAN 30 is mainly not in use VLANs configured on the MX
... View more
Within the VLAN 10 subnet
... View more
VLAN 5 (Voice) - 192.168.20.0/24 (DHCP from a Cisco 3945 ISR) VLAN 10 (Data) - 172.16.0.0/23 (DHCP from Windows Server 2016) 3850 Catalyst using Native VLAN 1 Originally I had configured the static VLAN to 10 but you have advised to change to Native VLAN 1. Changing to Native VLAN 1 solved my initial issue but then changing it to Native VLAN 1 on the other switch transfers the problem.
... View more
I changed the static VLAN to Native VLAN 1 and after rebooting the static IP Address Appeared. So thinking that this is the solution, I went ahead to change the static VLAN on the other switch that also had VLAN 10 to reflect this change. However, after changing to the NATIVE VLAN and rebooting the switch, I now have this switch being issued with DHCP IP address and the static IP that was present is not any more.
... View more
Native VLAN is default 1. Data VLAN is 10 and Voice is 5
... View more
Turning off Trusted DAI blocks certain devices especially the Cisco deskphones from connecting and getting IP address
... View more
Hey, My DHCP Server has a reserved range of 172.16.1.1 - 30 and from within it the static IP Address is used for the switches and Access Points. DHCP is disabled on the switches.
... View more
The static IP setup has The VLAN ID set to the data VLAN. I've got only two VLANS (Data and Voice) Configured Static Settings Present DHCP Setting
... View more
The switch is connected to a 3850 Catalyst switch that has been configured to run MSTP.
... View more
My Native VLAN is still set to the default.
... View more
I've got a troublesome switch that recent rebooted itself. After the reboot, the static IP that it is configured to use it not what is presently active. Instead its a DHCP issued IP. I've done several reboots and whenever its powered on it gets a new DHCP issued IP. What might be the cause How do I get the static issued IP address to work. This is the same switch that I recently reported as not properly powering on the Access Points attached to it. This issue is still pending. Thanks
... View more
Labels:
- Labels:
-
Interfaces
-
Layer 2
My Top Kudoed Posts
Subject | Kudos | Views |
---|---|---|
1 | 2497 | |
1 | 818 |