41

These terms are abstract logical concepts, much like the OSI model. Data plane refers to all the functions and processes that forward packets/frames from one interface to another. Control plane refers to all the functions and processes that determine which path to use. Routing protocols (such as OSPF, ISIS, EIGRP, etc...), spanning tree, LDP, etc are ...


24

Forwarding Plane - Moves packets from input to output Control Plane - Determines how packets should be forwarded Management Plane - Methods of configuring the control plane (CLI, SNMP, etc.) Undestand the difference between Forwarding, Control and Management Plane


18

Yes. A managed switch is a switch you can configure in some way or other. Whether it supports VLANs or not is not the question. Even a switch (or a hub for that matter) that only provides status information can be considered "managed". However, the vast majority of managed Ethernet switches do support VLANs. There are countless other features than can be ...


17

Here is a really basic script template in Perl for telneting into a list of devices (one on each line in a file called devicelist.txt) and configuring some commands. Depending on exactly what you are doing it should provide a good start. use Net::Telnet::Cisco; # read in a list of devices my @devicelist; open(DATA, "<devicelist.txt") || ...


13

Take a look at Layer2 traceroute (for cisco).. Cdp should be running btw... Router# traceroute mac 0000.0201.0601 0000.0201.0201 Source 0000.0201.0601 found on con6[WS-C2950G-24-EI] (2.2.6.6) con6 (2.2.6.6) :Fa0/1 => Fa0/3 con5 (2.2.5.5 ) : Fa0/3 => Gi0/1 con1 (2.2.1.1 ) : Gi0/1 => Gi0/2 con2 ...


12

I would say you have a couple of options: Manually. Takes most time. Safest? Depends on the one doing the config. Use some tool like Kiwi Cattools or Rancid etc. Much easier but you would need some kind of logic to check if VLAN is already existing or you could mess up the naming structure. Maybe not a huge deal? Script it! Use Perl, Python, Ruby or ...


11

The challenge you now face is that you are going into a mixed environment. You mention you are moving towards Juniper from I assume Cisco? In a pure Cisco environment VTP v3 with passwords would be the way to go and supports over 4k vlans. In the Juniper world the equivalent would be GVRP. You may be able to use some form of centralized management such ...


11

Configuration management software might be worth looking into -- Puppet's network device management can add vlans easily to numerous Cisco devices (if you're using Cisco).


10

I just started playing with Trigger and I have to say I've really enjoyed it. It's quite a powerful network engineer toolkit and their documentation is awesome. While we primarily have Cisco it does support other vendors such as Juniper and Brocade, they have a list of vendors in their docs


10

I am familiar with CLI on managed Ethernet switches. However, recently I came across a term 'transaction based CLI' on switches. I am not exactly sure what is that and purpose of having it in switches. Is it similar to database transactions where you can unroll the entire commands before committing them? The RX5000 is speaking of the ability to revert ...


9

We use the mactrack plugin on Cacti to do such things. Works quite well, historical data is also available. As long as the ARP and MAC address tables are available via SNMP then it works. The only small problem we had is where the layer 3 instance for a site is an ASA. We just worked around this by pulling the ARP table via scripts and generating an ...


9

The configuratior allows you to sign into the web page, and then launches Java where you sign in a second time. After that it just stops working. If you're running into java problems, it sounds like you're trying to use Cisco SDM to manage your Cisco 850. Cisco SDM is EOL, and you should use Cisco Configuration Professional instead of SDM. Cisco ...


9

The MIB is the entire catalog of OIDs (for a particular device). An OID is a specific reference to an individual item within the MIB. An analogy: The MIB is like the phone book for my city. The OID is like my name in the phone book.


8

my own solution comes out in the form of iso.3.6.1.2.1.17.4.3.1.2.0.20.42.49.139.235 25 ... do the other numbers represent a MAC address and if so, why are they different from the give solution? First, I apologize for not including this dependency... The MIB tables you're polling are indexed by a value. In this case, you're polling ...


8

Why can't I see MAC addresses of the attached PCs on polling the OID for the above switch? When you poll 1.3.6.1.2.1.4.22.1.2, you're polling ipNetToMediaPhysAddress, which is the ARP table of the switch. Pure Layer2 switches do not have a large ARP table because they are merely switching instead of routing. Switching does not require an ARP table. ...


8

I don't believe there is a way to directly poll the results of the OR via SNMP, but you can certainly poll for the IP SLA results and calculate it yourself. Using the CISCO-RTTMON-MIB (1.3.6.1.4.1.9.9.42), you can check the timeout value of your reachability checks, take the true/false value it returns and do the OR in whatever scripting language you're ...


7

There are a couple of ways to do this on the cheap (the exercise of research and/or implementation I'll leave up to you). Have a script that logs in to each one of your edge devices and grabs the MAC address tables off of them. You'll want to exclude trunk interfaces for this, but it would be trivial to create a hash (or dict for you python people) with the ...


7

Always have at least two different ways to get into a core box remotely. Generally this means in-band and out-of-band. The inband would simply allow your management range to SSH into the box via any available port, while the out-of-band would be a different link via console or ethernet into the management card/fxp port/ etc


7

It could be that VTP is your answer. Like any "automated" tool, it has it's risks, but you can mitigate them with proper planning. You should also do some reading to make sure you understand how it works or you can inadvertently create your own problems (again, just like any automated tool). I would recommend VTP version 3, as this can help protect from ...


7

Solarwind's Network Configuration Manager can run scripts in IOS devices and some others. It also does things like nightly config backups, change reports and config audits. Their pricing isn't horrible but they're merging NCM with their Orion Network Performance Monitor and I'm not certain you can run NCM separately any more.


7

I know the 3750X's have a management interface on the back which is a 10/100 Fast ethernet port. Its right next to the RJ-45 console port. I also believe that the 2960 switch that you listed there also has a management port on the front of it, above the SFP ports. Assuming your switches aren't too far away, you could use the management interfaces to manage ...


7

Have you taken a look at the ipRouteTable OID in the RFC1213-MIB? (OID number 1.3.6.1.2.1.4.21) I utilize this to pull the routing table out of several devices. It is referenced by RFC 1213 which, on page 33, gives the following information: -- The IP routing table contains an entry for each route -- presently known to this entity. ...


7

It seems like a strange idea to transfer files using a connectionless protocol - so in what situation would you not care about if the entire file is delivered or not? I'm going to add a bit to YLearn's excellent answer... You always want the entire file delivered. Asserting that one doesn't want the whole file transferred because of TFTP is a faulty ...


7

On physical layer AUX port works on asynchronous serial RS-232 protocol. However, one can specify various application layer protocols like telnet or SSH as allowed input protocols under AUX line configuration. Am I correct that those protocols are specified only to enable or disable reverse-telnet or reverse-SSH? Short Answer: On an aux line, transport ...


7

Yes, "manageable" obviously refers to the fact that you can manage the switch, rather than to one specific feature such as VLAN. Among other things, some useful features such a switch could have: examine MAC address table spanning tree protocol disabling / enabling specific ports manually setting the duplex and speed of a port port aggregation (802.3ad - ...


6

It sounds like you have a collapsed core. Is that correct? One way of dealing with too many changes based on adding new VLANs' is to move your L3 boundary closer to the access. It requires some work up-front, but if your design is well planned, and thought out, it should make adding new VLAN's a one to three device task (depending on whether L3 stops at ...


6

I have requested the same thing, and been told that they must be zipped. No real explanation why this must be the case, but there weren't any hints that things were going to change any time soon!


6

We've been using: pysnmp - pretty obvious Exscript - offers an enhanced "expect" type of experience. Very nice. MySQLdb - also self explanatory


6

I like to have a script that grabs show arp and show cam dyn output every 15 minutes, I timestamp it with term exec prompt timestamp so we have a rough correlation for times. Then I append all switch output to a file... one file per switch, per day. All these logs are kept in the same directory for easy grepping. Finding hosts becomes a fairly simple grep ...


6

The bug-id you are hitting is probably CSCuf56076, which is fixed in 6.0(2)N2(1). Unfortunately this is the best solution for this problem. Luckily it doesn't impact the traffic on the switches. For debugging you can see which part of the config is in the global database: show system internal csm info global-db seq-tbl and which part is in the synced ...


Only top voted, non community-wiki answers of a minimum length are eligible