DHCP Help

[Penny5837]

Okay so here is whats going on, from my modem it goes to a crappy old wifi router that I use for dhcp and then route to my Cisco 24 port rack-mount switch, which goes to my servers, my house Ethernet, and my good WiFi router. I want to remove the bottle neck of the old crappy wifi router, but I have no idea how to do DHCP on my Cisco switch (it's old, you have to use a serial connector to get into it...). I was just thinking buying a new router for that purpose, but I really don't want to spend $79 for something that I can do myself... PLEASE HELP ME. It's a Cisco catalyst 3560 if that helps any.

[Penny5837]

can't you set up one of your servers to give IP adresses to your devices?

Probably, but I would rather use the switch to do that

[Sir Asvald]

Probably, but I would rather use the switch to do that

Switches cannot give out DHCP. Only routers.

 

My bad, didn't see which switch you had. 

 

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_44_se/configuration/guide/scg/swdhcp82.html#wp1058243

[Neil]

Just run a dhcp server on another server attached to your switch. Switches shouldn't handle dhcp.

[KTFO|SGTmoody]

Abdul201588's link is your answer to this

 (it's old, you have to use a serial connector to get into it...)

You do know you can setup SSH dont you?  All Cisco devices even the newest ones that are well over £500,000  have console ports on their cards.

 

Configure your switch on the lan:

 

en

conf t

int vlan1

ip address (put ip here EG: 192.168.1.2 255.255.255.0 )

desc managment

exit

 

Setup ssh:

 

conf t

hostname        Put-you-host-name-here

ip domain-name        put-domain-name-here

crypto key generate rsa

line vty 0 4

login local

transport input ssh

ip ssh version 2

exit

username put-name-here privilege 15 secret put-password-here

 

 

the 3560 is a nice switch by the way, it may be slightly "old" but its the software that counts,  Its L3 so can it do some cool stuff.

[dalekphalm]

Abdul201588's link is your answer to this

You do know you can setup SSH dont you?  All Cisco devices even the newest ones that are well over £500,000  have console ports on their cards.

 

Configure your switch on the lan:

 

en

conf t

int vlan1

ip address (put ip here EG: 192.168.1.2 255.255.255.0 )

desc managment

exit

 

Setup ssh:

 

conf t

hostname        Put-you-host-name-here

ip domain-name        put-domain-name-here

crypto key generate rsa

line vty 0 4

login local

transport input ssh

ip ssh version 2

exit

username put-name-here privilege 15 secret put-password-here

 

 

the 3560 is a nice switch by the way, it may be slightly "old" but its the software that counts,  Its L3 so can it do some cool stuff.

Coincidentally, we use a Cisco 3560 switch here at work, though we have a vendor that manages it (and all our Cisco equipment) for us.

[Penny5837]

Coincidentally, we use a Cisco 3560 switch here at work, though we have a vendor that manages it (and all our Cisco equipment) for us.

The funny thing is I got the switch from my dad's work. I also got the servers too, they were just going to throw them away!

[Penny5837]

Abdul201588's link is your answer to this

You do know you can setup SSH dont you?  All Cisco devices even the newest ones that are well over £500,000  have console ports on their cards.

 

Configure your switch on the lan:

 

en

conf t

int vlan1

ip address (put ip here EG: 192.168.1.2 255.255.255.0 )

desc managment

exit

 

Setup ssh:

 

conf t

hostname        Put-you-host-name-here

ip domain-name        put-domain-name-here

crypto key generate rsa

line vty 0 4

login local

transport input ssh

ip ssh version 2

exit

username put-name-here privilege 15 secret put-password-here

 

 

the 3560 is a nice switch by the way, it may be slightly "old" but its the software that counts,  Its L3 so can it do some cool stuff.

If I don't have a domain name, should i just my external ip?

[Penny5837]

[Neil]

 

 

run a "show version" and tell us what you see. Your firmware is probably lacking the crypto/ip ssh functions because it doesn't support them. You will most likely need to find a download for an updated image.

[KTFO|SGTmoody]

 

looks like your version doesnt support ssh.  in which case you will have to update your IOS. if you type  show version and look for something like: System image file is "flash:/c3560-ipservicesk9-mz.122-55.SE10.bin"

 

That is you IOS image.  Im guessing you will probably need some help in knowing how to update your IOS?

 

I have run the SSH commands on one of my spare 3560's and this is what it should look like:

 

SW-3560#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

SW-3560(config)#

SW-3560(config)#

SW-3560(config)#ip default-gateway 192.168.10.1    <----  change this to your defualt gateway

SW-3560(config)#int vlan 1

SW-3560(config-if)#ip address 192.168.10.2 255.255.255.0  <---- change this to your switch ip and subnet

SW-3560(config-if)#no shut

SW-3560(config-if)#exit

SW-3560(config)#

SW-3560(config)#hostname SW-3560

SW-3560(config)#ip domain-name 3560.h.local    <--- give it a domain name, can be what you like, not an IP a domin IE google.com

SW-3560(config)#crypto key generate rsa

The name for the keys will be: SW-3560.3560.h.local

Choose the size of the key modulus in the range of 360 to 2048 for your

  General Purpose Keys. Choosing a key modulus greater than 512 may take

  a few minutes.

How many bits in the modulus [512]: 1024

% Generating 1024 bit RSA keys, keys will be non-exportable...[OK]

SW-3560(config)#

SW-3560(config)#line vty 0 4

SW-3560(config-line)#transport input ssh

SW-3560(config-line)#login local

SW-3560(config-line)#ip ssh version 2

SW-3560(config)#

SW-3560(config)#username put-your-username-here password put-your-password-here

SW-3560(config)#service password-encryption

SW-3560(config)#enable secret put-your-enable-password-here

SW-3560(config)#exit

SW-3560#

SW-3560#copy run start    <---  Make sure you save your config

[Penny5837]

looks like your version doesnt support ssh.  in which case you will have to update your IOS. if you type  show version and look for something like: System image file is "flash:/c3560-ipservicesk9-mz.122-55.SE10.bin"

 

That is you IOS image.  Im guessing you will probably need some help in knowing how to update your IOS?

 

Yes I will.

[KTFO|SGTmoody]

Yes I will.

ok. well the way you upgrade cisco kit is by coppying the image to its flash and then telling it to boot from the image.

 

You can transfer the IOS over either TFTP or FPT, its up to you how you do it, I will provide both commands.

 

Download the IOS .bin file I linked you in the PM or you can easly find it on the internet, up to you. the latest IOS is : c3560-ipservicesk9-mz.122-55.SE10.bin

 

if you use TFTP then I prefer TFTPD server http://tftpd32.jounin.net/tftpd32_download.html

or you can put the image on a FTP server that you can access.

 

TFTPD method:

point TFTPD to the folder that you downloaded the IOS image ( click the browse button and select the folder )

then in the server interfaces drop down select your computers interface, it will show the interface IP, this is the IP we will be using to connect to the TFTP server

 

Connect your switch to the same network that the TFTP server is on (if its not allready )

 

Now for the commands:

 

enable

dir flash:   <--  Show the files on your switches flash

 

(If you have more than one IOS here then you will need to delete the oldest one,  use command:  del flash:put_ios_name_here)

 

now to copy the IOS to the switch:

SW-3560#copy tftp: flash:c3560-ipservicesk9-mz.122-55.SE10.bin   <-- Command

Address or name of remote host [1.1.1.1]?                                        <-- TFTP server IP

Source filename [c3560-ipservicesk9-mz.122-55.SE10.bin]?             <-- Source file IE the IOS we want to load on to the switch

Destination filename [c3560-ipservicesk9-mz.122-55.SE10.bin]?      <-- if correct hit enter, best to keep it the same name as the source file name

Accessing t <--  Now starting to download the IOS

 

To copy from FTP:

 

Im not going to say how to setup a ftp server but just give the commands to copy from one

 

SW-3560#copy ftp://username:password@1.1.1.1/3560/c3560-ipservicesk9-mz.122-55.SE10.bin flash:c3560-ipservicesk9-mz.122-55.SE10.bin  <-- remember the / after your ip is the direcotry structure that your IOS file is in.

Destination filename [c3560-ipservicesk9-mz.122-55.SE10.bin]?

Accessing ftp://ciso:cisco@1.1.1.1/3560/c3560-ipservicesk9-mz.122-55.SE10.bin...

 

Next step is the same, check your ios copyed to flash ok

 

SW-3560#dir flash:   <-- show files in flash command

Directory of flash:/

    2  -rwx    12749440   Jan 1 1970 01:13:39 +00:00  c3560-ipservicesk9-mz.122-55.SE10.bin   <-- what we are loooking for,  yes my date is not set on the switch

   

now to tell the switch to boot from our new ios

 

conf t

boot system flash:c3560-ipservicesk9-mz.122-55.SE10.bin  <-- put the new IOS image name here  This tells the switch to boot this file

no boot system flash:c3560-ipservicesk9-mz.122-55.SE8.bin  <-- we tell the switch not to boot from the old ios.  use your "dir flash" command to get the name of the IOS

exit                      <-- exit out of configure mode

copy run start     <-- save our config

reload                <-- reload the switch (reboot)

 

switch should reboot, once back in run the  "show ver " command again and check your on the new IOS,   You can now procede with your SSH setup

 

Congrats on upgrading your switch!

[Penny5837]

ok. well the way you upgrade cisco kit is by coppying the image to its flash and then telling it to boot from the image.

 

You can transfer the IOS over either TFTP or FPT, its up to you how you do it, I will provide both commands.

 

Download the IOS .bin file I linked you in the PM or you can easly find it on the internet, up to you. the latest IOS is : c3560-ipservicesk9-mz.122-55.SE10.bin

 

if you use TFTP then I prefer TFTPD server http://tftpd32.jounin.net/tftpd32_download.html

or you can put the image on a FTP server that you can access.

 

TFTPD method:

point TFTPD to the folder that you downloaded the IOS image ( click the browse button and select the folder )

then in the server interfaces drop down select your computers interface, it will show the interface IP, this is the IP we will be using to connect to the TFTP server

 

Connect your switch to the same network that the TFTP server is on (if its not allready )

 

Now for the commands:

 

enable

dir flash:   <--  Show the files on your switches flash

 

(If you have more than one IOS here then you will need to delete the oldest one,  use command:  del flash:put_ios_name_here)

 

now to copy the IOS to the switch:

SW-3560#copy tftp: flash:c3560-ipservicesk9-mz.122-55.SE10.bin   <-- Command

Address or name of remote host [1.1.1.1]?                                        <-- TFTP server IP

Source filename [c3560-ipservicesk9-mz.122-55.SE10.bin]?             <-- Source file IE the IOS we want to load on to the switch

Destination filename [c3560-ipservicesk9-mz.122-55.SE10.bin]?      <-- if correct hit enter, best to keep it the same name as the source file name

Accessing t <--  Now starting to download the IOS

 

now to tell the switch to boot from our new ios

 

conf t

boot system flash:c3560-ipservicesk9-mz.122-55.SE10.bin  <-- put the new IOS image name here  This tells the switch to boot this file

no boot system flash:c3560-ipservicesk9-mz.122-55.SE8.bin  <-- we tell the switch not to boot from the old ios.  use your "dir flash" command to get the name of the IOS

exit                      <-- exit out of configure mode

copy run start     <-- save our config

reload                <-- reload the switch (reboot)

 

switch should reboot, once back in run the  "show ver " command again and check your on the new IOS,   You can now procede with your SSH setup 

 

Congrats on upgrading your switch!

Alright, I'm getting a snag. Every time I try to copy the bin to the switch using tftp, it says "%error opening tftp://192.168.1.110/c3560-ipservicesk9-mz.122-55.SE10.bin  (Timed out)". I've tested with the command prompt in windows to see if the server is working correctly, and it is. I have no idea what is making it not work. 

[dzonidev]

Alright, I'm getting a snag. Every time I try to copy the bin to the switch using tftp, it says "%error opening tftp://192.168.1.110/c3560-ipservicesk9-mz.122-55.SE10.bin  (Timed out)". I've tested with the command prompt in windows to see if the server is working correctly, and it is. I have no idea what is making it not work. 

 

Check your windows firewall and try the transfer on other pcs. I've also come across that error, sometimes on some cisco versions you have to manually enter the Destination filename, if you don't that error shows up, honestly as weird as it seems I have no idea why.

 

 

Switches shouldn't handle dhcp.

 

I disagree, for a home environment it's as good as any.

[Penny5837]

Check your windows firewall and try the transfer on other pcs. I've also come across that error, sometimes on some cisco versions you have to manually enter the Destination filename, if you don't that error shows up, honestly as weird as it seems I have no idea why.

What would I add to the firewall? (Port, application, something else?)

[dzonidev]

What would I add to the firewall? (Port, application, something else?)

 

Turn it off temporarily.

[Penny5837]

Turn it off temporarily.

SUCCESS!!!!!!!!!!!! THANK YOU SO MUCH, MAN!

[Penny5837]

Turn it off temporarily.

 

Do you have any idea how to fix this? or what to do instead?

[Penny5837]

what do..PNG

 

Do you have any idea how to fix this? or what to do instead?

wait, nevermind

[dzonidev]

SUCCESS!!!!!!!!!!!! THANK YOU SO MUCH, MAN!

 

So I'll just jump in and tell you how to setup DHCP.

 

Once you're in config mode.

hostname(config)#ip dhcp pool POOLNAME <-- Give it a namehostname(dhcp-config)#network 192.168.1.0 255.255.255.0 (Depending on your subnet correct this)hostname(dhcp-config)#default-router 192.168.1.1hostname(dhcp-config)#dns-server 192.168.1.1 8.8.8.8 etc...hostname(dhcp-config)#exithostname(config)#ip dhcp excluded-address 192.168.1.1

[Penny5837]

So I'll just jump in and tell you how to setup DHCP.

Once you're in config mode.

hostname(config)#ip dhcp pool POOLNAME <-- Give it a namehostname(dhcp-config)#network 192.168.1.0 255.255.255.0 (Depending on your subnet correct this)hostname(dhcp-config)#default-router 192.168.1.1hostname(dhcp-config)#dns-server 192.168.1.1 8.8.8.8 etc...hostname(dhcp-config)#exithostname(config)#ip dhcp excluded-address 192.168.1.1

I don't need dhcp anymore. What I want to do right now is have the items not on my switch directly show up to those on it and vice versa.

[dzonidev]

I don't need dhcp anymore. What I want to do right now is have the items not on my switch directly show up to those on it and vice versa.

 

I don't follow. What items?

[Penny5837]

I don't follow. What items?

I have two switches. One is where all my main computers are hooked up, and then the other switch (this Cisco one) is where the servers are. I want the main computers to be able to see the shared drive that I have on my active directory. I also want the server to be able to see my nas, which is on the other switch.

[Wombo]

What would I add to the firewall? (Port, application, something else?)

edit: people beat me to it!

 

You don't "need" to set up ssh, but you can do this if you want, it's always a good practice. 3560 is actually a pretty good switch, very well rounded and has most features you would want out of a layer 3 switch (ios dependent of course). You seem to be getting some great help here but your initial question remains unanswered.

 

To set up a dhcp server first exclude any addresses you do not want dhcp handing out.

 

R1(config)#ip dhcp excluded-address 192.168.0.1 192.168.0.10 (the address range you want excluded from dhcp, you can add in as many as you want)

 

Then we create a dhcp pool, name of your choice, that hands out the ip address of the default gateway, dns server and an ip address to be used.

 

R1(config)#ip dhcp pool MYPOOL (you can replace MYPOOL with whatever you want, or leave it as is)

R1(dhcp-config)#network 192.168.0.0 255.255.255.0

R1(dhcp-config)#default-router 192.168.0.1

R1(dhcp-config)#dns-server 8.8.8.8 8.8.4.4

 

And that is pretty much it, if you want to cheat here are the commands you can copy and paste into the ios cli. Just ensure you have the correct addresses for your environment.

 

conf t

ip dhcp excluded-address 192.168.0.1 192.168.0.10

!

ip dhcp pool MYPOOL

   network 192.168.0.0 255.255.255.0

   default-router 192.168.0.1

   dns-server 8.8.8.8 8.8.4.4

 

If you need any help with any other configuration of your switch, just post here or search for ios configuration guide for the technology you are looking to set up. Cisco has everything very well documented in easy to follow guides that are free for everyone to use. Goodluck.