45

These terms are abstract logical concepts, much like the OSI model. Data plane refers to all the functions and processes that forward packets/frames from one interface to another. Control plane refers to all the functions and processes that determine which path to use. Routing protocols (such as OSPF, ISIS, EIGRP, etc...), spanning tree, LDP, etc are ...


24

Forwarding Plane - Moves packets from input to output Control Plane - Determines how packets should be forwarded Management Plane - Methods of configuring the control plane (CLI, SNMP, etc.) Undestand the difference between Forwarding, Control and Management Plane


18

Yes. A managed switch is a switch you can configure in some way or other. Whether it supports VLANs or not is not the question. Even a switch (or a hub for that matter) that only provides status information can be considered "managed". However, the vast majority of managed Ethernet switches do support VLANs. There are countless other features than can be ...


10

I am familiar with CLI on managed Ethernet switches. However, recently I came across a term 'transaction based CLI' on switches. I am not exactly sure what is that and purpose of having it in switches. Is it similar to database transactions where you can unroll the entire commands before committing them? The RX5000 is speaking of the ability to revert ...


9

The configuratior allows you to sign into the web page, and then launches Java where you sign in a second time. After that it just stops working. If you're running into java problems, it sounds like you're trying to use Cisco SDM to manage your Cisco 850. Cisco SDM is EOL, and you should use Cisco Configuration Professional instead of SDM. Cisco ...


9

The MIB is the entire catalog of OIDs (for a particular device). An OID is a specific reference to an individual item within the MIB. An analogy: The MIB is like the phone book for my city. The OID is like my name in the phone book.


8

I don't believe there is a way to directly poll the results of the OR via SNMP, but you can certainly poll for the IP SLA results and calculate it yourself. Using the CISCO-RTTMON-MIB (1.3.6.1.4.1.9.9.42), you can check the timeout value of your reachability checks, take the true/false value it returns and do the OR in whatever scripting language you're ...


8

Why can't I see MAC addresses of the attached PCs on polling the OID for the above switch? When you poll 1.3.6.1.2.1.4.22.1.2, you're polling ipNetToMediaPhysAddress, which is the ARP table of the switch. Pure Layer2 switches do not have a large ARP table because they are merely switching instead of routing. Switching does not require an ARP table. ...


7

Have you taken a look at the ipRouteTable OID in the RFC1213-MIB? (OID number 1.3.6.1.2.1.4.21) I utilize this to pull the routing table out of several devices. It is referenced by RFC 1213 which, on page 33, gives the following information: -- The IP routing table contains an entry for each route -- presently known to this entity. ...


7

It seems like a strange idea to transfer files using a connectionless protocol - so in what situation would you not care about if the entire file is delivered or not? I'm going to add a bit to YLearn's excellent answer... You always want the entire file delivered. Asserting that one doesn't want the whole file transferred because of TFTP is a faulty ...


7

On physical layer AUX port works on asynchronous serial RS-232 protocol. However, one can specify various application layer protocols like telnet or SSH as allowed input protocols under AUX line configuration. Am I correct that those protocols are specified only to enable or disable reverse-telnet or reverse-SSH? Short Answer: On an aux line, transport ...


7

Yes, "manageable" obviously refers to the fact that you can manage the switch, rather than to one specific feature such as VLAN. Among other things, some useful features such a switch could have: examine MAC address table spanning tree protocol disabling / enabling specific ports manually setting the duplex and speed of a port port aggregation (802.3ad - ...


6

First, do 'Octets' in ifInOctets and ifOutOctets actually refer to packets? Can someone explain in detail? ifInOctets and ifOutOctets refer to bytes received and transmitted (respectively) by the interfaces indexed to ifIndex / ifName; ifInOctets and ifOutOctets use 32 bit wide values. Unless you're polling interfaces at 100Mbps or lower, I'd strongly ...


6

The bug-id you are hitting is probably CSCuf56076, which is fixed in 6.0(2)N2(1). Unfortunately this is the best solution for this problem. Luckily it doesn't impact the traffic on the switches. For debugging you can see which part of the config is in the global database: show system internal csm info global-db seq-tbl and which part is in the synced ...


6

Is this native to the 1900 series to only update the SNMP agent (forgive me if this is the wrong terminology) like it is doing at the moment. What you're seeing is expected behavior. IOS has cached IF-MIB statistics for on 10-second intervals (by default) for a while, for instance see this entry in the SNMP FAQ. That said, I have a few switches which ...


6

There are a few options with different security risks. You will have to decide which one(s) meets your needs. Use an out-of-band connection to the console port. This is probably the safest way, but may require additional hardware to make a serial connection. Create a separate VLAN on the switch and put the management port in that VLAN.Connect that VLAN ...


6

You are correct that switches run an OS (Cisco IOS, HP Comware...) however they do not normally expose any means for the end-user to write and deploy additional apps. This is true even when the underlying OS is *nix based (such as Cisco NX-OS for its Nexus datacenter switches). I would imagine that this approach is intended to guarantee switch reliability /...


6

is it possible to add support for an OID that is not there by default? Unfortunately, adding support for these OIDs would require each of your vendors (Brocade and Dell) to implement them in their software images.


5

This is normal behavior for a layer 3 switch, management traffic can be sent to any active Switch Virtual Interface (SVI). If you only want to allow management traffic from a specific vlan/subnet, you could set up ACLs. A layer 2 switch can be assigned a management IP address, attached to one vlan, called the management vlan. It will only be reachable ...


5

We had the same issue and I found solution for it: It is called Expression MIB as per RFC 2982. You can do logical OR on this level by creating of new SNMP OID object which will be calculated at the same time as the SNMP Request comes to router/switch for this OID. Afterwards you can use this object to poll SNMP statistics of 2 or more ORed (via Expression ...


5

Something like RANCID might help you out here. Plus, if you don't do config management it would take care of that for you as well. RANCID goes out and logs into all of your devices [launched via cron] grabs config/inventory, places it in a source control system and emails you config/inventory diffs. (This would catch any hardware moving around) Using ...


5

Documenting to help future googlers, since I could find no information about Mgmt-vrf online... I managed to find the solution while I was typing the question above. I remembered that the Sup7Es had IOS-XE 3.2.2 loaded when I pulled them out of the boxes; the other important fact was that 3.2.2 would not turn up the OOB interface on FastEthernet1 while I ...


5

1 --- Data Plane: These are software or hardware components of the router or switch related to routing/forwarding user data/traffic from one interface to another. In the case of routers, routing table and/or forwarding table (CEF in case of Cisco) and the routing logic constitute the data plane function. MAC Address Table and Switching logic comprise the ...


5

By themselves, VLANs do not offer any security. But you use them to implement layer 3 security. Remember that VLANs are layer 2 concepts, while IP subnets are layer 3 concepts. In most cases, there is a one to one correspondence between them -- one IP subnet per VLAN and vice versa. Typically, you would use a security control that operates at layer 3, such ...


5

A management VLAN is the same as any other VLAN, so yes, you can include it on your trunk ports. Just make sure the management interface is in the correct VLAN.


4

TFTP uses UDP for the transfer, which as you indicate is a connectionless protocol. FTP, SCP, HTTP or other methods of transfer typically use TCP. UDP requires less overhead and is generally faster than TCP. There is no TCP acknowledgements nor the TCP window to account for during the transfer. There are generally other methods to verify the data once it ...


4

After having been through this process for a for a few clients now I would generally start with ensuring that you have implemented at least the following controls - note that none of these are specific to SOX, as route/switch/transport doesn't generally play a role in financial reporting aside from a pure availability standpoint: All changes to the network ...


4

I think it depends what brand and what OS it is running. Cisco devices run their own proprietary version of IOS, which as far as I know doesn't support custom applications. Juniper, on the other hand, is running JunOS based on FreeBSD, so there might be some chance, but I think it will be limited at best. Some small companies may use something like ...


3

On this switch, you define profiles that control who can access the management interface. This is different than most IOS based switches. From the management console, Click Security > Mgmt Access Method > Profile Rules And you can control what ports, source addresses, protocols, etc can access the management interface.


3

@edit: SOLVED!!! Just missed the port numbers, CAN'T BELIEVE IT! The Cisco and Dell port order numbers are different . But well, this conf I just posted works as a charm, now I have all devices connected! Thanks anyway :D


Only top voted, non community-wiki answers of a minimum length are eligible