Friday, November 22, 2013

ether channel

 Create ether channel interface - interface port-channel 1
interface usage -channel-group 1 mode on

 show Commands

  • show etherchannel
  • show interfaces interface-id switchport
  • show interfaces interface-id trunk
  • show interfaces port-channel channel-number
  • show interfaces interface.subinterface

media type on Giga Port

sw11.sin1.oss(config-if)#media-type ?
  auto-select  Use whichever connector is attached
  rj45         Use RJ45 connector
  sfp          Use SFP connector

HSRP Topology

HSRP State Machine

HSRP is a state machine consisting of these five states:
Initial: HSRP doesn’t run. This state is seen when an interface comes up
Listen: listens for hellos, knows the virtual IP
Speak: sends hellos and participates in the election
Standby: candidate for next active router
Active: currently forwards packets sent to the virtual IP

Preempt

An HSRP router won’t attempt to become the active router when introduced to an existing topology, even if it has a higher priority. We want DSW1 to always be the Active router if it is up and the topology is stable so we need to turn on “preempt.” Preempt will cause the router to initiate an election if it has a higher priority. If priorities are equal, the router with the highest IP address will win an election.

#standby preempt

Tacacs Config

aaa new-model
aaa authentication login default group tacacs+ line
aaa authentication enable default group tacacs+ enable
aaa accounting commands 0 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa session-id common
tacacs-server host x.x.x.x
tacacs-server directed-request
tacacs-server key 7 062721025F4B0A0B0003
aaa authorization config-commands
aaa authorization exec default group tacacs+ local if-authenticated
aaa authorization commands 15 default group tacacs+ none