Microsoft ES4612 manual

t h e r e i s n o e d g e l i m i t t h e r e i s n o p e r m a n e n t c o r e t h e r e i s n o e d g e l i m i t t h e r e i s n o p e r m a n e n t c o r e Gigabit Ethernet Switch Management Guide[...]

[...]

Manage ment Guide Giga bit Ethernet Switch Laye r 3 Wor kgroup Switch wi th 8 SFP Por ts, and 4 G igabit Combin ation (RJ -45/SFP) Ports[...]

ES461 2 F1.0.2.5 E09200 4-R01 1500000 46400 A[...]

v Contents Chapter 1: Introduc tion 1-1 Key Featu res 1-1 Descripti on of Software Features 1-2 Sys tem D efa ults 1-6 Chapter 2: Initial Configuration 2-1 Connectin g to the Swit ch 2-1 Config uration O ptions 2-1 Requi red Connect ions 2-2 Remo te C onn ect ion s 2-3 Basi c Conf igur ati on 2-3 Conso le Conn ection 2-3 Setting Pa sswords 2-4 Sett[...]

Contents vi Console Port Setti ngs 3-24 Telnet Setti ngs 3-26 Confi guring Eve nt Loggin g 3-28 System Log Configurati on 3-28 Remot e Log Confi guration 3-30 Displ aying Lo g Messages 3-32 Resettin g the Syst em 3-32 Setti ng the Sys tem Clock 3-33 Config uring SNTP 3-33 Setting th e Time Zo ne 3-34 Simple Network M anagemen t Protocol 3-35 Enab l[...]

Contents vii Port Conf iguration 3-78 Displ aying Con nection St atus 3-78 Config uring Inte rface Conne ctions 3-81 Creatin g Trunk G roups 3-83 Staticall y Configuri ng a Tr unk 3-84 Enabling LACP on Se lected Port s 3-85 Config uring LAC P Parameters 3- 87 Displayi ng LACP Po rt Counters 3-89 Displayi ng LACP Se ttings an d Status for the Local [...]

Contents viii Selectin g the Que ue Mode 3-1 42 Setting th e Service Weight for Traffic Classe s 3-142 Layer 3 /4 Priority Settings 3-144 Mappin g Layer 3/ 4 Priorities to CoS Value s 3-1 44 Selectin g IP Precede nce/DSCP Pri ority 3-1 44 Mappin g IP Precede nce 3-145 Mapping DSCP Priority 3-146 Mappin g IP Port Priority 3-148 Mappin g CoS Values t[...]

Contents ix Config uring IP R outing Int erfaces 3-197 Address Resolutio n Protocol 3-199 Proxy ARP 3-199 Basi c ARP C onf igur atio n 3-20 0 Config uring Static AR P Addresses 3-201 Displayi ng Dynam ically L earned AR P Entries 3-202 Displayi ng Local ARP Entries 3-203 Displaying ARP Statistics 3-204 Disp layi ng St ati sti cs fo r IP Prot ocol s[...]

Contents x Displ aying Nei ghbor Informat ion 3-264 Chapter 4: Comma nd Line Interfa ce 4-1 Using the Comm and Line I nterface 4-1 Acces sing the CL I 4-1 Cons ole Connec tion 4-1 Telnet Co nnection 4-1 Entering C ommands 4-3 Keywo rds and Arg uments 4-3 Minimu m Ab brevi ati on 4-3 Comm and Compl etion 4-3 Gettin g Help on Co mmands 4-3 Showin g C[...]

Contents xi System M anageme nt Comman ds 4-25 Devic e Designa tion Comm ands 4- 25 prompt 4- 26 hostnam e 4-26 User Acce ss Com mands 4-27 usernam e 4-27 enable p assword 4-28 IP Filter Comm ands 4-29 managem ent 4-29 show man ageme nt 4-30 Web Serve r Comm ands 4-31 ip http po rt 4- 31 ip http s erver 4-31 ip http s ecure-server 4-32 ip http s ec[...]

Contents xii Time Command s 4-53 sntp c lie nt 4-53 sntp s erv er 4-54 sntp po ll 4-55 show snt p 4-55 clock t imezo ne 4- 56 calend ar set 4-57 show cal endar 4-57 System Status Com mands 4-58 show sta rtup-co nfig 4-58 show runn ing-confi g 4-59 show sy stem 4-61 show use rs 4-62 show ver sion 4-62 Frame Si ze Com mands 4 -63 jumbo f rame 4-63 Fl[...]

Contents xiii dot1x op eration -mode 4- 82 dot1x re-a uthentica te 4-82 dot1x re-a uthentica tion 4-83 dot1x tim eout qui et-period 4-83 dot1x tim eout re-au thperiod 4-84 dot1x tim eout tx-p eriod 4-84 show d ot1x 4-85 Access Control List Comm ands 4-87 IP ACLs 4-88 access -list ip 4-89 permit, d eny (Standa rd ACL) 4-90 permit, d eny (Exten ded A[...]

Contents xiv snmp-serv er engine-id 4-1 19 show s nmp e ngi ne-i d 4-11 9 snmp- serve r vi ew 4 -120 show snmp vi ew 4-121 snmp-serv er group 4-121 show snmp gro up 4-123 snmp-serv er user 4-124 show snmp us er 4-125 snmp ip filt er 4-125 DHCP Commands 4- 126 DHCP Client 4-126 ip dhcp client-i dentifier 4-127 ip dhcp restart client 4-127 DHCP Relay[...]

Contents xv Inte rfac e Co mman ds 4 -149 interf ace 4-149 des cript ion 4- 150 speed-d uplex 4-1 50 negot iat io n 4-15 1 capabi lities 4-1 52 media-t ype 4-154 shutdow n 4-154 switchp ort broad cast pac ket-rate 4-155 clear coun ters 4-156 show int erfaces status 4-157 show int erfaces counters 4-158 show int erfaces switchpo rt 4-159 Mirror Port[...]

Contents xvi spanni ng-tree edg e-port 4-1 81 spanni ng-tree port fast 4-182 spanni ng-tree lin k-type 4-183 spanni ng-tree ms t cost 4-183 spanni ng-tree mst p ort-priority 4-184 spanni ng-tree prot ocol-mig ration 4-185 show spannin g-tree 4-186 show spannin g-tree mst co nfigura tion 4-188 VLAN Comma nds 4-188 Editing VLAN Groups 4-189 vlan da t[...]

Contents xvii show q ueue cos -map 4-212 Priority Co mmands (Layer 3 a nd 4) 4-213 map ip p ort (Global Co nfigurat ion) 4-213 map ip p ort (Interface Co nfiguratio n) 4-214 map ip p recedenc e (Global Configurati on) 4-214 map ip p recedenc e (Interface Config uration) 4-215 map ip d scp (Globa l Config uration) 4-216 map ip d scp (Inter face Conf[...]

Contents xviii arp 4-241 arp-ti meout 4-242 clear arp -cach e 4-242 show arp 4-242 ip proxy -arp 4-243 IP Routing Comma nds 4-2 44 Globa l Routin g Configura tion 4-244 ip routin g 4-244 ip route 4-245 clear ip route 4-246 show ip route 4-246 show ip host-rou te 4-247 show ip traffi c 4-248 Routi ng Informatio n Protocol (RIP) 4-248 rout er ri p 4 [...]

Contents xix ip ospf h ello-inte rval 4-276 ip ospf p riority 4-2 76 ip ospf r etransmit -interval 4-277 ip ospf t ransmit-d elay 4-278 show ip os pf 4 -27 8 show ip o spf border-r outers 4-279 show i p ospf da tabase 4-280 show ip os pf i nter fac e 4-288 show ip o spf neigh bor 4-289 show i p ospf su mmary-ad dress 4-290 show i p ospf vi rtual-li[...]

Contents xx Router R edundanc y Commands 4-311 Virtua l Router R edundanc y Protocol Command s 4-311 vrrp ip 4-312 vrrp auth enticatio n 4-313 vrrp prio rity 4-313 vrrp tim ers advertise 4-314 vrrp pree mpt 4-315 show vrrp 4-316 show vr rp i nte rfac e 4 -318 show vrrp router cou nters 4-3 18 show vrrp interfa ce count ers 4-319 clear v rrp router [...]

xxi Tables Table 1- 1 Key Featu res 1-1 Tab le 1 -2 Sy st em Def aul ts 1-6 Table 3- 1 Web Page C onfigura tion Button s 3-3 Table 3- 2 Switch Main Men u 3-4 Table 3- 3 Logging Lev els 3-29 Table 3- 4 SNMPv3 Security Mod els and L evels 3-35 Table 3-5 HTTPS Sys tem Support 3-49 Table 3- 6 802.1x St atistics 3-62 Table 3-7 LAC P Port Counters 3-89 T[...]

xxii T ables Table 4-1 8 show l ogging fla sh - disp lay descrip tion 4-48 Table 4-1 9 show logg ing trap - displa y descriptio n 4-49 Table 4-2 0 SMTP Ale rt Command s 4-49 Table 4-21 Tim e Comman ds 4-53 Table 4-2 2 System Sta tus Comm ands 4-58 Table 4-23 Fram e Size Commands 4-63 Table 4-2 4 Flash /File Comm ands 4-64 Table 4-2 5 File Direc tor[...]

xxiii T ables Table 4- 63 Priority Command s 4-207 Table 4- 64 Priority Command s (Layer 2 ) 4-207 Table 4- 65 Default CoS Priority Levels 4 -211 Table 4- 66 Priority Command s (Layer 3 and 4 ) 4 -213 Table 4- 67 Mapping IP Preceden ce to CoS Val ues 4-215 Table 4- 68 Mapping IP DSCP to C oS Values 4-21 7 Table 4- 69 Mult icast Fil tering Commands [...]

xxiv T ables Table 4-1 08 VRRP Comma nds 4-311 Table 4-1 10 show vrrp b rief - di splay d escriptio n 4-317 Table 4-1 09 show vrrp - display descripti on 4- 317 Table 4-1 11 HSRP Comma nds 4-320 Table 4-1 12 show stan dby - dis play des cription 4-327 Table 4-1 13 show stan dby brief - display descript ion 4-328 Table B -1 Troublesh ooting C hart B[...]

xxv Figures Figur e 3- 1 Home P ag e 3-2 Figure 3-2 Front Panel Indi cators 3-3 Figure 3 -3 System Informa tion 3-11 Figure 3 -4 Switch Inform ation 3-13 Figure 3 -5 Bridge Extensio n Configura tion 3-14 Figure 3 -6 IP Interface Confi guration - M anual 3-1 6 Figure 3 -7 Default Gateway 3-17 Figure 3-8 IP Interface Configura tion - DHCP 3-18 Figure[...]

xxvi Figures Figure 3 -42 ACL Configurati on - Extend ed IP 3-70 Figure 3 -43 ACL Configurati on - MAC 3-72 Figure 3 -44 ACL Mask Con figurat ion 3-73 Figure 3 -45 ACL Mask Con figuration - IP 3-75 Figure 3 -46 ACL Mask Con figuration - MAC 3-76 Figure 3 -47 ACL Port Binding 3-78 Figure 3 -48 Port - Port In formation 3-79 Figure 3 -49 Port - Port C[...]

xxvii Figures Figure 3-87 IP DSCP Priority 3-14 7 Figure 3-88 IP Port Priority Status 3-148 Figure 3-89 IP Port Priority 3-148 Figure 3 -90 ACL CoS Priority 3-150 Figur e 3- 91 A CL Mar ker 3-1 51 Figure 3 -92 IGMP Configurat ion 3-155 Figure 3 -93 Multicast Router Po rt Informati on 3-156 Figure 3 -94 Static Multic ast Rout er Port Config uration [...]

xxviii Figures Figure 3-132 O SPF Area Configuratio n 3-229 Figure 3-133 O SPF Range Config uration 3- 231 Figure 3-134 O SPF Interface Config uration 3-234 Figure 3 -135 OSPF Inte rface Config uration - D etailed 3-235 Figur e 3- 136 OSPF Vir tual Link Con figu rat ion 3-237 Figure 3 -137 OSPF Netw ork Area Addr ess Confi guration 3-239 Figure 3 -[...]

1-1 Chapter 1: Introduction This switc h provid es a broad r ange of fe atures for Layer 2 swi tching and La yer 3 routing. It in cludes a managem ent agen t that allow s you to configu re the featu res listed in this manual. Th e defaul t configurat ion can be used for most of the fea tures provided by this swi tch. Howe ver , there ar e many opti[...]

Introduction 1-2 1 Description of Software F eatures The sw itch pr ovides a w ide ra nge o f adva nced perform ance enha ncing features . Flow cont rol elimina tes the l oss of packets due t o bottlene cks cau sed by po rt satura tion. Broadc ast stor m suppr ession pr events broadc ast tra ffic storms from engulfin g the netw ork. Untagged ( port[...]

Description of Softw are Feat ures 1-3 1 DHCP Server and DHCP Relay – A DHCP server is prov ided to assign IP addresses to h ost devices. Since DHCP uses a broadcast mechanism, a DHCP server and its client must physi cally r eside on t he sam e s ubnet. Since it is not practical to have a DHCP server on every subnet, DHCP Relay is also supported [...]

Introduction 1-4 1 T o avoid dropping frame s on cong ested por ts, the switch pr ovides 1 MB for frame buffering. T his bu ffer can queu e pack ets awaiti ng tra nsmissi on o n conge sted network s. Sp anning T ree Protocol – The switc h suppo rts these spanni ng tree prot ocols: S panning Tree Protocol (STP , IEEE 802.1D ) – This protoco l ad[...]

Description of Softw are Feat ures 1-5 1 This switc h also supp orts sever al commo n metho ds of prior itizing layer 3/4 traffic to meet ap plication r equirem ents. T raffic can be prioritized based on the priorit y bits in the IP frame ’s T ype of Service (T oS) octet or the num ber of the TC P/UDP p ort. When th ese service s are en abled, th[...]

Introduction 1-6 1 Multicast Routing – Routing for m ulticas t packets is support ed by the D istance V ector Multic ast Ro uting Pro tocol (DVM RP) a nd Prot ocol-Ind epend ent Multi casting - Dens e Mode (PIM- DM). T hese pr ot ocols w ork in conj unct ion wi th IG MP to fi lte r and route mult icast traffic. DV MRP is a mor e compre hensiv e i[...]

System Defaults 1-7 1 Web Manage ment HTTP Server Enabled HTTP Port Numb er 80 HTTP Secure Server Enabled HTTP Se cure Po rt Num ber 443 SNMP Communi ty Strin gs “pu blic” (r ead only) “privat e” (read/w rite) Traps Au thentic ation t raps: enab led Link-up-d own ev ents: e nabled SNMP V3 View: defaul tview Group: pu blic (re ad onl y), pri[...]

Introduction 1-8 1 Span nin g T ree Protocol Status En abled, MSTP (Defaults: All val ues ba sed on IEEE 802.1s) Fast Forw arding (Edge Port) Disabled Address T able Aging Time 300 seco nds Virtual LANs Default V LAN 1 PVID 1 Acceptab le Fram e Type All Ingress F iltering Disabled Switchpo rt Mode (Egre ss Mod e) Hybrid: ta gged/u ntagge d fram es [...]

System Defaults 1-9 1 Router Re dunda ncy HS RP Disabl ed VRRP Disabl ed Multicast Filtering IGMP Sn ooping (Layer 2) Snooping : Enab led Querier: D isable d IGMP (Layer 3) Disabled Multicast Rou ting DVMRP Disabled PIM-D M Disabled System L og Status En abled Message s Logg ed Le vels 0- 7 (all) Message s Logg ed to F lash Levels 0-3 SMTP Em ail A[...]

Introduction 1-10 1[...]

2-1 Chapter 2: Initia l Configuration Connecting to the Switch Configurati on Options The switc h includes a built-in ne twork m anageme nt age nt. The ag ent offers a variet y of m anageme nt opt ions, i ncluding SN MP , RMON a nd a web- based i nterfac e. A PC may also be connec ted direct ly to the sw itch for con figura tion and m onitorin g vi[...]

Initial Confi guration 2-2 2 • Configu re Spa nning T ree parame ters • Configure Class of Se rvice (CoS) p riority queuing • Configu re up to 6 stat ic or LACP t runks • Enable po rt mirror ing • Set br oadca st stor m cont rol o n an y po rt • Displa y system in formatio n and st atistics Required Connections The switch pr ovides an R[...]

Basic Configur ation 2-3 2 Remote Connections Prior to acces sing t he sw itch’s onboa rd a gent v ia a netwo rk conn ection , you must fi rst c onfi gure it w ith a val id I P add ress , su bnet m ask, and defaul t g atewa y usi ng a console connect ion, DHC P or BOO TP proto col. The IP address f or this switch is obtained via DHCP by default. [...]

Initial Confi guration 2-4 2 Setting Passwords Note: If this is yo ur first time to log into the CLI program, you s hould define new passwords for both default user names us ing the “u sername” comm and, record them and put them in a saf e place. Passwo rds can con sist of up t o 8 alphanu meri c character s and are ca se sens itive. T o preven[...]

Basic Configur ation 2-5 2 Before y ou can assi gn an IP addr ess to th e switch , you mus t obtain the follo wing inform ation from y our netwo rk admi nistrator : • I P addr ess fo r the sw itch • Default ga teway for the netwo rk • Network mask for thi s network T o assign an IP address to the swi tch, comp lete th e followin g steps: 1. F[...]

Initial Confi guration 2-6 2 5. W ait a few minutes, and then c heck the I P config uration se ttings by t yping the “show ip int erface ” comman d. Pre ss <Enter >. 6. Then save y our con figurat ion chang es by typi ng “copy running-co nfig startup-co nfig.” Ente r the startup file name and pr ess <E nter>. Enabling SNMP Manag[...]

Basic Configur ation 2-7 2 The defa ult s tri ngs are: • public - wit h read- only access. Author ized managem ent s tations are only able t o ret rieve MIB obje cts. • private - w ith re ad-wr ite acces s. A uthorized manag emen t station s are able t o both ret rieve and modify MIB object s. T o prevent unautho rized a ccess to the swi tch fr[...]

Initial Confi guration 2-8 2 Configuring Acc ess for SNMP Vers ion 3 Clients T o configure managem ent acc ess for SNM Pv3 cli ents, you need t o first creat e a view tha t defines the porti ons of M IB that the client ca n read or write, ass ign the v iew to a group , and then assi gn the use r to a group . The followi ng exampl e creates on e vie[...]

Managing System Files 2-9 2 Managing System Files The s wit ch’ s fl ash memory supp ort s th ree types of s yste m fi les t hat can be mana ged by the CLI program, web interface, or SNMP . The s witch’ s file system allows files to be upload ed and d ownloade d, cop ied, deleted , and set a s a start-up file. The thre e types of files ar e: ?[...]

Initial Confi guration 2-10 2[...]

3-1 Chapter 3: Config urin g the Switc h Using the Web In terface This swit ch prov ides an em bedde d HTTP web ag ent. Us ing a w eb browser you c an configur e the swit ch and vie w statistics t o monitor network ac tivity . The web agen t can be acce ssed by any com puter on the netwo rk using a standard web browse r (Interne t Explorer 5. 0 or [...]

Configuring the Switch 3-2 3 Navigating the Web Brow ser Interface T o access the web-brow ser in terface yo u must first enter a us er name a nd password . The ad minist rator has Rea d/Write acce ss to all conf igurati on parame ters and statisti cs. The de fault use r name an d passwor d for the ad mini strator is “ admin.” Home Page When yo[...]

Navigating the Web Brow ser Interface 3-3 3 Configurati on Options Configu rable parameters have a dial og box or a drop-d own l ist. Once a co nfigur ation change ha s been m ade on a page, be sure to cl ick on the App ly butt on to confi rm the new set ting. The following table summ arizes the web page confi guration buttons. Notes: 1. To ensu re[...]

Configuring the Switch 3-4 3 Main Menu Using th e onboard web agent , you can de fine sy stem parame ters, ma nage an d contro l the switch, and all its ports, or moni tor netw ork cond itions. T he followi ng table briefly des cribes the selec tions avai lable from this progr am. T able 3-2 Switc h Main Menu Menu Descr iption Pa ge System 3-11 Sys[...]

Navigating the Web Brow ser Interface 3-5 3 Security 3-3 6 User Acco unts Configure s user nam es, pa ssword s, and access le vels 3-44 Authentic ation S ettings Configure s auth enticat ion seq uence, RA DIUS and T ACA CS 3-46 HTTPS S ettings Configure s secu re HTT P settings 3-48 SSH 3-50 Settings Configure s Secu re She ll server se ttings 3-5 [...]

Configuring the Switch 3-6 3 Rate Limi t 3-96 Input Por t Config uration Sets the i nput ra te limit for ea ch port 3-9 6 Input Trun k Con figurati on Se ts the inpu t rate l imit for each t runk 3-96 Output Po rt Con figurati on Sets t he outp ut rate lim it for e ach po rt 3-96 Output Trunk Con figurati on Sets the o utput rate lim it for e ach t[...]

Navigating the Web Brow ser Interface 3-7 3 Static Me mbersh ip Configure s mem bership type f or inter faces, incl uding t agged , untagged or forb idden 3-131 Port Conf iguratio n Specifi es defaul t PVID and VL AN att ributes 3 -132 Trunk Con figura tion Specif ies defaul t trunk VID an d VLAN attribute s 3-132 Private VL AN Status Enables or d [...]

Configuring the Switch 3-8 3 IP Multicast Reg istration Table Displays a ll multi cast gr oups a ctive on th is switc h, inclu ding multicast IP add resses and VL AN ID 3-158 IGMP Memb er Por t Tabl e I ndic ates multi cast addre sse s asso ciat ed wit h the sel ected VLAN 3-159 DNS 3-164 General C onfigu ration Enables D NS; confi gures d omain na[...]

Navigating the Web Brow ser Interface 3-9 3 UDP Shows sta tistics for UDP , inclu ding th e amo unt of traffic and errors 3-209 TCP Shows statis tics fo r TCP , i ncludin g the amount of traffic and T CP connectio n activ ity 3-210 Routing 3-194 Static Routes Co nfigure s and display static rout ing entries 3-21 1 Routing T able Sh ows all routing [...]

Configuring the Switch 3-10 3 Interface Config uration Sh ows ar ea ID and design ated ro uter; a lso config ures O SPF protocol s ettings and a uthent ication for each in terface 3-232 Virtual Link Conf iguratio n Co nfigure s a virt ual link thr ough a transi t area t o the back bone 3 -236 Network A rea Ad dress Configura tion Defines O SPF a re[...]

Basic Configur ation 3-11 3 Basic Configuration Displaying Syste m Information Y ou can ea sily ident ify the sy stem by displayin g the devi ce name , locatio n and contact infor mation. Field Attributes • Syst em Name – Name assi gned to th e switch s ystem. • Object ID – MIB II object ID for switch’s network m anage ment su bsystem . ?[...]

Configuring the Switch 3-12 3 CLI – S pecif y th e hos tname , loc ati on an d con tac t in for matio n. Displaying Switch Hardware/S oftware Versions Use the Sw itch Infor mation page t o displa y hardwar e/firm ware vers ion num bers for the main bo ard and m anage ment so ftware, as wel l as the powe r status of the system . Field Attributes M[...]

Basic Configur ation 3-13 3 These addi tional param eters ar e displaye d for the CLI. • Unit ID – Unit number in sta ck. • Redundant Power Status – Displa ys the status of the re dunda nt powe r supply. Web – Click System, Switch I nformation. Figure 3 -4 Sw itch In format ion CLI – Use the foll owing com mand to display v ersion in fo[...]

Configuring the Switch 3-14 3 Displaying Bridge Extension Capa bilities The Bridg e MIB includ es extens ions for m anage d devices that suppor t Multicas t Fil ter ing, T raf fi c Cl asses , and Vi rtu al LA Ns. Y ou ca n ac cess t hes e exte nsio ns t o dis play def ault se tti ngs for t he key va riabl es. Field Attributes • Extended Multica s[...]

Basic Configur ation 3-15 3 CLI – Enter the fo llowing co mman d. Setting the Switch’s IP Address Thi s sec tion desc ribe s how to co nfi gure an in it ial IP int erf ace fo r man agem ent access over th e network. The IP address f or this switch i s obtained via DHCP by default. T o manua lly con figure an ad dress , you need to change t he s[...]

Configuring the Switch 3-16 3 Command Attributes •V L A N – ID of the co nfigur ed VLAN (1-4 094, no le ading ze roes). By def ault, all ports on the switch ar e memb ers of VLAN 1. Howev er, the man agemen t station can be att ach ed to a por t bel ongi ng t o any V LAN, as lo ng as that VLAN has be en assigne d an IP addr ess. • IP Addr ess[...]

Basic Configur ation 3-17 3 Click IP , Gl obal Set ting. If thi s switch and mana gement stations exist on o ther network segment s, then s pecify the defau lt gateway , and click Ap ply . Figure 3-7 Defa ult Gat eway CLI – S pecify the managem ent inte rface, IP addres s and defau lt gatew ay . Console#config Console(config)#interface vlan 1 4-1[...]

Configuring the Switch 3-18 3 Using DHCP/BOOTP If your network pr ovides DHCP/BOOTP services, you can configure the switch to be dyna mic ally co nfi gured by thes e serv ices . We b – Clic k IP , Gener al, Routi ng Interf ace. S pecif y the VLAN to which the mana gemen t st atio n is att ached, se t the I P Addr ess Mode to DHCP or BOOTP . Cli c[...]

Basic Configur ation 3-19 3 We b – If the address as signed by DHCP is no lon ger functioning, you will not be able to rene w the IP set tings via the web inter face. Y ou can only re start DHCP service vi a the we b interface i f the curre nt addre ss is still av ailable. CLI – Enter t he following command t o rest art DHCP service. Managing F[...]

Configuring the Switch 3-20 3 Downloadi ng System Softw are from a Se rver When dow nload ing runti me code, you can spec ify the des tinatio n file nam e to replace th e curren t image, or first dow nload the file us ing a differen t name fro m the current ru ntime co de file, an d then set the new file as the startup file . We b – Clic k System[...]

Basic Configur ation 3-21 3 T o delete a file select System, File, Delete. Select th e file name from the given list by checkin g the tick bo x and cli ck Apply . Note that t he file currently designated as the startup code cannot be deleted. Figure 3-11 Deleti ng File s CLI – T o do wnload ne w firmw are form a TF TP server, enter the IP addres [...]

Configuring the Switch 3-22 3 Saving or Restoring Confi guration Settings Y ou can up load/d ownload co nfigurat ion setting s to/from a TF TP serv er . The configur ation file c an be late r downloa ded to res tore the sw itch’s setting s. Command Attributes • File Trans fer Metho d – The con figuratio n copy oper ation inc ludes th ese opti[...]

Basic Configur ation 3-23 3 Downloadi ng Configuration Se ttings from a Se rver Y ou can dow nload the config uration file un der a new f ile name an d then set it as the startup file, or you can sp ecify the cur rent startup conf igurati on file a s the de stinati on file to direct ly replac e it. Note th at the file “Fac tory_D efault_ Config .[...]

Configuring the Switch 3-24 3 CLI – Enter the IP address of the TFTP s erver , specif y the s ource f ile on th e server, set the startup file name on the swit ch, and t hen restart the sw itch. T o select anot her conf igurati on file as the start -up configu ratio n, use the boot system comma nd and t hen res ta rt th e swit ch. Console Port Se[...]

Basic Configur ation 3-25 3 • Speed – Sets the termi nal line’s baud rate for trans mit (to term inal) and r eceive (from termi nal). Set the speed to match th e baud rat e of the devi ce connect ed to the serial po rt. (Ran ge: 9600, 19 200, 38 400, 5760 0, or 1 1 5200 ba ud, Auto ; Default: Auto ) • Stop Bits – Sets the nu mber of the s[...]

Configuring the Switch 3-26 3 CLI – Enter Line Co nfigur ation mod e for the con sole, then specify the conne ction parameter s as requi red. T o display t he curren t console po rt setti ngs, use the s how line command fr om the Normal Ex ec level. Telnet Set tings Y ou can ac cess the on boar d configur ation prog ram over the netwo rk using T [...]

Basic Configur ation 3-27 3 • Password Threshold – Sets the password in trusion thr eshold, which limi ts the number of failed l ogon at tempts. W hen the logon att empt thr eshold is reach ed, the system interface be com es silent fo r a specif ied amo unt of time (s et by the Silent Time par amete r) b efor e al lowi ng th e nex t l ogon a tt[...]

Configuring the Switch 3-28 3 CLI – Enter Line Co nfigur ation mod e for a virtua l termin al, then spe cify the connection parameters as requir ed. T o display the current virt ual termi nal settings, use the sho w line command from th e Norm al Exec l evel . Configuring Event Logging The sw itch allow s you to cont rol the loggi ng of er ror me[...]

Basic Configur ation 3-29 3 • RAM Level – Lim its log messa ges s aved to the switc h’s te mporary RAM mem ory for all l evels up to the specifi ed level. For example, if level 7 is specified, all messages from l evel 0 to l evel 7 will b e logged to RAM. (Rang e: 0-7, Defaul t: 7) Note: The Flash Level m ust be equal to or less than t he RAM[...]

Configuring the Switch 3-30 3 Remote Log Configuration The Remot e Logs page allows yo u to config ure the logg ing of mess ages t hat are sent to sysl og serve rs or othe r manag ement s tations. Y ou ca n also limit the even t messag es sent to only those m essa ges at or ab ove a speci fied leve l. Command Attributes • Remote Log St atus – E[...]

Basic Configur ation 3-31 3 We b – Click System, Logs, Remote L ogs. T o add an IP address to t he Host IP List, type the new IP addre ss in the Ho st IP Addres s box, and t hen click Ad d. T o delete an IP addr ess, click the entry i n the Host IP List, and the n click Re move . Figu re 3 -17 Rem ote Lo gs CLI – Enter the sy slog ser ver host [...]

Configuring the Switch 3-32 3 Displaying Log Me ssages Use the Log s page to sc roll through the logg ed system an d event messag es. The switch can store up t o 2048 log entries i n tempora ry rando m acces s memo ry (RAM; i.e., memor y flush ed on powe r reset) an d up to 4096 e ntries in p ermane nt flash memory . We b – Clic k System, Log, Lo[...]

Basic Configur ation 3-33 3 Setting the System Clock Simple Network T ime Pro tocol (SNTP) allows the switch to set its int ernal clock based on pe riodic upd ates from a time serv er (SNTP or NTP). Main taining an accurate t ime on the s witch ena bles the system log to recor d meaningf ul date s and times fo r event entr ies. Y ou ca n also m anu[...]

Configuring the Switch 3-34 3 CLI – This examp le configu res the sw itch to oper ate as an SN TP cli ent and then displays the curre nt time an d setting s. Setting the T ime Zone SNT P uses Coor dina ted Unive rsal T im e (or UTC, for merly Gre enwic h Mea n T i me, or GMT) based on the ti me at th e Earth’s prim e merid ian, ze ro degre es l[...]

Simple Network Management Proto col 3-35 3 Simple Network Manage ment Protocol Simp le Ne twor k Manage ment Pr otoc ol ( SNMP) i s a commu nica tion pr otoc ol designe d specif ically for managi ng device s on a netw ork. Equ ipment co mmonly manage d with SN MP includ es switc hes, route rs and ho st comp uters. SNM P is typ ical ly us ed t o con[...]

Configuring the Switch 3-36 3 Note: The predefined default groups and view c an be deleted from the system. Y ou can then d efine custom ized groups and views for t he SNMP cli ents that re quire access. Enabling the SNMP Agen t Enables SNMPv3 service for all management clients (i.e., versions 1, 2c, 3). Command Attributes • SNMP Agent St atus ?[...]

Simple Network Management Proto col 3-37 3 • Access M ode – S pecifies the access rights for the com munity string: - Read-Only – A uth orize d ma nageme nt s tat ions are o nly able to r etr ieve M IB objects. - Read/Write – Authorized m anage ment stat ions ar e able to both retrieve and modify MIB ob jects. Web – Click SNMP , Configura[...]

Configuring the Switch 3-38 3 • Enable Aut hentication Traps – Issu es a trap m essa ge to specif ied IP trap manage rs when ever authen ticatio n of an SNMP request fails. (Defaul t: Enabled ) • Enable Link-up and Link-down Traps – Issues a t rap me ssage whene ver a por t link is estab lished or b roken . (Default: Enabled) We b – Clic [...]

Simple Network Management Proto col 3-39 3 A local engine ID is auto maticall y generat ed that is uniq ue to the sw itch. This i s referred to as the de fault engine ID. If the loca l engine ID is delet ed or chang ed, all SNMP users will be cleared. Y ou will need to reconfigure all existing user s. We b – Click SNMP , SNMPv 3, Engine ID. Ent e[...]

Configuring the Switch 3-40 3 • Privacy – The encrypt ion algorit hm use fo r data privacy ; only 56-bi t DES is currentl y available • Actions – Enable s the user to be assigne d to anoth er SNM Pv3 group . We b – Clic k SNMP , SNM Pv3, U sers. Click N ew to conf igure a user name. In t he New Us er page, define a na me an d assign it to[...]

Simple Network Management Proto col 3-41 3 CLI – Us e th e snmp-ser ver use r com mand t o configur e a new use r name an d assign it to a group. Configuring SNM Pv3 Groups An SNMP v3 group se ts the ac cess policy for its ass igned use rs, restri cting them t o specific read and w rite view s. Y ou can use the pr e-defined default gr oups or cre[...]

Configuring the Switch 3-42 3 We b – Click SNMP , SNMPv 3, Group s. Click New to config ure a new group. In the New G roup page , define a na me, as sign a secur ity mo del and lev el, and t hen s elect read and write v iews. Cl ick Add t o save t he new g roup and retu rn to the G roups list. T o delete a grou p, check t he box n ext to the gr o[...]

Simple Network Management Proto col 3-43 3 Setting SNMPv3 Views SNMPv 3 views ar e used to restrict user acce ss to spe cified por tions of the MIB tree. The prede fined view “defa ultview” includes ac cess to th e entire M IB tree. Command Attributes • View Name – The nam e of the SNMP view. (Ran ge: 1-64 charact ers) • View OID Subt ree[...]

Configuring the Switch 3-44 3 CLI – Us e th e snmp-s erver vi ew comm and to co nfigure a ne w view. This example view incl udes the MIB-2 in terfaces tabl e, and the wildc ard mask select s all ind ex entries. User Authentication Y o u can restr ict management access to this switch using the follo wing options: • User Accou nts – Man ually c[...]

User Authent ication 3-45 3 Command Attributes • Account List – Show s the lis t of users th at are allow ed mana geme nt access . (Default s: admin, and guest ) • New Account – Displ ays configu ratio n settings for a new acc ount. - User Name – The name of the us er. (Maxim um lengt h: 8 charac ters; ma ximum nu mber of users: 16 ) - Ac[...]

Configuring the Switch 3-46 3 Configuring Local/Remote Logon Authentication Use the Authe nticati on Setti ngs m enu to restr ict ma nageme nt acc ess based on specifie d us er nam es and passw ords. Y ou can m anual ly con figure a cces s righ ts on the swit ch, or yo u ca n use a re mote acces s aut henti cat ion serve r ba sed on RADI US or T AC[...]

User Authent ication 3-47 3 • RADIUS Settings - Server IP Address – Ad dress of authent ication serv er. (Default: 10.1 .0.1) - Server Port Numbe r – Networ k (UDP) port of auth entica tion serve r used for authenti cation mess ages. (Range : 1-6 5535; D efaul t: 1812 ) - Secr et T ext Stri ng – Encryption ke y used to au thenti cate logon [...]

Configuring the Switch 3-48 3 CLI – Specify all the required paramete rs to enable logon aut henticat ion. Configuring HTTPS Y ou can co nfigure t he switch to enable th e Secure H ypertext T ransfer Protocol (HTTPS ) over the Secure Soc ket Lay er (SSL) , providing se cure access (i.e., an encrypt ed con nect ion) to the s witch’s w eb int erf[...]

User Authent ication 3-49 3 • The follow ing web browse rs and oper ating syst ems cur rently su pport HTTP S: • To specify a secure-s ite certifi cate, see “Re placin g the Defa ult Secure- site Certificat e” on page 3-49. Command Attributes • HTTPS Status – Allow s you to en able/dis able the HT TPS server feature on the switch. (Defa[...]

Configuring the Switch 3-50 3 When you have obtained these, plac e them on your TFTP server , and use the followi ng comm and at the sw itch's co mmand -line inte rface to replace the default (unreco gnized ) certifica te with an aut horized on e: Note: The switch mus t be reset for the new cer tificate to be activated. T o reset the switch, t[...]

User Authent ication 3-51 3 Otherwi se, you n eed to ma nually create a known h osts file on the manage ment station and place th e host pu blic key i n it. An entr y for a pu blic key i n the know n hosts file wou ld appea r similar to t he followi ng examp le: 10.1.0 .54 1024 35 156 84995401867 6692593339 4677505 46173253136 7489083654 7254 15020[...]

Configuring the Switch 3-52 3 Notes: 1. To use SSH w ith only password authentication, the host public key must st ill be given to the client, either during in itial connection or manually entered into the known host file. However, you do not need to configure the client’s keys. 2. The SSH serve r supports up to four c lient sessions. The maximum[...]

User Authent ication 3-53 3 We b – Clic k Security , Host-Key Set tings. Se lect the ho st-key typ e from the drop-down box, s elect the option to save th e host key f rom memory to flas h (if required ) prior to ge nerating the key , and then c lick Gene rate. Figu re 3 -32 SSH Host- Key Se ttin gs CLI – Th is ex ampl e ge nerat es a hos t-ke [...]

Configuring the Switch 3-54 3 Configuring the SSH Server The SSH se rver inc ludes ba sic setti ngs for au thentica tion. Field Attributes • SSH Server Status – Allo ws you to enab le/disab le the SSH server on the swi tch. (Default: En abled) • Version – The Secu re She ll vers ion number . Ve rsio n 2.0 is d isp laye d, b ut th e switch s[...]

User Authent ication 3-55 3 CLI – This examp le ena bles SSH, sets the authen tication parame ters, and di splays the cur rent conf igura tion. It shows that t he adm inistrato r has made a conn ection via SHH, and then disabl es this con nection. Configuring Port Security Port securit y is a featur e that allow s you to co nfigure a swi tch por [...]

Configuring the Switch 3-56 3 • I f a p ort i s dis abl ed (s hut down) due to a secur ity viol atio n, i t mus t be manua lly re-enab led from the Port/Port Configura tion pag e (page 3- 81). Command Attributes •P o r t – Port num ber. •N a m e – Descri ptiv e text ( page 4 -150) . • Action – I ndica tes the act ion to be take n when[...]

User Authent ication 3-57 3 CLI – This exampl e sets th e command mode to Port 5, set s the port security act ion to send a tra p and disab le the por t, and sp ecifies a ma ximum address count, an d then enab les port se curity for the port. Configuring 802. 1x Port Authenticati on Netw ork switch es can pr ovid e open an d eas y access to netw [...]

Configuring the Switch 3-58 3 The oper atio n of dot1 x on t he s witc h re quir es t he fol low ing: • Th e swi tch m ust ha ve an IP addr ess a ssig ned. • RADIUS au thentica tion mus t be enabl ed on the swi tch and the I P addre ss of the RADIUS server specified. • Each swit ch port tha t will be use d must be set to dot 1x “Auto” mod[...]

User Authent ication 3-59 3 We b – Click 80 2.1x, Inf ormatio n. Figure 3-35 802 .1X Inf ormati on CLI – Th is ex ampl e sh ows th e def aul t pr otoc ol s ettin gs f or d ot1x . For a de scrip ti on of the addi tional entr ies disp layed in the CLI, see “sho w dot1x ” on page 4-85 . Console#show dot1x 4-85 Global 802.1X Parameters reauth-e[...]

Configuring the Switch 3-60 3 Configuring 80 2.1x Glob al Settings The dot1x protoco l includes global paramet ers tha t control the client aut henticat ion process that runs bet ween the client and the swi tch (i.e., aut henticat or), as we ll as the clien t identity look up pro cess that ru ns betw een the swi tch and a uthentic ation server. The[...]

User Authent ication 3-61 3 We b – Select Security , 802.1x, Co nfigurat ion. Enabl e dot1x glob ally for the switch, modify an y of the param eters requi red, an d then click App ly . Figure 3-3 6 802 .1X Co nfigur ation CLI – This enab les re-aut henticat ion and se ts all of the global parameters for dot1x. Configuring Port Au thorization M [...]

Configuring the Switch 3-62 3 • Supplicant – Indica tes the M AC addr ess of a con nected cl ient. • Trunk – Indi cate s if the po rt is co nfig ured as a trun k port . We b – Click Sec urity , 802.1x, Port Confi guration . Select the aut hentica tion mode fro m the dr op-do wn box an d cli ck Appl y . Figure 3 -37 8 02.1X Port C onfigu r[...]

User Authent ication 3-63 3 We b – Select Security , 802.1x, S tatis tics. Select th e required port an d then click Query . Click Refres h to update the st atisti cs. Figure 3 -38 8 02.1X Statist ics Rx EAP R esp/O th The n umber of v alid EA P Res ponse frames (ot her tha n Resp /Id fra mes) that have been receive d by this A uthen ticator. Rx [...]

Configuring the Switch 3-64 3 CLI – This examp le display s the d ot1x statistics for port 4. Filteri ng IP Addresses for Management Access Y ou can sp ecify the cl ient IP add ress es that are al lowed m anage ment ac cess to the switch thro ugh the web interf ace, SNMP , or T elnet. Command Usage • The ma nagem ent int erface s are o pen to a[...]

User Authent ication 3-65 3 We b – Click Se curity , IP Filter . Enter the IP ad dresses or range of address es that are allowe d manage ment acc ess to an int erface , and click Add I P Filtering En try . Figure 3-3 9 IP F ilter CLI – Th is ex ampl e re stri ct s mana geme nt ac cess for T elnet cl ient s. Console(config)#management telnet-cli[...]

Configuring the Switch 3-66 3 Access Control Lists Access C ontrol Lists (AC L) prov ide packe t filtering for IP f rames (based on ad dress, protocol , Layer 4 prot ocol port number o r TCP contr ol code) or an y frames (b ased on MAC addre ss or Ethernet type). To filter i ncoming packe ts, first creat e an a ccess list, add th e required r ules,[...]

Access C ontrol Lis ts 3-67 3 Setting the ACL Name and Ty pe Use the AC L Config uration page to de signat e the nam e and type of an ACL. Command Attributes • Name – Name of the AC L. (Maxim um len gth: 16 char acters ) • Type – There are thre e filtering m odes: - S tanda rd: IP ACL mode tha t filters pa ckets bas ed on the so urce IP add[...]

Configuring the Switch 3-68 3 and comp ared wit h the addre ss for each I P packet ent ering the port(s) to which this ACL ha s been as sign ed. We b – S pecify the action (i .e., Permit or Den y). Select the address type (Any , Host, or IP). If yo u se lect “H ost,” e nter a spe cific ad dress. If y ou sele ct “IP ,” ente r a sub net add[...]

Access C ontrol Lis ts 3-69 3 Configuring an Extended IP ACL Command Attributes • Action – An ACL can con tain eith er all permit rules or all den y rules. (Def ault : Perm it r ule s) • Source/D estination A ddress Ty pe – Spec ifie s the sou rce or des tinat io n IP address . Use “A ny” to incl ude all poss ible add resse s, “Host ?[...]

Configuring the Switch 3-70 3 We b – S pecify the action (i.e. , Permi t or Deny). Specify the sourc e and/or destinat ion addr esses. Se lect the ad dress type ( Any , Host, or IP) . If you selec t “Host,” enter a s pecific address . If y ou s elect “IP ,” ent er a s ubnet addre ss and the mask for an addre ss range. Set any other requir[...]

Access C ontrol Lis ts 3-71 3 Configuring a MAC ACL Command Attributes • Action – An ACL can con tain all pe rmit rules or all deny rules . (Def ault : Perm it r ule s) • Source/D estinati on Address Type – U se “Any” to in clude all possi ble addr esses, “Host” to indicate a sp ecific M AC addre ss, or “MA C” to sp ecify an add[...]

Configuring the Switch 3-72 3 We b – S pecify the action (i.e. , Permi t or Deny). Specify the sourc e and/or destinat ion addr esses. Se lect the ad dress typ e (Any , Host, or MAC ). If you sele ct “Host,” enter a specif ic addres s (e.g. , 1 1-22- 33-44- 55-66 ). If yo u selec t “MAC ,” enter a base addr ess and a hexidec imal bitm ask[...]

Access C ontrol Lis ts 3-73 3 Configuring ACL Masks Y ou mus t specify masks that control th e order in w hich ACL ru les are ch ecked . The swi tch i ncl udes t wo s ystem defa ult masks that p ass/ filt er p ack ets matc hing the permit /deny rule s specifie d in an ingre ss ACL. Y ou can also co nfigur e up to seve n user-de fined m asks for an [...]

Configuring the Switch 3-74 3 Configuring an IP ACL Mask This mask d efines the fields to check in th e IP header. Command Usage • Masks t hat inclu de an entry for a Laye r 4 protocol source po rt or desti nation por t can only be applied to packets with a heade r lengt h of exact ly five bytes . Command Attributes • Source/D estination A ddre[...]

Access C ontrol Lis ts 3-75 3 We b – Con figure the m ask to ma tch the requ ired rule s in the IP ingress or egress ACLs. S et the mask to check f or any sour ce or dest ination a ddress, a specific host address , or an addr ess rang e. Include other crit eria to sea rch for in the r ules, su ch as a protoc ol type or on e of the ser vice t ypes[...]

Configuring the Switch 3-76 3 Configuring a MAC ACL Mask This mask d efines the fields to check in th e packet head er . Command Usage Y ou mus t configure a mask for an ACL rule be fore you can bind it to a po rt. Command Attributes • Source/D estinati on Address Type – U se “Any” to m atch any address, “Host” to specify t he host add [...]

Access C ontrol Lis ts 3-77 3 CLI – This e xample s how s how to cre ate an Ingres s MAC ACL and b ind it t o a por t. You can the n see that the order of the rules ha ve been change d by the ma sk. Binding a Port to an Access Control Lis t After configur ing the A ccess Co ntrol Lists (AC L), you sh ould bin d them to th e ports tha t need to fi[...]

Configuring the Switch 3-78 3 We b – Click Security , ACL, P ort Binding. Mark t he E nable field f or the p ort yo u wan t to bind to an ACL for ing ress or egres s traffic, selec t the requi red ACL fro m the drop-do wn list, then click Appl y . Figure 3 -47 A CL Po rt Bind ing CLI – This examp les assi gns an IP an d MAC in gress ACL t o por[...]

Port Configurati on 3-79 3 • Media Type 6 – Shows the forced /preferr ed port type to use for com binat ion ports 9-12. (Coppe r-Forced, Copper-P referred-Auto, SFP-Forc ed, SFP-Preferred-A uto) • Trunk Me mber 6 – Sh ows if por t is a trunk me mber. • Creation 7 – Shows if a trunk is manu ally configu red or dyna mically set vi a LACP.[...]

Configuring the Switch 3-80 3 • Flow control – Shows if flow control i s enabled or disabled . • LACP – Shows if LACP is enab led or di sabled. • Port Security – Show s if port sec urity is en abled or dis abled. • Max MAC count – Sho ws the m axim um numb er of MA C address t hat can be learned by a port. (0 - 1024 addr esses) • [...]

Port Configurati on 3-81 3 Configuring I nterface Connections Y ou ca n use the Po rt Conf iguration or Trunk Co nfigurat ion page to ena ble/disa ble an interface, set auto-ne gotiati on and the in terface capab ilities to adve rtise, or manually fix the spe ed, duplex m ode, and flow co ntrol. Command Attributes • Name – Allow s you to label [...]

Configuring the Switch 3-82 3 Note: Auto-negotiation must be disabled before yo u can configure or force the interface to use the Speed/Duplex Mode or Flow Control options. We b – Cli ck Po rt, Port Conf igur ati on or T run k Con figur ati on. Modif y th e re quir ed interface settings, and click Apply . Figure 3-4 9 Por t - Por t Confi guratio [...]

Port Configurati on 3-83 3 Creating Tr unk Groups Y ou can cr eate mu ltiple links betwee n device s that wor k as one vir tual, aggr egate link. A por t trunk offers a dram atic inc rease in bandwi dth for networ k segmen ts where b ottle necks e xist, a s w ell as provid ing a fault-to lerant link b etwee n tw o devices . Y ou can creat e up t o [...]

Configuring the Switch 3-84 3 Statically Configuring a Trunk Command Usage • When co nfigur ing stat ic trunk s, you may not be able to link sw itches of differe nt types , dependi ng on the m anufact urer’s implemen tatio n. Howev er, note th at the stat ic trunks on th is switch a re Cisco Et herChann el compatible. • To avoid cr eating a l[...]

Port Configurati on 3-85 3 CLI – This examp le creat es trunk 2 w ith ports 9 and 10. Just conn ect thes e ports to two static trun k ports on ano ther swi tch to form a t runk. Enabling LACP o n Selected Ports Command Usage • To avoid c reating a l oop in the net work, be s ure you enabl e LACP before conn ecting the ports, and also disconne c[...]

Configuring the Switch 3-86 3 We b – Clic k Port, LACP , Configurat ion. Sele ct any of the switch ports fro m the scroll-dow n por t list and c lick Add. After you h ave comple ted ad ding p orts to the member list, click Appl y . Figure 3-5 1 LA CP Trunk Config uratio n CLI – The follo wing exam ple ena bles LA CP for por ts 1 to 6. Just con [...]

Port Configurati on 3-87 3 Configuring LACP Pa rameters Dynami cally Creat ing a Port Chann el – Ports assigne d to a com mon port ch annel must meet the follow ing criter ia: • Ports must have the same LACP Syste m Priority. • Ports must have the same LACP port Admin Key. Command Attributes Set Port Actor – Thi s menu se ts the local si de[...]

Configuring the Switch 3-88 3 Web – Click Port , LACP , Aggr egation Po rt. Set the Sys tem Priority , Admin Key , and Por t Prio rit y for the Por t Acto r . Y ou can op ti onal ly con figur e thes e sett in gs for t he Por t Par tner . (B e aw are that thes e sett in gs onl y af fe ct t he ad mini stra tive st ate of t he partner , and will not[...]

Port Configurati on 3-89 3 Displaying LACP Port Cou nters Y ou can disp lay statist ics for LACP proto col messag es. We b – Click Port, LACP , Port Counters Info rmation. Select a membe r port to disp lay the corres ponding informa tion. Figure 3 -53 L ACP - Port Co unters Informat ion CLI – This funct ion is not su pported by the CLI. T able [...]

Configuring the Switch 3-90 3 Displaying LACP Settings and Status for the Lo cal Side Y ou can disp lay co nfigurat ion setting s and th e operat ional state for th e local sid e of an link aggr egation. T able 3-8 Interna l Confi guration I nforma tion Field Descr iption Oper Key Cu rrent o perational value o f the k ey for the agg regation p ort.[...]

Port Configurati on 3-91 3 Web – Click Port, LACP , Port Inte rnal Informati on. Select a port channel to display the corres ponding informa tion. Figure 3-54 LAC P - Po rt Inter nal Inf ormati on CLI – This funct ion is not su pported by the CLI.[...]

Configuring the Switch 3-92 3 Displaying LACP Settings and Status for the Rem ote Side Y ou can disp lay co nfigurat ion setting s and the op eratio nal state for th e remote si de of an link ag gregatio n. We b – Clic k Port, LACP , Port Neighbo rs Inform ation. Se lect a port cha nnel to display t he corres ponding informa tion. Figure 3- 55 LA[...]

Port Configurati on 3-93 3 Setting Broadcast Storm Thresholds Broadca st storms may oc cur when a de vice on your net work is m alfunction ing, or if applicat ion progra ms are no t well desi gned or pro perly co nfigured . If there is too much br oadca st traffic on your ne twork, p erforma nce can be sever ely degrad ed or everythi ng can co me t[...]

Configuring the Switch 3-94 3 CLI – S pecify an y interface , and then enter th e thresho ld. The foll owing dis ables broadca st storm control fo r port 1, and th en sets broadc ast su ppression at 600 packets per sec ond for po rt 2. Console(config)#interface ethernet 1/1 4-149 Console(config-if)#no switchport broadcas t 4-155 Console(config-if[...]

Port Configurati on 3-95 3 Configuring Port Mirroring Y ou can m irror traffic fro m any sour ce port to a target port for re al-time an alysis . Y ou can the n attach a logic an alyze r or RMON probe to the target port and s tudy the traffic crossi ng the source port in a comp letely u nobtrus ive m anner . Command Usage • Monitor port speed sh [...]

Configuring the Switch 3-96 3 Configuring Rat e Limits This funct ion allows the netwo rk manag er to cont rol the maxi mum r ate for traffic transmi tted or rec eived on an interfa ce. Rate limi ting is co nfigured on interfa ces at the edge o f a networ k to limit tra ffic into or out of the s witch. Traffic that falls within the rate lim it is t[...]

Port Configurati on 3-97 3 Showing Port Statistics Y ou can disp lay standa rd statistics on netw ork traffic from th e Interfac es Grou p and Ethernet- like MIBs, as well as a detailed breakd own of traffic bas ed on the RM ON MIB. Inter faces an d Etherne t-like statisti cs display errors on the traffic passing throug h each port. This infor mati[...]

Configuring the Switch 3-98 3 Transmit Disc arded Pac kets The number o f out bound pack ets w hich were cho sen to be discar ded even though no errors had b een de tected to preven t their b eing t ransmit ted. One poss ible rea son fo r disca rding such a pac ket cou ld be t o free up buffer spa ce. Transmit Erro rs The nu mber of outbou nd pack [...]

Port Configurati on 3-99 3 Received Frame s The total numbe r of fra mes (bad, broadc ast an d multi cast) recei ved. Broadcas t Frame s The total numbe r of go od fram es rec eived t hat were d irected to the broadcas t addre ss. No te that this does not inc lude mu lticast packe ts. Multicast Frames The total number of good frames receive d that [...]

Configuring the Switch 3-100 3 We b – Clic k Port, Port St atistics . Select the re quired inter face, and c lick Quer y . Y o u can also use the Re fresh button at the bot tom of the page to updat e the scre en. Figure 3 -59 P ort Sta tistics[...]

Address T able Settings 3-101 3 CLI – Th is ex ampl e show s st at isti cs f or po rt 12 . Address Table Settings Switche s store the add resse s for all know n devic es. This inf ormatio n is used to pass traffic directly between th e inboun d and outbo und por ts. All the address es learn ed by monito ring traffic are stor ed in the dy namic ad[...]

Configuring the Switch 3-102 3 We b – Clic k Address T ab le, S tatic Addres ses. Specify the inter face, the MAC addr ess and V LAN, t hen clic k Add S t atic Addr ess . Figure 3 -60 S tatic A ddress es CLI – This exam ple add s an addres s to the static add ress table, but sets it to be deleted when t he switch is re set. Displaying the Addre[...]

Address T able Settings 3-103 3 We b – Click Ad dress T able, D ynamic Addres ses. Specify the sea rch type (i.e., mark the Inte rfac e, M AC Add res s, or VLAN chec kbox) , se lect th e meth od of sort ing the displaye d addre sses, an d then click Quer y . Figure 3-6 1 Dy namic Addres ses CLI – This exam ple also dis plays the addre ss table [...]

Configuring the Switch 3-104 3 Changing the Aging Time Y ou can se t the aging t ime for en tries in the dy nam ic addre ss table. Command Attributes • Aging Status – Enab les/disa bles the aging f unction . • Aging Time – The time afte r which a lear ned entr y is discard ed. (Range: 10-1000000 seconds; Default: 300 sec onds) We b – Cli [...]

Spanning Tree Algorithm Configurati on 3-105 3 Once a stable network t opology has bee n establishe d, all bridge s listen for He llo BPDUs (Bri dge Protoco l Data Units) transmit ted from the Root Bridge . If a bridge does not g et a Hello BP DU after a predef ined int erval (Ma ximum Age ), the bridge assumes that t he link to the Root Bridge is [...]

Configuring the Switch 3-106 3 • Hello Time – Interval (in seco nds) at w hich the ro ot devic e transmi ts a configur ation mes sage. • Forward Delay – The maximum t ime (in se conds) t he root devic e will wait before changin g states (i.e., discar ding to lea rning to forwa rding) . This dela y is requir ed because e very de vice mu st r[...]

Spanning Tree Algorithm Configurati on 3-107 3 inf orma tion tha t woul d mak e it ret urn t o a d isca rdin g st ate; othe rwi se, t empor ary data l oo ps m ig ht res ul t. • Root Hold Time – Th e inte rval (in secon ds) d uring w hich n o mor e than two bridge configur ation prot ocol data un its sha ll be trans mitted by th is node. • Max[...]

Configuring the Switch 3-108 3 CLI – This command displays global ST A settings, followed by settings f or each port . Note: The current root por t and current root cost display as zero when this device is not connected to the network. Configuring Globa l Settings Global s ettings ap ply to the en tire swit ch. Command Usage • Spannin g Tree Pr[...]

Spanning Tree Algorithm Configurati on 3-109 3 • Multiple S panni ng T ree Pr otocol - To a llow mul tiple spa nning tree s to oper ate over the netwo rk, you must con figure a related se t of bridge s with the sam e MSTP co nfigur ation, all owing the m to participat e in a spec ific set of sp anning t ree instan ces. - A span ning tree i nstan [...]

Configuring the Switch 3-110 3 • Forward Delay – The maximum time (in s econds) this d evice will wai t before changin g states (i.e., discar ding to lea rning to forwa rding) . This dela y is requir ed because e very de vice mu st receiv e informa tion abo ut topolog y chang es befor e it starts to forward frames. In addition, each port needs [...]

Spanning Tree Algorithm Configurati on 3-111 3 We b – Clic k S panning Tree, ST A, Con figuratio n. Modify th e required attributes , and click Apply . Figure 3-64 STA Configuratio n[...]

Configuring the Switch 3-112 3 CLI – Th is e xampl e en able s S p anni ng T ree Pr otoc ol, set s th e mod e to MST , a nd then configu res the ST A and MSTP parameters. Displaying Int erface Settings The S T A Port Infor mation and ST A Trunk Inform ation pag es dis play the cur rent status of ports and tru nks in th e S panning Tree. Field Att[...]

Spanning Tree Algorithm Configurati on 3-113 3 • Oper Link Type – Th e operat ional point -to-poin t status of th e LAN segm ent atta che d to t his in ter face . Thi s par amete r is deter min ed by m anual conf igur ati on or by auto-de tection, as d escrib ed for Admin L ink Type in ST A Port Co nfigurati on on page 3-11 5. • Oper Edge Por[...]

Configuring the Switch 3-114 3 • Priority – Def ines the pr iority used for t his por t in the S panning Tree A lgorithm . If the path cost for all ports on a sw itch is the sa me, t he po rt with the hig hest pri ority (i.e., lowest value) will be configured as an a ctive link in the Spanning Tree. This makes a po rt with highe r priority les [...]

Spanning Tree Algorithm Configurati on 3-115 3 CLI – This examp le show s the ST A attribut es for port 5. Configuring I nterface Settings Y ou can co nfigure R STP a nd MST P attributes fo r specific i nterface s, including port priority , path cost, link typ e, and edge port. Y ou m ay use a different priorit y or path cost for por ts of the sa[...]

Configuring the Switch 3-116 3 Protoco l is detecti ng networ k loops. Where m ore than one port is as signed t he highest pr iority, th e port with low est nume ric ide ntifier will be en able d. • Default: 128 • Range: 0- 240, in s teps of 16 • Path Cost – Th is parame ter is used by the STP to de termine th e best path between d evices .[...]

Spanning Tree Algorithm Configurati on 3-117 3 We b – Click Sp anning T ree, ST A, Port Configuration or Tr unk Configuration. Modify the required attribut es, then cl ick Apply . Figure 3 -66 S T A Port C onfigu ration CLI – This examp le sets ST A attributes for port 7. Configuring Mult iple Spanning Trees MSTP gene rates a un ique spanning t[...]

Configuring the Switch 3-118 3 T o ensure that the MSTI ma intain s connectivity across the networ k, you mus t configure a relat ed set of bri dges with the sa me MSTI settings. Command Attributes • MST Instan ce – Ins tance ident ifier of th is spannin g tree. (D efault: 0) • Priority – T he p riority o f a spanni ng tr ee ins tance. (Ran[...]

Spanning Tree Algorithm Configurati on 3-119 3 CLI – This displays ST A se ttings f or instance 1, followed by settin gs for each port. CLI – Th is ex ampl e se ts t he pr ior ity for MSTI 1 , an d add s VL ANs 1- 5 to thi s MSTI . Console#show spanning-tree mst 2 4-186 Spanning-tree information -------------------------------------------------[...]

Configuring the Switch 3-120 3 Displaying Int erface Settings for MSTP The MSTP Po rt Informa tion and MS TP T runk I nformat ion pages displa y the curr ent status of por ts and trunks in th e selected M ST ins tance. Field Attributes • MST Instan ce ID – Instance identifie r to configure . (Range: 0-57; Defa ult: 0) The other attributes are d[...]

Spanning Tree Algorithm Configurati on 3-121 3 Configuring I nterface Settings for MSTP Y ou can co nfigure t he ST A int erface set tings for an M ST Instanc e using the M STP Port Confi guration and MST P T runk C onfigura tion pages. Field Attributes The follow ing attribu tes are re ad-only and cannot be change d: • STA State – Disp lays cu[...]

Configuring the Switch 3-122 3 • MST Path Cost – This par ameter i s used b y the MSTP t o determi ne the best pa th between d evices . Theref ore, low er values shoul d be assi gned to ports a ttached to faster m edia, and hi gher values assi gned to por ts with slow er media. (Path co st takes prec edence over port pri ority.) Not e that when[...]

VLAN Configurati on 3-123 3 VLAN Configuration Configuring I EEE 802.1Q VLANs In large netw orks, routers ar e used to is olate broa dcast traffic for each su bnet into separate doma ins. This swi tch provide s a similar servi ce at Layer 2 by using VLANs to organ ize any group of netw ork nodes into separat e broadca st doma ins. VLANs confine br [...]

Configuring the Switch 3-124 3 Note: VLAN-tagged frames c an pass through VLAN-awa re or VLAN-unaw are network interconnection devices, but the VLAN tags should be stripped off before passing it on to any en d-node host that does not support VLAN tagging. VLAN Classification – When the switch re ceives a frame, it clas sifie s the fram e in one o[...]

VLAN Configurati on 3-125 3 these hos ts, and core sw itches i n the netwo rk, enab le GVRP on the link s between these dev ices. Y ou should al so deter mine se curity bou ndarie s in the netwo rk and disable G VRP on th e bound ary ports to prev ent adv ertisemen ts from bein g propagate d, or forbid thos e ports from joining re stricted VLA Ns. [...]

Configuring the Switch 3-126 3 Enabling or Di sabling GVRP (Gl obal Settin g) GARP VLAN Regist ration Proto col (GVRP) def ines a way for switche s to excha nge VLAN infor mat ion i n order to reg ister VLAN member s on por ts acros s the ne twork . VLANs ar e dynamic ally con figured ba sed on j oin messa ges issue d by host device s and pro pagat[...]

VLAN Configurati on 3-127 3 CLI – Enter the fo llowing co mman d. Displaying Current VLANs The VLAN Cu rrent T able show s the curr ent port me mbers of each VLAN an d whether or not the port su pports VLAN taggi ng. Ports assign ed to a large VL AN group th at crosses s evera l switches should use VLAN tagging . Howeve r , if you just want to cr[...]

Configuring the Switch 3-128 3 Command Attributes (CLI) • VLAN – ID of con figured VL AN (1-4094 , no leadin g zeroes). • Type – Show s how this VLAN was ad ded to the sw itch. - Dynamic : Automa tically le arned via GVRP. - Static : Added as a s tatic e ntry. • Name – Name of t he VLAN (1 to 32 characters). • Status – Show s if thi[...]

VLAN Configurati on 3-129 3 We b – Click VL AN, 802.1Q VLAN, St atic List. T o create a ne w VLAN, en ter the VLAN ID and VLAN name, mark the Enable checkbox to activate the VLAN, and then c lic k Add . Figure 3 -73 V LAN St atic Li st - Cre ating VLA Ns CLI – Th is ex ampl e cr eate s a ne w VLAN . Adding Static Members to VLANs (VLAN In dex) [...]

Configuring the Switch 3-130 3 Command Attributes • VLAN – ID of con figured VL AN (1-4094 , no leadin g zeroes). • Name – Name of t he VLAN (1 to 32 characters). • Status – Enabl es or disab les the speci fied VLAN. - Enable : VLAN is oper ationa l. - Disable : VLAN is sus pende d; i.e., doe s not pass pa ckets. • Port – Port i den[...]

VLAN Configurati on 3-131 3 CLI – The followin g exam ple adds tagged and untagged ports to VLAN 2. Adding Static Members to VLANs (Po rt Index) Use the VLAN S tatic Membershi p by Port men u to assign VL AN groups to the selected interface as a tagged membe r . Command Attributes • Inte rfa ce – Port or trunk identi fier. • Member – V LA[...]

Configuring the Switch 3-132 3 Configuring VLAN Be havior for Interfaces Y ou can conf ig ure VLA N beha vior for sp ecif ic in terf aces , in clud ing th e defa ult VL AN identifier ( PVID), acce pted fra me type s, ingress filtering, GVR P status , and GARP time rs . Command Usage • GVRP – GA RP VLA N Registr ation Protoc ol defines a way for[...]

VLAN Configurati on 3-133 3 Leave or Leave All mess age ha s been issued , the ap plican ts can r ejoin bef ore the port actua lly leave s the grou p. (Range : 60-3000 centis econds; Default: 60 ) • GARP LeaveAll Timer 11 – The interval betwe en send ing out a Leav eAll que ry messag e for VLAN gro up participa nts and the port leaving th e gro[...]

Configuring the Switch 3-134 3 CLI – Th is examp le sets p ort 3 to acce pt onl y tagged fr ames, assign s PVI D 3 as the nati ve VL AN ID , e na bles G VR P , sets the GA R P t ime rs, a nd t hen s ets the sw it chp ort mode to hybri d. Configuring Pri vate VLANs Private VLA Ns prov ide port- based secu rity and is olation between por ts within [...]

VLAN Configurati on 3-135 3 Configuring Upli nk and Downl ink Ports Use the P riva te VL AN Li nk S tat us p age to s et po rt s as d ownl ink or up lin k port s. Ports design ated as d ownlin k ports can not com muni cate with a ny ot her ports on t he swi tch ex cept f or th e upli nk por ts . Upli nk po rts can comm unic ate wi th any o ther por[...]

Configuring the Switch 3-136 3 Configuring Protoc ol Groups Create a pr otocol gr oup for on e or more pro tocols. Command Attributes • Protocol Group ID – Group identifier of this protocol group. (Range: 1-2147483647) • Frame Type – Frame type us ed by this prot ocol. (O ptions: Ethe rnet, RFC _1042 , SNAP_80 21h, S NAP_ot her, LLC _other)[...]

VLAN Configurati on 3-137 3 - If the f rame is untagg ed and t he protocol type match es, the fra me is forwa rded to the appro priate VLAN . - If the f rame is untag ged but the protoc ol type do es not mat ch, the fra me is forwarded to the defaul t VLAN for this interface. Command Attributes • Inte rfa ce – Port or trunk identi fier. • Pro[...]

Configuring the Switch 3-138 3 Class of Service Config uration Class of Service (C oS) allows you to sp ecify whic h data packets have greater precede nce when traffic is buffered in the s witch due to conges tion. This switch supports Co S with eig ht priority que ues fo r each por t. Data packets in a port’s high-priorit y queue will be tr ansm[...]

Class of Servi ce Configur ation 3-139 3 We b – Click Priority , Default Port Priori ty or Default T runk Priority . Modify the default priority for any inte rface, then clic k Apply . Figure 3-8 1 De fault P ort Pri ority CLI – Th is ex ampl e assi gns a de faul t pri ori ty o f 5 t o port 3. Console(config)#interface ethernet 1/3 4-149 Consol[...]

Configuring the Switch 3-140 3 Mapping CoS Values to Egress Queues This switc h process es Class of Service (CoS) prior ity tagged traffic by usin g eigh t priority qu eues for each por t, with servi ce sch edules b ased on strict or Weigh ted Round Ro bin (WRR ). Up to ei ght separate tra ffic priorities are de fined in IE EE 802.1p. The defau lt [...]

Class of Servi ce Configur ation 3-141 3 We b – Clic k Priority , T raffic Classes. Ma rk an interfa ce and cl ick Select to display the curren t mapping of CoS value s to outp ut queues . Assign priorities to the traffic classes (i.e., out put queue s) for the se lected interface , then click Ap ply . Figure 3- 82 Traffic Clas ses CLI – Th e f[...]

Configuring the Switch 3-142 3 Selecting th e Queue M ode Y ou can se t the switc h to service the que ues bas ed on a strict ru le that req uires all traffic in a higher pr iority qu eue to be proce ssed b efore lo wer priorit y queue s are serviced, or use Weigh ted Round -Robi n (WRR ) queuin g that speci fies a rela tive weight o f each queu e.[...]

Class of Servi ce Configur ation 3-143 3 We b – Clic k Priority , Queue Sched uling. Sel ect the inte rface, highl ight a traffic clas s (i.e., output queue ), enter a weigh t, then cl ick Apply . Figure 3- 84 Q ueue S chedu ling CLI – The followi ng exam ple show s how to ass ign WR R weig hts to each of the priority qu eues. Console(config)#q[...]

Configuring the Switch 3-144 3 Layer 3/4 Priori ty Settings Mapping Layer 3/4 Pr iorities to CoS Va lues This swi tch suppo rts several c ommon method s of priorit izing laye r 3/4 traffic to m eet applicat ion requirem ents. Traffic priorities can be specifi ed in the IP hea der of a frame, u sing the prior ity bits in the T ype of S ervice (T oS)[...]

Class of Servi ce Configur ation 3-145 3 Mapping IP Preceden ce The T ype of Se rvic e (T oS) octet in the IP v4 head er in clude s thr ee prec edenc e bit s defining eight different priority le vels rangi ng from hi ghest pr iority for ne twork control pac ket s t o lo west pri ori ty fo r ro uti ne tr af fic . Th e def aul t IP Prece denc e val u[...]

Configuring the Switch 3-146 3 CLI – The followi ng exam ple glob ally enables I P Prece dence ser vice on the sw itch, maps IP Prec edence va lue 1 to CoS v alue 0 (on port 1), and t hen disp lays the IP Pre ceden ce set ting s. * Mapping specif ic values for IP P recedence is implemented as an interface conf iguration command, but any changes w[...]

Class of Servi ce Configur ation 3-147 3 We b – Cl ick Pri ori ty , IP DS CP Pr iori ty . Sel ec t an en tr y fr om t he DS CP tab le, ent er a value in th e Class of Serv ice V alue field, then cl ick Apply . Figure 3 -87 I P DSCP Prior ity CLI – The followi ng exam ple glob ally enables DSCP Pr iority serv ice on the switch, maps DSC P valu e[...]

Configuring the Switch 3-148 3 Mapping IP Port Priority Y ou can also map ne twork app licatio ns to Clas s of Service values bas ed on th e IP port numb er (i.e., TCP/UD P port nu mber) in the frame head er . Some of the mor e common TC P service ports include: HTTP: 80, FTP : 21, T e lnet: 23 and PO P3: 1 1 0. Command Attributes • IP P ort P ri[...]

Class of Servi ce Configur ation 3-149 3 CLI – The followin g exam ple global ly enables IP Port Priorit y service on t he switch, maps HTTP traf fic ( on port 1) to CoS value 0, and then displays th e IP Port Priorit y settings . * Mapping specific values for IP P ort Priority is i mplemented as an interfac e configuration command, but any chang[...]

Configuring the Switch 3-150 3 We b – Click Priority , ACL CoS Priority . Select a port , select an ACL rule, specify a CoS priority , then click Add. Figu re 3- 90 ACL C oS Pri orit y CLI – Th is e xampl e assi gns a CoS val ue of z ero to p ack et s matc hing rul es wi thi n the specif ied ACL on po rt 1. Changing Prioriti es Based on ACL Rul[...]

Class of Servi ce Configur ation 3-151 3 Command Attributes • Port – Port i dentifier. • Name 16 – N ame of ACL. • Type – Type of ACL (IP or MAC) . • Preceden ce – IP Pr ecede nce value . (Range: 0- 7) • DSCP – D ifferent iated Se rvices Code Point value . (Ran ge: 0- 63) • 802.1p Pr iority – Class of Service value in the IE[...]

Configuring the Switch 3-152 3 Multicast Filtering Multicast ing is used to s uppor t real- time applicat ions s uch as videoc onfe rencing or streaming audi o. A multic ast server does n ot have to establish a se parate conn ection with each client. It merely broa dcasts it s service to the network , and any ho sts that wan t to receiv e the multi[...]

Mult ica st Fi lte ring 3-153 3 Based on t he group m ember ship info rmation learned from IGM P , a router /switch ca n determi ne which ( if any) mu lticast tr affic needs to be fo rwarded to each of its ports. At Layer 3, mul ticast rout ers use thi s informat ion, alon g with a multica st routin g protocol such as DV MRP or P IM, to suppor t IP[...]

Configuring the Switch 3-154 3 Configuring IG MP Snooping and Query Parame ters Y ou can co nfigure t he switch to forward m ulticas t traffic intellige ntly . Based on the IGMP quer y and repo rt me ssage s, t he swi tch for wards traf fi c on ly t o the por ts t hat request multicast traffic. This pr events the sw itch from br oadca sting the tra[...]

Mult ica st Fi lte ring 3-155 3 We b – Click IGMP Snooping, IGMP Confi guration. Adjust the IGMP settings as required , and then click Apply . (The default settings are show n below .) Figure 3 -92 I GMP C onfigu ration CLI – Th is examp le mo difies t he set tings fo r mult icast fil tering, an d th en disp lays the current status . Console(co[...]

Configuring the Switch 3-156 3 Displaying Interfaces Attac hed to a Mu lticast Router Multicast routers t hat are attach ed to ports on th e switch use inform ation ob tained fro m IGM P , al ong with a mu ltic ast rout ing prot ocol suc h as D VMRP or PI M, to supp ort IP mul tic asti ng a cros s th e Int ern et. T hese rout ers ma y be dyna mical[...]

Mult ica st Fi lte ring 3-157 3 Specifying Static Inter faces for a M ulticast Router Depend ing on you r netw ork conn ection s, IGMP snooping may n ot always be able t o locate the IGMP quer ier . Therefore, if the IGM P querier is a kno wn mult icast route r/ swi tch c onnec ted over t he net wor k to an i nte rfac e (por t or trun k) on your sw[...]

Configuring the Switch 3-158 3 Displaying Port Members o f Multicast Se rvices Y ou can disp lay the po rt memb ers ass ociated with a spe cified VLA N and mu lticast serv ice. Command Attribute • VLAN ID – Sele cts the VLAN for which to di splay port members. • Multicast IP Address – The IP address for a specific multicast servic e. • Mu[...]

Mult ica st Fi lte ring 3-159 3 Assigning Po rts to Mul ticast Service s Multicast filtering ca n be dyna mically co nfigured using IGM P Snoop ing and IGMP Query me ssage s as describ ed in “C onfigur ing IGMP Sn ooping an d Que ry Parame ters” on page 3 -154. For certain appli cations t hat requ ire tighter co ntrol, yo u may n eed to statica[...]

Configuring the Switch 3-160 3 Layer 3 IGMP (Query used wi th Multicas t Routing) IGMP Snoo ping – IGMP Snoo ping is a La yer 2 funct ion (page 3-154 ) that ca n be used to prov ide mul ticast filter ing whe n no other sw itches in the network s uppor t multicast routing. (N ote that IGMP Snoo ping can on ly be glo bally enabl ed.) IGMP Q uery ?[...]

Mult ica st Fi lte ring 3-161 3 • Last Memb er Quer y In ter val – A mul ticast client sen ds an IGMP l eave m essage when it l eave s a group . Th e rout er t hen c hecks to s ee i f thi s wa s th e last hos t i n the grou p by sendi ng an IGMP query and starting a timer bas ed on this comma nd. If no r eport s are r ecei ved bef ore th e time[...]

Configuring the Switch 3-162 3 We b – Click IP , IGMP , Interface Setti ngs. S pecif y each interface that will supp ort IGMP ( Laye r 3), s pecify the IGMP parameter s for each interfa ce, th en c lick App ly . Figure 3 -97 IG MP In terface Settings CLI – This example configures the IGMP p arameters for VLAN 1. Console(config)#interface vlan 1[...]

Mult ica st Fi lte ring 3-163 3 Displaying Multicast G roup Informatio n When I GMP (La yer 3 ) is enab led on this s witch the curren t mul ticast g roups learn ed via IGMP ca n be displ ayed in the I P/IGMP/G roup In format ion page. When IGMP (Layer 3 ) is disabled a nd IGM P (Layer 2) is enabled , you can vi ew the act ive multicast groups in t[...]

Configuring the Switch 3-164 3 Configuring Domain Name Service The Domain Naming System ( DNS) service on thi s switch allows host n ames to be mapped to IP addre sses u sing static table entrie s or by re direction t o other na me server s on the net work. Wh en a clie nt devic e designa tes this sw itch as a D NS server , the client will attempt [...]

Configuring Doma in Name Serv ice 3-165 3 We b – Select DNS, Gener al Config uration. Set the defau lt domai n name or list of domain nam es, spe cify on e or more name serv ers to us e to use for add ress resolution , enab le doma in lookup status , and click Apply . Figure 3 -99 D NS Ge neral C onfigu ration CLI - Th is examp le se ts a de faul[...]

Configuring the Switch 3-166 3 Configuring Sta tic DNS Host to Address Entries Y ou can m anually co nfigur e static entries i n the DNS table that are used to ma p domai n names to IP addres ses. Command Usage • Static entr ies may be used for local devi ces connec ted direct ly to the at tached network , or for com monly used reso urces loc ate[...]

Configuring Doma in Name Serv ice 3-167 3 We b – Select DNS, S tatic Host T able. Enter a host nam e and one or more corres ponding addres ses, t hen click Ap ply . Figu re 3 -100 DN S Stat ic Ho st T able CLI - Th is ex ample map s t wo addr ess to a host name, and the n conf igur es a n al ias host nam e for th e same add resse s. Console(confi[...]

Configuring the Switch 3-168 3 Displaying the DNS Cache Y ou can disp lay en tries in the DN S cac he that have b een lea rned via the designa ted name ser vers. Field Attributes •N o – The entr y number for each res ource rec ord. • Flag – Th e flag is alway s “4” indic ating a cache entry and theref ore unreliab le. • Type – Thi s[...]

Dynamic Ho st Configura tion Protocol 3-169 3 CLI - This exam ple displa ys all the reso urce reco rds lear ned from the desig nated name se rvers. Dynamic Host Configurati on Protocol Dynami c Host Conf igurati on Protocol (DHCP) c an dynam ically alloca te an IP a ddres s and ot her conf igurati on inform ation t o netw ork clie nts when th ey bo[...]

Configuring the Switch 3-170 3 Command Usage Y o u must speci fy the IP address for at l east one DHCP server . Otherwise, t he switch’ s DHCP relay agent wi ll not forwar d client request s to a DHCP server . Command Attributes • VLAN ID – ID of confi gured VLAN . • VLAN Name – Name of th e VLAN . • Server IP Address – Ad dresses of [...]

Dynamic Ho st Configura tion Protocol 3-171 3 Configuring the DHCP Server This switch includes a Dynamic Host Configuration Protocol ( DHCP) server that can assign temp orary IP addr esse s to a ny a ttached host r eques ting ser vice. It can als o provide ot her netwo rk sett ings such as the dom ain name, defaul t gateway , Domain Name Servers (D[...]

Configuring the Switch 3-172 3 We b – Click DHCP , Server , General. Enter a single address or an addr ess range, and click Ad d. Figure 3-1 03 DH CP Se rver G eneral Co nfigur ation CLI – This examp le ena bles the DH CP and sets a n exclude d address range. Console(config)#service dhcp 4-130 Console(config)#ip dhcp excluded-address 10.1.0.250[...]

Dynamic Ho st Configura tion Protocol 3-173 3 Configuring Addre ss Pools Y ou mus t configure I P address pools for each IP inte rface that will provid e address es to attached clients via the DH CP serve r . Command Usage • First conf igure addr ess po ols for the network int erface s. Then you can ma nually bind an ad dress to a specific clien [...]

Configuring the Switch 3-174 3 • Client-Identifier – A unique desi gnation f or the client device, ei ther a text string (1-15 ch aracters) or hex adecimal value. Setting the Optional Parameter s • Default R outer – The IP ad dress of t he p rimary and al ternate gat eway router. The IP addres s of the ro uter sho uld be on the sa me sub ne[...]

Dynamic Ho st Configura tion Protocol 3-175 3 Configurin g a Networ k Address Pool We b – Click DHCP , Server , Pool Configu ration. Click the Configure button for a ny entry . Click the rad io button f or “Net work.” Enter the I P addr ess and sub net ma sk for the netwo rk pool. Con figure the option al paramete rs such as ga teway server a[...]

Configuring the Switch 3-176 3 Configurin g a Host Ad dress Pool We b – Click DHCP , Server , Pool Configu ration. Click the Configure button for a ny entry . Click the r adio button for “Host.” En ter the IP address, subnet mask, and hardwar e addre ss for the cli ent devi ce. Config ure the op tional parame ters suc h as gateway server and [...]

Dynamic Ho st Configura tion Protocol 3-177 3 Displaying Addres s Bindings Y ou can disp lay the ho st dev ices which h ave acq uired an I P address from thi s switch’ s DHCP server . Command Attributes • IP A d dre ss – IP addres s assigne d to host . • Mac Add res s – MAC addr ess of host. • Leas e time – Duration that t his IP add [...]

Configuring the Switch 3-178 3 Configuring Router Redund ancy Router r edundanc y protoc ols use a vi rtual IP ad dress to support a primary r outer and multipl e backu p routers. The backup rou ters can be co nfigured to take over the work load if the m aster rout er f ails , or can also b e co nfig ured to sha re t he tr af fi c load . The prima [...]

Configuring Rout er Redundan cy 3-179 3 • Se vera l vir tual master rout ers conf ig ured f or mutua l back up and l oad sha ring . Load sharin g can be a ccom plished b y assi gning a s ubset of addres ses to di fferent host address pools using the DHCP server. (See “Configuring Ad dress Pools” on page 3-17 3.) Virtual Router Redundancy Prot[...]

Configuring the Switch 3-180 3 • VRRP creates a virtual MAC address for the mas ter rou ter based on a standa rd prefix, wit h the last oc tet equal to t he group I D. When a ba ckup ro uter takes over as the maste r, it c ontinues to for ward traffic a ddre ssed to this virtual M AC address . Howeve r, the bac kup rout er cannot reply to IC MP p[...]

Configuring Rout er Redundan cy 3-181 3 Command Attributes ( VRRP Group Configuration Detail ) • Associat ed IP Table – IP interfac es asso ciated wit h this virtu al router g roup. • Associat ed I P – IP addre ss of the v irtual rout er, or secon dary IP address es assigne d to the curr ent VLAN inter face th at are suppor ted by this VRR [...]

Configuring the Switch 3-182 3 We b – Clic k IP , VRRP , Gr oup Configu ration. Se lect the VLA N ID, enter the VR ID group num ber , and click Add. Figure 3-108 VR RP Gr oup Co nfigur ation[...]

Configuring Rout er Redundan cy 3-183 3 Click the Ed it button for a gr oup entr y to open the de tailed config uration w indow. Enter the IP address o f a real interfa ce on th is router to m ake it the mas ter virt ual router fo r the group. Otherw ise, enter th e virtual address f or an exist ing group to make it a b ackup router . Click Add IP [...]

Configuring the Switch 3-184 3 CLI – This example creates VR RP group 1, set s this switch as t he master virtual router by assigning the primary i nterface address for the selected VLAN to the virtual IP address. It then adds a secondary IP address to t he VRRP group, sets all of the other VRRP p arameters, and then displays the configured setti[...]

Configuring Rout er Redundan cy 3-185 3 CLI – This example displays count ers for protocol er rors for al l the VRRP groups configured on this switch. Displaying VRRP Group Statisti cs The VRRP Group S tatistics page display s counte rs for VRR P protoc ol events and errors t hat h ave o ccurred on a spec ific VRR P in terface. Field Attributes ?[...]

Configuring the Switch 3-186 3 We b – Clic k IP , VRRP , Gr oup S tatistics. Sele ct the VLAN and virtual rout er group . Figure 3-11 1 VRRP Gro up Statist ics CLI – This example displays VRRP protocol statistics for gr oup 1, VLAN 1. Hot Standby Router Protocol Hot St andby Ro uter Proto col (HSRP ) allows you to con figure a gr oup of ro uter[...]

Configuring Rout er Redundan cy 3-187 3 Command Usage Addr ess A ssig nment – • The des ignated vi rtual IP a ddress m ust be co nfigured o n at leas t one router in the virtual rou ter grou p. If an IP add ress is n ot specified , the desi gnated address i s learned th rough th e excha nge of HS RP mes sages. Not e that the de signat ed addres[...]

Configuring the Switch 3-188 3 stops se nding hel lo messag es or se nds other messag es indic ating that it is no longer act ing as the des igna ted router . • You can add a delay to the preem pt functi on to give add itional time to rece ive an advert isement messa ge from the c urrent m aster before takin g contr ol. If th e rout er attempt in[...]

Configuring Rout er Redundan cy 3-189 3 • Authen tication S tring – Key us ed t o aut henti cat e HSR P pack ets recei ved f rom other rout ers. (Ra nge: 1-8 alphanume ric char acters ) - All rou ters in the same HSR P group must be co nfigur ed with the s ame authenti cation st ring. Whe n a HSRP packet is received fr om anothe r router in the[...]

Configuring the Switch 3-190 3 We b – Clic k IP , HSRP , Group Confi guration . Select the VLA N ID, en ter the HSR P group num ber , and click Add. Figure 3 -1 12 H SRP G roup Con figura tion[...]

Configuring Rout er Redundan cy 3-191 3 Click the E dit butto n for a group entry to op en the detailed con figuratio n window. Set the values fo r the advertis emen t interval, pree mption, priority , and authentic ation as required . Enter the virtual IP addre ss for the group . Y ou ca n also en ter seco ndary I P addresses that will be support [...]

Configuring the Switch 3-192 3 CLI – This example creates H SRP group 1, set s the virtual router’s address, adds a secondary IP address to the group, specifies an interface for tracking, set s all the other HSRP parameters, and then d isplays the configured settings. Console(config)#interface vlan 1 4-191 Console(config-if)#standby 1 ip 192.16[...]

IP Routing 3-193 3 IP Routing Overview This switc h suppo rts IP routing an d routing path managem ent vi a static routing definitio ns (page 3-21 1) and dyna mic rout ing such as RIP (page 3-21 3) or OSP F (page 3-223 ). When IP r outing is en abled (page 3-214), th is switch ac ts as a wire-spee d router, passing t raffic between VL ANs using d i[...]

Configuring the Switch 3-194 3 IP Swit chin g IP Switchi ng (or pac ket forw arding ) encom passes tasks required t o forwa rd packe ts for both Lay er 2 and Lay er 3, as w ell as traditi onal routing . Thes e function s include: • Lay er 2 for wardi ng ( swit chi ng) b ased on th e Laye r 2 dest inat ion MAC ad dres s • Lay er 3 for war ding ([...]

IP Routing 3-195 3 the high throug hput and lo w laten cy of s witching by e nablin g the t raffic to b ypass the routing en gine once the path calcu lation has been per formed. Rout ing Pa th Mana gem ent Routing Path Mana geme nt invo lves the d eterm ination a nd updat ing of all t he routing inform ation requ ired for packe t forwarding , inclu[...]

Configuring the Switch 3-196 3 Basic IP Interf ace Configuration T o allow routing betw een di fferent IP subne ts, you must enab le IP Routi ng as described in this sect ion. Y ou a lso need t o you defi ne a VLAN f or each IP subnet that will b e connected dir ectly to this switch. Note that you must first create a VLAN as describ ed unde r “Cr[...]

IP Routing 3-197 3 Configuring I P Routing Interfaces Y ou can sp ecify the I P subne ts connecte d to this ro uter by man ually as signing an IP address to e ach V LAN, or b y usi ng t he RIP or OSPF d ynam ic ro uti ng pr otoc ol t o identify ro utes that lead to other interfac es by excha nging pr otocol message s with other rout ers on th e net[...]

Configuring the Switch 3-198 3 We b - Click IP , General, Routin g Interface. S pecify an IP in terface for e ach VLAN that will sup port rou ting to other subne ts. First specify a primary address, and click Set IP Conf iguration . If you ne ed to assign second ary addre sses, en ter thes e address es one at a t ime, and cli ck Set IP Con figurat [...]

IP Routing 3-199 3 Address Resolut ion Protocol If IP routin g is enabled (page 3-196) , the route r uses its routi ng tables to make routing de cision s, and use s Address R esolu tion Pro tocol (AR P) to forw ard traffic from one hop to the n ext. ARP is used to ma p an IP a ddres s to a p hysical l ayer (i. e., MAC) add ress. W hen an I P frame [...]

Configuring the Switch 3-200 3 Basic ARP Config uration Y ou can us e the ARP Ge neral co nfiguratio n menu to spe cify the tim eout fo r ARP cac he en tri es, or to enab le P roxy ARP f or sp ecif ic VLAN inte rfac es. Command Usage • The aging time dete rmines ho w long dy namic entries re main the ca che. If the timeout i s too sho rt, the rou[...]

IP Routing 3-201 3 Configuring Stat ic ARP Address es For devices that do not re spond to ARP requests, tr affic will be dropped because the IP addres s cann ot be map ped to a phys ical ad dress. If thi s occurs , you can manuall y map an IP address t o the corr espondi ng phy sical addr ess in the A RP . Command Usage • You can def ine up to 12[...]

Configuring the Switch 3-202 3 Displaying Dyna mically Learned ARP Entries The ARP c ache cont ai ns ent rie s th at ma p IP a ddre sses t o t he co rres pondi ng physica l address. Mo st of these entries will be dynamically lea rned through re plies to broadcast messa ges. Y ou can display all of the dynam ic ent ries in the AR P cache , change sp[...]

IP Routing 3-203 3 CLI - This exampl e shows all ent ries in the ARP c ache. Displaying Local ARP Entries The A RP cac he al so cont ai ns en tri es for loca l int erfa ces, incl udin g subne t, host, and broadca st a ddresse s. Command Attributes • IP A d dre ss – IP addres s of a loca l entry in the ca che. • MAC Address – MAC ad dress m [...]

Configuring the Switch 3-204 3 CLI - This router uses the T ype sp ecificati on “other” to indicate loc al cache entries in the ARP cach e. Displaying ARP Statistics Y ou can disp lay statisti cs for ARP mes sages crossin g all interface s on this router . We b - Click IP , ARP , S t atistics. Figure 3- 120 A RP Sta tistics Console#show arp 4-2[...]

IP Routing 3-205 3 CLI - This exampl e provid es detailed statist ics on comm on IP -related protoco ls. Displaying Stat istics for IP Protocols IP Statistics The Intern et Protocol (IP) provid es a mecha nism f or transm itting blocks of data (often cal led pack ets or fr ames) from a sour ce to a d estinat ion, w here t hese networ k devices (i.e[...]

Configuring the Switch 3-206 3 Datagram s Forw arded The number of inpu t datag rams for w hich th is entit y was n ot their fin al IP destinatio n, as a result of whic h an attem pt wa s made to find a route to forwar d them to that fin al dest ination . Reassem bly Req uired Th e numbe r of IP fragm ents receive d which n eeded to be reasse mbled[...]

IP Routing 3-207 3 We b - Click IP , S ta tistics, IP . Figure 3-1 21 IP Statis tics CLI - See the exam ple on page 3-204 . ICMP Statistic s Internet C ontrol M essage Pro tocol (IC MP) is a netw ork laye r protocol that transm its mess age p ack et s to repor t e rrors in proces sing IP pac ket s. I CMP i s th eref ore an integral par t of the Int[...]

Configuring the Switch 3-208 3 We b - Click IP , S ta tistics, I CMP . Figure 3 -122 ICMP S tatisti cs CLI - See the exam ple on page 3-204 . Timestamps Th e number of ICMP Timestam p (requ est) m essage s received /sent. Timestamp Re plies The number of ICM P Timestam p Rep ly mes sages rece ived/s ent. Address M asks The n umber of ICMP Addr ess [...]

IP Routing 3-209 3 UDP Statistics User Datagr am Protoco l (UDP) provides a da tagram mod e of packet- switche d commu nic ation s. I t us es IP as t he un derl ying tran spor t me chani sm, prov idin g access to I P-like services. UDP packets are delivered ju st like IP p ackets – connect ion-less datagram s that may b e discard ed bef ore reac [...]

Configuring the Switch 3-210 3 TCP Statistics The Transmission C ontrol Pro tocol (TCP ) provide s highly re liable hos t-to-ho st connect ions i n packet -switch ed net work s, and is us ed in conj unction with IP t o support a wide varie ty of Inter net protoc ols. We b - Click IP , S tatis tics, TCP . Figure 3- 124 T CP Sta tistics CLI - See the[...]

IP Routing 3-211 3 Configuring Sta tic Routes Thi s rout er can d ynami call y co nfig ure rout es to other net wor k segme nt s usi ng dynamic r outing pro tocols (i.e ., RIP or OS PF). Howev er , you can also manual ly enter static ro utes in the routing table. S tatic routes may be require d to acces s network segme nts whe re dyn amic routing i[...]

Configuring the Switch 3-212 3 Displaying the Rout ing Table Y ou can d isplay all the rou tes tha t can b e access ed vi a the local networ k interf aces, via static routes , or via a dyna mical ly learne d route. If ro ute informa tion is ava ilable throug h more than one of thes e metho ds, the pri ority for rou te select ion is local, static, a[...]

IP Routing 3-213 3 CLI - This exampl e shows r outes obtain ed from var ious me thods. Configuring t he Routing Information Protocol The RIP pro tocol is the m ost wide ly used rout ing protoc ol. The RIP pr otocol use s a distance-v ector-bas ed appr oach to r outing. Rou tes are de termine d on the bas is of minimiz ing the dis tance vecto r , or[...]

Configuring the Switch 3-214 3 routing loops may occu r , and its small h op cou nt limitation of 15 restric ts its use to smaller net work s. Moreov er , RIP (version 1) wast es valuab le netwo rk bandw idth by pro pagating routing inform ation via b roadcas ts; it a lso co nsider s too few network variables to make t he best ro uting deci sion. C[...]

IP Routing 3-215 3 We b - C lick Ro uting Protoc ol, RIP , Ge neral Se ttings. Enab le or disabl e RIP , set th e RIP version used on previousl y unset inte rfaces to RI Pv1 or RIPv 2, set the ba sic update time r, and th en click App ly. Figure 3 -127 RIP G eneral Settings CLI - Th is ex ample se ts the r outer to use R IP V ersio n 2, and s ets t[...]

Configuring the Switch 3-216 3 Specifying Network I nterfaces for R IP Y ou must speci fy netwo rk in terf aces tha t wi ll be inc lude d in the RIP ro utin g pr ocess . Command Usage • RIP only s ends up dates to interfaces sp ecifi ed by this com mand. • Subne t addresse s are int erprete d as clas s A, B or C, base d on the fi rst field in t[...]

IP Routing 3-217 3 Configuring Netw ork Interfaces for RIP For each inte rface that participates in the RIP routing pro cess, you must spec ify the protocol messag e type ac cepted ( i.e., RI P version ) and the messag e type s ent (i.e. , RIP v ers ion o r com pat ibi lit y mode) , t he me thod f or p reve ntin g lo opbac k of prot ocol messag es,[...]

Configuring the Switch 3-218 3 Protocol Messa ge A uthentic ation RIPv1 is n ot a secure pr otocol . Any device se nding pr otocol message s from UDP por t 520 will be cons ider ed a rout er by its n eigh bors. Mali cio us or unw ant ed prot ocol messag es can be easily pro pagated througho ut the ne twork if no au thentica tion is required . RIPv2[...]

IP Routing 3-219 3 • Authen tication K ey – Specifies the key to use for authe nticati ng RIPv2 packe ts. For auth entication to functio n proper ly, both the se nding and receiving interfac e must use t he same pa ssw ord. (Ran ge: 1-16 character s, case sen sitive) We b - C lick Ro uting Protoc ol, RIP , Inter face Sett ings. Sele ct the RIP [...]

Configuring the Switch 3-220 3 Displaying RIP Information a nd Statistics Y ou can disp lay ba sic infor mation ab out the cu rrent glo bal conf iguration se tting s for RIP , sta tistics a bout r oute c hange s an d que ries, in format ion a bout t he inter faces on thi s rout er th at are us ing R IP , and in forma tio n about kn own RI P peer de[...]

IP Routing 3-221 3 We b - C lick Ro uting Prot ocol, RIP , S tatistics. Figure 3 -130 R IP Sta tistics[...]

Configuring the Switch 3-222 3 CLI - The informa tion displa yed by the R IP S tatistics scr een via the w eb interfa ce can be acce ssed from the C LI u sing the fo llowing comma nds. Console #show rip glob als 4-257 RIP Pro cess: Ena bled Update Ti me in Seco nds: 30 Number of Route Cha nge: 4 Number of Querie s: 0 Console #show ip rip c onfig ur[...]

IP Routing 3-223 3 Configuring t he Open Shortest Path First Protocol Open Sho rtest Path Firs t (OSPF) is more suited for la rge area ne tworks wh ich experienc e freque nt cha nges in the l inks. It also handles subnets muc h better th an RIP . OS PF protoc ol active ly tests the status of each l ink to its neigh bors to generat e a short est pat[...]

Configuring the Switch 3-224 3 • OSPFv2 is a co mpatible u pgrade to O SPF . It involves enh anceme nts to protocol messag e authent ication , and the addi tion of a poin t-to-m ultipoint interfac e which allows OSPF to run ove r non-br oadca st networ ks, as well as suppo rt for overlappi ng area r anges . • When using OSPF , you mus t organiz[...]

IP Routing 3-225 3 • AS Boundary Router 20 – Allo ws this router to exchang e routi ng inform ation wit h bounda ry ro uters in other auto nomo us system s to which it may be attached. I f a router is enab led as an ASBR, the n eve ry ot her rout er in the autonom ous s yste m can learn about exte rnal rou tes from thi s device . (Defau lt: Dis[...]

Configuring the Switch 3-226 3 We b - C lick Ro uting Protoc ol, OSP F , Gene ral Conf iguration. Enable OSPF , spec ify the Route r ID, configu re the ot her globa l parameters a s required, and click Ap ply . Figure 3 -131 OSPF Gener al Con figurat ion CLI - Th is ex ample co nfigu res the r out er wit h t he same se tting s as show n in the scre[...]

IP Routing 3-227 3 Configuring O SPF Areas An autono mous sys tem m ust be conf igured w ith a backbo ne area , design ated by area ident ifier 0.0. 0.0. By def ault, all o ther areas are creat ed as nor mal tran sit areas. Rout ers i n a norma l area may impor t or ex port routi ng in forma tion ab out indi vidual nodes. T o reduc e the amo unt of[...]

Configuring the Switch 3-228 3 • Routes t hat can be ad vertised with NSS A externa l LSAs inclu de networ k destinat ions outside the AS learne d via OSPF , the default route, stat ic routes, routes der ived from other ro uting protoc ols su ch as RIP, o r directly co nnected network s that are not ru nning OSPF . • Al so, note that unli ke s [...]

IP Routing 3-229 3 We b - C lick Ro uting Protoc ol, OSP F , A rea Configu ratio n. Set any are a to a stub or NSSA as required, specify the cos t for the defa ult summary ro ute sent into a stub, and click Ap ply . Figur e 3- 132 OSP F Area Confi gur atio n CLI - This exampl e config ures area 0.0.0.1 as a normal are a, area 0.0. 0.2 as a st ub, a[...]

Configuring the Switch 3-230 3 Configuring Area Ranges (Ro ute Summariz ation for ABRs ) An OSPF area can inc lude a large numb er of node s. If the Area B order Router (ABR) has t o advert ise route inform ation f or each of these node s, th is wastes a l ot of bandw idth and proce ssor tim e. Instead, you c an c onfigu re an ABR to adver tise a s[...]

IP Routing 3-231 3 We b - C lick Ro uting Protoc ol, OSP F , A rea Range C onfigur ation. Specify the area identifie r , the base address and ne twork mask, select w hether or not to adver tise the summ ary route to other areas , and then click Apply . Figure 3-133 OS PF Ra nge C onfigur ation CLI - This exampl e sum mariz es al l the rout es for a[...]

Configuring the Switch 3-232 3 Configuring O SPF Interfaces Y ou should speci fy a routing in terface f or any local subnet that needs to comm unicate w ith othe r networ k segme nts locat ed on this router or elsew here in the network. First configure a VLAN fo r each subnet that will be directl y connected to this rou ter , assign IP interfa ces [...]

IP Routing 3-233 3 - On sl ow link s, the rout er may sen d pack ets more qui ckly than device s can receive t hem. To avoid thi s probl em, yo u can use t he tran smit dela y to for ce the router to wait a spec ified interva l between transm issio ns. • Retransmit Inter val – Sets the time betwe en re sending link-stat e adver tisemen ts. (Ran[...]

Configuring the Switch 3-234 3 - You can assig n a unique pa sswor d to each ne twork (i. e., autono mous system) to impro ve the secu rity of the ro uting da tabase. H owever , the passw ord mu st be used cons istentl y on all neig hboring routers th roughou t a networ k. • Messag e Diges t Key-id – As signs a ke y-id use d in conju nction wit[...]

IP Routing 3-235 3 Chan ge any of the in terf ace- spec ifi c prot ocol param ete rs, an d then cl ick Ap ply . Figure 3-135 OS PF In terface Config uratio n - Det ailed CLI - Th is ex ampl e co nfi gures the int erfa ce p ara meter s f or VL AN 1. Console(config)#interface vlan 1 Console(config-if)#ip ospf priority 5 4-276 Console(config-if)#ip os[...]

Configuring the Switch 3-236 3 Configuring Virtua l Links All OSPF areas mus t connect to th e backbone . If an area does not h ave a direct phy sical c onnection to the backbone , you c an configur e a vir tual link t hat pr ovid es a log ical path to the back bone. T o conn ect an isolated area to the ba ckbon e, the logical path ca n cross a sin[...]

IP Routing 3-237 3 We b - Click R outing Pr otocol , OSPF , Virtual Link Co nfigurati on. T o create a ne w virtual l ink, spec ify th e Area I D and Neigh bor Rout er ID, configur e the l ink at tributes, and click Ad d. T o modify the settings for an existin g link, clic k the Detail button f or the requi red entry , modify the link settings, a n[...]

Configuring the Switch 3-238 3 Configuring Netw ork Area Address es OSPF pro tocol broadca st mess ages (i.e. , Link St ate Adver tisemen ts or LSAs) are restricte d by area to limit their impact on netw ork perfor mance. A large netwo rk should be split up into separate OSPF areas to increase network stab ility , and to reduce pr otocol traffic by[...]

IP Routing 3-239 3 We b - C lick Ro uting Protoc ol, OSP F , Net work Area Ad dress C onfigura tion. Conf igur e a b ackbo ne area t hat i s co nti guous wit h al l the oth er a reas i n you r network , configure a n area for all of the othe r OSPF interfac es, then click Appl y . Figure 3- 137 O SPF N etwor k Area Ad dress Config uration[...]

Configuring the Switch 3-240 3 CLI - This exampl e config ures the back bone ar ea and one trans it area. Console(config-router)#network 10.0.0.0 2 55.0.0.0 area 0.0.0.0 4-267 Console(config-router)#network 10.1.1.0 2 55.255.255.0 area 0.0.0.1 Console(config-router)#end Console#show ip ospf 4-278 Routing Process with ID 10.1.1.253 Supports only sin[...]

IP Routing 3-241 3 Configuring Sum mary Addresse s (for Extern al AS Routes) An Autono mous Syst em Boun dary Ro uter (ASBR ) can redist ribute rout es learned from oth er protocol s into all at tached autono mous system s. (See “ Redis tributing External Routes” on page 3-242) T o reduc e the amo unt of externa l LSAs im ported into your loc a[...]

Configuring the Switch 3-242 3 CLI - Th is ex ample Thi s exa mpl e crea tes a su mmary addr ess f or al l r oute s contained in 192.168. x.x. Redistributing External Routes Y ou can co nfigure t his router to import ext ernal routing in formation from othe r routing pr otocols i nto the auto nomous system . Command Usage • This route r supports [...]

IP Routing 3-243 3 We b - Click R outing Pr otocol , OSPF , Redistr ibute. Specify the protoco l type to import, the m etric ty pe and path cos t, then clic k Add. Figure 3-1 39 O SPF Re distrib ute Confi guratio n CLI - This exampl e redistrib utes route s learned from RIP as Type 1 external rout es. Configuring NSSA Se ttings Use the OSPF / NSSA [...]

Configuring the Switch 3-244 3 Note: This router supports up 16 areas , either normal transit areas, stubs, or NSSAs. We b - Click Routing P rotocol, OSPF , NSSA Settings. Create a new N SSA or modify the routing b ehavi or for an exist ing NSS A, and click Apply . Figure 3 -140 OSPF NSSA Settin gs CLI - This exampl e configur es area 0. 0.0.1 as a[...]

IP Routing 3-245 3 Displaying Link State Data base Informati on OSPF route rs advertise routes using Li nk S tate Advertisem ents (LSAs). Th e full col lect ion of LS As c ollec ted by a r out er in terf ace f rom the at t ached are a is k nown as a link st ate dat abase. Routers that are connected to multiple in terfaces will h ave a separate da t[...]

Configuring the Switch 3-246 3 We b - Click R outing Pr otocol , OSPF , Link St ate Database Informa tion. Specify parameter s for the LSAs y ou want to dis play , then click Query . Figure 3 -141 OSPF Link S tate Datab ase In format ion CLI - The CLI provide s a wide r selecti on of disp lay optio ns for viewi ng the Li nk S tate Database. See “[...]

IP Routing 3-247 3 Displaying Inform ation on Border Routers Y ou can display e ntries i n the local routing table for A rea Bord er Route rs (ABR) and Autonomo us System Bound ary Route rs (ASBR) k nown by thi s device . Field Attributes • Dest inat ion – Identifier for t he destinat ion rou ter. • Next Hop – IP addres s of the nex t hop t[...]

Configuring the Switch 3-248 3 Displaying Inform ation on Neighbor Routers Y ou can disp lay ab out neig hboring ro uters on e ach inte rface wi thin an OSP F area. Field Attributes • ID – Ne ighbor’s rout er ID. • Priority – N eighbor ’s ro uter p riority. • State – OSPF state and identif ication flag. States inc lude: - Down – C[...]

Multic ast Rou ting 3-249 3 Multicast Routing This route r can route m ulticas t traffic to different su bnetwork s using ei ther Distan ce V ector Multica st Routing Pr otocol (DV MRP) or Protocol -Indep endent Mul ticasting - Dense Mo de (PIM -DM). These protoc ols flood m ulticas t traffic downst ream, an d calculat e the shor test-path, so urce[...]

Configuring the Switch 3-250 3 Displaying the Mult icast Routing Table Y ou can disp lay inf ormatio n on eac h multicast route thi s router has learned via DVMRP or PIM. The r outer lear ns multicas t routes from neighb oring rout ers, and also adv ertises thes e routes to its neighbo rs. The rout er stores en tries for al l paths learned by itsel[...]

Multic ast Rou ting 3-251 3 We b – Click IP , Multicast Routi ng, Multicast Rout ing T able. Click Det ail to display addition al informa tion for an y entry . Figure 3-145 Mu lticas t Routi ng T able[...]

Configuring the Switch 3-252 3 CLI – This examp le show s that mul ticast forw arding is en abled. The multi cast routing table displays on e entry fo r a multicas t source routed by DVMRP , and another sou rce rout ed via PIM . Console#show ip mroute 4-293 IP Multicast Forwarding is enabled. IP Multicast Routing Table Flags: P - Prune, F - Forwa[...]

Multic ast Rou ting 3-253 3 Configuring DVMRP The Distance- V ector Multicas t Routing Pr otocol (DVM RP) be haves som ewha t similarly to RIP . A rout er supp orting D VMR P periodi cally floo ds its attached net works to pass inform ation ab out suppo rted mu lticast ser vices alon g to new routers and hosts. Router s that rece ive a DVM RP packe[...]

Configuring the Switch 3-254 3 Command Usage Broadca sting pe riodically flo ods the net work wit h traf fic from a ny active mul ticast serv er . If I GMP snoopin g is disabl ed, mult icast traffic is floo ded to all ports on the router. How ever , if IGM P snoopi ng is enabled , then the f irst packet for any source group pair is flooded to all D[...]

Multic ast Rou ting 3-255 3 which th is device ha s receiv ed probes , and is use d to verify whether or not these neighbo rs are s till active membe rs of the m ultica st tree. (Range : 1-655 35 second s; Default: 10 se conds ) • Neighbor T imeout Interva l – Sets the i nterval to wait for messages fr om a DVMRP neighbor before de claring i t [...]

Configuring the Switch 3-256 3 We b – Click Routing Pr otocol, DVMRP , General Sett ings. Enable or disable DVMRP . Set the glob al paramete rs that contr ol neigh bor timeout , the exc hange of routing inf ormation, or the prune lifetime , and click Appl y . Figure 3 -146 DVMR P Gene ral Se ttings CLI – This sets the glob al paramete rs for DV[...]

Multic ast Rou ting 3-257 3 DVMRP Interface Settings • VLAN – Selec ts a VLA N inte rfac e on thi s rou ter. • Metric – Sets the metric f or this inte rface us ed to calcul ate dista nce vecto rs. • Status – Enabl es or disab les DVMRP. - If DVM RP is enabled on any interfa ce, Layer 3 IGMP should also be enable d on the router (page 3-[...]

Configuring the Switch 3-258 3 Displaying Neigh bor Information Y ou can disp lay all th e neighbo ring DVM RP router s. Command Attributes • Neighbor Addres s – The IP add ress of the net work de vice im mediatel y upstrea m for this multicast deli very tree. • Inte rfa ce – Th e IP inte rface on th is router tha t connec ts to the ups tre[...]

Multic ast Rou ting 3-259 3 Displaying the Routing Tab le The router lea rns so urce-rout ed info rmation from neighbo ring DV MRP rout ers and also adv ertises lear ned rout es to its neighbo rs. The rout er mere ly records path inf orma tion it h as l earn ed on its own or fr om ot her rout ers. It does not c onsi der group m embers hip or prune [...]

Configuring the Switch 3-260 3 CLI – This examp le display s known DVMRP ro utes. Configuring PI M-DM Protocol -Indepe ndent M ulticasting (PIM) prov ides two different mode s of opera tion: sparse mod e and den se mode. S parse mode (SM) is desig ned for ne twork s where the pro bability of multicas t group m embe rs is low, such as the Int erne[...]

Multic ast Rou ting 3-261 3 We b – Click Rou ting Prot ocol, PIM-DM , Gener al Settin gs. Enable or disable PIM-DM glo bally for the router, and click Ap ply . Figure 3-1 50 P IM-DM Gener al Setting s CLI – Th is ex ampl e en ables PIM- DM glo ball y an d di spla ys the cur rent st atus . Configuring PIM-DM Interfa ce Settings T o fully enable [...]

Configuring the Switch 3-262 3 • Trigger Hello Int erval – Configure s the maximu m time before transmitting a triggered PI M hello mes sage after the router is rebo oted or PIM is enabled on an interface. (Rang e: 1-655 35 seco nds; Defa ult: 5) - When a rou ter first st arts or PI M is e nabled o n an inter face, the hello -interval is set to[...]

Multic ast Rou ting 3-263 3 We b – Click Routing Protocol, PIM-DM, Interfa ce Settings. Select a VLAN, enable or disable PI M-DM for the se lected interface , modify any of the proto col paramet ers as required , and click Ap ply . Figure 3-1 51 P IM-DM Interfa ce Setting s CLI – Thi s e xampl e set s the P IM-D M pr otoc ol p aram ete rs f or [...]

Configuring the Switch 3-264 3 Displaying Interfa ce Information Y ou can dis play a summary of the curre nt interfac e status for PIM -DM , including the number of neighbor ing PIM ro uters, and the addre ss of the de signated PIM router . Command Attributes • Inte rfa ce – A VLA N interfac e on this rout er. • Address – Th e IP addres s f[...]

Multic ast Rou ting 3-265 3 We b – Click Routing Pr otocol, PIM-DM, Neig hbor Informati on. Figure 3 -153 PIM-DM Neigh bor Inform ation CLI – This examp le display s the only nei ghboring PIM-DM router. Console#show ip pim neighbor 4-310 Address VLAN Interface Uptime Expire Mode --------------- ---------------- -------- -------- ------- 10.1.0.[...]

Configuring the Switch 3-266 3[...]

4-1 Chapter 4: Command Line Interface This chap ter desc ribes how to use the Comman d Line Inter face (CL I). Using the Command Line Interface Accessing the CLI When acc essing t he manag emen t interface for the sw itch ove r a direct co nnecti on to the serve r ’s console port, or via a T elnet connectio n, the swi tch can be managed by enter [...]

Command Line I nterface 4-2 4 T o access the switch t hrough a T elnet session , you mus t first set the IP addr ess for the switch , and se t the default gatewa y if you are m anag ing the swit ch from a different IP su bnet. For exa mple, If your cor porate n etwork is con nect ed to anothe r netwo rk outside you r office or to the Int ernet, y o[...]

Entering Co mmands 4-3 4 Entering Commands Thi s sect ion desc ri bes how t o ente r CLI com mands. Keywords and Argument s A CLI comma nd is a ser ies of keywor ds and argu men ts. Keywords iden tify a comm and, and ar guments spec ify con figuration parameters . For examp le, in the comma nd “show inte rfac es s ta tus et her net 1 /5, ” show[...]

Command Line I nterface 4-4 4 Showing Com mands If you ente r a “?” at the co mman d prompt , the syst em will di splay the f irst leve l of keywords for the cu rrent com mand cl ass (Nor mal Exec or Privilege d Exec) or configuration c lass (Global, ACL, DHCP , Interface, Line, Router , VLAN Database, or MSTP). Y ou can also d isplay a list of[...]

Entering Co mmands 4-5 4 The comman d “ show interf aces ? ” will display the following informa tion: Partial Keyword Lookup If you termi nate a partial keywor d with a ques tion mark, alternat ives that match the initial lette rs are pro vided. (Re membe r not to leav e a space betw een the c omman d and quest ion mark. ) For exam ple “ s? ?[...]

Command Line I nterface 4-6 4 Understanding Command Modes The comm and set is divided into Exec and C onfigur ation clas ses. Exe c comma nds general ly displa y inform ation on sys tem status or clear statist ical count ers. Configu ration co mman ds, on th e other hand, m odify in terface para meters o r enab le certain switch ing func tions. The[...]

Entering Co mmands 4-7 4 Configurati on Commands Configu ration com mand s are priv ileged le vel com mands us ed to mod ify switc h settings . These com mands m odify the run ning config uration only an d are not saved when the sw itch is reb ooted . T o st ore the runn ing co nfigurati on in non-v olatile storag e, use the copy running- config st[...]

Command Line I nterface 4-8 4 T o enter the ot her mode s, at the con figuratio n prompt type one o f the followi ng comm ands. U se t he exit or end command to r eturn to th e Privileged Exec mo de. For exam ple, you can use the followin g comma nds to enter interfac e configur ation mode, and th en return to Priv ileged Exec mode T able 4-2 C onf[...]

Entering Co mmands 4-9 4 Command Line Processi ng Comma nds are not case se nsitive . Y ou can ab brevia te comma nds and parameters as long as they contain en ough let ters to differenti ate them f rom any oth er curre ntly availabl e comm ands or param eters . Y ou can use t he T ab key to co mplete parti al comm ands, or enter a partial com mand[...]

Command Line I nterface 4-10 4 Command Groups The syst em com mands can b e broken dow n into th e funct ional gro ups shown below . T able 4-4 C omm and G roup In dex Comman d Grou p De scripti on Page Line Se ts com municat ion param eters f or the serial p ort and T elnet, including bau d rate and conso le time-ou t 4-1 1 General Basic com mands[...]

Line Commands 4-11 4 The access mode shown in th e followi ng tables is indicat ed by the se abbrev iation s: NE (Nor ma l Exec ) VC (V LAN Databa se Conf iguration) PE (Privileg ed Exec) MST (Multip le S panning Tree) GC (Global Configur ation) ACL (Access Control List Configuration) LC (Line Co nfigurat ion) DC (DHCP Serve r Config uration) IC ( [...]

Command Line I nterface 4-12 4 line This comm and id entifie s a spe cific line fo r configu ration, and to pr ocess sub seque nt line conf iguratio n comm ands. Syntax line { console | vty } • console - Consol e termin al line. • vty - Vi rtua l ter min al fo r re mote c onso le ac cess (i. e., T elne t). Default Sett ing Ther e is no defaul t[...]

Line Commands 4-13 4 Command Usage • There are three authe nticati on modes provide d by the swi tch itself at login: - log in sel ects auth enticat ion by a sing le globa l passw ord as spec ified by th e password li ne configur ation c omman d. When using this m ethod, the management in terface st arts in No rmal Exec (NE) mode. - login local s[...]

Command Line I nterface 4-14 4 number of times a u ser can enter an incor rect pas sword before the sy stem termin ates the line c onnecti on and ret urns the termina l to the idle stat e. • The enc rypted password i s required for comp atibility w ith legac y pass word settings (i.e., plain text or encr ypted) wh en read ing the conf iguration f[...]

Line Commands 4-15 4 exec-time out This comm and se ts the interval th at the sys tem waits unti l user inpu t is detect ed. Use t he no form to re store the d efault . Syntax exec-tim eout [ seconds ] no exec-time out seconds - Integer that specifies the number of seconds. (Range: 0 - 655 35 seconds; 0: no timeout) Default Sett ing CLI: No timeout[...]

Command Line I nterface 4-16 4 Command Usage • When th e logon att empt thr eshold i s reache d, the sy stem inter face bec ome s silent for a specified amount of time before al lowing the next log on attemp t. (Use the silent-time com man d to se t th is in te rv al.) Wh en this thr es ho ld is reached for Telnet , the Telnet lo gon interfac e s[...]

Line Commands 4-17 4 databits This comm and se ts the number of data bits per charact er that are interpre ted and generat ed by the co nsole po rt. Use the no form to r estore the defaul t value. Syntax da ta b its { 7 | 8 } no databit s • 7 - Seven data b its per ch aracter. • 8 - Eig ht data bits pe r character. Default Sett ing 8 data bits [...]

Command Line I nterface 4-18 4 Command Usage Commu nication protoco ls provid ed by dev ices suc h as termi nals and modem s often require a sp ecific parit y bit setting . Example T o specify no parity , enter this command: speed This command set s the ter minal line’ s baud rate. Th is command set s both the transmi t (to termina l) and re ceiv[...]

Line Commands 4-19 4 Default Sett ing 1 stop bit Command Mode Line Co nfigurat ion Example T o specify 2 st op bits, enter this comma nd: disco nnect Thi s comm and te rmi nate s an S SH, T elnet, or c ons ole conne ction . Syntax disconnect session -id sessio n-i d – The session identifier for an SSH, T elne t or console connection. (Range: 0-4)[...]

Command Line I nterface 4-20 4 Command Mode Normal Exec, Priv ileged Exec Example T o show all lines, enter thi s comm and: General Commands Console#show line Console configuration: Password threshold: 3 times Interactive timeout: Disabled Silent time: Disabled Baudrate: 9600 Databits: 8 Parity: none Stopbits: 1 Vty configuration: Password threshol[...]

General Co mmands 4-21 4 enab le Thi s comm and a ctiva tes Priv il eged E xec mo de. In pr ivi leg ed mode , ad diti onal comm ands a re availa ble, and c ertain c omman ds disp lay addi tional informa tion. See “Unde rstandin g Comma nd Mod es” on page 4-6. Syntax enable [ level ] leve l - Privilege level to l og into the device. The device h[...]

Command Line I nterface 4-22 4 Example Related Commands enable (4-21) configure This c omman d activ ates Global Confi guration mode . Y ou mus t enter this mode to modify an y setting s on the switch. Y o u must also enter G lobal Con figurat ion mod e prior to en abling som e of the oth er configu ration modes, including In terface Configu ration[...]

General Co mmands 4-23 4 Example In this exa mple, th e show hist ory com mand lists the conte nts of the comma nd history bu ffer: The ! comman d re peat s co mmands fro m the Exec utio n comm and hi stor y bu ff er when yo u are in Norm al Exec or Pri vileged Exe c Mode, and comm ands from the Configu ration com mand history buffer wh en you ar e[...]

Command Line I nterface 4-24 4 end This comm and retur ns to Privile ged Exec m ode. Default Sett ing None Command Mode Global Co nfigurat ion, Interfac e Config uration, Line Config uration, VLAN Database C onfigura tion, and M ultiple S panning Tree Con figuration . Example Thi s exa mple shows how t o r etur n to t he P rivi leg ed Ex ec mo de f[...]

System Management Commands 4-25 4 Example Thi s exam ple show s how to qu it a CLI sessi on: System Management Co mmands Thes e com mands a re u sed t o con trol sys tem l ogs, p a sswor ds, u ser na mes, brow ser configur ation op tions, and display or configur e a variety of other syst em infor mation. Device Designation Commands Console#quit Pre[...]

Command Line I nterface 4-26 4 prompt Thi s comm and c usto mizes the CLI p rompt . Us e th e no f orm t o restore t he defaul t prompt. Syntax prompt string no prompt string - Any alphanum eric string to use for th e CLI prompt. (Ma ximum length: 255 characters) Default Sett ing Console Command Mode Global Co nfigurat ion Example hostname This com[...]

System Management Commands 4-27 4 User Access Commands The bas ic com ma nds re quired for ma nagem ent a ccess are listed in this secti on. This switc h also inc ludes othe r option s for passwor d checki ng via the con sole or a T e lnet con nectio n (page 4 -1 1), user a uthe ntication via a remo te a uthentic ation server (page 4-70), and host [...]

Command Line I nterface 4-28 4 Command Usage The encry pted passw ord is requi red for com patibility with l egacy password settings (i.e. , plain text or encr ypted) when readi ng the conf iguration file during system bo otup or when dow nload ing the configur ation file from a TFTP s erve r . There is no nee d for you to manual ly configu re encr[...]

System Management Commands 4-29 4 Related Commands enable (4-21) IP Filt er Commands managem ent This comm and sp ecifies the client IP ad dresses that are a llowed man agem ent access t o the switch through v arious pr otocol s. Use th e no form to res tore the default se tting. Syntax [ no ] management { all-client | ht tp-client | snmp-client | [...]

Command Line I nterface 4-30 4 • You can delete an address r ange just by speci fying the star t addre ss, or by specifyi ng both t he start add ress an d end ad dress. Example Thi s exam ple res tri cts m anage ment ac cess t o the in dica ted ad dress es. show ma nagement This comm and disp lays the client IP a ddresses that are allowed managem[...]

System Management Commands 4-31 4 Web Server Commands ip http port This comm and sp ecifies the TCP port number u sed by the we b browse r interface . Use t he no form to us e the defa ult port. Syntax ip http port port- numb er no ip http port port-number - The TCP p ort to be u sed by the browse r interface. (Range: 1-65535) Default Sett ing 80 C[...]

Command Line I nterface 4-32 4 Example Related Commands ip htt p port (4-31) ip http sec ure-server This comm and enabl es the se cure hype rtext tra nsfer protoc ol (HTT PS) over the Secure Socket Layer ( SSL), p roviding secur e access (i.e., an en crypted connec tion) to the swit ch’s web interfac e. Use the no form to disable th is function .[...]

System Management Commands 4-33 4 Example Related Commands ip http secu re-por t (4-33) copy tftp https-certif icate (4-6 4) ip http sec ure-port This comm and speci fies the UDP port num ber used for HTTPS/S SL conn ection to the switch’ s web interf ace. Use the no for m to restore the default p ort. Syntax ip http secure- port po rt_numb er no[...]

Command Line I nterface 4-34 4 Telnet Ser ver Commands ip telnet po rt This co mmand speci fies the TCP po rt num ber us ed by the T elnet i nterface . Use the no form to us e the defaul t port. Syntax ip telnet port port-numbe r no ip telnet port port-number - The TCP p ort to be u sed by the browse r interface. (Range: 1-65535) Default Sett ing 2[...]

System Management Commands 4-35 4 Related Commands ip tel net port (4-3 4) Secure Shell Command s The Berkl ey-standa rd includ es remote a ccess tools orig inally des igned fo r Unix systems. Some of these too ls have also been imp lemen ted for Micr osoft Windo ws and other environm ents. Thes e tools, incl uding co mmand s such as rlog in (remot[...]

Command Line I nterface 4-36 4 The SSH se rver on th is switch su ppor ts both passwor d and pub lic key authenti cation . If password au thentica tion is spe cified by t he SSH cl ient, then t he password can be auth entica ted either locally or vi a a RADIUS or T ACACS+ rem ote authenti cation ser ver , as spec ified by the au thenticat ion login[...]

System Management Commands 4-37 4 corres ponding to the public ke ys sto red on the switch ca n gain acce ss. The followi ng exchang es take plac e during this proces s: a. The cli ent s ends its pu blic key t o the swi tch. b. The switc h compares the client' s public key to those stor ed in me mory . c. If a ma tch is fo und, the swit ch us [...]

Command Line I nterface 4-38 4 ip ssh tim eout This comm and co nfigures the time out for the SSH serv er . Use the no form to r estore the defaul t setting. Syntax ip s sh time out secon ds no ip ssh time out seconds – The timeout for cl ient response during SSH ne gotiation. (Range: 1- 120) Default Sett ing 10 seco nds Command Mode Global Co nf[...]

System Management Commands 4-39 4 Example Related Commands show ip ss h (4-41) ip ssh se rver-key s ize This comm and sets the SSH se rver key size. Use the no form to restore the de fault setting. Syntax ip ssh serv er-key si ze key-si ze no ip ssh ser ver-key size key-size – The size of server key . (Range: 512-896 bit s) Default Sett ing 768 b[...]

Command Line I nterface 4-40 4 Example ip ssh cr ypto host-k ey generate This comm and ge nerates the host key pai r (i.e., public an d private) . Syntax ip ssh cryp to host-key ge nerate [ dsa | rsa ] • dsa – DSA (V ersion 2) ke y type. • rsa – RSA ( Version 1) key typ e. Default Sett ing Generat es both the D SA and RSA ke y pairs. Comman[...]

System Management Commands 4-41 4 Command Mode Privileged Exec Command Usage • This command c lears the h ost key from vola tile memory (RAM). Use t he no ip ssh save host-k ey command to cle ar the host k ey from fl ash memory. • The SSH se rver mu st be disabl ed before yo u can exe cute this comman d. Example Related Commands ip ssh crypt o [...]

Command Line I nterface 4-42 4 Example show ss h This comm and disp lays the current SSH se rver con nectio ns. Command Mode Privileged Exec Example Console#show ip ssh SSH Enabled - version 1.99 Negotiation timeout: 120 secs; Authentica tion retries: 3 Server key size: 768 bits Console# Console#show ssh Connection Version State U sername Encryptio[...]

System Management Commands 4-43 4 show pub lic-key Thi s comm and s hows the publi c key for the s peci fied use r or for the ho st. Syntax show p ublic-key [ user [ userna me ]| host ] username – Name of an SSH user . (Range: 1-8 ch aracters) Default Sett ing Shows all public keys . Command Mode Privileged Exec Command Usage • I f no para mete[...]

Command Line I nterface 4-44 4 Event Logging Commands logging on This comm and co ntrols loggi ng of error messag es, se nding deb ug or erro r message s to switch memory . The no form dis able s the lo ggin g proc ess. Syntax [ no ] logging on Default Sett ing None Command Mode Global Co nfigurat ion Command Usage The logging proce ss contro ls er[...]

System Management Commands 4-45 4 logging his tory This com mand lim its syslog message s saved to switc h memor y base d on seve rity . The no form re turns the logging of syslo g messages to t he default level. Syntax logging history { fla sh | ra m } leve l no logging history { fla sh | ra m } • flas h - Event hi story s tored in flas h memo r[...]

Command Line I nterface 4-46 4 logging hos t This comm and ad ds a syslo g server ho st IP addr ess that will receiv e loggin g messag es. Use th e no form to re move a s yslog se rver host. Syntax [ no ] logging host host_ip_ addre ss host_ip_address - The IP address of a syslog server . Default Sett ing None Command Mode Global Co nfigurat ion Co[...]

System Management Commands 4-47 4 logging trap This comm and en ables the lo gging of system messag es to a rem ote server, or limits the sysl og mess ages sa ved to a remote ser ver based on sever ity . Use this comm and witho ut a speci fied leve l to enable rem ote log ging. Us e the no form to disable re mote logg ing. Syntax logging trap [ lev[...]

Command Line I nterface 4-48 4 Related Commands show logg ing (4-4 8) show log ging This comm and disp lays the loggin g configur ation, al ong with an y system and event messa ges stor ed in memo ry . Syntax sh ow logg ing { flash | ram | sendmail | tr ap } • flas h - Event hi story s tored in flas h memo ry (i.e., perm anent mem ory). • ram -[...]

System Management Commands 4-49 4 The follow ing exam ple displ ays settin gs for the t rap functi on. Related Commands show logg ing sendm ail (4-5 2) SMTP Alert Commands These com mands configure SMTP ev ent handli ng, and forwa rding of al ert messag es to the s pecified SMTP serv ers and em ail recipi ents. Console#show logging trap Syslog logg[...]

Command Line I nterface 4-50 4 logging se ndmail h ost This co mmand specifi es SMTP serv ers that will be s ent al ert mess ages. Use the no form to r emove an SMTP serv er . Syntax [ no ] logging sendmail host ip_addres s ip_address - IP address of an SMTP server that will be sent alert messages for event handling. Default Sett ing None Command M[...]

System Management Commands 4-51 4 Command Usage The specified level indicates an event threshold. All events at this level or higher will be sent to t he configured email recipient s. (For exampl e, using Level 7 wil l report all even ts from le vel 7 to level 0.) Example This examp le will sen d ema il alerts for system error s from leve l 3 throu[...]

Command Line I nterface 4-52 4 Command Usage Y ou can spe cify up to five recipien ts for alert mes sages . Howev er , you must enter a se parate comm and to spe cify eac h recipien t. Example logging se ndmail This comm and enabl es SMTP ev ent hand ling. Use the no form to d isable this func ti on. Syntax [ no ] log ging sendm ail Default Sett in[...]

System Management Commands 4-53 4 Time Commands The syste m clock can be dynam ical ly set by pol ling a set of spe cified tim e server s (NTP or SNTP) . Mai nt aini ng a n ac curat e ti me on the swi tch en able s th e sy stem log to record meaningful d ates and times f or event ent ries. If the clock is not set, the switch will only record th e t[...]

Command Line I nterface 4-54 4 Example Related Commands sntp se rver (4 -54) sntp poll (4-55) show sn tp (4-55 ) sntp serv er This comm and se ts the IP address of the serv ers to which SN TP time requests are issued. U se the this comma nd with no argumen ts to clear all time servers from the current l ist. Syntax sntp server [ ip1 [ ip2 [ ip3 ]]][...]

System Management Commands 4-55 4 Related Commands sntp cl ient (4-53) sntp poll (4-55) show sn tp (4-55 ) sntp poll This comm and se ts the interval bet ween se nding tim e reques ts when the sw itch is set to SNTP client mode. U se the no form to restore to the def ault. Syntax sntp poll seconds no sntp poll seconds - Interval between time reques[...]

Command Line I nterface 4-56 4 Example cloc k ti mez one This command set s the t ime zone for t he switch’ s internal clock. Syntax clock timezone name hou r hours minute minutes { before-u tc | after-utc } • name - Nam e of tim ezone , usually an acronym . (Range : 1-29 cha racter s) • hours - Num ber of hours befo re/afte r UTC. (R ange: 1[...]

System Management Commands 4-57 4 cale nda r se t This comm and se ts the system clock. It ma y be use d if there is no t ime serve r on your net work, or if you have n ot conf igured the swi tch to rec eive si gnals from a t ime serv er . Syntax calenda r set hou r min sec { day month year | mont h day ye ar } • hour - H our in 24-hour forma t. [...]

Command Line I nterface 4-58 4 System Status Commands show sta rtup-config This command dis plays the configur ation file sto red in non-volati le memory that is used to start up the system . Default Sett ing None Command Mode Privileged Exec Command Usage • Use this comm and in co njunct ion with t he show runn ing-config command to compar e the[...]

System Management Commands 4-59 4 Example Related Commands show runni ng-con fig ( 4-59) show runn ing-config This comm and disp lays the configura tion inf ormatio n currentl y in use. Default Sett ing None Command Mode Privileged Exec Command Usage • Us e this comma nd in conj unct ion wi th t he show startup-co nfig command to compar e the inf[...]

Command Line I nterface 4-60 4 - VLA N datab ase (VL AN ID, nam e and stat e) - VLA N configu ratio n settings for each int erface - Mul tiple spa nning tree instanc es (nam e and interfac es) - IP a ddre ss co nfigured for VLANs - Rou ting prot ocol confi guration settings - Spa nning tree settings - Any configure d setting s for the c onsole po r[...]

System Management Commands 4-61 4 show sy stem This command displays system information. Default Sett ing None Command Mode Normal Exec, Privileged Exec Command Usage • For a descr iption of th e items sh own b y this comma nd, refe r to “D isplayin g System In formatio n” on page 3- 11. • Th e POST result s sh ould a ll displ ay “P ASS.?[...]

Command Line I nterface 4-62 4 show us ers Shows all act ive c onsole and T e lnet ses sions, includi ng u ser na me, idl e tim e, and IP address of T el net client. Default Sett ing None Command Mode Normal Exec, Priv ileged Exec Command Usage The sess ion used to exec ute this comm and is indica ted by a “*” symbol next t o the Line (i.e ., s[...]

System Management Commands 4-63 4 Example Frame Size Commands jumbo frame This comm and en ables sup port for jum bo frames . Use the no form t o disabl e it. Syntax [ no ] jumbo frame Default Sett ing Disabled Command Mode Global Co nfigurat ion Command Usage • This swi tch provid es more ef ficient t hroughpu t for larg e seque ntial data trans[...]

Command Line I nterface 4-64 4 • Enabling j umbo fram es wi ll limit the ma ximum thr eshold f or broad cast storm contro l to 64 pac kets per sec ond. (Se e the swit chport broa dcast com mand on pag e 4-15 5.) Example Flash/File Commands These c omman ds a re u sed to mana ge t he s ystem c ode o r co nfigurat ion fi les. copy This comm and mov[...]

Flash/File Commands 4-65 4 Default Sett ing None Command Mode Privileged Exec Command Usage • The sy stem prompts for data requi red to comple te the copy co mmand. • The de stination f ile nam e shou ld not con tain sl ashes ( or /), th e leadi ng letter of the file na me shoul d not be a pe riod (.), and the maxim um len gth for file names [...]

Command Line I nterface 4-66 4 The follow ing exam ple shows how to co py the run ning conf iguration to a startup fil e. The follow ing exam ple shows how to do wnloa d a configur ation file: This examp le show s how to cop y a secur e-site ce rtificate from an TFTP s erver . It then r eboots the sw itch to acti vate the cer tificate : This examp [...]

Flash/File Commands 4-67 4 delete This comm and de letes a file or image. Syntax delete filenam e filename - Name of the configurati on file or image name. Default Sett ing None Command Mode Privileged Exec Command Usage • If the file type i s used for sys tem startup, then t his file c annot be deleted. • “ Fact ory_D efa ult_C onf ig.c fg?[...]

Command Line I nterface 4-68 4 Command Usage • If y ou enter the co mmand dir witho ut an y para met ers, the sy stem disp lays all files. • Fi le i nfor mat ion i s show n bel ow: Example The follow ing exam ple shows how to disp lay all fil e informa tion: whichboo t This c omman d disp lays w hich files were booted when the s ystem powe red [...]

Flash/File Commands 4-69 4 boot syste m This comm and sp ecifies t he file or imag e used t o start up the sy stem. Syntax boot syst em { boot-rom | config | opcode }: filenam e The type of file or i mage to set as a default includes: • boot-rom - Boot ROM. • config - Conf igurati on file. • opcode - Run -time ope ration cod e. The colon (:) [...]

Command Line I nterface 4-70 4 Authentication Commands Y ou can co nfigur e this swit ch to authen ticate users log ging into the syste m for manage ment ac cess us ing local or remote au thentica tion m ethods. Y ou can al so enable po rt-based authent ication for network cl ient acce ss using I EEE 802.1x . Authenticat ion Sequence authentica tio[...]

Authentication Co mmands 4-71 4 • RADIUS and TACACS+ logon authentication assigns a specif ic privilege level for eac h user name and passw ord pa ir . The user name, pass word , and privilege l evel must be configur ed on the au then tication se rver. • You c an speci fy three aut henticat ion me thods in a si ngle co mmand to in dicate the au[...]

Command Line I nterface 4-72 4 authenti cation is at tempted on the TA CACS + server . If the TACA CS+ ser ver is not avai lable, the lo cal user nam e and passwor d is check ed. Example Related Commands enable pass word - sets the passw ord for cha ngin g comma nd modes (4-28) RADIUS Client Remote Authent ication Dial- in User Ser vice (RADIU S) i[...]

Authentication Co mmands 4-73 4 radius- server por t This comm and s ets the RADI US serv er netwo rk port. Us e the no for m to re stor e the default. Syntax radius-server po rt por t_num ber no radius-server port port_number - RADIUS server UDP port used for authentication messages. (Range : 1- 65535) Default Sett ing 1812 Command Mode Global Co [...]

Command Line I nterface 4-74 4 radius- server r etransmit This c omman d se ts the num ber o f ret ries. U se t he no form to rest ore the defa ult. Syntax radi us-s erver re trans mit numb er_o f_re tri es no radius-server retransmit number_of_retries - Numbe r of times the switch will try to aut henticate logon access via t he RADIUS server . (Ra[...]

Authentication Co mmands 4-75 4 Example TACACS+ Client T ermina l Access Co ntroller Access Control Sys tem (T ACA CS+) is a logo n authenti cation pro tocol tha t uses softw are running on a cent ral server to control access t o T AC ACS-a ware de vices on t he networ k. An auth entica tion serve r contains a d atabas e of m ultiple us er nam e/pa[...]

Command Line I nterface 4-76 4 tacacs-se rver por t This command specifies the T ACACS+ server network port. Use the no form to restore t he default . Syntax t aca cs-se rver po rt port_n umbe r no tacacs-serv er port port_number - T ACACS+ server TCP port use d for authentication messages. (Range : 1- 65535) Default Sett ing 49 Command Mode Global[...]

Authentication Co mmands 4-77 4 show taca cs- ser ver This comm and disp lays the current set tings for the T A CACS + server. Default Sett ing None Command Mode Privileged Exec Example Port Security Commands These com mands can be use d to enabl e port se curity on a po rt. When us ing port securi ty , the switch stops lea rning n ew MA C ad dress[...]

Command Line I nterface 4-78 4 port se curity This comm and en ables or conf igures por t secur ity . Use the no f orm wi tho ut a ny keywords to disab le por t secu rity . Use t he no form with th e appr opri ate ke yword to restore th e default settings fo r a respons e to security violatio n or for the ma ximum number of allowed a ddres ses. Syn[...]

Authentication Co mmands 4-79 4 Example The follow ing exam ple enab les port sec urity for port 5, and se ts the respon se to a security violation t o issue a trap mess age: Related Commands shutdown (4 -154) mac-a ddress- table static (4-166 ) show mac -addr ess-table (4-1 67) 802.1x Port Authenti cation The switch su pports IEEE 802.1x (d ot1x) [...]

Command Line I nterface 4-80 4 authentica tion dot1x default This comm and se ts the default au thentica tion serve r type. Use the no form to restore t he default . Syntax authenticat ion dot1x default radius no authent ication dot1x Default Sett ing RADIUS Command Mode Global Co nfigurat ion Example dot1x default This comm and se ts all configura[...]

Authentication Co mmands 4-81 4 Command Mode Global Co nfigurat ion Example dot1x port-control This comm and se ts the dot1x mode on a port in terface. Use the no form to r estore the defaul t. Syntax dot1x p ort-control { auto | force- authori zed | fo rce -una uth ori zed } no dot1x port-con trol • auto – Requi res a dot 1x-aw are conne cted [...]

Command Line I nterface 4-82 4 dot1x operation-m ode This command allows single or multiple hosts (client s) to connect to an 802. 1X-a utho rize d port . Use th e no form with no keyw ords t o restore th e defaul t to single h ost. U se t he no form w ith the multi-host max-count keywor ds to restor e the default maximum co unt. Syntax dot1x o per[...]

Authentication Co mmands 4-83 4 Command Mode Privileged Exec Example dot1x re-aut hentication This comm and en ables peri odic re-au thentica tion globa lly for all por ts. Use the no form to disa ble re- authenti cation. Syntax [ no ] dot1x re-a ut hen tica tio n Command Mode Global Co nfigurat ion Example dot1x timeout quiet- period This comm and[...]

Command Line I nterface 4-84 4 dot1x timeout re-auth period This comm and se ts the time pe riod af ter which a co nnect ed client must be re-authe nticated . Syntax dot1x ti meout re -authperiod secon ds no dot1x timeou t re-authperiod secon ds - The number of seconds. (Range: 1- 65535) Default 3600 seco nds Command Mode Global Co nfigurat ion Exa[...]

Authentication Co mmands 4-85 4 show dot 1x Thi s comm and s hows genera l po rt au the ntica ti on rel ated sett in gs on the s witc h or a specific interfac e. Syntax show d ot1x [ statistics ] [ in terfac e in terf ac e ] • stati stics - Displa ys dot1x st atu s for each port. • interface • etherne t unit / port - unit - This is devic e 1.[...]

Command Line I nterface 4-86 4 • Backend St ate Machi ne - Stat e – Current state ( includin g request , respon se, success, fa il, timeout, i dle, initi alize). - Req uest Coun t – Numb er of EAP Req uest pa ckets se nt to the Supplicant without receivin g a response. - Ide ntif ier (Ser ver) – Ident ifie r carr ied i n the mos t rece nt E[...]

Access Contr ol List Commands 4-87 4 Access Control List Com mands Access C ontrol Lists (AC L) prov ide packe t filtering for IP f rames (based on ad dress, protocol , Layer 4 prot ocol port number o r TCP contr ol code) or an y frames (b ased on MAC address or Ethernet type ). To filter packets , first create an acces s list, add the re quired ru[...]

Command Line I nterface 4-88 4 The order in which act ive ACLs are che cked is as follows: 1. User-defined r ules in the Egress MAC ACL f or egress port s. 2. User- defined ru les in the Eg ress IP ACL for egr ess ports. 3. Use r-defined ru les in the I ngress M AC ACL fo r ingress po rts. 4. Us er-d efi ned r ules in th e In gre ss IP A CL fo r in[...]

Access Contr ol List Commands 4-89 4 access-l ist ip This co mmand adds an IP a ccess list an d enter s con figuratio n mode for stan dard or extende d IP ACLs . Use the no form to re move the speci fied ACL. Syntax [ no ] access-list ip { stan dard | exte nded } acl _name • standar d – Specifie s an ACL that filters pac kets base d on the sou [...]

Command Line I nterface 4-90 4 permit , deny (Standard ACL ) This comm and ad ds a rule to a St andard IP ACL. The r ule sets a filter co ndition for packets eman ating from the speci fied sourc e. Use the no f orm to remov e a rule. Syntax [ no ] { permit | deny } { any | source b itmas k | ho st source } • any – Any sour ce IP addr ess. • s[...]

Access Contr ol List Commands 4-91 4 permit , deny (Extended ACL) This comm and adds a r ule to an Exten ded IP AC L. The rule sets a filter con dition fo r packets with spec ific sour ce or dest ination I P address es, prot ocol types , source or destinat ion protoc ol ports, or TCP con trol co des. Use the no form to remove a rule. Syntax [ no ] [...]

Command Line I nterface 4-92 4 Command Usage • All new rule s are appen ded to the end of the list. • Address bitma sks are s imilar to a subnet mask, containi ng four int egers f rom 0 to 25 5, each sepa rated by a p eriod. T he bina ry mas k use s 1 b its to in dicate “match” and 0 bi ts to ind icate “igno re.” The bi tmas k is bitwis[...]

Access Contr ol List Commands 4-93 4 Related Commands acce ss- lis t ip (4 -89 ) show ip access-list This comm and disp lays the rules for co nfigured IP ACLs. Syntax show ip acce ss-lis t { standard | extende d } [ acl_ name ] • standar d – Specifie s a standar d IP ACL. • extended – Specifies an extend ed IP ACL. • acl_name – Name o f[...]

Command Line I nterface 4-94 4 Command Usage • A mask can only be use d by all ingres s ACLs or all egress ACL s. • The prece dence of the ACL ru les applie d to a packe t is not determ ined by order of th e rules, but instead by the order of the ma sks; i.e., the first mas k that mat ches a rule w ill determ ine the ru le that is ap plied to a[...]

Access Contr ol List Commands 4-95 4 Command Mode IP M a sk Command Usage • Packe ts crossing a po rt are che cked ag ainst all the ru les in the ACL until a match is found. The order in whic h these p ackets a re ch ecked is determi ned by the mask , and no t the order in whi ch the ACL rules wer e entered . • First crea te the requir ed ACLs [...]

Command Line I nterface 4-96 4 This s hows how t o crea te a standard ACL w ith an in gress m ask t o de ny acc ess to the IP hos t 171.69.1 98.102, and perm it acce ss to any othe rs. This show s how to crea te an ex tended ACL with an egr ess mas k to drop pack ets leaving ne twork 171 .69.19 8.0 whe n the Layer 4 source po rt is 23. Console(conf[...]

Access Contr ol List Commands 4-97 4 This is a mo re compreh ensive ex ample . It denies any TCP packets in whi ch the SYN bit is ON , and permi ts all other packets. It then sets the ingre ss ma sk to check the deny rul e first, and finally bind s port 1 to this ACL. Not e that once t he ACL is bound to a n interfac e (i.e., the ACL is active ), t[...]

Command Line I nterface 4-98 4 Related Commands mas k (IP ACL ) (4-9 4) ip acces s-group This comm and bind s a port to an I P ACL. Use the no form to remove the p ort. Syntax [ no ] ip access-group acl _name { in | out } • acl_name – Name o f the ACL. (Maximum le ngth: 16 c haracte rs) • in – Indi cates that th is list app lies to ingr ess[...]

Access Contr ol List Commands 4-99 4 Related Commands ip ac cess-g roup (4 -98) map acce ss-list ip This comm and se ts the output queu e for packets mat ching an ACL rule. The specifie d CoS value is only us ed to map the matchi ng packet to an ou tput que ue; it is not writt en to the packet itself. Use the no form to remove the CoS mapping. Synt[...]

Command Line I nterface 4-100 4 show ma p access-l ist ip This comm and show s the Co S value m apped to an IP ACL for the cur rent interfa ce. (The Co S value deter mines the output queue for packets matching an ACL rul e.) Syntax show ma p access- list ip [ in terface ] interfa ce • etherne t unit / port - unit - This is devic e 1. - port - Por[...]

Access Contr ol List Commands 4-101 4 Command Usage • Yo u mus t co nfigu re a n ACL m ask befo re y ou can chan ge f rame prior iti es based o n an AC L rule . • Traffic priorities may be include d in the IEEE 802.1p priority tag. This tag is also incor porated a s part o f the ov erall IEEE 80 2.1Q VLAN tag. To specify this priority, use the [...]

Command Line I nterface 4-102 4 MAC ACLs access-l ist mac Thi s com mand a dds a MAC ac ces s lis t an d ent ers MAC AC L conf ig urati on mo de. Use t he no form to re move the sp ecified AC L. Syntax [ no ] access-list mac acl_nam e acl_name – Name of the ACL. (Maximum length: 16 characters) Default Sett ing None Command Mode Global Co nfigurat[...]

Access Contr ol List Commands 4-103 4 Example Related Commands permit , deny 4-103 mac acce ss-g roup (4 -108 ) show mac acce ss-list (4-10 4) permit , deny (MAC ACL) This comm and adds a rule to a MAC ACL. The ru le filters packets ma tching a specifie d MAC so urce or de stinati on addres s (i.e., physical la yer addr ess), or Ethernet p rotocol [...]

Command Line I nterface 4-104 4 • destinat ion – De stination M AC addr ess range with bitm ask. • address - bitmas k 25 – Bitmask for MAC address (in hexidec imal form at). • vid – VLAN ID. (R ange: 1- 4095) • vid-bi tmask 25 – VLAN bitm ask. (Ran ge: 1-40 95) • protocol – A spe cific Eth ernet protoc ol numbe r. (R ange: 6 00-[...]

Access Contr ol List Commands 4-105 4 Example Related Commands permit , deny 4-103 mac acce ss-g roup (4 -108 ) access-l ist mac mas k-preced ence This comm and ch anges to MAC Ma sk mode us ed to co nfigure ac cess co ntrol mask s. Us e th e no form to de lete the m ask table. Syntax [ no ] access-list ip m ask-p reced ence { in | ou t } • in ?[...]

Command Line I nterface 4-106 4 mask (M AC ACL) This comm and defines a mask f or MAC AC Ls. Th is mas k defines the fields to check in the packet he ader . Use the no form to re move a mask. Syntax [ no ] m ask [ pktformat ] { any | host | source- bitmas k } { any | host | destin atio n-bit mask } [ vid [ vid- bit mask ]] [ ethertype [ ethertype-b[...]

Access Contr ol List Commands 4-107 4 Example This examp le show s how to cre ate an Ing ress MA C ACL an d bind it to a port. You can then s ee that the or der of the ru les have been cha nged by the mask . This examp le creates an Egre ss MAC AC L. Console(config)#access-list mac M4 Console(config-mac-acl)#permit any any Console(config-mac-acl)#d[...]

Command Line I nterface 4-108 4 show ac cess-list m ac mask-prec edence This comma nd shows the ingress or egress rule masks fo r MAC ACLs. Syntax show a ccess -list m ac mask-p reced ence [ in | out ] • in – Ingr ess ma sk p reced ence for in gress A CLs . • out – Egress m ask prece dence for egress AC Ls. Command Mode Privileged Exec Exam[...]

Access Contr ol List Commands 4-109 4 Related Commands show mac acce ss-list (4-10 4) show ma c access-g roup This comm and sh ows the por ts assigne d to MA C ACLs. Command Mode Privileged Exec Example Related Commands mac acce ss-g roup (4 -108 ) map acce ss-list mac This comm and se ts the output queu e for packets mat ching an ACL rule. The spe[...]

Command Line I nterface 4-110 4 Example Related Commands queue c os-map (4-21 0) show m ap acce ss-li st mac (4 -1 1 0) show ma p access-l ist mac Thi s comma nd show s the CoS value mappe d to a MAC ACL for the cu rren t interface. (The Co S value deter mines the output queue for packets matching an ACL rule.) Syntax show ma p access- list mac [ i[...]

Access Contr ol List Commands 4-111 4 match ac cess-list ma c This comm and ch anges the IEEE 802 .1p prior ity of a Layer 2 frame ma tching th e defined AC L rule. (T his feature i s comm only referre d to as ACL packet marking .) Use t he no form to r emove the ACL marker . Syntax match access-l ist mac a cl_na me set pr iority priorit y no match[...]

Command Line I nterface 4-112 4 ACL Information show ac cess-list This co mmand show s all AC Ls an d assoc iated rules, as wel l as all the us er-defin ed masks. Command Mode Privileged Exec Command Usage Once the ACL is bound to a n interface (i.e., th e ACL is active), the order in which th e rules are di splayed is determ ined by th e associa t[...]

SNMP Commands 4-113 4 SNMP Command s Controls a ccess to this switch fr om management st ations using the Simple Netwo rk Manage ment Pr otocol (SNM P), as wel l as the err or types sen t to trap ma nagers. SNMP V ersi on 3 also provi des se curity feat ures tha t cover mes sage int egrity , authenti cation , and encr yption; as well as contr ollin[...]

Command Line I nterface 4-114 4 Command Mode Global Co nfigurat ion Example show sn mp This comm and ca n be used to check the sta tus of SNM P com munica tions. Default Sett ing None Command Mode Normal Exec, Priv ileged Exec Command Usage This comm and prov ides informa tion on the commu nity acces s strin gs, counter inf orma tion for SNMP inpu [...]

SNMP Commands 4-115 4 snmp- server com munity This comm and de fines the SNM P v1 an d v2c comm unity acc ess st ring. Us e the no form to rem ove the sp ecifi ed comm unity str ing. Syntax snmp-s erver com munity st ring [ ro | rw ] no snmp-s erver com mu nity string • strin g - Commu nity st ring that act s like a pass word an d permi ts access[...]

Command Line I nterface 4-116 4 Related Commands snmp -serve r loca tion (4-1 16) snmp- server location This comm and se ts the system location string. Us e the no form to remo ve the location string . Syntax snmp-s erver locat ion te xt no snmp-s erve r location text - St ring that describes the system location. (Maximum length : 255 char acters) [...]

SNMP Commands 4-117 4 snmp- server host This comm and sp ecifies the recipient of a Simpl e Network M anag ement Protoc ol notificat ion operat ion. Use the no form to remov e the specif ied host . Syntax snmp-s erver host host-addr community- string [ versio n { 1 | 2c | 3 { aut h | noauth | priv }} [ ud p- por t port ]] no snmp-s erver hos t host[...]

Command Line I nterface 4-118 4 support s. If the sn mp-ser ver host com mand doe s not sp ecify the SNMP version, the defau lt is to send SNM P vers ion 1 notifi cations. • I f you spe cify an SNMP Ve rsio n 3 host , then t he comm unit y stri ng is interpret ed as an SNMP use r name. If you use the V3 “auth” or “priv” options, the user [...]

SNMP Commands 4-119 4 Related Commands snmp- serve r host (4- 1 17 ) snmp- server eng ine-id This comm and co nfigures an identific ation stri ng for the SN MPv3 eng ine. Use the no form to restore the default. Syntax snmp-s erver engine -id local engine id-string no snmp-s erve r engine- id local engineid-string - S tring identifying the engine ID[...]

Command Line I nterface 4-120 4 snmp- server vie w This command adds an SNMP view which controls user access to the MIB. Use the no for m to r emove an SNMP view . Syntax snmp-s erver view view-na me oid- tree { included | exclude d } no snmp-s erve r view view -name • view-name - Name of an SNMP view . (Ran ge: 1- 64 cha racters) • oid-tre e -[...]

SNMP Commands 4-121 4 show sn mp view This c omman d show s infor mation on the SNM P v iews. Command Mode Privileged Exec Example snmp- server group This comm and adds a n SNMP gr oup, ma pping SNM P users t o SNMP view s. Use the no form to remove a n SNMP group. Syntax snmp-s erver gro up grou pname { v1 | v2c | v3 { auth | noauth | priv }} [ re[...]

Command Line I nterface 4-122 4 Default Sett ing Default gr oups: public 26 (read on ly), priv ate 27 (read/writ e) readview - Every obje ct belon ging to the Int ernet OID space (1.3.6.1) . writeview - Noth ing i s defi ned. Command Mode Global Co nfigurat ion Command Usage • A group set s the acce ss poli cy for the ass igne d users. • Wh en [...]

SNMP Commands 4-123 4 show snm p gr oup Four def ault groups are pr ovided – SN MPv1 r ead-onl y access a nd read /write access, and SNM Pv2c r ead-onl y access an d read /write acc ess. Command Mode Privileged Exec Example Console#show snmp group Group Name: r&d Security Model: v3 Read View: defaultview Write View: daily Notify View: none St[...]

Command Line I nterface 4-124 4 snmp- server use r Thi s com mand a dds a use r to an SNM P grou p, r estr ict ing the user t o a s peci fic SNMP Re ad and a Write View . Use the no form t o remov e a user f rom an SNM P group. Syntax snmp-s erver use r usernam e g roupnam e { v1 | v2c | v3 [ encr ypted ] [ auth { md5 | sha } au th-passwor d [ priv[...]

SNMP Commands 4-125 4 Example show sn mp user This c omman d show s infor mation on SNMP users. Command Mode Privileged Exec Example snmp ip filter This comm and se ts the IP addres ses of clie nts that are allo wed mana geme nt access t o the switch via SNM P . Use the no form the re move an I P addre ss. Syntax [ no ] sn mp ip fil ter ip_address [...]

Command Line I nterface 4-126 4 Command Usage • You can create a list o f up to 16 IP addr esse s or IP addr ess group s that ar e allowe d access to the switch vi a SNMP managem ent soft ware. • Ad dres s bitma sks ar e simi lar t o a subne t mask, contai ni ng four decima l integers from 0 to 255 , each sep arated b y a period . The binary ma[...]

DHCP Commands 4-127 4 ip dhcp cl ient-iden tifier This comm and sp ecifies the D CHP clie nt identifier for the cur rent interface . Use the no form to remove this identi fier . Syntax ip dh cp cl ient -i dent ifi er { text text | hex hex } no ip dhcp client-identifier • text - A text strin g. (Range : 1-15 cha racters) • hex - The hex adecim a[...]

Command Line I nterface 4-128 4 Example In the follo wing exam ple, the de vice is reassig ned the sam e add ress. Related Commands ip a ddress (4-236) DHCP Relay ip dhcp res tart relay This command enables DHCP re lay for the s pecified VLAN. Use th e no form to disable i t. Syntax [ no ] ip dhcp relay Default Sett ing Disabled Command Mode Interf[...]

DHCP Commands 4-129 4 Example In the follo wing exam ple, the de vice is reassig ned the sam e add ress. Related Commands ip dhcp rela y server (4-129) ip dhcp rela y server This comm and sp ecifies t he addres ses of D HCP se rvers to be us ed by the sw itch’s DHCP relay agent. Us e the no form to clear all a ddresses. Syntax ip dhcp rel ay ser [...]

Command Line I nterface 4-130 4 DHCP Server servic e dhcp This command enable s the DHCP server on this s witch. Use th e no form t o disable the DHCP server . Syntax [ no ] service dhcp Default Sett ing Enabled Command Mode Global Co nfigurat ion Command Usage If the DHCP server is running, you mus t resta rt it to imp lement any configur ation ch[...]

DHCP Commands 4-131 4 Example ip dhcp ex cluded-addre ss This comm and sp ecifies IP add ress es that the DH CP ser ver should not assig n to DHCP client s. Use the no form to r emove the exclu ded IP addr esses. Syntax [ no ] ip dhcp exclude d-address low-ad dres s [ high -addres s ] • low-address - An excl uded IP add ress , or th e fir st I P [...]

Command Line I nterface 4-132 4 host comm and m ust fall withi n the rang e of a configu red ne twork add ress pool. Example Related Commands networ k (4-132) host (4-1 37) network This command confi gures the subne t number and mask fo r a DHCP address pool. Use t he no form to re move th e subne t numbe r and mas k. Syntax network networ k-numb e[...]

DHCP Commands 4-133 4 default-route r This command specifie s default ro uters for a DHCP pool. Us e the no f orm to remov e the defa ult routers. Syntax defaul t-router ad dress 1 [ addr ess 2 ] no default-router • address 1 - Specifi es the IP ad dress of the primary r outer. • address 2 - Specifi es the IP ad dress of an al ternate r outer. [...]

Command Line I nterface 4-134 4 dns-ser ver This command specifies the Domain Name System (DNS) IP servers available to a DHCP client. Use the no form to remove t he DNS server l ist. Syntax dns-server addre ss1 [ address2 ] no dns-serve r • address 1 - Specifi es the IP ad dress of the primary DN S serve r. • address 2 - Specifi es the IP ad d[...]

DHCP Commands 4-135 4 bootfile This comm and spec ifies th e name of the defau lt boot ima ge for a DH CP cli ent. Th is file should placed on the Trivial File Transfer Protocol (TFTP) server specified with the next-server comman d. Use the no form to dele te the boot im age name . Syntax bootfile filename no bootfile filename - Name of the fi le t[...]

Command Line I nterface 4-136 4 Related Commands netbios- node-t ype (4- 136) netbios-nod e-type This command confi gures the NetBIOS node ty pe for Micr osoft DHCP client s. Use the no form to remove the NetBIOS node type. Syntax netbios-node- type type no netbios-node -type type - S pecifies the N etBIOS node type: • broad cast • hybrid (reco[...]

DHCP Commands 4-137 4 Default Sett ing One da y Command Modes DHCP Pool Configuration Example The follow ing exam ple leases an addr ess to clie nts using this poo l for 7 days. host Use this comm and to spe cify the IP addr ess and n etwor k mask t o manu ally bind to a DHCP client. Use the no form to remo ve the IP address for the clie nt. Syntax[...]

Command Line I nterface 4-138 4 •T h e no host command only cl ears the a ddress from the DHCP server databas e. It does no t canc el the IP addr ess cu rrently in us e by the hos t. Example Related Commands client-i dentifier (4-1 38) hardwar e-add ress ( 4-139) client-iden tifier This command specifies the client identifier of a DHCP client. Us[...]

DHCP Commands 4-139 4 hardware-addres s This command specifie s the hardware address of a DHCP client . This command is valid for ma nual bin dings on ly . Use the no for m to remov e the hard ware ad dress. Syntax hardware-addr ess hardwa re-addr ess type no hardware -address • hardw are-add ress - Spec ifies the M AC ad dress of the clie nt dev[...]

Command Line I nterface 4-140 4 Usage Guidelines •A n address sp ecifie s the clien t’s IP addr ess. If an ast erisk (*) is used as the address paramet er, the DHCP server clears all auto matic bindings. •U s e t h e no hos t comma nd t o del ete a manu al b indi ng. • This comm and is nor mally us ed after m odifying the addre ss pool, or [...]

DNS Commands 4-141 4 DNS Commands Thes e comma nds ar e used t o confi gure Do main Naming System (DNS) servic es. Y ou can ma nuall y conf igu re ent rie s in the DNS do main name to IP addr ess m appin g table, config ure defa ult domai n names , or specif y one or mo re name se rvers t o use for domain name to addr ess translati on. Note th at d[...]

Command Line I nterface 4-142 4 Command Usage Servers or other netw ork devi ces may su pport one or more co nnecti ons via multiple IP address es. If mor e than one IP address is associ ated with a ho st name usin g this com mand, a DNS cli ent can try ea ch address in succ ession , until it establish es a c onnec tion w ith the target device . Ex[...]

DNS Commands 4-143 4 Default Sett ing None Command Mode Global Co nfigurat ion Example Related Commands ip d omai n-l ist ( 4-1 43) ip name-s erver (4 -144) ip d omai n-l ookup (4- 145) ip domain- list This comm and de fines a list of domain na mes tha t can be appe nded t o incom plete host nam es (i.e., ho st name s passed from a client that are [...]

Command Line I nterface 4-144 4 Example This examp le add s two dom ain name s to the cu rrent list and t hen displ ays the list. Related Commands ip d omai n-na me (4-1 42) ip name-s erver This comm and specif ies the add ress of one or more d omain n ame ser vers t o use for name-to -addres s reso lution. Us e the no form to re mo ve a na me s er[...]

DNS Commands 4-145 4 Example Thi s exam ple adds two doma in-n ame se rver s to the l ist an d then displ ays th e lis t. Related Commands ip d omai n-na me (4-1 42) ip d omai n-l ookup (4- 145) ip domain- lookup This comm and en ables DN S host nam e-to-ad dress translatio n. Use the no f orm to disable D NS. Syntax [ no ] ip dom ain-lookup Defaul[...]

Command Line I nterface 4-146 4 Example This e xample enabl es DN S and then displ ays th e con figuratio n. Related Commands ip d omai n-na me (4-1 42) ip name-s erver (4 -144) show hos ts This comm and disp lays the static host na me-to- address m apping table. Command Mode Privileged Exec Example Note that a host name will be displayed as an al [...]

DNS Commands 4-147 4 show dns This comm and disp lays the config uration of th e DNS se rver . Command Mode Privileged Exec Example show dns cache This comm and disp lays ent ries in th e DNS ca che. Command Mode Privileged Exec Example Console#show dns Domain Lookup Status: DNS enabled Default Domain Name: sample.com Domain Name List: sample.com.j[...]

Command Line I nterface 4-148 4 clear dns cac he This comm and clea rs all entri es in the DNS cache. Command Mode Privileged Exec Example Console#clear dns cache Console#show dns cache NO FLAG TYPE IP T TL DOMAIN Console#[...]

Interface Co mmands 4-149 4 Interface Commands Thes e comma nds ar e used to di spl ay or set commun ica tion p aram eter s for an Ethernet p ort, aggregat ed link, or VLAN . interface This comm and co nfigures an inte rface type and enter int erface conf igura tion mode . Use t he no form to r emove a trunk. Syntax inte rfa ce in te rfac e no inte[...]

Command Line I nterface 4-150 4 Command Mode Global Co nfigurat ion Example T o specify p ort 4, ente r the followi ng comm and: descri ption This comm and ad ds a desc ription to an interfac e. Use the no form to r emove the descri ption. Syntax description string no description string - Comment or a description to help you remember what is attach[...]

Interface Co mmands 4-151 4 Default Sett ing • Auto-ne gotiation is enable d by default . • When aut o-negot iation is di sabled , the default speed-du plex set ting is 1000full for Gigabit Ethe rnet por ts. Command Mode Interface C onfigur ation (E thernet, P ort Chann el) Command Usage • To force operation to the sp eed and duplex m ode spe[...]

Command Line I nterface 4-152 4 • If aut onegotiation is dis abled, auto-MDI/MDI- X pin signal c onfiguration will also be disa bled for the RJ-45 ports. Example The fo llowing exam ple co nfigures port 1 1 to u se au tonegot iation. Related Commands capabili ties (4 -152) speed-d uplex (4 -150) capabiliti es Thi s comma nd adve rti ses th e port[...]

Interface Co mmands 4-153 4 Example The follo wing exa mple c onfigure s Ethern et port 5 c apabilities to 100ha lf, 100ful l and fl ow cont rol. Related Commands negotiat ion (4-151 ) speed-d uplex (4 -150) flo wco ntro l (4-1 53 ) flowcontrol This comm and en ables flow control. Us e the no form to di sabl e flow contr ol. Syntax [ no ] flowcontr[...]

Command Line I nterface 4-154 4 Example The follow ing exam ple enab les flow con trol on p ort 5. Related Commands negotiat ion (4-151 ) capa bilities (flo wcontrol, symme tric) (4-1 52) media-type Thi s comma nd for ces t he por t type sele cted for co mbin ation port s 8 - 12. Use the no form to rest ore the d efault mo de. Syntax media-type mod[...]

Interface Co mmands 4-155 4 Default Sett ing All interface s are enabl ed. Command Mode Interface C onfigur ation (E thernet, P ort Chann el) Command Usage This comm and allow s you to disa ble a port due to abnor mal behav ior (e.g., exces sive collis ions), and then reen able it after the pr oblem ha s been resolved. Y ou may also wan t to disabl[...]

Command Line I nterface 4-156 4 Example The fol lowi ng sho ws ho w to conf igur e br oadca st st orm c ontr ol at 600 pac ket s pe r secon d: clear coun ters This comm and clea rs statistics on a n interfac e. Syntax clear cou nter s inte rf ace interfa ce • etherne t unit / port - unit - This is devic e 1. - port - Port number. • port-chann e[...]

Interface Co mmands 4-157 4 show inte rfaces status This comm and disp lays the status for an int erface . Syntax show in terface s status [ inte rfac e ] inte rface • etherne t unit / port - unit - This is devic e 1. - port - Port number . • port-chann el cha nnel-id (Rang e: 1-6) • vlan vlan-i d (Ra nge: 1- 4094 ) Default Sett ing Shows the[...]

Command Line I nterface 4-158 4 show inte rfaces counte rs This c omman d disp lays i nterfac e statist ics. Syntax show i nterf aces counters [ in terface ] interfa ce • etherne t unit / port - unit - This is devic e 1. - port - Port number. • port-chann el cha nnel-id (Rang e: 1-6) Default Sett ing Shows the co unte rs for all interfa ces. Co[...]

Interface Co mmands 4-159 4 show inte rfaces swi tchport This comm and disp lays t he admi nistrati ve and oper ationa l status of the spe cified int er fac es . Syntax show i nterface s sw itchpo rt [ interface ] inte rface • etherne t unit / port - unit - This is devic e 1. - port - Port number . • port-chann el cha nnel-id (Rang e: 1-6) Defa[...]

Command Line I nterface 4-160 4 Mirror Port Commands This secti on descr ibes how to mirror tra ffic from a sour ce port to a target port. port monitor This c omman d co nfigures a mi rror sessio n. Use the no form to clear a mi rror session . Syntax port mo nitor interface [ rx | tx | both ] no port monitor in te rfac e • int er fac e - ethern e[...]

Mirror Por t Commands 4-161 4 Command Usage • You can mirror tra ffic from an y source port to a de stination po rt for real -time analysis . You can th en attac h a logic anal yzer or RM ON pro be to the destinat ion por t and study the tra ffic cro ssing the s ourc e port in a c omp letely unobtr usive mann er. • The destina tion por t is set[...]

Command Line I nterface 4-162 4 Example The follow ing show s mirrori ng configu red from port 6 to por t 1 1: Rate Limit Commands This funct ion allows the netwo rk manag er to cont rol the maxi mum r ate for traffic transmi tted or rec eived on an interfa ce. Rate limi ting is co nfigured on interfa ces at the edge of a network to limit tr affic [...]

Link Aggregati on Commands 4-163 4 Example Link Aggregation Comma nds Ports can be statica lly groupe d into an aggregat e link (i.e., trunk) to incr ease the bandwidth of a networ k connect ion or to ens ure faul t recove ry . Or you can us e the Link Aggr egation Con trol Prot ocol (LA CP) to autom atically ne gotiate a t runk link between this s[...]

Command Line I nterface 4-164 4 channel-gro up This comm and a dds a port t o a trunk . Use the no form to remove a port f rom a trun k. Syntax channel-group chan nel-id no channel-grou p channel-id - T runk index (Range: 1-6) Default Sett ing The current port will be added to this trunk. Command Mode Interface C onfigur ation (P ort Chann el) Comm[...]

Link Aggregati on Commands 4-165 4 • If the targ et swit ch has al so ena bled LACP on th e conn ected po rts, the tr unk will be activated automatic ally. • If more than four por ts attached t o the same tar get switch ha ve LACP enabled , the additio nal por ts will b e pla ced in standb y m ode, an d will o nly be enabled if one of the activ[...]

Command Line I nterface 4-166 4 Address Table Command s Thes e comma nds ar e used t o confi gur e the addr ess tabl e for f ilte ring speci fied addr esse s, dis play ing cu rren t entr ies , clea ring the ta ble, or set ting t he agi ng time . mac-addr ess-table stati c This comm and maps a static ad dress to a destina tion port in a VL AN. Use t[...]

Address T able Co mmands 4-167 4 Command Usage The static add ress for a host device ca n be assi gned to a specific po rt within a specifi c VLAN. Use th is comman d to add static addresse s to the MA C Address T able. S tatic addresse s have th e followi ng charac teristics : • Static a ddresses will n ot be removed from the address tabl e when[...]

Command Line I nterface 4-168 4 Default Sett ing None Command Mode Privileged Exec Command Usage • The MAC Address Ta ble co ntains the MAC add resses as sociat ed with ea ch interface. Note tha t the Type fiel d may incl ude the follow ing type s: - Lear ned - Dyna mic a ddr ess en tri es - Perm anen t - Static en try - Delet e-on-res et - Stati[...]

Spanning Tree Commands 4-169 4 Example show ma c-address-tab le aging-time Thi s comma nd show s the agi ng tim e for en trie s in th e addres s ta ble. Default Sett ing None Command Mode Privileged Exec Example Spanning Tree Command s This secti on include s comm ands that config ure the Sp anning T ree Algo rithm (ST A) globally fo r the switch ,[...]

Command Line I nterface 4-170 4 span nin g-t ree This comm and enables the S panning Tree Algor ithm gl obally for t he swit ch. Use t he no form to d isable it. Syntax [ no ] sp anning-tree Default Sett ing S panning tree is ena bled. Command Mode Global Co nfigurat ion Command Usage The S panning Tree Algorithm (ST A) can be us ed to detect and d[...]

Spanning Tree Commands 4-171 4 Example This examp le show s how to ena ble the Sp anning T ree Algo rithm for the switch: spanning-tre e mode This comm and se lects the spanning tree mod e for this sw itch. Us e the no form to restore t he default . Syntax spanning-tree mode { stp | rs tp | mstp } no spanning-tree mode • stp - Spann ing Tree Prot[...]

Command Line I nterface 4-172 4 • Multiple S panni ng T ree Pr otocol - To a llow mu ltiple spann ing tree s to oper ate over the network, you must configur e a related se t of bridge s with th e same M STP confi guration , allowing them to p articipa te in a spe cific s et of span ning tr ee ins tance s. - A sp anning t ree instan ce can ex ist [...]

Spanning Tree Commands 4-173 4 spanning-tre e hello-time This comm and co nfigures the spannin g tree bridge he llo time gl obally fo r this switch. Use t he no form to re store the d efault . Syntax spanning-tree hello-time ti me no spanning-tree hello-tim e time - T ime in seconds. (Range: 1-10 seconds). The maximum value is the lower of 10 or [([...]

Command Line I nterface 4-174 4 configur ation mess age) bec omes the desi gnated por t for the attached LAN. If it is a root port, a new root po rt is selecte d from amo ng the devi ce ports attached to the ne twork . Example spanning-tre e priority This c omman d co nfigures the s panning tree p riority g lobally for this switch. Use t he no form[...]

Spanning Tree Commands 4-175 4 Default Sett ing Long met hod Command Mode Global Co nfigurat ion Command Usage The path cost me thod is us ed to dete rmine th e best path betwee n device s. Therefo re, lowe r value s sho uld be assigne d to ports attach ed to fas ter m edia, and hi gher va lues a ssigned to ports wit h slow er m edia. N ote tha t p[...]

Command Line I nterface 4-176 4 Command Mode Global Co nfigurat ion Example Related Commands mst vlan (4-176 ) mst prio rity (4-1 77) nam e (4 -177 ) revisi on (4- 178) max-ho ps (4-1 79) mst vl an Thi s com mand adds VLAN s to a sp anni ng tr ee in st ance. Use t he no fo rm to remove the spec ified VLA Ns. Usin g the no form w ithout a ny VLAN pa[...]

Spanning Tree Commands 4-177 4 Example mst priority This c omman d co nfigures the p riority of a spannin g tree instance. Use the no form to restor e the defaul t. Syntax mst instance_id prior ity priority no mst instance_ id prio rit y • instance _id - Insta nce id entifier of th e spann ing tree. (Range: 0- 64) • priority - Prior ity of the [...]

Command Line I nterface 4-178 4 Default Sett ing Switch’s MAC ad dress Command Mode MST Conf iguration Command Usage The MST re gion nam e and revisi on numbe r (page 4-178 ) are used to designa te a unique M ST reg ion. A bridge (i.e., spann ing-tree com plia nt device suc h as th is sw itch ) can only belo ng to on e MST regi on. An d all bri d[...]

Spanning Tree Commands 4-179 4 max-hops This comm and co nfigures the maxim um num ber of hops in th e region before a BPDU is discar ded. U se the no form to rest ore the de fault. Syntax max-h op s hop-numb er hop-number - M aximum hop num ber for multiple spanning tree. (Range: 1-40) Default Sett ing 20 Command Mode MST Conf iguration Command Us[...]

Command Line I nterface 4-180 4 span nin g-t ree cost This comm and co nfigures the spanning tree path cost for the spec ified inter face. Use t he no form to re store the d efault . Syntax spanning-tree cost co st no spanning-tree co st cost - The path cost for the port. (Range: 1- 200,000,000)) The recommended r ange is: • Etherne t: 200,000 -2[...]

Spanning Tree Commands 4-181 4 Default Sett ing 128 Command Mode Interface C onfigur ation (E thernet, P ort Chann el) Command Usage • This comm and de fines the pri ority for the us e of a port in the Sp anning Tr ee Alg orith m. I f the p ath co st fo r all port s on a sw itch are th e sam e, the port with the highest priority (that is, lowest [...]

Command Line I nterface 4-182 4 Example Related Commands spanning-tr ee po rtfast (4- 182) spanning-tre e portfast This command set s an interf ace to fas t forwarding. Use t he no form to d isable fast forwar ding. Syntax [ no ] sp anning-tree portfast Default Sett ing Disabled Command Mode Interface C onfigur ation (E thernet, P ort Chann el) Com[...]

Spanning Tree Commands 4-183 4 spanning-tre e link-type This c omman d co nfigures the li nk typ e for Rapid Sp anning Tree and M ultiple S panning Tree. Use t he no form to restor e the defaul t. Syntax spanning-tree link -type { auto | point-to-po int | shared } no spanning-tree lin k-type • auto - Auto matica lly deriv ed from the duplex m ode[...]

Command Line I nterface 4-184 4 Default Sett ing • Etherne t – half duplex : 2,000,00 0; full du plex: 1,00 0,000; trunk: 500, 000 • Fast Ether net – half dup lex: 200 ,000; full duplex: 100, 000; trun k: 50,00 0 • Gigabit Et hernet – full duplex: 10, 000; trun k: 5,000 Command Mode Interface C onfigur ation (E thernet, P ort Chann el) [...]

Spanning Tree Commands 4-185 4 interface with the highest priority (t hat is, lo west value) will be configured as an active l ink in the sp anning tre e. • Where mor e than one interfac e is assi gned the high est prior ity, the inter face with lowest n umeric identifi er will be enabl ed. Example Related Commands spanning-tr ee ms t cost (4-1 8[...]

Command Line I nterface 4-186 4 show sp anning-tree This c omman d show s the configu ration for t he com mon s panning t ree ( CST) or for an instance withi n the multiple spa nning tree (MST). Syntax show s panning-tree [ in terface | mst instance_id ] • int er fac e • etherne t unit / port - unit - This is devic e 1. - port - Port number. ?[...]

Spanning Tree Commands 4-187 4 Example Console#show spanning-tree Spanning-tree information ----------------------------------------- ---------------------- Spanning tree mode :MSTP Spanning tree enable/disable :enable Instance :0 Vlans configuration :1-4094 Priority :32768 Bridge Hello Time (sec.) :2 Bridge Max Age (sec.) :20 Bridge Forward Delay [...]

Command Line I nterface 4-188 4 show sp anning-tree ms t configuration This c omman d sh ows the con figuratio n of t he multiple spanning tree . Command Mode Privileged Exec Example VLAN Commands A VLAN is a gro up of ports that ca n be locat ed anyw here in the ne twork, but comm unicate as t hough they belo ng to the sam e phys ical segm ent. Th[...]

VLAN Commands 4-189 4 Editing VLAN Groups vlan databas e This comm and ente rs VLAN da tabase mode. All comm ands in this m ode will take effect imm ediatel y . Default Sett ing None Command Mode Global Co nfigurat ion Command Usage • Use the VLAN data base co mmand mo de to add, c hange , and delete VLANs . After finishi ng con figuratio n chang[...]

Command Line I nterface 4-190 4 vlan This co mmand configur es a VLAN. Use the no form to restore the defau lt settings or de lete a VL AN . Syntax vlan vlan-i d [ name vl an-nam e ] m edia ethe rnet [ st ate { act ive | suspen d }] no vlan vlan-id [ na me | state ] • vlan-i d - ID of con figur ed VLAN. (Ran ge: 1-40 94, no leadi ng zeroe s) • [...]

VLAN Commands 4-191 4 Configuring VLAN Inte rfaces interfac e vlan This comm and ente rs interfac e configur ation mod e for VLANs , which is use d to configur e VLAN param eters for a physic al interfac e. Syntax interf ace vlan vlan -id vlan-id - ID of the configured VLAN. (Range: 1-4094, no leading zeroes) Default Sett ing None Command Mode Glob[...]

Command Line I nterface 4-192 4 switchpo rt mode This comm and co nfigures the VLAN me mbersh ip mode for a port. Us e the no form to restor e the defaul t. Syntax switchport mode { trunk | hybri d } no switchport mode • trunk - Spe cifies a port as an end-p oint for a V LAN trunk. A t runk is a direct link betw een tw o swit ches, so the p ort t[...]

VLAN Commands 4-193 4 Command Mode Interface C onfigur ation (E thernet, P ort Chann el) Command Usage When set to receive all frame typ es, any re ceived fra mes that ar e untagged are assigne d to the def ault VLAN . Example The follow ing exam ple shows how to re strict the tra ffic received on port 1 to tagged fram e s: Related Commands switch [...]

Command Line I nterface 4-194 4 Example The follow ing exam ple shows how to se t the interf ace to por t 1 and then enable ingress fil tering: switchpo rt native v lan This command configures the PVID (i.e., default VLAN ID) for a port. Use the no form to rest ore the d efault. Syntax switchpo rt nativ e vlan vlan-id no switchp ort nati ve vlan vl[...]

VLAN Commands 4-195 4 switchpo rt allowed v lan This c omman d conf igures VLAN groups o n th e sele cted int erfac e. Use the no form to restor e the defaul t. Syntax switchpo rt allo wed vlan { add vlan- list [ t a gged | untagged ] | remo ve vlan -list } no switchp ort allo wed vlan • add vlan-l ist - Lis t of VLAN ident ifi er s to ad d. • [...]

Command Line I nterface 4-196 4 switchpo rt forbidden vlan This c ommand conf igures f orbidden VLAN s. Us e the no form to remove the list of forbidde n VLANs. Syntax switchport forbidden vlan { add vlan-li st | re move vlan-list } no switchp ort forbi dden vlan • add vlan-l ist - Lis t of VLAN ident ifi er s to ad d. • remo ve vlan-li st - Li[...]

VLAN Commands 4-197 4 Displaying VLAN Information show vl an This c omman d show s V LAN infor mation. Syntax show v lan [ id vlan-id | name vlan-name ] • id - Key word to be foll owed by the VLAN ID. vlan-i d - ID of th e configu red V LAN. (Ran ge: 1-4 094, no leadin g zeroe s) • name - Keyw ord to be foll owed by the VLAN nam e. vlan-n ame -[...]

Command Line I nterface 4-198 4 Configuring Pri vate VLANs Private VLA Ns prov ide port- based secu rity and is olation between por ts within the assigne d VLA N. Thi s sect ion des cribes comm ands used to c onfigure priva te VlA Ns. pvlan This comm and en ables or con figures a p rivate VLAN. Use th e no form t o dis able the private VLAN . Synta[...]

VLAN Commands 4-199 4 show pv lan This comm and disp lays the con figured pr ivate VLAN . Command Mode Privileged Exec Example Configuring Prot ocol-based VLANs The net work d evices required to support m ultipl e proto cols c annot b e easily group ed into a common VLAN. This may require non-standard devices to pass traf fic between d ifferent VLA[...]

Command Line I nterface 4-200 4 protocol-vla n protocol-group ( Confi guring Gr oups) Thi s comman d creat es a pr otocol gro up, or to ad d speci fic prot ocols t o a group. Use the no f orm to rem ove a pro tocol grou p. Syntax protocol-vlan protoco l-group group-i d [{ add | re move } fra me -typ e fr am e protocol-type protoc ol ] no protocol-v[...]

VLAN Commands 4-201 4 Command Usage • When cre ating a pro tocol-bas ed VLAN, only ass ign interfaces via this comm and. If you as sign inte rfaces u sing any of th e other VLAN comm ands (such as vlan on page 4-190), these in terfaces will admit traffic of any protocol typ e into t he asso cia ted VLA N. • Wh en a f rame ente rs a port that ha[...]

Command Line I nterface 4-202 4 show inte rfaces protoco l-vlan protocol -group This comm and sh ows the ma pping from proto col groups to VLA Ns for the selected int er fac es . Syntax show interface s protocol-vlan prot ocol-group [ interface ] interfa ce • etherne t unit / port - unit - This is devic e 1. - port - Port number. • port-chann e[...]

GVRP and Bridge Extens ion Commands 4-203 4 GVRP and Bridge Extens ion Commands GARP VL AN Regi stration P rotocol de fines a wa y for switch es to exch ange VLA N informat ion in order to automa tically reg ister VLAN m ember s on interf aces acro ss the netwo rk. This se ction de scribes how to en able GV RP for ind ividual int erface s and globa[...]

Command Line I nterface 4-204 4 show bridg e-ext Thi s comm and s hows the confi gurat ion for brid ge ex tens ion comman ds. Default Sett ing None Command Mode Privileged Exec Command Usage See “Dis play ing Basi c VLA N Inf or mati on” on pa ge 3-126 an d “Dis play ing Bridge E xtension C apabilities ” on page 3-14 for a de script ion of [...]

GVRP and Bridge Extens ion Commands 4-205 4 show gv rp configuration This c omman d sh ows if G VRP is enabled . Syntax show g vrp configur ation [ interface ] inte rface • etherne t unit / port - unit - This is devic e 1. - port - Port number . • port-chann el cha nnel-id (Rang e: 1-6) Default Sett ing Shows bo th globa l and interfa ce-spec i[...]

Command Line I nterface 4-206 4 Command Usage • Group Ad dres s Reg istration Protocol is u sed by GVR P and GMRP to registe r or deregi st er cl ient att rib utes for clien t se rvic es wi thi n a br idge d LAN . Th e default v alues for the G ARP timers are i ndepende nt of the media acce ss metho d or data rat e. These va lues shou ld not be c[...]

Priority Co mmands 4-207 4 Related Commands garp timer (4-2 05) Priority Commands The comm ands des cribed in this sect ion allow y ou to sp ecify which data packets have grea ter prec edence w hen traffic is buffered in the switc h due to con gestio n. This switch suppor ts CoS with e ight priority queue s for each port. Dat a pack ets in a port?[...]

Command Line I nterface 4-208 4 queue mod e This comm and se ts the queue mode to str ict priority or Weighted Roun d-Rob in (WR R) for the c lass of se rvic e (C oS) pr ior ity q ueues . Us e the no form t o re sto re the default va lue. Syntax queue mod e { strict | wrr } no queue mod e • strict - Se rvices the egress queues in sequential order[...]

Priority Co mmands 4-209 4 switchpo rt priority default This comm and se ts a priority for inc oming u ntagged fram es. Use th e no form to restore t he default value. Syntax switchport priority default de fault-p riority-id no switchport priority default default-priority-id - The pri ority number for untagged i ngress traffic. The priority is a nu[...]

Command Line I nterface 4-210 4 queue ban dwidth Thi s comm and a ssig ns we ight ed r ound-r obi n (WR R) we ight s t o th e eigh t cl ass o f service (Co S) prior ity queues . Use the no form to res tore th e default wei ghts. Syntax queue bandwidth weight1...weight4 no queue bandwidth weight1...weight4 - The ratio of weights for queues 0 - 7 det[...]

Priority Co mmands 4-211 4 Default Sett ing This switc h supports Clas s of Service by using eight priority que ues, with Weighted Ro und Robin queuing f or each por t. Eight separat e traffic classes are defi ned in IEEE 802. 1p. The defau lt priority levels a re assi gned acc ording to recomm endatio ns in the IE EE 802.1p standa rd as sh own bel[...]

Command Line I nterface 4-212 4 Example show que ue bandwi dth This command dis plays the weighted r ound-robin (WRR) bandwid th allocati on for the eight p riority queu es. Default Sett ing None Command Mode Privileged Exec Example show que ue cos-map This co mmand sho ws the cla ss of se rvice pr iori ty map. Syntax show q ueue cos-ma p [ interfa[...]

Priority Co mmands 4-213 4 Example Priorit y Commands (Layer 3 and 4) map ip port (Gl obal Co nfiguratio n) Use this command to enable IP p ort mapping ( i.e., class of service ma pping for TCP/UDP soc kets). Use the no for m to d isa ble I P por t ma ppin g. Syntax [ no ] m ap ip port Default Sett ing Disabled Command Mode Global Co nfigurat ion C[...]

Command Line I nterface 4-214 4 Example The follow ing exam ple shows how to en able TCP/ UDP port ma pping glob ally: map ip port (Inte rface Confi guration) This command set s IP port p riority (i .e., TCP/UDP port pri ority). Use the no form to remove a sp ecific setti ng. Syntax map ip port port-num ber cos co s-valu e no map ip port po rt-num [...]

Priority Co mmands 4-215 4 Command Usage • The prece dence for priority m apping is I P Port, IP Pre ceden ce or IP DS CP, and defau lt switch port prior ity. • IP Prece dence and IP DSC P cann ot both be e nabled. Enabling one of these priority types will a utomatically dis able the other type. Example The follow ing exam ple shows how to en a[...]

Command Line I nterface 4-216 4 map ip ds cp (Globa l Configurat ion) This comm and enabl es IP DS CP mapp ing (i.e., Different iated Serv ices Code Point mapping) . Us e the no form t o di sabl e IP DSCP m appin g. Syntax [ no ] m ap ip dscp Default Sett ing Disabled Command Mode Global Co nfigurat ion Command Usage • The prece dence for priorit[...]

Priority Co mmands 4-217 4 Default Sett ing The DS CP def ault value s are de fine d in the f ollo win g tabl e. Not e th at all the DSCP values that a re n ot spec ified a re ma pped to CoS value 0. Command Mode Interface C onfigur ation (E thernet, P ort Chann el) Command Usage • The prece dence for priority m apping is I P Port, IP Pre ceden c[...]

Command Line I nterface 4-218 4 Default Sett ing None Command Mode Privileged Exec Example The follow ing show s that HTT P traffic has be en mappe d to CoS va lue 0: Related Commands map ip port ( Global Configuratio n) (4-213) map ip port (Interface Configur ation ) (4-214) show ma p ip precede nce This comm and sh ows the IP pr ecedenc e priorit[...]

Priority Co mmands 4-219 4 Example Related Commands map ip prec edenc e (Global C onfigura tion) ( 4-214) map ip prec edenc e (Interface Configur ation ) (4-215) show ma p ip dscp This comm and sh ows the IP DS CP prio rity map. Syntax show m ap ip dscp [ interf ace ] inte rface • etherne t unit / port - unit - This is devic e 1. - port - Port nu[...]

Command Line I nterface 4-220 4 Example Related Commands map ip dscp ( Globa l Configur ation) (4-21 6) map ip d scp (I nt erfa ce Conf igu rati on) (4-2 16) Multicast Filtering Comma nds This switc h uses IGM P (Interne t Group M anagem ent Protoco l) to que ry for any attached ho sts that want to re ceive a spe cific mul ticast servic e. It ide n[...]

Multicast Filte ring Commands 4-221 4 IGMP Snooping Commands ip igmp sn ooping This comm and enables IGMP sn ooping o n this switch. U se the no form t o di sable i t. Syntax [ no ] ip igm p snooping Default Sett ing Enabled Command Mode Global Co nfigurat ion Example The follow ing exam ple enab les IGM P snoopin g. ip igmp sn ooping vlan static T[...]

Command Line I nterface 4-222 4 Command Mode Global Co nfigurat ion Example The follow ing show s how to static ally conf igure a mult icast grou p on a por t: ip igmp sn ooping versio n This c omman d conf igures t he IG MP s nooping versi on. Us e the no form to res tore the defaul t. Syntax ip igmp s nooping version { 1 | 2 } no ip igmp snooping[...]

Multicast Filte ring Commands 4-223 4 Command Usage See “Con figurin g IGMP Snoopin g and Q uery Pa rameter s” on page 3-154 for a descrip tion of the di splayed items. Example The fo llowing shows the current IGMP snoo ping c onfigu ration: show ma c-address-tab le multicast This comm and sh ows know n multic ast addr esses. Syntax show m ac-a[...]

Command Line I nterface 4-224 4 IGMP Query Commands (Layer 2) ip igmp sn ooping qu erier This co mmand enab les the s witch a s an IGMP queri er . Use the no form to dis able it. Syntax [ no ] ip igm p snooping qu erier Default Sett ing Enabled Command Mode Global Co nfigurat ion Command Usage If enabled , the switc h will serve as qu erier if elec[...]

Multicast Filte ring Commands 4-225 4 Default Sett ing 2 times Command Mode Global Co nfigurat ion Command Usage The que ry c ount de fines how long t he q uerier wa its for a respo nse f rom a multicas t client befor e taking action. If a queri er has sent a num ber of queri es defined by t his co mman d, but a clie nt has not respon ded, a coun t[...]

Command Line I nterface 4-226 4 ip igmp sn ooping qu ery-max-respo nse-time This c omman d co nfigures the q uery r eport delay . Use the no form to res tore the default. Syntax ip igmp s noopin g query-m ax-respons e-time seco nds no ip igmp snooping que ry-max-res ponse-time seconds - The report delay a dvertised in IGMP quer ies. (Range: 5-30) D[...]

Multicast Filte ring Commands 4-227 4 Default Sett ing 300 secon ds Command Mode Global Co nfigurat ion Command Usage The swit ch must use IGMPv 2 for thi s command to tak e effe ct. Example The follow ing show s how to con figure the defaul t timeou t to 300 second s: Related Commands ip i gmp s noo ping v ers ion ( 4-22 2) Static Multi cast Routi[...]

Command Line I nterface 4-228 4 Command Usage Depend ing on your network connec tions, IGMP snoopi ng may not always be able to loca te the IGMP querier. Theref ore, if the IGM P queri er is a known multicast router/ switch co nnected over the ne twork to an interfac e (port or tru nk) on your ro uter , you ca n manu ally co nfi gure t hat in terf [...]

Multicast Filte ring Commands 4-229 4 IGMP Com man ds (Layer 3) ip igmp This comm and en ables IGMP on a VLAN interface. Use the no form of th is comm and to disable IGMP on the specif ied interfa ce. Syntax [ no ] ip igmp Default Sett ing Disabled Command Mode Interface C onfigur ation (VLAN ) Command Usage IGMP query ca n be enab led globa lly at[...]

Command Line I nterface 4-230 4 Related Commands ip i gmp s noo ping ( 4-22 1) show ip ig mp snoopin g (4-2 22) ip igmp robu stval This c omman d sp ecifies the r obustne ss ( i.e., ex pecte d packet loss) for this int erf ace. Use t he no for m of this command to restore the default val ue. Syntax ip igmp robu stval ro bust-va lue no ip igmp robus[...]

Multicast Filte ring Commands 4-231 4 Command Usage • Multicas t routers se nd host query mes sages to de termin e the interfac es tha t are conne cted to do wnstrea m hos ts reque sting a sp ecific mul ticast se rvice. Only the design ated mu lticast router fo r a subne t sen ds hos t query me ssage s, which are addresse d to the m ulticas t add[...]

Command Line I nterface 4-232 4 Related Commands ip ig mp ver sio n (4 -23 2) ip i gmp query- interval (4-230) ip igmp la st-memb-query -interval This c omman d co nfigures the l ast me mber query inte rval. Us e the no form of this comma nd to restor e the de faul t. Syntax ip igmp last-memb-query-inte rval seco nds no ip igmp last-mem b-qu ery-in[...]

Multicast Filte ring Commands 4-233 4 Command Mode Interface C onfigur ation (VLAN ) Command Usage • Al l ro uter s on t he s ubnet must supp ort the same ve rsio n. H owever , t he multicas t hosts on the subnet may supp ort eithe r IGMP ve rsion 1 or 2. • The swit ch must be set to v ersion 2 to enable the ip igm p max-r esp-inter val (page 4[...]

Command Line I nterface 4-234 4 clear ip ig mp group Thi s co mm an d de le tes e ntr ie s fro m the IGM P c ach e. Syntax clear ip igm p grou p [ group-addr ess | interface vlan vlan-id ] • grou p-a ddre ss - IP ad dres s of the multica st group . • vlan-i d - VLAN ID (Range : 1-4094) Default Sett ing Deletes all entries in the cach e if no op[...]

Multicast Filte ring Commands 4-235 4 • If the re are Version 1 ho sts present for a particular grou p, the switch will ignore any Leave Group m essag es that it rec eives for t hat group. Example The following shows the IGMP groups currently active on VLAN 1: Consol e#sh ow ip ig mp grou ps vla n 1 Group Addr ess I nterf aceVla n Last repo rter [...]

Command Line I nterface 4-236 4 IP Interface Commands There are no IP addre sses as signed to t his router by defaul t. Y ou mu st manu ally configur e a new add ress to m anage the router over your n etwork or to connec t the router t o existi ng IP subne ts. Y ou may al so need to a establish a def ault gate way between t his dev ice and m ana ge[...]

IP Interface Co mmands 4-237 4 Default Sett ing IP addr ess: 0.0.0.0 Net mas k: 255 .0 .0.0 Command Mode Interface C onfigur ation (VLAN ) Command Usage • If this router is directly connecte d to end nod e devices (or conne cted to en d nodes vi a shared m edia) that will be assi gned to a specific su bnet, the n you must crea te a router interfa[...]

Command Line I nterface 4-238 4 Example In the follo wing exam ple, the de vice is assi gned an address in VLAN 1. Related Commands ip dhcp restar t client ( 4-127) ip default-g ateway This command specifies t he default gateway for dest inations not found in t he local routing table s. Use the no form to remov e a defa ult ga tewa y . Syntax ip de[...]

IP Interface Co mmands 4-239 4 show ip interface This command dis plays the setti ngs of an IP inte rface. Default Sett ing All interfaces Command Mode Privileged Exec Example Related Commands show ip red irec ts (4-2 39) show ip redirects This comm and sh ows the d efault ga teway conf igure d for this de vice. Default Sett ing None Command Mode P[...]

Command Line I nterface 4-240 4 Default Sett ing This comm and ha s no default for the host. Command Mode Normal Exec, Priv ileged Exec Command Usage • Us e the pi ng co mmand to see if anothe r si te on th e netwo rk can be rea ched. • The follow ing are so me resul ts of the ping command: - Normal resp onse - The norm al resp onse occur s in [...]

IP Interface Co mmands 4-241 4 Address Resolut ion Protocol ( ARP) arp This comm and ad ds a static entry in the Addres s Resolut ion Protoc ol (AR P) cache. Use t he no form to r emove an entry fro m the cache. Syntax arp ip-addr ess ha rdware- address no arp ip-a dd ress • ip-a ddre ss - IP addres s to map to a spe cified ha rdwar e address . ?[...]

Command Line I nterface 4-242 4 arp-time out This comm and se ts the aging time f or dynam ic entries i n the Addr ess Reso lution Protocol (ARP) ca che. Use th e no form to restore the default. Syntax arp-timeou t seco nds no arp-timeo ut seconds - The time a dynam ic entry remains in the ARP cache. (Range: 300-86400; 86400 is one day) Default Set[...]

IP Interface Co mmands 4-243 4 Command Usage This comm and disp lays infor mation ab out the ARP cache. The first line sho ws the cache timeout . It also sho ws each c ache entr y , including the corres ponding IP address , MAC ad dress, type (static, dyna mic, othe r), and VLAN in terfac e. Not e that entry type “other” indic ates loc al add r[...]

Command Line I nterface 4-244 4 IP Routing Commands After you configu re networ k interfac es for this router, you must set the paths use d to send tra ffic between differe nt interfac es. If you ena ble routi ng on this dev ice, traffic will auto maticall y be forwar ded betwe en all of th e local su bnetwor ks. How ever , to forwar d traffic to d[...]

IP Routing Co mmands 4-245 4 Command Usage • The comm and a ffects both st atic and dy namic unicast routing. • If IP routing is enabled, all IP packets ar e routed us ing either static routing or dynamic r outing via RIP or OSP F, and ot her pack ets for all non-IP p rotocols (e. g., Ne tBue i, Net Ware or Apple Talk) are swi tche d based on M[...]

Command Line I nterface 4-246 4 clear ip route Thi s comm and r emove s dyn amica lly lea rned e ntri es f rom the I P rou ting ta ble. Syntax clear ip route { netwo rk [ netma sk ] | * } • network – Networ k or subne t address . • netma sk - Net work mask fo r the assoc iated I P subn et. This m ask id entifies the host ad dress bit s used f[...]

IP Routing Co mmands 4-247 4 Example show ip host-route This comm and disp lays the interfac e associ ated with kn own route s. Command Mode Privileged Exec Example Consol e#sh ow i p ro ute Ip A ddre ss Ne tmask N ext Hop Protoc ol Metr ic I nter face ------ ---- ---- - ---- ---- ------ - ---- ---- ---- --- --- ---- --- ---- -- --- ---- -- 0.0.0.0[...]

Command Line I nterface 4-248 4 show ip traffic This comm and disp lays statistic s for IP , ICMP , UDP , TCP and ARP prot ocols. Command Mode Privileged Exec Command Usage For a descr iption of th e informa tion shown by this com mand, see “Display ing S tatistics for IP Proto cols” on page 3 -205. Example Routing Infor mation Protocol (RIP) C[...]

IP Routing Co mmands 4-249 4 router rip This comm and en ables Rou ting Info rmation Protocol (R IP) routi ng for all IP int erf aces on th e rou ter . Use the no form to disable i t. Syntax [ no ] r outer rip Command Mode Global Co nfigurat ion Default Sett ing Disabled Command Usage • RI P is used t o sp ecif y ho w rou ters exc hange rout ing [...]

Command Line I nterface 4-250 4 Default Sett ing Upda te: 30 seco nds T imeout : 180 seco nds Garba ge collect ion: 120 sec onds Command Usage •T h e update time r sets th e rate at wh ich updates are sen t. This is the fundamen tal tim er used to cont rol all basi c RIP proc esses . •T h e tim eou t timer is the time after which there have bee[...]

IP Routing Co mmands 4-251 4 Command Usage • RIP only s ends up dates to inter faces sp ecified b y this com mand. • Subne t addresses are interp reted as c lass A, B or C, ba sed on the f irst field in the specif ied add ress . In othe r w ords, if a sub net add ress nnn.xxx .xxx .xxx is entered , the first fi eld (nnn) det ermine s the clas s[...]

Command Line I nterface 4-252 4 vers ion This comm and sp ecifies a RIP ve rsion us ed global ly by the ro uter . Use the no form to restor e the defaul t value. Syntax version { 1 | 2 } no version • 1 - RIP V ers ion 1 • 2 - RIP V ers ion 2 Command Mode Rout er C onfi gura tion Default Sett ing RIP V ersion 1 Command Usage • When th is comma[...]

IP Routing Co mmands 4-253 4 ip rip receive v ersion This command specifies a RIP version to receive on an in terface. Use the no form to restore t he default value. Syntax ip rip receiv e versio n { none | 1 | 2 | 1 2 } no ip rip receive version • none - Does no t acce pt incoming RIP packets. • 1 - Accepts only RIPv1 packets. • 2 - Accepts [...]

Command Line I nterface 4-254 4 ip rip send version This command specifie s a RIP version to send on an interf ace. Use the no for m to restore t he default value. Syntax ip rip send ver sion { none | 1 | 2 | v2-broadca st } no ip rip send version • none - Do es not tr ansmi t RI P upda tes . • 1 - Sends only RIPv1 packe ts. • 2 - Sends only [...]

IP Routing Co mmands 4-255 4 ip split-horiz on This comm and en ables spli t-horizo n or poison- revers e (a variation ) on an int erface . Use t he no form to dis able split- horizon. Syntax ip split-horizon [ poison-reverse ] no ip split-horizon poison-reverse - E nables poison -rever se on the c urrent interfac e. Command Mode Interface C onfigu[...]

Command Line I nterface 4-256 4 • For auth entication to functio n proper ly, both th e sending and recei ving interfa ce must be co nfigur ed with the sa me pa ssword . Example This examp le sets an authe nticat ion passwor d of “smal l” to verify in comin g routing messag es and to tag ou tgoing rou ting mess ages. Related Commands ip rip a[...]

IP Routing Co mmands 4-257 4 show rip g lobals This c omman d disp lays g lobal confi guration settin gs for RIP . Command Mode Privileged Exec Example show ip rip This c omman d disp lays i nforma tion a bout i nterfac es co nfigured fo r RIP . Syntax show ip rip { c onfi gur atio n | st atus | peer } • co nfig ura tion - S hows RIP c onfigu rat[...]

Command Line I nterface 4-258 4 Example Console #show ip rip c onfig uration In terfa ce S endMo de Rec eiveM ode P oison Authe ntica tion ------- ----- --- ----- ----- ----- - ---- ----- --- - ---- -------- - -- ----- ----- ---- -- 10 .1.0. 253 rip1 Compa tible R IPv1O rv2 Spl itHorizo n noAut henti cati on 10 .1.1. 253 rip1 Compa tible R IPv1O rv[...]

IP Routing Co mmands 4-259 4 Open Shortest Path First (OS PF ) T able 4-85 Open S hortest Path Fi rst Com mand s Comman d Function M ode P age General C onfigu ration router ospf E nables or disable s OSPF GC 4 -260 router-id S ets the router ID for this device RC 4-260 compatibl e rfc15 83 C alculates s umma ry route costs using R FC 1583 (OSPF v1[...]

Command Line I nterface 4-260 4 router ospf This c ommand enables Open Shor test Pat h First (OSPF) routing for al l IP inter faces on th e rout er . Use the no form to disable it . Syntax [ no ] router ospf Command Mode Global Co nfigurat ion Default Sett ing Disabled Command Usage • OSPF is used to specify how router s exch ange routi ng table [...]

IP Routing Co mmands 4-261 4 Command Usage • The rout er ID mus t be unique fo r every ro uter in the autonomou s syst em. Usi ng th e de faul t se tti ng bas ed on the lowe st i nte rfac e add ress ensu res that each rou ter ID is unique . Also, note t hat you canno t set the router I D to 0.0 .0.0 or 255 .255.25 5.255. • If this router alre a[...]

Command Line I nterface 4-262 4 default-inform ation originate This comm and ge nerates a def ault exte rnal rout e into an auto nomous system . Use the no form t o disabl e th is feat ure. Syntax default-inform ation originate [ alw ays ] [ met ric interf ac e-m et ric ] [ metric-t ype metric -typ e ] no default-informat ion originate • always -[...]

IP Routing Co mmands 4-263 4 Related Commands ip route (4-245) redistribute (4-266) timers spf This comm and co nfigures the hold time betwee n makin g two conse cutive shortes t path first (SPF) ca lculations . Use the no form to restore the default value. Syntax timers spf spf-holdtime no timers spf spf-holdtime - Minim um time be tween two conse[...]

Command Line I nterface 4-264 4 area rang e This comm and sum marizes the routes ad vertised by an Area Border Router (ABR) . Use t he no form to dis able this funct ion. Syntax [ no ] ar ea area-id ra nge ip-address netmask [ adv ertis e | no t-adver tise ] • area-id - Iden tifi es an are a fo r whi ch th e ro utes are s ummar ize d. (The area I[...]

IP Routing Co mmands 4-265 4 Default Sett ing 1 Command Usage • If you e nter this comman d for a normal area, it will changed to a stub. • If t he default c ost is set to “0,” t he router will not a dvertise a default rout e into the attached stub or NSSA. Example Related Commands area stub (4-268) summar y-address This comm and ag gregate[...]

Command Line I nterface 4-266 4 redistribute This comm and im ports extern al routing info rmation from othe r routing do mains (i.e ., protoc ols) into the auton omou s syst em. Use the no form to disa ble this feat ure. Syntax [ no ] re distri bute [ rip | st atic ] [ metric metric-v alue ] [ metric -type t ype -value ] • rip - External routes [...]

IP Routing Co mmands 4-267 4 network a rea This comm and de fines an OS PF area and t he inte rfaces tha t operate w ithin this area. Use the no form to disable OS PF for a sp ecified interface . Syntax [ no ] ne two rk ip-addres s netma sk area area-i d • ip-a ddre ss - Addres s of the inter faces to add to the area . • netma sk - Net work mas[...]

Command Line I nterface 4-268 4 area stub This comm and de fines a stub area. T o remov e a stub, use t he no f orm wi tho ut th e optional keyword. T o r emove t he summ ary attribu te, use the no form with the summ ary keyw ord. Syntax [ no ] ar ea area-id stub [ summary ] • area-id - Identifies th e stub area. (The area ID must be in the form [...]

IP Routing Co mmands 4-269 4 area nss a This comman d defines a no t-so-stubb y area (NSSA ). T o rem ove an NSSA, use the no form with out an y op tion al k eywor ds. T o remo ve a n opti onal att rib ute, use the no for m with out th e rele vant keywor d. Syntax [ no ] area area-id nssa [ n o-redistribution ] [ default-information-originate ] •[...]

Command Line I nterface 4-270 4 Example This examp le creat es a stub a rea 10.3.0. 0, and as signs al l interface s with class B addresses 10.3 .x.x to the NSSA. It also instru cts th e router to g enerate external LSAs into the NSSA when it is an NSSA ABR or NSSA ASBR. area virt ua l-li nk This comm and d efines a vi rtual link . T o r emove a v [...]

IP Routing Co mmands 4-271 4 propagation delays. LSAs have thei r age inc remented by this amo unt before tr ansmissi on. This valu e must be the same for all route rs attached to an autono mous system . (Range: 1- 3600 se conds ; Default: 1 se conds ) • dead -int erva l se conds - S pecif ies the time th at neighbor router s will wait for a hell[...]

Command Line I nterface 4-272 4 Example This examp le creat es a virtua l link using t he defaults for all optional parameters . This examp le creat es a virtua l link using M D5 aut henticat ion. Related Commands show ip ospf vi rtual-links (4-290) ip ospf authenticati on This command spec ifies the authe ntication type used for an int erface. Ent[...]

IP Routing Co mmands 4-273 4 Related Commands ip ospf authentication-key (4-273) ip ospf message-digest-key (4-274) ip ospf authenticati on-key This comm and as signs a sim ple passw ord to be us ed by neig hboring routers. Use the no form to remove th e passwo rd. Syntax ip ospf authen tication -key ke y no ip ospf authentication-key key - Sets a [...]

Command Line I nterface 4-274 4 ip ospf message-d igest-key This comm and en ables m essage- digest (MD5) authe nticati on on the sp ecified interface an d to ass ign a key- id and key to be u sed by ne ighboring routers . Use the no form to re move an exis ting key . Syntax ip ospf me ssage -dig est-key key-i d md5 key no ip ospf message-d igest-k[...]

IP Routing Co mmands 4-275 4 ip ospf cost This comm and ex plicitly sets the co st of send ing a packet on an interfac e. Use t he no form to restore the default value. Syntax ip o spf cos t cost no ip ospf cost cost - Link m etric for th is interfac e. Use hig her value s to indica te slower ports. (Range : 1-6553 5) Command Mode Interface C onfig[...]

Command Line I nterface 4-276 4 Related Commands ip ospf hello-interval (4-276) ip ospf hel lo-interva l This co mman d spe cifies th e inte rval b etween s endi ng hello packets on an i nterface . Use t he no form to re store the d efault value. Syntax ip ospf hello-interva l seco nds no ip ospf hello-interval secon ds - Interv al at which hell o [...]

IP Routing Co mmands 4-277 4 Command Usage • Set the priority to zero to prev ent a rout er from being el ected as a DR o r BDR . If set to any value othe r than zero, the router with th e highest prio rity will become the DR and the rout er with the ne xt highest priority bec ome s the BDR. If two or more ro uters are ti ed wit h th e same hi gh[...]

Command Line I nterface 4-278 4 ip ospf trans mit-delay This command set s the es timated time to s end a link-s tate u pdate packet o ver an int erf ace. Use t he no form to restor e the def ault value . Syntax ip ospf trans mit-del ay s econds no ip ospf transmit-del ay secon ds - S ets the estimat ed time r equired to se nd a link-sta te upda te[...]

IP Routing Co mmands 4-279 4 show ip ospf border-routers This c omman d show s ent ries in the r outing ta ble that lead to an Area B order Rou ter (ABR) or Autonomo us System Bound ary Route r (ASBR). Command Mode Privileged Exec Example T able 4-86 sh ow ip o spf - display de scrip tion Field Descr iption Routing P rocess with ID Ro uter ID Suppo[...]

Command Line I nterface 4-280 4 show ip ospf databas e This c omman d show s infor mation abou t different OSPF Link S tate Adve rtisements (LSAs) st ored i n this route r ’s database . Syntax show ip ospf [ area-i d ] dat abase [ ad v-ro uter [ ip-addres s ]] show ip ospf [ area-i d ] dat abase [ asbr-summa ry ] [ link-state-i d ] show ip ospf [[...]

IP Routing Co mmands 4-281 4 Command Mode Privileged Exec Examples The follow ing show s output fo r the show ip ospf data base command. Consol e#sh ow i p os pf d atabas e Displ ayin g Rout er Lin k States (Are a 10.1 .0.0) Link ID ADV Router Age Seq# Checksu m ------ ---- ---- - ---- ---- ------ - ---- -- --- ---- ---- -- ---- ----- 10.1 .1.252 1[...]

Command Line I nterface 4-282 4 The follow ing show s output w hen usin g the asbr-summary keyword. Consol e#sh ow i p os pf d atabas e as br-s umma ry OSPF Ro uter with id(1 0.1.1. 253) Displ aying Su mmary AS B Link States( Area 0. 0.0.0) LS age: 433 Optio ns: (N o TOS-ca pabili ty) LS Type : Summ ary Link s (AS Boun dary Rou ter) Link St ate ID [...]

IP Routing Co mmands 4-283 4 The follow ing show s output w hen usin g the dat abase-summa ry keyw ord. Console#show ip ospf database database-summary Area ID (10.1.0.0) Router Network Sum-Net Sum-ASBR External-AS Exter nal-Nssa 2 1 1 0 0 0 Total LSA Counts : 4 Console# T able 4-90 sh ow ip ospf d ataba se-sum mary - display descr iption Field Desc[...]

Command Line I nterface 4-284 4 The follow ing show s output w hen usin g the ex ternal keyw ord. Consol e#sh ow i p os pf d atabas e ex tern al OSPF Ro uter with id(1 92.168 .5.1) (A uton omous sy stem 5) Disp layi ng A S Exte rnal Lin k St ates LS age: 433 Optio ns: (N o TOS-ca pabili ty) LS Type : AS Ext ernal Li nk Link S tate ID: 10. 1.1. 253 [...]

IP Routing Co mmands 4-285 4 The follow ing show s output w hen usin g the networ k ke yword . Consol e#sh ow i p os pf d atabas e ne twor k OSPF Ro uter with id(1 0.1.1. 253) Disp layi ng N et Lin k St ates (Are a 10 .1.0. 0) Link Sta te Dat a Netw ork (T ype 2) ------ ---- ---- ---- ---- ------ --- LS age: 433 Option s: S uppo rt E xter nal ro ut[...]

Command Line I nterface 4-286 4 The follow ing show s output w hen usin g the ro uter keyw ord. Consol e#sh ow i p os pf d atabas e ro uter OSPF Ro uter with id(1 0.1.1. 253) Disp layi ng R outer Link Sta tes( Area 10.1 .0.0) Link St ate Da ta Route r (Type 1) ------ ---- ---- ---- ---- ------ --- LS age: 233 Option s: S uppo rt E xter nal ro utin [...]

IP Routing Co mmands 4-287 4 The follow ing show s output w hen usin g the summary keyw ord. Number o f TOS me trics Type of Service metric – This router only supp orts TOS 0 (or no rmal s ervice) Metrics Cost of the link Consol e#sh ow i p os pf d atabas e su mmar y OSPF Ro uter with id(1 0.1.1. 253) Displ aying Su mmary Ne t Link States( Area 1[...]

Command Line I nterface 4-288 4 show ip ospf interface This comma nd displays summary in formation for OSPF interfa ces. Syntax show ip ospf interfa ce [ vlan vlan-i d ] vlan-i d - VLAN I D (Range : 1-4094) Command Mode Privileged Exec Example Console#show ip ospf interface vlan 1 Vlan 1 is up Interface Address 10.1.1.253, Mask 255. 255.255.0, Area[...]

IP Routing Co mmands 4-289 4 show ip ospf neighbor This c omman d disp lays in forma tion a bout n eighbor ing r outers on eac h i nterface wit hin an OS PF ar ea. Syntax show ip ospf neighbor Command Mode Privileged Exec Example Console#show ip ospf neighbor ID Pri State Address --------------- ------ ---------------- - -------------- 10.1.1.252 1[...]

Command Line I nterface 4-290 4 show ip ospf summary- address This co mmand dis plays all s ummary addre ss infor mation. Syntax show ip osp f summary -address Command Mode Privileged Exec Example This examp le sho ws a summ ary addr ess and associa ted netwo rk mask . Related Commands summa ry-addre ss (4-265) show ip ospf virtual-lin ks This comm[...]

Multicast Routi ng Commands 4-291 4 Multicast Routing Comman ds This route r uses IGM P snoopi ng and qu ery to deter mine the ports connecte d to downstr eam mu lticast hosts, and to propagat e this inf ormati on back up t hrough th e multicast tree to ens ure that request ed services are forwa rded thr ough ea ch interm ediate node betwee n the m[...]

Command Line I nterface 4-292 4 Default Sett ing No static mult icast router ports are config ured. Command Mode Global Co nfigurat ion Command Usage Depend ing on your network connec tions, IGMP snoopi ng may not always be able to loca te the IGMP querier. Theref ore, if the IGM P queri er is a known multicast router/ switch co nnected over the ne[...]

Multicast Routi ng Commands 4-293 4 General Multicas t Routing Commands ip multica st-routing This comm and enables IP mult icast rou ting. Use the no form to disabl e IP mu lticast routing. Syntax [ no ] ip multicast- routing Default Sett ing Disabled Command Mode Global Co nfigurat ion Command Usage This comm and is use d to enabl e multicast rou[...]

Command Line I nterface 4-294 4 Command Mode Privileged Exec Command Usage This c omman d disp lays inf ormat ion for mul ticast routing. If no option al parameter s are selec ted, detailed information for each en try in the m ulticast address table is display ed. If you sel ect a mu lticast gro up and so urce pair , detailed info rmation is displa[...]

Multicast Routi ng Commands 4-295 4 This example l ists al l entries in th e multicast t able in summary form: DVMRP Multicast Routing Commands router dvmrp This comm and enabl es Distance -V ector Multic ast Routing (DVMR P) globally fo r the router and to enter rou ter conf iguration m ode. U se the no form to disa ble DVMR P multicast routing. S[...]

Command Line I nterface 4-296 4 Command Mode Global Co nfigurat ion Command Usage This comm and enabl es DVM RP global ly for the router and enter s router configur ation mod e. Make any chan ges nec essary to the global DVM RP parameters . Then specif y the interfa ces that will s upport DVMRP multicast routing us ing the ip dvmrp command , and se[...]

Multicast Routi ng Commands 4-297 4 Command Usage Probe me ssages ar e sent to ne ighborin g DVMRP r outers fro m which thi s device ha s receiv ed probes , and is use d to verify whether or not these neighbors are still activ e members of the multicast tree. Example nbr-timeout This comm and se ts the interval to wait for mess ages from a DVM RP n[...]

Command Line I nterface 4-298 4 Command Mode Rout er C onfi gura tion Example flash-upda te-interval This co mmand specif ies how often to send tr igger u pdates, w hich reflect chang es in the netwo rk topolo gy . Use the no fo rm to restor e the defa ult value. Syntax flas h- update -int er val se conds no flash-update-interval secon ds - Interva[...]

Multicast Routi ng Commands 4-299 4 Example default-gate way This comm and sp ecifies the de fault DV MRP gate way for IP m ulticas t traffic. Use the no form to remove the default gateway . Syntax defaul t-gateway ip-address no default-gateway ip-address - IP address of the default DVMRP gateway . Default Sett ing None Command Mode Rout er C onfi [...]

Command Line I nterface 4-300 4 Default Sett ing Disabled Command Mode Interface C onfigur ation (VLAN ) Command Usage T o fully enable DV MRP , you need to ena ble mult icast routi ng globall y for the router w ith t he ip multicast-routing c ommand (p age 4-293), enabl e DVMRP globally f or the rout er wit h the router dvmr p comma nd (page 4-2 9[...]

Multicast Routi ng Commands 4-301 4 Example clear ip dv mrp route This comm and clea rs all dyna mic route s learne d by DVM RP . Command Mode Privileged Exec Example As show n belo w , this com mand clea rs ever ything f rom the route tab le exce pt for the default rout e. show route r dvmrp This comm and disp lays the global DV MRP con figuratio [...]

Command Line I nterface 4-302 4 Example The defau lt settings are show n in the follo wing exam ple: show ip dvmrp route This comm and disp lays all en tries in the DV MRP ro uting table. Command Mode Normal Exec, Priv ileged Exec Example DMVRP routes are sh own in the f ollowing example: Console#show route dvmrp Admin Status : enable Probe Interva[...]

Multicast Routi ng Commands 4-303 4 show ip dvmrp neighbo r This comm and disp lays al l of the DVMR P neigh bor rout ers. Command Mode Normal Exec, Privileged Exec Example show ip dvmrp interface This comm and displays the DV MRP c onfigura tion for interfaces whic h have enabled DVMRP . Command Mode Normal Exec, Privileged Exec Example Console#sh[...]

Command Line I nterface 4-304 4 PIM-DM Multicast Routing Commands router pim This comm and enabl es Prot ocol-Inde pende nt Multicast - Dense Mo de (PIM -DM) globally fo r the router and to enter router conf igurati on mode. Use the no form to disable PI M-DM mu lticast rou ting. Syntax [ no ] router pim Default Sett ing Disabled Command Mode Globa[...]

Multicast Routi ng Commands 4-305 4 Example ip pim den se-mode This comm and enabl es PIM -DM on the spe cified int erface. Use the no form to disable PI M-DM on this interfac e. Syntax [ no ] ip pim dense-mode Default Sett ing Disabled Command Mode Interface C onfigur ation (VLAN ) Command Usage • To fully enab le PIM-DM, yo u need to enable m u[...]

Command Line I nterface 4-306 4 ip pim hel lo-interval This comm and co nfigures the frequen cy at whic h PIM hel lo messag es are transmi tted. U se t he no form to rest ore the de fault value. Syntax ip p im he llo -in terv al seconds no pim hello-interval secon ds - Interval betw een sending PIM he llo messages. (Range: 1-65535) Default Sett ing[...]

Multicast Routi ng Commands 4-307 4 Example ip pim trigge r-hello-interval This comm and co nfigures the maxim um time before tra nsmittin g a triggered PI M Hello mes sage after the router is rebo oted or PIM is enabled on an interfa ce. Use the no f orm to res tore the def ault va lue. Syntax ip pim trigge rr-hel lo-interva l se conds no ip pim t[...]

Command Line I nterface 4-308 4 Default Sett ing 210 secon ds Command Mode Interface C onfigur ation (VLAN ) Command Usage The multica st interfac e that fir st receive s a multicast stream from a particula r sour ce f orwar ds th is tr af fic to all othe r PIM i nter fac es on th e rou ter . If t here ar e no reques ting groups on that inter face,[...]

Multicast Routi ng Commands 4-309 4 ip pim ma x-graft-retr ies This comm and configu res the m aximu m numb er of time s to res end a Gr aft message if it has not be en ackn owledge d. Use t he no form to restore th e defaul t value. Syntax ip pim max- graf t-re tries retries no ip pim graft-retry-interval retr ies - Th e maxi mum nu mber of tim es[...]

Command Line I nterface 4-310 4 Example show ip pim neighbor Thi s comma nd dis play s inf ormat ion ab out PI M nei ghbor s. Syntax show ip pim neighbor [ ip-address ] ip-address - IP address of a PIM neighbor . Default Sett ing Displays i nformat ion for all kno wn PIM neigh bors . Command Mode Normal Exec, Priv ileged Exec Example Console#show i[...]

Router Redundan cy Commands 4-311 4 Router Redundancy Commands Router r edundanc y protoc ols use a vi rtual IP ad dress to support a primary r outer and multipl e backu p routers. The backup rou ters can be co nfigured to take over the work load if the m aster rout er f ails , or can also b e co nfig ured to sha re t he tr af fi c load . The prima[...]

Command Line I nterface 4-312 4 vrrp ip This comm and en ables the Virtual R outer Re dunda ncy Proto col (VRRP ) on an interfa ce and speci fy the IP add ress of the virtual router . Use the no form to disable VRRP on an i nterface and remo ve the IP address from the vir tual rout er . Syntax [ no ] vr rp group ip ip-address [ secondary ] • grou[...]

Router Redundan cy Commands 4-313 4 vrrp authentic ation This comm and sp ecifies the key used to authen ticate VRR P packets rece ived from other rout ers. Use the no form to prevent authenti cation. Syntax vrrp group a uth enti cati on key no vrrp group auth enticati on • group - Iden tifies the v irtual rout er group . (Range: 1-255) • key -[...]

Command Line I nterface 4-314 4 Command Usage • A router tha t has a phys ical inte rface wi th the sam e IP addres s as tha t used for the virtual router will become th e master vir tual router. Th e backup router with the hi ghest pr iority will be come the master ro uter if the cur rent m aster fails. Whe n the ori ginal mas ter router recover[...]

Router Redundan cy Commands 4-315 4 • VRRP advertise ments a re sent to th e multic ast addre ss 224.0 .0.8. Usin g a multicas t address reduc es the am ount of tra ffic that has to proces sed by network devices that are not par t of the desi gnated VRR P group . • If the master rou ter stops send ing advertiseme nts, backup ro uters will bi d [...]

Command Line I nterface 4-316 4 Related Commands vrrp priorit y (4-313) show vrrp This comm and disp lays status i nformat ion for VR RP . Syntax show v rrp [ brief | group ] • brief - D isplays summ ary inform ation f or al l VRR P gr oups on t his r outer . • group - Iden tifies a VRR P group . (Range: 1-255) Defaults None Command Mode Privil[...]

Router Redundan cy Commands 4-317 4 This examp le disp lays the brief listing of status inform ation for all groups. T able 4-109 s how vr rp - dis play de scriptio n Field Descr iption State VRRP role of thi s interf ace (maste r or ba ckup) Vir tu a l I P address Virtual addre ss that identif ies this VRRP group Vir tu a l M A C address Virtual M[...]

Command Line I nterface 4-318 4 show vrrp interface This comm and disp lays status inf ormati on for the spe cified VR RP inter face. Syntax show v rrp interf ace vl an vla n-id [ brief ] • vlan-i d - Ide ntifier of con figured VLA N interf ace. (Ra nge: 1-40 94) • brief - D isplays summ ary inform ation f or al l VRR P gr oups on t his r outer[...]

Router Redundan cy Commands 4-319 4 show vrrp interface coun ters This comm and disp lays cou nters for VRR P prot ocol even ts and errors that have occurr ed for the s pecifie d group and interf ace. show v rrp grou p int erfa ce vl an int erfa ce co unters • group - Iden tifies a VRR P group . (Range: 1-255) • interface - Identifier of con fi[...]

Command Line I nterface 4-320 4 Defaults None Command Mode Privileged Exec Example Hot Standby Router Protocol Commands T o configure HSRP , add the interface for e ach router that will p articip ate in the virtual router gro up, set the priorities , and confi gure an aut henticat ion string. The HSR P protocol will automatic ally select t he maste[...]

Router Redundan cy Commands 4-321 4 standb y ip This comm and enabl es the Hot S tandby Route r Protocol (HS RP) on an i nterface and spec ify the IP ad dress of the vir tual rou ter . Use the no f orm to d isable HSRP on an interface and rem ove the IP address for the vir tual router. Syntax standby [ group ] ip [ ip-a ddress [ seconda ry ]] no st[...]

Command Line I nterface 4-322 4 Example This examp le creates HSRP gr oup 1 for VLAN 1, and al so adds a sec ondar y interface as a membe r of the grou p. standby pri ority This comm and se ts the priority of th is router in a HS RP gro up. Use th e no form to restore t he default setting. Syntax standby [ group ] priority leve l no standby [ group[...]

Router Redundan cy Commands 4-323 4 Related Commands standby a uthent ication (4- 324) standby tr ack (4-326) standb y preempt Thi s com mand c onfi gure s th e ro uter to t ake over as t he mas ter vir tual rout er fo r an HSRP g roup if it ha s hig her pr iori ty th an th e curr ent ma ster v irt ual ro uter . Use th e no form to disa ble pree mp[...]

Command Line I nterface 4-324 4 stan dby auth enti cat ion This command spec ifies the key use d to authenticate HSRP p ackets received from other rout ers. Use the no form to delete an authenti cation st ring. Syntax standby [ group ] auth enticatio n strin g no standby [ group ] au thenticat ion • group - Iden tifies the H SRP gr oup. (Ran ge: [...]

Router Redundan cy Commands 4-325 4 standby tim ers This comm and se ts the time betw een the m aster an d standby rou ter send ing hello pac ket s, an d the ti me be fore ot her ro uter s decl are th e acti ve mast er ro uter or standby rou ter down. U se the no form to resto re the defaul t timer va lues. Syntax standby [ group ] timers he llot i[...]

Command Line I nterface 4-326 4 stan dby trac k This comm and co nfigures an interfa ce so that the HSRP pr iority chan ges bas ed on the avail ability of othe r IP inter faces on thi s router . Use the no form t o disa ble tracking . Syntax standby [ group ] track vlan vlan-id [ inter face-prio rity ] no standby [ group ] track vlan vlan-id • gr[...]

Router Redundan cy Commands 4-327 4 show sta ndby This comm and disp lays status i nformat ion for HS RP . Syntax show st and by [ active | init | listen | st andby ] [ brief ] •a c t i v e - Di splays HSRP gr oup s in the ac tiv e stat e. •i n i t - Disp lays HS RP groups in th e initial state. •l i s t e n - Di splays HS RP gro ups in the l[...]

Command Line I nterface 4-328 4 This examp le disp lays the brief listing of status inform ation for all groups. priority Priority of this router. may pree mpt Router wi ll attem pt to ta ke over a s the m aster r outer if its prio rity is high er . Pree mpt ion delayed Delay bef ore a r outer w ith high er prio rity can preempt the cu rrent ac tin[...]

Router Redundan cy Commands 4-329 4 show sta ndby interface This comm and disp lays H SRP status in formation for the sp ecified interface . Syntax show s tandby inte rface vlan vlan-id [ group grou p ] [ acti ve | init | listen | standby ] [ bri ef ] • vlan-i d - Ide ntifier of con figured VLA N interf ace. (Ra nge: 1-40 94) • group - Iden tif[...]

Command Line I nterface 4-330 4[...]

A-1 Appendix A: Software Specifications Software Features Authentication Local, RADIUS, T A CACS, Port (802.1x), HTTPS, SSH, Port Securi ty Acce ss Cont rol L ist s IP , M AC (up to 3 2 li sts) DHCP Client, Relay , Server DNS Server Port Co nfigurati on 1000BASE- T : 10/10 0 Mbps at half/full duplex, 1000 Mbps at full duplex 1000BASE- SX/LX - 1000 [...]

Software Specifi cations A-2 A Multicast Filt ering IGMP S noopi ng (La yer 2) IGMP (Layer 3) Multicast Ro uting DVMRP , PIM-DM IP R outing ARP , Proxy ARP S t at ic rout es RIP , RIPv2 and OSPFv2 dy namic routing VRRP ( Vi rtual Route r Redu ndanc y Prot ocol ) HSRP (Hot S tandby Rou ter Protocol ) Addi tio nal Fe atur es BOOTP client CIDR (Classl[...]

Management Infor mation Bases A-3 A IEEE 802.3x Full-duplex flow contro l (ISO/IEC 8802-3) IEEE 80 2.3z G igabit E thernet , IEEE 802.3ab 1000BA SE-T IEEE 802.3ac VLAN tagging IEEE 802.3ad Link Aggr egation C ontrol Prot ocol ARP (RFC 826) DHCP Client (RFC 1541) DHCP Relay (RFC 951) DHCP Server (RFC 2131) DVMRP (RFC 1075) HSRP (RFC 22 81) HTTPS ICM[...]

Software Specifi cations A-4 A PIM MIB (RFC 29 34) Port Acce ss E ntity MIB (IEE E 802.1 x) Port Access Entity Equipment MIB Private MIB RADIUS Authentication Client MIB (RFC 2621) RIP1 MIB (RFC 1058) RIP2 MIB (RFC 2453) RMON MIB (RFC 2819) RMON I I Probe Confi guration Group (RFC 2021, partial implementati on) SNMP fram ework MIB (R FC 2571) SNMP-[...]

B-1 Appe ndix B: Trou blesho oting Problems Accessing the Management Interface T able B-1 T rou blesho oting Chart Sympt om Act io n Cannot co nnect using T e lnet, web brow ser, or SNMP software • Be sure th e swit ch is po wered up . • Check ne twork c abling betwee n the man ageme nt sta tion an d the switc h. • Check that yo u have a va l[...]

T roubleshooti ng B-2 B Using System Logs If a fau lt does occur , refer t o the Insta llation Guid e to ensure that the problem y ou encount ered is ac tually ca used by the switch. If the prob lem appear s to be caus ed by th e swit ch, fol low th ese st eps : 1. Enable logg ing. 2. Set the erro r messa ges repor ted to includ e all categ ories. [...]

Glos sary -1 Glossary Acces s Control Lis t (ACL) ACLs can lim it netw ork traf fic an d rest ric t acces s to cer tai n user s or dev ices by checkin g each packet for certain IP or MAC (i. e., Laye r 2) informa tion. Address Reso lution Protocol (ARP) ARP conv erts between IP addresse s and MAC (i.e., hardw are) ad dresses . ARP is used to loca t[...]

Glossary Glossar y-2 of automa tic allocat ion of reus able net work ad dresses and addit ional conf iguration options. Extensible Authentication Protocol over LAN (EAPOL) EAPOL is a client authenticatio n protocol used by this switch to ve rify the network access rig hts for any de vice that is pl ugged in to the swit ch. A user name and password [...]

Glos sary -3 Glossary IEEE 802.1p An IEEE standard for providing qu ality of service (QoS) in Ethernet network s. The standard u ses packet tags th at define up to eigh t traffic classe s and all ows swi tches to transm it packets based on the tagged priority value. IEEE 802.1s An IEEE standard for the Multiple S panni ng T ree Protoc ol (MSTP) whi[...]

Glossary Glossar y-4 IP Multicast Filtering A process whereb y this swit ch can pass multicast traffic along to partici pating hosts. IP Precedence The T ype of Se rvic e (T oS) octet in the IP v4 head er in clude s thr ee prec edenc e bit s defining eight different priority le vels rangi ng from hi ghest pr iority for ne twork control packets to l[...]

Glos sary -5 Glossary Network Time Prot ocol (NTP) NTP prov ides the m echan isms to syn chroni ze time acr oss the ne twork. The time server s operate in a hierarc hical-m aster-sla ve conf igurati on in order t o synchro nize local clo cks within the sub net and to nat ional time standards via wire or ra dio. Open Shortest Pa th First (OSPF) OSPF[...]

Glossary Glossar y-6 Remote Monitorin g (RMON) RMON pr ovides c ompreh ensive ne twor k monitor ing capabilit ies. It elim inates the polling requ ired in stand ard SNMP , and can set alarms on a v ariety of tra ffic conditi ons, including spe cific error types. Rapid Spanni ng Tree Protocol (RSTP) RSTP reduces the conve rgenc e time fo r networ k [...]

Glos sary -7 Glossary Termin al Access Con troller Ac cess Cont rol System Plus (TACACS+) TACACS+ is a logon authe nticati on proto col that us es software ru nning on a central server to co ntrol a ccess to T AC ACS- com pliant d evices on the ne twork. Transmiss ion Control Protocol /Internet Protocol (TCP/IP) Protocol suite that inc ludes TCP as[...]

Glossary Glossar y-8[...]

Index-1 Numerics 802.1x, po rt authe ntication 3-57, 4-79 A accepta ble fram e type 3-132 , 4-192 Acce ss Cont rol L ist Se e ACL ACL Extende d IP 3- 67, 4-87 , 4-88 , 4-91 MAC 3-67, 4- 87, 4-10 2, 4-102–4 -104 Standard I P 3-67, 4-87 , 4-88, 4-90 Addr ess Res olut io n Protoc ol See ARP addr ess t able 3-101, 4- 166 aging time 3-104, 4-169 ARP c[...]

Index-2 Index F firmware displayi ng ver sion 3- 12, 4- 62 upgrading 3-20, 4-64 G GARP VLAN Registration Protocol Se e GVRP gateway , default 3-1 6, 3-196 , 4-238 GVRP global s etting 3-12 6, 4-203 interface co nfigur ation 3- 132, 4-20 4 H har dware vers ion, di splayi ng 3-12, 4-62 Hot Stand by Router Redund ancy See HSRP HSRP 3-1 86, 4-32 0 auth[...]

Index-3 Index mir ror po rt, c onfi guri ng 3- 95, 4- 160 MSTP 4- 171 global s ettings 3-117, 4-16 9 interface s ettings 3 -115, 4-170 multicast filtering 3 -152, 4-220 multicast groups 3-158, 3-163, 4-223 displayi ng 3-163 , 4-223 static 3-15 8, 4-221 , 4-223 multicast routing 3-249, 4-291 desc rip tion 3- 249 DVMRP 3-253, 4-295 enabling 3-249, 4-[...]

Index-4 Index specifyi ng inte rfaces 3-216, 4-25 0 sta tist ics 3-220, 4 -258 router r edun dancy HSRP 3-1 86, 4-32 0 protocol s 3-178, 4- 311 VRRP 3-179 , 4-311 routing tabl e, disp laying 3-21 2, 4-246 , 4-247 RSTP 3-104 , 4-171 glo bal co nfig urat ion 3-105, 4- 171 S secure sh ell 3-50 , 4-35 Secure She ll configur ation 3 -50, 4-38 serial por[...]

Index-5 Index egress m ode 3-13 3, 4-192 interface c onfigur ation 3-132 , 4-192–4 -196 private 3-1 34, 4- 198 protocol 3- 135, 4-1 99 VRRP 3-179 , 4-311 authenti cation 3- 181, 4 -313 configur ation se ttings 3-17 9, 4-3 11 group st atistics 3-18 5, 4-316 preemp tion 3-180, 3-181, 4- 315 pri ori ty 3- 180, 3 -18 1, 4-31 3 prot ocol mess age s ta[...]

Index-6 Index[...]

[...]

ES4612 E092004-R 01 15000004 6400A[...]