Connecting 4006 to 2950 1

[hinesjrh]

I have a 4006 running the CAT OS and I want to connect a new 2950 48-port catalyst switch running IOS to the 4006 as an edge device. I have port 48 on the 2950 set as (same as port 24 on some other existing 2950 24-port switches I have in place):

switchport trunk natvive vlan 2
switchport mode trunk

On the corresponding port on the 4006 (5/27) I have it configured as: vlan = trunk, speed = auto/100, duplex = auto/100. It reads 'connected' and I have a green link light.

The link light on port 48 on the 2950 is green as well. When I get a 'show interface fa 0/48' it shows 'up, line protocol is up' so that looks OK (correct?).

However, I can not telnet into this device. I am not connnected via any type of patch panel, but only directly. Do I need a cross over cable? If no, then what else am I forgetting that is not allowing me to connect via telnet (can't ping this device either)?

 

[vipergg]

If you have link lights its not a cabling issue it is a config issue . First question does the link need to be a trunk , are you running multiple vlans down to the switch? The way you have it configured it is a trunk . Does the trunk show up when doing a "show int trunk" command? Did you create the layer 2 vlan ? Verify that vlan 2 show in a "active" state with the "show vlan " command . On the 4006 verify the connecting link shows as a trunk if that is the way you want it with the "show trunk" command.

 

[hinesjrh]

Yes, ultimately I will have multiple vlans down to the edge switch (there are already multiple vlans on the 4006 core). Yes, vlan 2 is created and assigned an ip address and subnet. All ports 1 thru 47 read 'switchport access vlan 2' and port 48 that I am using to patch to the 4006 reads 'switchport trunk native vlan 2'. Interface vlan 2 reads 'no ip route cache', but I have that on my other edge switches as well.

Still can't ping or telnet into this new switch.

I notice that if I unplug the patch cable from port 48 on the new 2950 and then plug it back in I get the following:


00:13:58: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/48, changed state to down
00:13:59: %LINK-3-UPDOWN: Interface FastEthernet0/48, changed state to down
00:14:13: %LINK-3-UPDOWN: Interface FastEthernet0/48, changed state to up
00:14:15: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/48, changed state to up
00:14:30: %SPANTREE-2-RECV_PVID_ERR: Received BPDU with inconsistent peer vlan id 1 on FastEthernet0/48 VLAN2.
00:14:30: %SPANTREE-2-BLOCK_PVID_PEER: Blocking FastEthernet0/48 on VLAN0001. Inconsistent peer vlan.
00:14:30: %SPANTREE-2-BLOCK_PVID_LOCAL: Blocking FastEthernet0/48 on VLAN0002. Inconsistent local vlan.

What is it telling me 'Inconsistent local vlan'?

If needed I can post the whole 2950 config here.

 

[rainman]

It looks like the C2950's native VLAN is still VLAN 1. You will probably need to set the native VLAN on the 2950 to VLAN 2 if thats what your native VLAN is set to on your 4006.

You can verify the native VLAN with:

show interface FastEthernet0/48 switchport

Example output:

sh int fa0/23 switchport
Name: Fa0/23
Switchport: Enabled
Administrative mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: Disabled
Access Mode VLAN: 0 ((Inactive))
->>> Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Trunking VLANs Active: 1,2
Pruning VLANs Enabled: 2-1001

Try this on your 2950:

config term
!
int FastEthernet0/48
switchport trunk native vlan 2
!
end

This should cause both switches to be members of native VLAN 2, and allow you to ping it from the 4006.


Hope this helps.


-Rainman

 

[hinesjrh]

Here's the output from port 48 as it relates to trunking, but I still can't ping or telnet to this new device.

show interface fastethernet 0/48 switchport
Name: Fa0/48
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 2 (Internal)
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Protected: false
Appliance trust: none
Corp_SW53#

Is the issue the 'Access mode' being at Vlan 1, when I am attempting to ping it across Vlan 2 or is it some other issue?

 

[vipergg]

Rainman probably has the answer just match the native vlans on each side of the link either change the 2950 to vlan 2 or set the native on the 4006 to vlan 1 .

 

[hinesjrh]

This thing is beating me up! What am I not understanding? Here's my 2950 switch config and some output relating to the trunk port on the 2950, and below that is the info relating to the corresponding port on my core 4006 (5/28). Thanks for your help so far but still looking for more.


version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Corp_SW53
!
enable secret
enable password
!
ip subnet-zero
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/13
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/14
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/15
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/16
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/17
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/18
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/19
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/20
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/21
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/22
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/23
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/25
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/26
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/27
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/28
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/29
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/30
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/31
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/32
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/33
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/34
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/35
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/36
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/37
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/38
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/39
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/40
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/41
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/42
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/43
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/44
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/45
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/46
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/47
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/48
switchport trunk native vlan 2
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan2
ip address 10.1.0.53 255.255.252.0
no ip route-cache
!
ip http server
snmp-server community public RO
snmp-server community private RW
!
line con 0
password
line vty 0 4
password
login
line vty 5 15
password
login
!
!
end



Corp_SW53#show interface fa 0/48
FastEthernet0/48 is up, line protocol is up (connected)
Hardware is Fast Ethernet, address is 0017.0ebc.55b0 (bia 0017.0ebc.55b0)
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 3/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, media type is 100BaseTX
input flow-control is unsupported output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:04, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 1355000 bits/sec, 362 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
612831 packets input, 276529185 bytes, 0 no buffer
Received 44454 broadcasts (0 multicast)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 22510 multicast, 0 pause input
0 input packets with dribble condition detected
631 packets output, 90640 bytes, 0 underruns
0 output errors, 0 collisions, 2 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 PAUSE output
0 output buffer failures, 0 output buffers swapped out



Corp_SW53#show interface fa 0/48 switchport
Name: Fa0/48
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 2 (Internal)
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Protected: false
Appliance trust: none
Corp_SW53#






Console> (enable) show port 5/28
* = Configured MAC Address

Port Name Status Vlan Level Duplex Speed Type
----- ------------------ ---------- ---------- ------ ------ ----- ------------
5/28 connected trunk normal a-full a-100 10/100BaseTX

Port AuxiliaryVlan AuxVlan-Status InlinePowered PowerAllocated
Admin Oper Detected mWatt mA @51V
----- ------------- -------------- ----- ------ -------- ----- --------
5/28 none none - - - - -


Port Security Violation Shutdown-Time Age-Time Max-Addr Trap IfIndex
----- -------- --------- ------------- -------- -------- -------- -------
5/28 disabled shutdown 0 0 1 disabled 190

Port Num-Addr Secure-Src-Addr Age-Left Last-Src-Addr Shutdown/Time-Left
----- -------- ----------------- -------- ----------------- ------------------
5/28 0 - - - - -

Port Flooding on Address Limit
----- -------------------------
5/28 Enabled

Port Status Channel Admin Ch
Mode Group Id
----- ---------- -------------------- ----- -----
5/28 connected auto silent 191 0

Port Status ErrDisable Reason Port ErrDisableTimeout Action on Timeout
---- ---------- ------------------- ---------------------- -----------------
5/28 connected - Enable No Change

Port Align-Err FCS-Err Xmit-Err Rcv-Err UnderSize
----- ---------- ---------- ---------- ---------- ---------
5/28 - 1 153 5 1

Port Single-Col Multi-Coll Late-Coll Excess-Col Carri-Sen Runts Giants
----- ---------- ---------- ---------- ---------- --------- --------- ---------
5/28 1 1 1 1 1 1 1

Last-Time-Cleared
--------------------------
Wed Jun 7 2006, 16:13:52

Idle Detection
--------------
--
Console> (enable) show trunk
* - indicates vtp domain mismatch
# - indicates dot1q-all-tagged enabled on the port
Port Mode Encapsulation Status Native vlan
-------- ----------- ------------- ------------ -----------
3/47 auto dot1q trunking 2
4/3 auto dot1q trunking 2
5/1 on dot1q trunking 2
5/2 on dot1q trunking 2
5/3 on dot1q trunking 2
5/4 on dot1q trunking 2
5/5 on dot1q trunking 2
5/6 on dot1q trunking 2
5/7 on dot1q trunking 2
5/8 on dot1q trunking 2
5/9 on dot1q trunking 2
5/20 on dot1q trunking 2
5/22 on dot1q trunking 2
5/23 on dot1q trunking 2
5/25 on dot1q trunking 2
5/26 on dot1q trunking 2
5/28 auto dot1q trunking 2
5/30 on dot1q trunking 2
5/32 on dot1q trunking 2
5/34 on dot1q trunking 2
5/36 on dot1q trunking 2
5/38 on dot1q trunking 2
5/40 on dot1q trunking 2
5/46 on dot1q trunking 2

Port Vlans allowed on trunk
-------- ---------------------------------------------------------------------
3/47 1-1005,1025-4094
4/3 1-1005,1025-4094
5/1 1-1005,1025-4094
5/2 1-1005,1025-4094
5/3 1-1005,1025-4094
5/4 1-1005,1025-4094
5/5 1-1005,1025-4094
5/6 1-1005,1025-4094
5/7 1-1005,1025-4094
5/8 1-1005,1025-4094
5/9 1-1005,1025-4094
5/20 1-1005,1025-4094
5/22 1-1005,1025-4094
5/23 1-1005,1025-4094
5/25 1-1005,1025-4094
5/26 1-1005,1025-4094
5/28 1-1005,1025-4094
5/30 1-1005,1025-4094
5/32 1-1005,1025-4094
5/34 1-1005,1025-4094
5/36 1-1005,1025-4094
5/38 1-1005,1025-4094
5/40 1-1005,1025-4094
5/46 1-1005,1025-4094

Port Vlans allowed and active in management domain
-------- ---------------------------------------------------------------------
3/47 1-7,10-11
4/3 1-7,10-11
5/1 1-7,10-11
5/2 1-7,10-11
5/3 1-7,10-11
5/4 1-7,10-11
5/5 1-7,10-11
5/6 1-7,10-11
5/7 1-7,10-11
5/8 1-7,10-11
5/9 1-7,10-11
5/20 1-7,10-11
5/22 1-7,10-11
5/23 1-7,10-11
5/25 1-7,10-11
5/26 1-7,10-11
5/28 1-7,10-11
5/30 1-7,10-11
5/32 1-7,10-11
5/34 1-7,10-11
5/36 1-7,10-11
5/38 1-7,10-11
5/40 1-7,10-11
5/46 1-7,10-11

Port Vlans in spanning tree forwarding state and not pruned
-------- ---------------------------------------------------------------------
3/47 1-2
4/3 1-2
5/1 1-2
5/2 1-2
5/3 1-2
5/4 1-2
5/5 1-2
5/6 1-2
5/7 1-2
5/8 1-2
5/9 1-2
5/20 1-2
5/22 1-2
5/23 1-2
5/25 1-2
5/26 1-2
5/28 1-2
5/30 1-2
5/32 1-2
5/34 1-2
5/36 1-2
5/38 1-2
5/40 1-2
5/46 1-2
Console> (enable)

 

[rainman]

Well it looks like your link is up so you have layer 1 connectivity. I do see a few physical errors but I'm hoping they aren't incrementing (refresh your interface to see if errors increment).

What about layer 2? Can you see the neighbor device via "show cdp neighbor"? This is something basic and I'm sure you probably covered this already but just a suggestion.

Also on your 4006's configuration, it shows the following trunk negoatiation settings for interface 5/28:

5/28 auto dot1q trunking 2

The command in your configuration you should check is:

set trunk 5/28 auto dot1q
(or) set trunk 5/28 dot1q (auto may be assumed)

Try forcing the interface to be set as a trunk versus having it negotiate:

set trunk 5/28 on dot1q

I noticed that is different from all your other trunk ports (which more than likely go to other access switches that aren't having any problems trunking...) I have heard of problems with DTP negoating the trunk unless you force it to "on".


-Rainman

 

[hinesjrh]

Rainman, that was it! I changed the trunking from auto to on for that port and now everything is fine! Thanks for your input and letting me bounce ideas off of you!

 

[vipergg]

If you look at your config the you had one side forced on and the other as auto , this won't work . Auto will only work if the other side is desirable . I have never had a problem with trunking setting both sides as desirable non-silent and letting it negotiate between 2 cisco devices , it is also a cisco recommended practice for setting up trunks , when you force them on i have seen where one side says it is trunking and the other says it is down , you won't get that if you let it negotiate .