Recent content by keoki

Sorry for posting 4 posts in a row, I'm ready to stfu about the discovery of how half the config commands don't do anything. How is it on the firmware front? I'm guessing that every firmware version out there has some missing feature implemented. So later firmware versions could have more...

Time for everyone to scream like godzilla! ;) And don't buy one of these for use on a production network! There are some really good deals out there that actually work... The 6509's are selling cheap, and with a 720 gig processor card, and 40gig per slot of bandwidth, the 10g is not...

And by the way... The lack of real features has some potential implications on performance under layer 3. It may be best to try to use this in layer 2 only if you have a performance application in mind... I mean you did go out and buy a 10g switch, so you might plan on using it. I'm seeing a...

Basically what I discovered is that all ports are trunk ports. If a port is unconfigured, it appears to be a trunk port still. any thing I did, seemed to leave the port as a trunk port. But I could, in theory, at least control the VLANs by either including, or excluding specific vlans or...

So I can't resist asking... What are you using multicast for? Do you have a uverse connection, or doing security video feeds or something? I'm intrigued by what you might be doing. At the office I have a bank of video streams that feed several TV headend simulations in the lab, but I don't...

So I hit a big snag... Heat! Everything but a laptop, and the parts needed to get Internet running are off right now, as I let the room cool back down. My office doesn't have enough HVAC for the equipment in here. On first glance, it was easy to point the finger at the two new switches that...

Yes, basically most systems configured for IP are not configured to handle VLAN tags. So for those systems we set the ports to be in access mode, rather than trunking mode. In this case you want VLAN 3, so you make the access ports members of vlan3 that are connected to the SAN and the...

Sounds like a great plan... a lot has changed. And TCP/IP is very dated in the context of IPv6...

You cannot likely "dynamically" remove tags. However with Cisco equipment I can put one untagged vlan on a trunk port. This is a trick I have used to solve different problems, such as having a management network connection to a device on the same port as a trunk on a device that forces the use...

I saw DHCP helper functionality in the documentation posted in this thread... Pretty much all VLAN capable enterprise grade switches have to have that. Every enterprise class company I have ever worked in has enough VLANs that it would be stupid not to have this feature. One of the first...

I think it is your nat configuration is failing. Same gateway in both cases, I assume... so we know the Internet side works, directly connected nat works, it is the nat for the routed subnets that is failing. The fact your traceroutes get all the way to the edge router means that path is...

There are lots of classes for networking, courses all over the net. TCP/IP for Dummies is a great book, but unless they revised it a lot since I used it to train my staff, it may not cover VLANs. I used that book to train my Internet support staff, starting back in 1994. but I have been...

Keep in mind that when you set up nat, you have to nat everything, not just the network directly connected to the edge router. So your nat statements need to cover both the directly connected network, and all of your other private networks as well. Nat statements vary a lot for different kinds...

I guess I don't understand what you think is getting lost. So a machine at 192.168.5.2 can ping the internet gateway... so your internal routing is working. What are you doing a traceroute from and to? From 192.168.5.2 to google for example, if it dies at the edge router, then your nat isn't...

Yes, any natting router can be your basic firewall. Generally you don't typically see public IP's connect directly to interior switches, but that is not a hard rule, as you might have a DMZ, and use private IP's for say a database server feeding data into a web server, with the web server in...