The reason for the ehterchannel between the router and the switch is to provide more bandwidth and some sort of load balancing and redundancy. The initial part of the network is T3 into the 3725 router, which will connect up to a VLAN, where a firewall will also connect. That particular VLAN is setup on the 3560 switch, which you can see in the config files. That is the initial part of the network...where we are having troubles setting it up.
I have of course changed the IP addresses, but you can see them identified accordingly.
ROUTER CONFIG
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service sequence-numbers
!
hostname routername
!
boot-start-marker
boot system flash c3725-ipbase-mz.123-17a.bin
boot-end-marker
!
card type t3 1
logging buffered 20000 debugging
no logging console
enable secret
!
clock timezone EST -5
clock summer-time EDT recurring
no aaa new-model
ip subnet-zero
no ip source-route
ip icmp rate-limit unreachable 100
ip cef
!
!
!
no ip bootp server
no ip domain lookup
!
controller T3 1/0
!
interface Port-channel1
ip address "IP Address 1A" 255.255.255.128
no ip redirects
no ip proxy-arp
hold-queue 0 in
!
interface FastEthernet0/0
description Internal 1
no ip address
speed 100
full-duplex
channel-group 1
!
interface FastEthernet0/1
no ip address
speed 100
full-duplex
channel-group 1
!
interface Serial1/0
(This shouldn't matter but if it does let me know, and I can provide some of the config)
!
ip default-gateway "IP Address 1B"
ip classless
no ip http server
!
SWITCH CONFIG
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log datetime
service password-encryption
service sequence-numbers
!
hostname switchname
!
enable secret
!
no aaa new-model
clock timezone UTC -5
clock summer-time UTC recurring
ip subnet-zero
no ip domain-lookup
ip domain-name domainname
!
!
mls qos
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface Port-channel1
!
interface GigabitEthernet0/1
description RouterFE
switchport access vlan 2
switchport mode access
duplex full
speed 100
channel-group 1 mode active
!
interface GigabitEthernet0/2
description
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet0/3
description RouterFE
switchport access vlan 2
switchport mode access
duplex full
speed 100
channel-group 1 mode active
!
interface GigabitEthernet0/4
description
switchport access vlan 2
switchport mode access
!
interface GigabitEthernet0/5
description TestPort
switchport access vlan 2
switchport mode access
duplex full
speed 1000
!
interface GigabitEthernet0/6
shutdown
(the rest of the ports are shut down but will be on vlan 1)
!
interface GigabitEthernet0/49
switchport trunk encapsulation dot1q
switchport mode trunk
macro description cisco-switch
auto qos voip trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet0/50
switchport trunk encapsulation dot1q
switchport mode trunk
macro description cisco-switch
auto qos voip trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet0/51
switchport trunk encapsulation dot1q
switchport mode trunk
macro description cisco-switch
auto qos voip trust
spanning-tree link-type point-to-point
!
interface GigabitEthernet0/52
switchport trunk encapsulation dot1q
switchport mode trunk
macro description cisco-switch
auto qos voip trust
spanning-tree link-type point-to-point
!
interface Vlan1
ip address "IP Address 1C" 255.255.255.0
no ip route-cache
!
interface Vlan2
no ip address "IP Address 2A"
no ip route-cache
!
ip default-gateway "IP Address 2C"
ip classless
ip http server
!
Hope this helps.
Thanks again!
Jason
