Cisco 2960 overview

The DHCP function

The DHCP server is greatly simplified network management staff, in the Cisco router in the network, we do not have to re build a new DHCP server, the Cisco router configured as a DHCPserver, it has double function of routing and DHCP, and under general condition, everyone isbuild based on Windows/linux based on application level system platform DHCP server.

An Cisco router, want to configure fora DHCP server, in order to simplify the operation test, will use another one Cisco router as a client to obtain an IP address from the router.

How to Configure the Cisco 3900 series router for a DHCP router

(1) the router configured for DHCP

Configuration commands and explained as follows:

Dhcp#configureterminal

/ / into the global schema

DHCP (config) #servicedhcp

/ / DHCP enabled services

DHCP (config) #noipdhcpconflictlogging

/ / close the DHCP log records

DHCP (config) #ipdhcppoolctocio

/ / name to configure the DHCP server for ctocio

DHCP (dhcp-config) #network192.168.2.0255.255.255.0

/ / configure the DHCP server can be assigned segment

DHCP (dhcp-config) #default-router192.168.2.1

/ / configure the default gateway for 192.168.2.1

DHCP (dhcp-config) #dns-server192.168.2.1

/ / DNS configuration for 192.168.2.1

DHCP (dhcp-config) #exit

/ / exit the DHCP configuration mode

DHCP (config) #ipdhcpexcluded-address192.168.2.2192.168.2.10

/ / configuration DHCP to exclude the assigned address

DHCP (config) #exit

/ / exit global mode

DHCP (config) #showrun

/ / check the routing configuration

(2) the client access to IP

Connected in a and R1 R2, if you want to set the IP address for a port, through the following commands can obtain the IP address from the R1 DHCP server.

Client#configureterminal

/ / into the global schema

DHCP (config) #interfacefastethernet0/1

/ / into fastethernet0/1 interface

DHCP (config-if) #ipaddressdhcp

/ / get IP address from DHCP

So wait a moment, will show a similar"InterfaceFastEthernet0/0assignedDHCPaddress192.168.2.11, mask255.255.255.0,hostnameR2" this suggests, the client obtains the success of IP.

In a large network environment, will become the DHCP server router configuration different subnet, convenient management and maintenance.

In the actual network environment, the client connects to the Cisco router via a switch, we can provide the DHCP router configuration function, which not only has the routing function, but alsohas the function of DHCP, as long as the client is configured to automatically obtain IP address,and then set the gateway.

This not only eliminates the deployment of specialized DHCP server trouble andsaves cyber source, and fully tap the Cisco 3900 router functions, is convenient for network management in the future.

More information about Cisco 3900 router price, visit 3anetwork.com.

The similar products: WS-X4612-SFP-E, WS-X4712-SFP+E more on 3anetwork.com 

From cisco.com Cisco WS-X4524-GBRJ45V, Catalyst 4500 PoE 802.3af 10/ 100/1000 24-ports (RJ45),  is EOL (end of life) now, the replacement is Cisco WS-X4548-RJ45V+, Catalyst 4500 PoE+ Ready 10/100/1000, 48-Port (RJ45).

Cisco WS-X4548-RJ45V+price:

List price: US$7,495.00, you can get a discount Price: US$3,379.00 on 3anetwork.com. You Save: US$4116.00 (55% off). Request a quote by emailing us at info@3Anetwork.com or pick up the phone and speak to one of our friendly and helpful sales reps at +852-3069-7733.

Catalyst 4500 E-Series Switch is the high-performance next-generation Cisco Catalyst 4500 Series Switch. The Catalyst 4500 E-Series Switch is ideal for Cisco Borderless Networks deployments at the access, core, and distribution layers and has been designed to address generation customer deployments such as voice and video.

The similar product WS-X4606-X2-E cisco module more information on 3anetwork.

The new Cisco GLC-SX-MMD transceiver: 1000BASE-SX SFP transceiver module, MMF, 850nm, DOM, is the replacement of the GLC-SX-MM. The GLC-SX-MMD SFP transceiver modules are hot-pluggable I/O devices that plug into module sockets. The transceiver connects the electrical circuitry of the module with the optical or copper network.   ou can use any combination of SFP transceiver modules that your Cisco device supports. The only restrictions are that each port must match the wavelength specifications on the other end of the cable and that the cable must not exceed the stipulated cable length for reliable communications. Use only Cisco SFP transceiver modules on your Cisco device. Each SFP transceiver module supports the Cisco Quality Identification (ID) feature which allows a Cisco switch or router to identify and validate that the transceiver module is certified and tested by Cisco.  

Cisco GLC-SX-MMD is compatible with the IEEE 802.3z 1000BASE-SX standard, operates on legacy 50 ?m multimode fiber links up to 550 m and on 62.5 ?m FiberDistributed Data Interface (FDDI)-grade multimode fibers up to 220 m. It can support up to 1km over laser-optimized 50 ?m multimode fiber cable.

3Anetwork.com has many GLC-SX-MMD in stock, customers can consider GLC-SX-MMD or its replacement GLC-SX-MMDD, compare to GLC-SX-MMD, GLC-SX-MMDD has DOM function.

The price of the GLC-SX-MMD

The list price: US$500.00, 3Anetwork.com sells at: 71% off,US$145.00, reference: http://www.3anetwork.com/cisco-glc-sx-mmd-price_p1022.html, GLC-SX-MMD.

The similar SFP products, GLC-SX-MM, GLC-LH-SM

The Cisco Catalyst 2960-S Series Switches are fixed-configuration Gigabit Ethernet switches that provide enterprise-class Layer 2 switching for campus and branch access applications. They enable reliable and secure business operations with lower total cost of ownership through a range of innovative features including FlexStack, Power over Ethernet Plus (PoE+), and Cisco Catalyst SmartOperations.

The datasheet of the WS-C2960S-48LPS-L

Layer 2 GE POE Ethernet Switch

48 Ethernet 10/100/1000 PoE+ ports

370W PoE capacity

2 1 Gigabit Ethernet SFP uplink ports

Optional Cisco FlexStack stacking support

LAN Base image

Forwarding bandwidth: 88 Gbps

Switching bandwidth: 176 Gbps

Forwarding Rate(64-Byte Packet): 77.4 mpps

Dimensions (H x W x D): 4.5 x 44.5 x 38.6 CM

Weight: 5.7 KG

Network standards: IEEE 802.1D?IEEE 802.1p?IEEE 802.1Q?IEEE 802.1s?IEEE 802.1w?IEEE 802.1X?IEEE 802.1ab?IEEE 802.3ad?IEEE 802.3af?IEEE 802.3ah?IEEE 802.3x?IEEE 802.3?IEEE 802.3u?IEEE 802.3ab?IEEE 802.3z

WS-C2960S-48LPS-L price

The list price: US$5,595.00, discount news about the cisco WS-C2960S-48LPS-L on 3anetwork.com, just US$2,285.00, You Save: US$3310.00 (59% off).

You can request a quote for WS-C2960S-48LPS-L by emailing us at info@3Anetwork.com or pick up the phone and speak to one of our friendly and helpful sales reps at +852-3069-7733.

s

1 What is the P2P?

P2P: peer-to-peer WS-C2960G-8TC-L

2 Why we need to limit the application of P2P?

P2P application is deadly killer for Internet bandwidth, a P2P client may occupy the 90% above of total bandwidth, it will seriously affect the normal Internetusers of Internet cafes, especially playing online game users.

3 How to limit the application of P2P?

1 through the ACL restricted port

The ACL restricted port. One is restricted to P2P port, open to all other ports,this method has its limitations, because now some P2P software, port can change, the blockade will automatically change the port, and even can be changed to port 80, if even this letter, the network will not work; two is the only open useful port, close other port, this method is to strictly control the network,but also feasible for small networks of simple, and if it is a large network, the data flow and complex that management can be very difficult; therefore these two methods on the Internet are not suitable for.

2 combining QOS and ACL restricted port flow

The data flow with QOS and ACL to limit P2P port. Because the majority ofworm virus and P2P ports is greater than 3000, but the normal application is used more than 3000 ports, if we will be closed more than 3000 ports, this application also unable to carry out normal, so a compromise is speed portmore than 3000 data stream. In practical application according to the actual situation may need to change the port number to make effect on the otherapplication is reduced to the minimum.

For example:

In the wide area network interface and QOS used in combination with the acl.

ACL number 3100

Rule 1000 permit TCP destination-port GT 3000

Rule 1010 permit UDP destination-port GT 3000

In the wide area network interface configuration QOS.

#

Traffic classifier p2pin operator or

If-match ACL 3100

#

Traffic behavior p2pin

Car cir 2048000 CBS 1024000 EBS 0 green pass red discard

#

QoS policy p2pin

Classifier p2pin behavior p2pin

#

Interface Ethernet1/0

IP address 162.1.1.2 255.255.255.252

QoS apply policy p2pin inbound

#

In the LAN interface and QOS used in combination with the acl.

ACL number 3300

Rule 1000 permit TCP source-port GT 3000

Rule 1010 permit UDP source-port GT 3000

In a local area network interface configuration QOS.

#

Traffic classifier p2pout operator or

If-match ACL 3300

#

Traffic behavior p2pout

Car cir 2048000 CBS 1024000 EBS 0 green pass red discard

#

QoS policy p2pout

Classifier p2pout behavior p2pout

#

Interface Ethernet3/0

IP address 192.168.1.1 255.255.255.0

QoS apply policy p2pout inbound

#

3 limit sessions of thesingle NAT 

Single user limit after the VRP software support NAT, to do a single IP address conversion limit the NAT TCP connections, because a major characteristics of P2P software such as BT is also have a connection number, which occupiesNAT large number of tables, so the method can be applied effectivelylimitations of BT, such as our IP 192.168.1.2 to set the maximum NAT numberis 100; the normal network access must be enough, but if you use BT, so soonthe IP NAT table number will reach 100, once reached the peak, and other access to the IP could not NAT conversion, must wait until the part NAT tableafter failure, can use again, so as to effectively protect the network bandwidth,also reached the warning role.

4 limit software through the client 

Through the software settings on the client to prohibit the use of P2P software.There are many Internet cafe management software may according to need toban all software running, suggest the need to prohibit the P2P application of Internet cafes in this way.

Above we summarize some methods currently available P2P software, the onlyway according to the actual network circumstances, of course, can also be a combination of methods.

2: limit of common P2P software port ACL

ACL number 3100

Rule 1000 deny TCP destination-port EQ 2710

Rule 1010 deny TCP destination-port EQ 6969

Rule 1020 deny TCP destination-port range 88818999

Rule 1030 deny TCP destination-port EQ 10137

Rule 1040 deny TCP destination-port EQ 16881

Rule 1050 deny TCP destination-port range 46614662

Rule 1060 deny UDP destination-port EQ 4665

Rule 1070 deny UDP destination-port EQ 4672 WS-C2960S-24TS-S Price

More:

The first step, download a TFTP server, WS-C2960-24TT-L Price using Cisco TFTP Server on the line, free, small volume, has finished. Start TFTPServer.exe, and the root directory of the TFTP server for the specified to the directory change option, such as "D:CISCO\IOS", keep it open.

The second step, with twisted pair 2960 access network (if you have used in the network,skip this step) or with computer directly connected, and then control line connecting 2960 console port and computer serial port 1, connection terminal software function with the XMODEM Win2003 or XP (super terminal with this function, such as just a simple backup,XMODEM is not essential.).

The third step, a computer network with the same 2960 IP address, PING test passed, thenin 2960 should be able to see the computer's MAC, to ensure the communication between2960 and the normal computer.

Switch#en

Switch#conf t

Switch (config) #inter VLAN 1

Switch (config-if) #ip addr 172.16.1.100 255.255.255.0

Switch# sh run

......

Interface Vlan1

IP address 172.16.1.100 255.255.255.0

No IP route-cache

......

End

Switch#ping 172.16.1.10

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.10, timeout is 2 seconds:

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 MS

Switch#sh IP ARP

Protocol Address Age (min) Hardware Addr Type Interface

Internet 172.16.1.10 1 00a0.d1b4.5bd8 ARPA Vlan1

Internet 172.16.1.100 - 0023.34b2.5f40 ARPA Vlan1

The fourth step, check the current IOS information 2960.

Switch#sh flash:

Directory of flash:/

2 -rwx 1232 Mar 11993 00:41:41 +00:00 config.text

3 -rwx 5 Mar 11993 00:41:41 +00:00 private-config.text

7 drwx 192 Mar 11993 00:10:03 +00:00 c2960-lanbase-mz.122-35.SE5

32514048 bytes total (24178176 bytes free)

From the file attributes (the scarlet letter part) can be seen in the c2960-lanbase-mz.122-35.SE5 is a directory.

According to the experience, the IOS file name should be c2960-lanbase-mz.122-35.SE5.bin

The full path for the flash:c2960-lanbase-mz.122-35.SE5/c2960-lanbase-mz.122-35.SE5.bin

Write down this path information.

The fifth step, the TFTP server root directory IOS to the computer, the backup process.

Switch#copy flash: tftp:

Source filename c2960-lanbase-mz.122-35.SE5/c2960-lanbase-mz.122-35.SE5.bin []?

Address or name of remote host 172.16.1.10 []?

Destination filename [c2960-lanbase-mz.122-35.SE5.bin] (enter)?

5222733 bytes copied in 10.905 secs (478930 bytes/sec)

TFTP server root directory of computer examination, confirm file already exists.

Here, CISCO 2960 IOS backup is complete.

Note: this method is suitable for WS-C2960-24TT-L most of CISCO devices, such as routers etc..