Re: New vlan on a cisco 2960 switch WS-C2960S-48TS-S

amanzoorfern · ‎03-27-2012

Hi

I am trying to create a new vlan 2 on my switch 2960, when I go into the interface where I want the encapsulation command its not there? sh version command is:

CISCO2960#show ver

Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version 12.2(55)SE,
RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Sat 07-Aug-10 23:21 by prod_rel_team
Image text-base: 0x00003000, data-base: 0x01B00000

ROM: Bootstrap program is Alpha board boot loader
BOOTLDR: C2960S Boot Loader (C2960S-HBOOT-M) Version 12.2(53r)SE, RELEASE SOFTWA
RE (fc3)

CISCO2960 uptime is 10 weeks, 6 days, 14 hours, 15 minutes
System returned to ROM by power-on
System image file is "flash:/c2960s-universalk9-mz.122-53.SE1/c2960s-universalk9
-mz.122-55.SE.bin"

export@cisco.com.

cisco WS-C2960S-48TS-S (PowerPC) processor (revision A0) with 131072K bytes of m
emory.
Processor board ID FOC1416Z55B
Last reset from power-on
2 Virtual Ethernet interfaces
1 FastEthernet interface
50 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : 9C:4E:20:79:A4:00
Motherboard assembly number     : 73-12424-05
Power supply part number        : 341-0327-01
Motherboard serial number       : FOC14164ATM
Power supply serial number      : DCA1351P01J
Model revision number           : A0
Motherboard revision number     : A0
Model number                    : WS-C2960S-48TS-S
Daughterboard assembly number   : 73-11933-04
Daughterboard serial number     : FOC14170D12
System serial number            : FOC1416Z55B
Top Assembly Part Number        : 800-32452-01
Top Assembly Revision Number    : A0
Version ID                      : V01
CLEI Code Number                : COMGK00ARA
Daughterboard revision number   : A0
Hardware Board Revision Number : 0x01

Switch Ports Model              SW Version            SW Image
------ ----- -----              ----------            ----------
*    1 50    WS-C2960S-48TS-S   12.2(55)SE            C2960S-UNIVERSALK9-M

Configuration register is 0xF

Here is what I am trying to do:

CISC(config)#inter

CISC(config)#interface gig

CISC(config)#interface gigabitEthernet 0/23

C(config-if)#swi

ISC(config-if)#switchport tru

SC(config-if)#switchport trunk en

ISC(config-if)#switchport trunk enca

ISC(config-if)#switchport trunk encapsulation dot1q

^

% Invalid input detected at '^' marker.ISC(config-if)#switchport trunk encapsulation dot1q
^
% Invalid input detected at '^' marker.

Why the encapsulation command not there help please. Please see attached I have connected my laptop with port 23 of this switch where I am trying to have vlan 2, since I am unable to have the encapsulation command I do not get any IP.

nkarpysh · ‎03-27-2012

Hello Adnan,

This platform support only dot1q encapsulation and thus it is enabled by default. Therefore trunks will only operate

in mode dot1q and can not be configured as confirmed from the output above.

Nik

HTH,
Niko

Jan Hrnko · ‎03-27-2012

Hi Adnan,

2960 are newer switches which do not suport ISL encapsulation - only dot1q. That's why you cannot use this command - you simply have no choice .

In addition. Are you trying to configure trunk or access port? Am I getting this right? If you want to configure access port for vlan 2 just do this:

SW(config)#interface gigabitEthernet 0/23
SW(config-if)#switchport mode access
SW(config-if)#switchport access vlan 2

There is not need for switchport trunk command anyway. If you want to attach PC to this port you want to configure it as an access port.

And I see that you have already configured it as an access port... so the problem might be somewhere else! How did you configure the DHCP? Is there an Router-On-A-Stick that also provides DHCP services or is there an standalone DHCP server?

Best regards,

Jan

amanzoorfern · ‎03-27-2012

Thanks Gentlemen,

At port 23 I am trying to make the new vlan2. This port is directly connected to my laptop, there is no IP, though I have placed the ip-helper command for the DHCP server. 10.10.2.1 is a standalone DHCP server in the ip helper command. Help please. Under neath is the part of config.

interface GigabitEthernet0/23

switchport access vlan 2

switchport mode access

no cdp enable

no cdp tlv server-location

no cdp tlv app

!

interface Vlan1

ip address 10.10.10.252 255.255.255.0

!

interface Vlan2

ip address 10.10.2.252 255.255.255.0

ip helper-address 10.10.2.1

!

ip default-gateway 10.10.10.254

ip http server

ip http secure-server

no cdp run

interface Vlan1
ip address 10.10.10.252 255.255.255.0
!
interface Vlan2
ip address 10.10.2.252 255.255.255.0
ip helper-address 10.10.2.1
!
ip default-gateway 10.10.10.254
ip http server
ip http secure-server
no cdp run

Jan Hrnko · ‎03-27-2012

Hi Adnan,

I have read the whole config but my question remains the same. Where is the DHCP server and how is it configured?

You know that the DHCP request is a broadcast which is propagated by the switch within an broadcast domain. Therefore the ip helper-address command should be on some router on your network or on an multilayer switch. The switch will send the DHCP request from all interfaces in VLAN2 and trunk interfaces where VLAN2 is allowed except the one interface from which the request came from ( interface where your PC is attached to ). There is no need for an ip helper-address here.

So please, can you kindly tell us where is the DHCP server configured and attached?

Edit: I have noticed that there aren't any trunks configured on the Switch. I believe that in this case the DHCP request will be dropped at the switch, because it has no interfaces through which an tagged frame with tag of vlan 2 can be sent out.

Edit2: I have just found out that this switch can be configured for DHCP relay.

Best regards,

Jan

Message was edited by: Jan Hrnko

vijay.swaminathan · ‎03-27-2012

can you share the topology which helps to understand your set up..?

-Vijay

amanzoorfern · ‎03-27-2012

Hi Vijay:

location 1 where I am creating vlan2 ISP location 2

switch 2960........................................................... ...........................................Router 2911

I am at location 1, trying to create a new vlan2, we are connected to the other site which is location 2 (this site has the router 2911) and the ISP exist somewhere between, we have a TLS line in between two locaitons.

vijay.swaminathan · ‎03-27-2012

Can you share the output of show int vlan 2?

can you check if you can assign a static IP to your laptop (on the subnet of the dhcp ) and see if you can ping the dhcp server?

-Vijay

amanzoorfern · ‎03-27-2012

Jan,

Thanks,

The DHCP is located at port 1 of this switch, this DHCP server has one card with 2 IP addresses (10.10.10.96 and 10.10.10.2.1), this DHCP covers two scopes (10.10.10.201-10.10.10.254) and (10.10.2.1-10.10.2.254). This server is DC with and the DHCP server working on 2008 ent edition x32. Attached is the config from my router.

amanzoorfern · ‎03-27-2012

ops, how can I attach a txt file for my router config?

Jan Hrnko · ‎03-27-2012

Hi Adnan,

To my surprise, I have just discovered that the ip helper-address will work and the 2960 is capable of running DHCP relay but:

You will need the SVI for the VLAN2 up - from the ouput provided it is.

You have to have ip default-gateway correctly configured.

You must be able to ping the DHCP server from your switch.

Maybe you could configure only 1 ip helper-address for interface vlan2? Currently you have two.

Best regards,

Jan

amanzoorfern · ‎03-27-2012

Sorry for the lack of knowledge, terms 'SVI' what is that?

I am able to ping both ip addresses of the DHCP server:

CISCO2960#ping 10.10.10.96

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.10.96, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/6/21 ms
CISCO2960#ping 10.10.2.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.2.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/15 ms

Also my router has IP addresses 10.10.10.254 and 10.10.2.254, from this switch I can ping 10.10.10.254 but CANNOT ping 10.10.2.254, is it helpful?

Jan Hrnko · ‎03-27-2012

Hi Adnan,

No need for apoologies, SVI is switched virtual interface - you have created SVI with command interface vlan 2

Best regards,

Jan

Jan Hrnko · ‎03-27-2012

Hi Adnan,

In addition. Isn't it possible that you will configure the router as an DHCP relay - i.e. to configure it's interface towards Switch with ip helper-address command? It could be much easier.

Best regards,

Jan

vijay.swaminathan · ‎03-27-2012

Hi Adnan,

I'm little confused here..

Let me confirm my understanding.

1. you have both the clients and dhcp server attached to the same switch (so for acquiring ip address via dhcp which i guess it the question, for the time being I'm removing the focus out of the router on the other end).

2. the client is attached to gig0/23 which is an access port in vlan 2.

3. the ip helper address is configured on the svi which i assume it as in the up/up state (sh int vlan 2)

4. The dhcp server is on port 1of the switch. so for it to receive the requests from vlan 2, it has to be on vlan 2 can you confirm this??

-Vijay