2900XL ethernet crossover question

Jason0352Jason0352 Member Posts: 59 ■■□□□□□□□□
Im currently a system admin intern and we recently did a building move. Our new building has a 50mb ethernet line coming into our server room from the 3rd floor. Apparently there is a fiber line that terminates at a Cisco router on the 3rd floor, heads to a switch, then gets ran to all the IT rooms in the building.

We plugged the ethernet line into our dmz (Cisco 2900XL) and like we thought we got no lights on the switch. So we figured "Ok we'll just cut off the rj-45 connector and rearrange the wires to be a crossover." So after I was done with that we plugged the newley created crossover end into the 2900XL. We got blinking green lights! Sadly we weren't able to get any pings through that interface. No data is flowing through or from that cable when it's plugged into that switch.

So we ended up using a 8 port Netgear switch as our dmz and it works fine.

I consoled into the 2900XL and made sure all the basics were working; all ports set to vlan 1, all ports not shutdown, no crazy STP configs, and still nothing worked.

My system admin isn't too versed in the world of Cisco so we are at our wits end. He thinks it's because the 2900XL doesn't do automatic crossover. Was curious what you guys thought. Thanks.

Comments

  • alan2308alan2308 Member Posts: 1,854 ■■■■■■■■□□
    How long was it between plugging into the switch and trying to send data through it?
  • peanutnogginpeanutnoggin Member Posts: 1,096 ■■■□□□□□□□
    Can you by any chance post the config?
    We cannot have a superior democracy with an inferior education system!

    -Mayor Cory Booker
  • johnwest43johnwest43 Member Posts: 294
    how long did you wait before trying the ping? If portfast wasn't enabled it could take a minute or 2 for the link to come up. Also make sure to check both ends of the cable to make sure the pin outs are correct. I ran into something similar when replacing an ancient hub for a client. Plugged in the home run and nothing. Put a LAN tester on in it and it showed weird pin outs on the far end, crimped on a new rj45 and viola!! Hope this helps.


    Also just curious whats a 50mb Ethernet line?
    Ive heard of 10 and 100 and 1000 but not 50/
    CCNP: ROUTE B][COLOR=#ff0000]x[/COLOR][/B , SWITCH B][COLOR=#ff0000]x[/COLOR][/B, TSHOOT [X ] Completed on 2/18/2014
  • Jason0352Jason0352 Member Posts: 59 ■■□□□□□□□□
    50mb is the speed at which we are provisioned on that Ethernet line. Didn't mean it to sound like a speed standard.

    We waited a good bit for the line to converge if need be and still nothing.
    If it was bad pinouts, why does the Netgear switch work and the Cisco doesn't?

    I'll try to get a config up today.

    Thanks for taking a look.
  • tierstentiersten Member Posts: 4,505
    Sounds like auto negotiation is off.
  • Jason0352Jason0352 Member Posts: 59 ■■□□□□□□□□
    Current running-config with the "show interface" output for the port which we connect our internet access to.
    
    
    RI_DMZ#show run
    Building configuration...
    
    Current configuration:
    !
    version 12.0
    no service pad
    service timestamps debug uptime
    service timestamps log uptime
    service password-encryption
    !
    hostname RI_DMZ
    !
    enable secret 5 
    !
    !
    !
    !
    !
    !
    ip subnet-zero
    !
    !
    !
    interface FastEthernet0/1
     spanning-tree portfast
    !
    interface FastEthernet0/2
     spanning-tree portfast
    !
    interface FastEthernet0/3
     spanning-tree portfast
    !
    interface FastEthernet0/4
     spanning-tree portfast
    !
    interface FastEthernet0/5
     spanning-tree portfast
    !
    interface FastEthernet0/6
     spanning-tree portfast
    !
    interface FastEthernet0/7
     spanning-tree portfast
    !
    interface FastEthernet0/8
     spanning-tree portfast
    !
    interface FastEthernet0/9
     spanning-tree portfast
    !
    interface FastEthernet0/10
     spanning-tree portfast
    !
    interface FastEthernet0/11
     spanning-tree portfast
    !
    interface FastEthernet0/12
     description Cisco DMZ Uplink
    !
    interface VLAN1
     no ip address
     no ip directed-broadcast
    !
    ip default-gateway 10.10.1.1
    snmp-server engineID local 00000009010000A10A0A026F
    snmp-server chassis-id 0x0D
    !
    line con 0
     exec-timeout 30 0
     password 7 
     logging synchronous
     transport input none
     stopbits 1
    line vty 0 4
     password 7
     logging synchronous
     login
    line vty 5 15
     password 7 
     logging synchronous
     login
    !
    end
    
    RI_DMZ#show inter
    RI_DMZ#show interfaces fa0/12
    FastEthernet0/12 is down, line protocol is down
      Hardware is Fast Ethernet, address is 0002.fd30.a58c (bia 0002.fd30.a58c)
      Description: Cisco DMZ Uplink
      MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
         reliability 255/255, txload 1/255, rxload 1/255
      Encapsulation ARPA, loopback not set
      Keepalive not set
      Auto-duplex , Auto Speed , 100BaseTX/FX
      ARP type: ARPA, ARP Timeout 04:00:00
      Last input 6d00h, output 6d00h, output hang never
      Last clearing of "show interface" counters never
      Queueing strategy: fifo
      Output queue 0/40, 0 drops; input queue 0/75, 0 drops
      5 minute input rate 0 bits/sec, 0 packets/sec
      5 minute output rate 0 bits/sec, 0 packets/sec
         322 packets input, 25600 bytes
         Received 263 broadcasts, 0 runts, 0 giants, 0 throttles
         0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
         0 watchdog, 73 multicast
         0 input packets with dribble condition detected
         9 packets output, 2797 bytes, 0 underruns
         0 output errors, 0 collisions, 5 interface resets
         0 babbles, 0 late collision, 0 deferred
         0 lost carrier, 0 no carrier
         0 output buffer failures, 0 output buffers swapped out
    
    
  • peanutnogginpeanutnoggin Member Posts: 1,096 ■■■□□□□□□□
    You should assign an IP address to interface vlan1. You only have a default gateway to get out... but your return path doesn't have an ip address to return the ping to. See if that helps! Also, run a show cdp neighbor detail to find out if its a router or switch on the other side! HTH.

    -Peanut
    We cannot have a superior democracy with an inferior education system!

    -Mayor Cory Booker
  • Jason0352Jason0352 Member Posts: 59 ■■□□□□□□□□
    I attached an image that lays out the topology of what I'm working with.

    Not able to assign an IP address since it's on a public subnet that we don't have admin access to.

    NOTE: Fa0/12 is the port that is connected to the 2924 switch

    I think spanning tree is our culprit here. Though I did enable portfast on fa0/12 and still wasnt able to ping our http server behind the switch from a client. You will see in the following show logs that I'm getting spanning tree is "broken" on fa0/12.

    6d23h: %LINK-3-UPDOWN: Interface FastEthernet0/12, changed state to up
    RI_DMZ#
    6d23h: %SPANTREE-2-UNBLOCK_CONSIST_PORT: Unblocking FastEthernet0/12 on vlan 1.
    Port consistency restored.
    6d23h: %SPANTREE-2-RECV_1Q_NON_TRUNK: Received 802.1Q BPDU on non trunk FastEthe
    rnet0/12 on vlan 1.
    6d23h: %SPANTREE-2-BLOCK_PORT_TYPE: Blocking FastEthernet0/12 on vlan 1. Inconsi
    stent port type.
    RI_DMZ#
    6d23h: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/12, changed
     state to up
    RI_DMZ#show cdp ne
    RI_DMZ#show cdp neighbors de
    RI_DMZ#show cdp neighbors detail
    -------------------------
    Device ID: DRAZOR_ADJACENT_2NDFL
    Entry address(es):
      IP address: 216.221.10.90
    Platform: cisco WS-C2924-XL,  Capabilities: Trans-Bridge Switch
    Interface: FastEthernet0/12,  Port ID (outgoing port): FastEthernet0/21
    Holdtime : 173 sec
    
    Version :
    Cisco Internetwork Operating System Software
    IOS (tm) C2900XL Software (C2900XL-C3H2S-M), Version 12.0(5)WC8, RELEASE SOFTWAR
    E (fc1)
    Copyright (c) 1986-2003 by cisco Systems, Inc.
    Compiled Thu 19-Jun-03 13:09 by antonino
    
    advertisement version: 2
    Protocol Hello:  OUI=0x00000C, Protocol ID=0x0112; payload len=27, value=0000000
    0FFFFFFFF010121FF00000000000000036B0E2280FF0001
    VTP Management Domain: 'living_lab'
    Native VLAN: 1
    Duplex: full
    Management address(es):
    
    __________________________________________________________________________________________________________
    
    
    RI_DMZ#show interfaces fa0/12
    FastEthernet0/12 is up, line protocol is up
      Hardware is Fast Ethernet, address is 0002.fd30.a58c (bia 0002.fd30.a58c)
      Description: Cisco DMZ Uplink
      MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
         reliability 255/255, txload 1/255, rxload 1/255
      Encapsulation ARPA, loopback not set
      Keepalive not set
      Auto-duplex (Full), Auto Speed (100), 100BaseTX/FX
      ARP type: ARPA, ARP Timeout 04:00:00
      Last input 00:00:01, output 00:00:14, output hang never
      Last clearing of "show interface" counters never
      Queueing strategy: fifo
      Output queue 0/40, 0 drops; input queue 0/75, 0 drops
      5 minute input rate 4000 bits/sec, 7 packets/sec
      5 minute output rate 0 bits/sec, 0 packets/sec
         2635 packets input, 412962 bytes
         Received 1074 broadcasts, 0 runts, 0 giants, 0 throttles
         0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
         0 watchdog, 237 multicast
         0 input packets with dribble condition detected
         17 packets output, 5535 bytes, 0 underruns
         0 output errors, 0 collisions, 7 interface resets
         0 babbles, 0 late collision, 0 deferred
         0 lost carrier, 0 no carrier
         0 output buffer failures, 0 output buffers swapped out
    RI_DMZ#
    
    ------------------------Plugging in our HTTP servers----------------------------
    
    6d23h: %LINK-3-UPDOWN: Interface FastEthernet0/7, changed state to up
    6d23h: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/7, changed
    state to up
    RI_DMZ#
    6d23h: %LINK-3-UPDOWN: Interface FastEthernet0/8, changed state to up
    RI_DMZ#
    6d23h: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/8, changed
    state to up
    RI_DMZ#
    6d23h: %LINK-3-UPDOWN: Interface FastEthernet0/6, changed state to up
    6d23h: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/6, changed
    state to up
    RI_DMZ#show mac
    RI_DMZ#show mac-address-table
    Dynamic Address Count:                 3
    Secure Address Count:                  0
    Static Address (User-defined) Count:   0
    System Self Address Count:             37
    Total MAC addresses:                   40
    Maximum MAC addresses:                 2048
    Non-static Address Table:
    Destination Address  Address Type  VLAN  Destination Port
    -------------------  ------------  ----  --------------------
    0003.6b0e.2295       Dynamic          1  FastEthernet0/12
    0011.4331.0ce5       Dynamic          1  FastEthernet0/6
    0018.8bf7.287f       Dynamic          1  FastEthernet0/7
    RI_DMZ#config t
    Enter configuration commands, one per line.  End with CNTL/Z.
    RI_DMZ(config)#int fa0/12
    RI_DMZ(config-if)#no spanning-tree portfast
    RI_DMZ(config-if)#^Z
    RI_DMZ#show spanning-tree brief
    
    VLAN1
      Spanning tree enabled protocol IEEE
      ROOT ID    Priority 32768
                 Address 0002.b9ec.9a80
                 Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec
    
      Bridge ID  Priority    32768
                 Address     0002.fd30.a580
                 Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec
    
    
    Port                           Designated
    Name    Port ID Prio Cost Sts  Cost  Bridge ID      Port ID
    ------- ------- ---- ---- ---  ----  -------------- -------
    Fa0/1   128.13  128  19   BLK  57    0002.fd30.a580 128.13
    Fa0/2   128.14  128  19   BLK  57    0002.fd30.a580 128.14
    Fa0/3   128.15  128  19   BLK  57    0002.fd30.a580 128.15
    Fa0/4   128.16  128  19   BLK  57    0002.fd30.a580 128.16
    Fa0/5   128.17  128  19   BLK  57    0002.fd30.a580 128.17
    Fa0/6   128.18  128  19   FWD  57    0002.fd30.a580 128.18
    Fa0/7   128.19  128  19   FWD  57    0002.fd30.a580 128.19
    Fa0/8   128.20  128  19   FWD  57    0002.fd30.a580 128.20
    Fa0/9   128.22  128  19   BLK  57    0002.fd30.a580 128.22
    Fa0/10  128.23  128  19   BLK  57    0002.fd30.a580 128.23
    
    
    Port                           Designated
    Name    Port ID Prio Cost Sts  Cost  Bridge ID      Port ID
    ------- ------- ---- ---- ---  ----  -------------- -------
    Fa0/11  128.24  128  19   BLK  57    0002.fd30.a580 128.24
    Fa0/12  128.25  128  19   BLK  38    0003.6b0e.2280 128.35
    
    
    RI_DMZ#show spanning-tree summary
    
    UplinkFast is disabled
    PortFast BPDU Guard is disabled
    
    
    Name                 Blocking Listening Learning Forwarding STP Active
    -------------------- -------- --------- -------- ---------- ----------
    VLAN1                9        0         0        3          12
    -------------------- -------- --------- -------- ---------- ----------
                  1 VLAN 9        0         0        3          12
    
    
    
    
    RI_DMZ#show spanning-tree vlan 1
    
    Spanning tree 1 is executing the IEEE compatible Spanning Tree protocol
      Bridge Identifier has priority 32768, address 0002.fd30.a580
      Configured hello time 2, max age 20, forward delay 15
      Current root has priority 32768, address 0002.b9ec.9a80
      Root port is 25, cost of root path is 57
      Topology change flag not set, detected flag not set, changes 4
      Times:  hold 1, topology change 35, notification 2
              hello 2, max age 20, forward delay 15
      Timers: hello 0, topology change 0, notification 0
    
    Interface Fa0/1 (port 13) in Spanning tree 1 is down
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0002.fd30.a580
       Designated port is 13, path cost 57
       Timers: message age 0, forward delay 0, hold 0
       BPDU: sent 1, received 0
       The port is in the portfast mode
    
    Interface Fa0/2 (port 14) in Spanning tree 1 is down
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0002.fd30.a580
       Designated port is 14, path cost 57
       Timers: message age 0, forward delay 0, hold 0
       BPDU: sent 1, received 0
       The port is in the portfast mode
    
    Interface Fa0/3 (port 15) in Spanning tree 1 is down
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0002.fd30.a580
       Designated port is 15, path cost 57
       Timers: message age 0, forward delay 0, hold 0
       BPDU: sent 1, received 0
       The port is in the portfast mode
    
    Interface Fa0/4 (port 16) in Spanning tree 1 is down
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0002.fd30.a580
       Designated port is 16, path cost 57
       Timers: message age 0, forward delay 0, hold 0
       BPDU: sent 26, received 0
       The port is in the portfast mode
    
    Interface Fa0/5 (port 17) in Spanning tree 1 is down
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0002.fd30.a580
       Designated port is 17, path cost 57
       Timers: message age 0, forward delay 0, hold 0
       BPDU: sent 1, received 0
       The port is in the portfast mode
    
    Interface Fa0/6 (port 1[IMG]https://us.v-cdn.net/6030959/uploads/images/smilies/icon_cool.gif[/IMG] in Spanning tree 1 is FORWARDING
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0002.fd30.a580
       Designated port is 18, path cost 57
       Timers: message age 0, forward delay 0, hold 0
       BPDU: sent 153, received 0
       The port is in the portfast mode
    
    Interface Fa0/7 (port 19) in Spanning tree 1 is FORWARDING
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0002.fd30.a580
       Designated port is 19, path cost 57
       Timers: message age 0, forward delay 0, hold 0
       BPDU: sent 132, received 0
       The port is in the portfast mode
    
    Interface Fa0/8 (port 20) in Spanning tree 1 is FORWARDING
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0002.fd30.a580
       Designated port is 20, path cost 57
       Timers: message age 0, forward delay 0, hold 0
       BPDU: sent 158, received 0
       The port is in the portfast mode
    
    Interface Fa0/9 (port 22) in Spanning tree 1 is down
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0002.fd30.a580
       Designated port is 22, path cost 57
       Timers: message age 0, forward delay 0, hold 0
       BPDU: sent 1, received 0
       The port is in the portfast mode
    
    Interface Fa0/10 (port 23) in Spanning tree 1 is down
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0002.fd30.a580
       Designated port is 23, path cost 57
       Timers: message age 0, forward delay 0, hold 0
       BPDU: sent 1, received 0
       The port is in the portfast mode
    
    Interface Fa0/11 (port 24) in Spanning tree 1 is down
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0002.fd30.a580
       Designated port is 24, path cost 57
       Timers: message age 0, forward delay 0, hold 0
       BPDU: sent 1, received 0
       The port is in the portfast mode
    
    Interface Fa0/12 (port 25) in Spanning tree 1 is BROKEN (Port type)
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0003.6b0e.2280
       Designated port is 35, path cost 38
       Timers: message age 4, forward delay 13, hold 0
       BPDU: sent 3, received 282
    RI_DMZ#show spanning-tree interface fa0/12
    Interface Fa0/12 (port 25) in Spanning tree 1 is BROKEN (Port type)
       Port path cost 19, Port priority 128
       Designated root has priority 32768, address 0002.b9ec.9a80
       Designated bridge has priority 32768, address 0003.6b0e.2280
       Designated port is 35, path cost 38
       Timers: message age 3, forward delay 14, hold 0
       BPDU: sent 3, received 292
    RI_DMZ#show mac
    RI_DMZ#show mac-address-table
    Dynamic Address Count:                 3
    Secure Address Count:                  0
    Static Address (User-defined) Count:   0
    System Self Address Count:             37
    Total MAC addresses:                   40
    Maximum MAC addresses:                 2048
    Non-static Address Table:
    Destination Address  Address Type  VLAN  Destination Port
    -------------------  ------------  ----  --------------------
    0003.6b0e.2295       Dynamic          1  FastEthernet0/12
    0011.4331.0ce5       Dynamic          1  FastEthernet0/6
    0018.8bf7.287f       Dynamic          1  FastEthernet0/7
    
  • loxleynewloxleynew Member Posts: 405
    Like someone said you need to assign vlan1 with an ip/gateway. It has no way to communicate with your other switch beyond just being a straight through switch (I think this is the term) which wouldn't work being a dmz.

    Also I use a 2900xl and i'm pretty sure crossover is not your problem. Try assigning vlan1 with an ip.
  • xenodamusxenodamus Member Posts: 758
    I'm not sure I follow the reasoning behind the IP address suggestions. He doesn't need this switch to do anything but layer 2 switching, so why does the IP of the switch even matter?

    Since he can get it working with an el cheapo 8-port netgear, wouldn't that point to one of the managed features of the Cisco switch as the problem? STP is blocking the port....which seems like a problem. But I'm in the middle of the STP chapter in my book right now, so I'm not much help there :).

    Also, I may just be ignorant in this area, but how does being part of a DMZ make the function of this switch any different? DMZ or not, he just needs this switch to do some switching, right?
    CISSP | CCNA:R&S/Security | MCSA 2003 | A+ S+ | VCP6-DTM | CCA-V CCP-V
  • alan2308alan2308 Member Posts: 1,854 ■■■■■■■■□□
    %SPANTREE-2-RECV_1Q_NON_TRUNK: Received 802.1Q BPDU on non trunk FastEthernet0/12 on vlan 1.
    %SPANTREE-2-BLOCK_PORT_TYPE: Blocking FastEthernet0/12 on vlan 1. Inconsistent port type.

    The switch is receiving a spanning-tree BPDU from the other switch and disabling the port. If you disable portfast and shutdown then no shutdown the port, all should be well.

    You shouldn't use portfast on a port that connects to another switch.
  • Jason0352Jason0352 Member Posts: 59 ■■□□□□□□□□
    My thoughts exactly on the switch needing an IP address. This Switch is layer 2 only and it isn't making any layer 3 decisions.

    Upon further investigation it looks like my fa0/12 port was configured as static access and it looks like the 3rd floor switch is configured as trunk. Going to try to configure switchport mode trunk once people are off the http server. Wish me luck!

    DING DING DING!!! It worked. Had to set the interface to trunk. Thanks guys for all your help!
  • xenodamusxenodamus Member Posts: 758
    Good deal....Trunking crossed my mind when I saw "Received 802.1Q BPDU on non trunk FastEthernet0/12 on vlan 1" but I also just finished the VTP chapter and am not totally confident in that area either.
    CISSP | CCNA:R&S/Security | MCSA 2003 | A+ S+ | VCP6-DTM | CCA-V CCP-V
Sign In or Register to comment.