Re: Cisco 2811 with HWIC-4ESW



First, thanks for the info. Cisco docs are somewhat lacking in certain
areas.
It is always nice to see someone else going where no one else has gone
before.

Doug



"Mike Dorn" <mrdorn@xxxxxxxx> wrote in message
news:13g8r4m31iik7a9@xxxxxxxxxxxxxxxxxxxxx
Houston SBC wrote:

I have a Cisco 2811 running IOS adventerprisek9-mz.12.4-15.T and a
HWIC-4ESW installed.

Does anyone have the foggiest idea of how to get fa0/0 to share a vlan
with fa0/0/0-3 (the ports on the HWIC-4ESW).

Any config files, urls, etc would be greatly appreciated.

Appendix D of the Cisco Field Manual: Catalyst Sw. Config covers
"Extending VLANs within Layer 3 switches" and seems to be close but it
shows a 802.1Q trunk line from the layer3 device to the layer 2
device--How's it handled when it is in the same box?

TIA

Doug
Dougs@(8888nospam!!!!)Net-fix.com



Actually, I did this just yesterday with a 2811 and the 9-port switch
module. I eventually tore it back down again because it ate up cpu and it
wasn't all that essential for me to have the other interface.

What you have to do is turn on bridging. Then you create a bridge virtual
interface for the router to use instead of the vlan interface that
connects to the switch module. Join both the vlan interface from the
switch and the physical interface from the ouside of the router into the
bridge group, and they're together.

bridge irb
int fa0/0
no ip address
bridge-group 1
int bvi 1
ip address x.x.x.x y.y.y.y
int vlan 3
bridge-group 1
int fa0/0/2
switchport access vlan 3
bridge 1 protocol ieee
bridge 1 route ip

What I did was similar, except that I was making my fa0/0 into a trunk to
reach external switches, so each dot1q subinterface under it was linked to
a separate bridge group. The 9-port module was then configured with one
vlan for data and the other for voice to support ip phones. When I had it
working, however, it chewed up 10-30% cpu with almost no traffic load.
Shut down fa0/0, got rid of the bvi's and made the 9th port on the module
into a trunk instead, and cpu ran about 1-2%, so that's where I'm leaving
it. My guess would be that the bvi's are implemented in software, so
don't optimize as well. Of course, your situation may require you to use
the other ports, so go ahead & try it.

I haven't messed with bridging on routers all that much, so it's also
possible that I missed something--the cpu hit may be avoided by
application of slightly cleverer code...



.



Relevant Pages

  • Re: kern/109815: wrong interface identifier at pfil_hooks for vlans + if_bridge
    ... It is cleared when an mbuf chain is passed to another entity which may consume the frame in that mbuf chain, in case the entity re-enters ether_inputwith the same mbuf chain for local delivery (e.g. bridge, netgraph, vlan). ... "logical" interface. ...
    (freebsd-net)
  • Re: Cisco 2821 ISR config with Wifi
    ... (my intranet vlan is 10, and this uses very basic authentication, not ... bridge 10 protocol ieee ... interface FastEthernet0 ...
    (comp.dcom.sys.cisco)
  • Re: vlan and interface
    ... vlan as an interface, meaning there is a command like "interface vlan ... The confusion can come from vendors calling routers switches. ...
    (comp.dcom.lans.ethernet)
  • Re: VLANs on Cisco PIX 506e
    ... 3Com switches. ... users can VPN to the network using the VPN client on their Windows XP ... from an interface which is not a VLAN. ... I read it as meaning that I couldn't start a VPN tunnel on an interface ...
    (comp.dcom.sys.cisco)
  • Routed interface redundancy
    ... The switches are connected to my distribution layer. ... the BVI interface went down. ... bridge 1 protocol ieee ...
    (comp.dcom.sys.cisco)