SMC Networks TIGERSWITCH 10/100 manual

T igerSwitch 10/100 24-P ort F ast Ether net Switch ◆ 24 10B ASE-T/100B ASE-T X auto M DI/MDI-X ports ◆ Optional 1000B ASE-X or 100 B ASE-FX modules ◆ 8.8 Gbps of aggregate bandwidth ◆ Non-blocking switching architect ure ◆ Spanning T ree Protocol ◆ Up to fou r port trunks ◆ RADIUS authentication ◆ Rate l imit ing f or ba ndwid th m[...]

[...]

38 T esla Irvi ne, CA 9 2618 Phone: (949) 67 9-8000 T igerSwitch 10/100 Ma nageme nt Guide From S MC’ s T iger li ne of feat ure-rich w orkgroup LAN solut ions May 2003 Pub. # 15020003 3600A[...]

Inform ation furni shed by SMC Net works, Inc. (SMC) is believ ed to be ac curate an d reliable . However , no re spons ibility i s assumed b y SMC f or it s use, no r fo r any inf ringe ment s of pat ents or oth er rig hts of t hird pa rties w hic h ma y resul t fr om its use. No lice nse is grant ed by i mplicatio n or ot herwi se unde r any pat [...]

v L IMITED W ARRA NTY Limite d W arranty St atemen t: SMC Networks, Inc. (“SMC”) warran ts its prod ucts to be fr ee from defects in work manship and ma terials, under nor mal use and service, for the applicable warranty term. All SMC products carry a standard 90-day limit ed wa rran ty fr om the d ate of pu rchas e from SMC o r it s Au thoriz [...]

L IMITED W ARRA NTY vi FOREG OING W ARR ANTIE S AND REMEDIES ARE EXCLUSIV E AND A RE IN LI EU OF AL L OTH ER W ARR ANTIES OR CONDIT IONS, E XPRE SS OR IMPLIED , EIT HER IN F ACT OR BY OPERA TION OF LA W , ST A TUTORY OR OT HER WISE, I NCLUDING W AR RANT IES O R COND ITION S OF ME RCH ANT AB ILITY A ND FIT NESS FOR A P AR TIC ULAR PUR POSE. SMC N EI[...]

i C ONTENTS 1 Switch Management . . . . . . . . . . . . . . . . . . . . . . 1-1 Conn ecting to the Swi tch . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Confi guration O ptions . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Requir ed Conne ctions . . . . . . . . . . . . . . . . . . . . . . . . . 1-3 Remot e Connect ions . . . .[...]

C ONTENTS ii Port Configur ation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-30 Displ aying Con nectio n Status . . . . . . . . . . . . . . . . . . . 2-30 Confi guring In ter face Conne ctio ns . . . . . . . . . . . . . . . 2-32 Sett ing Broad cast St orm Thres holds . . . . . . . . . . . . . . 2-34 Confi guring Po rt Mirr oring[...]

C ONTENTS iii Int erfaces Attach ed to a Multicas t Route r . . . . . . . . . . . 2-89 Specify ing Int erfaces Attached to a Mu lticast Route r . . . 2-91 Disp layi ng Po rt Memb ers o f Mult icas t Ser vices . . . . . . . 2- 92 Adding Multic ast Addr esses t o VLANs . . . . . . . . . . . . . 2-94 Showin g Port Statisti cs . . . . . . . . . . . . .[...]

C ONTENTS iv exi t . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-18 quit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-19 Flash/ File Co mmands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-19 copy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

C ONTENTS v sho w dot1x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-51 SNMP Co mmands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-5 4 snmp -server c ommunity . . . . . . . . . . . . . . . . . . . . . . . 3-54 snmp -server c ontact . . . . . . . . . . . . . . . . . . . . . . . . . . 3-55 snmp -server l oca[...]

C ONTENTS vi show queue ho l-prev ention . . . . . . . . . . . . . . . . . . . . 3-87 Int erface Co mmands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-88 int erface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-89 descr iption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-90 speed -duple[...]

C ONTENTS vii switc hport acc eptable-fr ame-types . . . . . . . . . . . . . . 3-126 switc hport ing ress-fil tering . . . . . . . . . . . . . . . . . . . . 3-12 7 switc hport nat ive vlan . . . . . . . . . . . . . . . . . . . . . . . 3-128 switc hport allo wed vlan . . . . . . . . . . . . . . . . . . . . . . 3-129 switc hport for bidden v lan . . [...]

C ONTENTS viii A Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . A-1 Troub leshoot ing Chart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-1 B Upgrading Firmware via the Serial Port . . . . . . . B-1 Rest oring Switc h Default s . . . . . . . . . . . . . . . . . . . . . . . . . . . B-4 C Pin Assignments . . . . . .[...]

1-1 C HAPTER 1 S WITCH M ANAGEMENT Connecting to the Switch Configuration Options This switch includes a bu ilt-in netwo rk managem ent agent . The agent of fers a variety of manage ment optio ns, i ncluding SNMP , RMON an d a W eb-bas ed interfac e. A PC may als o be con nected dir ectl y to the sw itch f or con figur ation and m onito ring via a [...]

S WI TC H M ANAGEMENT 1-2 The s witch ’s CLI configu ratio n pr ogram , W eb inte rfac e, and SNMP agen t allow you to perf orm the follo wing manage ment fu nctions : • Set user names and pas swords for up to 16 u sers • Set an I P interface for a management VLAN • Configure SNMP parameters and e nable traps • Enabl e/disabl e any port ?[...]

C ONNECTIN G TO THE S WI TC H 1-3 • RADIU S client supp ort • MA C filt erin g secu rity Required Connections The switc h prov ides an RS-2 32 serial port that enables a con nection to a PC or te rminal fo r mo nitori ng and c onfigur ing the swit ch. A null-m odem conso le cable is pr ovided with th e switch. Attac h a VT100 -compatib le termi[...]

S WI TC H M ANAGEMENT 1-4 Note: W hen usin g Hy perTer minal wit h Mi crosoft ® Windows ® 2000 , make su re that you have W indows 2 000 Servi ce Pack 2 or late r install ed. Windo ws 2000 Servic e Pack 2 fixes the probl em of arrow key s not fu nction ing in H yperTe rminal’s VT100 emul ation. See www. microsoft. com for infor mation on W indo[...]

B ASI C C ONFIGURATIO N 1-5 bro wser (I nternet Exp lorer 5. 0 or above, or Net scape Na vigator 6.2 or above), or from a net work comp uter u sing netwo rk manageme nt software. Note: Th e onboar d pro gram on ly prov ides access to bas ic con figurati on fun ctions. T o acces s the full ra nge of S NMP man ageme nt func tion s, you mu st use S NM[...]

S WI TC H M ANAGEMENT 1-6 Setting Passwords Note: If this is your first time to log int o the C LI prog ram, you shou ld defi ne new passw ords fo r both defau lt use r names usi ng the “ username” comman d, reco rd th em and p ut them in a safe place. Pas sword s can cons ist o f up to 8 alphanumeric characters a nd are case se nsit ive. T o p[...]

B ASI C C ONFIGURATIO N 1-7 Setting an IP Address Y ou mu st esta blish IP address informat ion for the sw itch to obtai n managem ent acce ss through the net work. This can be do ne in eit her of the followi ng ways: Man ual — Y ou have to inpu t the in for mati on, incl uding IP addre ss and su bnet mas k. If your management statio n is not i n[...]

S WI TC H M ANAGEMENT 1-8 • Defaul t gateway for the net work • Net work ma sk fo r th is netwo rk T o assign an IP addres s to the swit ch, comple te the followin g steps : 1. From the Privileg ed Exec lev el global con figurati on mode pr ompt, ty pe “interf ace vlan 1” to acces s the int erface-c onfigur ation mode. P ress <E nter>[...]

B ASI C C ONFIGURATIO N 1-9 If the “bo otp” o r “dhcp ” opti on is s aved t o the s tartu p-co nfig fi le (step 6), th en the s witch wil l start broadc asting serv ice reques ts as soon as it is po wer ed on. T o automati cally conf igur e the swit ch b y comm unicati ng with BOOTP or DHC P address all ocati on server s on the networ k, co[...]

S WI TC H M ANAGEMENT 1-10 6. The n save yo ur con figurati on ch anges b y typing “copy run ning-co nfig st artup -confi g.” Enter the star tup fil e name and pres s <En ter>. Enabling SNMP Management Access The switch can be config ured t o accep t manag ement com mands from Si mple N etwork M anagement P rotocol (SNMP) applic ations . [...]

B ASI C C ONFIGURATIO N 1-11 The default stri ngs are : • public - wit h read- only ac cess. A uthorize d manageme nt stati ons are only able to ret rieve M IB objec ts. • privat e - with read-w rit e acces s. Auth ori zed man ageme nt stati ons are able t o both retrie ve and m odify M IB obj ects. Note: I f you d o not in tend to uti lize SNM[...]

S WI TC H M ANAGEMENT 1-12 Trap Rec eivers Y ou can al so spe cify SNM P stati ons that are to re ceiv e traps from the swi tch. T o config ure a t rap recei ver , com plete the follo wing st eps: 1. From the Privileg ed Exec lev el global con figurati on mode pr ompt, ty pe “snmp- serve r host host-addr e ss communi ty-string ,” wher e “h os[...]

M ANAGING S YST EM F ILES 1-13 2. Enter the nam e of the start-up file . Press <E nter>. Managi ng System Files The swi tch’s flas h memor y sup port s three type s of system fil es th at can be ma naged by the CLI pro gram, W eb interfac e, or SNMP . The switc h’s file system allows fil es to be uploaded and do wnloaded, copie d, delet e[...]

S WI TC H M ANAGEMENT 1-14 also pro vides a facilit y to upload firmwar e files to the sys tem direct ly th rough t he co nsole port. Se e “Upgrad ing F irmware via the Serial Port” on page B-1. Due to the size limit of the flas h memor y, the switch support s only one oper ation code file, and two diag nostic code fi les. However , you can h a[...]

S YST EM D EFAULTS 1-15 SNMP Community Strings “public” (read only) “private” (read/write) Traps Authentication traps: enabled Link-up-down events: enabled Security Privileged Exec Level Username “admin” Password “admin” Normal Exec Level Username “guest” Password “guest” Enable Privileged Exec from Normal E xec Level Passwo[...]

S WI TC H M ANAGEMENT 1-16 Port Status Admin Status Enabled Auto-negotiation Enabled Flow Control D isabled 10/100 Mbps Port Capability 10 Mbps half duplex 10 Mbps full duplex 100 Mbps half duplex 100 Mbps full duplex Full-duplex flow control disabled 10/100/1000 Mbps Port Capability 10 Mbps half duplex 10 Mbps full duplex 100 Mbps half duplex 100 [...]

S YST EM D EFAULTS 1-17 Virtual LANs Default VLAN 1 PVID 1 Acce pta ble Fra me Ty pe All Ingress Filtering Disabled Switchport Mode (Egress Mode) Untagged frames Private VLAN No Private VLAN GVRP (global) Disabled GVRP (port interface) Disabled Class of Service Ingress Port Priority 0 Weighted Round Robin Class 0: 1 Class 1: 3 Class 2: 12 Class 3: [...]

S WI TC H M ANAGEMENT 1-18[...]

2-1 C HAPTER 2 C ONFI GURING THE S WI TC H Using the Web Inter face Thi s switch pr ovides an em bedded HT TP W eb agent. Using a W eb bro wser you can c onfigur e the s witch an d view statist ics to monit or netwo rk acti vity. T he W eb age nt can b e access ed by any comp uter on t he n etwo rk us ing a stan dar d W e b br ows er (I nter n et E[...]

C ONFIGURI NG THE S WI TC H 2-2 Notes: 1. You are allowed t hree att empts to en ter th e corr ect passw ord; on the third fai led atte mpt the cur rent conn ectio n is termi nated. 2. If yo u log i nto th e Web interfac e as gues t (Norm al Exec leve l), you c an vie w page informa tion but only change the guest pa ssword. If y ou log in as “adm[...]

N AVIGATI NG THE W EB B RO WS E R I NTER FAC E 2-3 Home Page When your W eb browser connec ts with the sw itch’s W eb agent, the home p age i s displaye d as sh own bel ow. The h ome pag e dis plays t he Main M enu on t he lef t side of the screen an d System Inform ation on the r ight side. The Main Menu li nks are used t o navig ate to ot her m[...]

C ONFIGURI NG THE S WI TC H 2-4 new sett ing. The foll owing table s ummarizes the W eb page con figurati on butt ons. Notes: 1. To ensure pr oper scr een refres h, be sure that Int ernet Expl orer 5.x is config ured as fol lows: Under th e men u “Too ls / Inte rnet Option s / Gene ral / Temp orary Int ernet Fi les / Settin gs,” t he sett ing f[...]

M AIN M ENU 2-5 Main Menu Using the onboard W eb age nt, you can d efine s ystem para meters , manag e and contro l the switc h, and all its ports, or monitor net work cond itions . The fol lowing t able b riefly de scrib es the sel ections av ailable from this program. Menu Description Page Sys tem System Information Provides basic syste m descrip[...]

C ONFIGURI NG THE S WI TC H 2-6 Trunk Broadcast Control Sets the broadcas t storm threshold for each trunk 2-34 Mirror Sets th e source and target ports for mirroring 2-37 Addr ess Table Static Addresses Displays entries for interface or address 2-39 Dyna mic Addresses Displays or edits static entries in the Add ress Table 2-40 Address Aging Sets t[...]

M AIN M ENU 2-7 VLAN Trunk Configuration Specifies default trunk VID and VL AN attributes 2-65 Privat e VLAN Private VLAN Information Shows private VLANs and associated por ts 2-69 Private VLAN Configuration Configures private VLANs 2-71 Private VLAN Association Maps a secondary VLAN to a primary VLAN 2-72 Private VLAN P ort Information Shows VLAN [...]

C ONFIGURI NG THE S WI TC H 2-8 IGMP IGMP Configuration Enables multicast filtering; configures parameters for multicast query 2-87 Multicast Router Port Information Displays the ports that are attached to a neighboring multicast router/switch for eac h VLAN ID 2-89 Static Multicast Router Port Configuration Assigns ports that are attac hed to a ne[...]

B ASI C C ONFIGURATIO N 2-9 Basic Configurati on Displaying System Information Y ou ca n easi ly ident ify th e syst em by p rovidin g a d escript ive name , loc ation and contac t info r mat ion. Comman d Attr ibutes • System Name – Name ass igned to the switc h syst em. • Object ID – MIB I I o bject ID for sw itch’s net work mana gement[...]

C ONFIGURI NG THE S WI TC H 2-10 We b – Click System , System Info r mation . Specify the sys tem name, location, and contact information for the sy s tem ad m inistrato r , then clic k A pply. (This page also includes a T elnet button th a t allows access to the Command Line Interface via Teln et.)[...]

B ASI C C ONFIGURATIO N 2-11 CLI – Sp ecify t he host name, lo cation and co ntact i nformation . Setting the IP Address The IP addre ss for th is swit ch i s unassig ned by d efault. T o manu ally confi gure an address , you nee d to c hange th e switc h’s defaul t settin gs (IP addr ess 0.0.0 .0 and netmask 255.0.0. 0) to valu es th at a re c[...]

C ONFIGURI NG THE S WI TC H 2-12 Comma nd Att ributes • Management VLAN – Thi s is t he only VLAN thr ough whi ch you c an manage th e swit ch. By def ault , all ports on the swi tch are me mbers of VLA N 1, so a managem ent stati on can be con nected to any p ort on the swi tch. H owever, i f you change the Ma nagement VLAN to anothe r VLAN, y[...]

B ASI C C ONFIGURATIO N 2-13 Manu al C onfigu rat ion We b – Click System, I P . Spec ify the m anagement i nterface, IP addre ss and default g ateway, then clic k Appl y. CLI – Sp ecify the management i nte rface, IP address and default gateway. Using DHCP/BOO TP If yo ur netwo rk p rovides DH CP/BOOT P service s, you c an confi gur e the sw i[...]

C ONFIGURI NG THE S WI TC H 2-14 We b – Click System, I P . Specify t he Manage ment VL AN, and set the IP A ddr ess Mo de t o DH CP or BOOT P . Cl ick A pply to s ave y our chan ges. Then click Rest art DHCP to immediate ly reque st a new addr ess. Note that the sw itch w i ll also broadcast a reque st for IP con figurati on setti ngs on the ea [...]

C ONFIGURING U SER A UTHENT ICATION 2-15 Renewing DCHP – D HCP may l ease addr esses to cli ents inde finite ly or f or a s pecific period o f time. If the address expires or th e switch is moved to anot her netwo rk segment , you will lo se manag ement access to t he swit ch. In this case, you can rebo ot the swit ch or submit a client req uest [...]

C ONFIGURI NG THE S WI TC H 2-16 The default guest name i s “guest ” with t he pass word “g uest.” The defa ult adm inistr ator name is “admi n” with t he pas sword “ad min.” Note th at user na mes can only be assi gned via th e CLI. Comma nd Att ributes • User Na me* – The name of the user. (Maxi mum len gth: 8 c haract ers; m [...]

C ONFIGURING U SER A UTHENT ICATION 2-17 Configuring RADIUS Logon Authentication Rem ote Au then ticat ion Di al-i n Us er Service (RADIUS) is a logon auth enticat ion pro tocol that us es soft ware runn ing on a centra l ser ver to cont rol acce ss to RADI US-co mpliant devi ces on the netwo rk. An authen ticat ion s erver conta ins a dat abase of[...]

C ONFIGURI NG THE S WI TC H 2-18 Comma nd Att ributes • Aut henti cati on – Select the authe nticati on, or au thenti cation seq uence r equired : - Radius – U ser aut henti cation is per forme d using a RADI US serve r only. - Local – Use r authen ticatio n is per formed only l ocally by the switch . - Radius, Local – Us er aut henticati[...]

C ONFIGURING U SER A UTHENT ICATION 2-19 We b – Click System, R adius. T o confi gure local or rem ote authen ticatio n pr eferen ces, s pecif y the authen ticatio n seq uence (i.e. , one to two methods), fill in the pa rameters for RADI US authen ticatio n if selec ted, and cl ick Appl y. CLI – Sp ecify al l the re quire d parame ters t o enab[...]

C ONFIGURI NG THE S WI TC H 2-20 Managing Firm ware Y ou can u pload/do wnload firmware to or from a TFTP server . By savi ng runtim e code to a file o n a TF TP serve r , that fi le can lat er be downl oaded to the swi tch to restore operation . Comma nd Att ributes • TFTP Server IP Address – The I P addres s of a TFTP serv er. • Dest inatio[...]

M ANAGING F IR MWAR E 2-21 We b – Cli ck System, Firmware. Enter the IP addr ess of the TFT P server , ente r the file name o f the softw are to down load, enter the Des tination F ile Nam e to ove rwrite t he curr ent file on the switch then clic k Transfer from Server . T o start the new firmware, rebo ot the sys tem via the Rese t menu. CLI ?[...]

C ONFIGURI NG THE S WI TC H 2-22 Saving or Restoring Configuration Settings Y ou ca n upload/do wnloa d config uration sett ings t o/from a TFT P serve r . The configurat ion fil e can be later d ownloaded to res tore the swi tch’ s setting s. Comma nd Att ributes • TFTP Server IP Address – The I P addres s of a TFTP serv er. • Dest inatio [...]

M ANAGING F IR MWAR E 2-23 We b – Click System, C onfigu ration. Enter the I P addres s of the TFT P serv er , en ter the nam e of the file t o download , selec t a file on t he swit ch to overwrite or spe cify a ne w file n ame, and then clic k Transfe r from Server . If yo u download to a new file name , select the new file from t he drop -do w[...]

C ONFIGURI NG THE S WI TC H 2-24 If yo u downl oad the startu p confi guratio n file under a new file name, you can se t this fil e as the startup fi le at a later ti me, and then restart th e switc h. Resetting the System We b – Cl ick Sy stem, Reset. Clic k the Res et bu tton t o rest art th e switch . CLI – Use the re load comman d to rest a[...]

D ISPLAY ING B RIDG E E XTENSION C APABIL ITIES 2-25 Comma nd Att ributes • Extended M ulticas t Filteri ng Servic es – This swi tch does not supp ort the fil tering of individual multicas t address es based on GMRP (G ARP Mu lticast Regist ration Protocol). • Traffic Classes – This swi tch provi des m apping of user prio rities to mu ltip [...]

C ONFIGURI NG THE S WI TC H 2-26 We b – Cli ck System, Bridge Ex tensio n. CLI – E nter t he followi ng com mand. Console#show bridge-ext 3-145 Max support vlan numbe rs: 127 Max support vlan ID: 4 094 Extended multicast fil tering services: No Static entry individua l port: Yes VLAN learning: SVL Configurable PVID tagg ing: Yes Local VLAN capa[...]

E NABL ING OR D ISABL ING GVRP (G LOBAL S ETTIN G ) 2-27 Enabling or Disabl ing GVRP (Global S etting) GARP VLAN Regi strati on Pr otoc ol (GVR P) defi nes a way for swit ches to exchange VLAN in formation i n order to regi ster V LAN mem bers on ports a cros s the n etwor k. VL ANs are dynam ica lly con figured based on join messages issue d by ho[...]

C ONFIGURI NG THE S WI TC H 2-28 Displaying Switch Hardwa re/Soft ware Versions Use the Switch Infor mation page to disp lay hard war e/f irm ware vers ion numb ers fo r the main board an d mana gem ent s oftw are, a s well as the power status of the system. Comma nd Att ributes Main B oard • Seria l Number – The ser ial nu mber of the swi tch.[...]

D ISP LAYI NG S WI TCH H AR DWAR E /S OFTWAR E V ERSIONS 2-29 We b – Click System, Switch Information. CLI – U se the fo llowing c ommand t o display v ersion information. Console#show version 3-37 Unit1 Serial number :12345 Hardware version :012 Module A type :not present Module B type :not present Number of ports :26 Main power status :up Age[...]

C ONFIGURI NG THE S WI TC H 2-30 Port Configuration Displaying Connection Status Y ou can u se the Port In formatio n or T runk In formation p ages t o dis play the current connecti on s tatus, inc luding link st ate, speed / dupl ex mo de, fl ow co ntrol , and a uto -negot iat ion . Comma nd Att ributes • Name – Interface labe l. • Type – [...]

P ORT C ONFIGURATIO N 2-31 • MAC Address – The physic al layer address fo r this port. - CLI on ly; to access th is on the Web, see “S etti ng the IP Add ress” on page -1 1. • Trunk Member – Shows if port is a tru nk member. (Port Infor mation onl y) • Creation – Shows i f a trunk is manu ally confi gured. (T runk Infor mation onl y[...]

C ONFIGURI NG THE S WI TC H 2-32 CLI – T his ex ample s hows the co nnectio n statu s for P ort 13. Configuring Interface Connections Y ou ca n use the Port Configu ration or T runk C onfigurat ion pag e to enable/disabl e an interface, set auto-ne gotiati on and th e inter face cap abilities to adverti se, or manual ly fix the spee d, duplex mod[...]

P ORT C ONFIGURATIO N 2-33 • Flow Control* – Allows yo u to m anually enab le or d isable flow contro l. • Autonegotiation (Port Cap abil ities) – Allows auto -negoti ation to be e nabled/di sable d. When aut o-neg ot iatio n is enab led, you n eed to sp ecif y the capa bili ties to be advert ised. When auto -negot iation is disa bled, yo u[...]

C ONFIGURI NG THE S WI TC H 2-34 We b – Cli ck Port, Port Conf iguratio n or T runk Config uration . Modi fy the r equire d interfac e sett ings, and clic k Apply. CLI – Select th e inter face , and then enter th e requ ired se tting s. Setting Broadcast Storm Thresholds Broadc ast st orms may oc cur wh en a devic e on yo ur netwo rk is malfu n[...]

P ORT C ONFIGURATIO N 2-35 Y ou can prot ect your net work fro m broadcast st orms by sett ing a port o r trunk thres hold for br oadcast traffic. Any broadcast p ackets exc eeding the s pecifi ed th reshold will t hen b e drop ped. Comma nd Usage • Broadcast Storm Control is e nabled by default . • The default thre shold is six per cent of the[...]

C ONFIGURI NG THE S WI TC H 2-36 We b – Click Port, Port Bro adcast C ontrol or T runk Broadc ast Cont rol. Set the t hreshol d for each po rt or trunk, an d th en clic k Apply . CLI – Specify an interface, and the n enter the threshold . The fo llowing s ets broadc ast s uppre ssion a t twe nty per cen t of the por t bandwi dth fo r Po rt 3. C[...]

P ORT C ONFIGURATIO N 2-37 Configuring Port Mirroring Y o u can mirror tr affic fr om any sou rce port to a target port fo r real-time analysis. Y ou can then at tach a logic analyzer or RMON probe to t he tar get por t and st udy th e traffic cros sing t he sour ce port in a com plete ly uno btrusi ve manne r . Comma nd Usage • Moni tor p ort sp[...]

C ONFIGURI NG THE S WI TC H 2-38 We b – C lick Po rt, Mir ror . Spe cify the sou rce por t, the t raffic type to be mirror ed, and the moni tor po rt, the n click Add . CLI – Use the in ter face co mmand to se lect th e monito r port, th en use the po rt mo nitor comma nd to s pecify the sou rce port. Note that defaul t mi rroring under t he CL[...]

A DDR ES S T ABLE S ETTINGS 2-39 Setting Static Addresses A static address can be assign ed to a spec ific inte rfac e on this switc h. Static addres se s are bo und to the assigned interface and will not be m oved. W hen a stati c addres s is see n on anot her inte rfa ce, the ad dre ss will be ig nor ed and will not be w ritt en to t he address t[...]

C ONFIGURI NG THE S WI TC H 2-40 We b – Click Ad dress T able, Static Addr esses. Sp ecify the mode, th e interface, the MAC add ress and duration, then cli ck Add Static Addr ess. CLI – This ex ample adds an address t o the static address t able, and sets it to per manent b y default. Displaying the Address Table The Dy namic A ddress T able c[...]

A DDR ES S T ABLE S ETTINGS 2-41 Comma nd Att ributes • Interface – Indi cates a port o r tru nk. • MAC Address – Physic al address associ ated with thi s interfac e. • Address Ta ble Sort Key – You ca n sort the infor mation displ ayed based on int erface (p ort or t runk) or MAC addre ss. We b – Click Addr ess T able, Dynam ic Addre[...]

C ONFIGURI NG THE S WI TC H 2-42 Changing the Aging Time Y ou can se t the agi ng time for e ntries in the dynam ic address table. Comma nd Att ributes • Aging Time – The time after which a learned entry is disc arded . (Range: 2-172 800 sec onds; D efault: 3 00 seco nds) We b – Click Addres s T ab le, A ddress Agin g. Spec ify th e new a gin[...]

S PANN ING T RE E A LGOR ITHM C ONFIGURATIO N 2-43 devi ce (exc ept for the r oot devi ce) whic h incur s the l owest path cost when forwarding a packet from t hat devi ce to the root device. Then it sel ects a desig nated bridgi ng devic e from eac h LAN which incu rs the lo west path co st when forwardi ng a packet fr om that LAN t o th e root de[...]

C ONFIGURI NG THE S WI TC H 2-44 The f ollowing global att ribute s display statis tical val ues and c annot be ch anged : • Configuration Changes – The n umber o f times the Sp anning Tree has be en reconfi gured. • Last Topology Change – Ti me sin ce the Spanning T ree was las t reconf igur ed. The fo llo wing gl obal attrib utes can be c[...]

S PANN ING T RE E A LGOR ITHM C ONFIGURATIO N 2-45 the n etwor k. (Re feren ces to “p or ts” in thi s sectio n mea ns “int erfac es,” which incl udes bot h ports and trunks .) - D e f a u l t : 2 0 - Mi nimum: The hig her of 6 or [2 x (Hell o Ti me + 1)] . - Maximum: The lowe r of 40 or [2 x (Forward Delay - 1) ] • For ward De lay – The[...]

C ONFIGURI NG THE S WI TC H 2-46 CLI – Thi s command displa ys global S T A settings, followed b y settings for each port. Note: The curre nt roo t port and cur rent root cos t disp lay as z ero when this de vice is not c onnecte d to t he netw ork. Console#show spanning-t ree 3-119 Bridge-group informatio n ----------------------- --------------[...]

S PANN ING T RE E A LGOR ITHM C ONFIGURATIO N 2-47 Configuring the Global Settings for STA We b – Click Spanning T ree, ST A Configu ration. Modify the requir ed attr ibutes, and click Apply. CLI – This ex ample enabl es Spanning T ree Protoc ol, and th en sets the indicat ed attr ibutes. Managing STA Interface Settings Y ou ca n conf igure ST [...]

C ONFIGURI NG THE S WI TC H 2-48 Comma nd Att ributes The f ollowing attribut es are r ead-only and canno t be changed : • Port Status – Displays cu rren t state of thi s port with in the Spanning Tree: - Disa bled - The p ort has been d isable d by th e user or has fail ed dia gno stics . - Blocking - Po rt recei ves STA conf iguration message[...]

S PANN ING T RE E A LGOR ITHM C ONFIGURATIO N 2-49 • Designated Cost – The cost fo r a pack et to travel fr om thi s port to t he root i n t he c urre nt Sp anni ng Tr ee config urat ion. The slo wer the media, t he high er the cost. • Designated Bridge – The p riority and MAC ad dress of th e devi ce th rough wh ich this port must communi [...]

C ONFIGURI NG THE S WI TC H 2-50 • Path Cost – This paramete r is used by the STP to d etermi ne the bes t path be tween d evices. Ther efore, lowe r value s should be assign ed to po rts att ached to faster medi a, and h igher va lues assigne d to ports wi th slowe r media. (Path cost takes pr ecedenc e ove r port prior ity.) - F ull Rang e: 1[...]

S PANN ING T RE E A LGOR ITHM C ONFIGURATIO N 2-51 Displaying the Interface Settings for STA We b – Click Spanning T ree, ST A Port Information or ST A T runk Inf ormation. CLI – This exam ple shows th e ST A attribu tes for port 5. Console#show spanning tree ethernet 1/5 3-119 Bridge-group information ----------------------------------- ------[...]

C ONFIGURI NG THE S WI TC H 2-52 Configuring the Interface Settings for STA We b – Click Spanning T ree, ST A Port Configur ation or ST A T runk Confi guration. Mo dify the requi red attrib utes, th en click Appl y. CLI – T his ex ample set s ST A att ributes for po rt 5. VLAN Configuration In con ventional n etworks with r outers, broadcas t t[...]

VLAN C ONFIGURATIO N 2-53 VLA Ns help t o simpl ify net work man ageme nt by all owing you to move d evice s to a new VLAN without having to chan ge any phy sical c onnect ions. V LANs c an be easily or ganiz ed to re flect depa rtmental groups (such as Marketin g or R& D), usage groups (such as e-m ail), or multic ast grou ps ( used for multim[...]

C ONFIGURI NG THE S WI TC H 2-54 traffic t o the s ame VLA N(s), ei ther manual ly or dynamicall y using GVRP . Howeve r , if you want a port on th is switch to par ticipate in one or more VLA Ns, but no ne of the interme diate ne twork devi ces nor the hos t at t he othe r end of th e co nnectio n supp orts VLANs, the n you sh ould add this port t[...]

VLAN C ONFIGURATIO N 2-55 Automatic VLAN Registrat ion – GVRP (GAR P VLAN Re gistra tion Prot ocol ) def ines a syste m whe reb y the sw itch can aut oma tical ly learn t he VLAN s to whic h eac h endst ation should be assig ned. If an endst ation (or its net work adapte r) suppor ts the IEE E 802.1 Q VLA N protoc ol, it can b e config ured to br[...]

C ONFIGURI NG THE S WI TC H 2-56 Forwarding Tagged/Untagged Frames If you want to create a small port-base d V LAN for devices attached dir ectly to a sin gle switc h, you can assign po rts to the sam e unt agged V LAN. Ho wever , to p articip ate in a VLAN g roup that cros ses se veral sw itche s, you ne ed to create a VL AN for t hat gr oup and e[...]

VLAN C ONFIGURATIO N 2-57 *W eb On ly We b – Cli ck VL AN, VLA N Base In format ion. CLI – E nter t he followi ng com mand. Displaying Current VLANs The VLAN Curre nt T able s hows the cu rren t port memb ers of each VLAN an d wh ether or not the p ort s upports VL AN tagg ing. Port s assig ned to a larg e VLAN group t hat cros ses several swit[...]

C ONFIGURI NG THE S WI TC H 2-58 • Status – Shows how th is VLAN was adde d to the swi tch. - Dynamic GVRP : Automat ically lear ned via GVRP. - Permanent : Added as a static entry. • Egress Ports – Sh ows all the VLAN port members . • Untagged Por ts – Shows the unta gged VLAN por t mem bers. We b – Cli ck VL AN, VL AN Cu rren t T ab[...]

VLAN C ONFIGURATIO N 2-59 • Ports / Channel groups – Shows the VLA N interface member s. CLI – C urrent VLAN i nformation can b e displ ayed with the follo wing comm and. Creating VLANs Use t he VLAN Static List t o create or re move VL AN groups . T o propagate information about VLAN gr oup s used on thi s swit ch to external n etwork dev ic[...]

C ONFIGURI NG THE S WI TC H 2-60 • State (CLI) – Shows if thi s VLAN is enabled or disabled. - Active : VLAN is operat ional. - Suspend : VLAN is su spended ; i.e., doe s not pass p ackets. • Add – Adds a new VLAN group to th e curren t list. • Remove – Re moves a VLAN gr oup fro m the cu rrent l ist. I f any port is assign ed to this g[...]

VLAN C ONFIGURATIO N 2-61 Adding Static Members to VLANs (VLAN Index) Use t he VLAN Static T able to confi gure por t member s for the select ed VLAN in dex. A ssign ports as ta gged i f th ey are conn ected to 802 .1Q VLAN complian t devices , or untagged th ey are not con nected to any VLA N-aware devices . Or confi gure a por t as fo rbidden to [...]

C ONFIGURI NG THE S WI TC H 2-62 • Member ship T ype – Select VLAN m embership fo r each int erface by marking t he approp riate rad io button for a port or trunk: - Tagged : Interface is a member o f the VLA N. All p ackets transm itted by the po rt will be tag ged, t hat is, carry a tag an d the refore ca rry VLA N or Co S informati on. - Unt[...]

VLAN C ONFIGURATIO N 2-63 We b – Cli ck VLAN , VLAN Stati c T abl e. Select a VLAN ID fr om the scro ll-down list. Modify the VLA N name and status i f requ ired. Selec t the member ship type by m arking the app ropri ate radi o butt on in th e list of ports or trun ks. Cl ick Appl y. CLI – T his ex ample ad ds the required inte rfaces. Console[...]

C ONFIGURI NG THE S WI TC H 2-64 Adding Static Members to VLANs (Port Index) Use t he VLAN Static Members hip by Port m enu to a ssign VLAN grou ps to the se lected inter fac e add an int erf ace to the se lecte d VLAN as a tag ged me mber . Comma nd Att ributes • Interface – Por t or t runk iden tifie r. • Member – VLAN s for which the sel[...]

VLAN C ONFIGURATIO N 2-65 CLI – T his ex ample ad ds Port 3 to VLAN 1 as a tagg ed port. Configuring VLAN Behavior for Interfaces Y o u ca n confi gur e VLA N behav ior for spec ifi c int erfa ces , inc ludin g the de fault VLA N identifi er (PVID ), accept ed frame types, i ngress filt ering, GVRP st atus, and GARP timers . Comma nd Usage • GV[...]

C ONFIGURI NG THE S WI TC H 2-66 - If ingress filtering is enabled , the in terface will discar d inco ming fram es tagg ed f or VLA Ns wh ich do not includ e th is ingr ess po rt in their m embe r set. - Ingress f iltering does no t affect VLAN ind epende nt BPDU frames, such as GVRP or STP . How ever, it does affect VLAN dep endent BPDU frames, s[...]

VLAN C ONFIGURATIO N 2-67 • GARP Leave Timer * – The interval a p ort wait s before leav ing a VL A N gr o up . T h is t im e s h o ul d b e s e t to m o re t h a n t w ic e t he join time. T his en sures th at af ter a Leave or Leave All message has b een is sued , the a ppl icant s can rejo in b efore the port actuall y leave s the group. (Ra[...]

C ONFIGURI NG THE S WI TC H 2-68 We b – Cli ck VLAN, VLAN Port Conf igurati on or VLAN T runk Confi guration. Fill in the req uired s etting s for ea ch inte rface, cli ck Apply. CLI – T his ex ample set s port 3 to ac cept o nly ta gged fram es, assig ns PVID 2 as the native V LAN ID, enables GVRP , sets t he GARP timers, and then se ts the sw[...]

C ONFIGURI NG P RIVA TE VLAN S 2-69 por ts in their o wn co mmunit y VLAN , and wi th thei r de signate d prom iscuous port s. (Not e that private VLA Ns and normal VLAN s can exist simult aneously within t he sam e switc h.) Eac h privat e VLAN con sists of two com pone nts: a pri mar y VLAN and one or more c ommunity VLANs. A primary VLAN allows [...]

C ONFIGURI NG THE S WI TC H 2-70 Comma nd Att ributes • VLAN ID – ID of config ured VLAN (1-4 094, no lead ing zero es). • Primary VLAN – The primar y VL AN with which t he sele cted VLAN is associated . (N ote that th is disp lays as VLAN 0 if the select ed VLAN is itse lf a primary VLAN .) • Ports List – T he list of ports (and assign[...]

C ONFIGURI NG P RIVA TE VLAN S 2-71 CLI – This example shows the sw itch c onfigure d with primary VLAN 5 and sec ondary VLAN 6. P ort 3 h as bee n config ured as a prom iscuous p ort an d mapped t o VLAN 5 , while p orts 4 an d 5 have bee n configur ed as a hos t p orts and are a sso ciated w ith VLA N 6. This means th at traffic f or port 4 and[...]

C ONFIGURI NG THE S WI TC H 2-72 We b – Click P rivate VLAN , Private VLAN Configurati on. En ter the VLA N ID number , select Prim ary or Commun ity type , then cli ck Add. T o rem ove a pri vate VLA N from the swi tch, h ighlight an entry in t he Curr ent lis t box and th en click R emove. Note that all memb er po rts m ust be remo ved fr om th[...]

C ONFIGURI NG P RIVA TE VLAN S 2-73 We b – Click Private VLAN, Private VLAN Ass ociation. Sel ect the req uired primar y VLAN from t he scroll-d own box, hig hlight one or more co mmunit y VLANs in the No n-Asso ciation li st box, and cl ick Add t o assoc iate th ese entri es with the se lected primary VLAN. (A comm unity VLA N can onl y be asso [...]

C ONFIGURI NG THE S WI TC H 2-74 Comma nd Att ributes • Port/Trunk – The switch inter face. • PVLAN Port Type – Display s private VLA N port type s. - Normal – T he po rt is not co nfigur ed in a priv ate VL AN. - Host – The por t is a communit y po rt and can only comm unicate wit h other port s in its own commu nity VLAN , and wi th t[...]

C ONFIGURI NG P RIVA TE VLAN S 2-75 CLI – This example shows the sw itch c onfigure d with primary VLAN 5 and sec ondary VLAN 6. P ort 3 h as bee n config ured as a prom iscuous p ort an d mapped t o VLAN 5 , while p orts 4 an d 5 have be en config ured as a host por ts and ass ociated wit h VLAN 6. This means that t raffi c f or port 4 an d 5 ca[...]

C ONFIGURI NG THE S WI TC H 2-76 • Primary VLAN – Co nveys t raffic betwee n prom iscuou s port s, and b etween promis cuous p orts and commu nity po rts wi thin the associated secondary VLANs . I f PVLAN type is “Pr omiscuous ,” then s pecif y the associ ated pr imary VLAN . For “Host ” type, the Pr imary VLA N display ed is t he one t[...]

C LASS OF S ERVI CE C ONFIGURATIO N 2-77 CLI – This example shows the sw itch c onfigure d with primary VLAN 5 and sec ondary VLAN 6. P ort 3 h as bee n config ured as a prom iscuous p ort an d mapped t o VLAN 5 , while p orts 4 an d 5 have be en config ured as a host por ts and ass ociated wit h VLAN 6. This means that t raffi c f or port 4 an d[...]

C ONFIGURI NG THE S WI TC H 2-78 Thi s switc h uses W eighte d Round -Robin as the de faul t mode for each port. Up t o 8 sep arate traffic classes are defined in IEEE 802. 1p. The defaul t prio rity levels are assi gned accord ing to recom mendati ons i n the IE EE 802.1 p stand ard as shown i n the follo wing tabl e. Inbo und frame s that do not [...]

P ORT T RUNK C ONFIGURATIO N 2-79 Comma nd Att ributes • WRR – Weighted Ro und-R obin share s bandwidth at th e egress port s by using sche duling weig hts of 1, 3, 12 and 48 for queue 0, 1, 2 and 3 respec tive ly. • Strict – Ser vices th e egres s queue s in sequ ential order, trans mittin g all traffic in the hig her priori ty queue s bef[...]

C ONFIGURI NG THE S WI TC H 2-80 Comma nd Usage Besi des bala ncing the loa d across each por t in the trunk, th e othe r port s provide redundan cy by taking ove r the load if a port in the trunk fails. Howeve r , befor e making any phy sical c onnecti ons bet ween devi ces, use the W eb interface or CLI to spe cify the tr unk on t he devic es at [...]

P ORT T RUNK C ONFIGURATIO N 2-81 • New – Select s a predef ined port gro up to a dd to the spec ifie d trunk. We b – Clic k T runk, T r unk Configur ation. Enter a trunk ID of 1 -4 in the Trunk fi eld, se lect an y of th e pred efin ed port gr oups from the scro ll-down list, and click A dd. T o remo ve a tru nk, type t he trunk iden tifier [...]

C ONFIGURI NG THE S WI TC H 2-82 CLI – T his ex ample c reates trunk 1 with ports 5 and 17 . Jus t con nect thes e por ts to two static trun k ports o n anothe r switc h to form a trunk. Configuring SNMP SNMP (Simple Ne twork Managemen t Protocol) is a communicat ion prot ocol des igned sp ecifical ly for managing devices or ot her elem ents on a[...]

C ONFIGURI NG SNMP 2-83 sub mit a vali d communit y str ing for aut hentic ation. T he opti ons for con figuring commun ity st rings and re lated trap func tions ar e des cribed in th e followin g sectio ns. Setting Community Access Strings Y ou ma y config ure u p to fi ve com munit y stri ngs aut hori zed fo r manageme nt acces s. All community s[...]

C ONFIGURI NG THE S WI TC H 2-84 We b – Click SN MP , SNMP Config uration. Add ne w commu nity strings as requir ed, se lect the access righ ts from the Access M ode drop -do wn lis t, the n clic k Add. CLI – T he follo wing e xample add s the s tring “spiderman” with read/w rite ac cess. Specifying Trap Managers and Trap Types T raps indic[...]

C ONFIGURI NG SNMP 2-85 Comma nd Usage • You c an enable o r disabl e authent icati on messa ges via t he Web inte rfac e. • You c an enable or dis able authe nticat ion messages or link- up-down me ssages via the CLI. Comma nd Att ributes • Trap Manage r Capability – Indi cates that the s witch su pports up to f ive tra p mana gers . • T[...]

C ONFIGURI NG THE S WI TC H 2-86 We b – Clic k S NMP , SNMP Config uration. Fi ll in the IP addr ess and comm unity s tring f or each T rap M anager t hat will r eceive these mess ages, mark Enable Authen tica tion T raps i f requ ired, and then clic k Add. CLI – Thi s example adds a trap manager and en ables authen tication trap s. Multicast C[...]

M ULT ICA ST C ONFIGURATIO N 2-87 Thi s switch uses I GMP (Inte r net Group Managemen t Prot ocol) to quer y for any attached hos ts that want to rec eive a specific mul ticast ser vice. It ident ifies t he ports co ntaini ng host s request ing to join th e serv ice and s ends dat a out t o th ose port s only. It the n prop agates t he ser vice re [...]

C ONFIGURI NG THE S WI TC H 2-88 adjac ent mul ticast swi tch/r outer t o ensur e that it will cont inue to re ceive the m ulticas t servic e. Note: M ulticast router s use this in formation, along wit h a mul ticast r outing p rotocol such as DVMRP or PIM, to supp ort IP multicas ting ac ross t he Int ernet. Comma nd Att ributes • IGMP Status ?[...]

M ULT ICA ST C ONFIGURATIO N 2-89 We b – Cli ck IGMP , IGMP Conf igurati on. Adjust the IGM P set tings as re quired, an d then clic k Apply. (T he defau lt setti ngs are shown bel ow.) CLI – Th is exa mpl e mo difies the settin gs f or mu ltica st fi lter ing, a nd then display s the curr ent status. Interfaces Attached to a Multicast Router M[...]

C ONFIGURI NG THE S WI TC H 2-90 Y ou can use the Mul ticast Ro uter Port I nformati on page to display the por ts on this swi tch attac hed to a neig hbori ng multica st route r/ switch for each V LAN I D. Displ aying Interf aces Attached to a M ulticast Router Command Attributes • VLAN ID – ID of confi gured VLA N (1-409 4). • Mult icast Ro[...]

M ULT ICA ST C ONFIGURATIO N 2-91 Specifying Interfaces Attached to a Multicast Router Dep ending o n your n etwork c onnecti ons, IGM P snoop ing may not always be able to lo cate th e IGMP q uerier . Ther efore, if the IGMP quer ier is a known m ulticas t rout er/swi tch co nnected over the net work to an i nterface (port or trunk) on your switch[...]

C ONFIGURI NG THE S WI TC H 2-92 CLI – T his exam ple con figures port 11 as a mul ticast r outer por t within VLAN 1. Displaying Port Members of Multicast Services Y ou can d isplay t he por t member s associ ated with a spec ified VLA N and multicas t IP address. Comma nd Att ribute • VLAN ID – Se lects th e VLAN in whic h to di splay p ort[...]

M ULT ICA ST C ONFIGURATIO N 2-93 We b – Click IG MP , I P Mu ltic ast R egist ratio n Table. S elec t the VLAN ID a nd mult ic ast IP a ddres s. The swit ch wil l disp lay a ll the po rts that are propagating th is mult ica st servic e. CLI – This examp le di spla ys al l the kn own mult ica st serv ices suppo rted on VLAN 1, al ong with th e [...]

C ONFIGURI NG THE S WI TC H 2-94 Adding Multicast Addresses to VLANs Mult icast filt ering can be d ynamical ly co nfigured using IGMP Snoo ping and IGMP Que ry me ssag es as desc ribe d in “ Con figu ring IGM P Paramete rs” on page 2-8 7 . For certain app lication that requ ire tight er contr ol, you may need to st atically configu re a mult i[...]

M ULT ICA ST C ONFIGURATIO N 2-95 We b – Clic k IGMP , IGMP Member Por t T able. Spec ify the interface attached to a mu lticast service (via an IG MP -enab led switch or mult icast rou ter), indi cate the VLA N that wil l propagate the multi cast ser vice, sp ecify th e mult icast IP ad dress, and then click Add . After you have compl eted add i[...]

C ONFIGURI NG THE S WI TC H 2-96 Showing Port Statistics Y ou can displ ay standard statis tics on netw ork traffic f rom the Int erfaces Grou p and Ethernet- like MIBs, as wel l as a detailed breakd own of tr affic based on th e RMOM M IB. Interf aces and Eth er net -like s tatisti cs display errors o n the traffi c passin g throug h each port. T [...]

S HO WING P ORT S TAT IST ICS 2-97 We b – Click Statist ics, P ort Statis tics. Se lect t he requi red inte rface, and cli ck Query. Y ou can also use th e Ref resh butt on at the bott om of th e page to u pdate the scre en.[...]

C ONFIGURI NG THE S WI TC H 2-98 CLI – This exam ple shows st atisti cs for port 1. Rate Limit Configu ration This funct ion all ows th e netw ork m anager to co ntrol the m aximum rat e fo r traff ic tr ansm itted o r rec eive d on an inte r fa ce. R ate li miti ng is c onfigure d on interf aces at th e edge of a net work to lim it traffi c into[...]

R ATE L IMI T C ONFIGURATIO N 2-99 Rat e limit ing can b e appl ied to in dividual p orts or trunks . When an int erface is configur ed with this featur e, the traffic rat e will be mon itore d by the hard ware to veri fy confo rmity. No n-conf orming traffic is dr opped, conforming traffic is for warded wit hout any chang es. Comma nd Att ribute ?[...]

C ONFIGURI NG THE S WI TC H 2-100 We b - Click R ate Limit, Inpu t/Outpu t Rate Limit Po rt/T run k Confi guration. Enable the Rate Limit Stat us for t he require d inter fac es, set th e Rate Limi t to one of the options shown i n the prec edi ng tabl e, and cl ick A pply. CLI - Th is examp le se ts the rate l imit fo r inp ut and o utput traffi c[...]

C ONFIGU RING 802.1 X P ORT A UTHENT ICATION 2-101 The IEEE 802 .1x (dot 1x) st andard de fines a p ort-based acce ss cont rol proc edure tha t pr even ts una uthor iz ed ac cess to a netwo rk by r equirin g user s to first enter a user I D and p asswor d for authen ticatio n. Access t o all switch ports in a net work can be cent rally cont rolle d[...]

C ONFIGURI NG THE S WI TC H 2-102 Displaying 802.1x Global Settings The dot1x prot ocol i nclud es glob al para meter s that contro l th e cli ent auth entica tion p roces s that runs b etween the cl ient and the swit ch (i.e. , authen ticator) , as wel l as the client identi ty lookup proc ess that ru ns betw een the switc h and authent ication se[...]

C ONFIGU RING 802.1 X P ORT A UTHENT ICATION 2-103 We b – Click d ot1x, dot1 X Infor mation . CLI - This e xample shows t he defa ult pr otocol setti ngs for dot1x . Configuring 802.1x Global Settings The dot1x protocol includes g lobal parameters that control the client authentication proce ss that runs be tween the client and the s w i tch (i.e[...]

C ONFIGURI NG THE S WI TC H 2-104 identity look up process t hat runs between the switch and authentic ation server. The configuration opt ions for parameters are d escribed in t his section. Comma nd Att ributes • dot1X Re-authentication – Se ts the cli ent to be re- authenti cated aft er the i nterval s pecifie d by the Ti meout for Re- authe[...]

C ONFIGU RING 802.1 X P ORT A UTHENT ICATION 2-105 We b – Se lect d ot1x, dot 1X Conf iguratio n. Enab le dot1 x gl obally f or the swit ch, modify any of t he parame ters req uired, and t hen click Apply. CLI – Th is exam ple enab les re-a uthenti cation a nd sets all of the global parameters fo r dot1x. Configuring a Port for Authorization Wh[...]

C ONFIGURI NG THE S WI TC H 2-106 • Mode – Se ts the authent ication mode t o one of th e foll owing opti ons: - For ce-Au thoriz ed – Confi gures th e port to grant access to all cli ents, eit her dot 1x-aware or other wise. - F orce-Unauthori zed – Configu res the port to deny ac cess t o all c lients, e ither dot1x-aware or oth erwise. -[...]

C ONFIGU RING 802.1 X P ORT A UTHENT ICATION 2-107 CLI – This e xample sets the au thenti cation mod e to enable do t1x on po rt 2. Displaying 802.1x Statistics Thi s switc h can d ispla y stati stics for dot1x pr otocol exchang es fo r any port. Stat istica l V alues Console(config)#interfa ce ethernet 1/2 Console(config-if)#dot1 x port-control [...]

C ONFIGURI NG THE S WI TC H 2-108 We b – Sel ect dot1 x foll owed by dot1X s tatistic s. Selec t the requ ired po rt and t hen cl ick Query . Click R efresh to upd ate statis tics. Tx EAPOL Total The number of EAPO L frames of any type that have been transmitted by this Auth enticator. Tx EAP Req/Id The number of EAP Req/Id fr ames that have been[...]

C ONFIGU RING 802.1 X P ORT A UTHENT ICATION 2-109 CLI – Th is examp le disp lays the d ot1x stat istics for port 1. Console#show dot1x stat istics Eth 1/1 Rx: E XPOL EAPOL EAPOL EAPOL EAP EAP EAP Start Logoff Invalid Total Resp/Id Resp/Oth LenError 0000 0 0 0 Last Last EAPOLVer EAPOLSrc 0 00-00-00-00-00-00 Tx: EAPOL EAP EAP Total Req/Id Req/Oth [...]

C ONFIGURI NG THE S WI TC H 2-110[...]

U SING THE C OMMAND L INE I NTER FAC E 3-1 C HAPTER 3 C OMMAND L IN E I NTERF ACE Thi s chapt er desc ribes h ow to us e th e Command Li ne In terface (CLI). Using the Command Line Interface Accessing the CLI When access ing t he manage ment i nterface for the s witch o ver a dir ect co nnec tion to the se rver’s consol e por t, or vi a a T eln e[...]

C OMMAND L INE I NTER FAC E 3-2 2. Enter th e nece ssary c ommands to comple te your desi red tasks. 3. When fi nishe d, exit th e sessi on with th e “qui t” or “exi t” command . Aft er co nnecti ng to the sy stem t hrough the c onsole p ort , the lo gin scre en displ ays: Telnet Connection T elnet op erates ove r the IP tr ansport pro toco[...]

U SING THE C OMMAND L INE I NTER FAC E 3-3 If y our corpo rate netwo rk is conn ected t o another ne twor k o utside your office or t o the Int ernet, you need to ap ply fo r a regist ered IP addr ess. Howe ver , i f yo u are attach ed to an is olated net work, then you can use any IP ad dre ss that m atche s the n etwor k seg ment t o which y ou a[...]

C OMMAND L INE I NTER FAC E 3-4 Entering Commands This sec tion descr ibe s how to enter CL I com man ds. Keywords and Arguments A CLI co mmand is a seri es of keyw ords and ar gumen ts. Keyword s iden tify a comman d, and arg uments spe cify config uration par amete rs. For exam ple, in th e command “sho w interfaces status eth er net 1/5,” sh[...]

E NTE RING C OMMANDS 3-5 Command Completion If you te rmin ate inpu t with a T ab key , the CLI wil l print th e remaini ng charac ters o f a part ial keyword up to t he point of ambi guity. In th e “loggin g history” example, ty ping log followed by a t ab will resu lt in p rintin g the co mma nd up to “ logging .” Getting Help on Commands[...]

C OMMAND L INE I NTER FAC E 3-6 The comm and “ show inter fac es ? ” will d isplay the follo wing inf or mat ion : Partial Keyword Lookup If yo u terminat e a part ial keywor d with a questi on mar k, alte r nativ es that ma tch the initial letters are provid ed. (Remem ber not to leave a space b etween the command and q uestion mark.) For ex a[...]

E NTE RING C OMMANDS 3-7 Understanding Command Modes The com mand set is divid ed into Exec an d Conf igur ation class es. Exe c commands ge nerall y display inf ormation on sys tem st atus or cle ar stat istical count ers. Co nfigurat ion com mands, on the other hand, modif y interfac e param eters or enable c ertain switchi ng func tions. These c[...]

C OMMAND L INE I NTER FAC E 3-8 enable comma nd, followe d by th e privi leged le vel pa ssword “sup er ” (pag e 3-2 9). T o ente r Privile ged Exec mode, ente r the fol lowing com mand s and passwor ds: Configuration Commands Confi guratio n command s are p rivileg ed level commands used t o modi fy sw itch settin gs. Th ese comm ands mo dify [...]

E NTE RING C OMMANDS 3-9 • Int erface Configu ration - These commands modif y the por t con figurati on such as speed-duplex and negotiation . • Line Con figurat ion - These com mands modify th e console port and T elnet conf iguratio n, and incl ude co mmand suc h as par ity and databits . • VLAN Configur ation - Includes the com mand to cre[...]

C OMMAND L INE I NTER FAC E 3-10 Command Line Processing Commands are not case sensi tive. Y ou can abbrev iate commands and par amete rs as long as th ey contain enough lett ers to differen tiate them fr om any other current ly availa ble comman ds or par amete rs. Y ou c an use the T ab key to com plete part ial comm ands, or enter a p artia l co[...]

C OMMAND G RO UP S 3-11 RADIUS Client Configures RADIUS client-server authe ntication for logon access 3-38 Port Authentication Configures IEEE 802.1x port access c ontrol 3 -44 SNMP Activates authentication failure traps; configures community access strings, and trap m anagers 3-54 IGMP Snooping Configures IGMP multicast filtering , querier eligib[...]

C OMMAND L INE I NTER FAC E 3-12 Note: Note th at the acc ess mo de sho wn in th e foll owing tables i s ind icate d by th ese ab brev iati ons: NE (Nor mal Exec) PE (Pri vile ged Exec ) GC (Global Co nfiguration ) IC (Interfac e Configur ation) LC (Line Configu ration) VC (VLAN Database Con figurati on) Mirror Port Mirrors data to another port for[...]

G ENERAL C OMMANDS 3-13 General Commands enable Use thi s command to act ivate Priv ileg ed Exec mode. In priv ilege d mode, additi onal comm ands are av ailable, and certain commands displ ay additio nal inf or matio n. See “U nderstand ing Comman d Mode s” on page 3 -7. Syntax enable [ level ] lev el - Priv ilege level to lo g int o the d evi[...]

C OMMAND L INE I NTER FAC E 3-14 Default Settin g Level 15 Command Mode Norm al Exec Command Us age • “su per” is the def ault passwor d requi red t o ch ange th e comm and mode fro m Nor mal Exec to Pr ivi lege d Ex ec. ( To s et thi s passwor d, see the enable password com mand on page 3-2 9.) • Th e “#” characte r is appende d to the[...]

G ENERAL C OMMANDS 3-15 Command Us age The “> ” char acter is app ended to the e nd of th e prompt to indic ate th at the sys tem is i n nor mal access mode. Example Related Commands enabl e (3-13) configure Use t his co mman d to act ivate Global C onfigu ration mode. Y ou must ent er this mo de to mod ify any se ttings o n the switc h. Y o[...]

C OMMAND L INE I NTER FAC E 3-16 show history Use t his comman d to sh ow the c ontent s of t he com mand his tory buf fe r . Default Settin g None Command Mode Norma l Exec, Pri vileg ed Exec Command Us age The history bu ffer si ze is fi xed at 10 Execution comman ds and 10 Confi guration c ommands. Example In th is exam ple, the sh ow his tory c[...]

G ENERAL C OMMANDS 3-17 example, the !2 com mand re peats t he s econd c ommand in the Exe cution his tory buffe r ( config ). reload Use this c ommand to restar t the syste m. Note: W hen the system is res tarted, it will always ru n the Power-On Self-Test . It will also reta in all configurat ion inf ormati on stor ed in n on-vol atile memory b y[...]

C OMMAND L INE I NTER FAC E 3-18 Command Mode Glob al Configu ration, I nterface Conf iguration , Line Confi guration, VLAN Data base Confi guration Example Thi s example shows how to return to t he Pri vileged Exec m ode from the In terface Co nfigurat ion mod e: exit Use this command to return to the p revious config uration mode or exit the co n[...]

F LASH /F ILE C OMMANDS 3-19 quit Use t his co mmand t o exit the co nfigu ration p rogram. Default Settin g None Command Mode Norma l Exec, Pri vileg ed Exec Command Us age The quit and e xit comma nds can b oth exit t he config uration progra m. Example Thi s example sho ws how to quit a CLI sessio n: Flash/ File Comman ds Thes e comm and s are u[...]

C OMMAND L INE I NTER FAC E 3-20 copy Use t his co mmand t o mo ve (uplo ad/download ) a co de image or con figurati on fil e bet ween t he swit ch’s F lash memor y and a TF TP serve r . Whe n you save the sys tem code or conf igura tion set tings t o a file on a TF TP server , that file can later b e down loaded to the switch to re stor e syst e[...]

F LASH /F ILE C OMMANDS 3-21 Command Us age • Th e system prom pts for da ta requir ed to c ompl ete the co py command . • The destin ation file n ame s hould no t co ntain sl ashes ( or /), the le ading letter o f the file name s hould not be a p eriod (.), and t he maxi mum le ngth for fi le names on the TFTP server i s 127 characters or 31 [...]

C OMMAND L INE I NTER FAC E 3-22 The followi ng examp le sh ows how t o copy the running configuration to a startup file. The f ollowing example shows ho w to down load a co nfigurat ion file: delete Use th is com mand to de lete a file or image. Syntax delete filename file name - Name of t he confi gurati on file o r image name. Default Settin g N[...]

F LASH /F ILE C OMMANDS 3-23 Command Us age • If t he file t ype is us ed for s ystem s tartup, then th is file cannot be de let ed. • “Fac tory_D efault_Co nfig.c fg” cann ot b e delete d. Example Thi s exampl e sho ws how to delet e the test 2.cfg c onfig uration file from Flash memo ry. Related Commands dir (3 -23) dir Use t his co mmand[...]

C OMMAND L INE I NTER FAC E 3-24 Command Us age • If you enter th e command dir without an y parame ters, t he system displ ays all file s. • Fi le in forma tio n is sh own be low: Example The f oll owin g ex ampl e sho ws how to di splay all f ile in fo rm atio n: whichboot Use t his co mmand t o disp lay whi ch files booted. Default Settin g [...]

F LASH /F ILE C OMMANDS 3-25 Example Thi s example s hows the i nformati on displa yed by t he whichboot comm and. See the table un der the dir c ommand for a desc ription of t he file in formation d isplayed b y this command. boot system Use t his com mand to specify the file o r image used to start up the system . Syntax boot system { boot-r om |[...]

C OMMAND L INE I NTER FAC E 3-26 Example Related Commands dir (3 -23) whichbo ot (3-24) System Management Commands The se commands are us ed to contr ol system lo gs, pass words, user name s, br owser con figurat ion opt ions, an d displ ay or confi gure a vari ety of other s ystem info r mat ion. Console(config)#boot sy stem config: startup Consol[...]

S YSTEM M ANA GE MEN T C OMMANDS 3-27 hostname Use t his co mman d to spec ify or modify the host name for t his devi ce. Us e the no form to rest ore the def ault hos t name . Syntax hostname na me no hostname name - T he name of t his hos t. (Maxi mum l ength: 2 55 characters) Default Settin g None Command Mode Glob al Configu ration Example user[...]

C OMMAND L INE I NTER FAC E 3-28 Syntax user name name { access- level level | nopasswor d | passwor d { 0 | 7 } password } no user name name • name - The name of th e user. (Maxi mum leng th: 8 character s, cas e sens itive. M aximum use rs: 16) • acce ss-level level - Sp ecifies t he user level. • The device has two pr edefin ed privil ege [...]

S YSTEM M ANA GE MEN T C OMMANDS 3-29 Example This example sh ows how the set th e access l evel and pas sword for a user . enable password Aft er init ially l ogging o nto the syst em, you shoul d set the Pri vileged Exec pas sword. R emember to recor d it in a safe pl ace. Use t his command t o co ntrol ac cess to the Privile ged Ex ec level from[...]

C OMMAND L INE I NTER FAC E 3-30 p a s s w o r d t o c h a n g e t h e c o m m a n d m o d e f r o m N o r m a l E x e c t o Pri vileged Exec wi th the ena ble command (page 3-13 ). • The encrypt ed pa ssword is requir ed for c ompatibil ity with leg acy pa ssword s etting s (i.e., plain t ext or en crypt ed) whe n read ing the c onfig uration fi[...]

S YSTEM M ANA GE MEN T C OMMANDS 3-31 Related Commands ip h ttp se rver (3- 31) ip http server Use th is com mand to al low th is devi ce to be moni tored o r con figured from a br owser . Use t he no form to disab le this fu nction. Syntax ip ht tp s erve r no i p http se rver Default Settin g Ena ble d Command Mode Glob al Configu ration Example [...]

C OMMAND L INE I NTER FAC E 3-32 show startup-config Use thi s comman d to display th e configur ation fil e stored in non- volati le mem ory that i s used to st art up the syst em. Default Settin g None Command Mode Pri vileged E xec Command Us age • Use this comm and in conj unctio n wi th the show running-config c ommand to compare the in form[...]

S YSTEM M ANA GE MEN T C OMMANDS 3-33 Example Related Commands sho w runni ng-con fig (3-34) Console#show startup-co nfig building startup-config , please wait..... ! username admin access-l evel 15 username admin password 0 admin ! username guest access-l evel 0 username guest password 0 guest ! enable password level 1 5 0 super ! snmp community p[...]

C OMMAND L INE I NTER FAC E 3-34 show running-config Use thi s command to disp lay the config uration in formation curre ntly in use. Default Settin g None Command Mode Pri vileged E xec Command Us age • Use this comm and in conj unctio n wi th the show startup -config command to compare t he infor mation in runn ing m emory to the info rmat ion [...]

S YSTEM M ANA GE MEN T C OMMANDS 3-35 Example Related Commands show s tart up-con fig (3- 32) Console#show running-co nfig building running-config , please wait..... ! ! snmp-server community p rivate rw snmp-server community p ublic ro ! username admin access-l evel 15 username admin password 7 21232f297a57a5a743894a0e4a801fc3 username guest acces[...]

C OMMAND L INE I NTER FAC E 3-36 show system Use thi s command to disp lay syste m infor mati on. Default Settin g None Command Mode Norma l Exec, Pri vileg ed Exec Command Us age • For a d escri ption o f the i tems s hown by t his co mmand, refer to “Displaying System Information” o n page -9. • The POST resul ts sh ould all d isplay “P[...]

S YSTEM M ANA GE MEN T C OMMANDS 3-37 show users Shows all acti ve cons ole and T elnet ses sions, inc luding user name , idle time, and IP add ress of T elnet client . Default Settin g None Command Mode Norma l Exec, Pri vileg ed Exec Command Us age The sessio n used to execut e this c ommand is indic ated by a “*” symbo l next t o the Line (i[...]

C OMMAND L INE I NTER FAC E 3-38 Command Us age See “Displayin g Switch Hardware/Software V ers ions” o n pag e -28 fo r deta iled inform ation on s oftware it ems. Th e meaning of hardware items are as follows: • Seria l Number – Serial numbe r of the main bo ard. • Hardware Version – H ardware versi on of t he main board . • Number [...]

A UTH ENT ICAT ION C OMMANDS 3-39 authentication login Use t his comman d to defi ne th e login authe nticati on met hod and pre cedence . Use th e no for m t o re stor e the de fault. Syntax authen tication lo gin {[ local ] [ radius ]} no authe ntication lo gin • loc al - Use lo cal p assword only. • radius - Use RADIUS s erver pas sword o nl[...]

C OMMAND L INE I NTER FAC E 3-40 Command Us age • RADI US uses UDP wh ich o nly off ers be st-ef fort de live ry. Al so, note that RADI US e ncrypt s only th e passwo rd in the access -requ est packe t from the cl ient to the serv er. • RADIUS logon authentication ass i gns a s pecific p rivile ge level for eac h user name and pa sswor d pair. [...]

A UTH ENT ICAT ION C OMMANDS 3-41 Command Mode Glob al Configu ration Example radius-server port Use th is command to set the RA DIUS se rver n etwor k port. Us e the no form to re store th e defaul t. Syntax radius-serve r port port_number no radius-server port port_numb er - R ADIUS server U DP port u sed for authenticati on mes sages. (Range: 1-[...]

C OMMAND L INE I NTER FAC E 3-42 radius-server key Use thi s comman d to set the RA DIUS encr yption key . Use the no form t o rest ore the defa ult. Syntax radius-serve r key key_string no radius-server key key_string - Encryption key use d to authen ticate logon acces s for client. Do no t use bla nk spaces in the string. (Maxim um leng th: 2 0 c[...]

A UTH ENT ICAT ION C OMMANDS 3-43 Command Mode Glob al Configu ration Example radius-server timeout Use th is com mand to set the inte rval bet ween transmitti ng auth entica tion r equests to the RA DIUS se rver . Use t he no form to rest ore th e defa ult. Syntax radius-serve r timeout number_o f_seconds no radius-server timeout number_of_ second[...]

C OMMAND L INE I NTER FAC E 3-44 Command Mode Pri vileged E xec Example Port Authentication Commands The swit ch supports IEEE 802.1x (dot1x) port- based acces s control that p revent s unauth orized access t o th e networ k by requ iring user s to first en ter a user I D and passwor d for authe nticati on. Clie nt authe ntication is con trolled ce[...]

P ORT A UTH ENT ICAT ION C OMMANDS 3-45 authentication dot1x Sets th e default auth entic ation se rver type . Use the no form to rest ore th e defa ult. Syntax authentication dot1x default radius no authentication dot1x Default Settin g RADIUS Command Mode Glob al Configu ration Example dot1x timeout quiet-period Sets the time that a switch por t [...]

C OMMAND L INE I NTER FAC E 3-46 dot1x default Sets all configurabl e dot 1x gl obal and p ort s etti ngs to their defa ult val ues . Syntax dot1x default Command Mode Glob al Configu ration Example dot1x max-req Sets the m aximum numbe r of times the switch port will r etransmi t an EAP reques t packet to the clie nt befo re it time s out the auth[...]

P ORT A UTH ENT ICAT ION C OMMANDS 3-47 dot1x port-control Sets the do t1x mode on a port in terface . Use t he no form to re set to th e defaul t. Syntax dot1x port-contr ol { auto | force- aut hori zed | force-una uthorized } no dot1x port-contr ol • auto – Requi res a d ot1x-aware c onnect ed clie nt to b e auth orized by th e RADIUS se rver[...]

C OMMAND L INE I NTER FAC E 3-48 dot1x re-authenticate Forc es re-auth entication on all por ts or a specifi c interface. Syntax dot1x re-a uthenticate [ inter fac e ] inter face • ethernet un it / port - unit - This is de vice 1. - port - Por t num ber . Command Mode Pri vileged E xec Example dot1x re-authentication Enab les pe riodi c re-a uthe[...]

P ORT A UTH ENT ICAT ION C OMMANDS 3-49 dot1x timeout quiet-period Sets th e time that a switch port waits after th e Max Requ est Coun t has been exce ede d bef ore a ttemp ting to ac quir e a ne w c lient . Us e the no form of this comman d to rese t the defaul t. Syntax dot1x timeout quiet-period seconds no dot1x timeout quiet-period seco nds se[...]

C OMMAND L INE I NTER FAC E 3-50 Example dot1x timeout tx-period Sets th e time per iod dur ing an authe ntica tion se ssion th at the swit ch waits befo re re-t ransmi tting an EAP p acket . Use th e no for m to rese t to the d efault valu e. Syntax dot1x timeout tx-period secon ds no dot1x timeout tx-period seco nds - Numb er of seco nds. (Ran ge[...]

P ORT A UTH ENT ICAT ION C OMMANDS 3-51 show dot1x Use th is com mand to sho w gene ral port aut henti cation re late d settin gs on the switc h or a speci fic inter face. Syntax show dot1x [ stati stics ] [ inter face inter face ] inter face • ethernet un it / port - unit - This is de vice 1. - port - Por t num ber . Command Mode Pri vileged Ex [...]

C OMMAND L INE I NTER FAC E 3-52 • 802.1 X Port Details – Displ ays de tailed p ort ac cess con trol set tings for each i nterf ace as d escrib ed in t he prec eedi ng page s, including ad m instrative status for po rt access co ntrol, Max req uest (page 3-46), Qu iet per iod (pag e 3-49), Reauth peri od (page 3 -49), Tx per i od (page 3 -50), [...]

P ORT A UTH ENT ICAT ION C OMMANDS 3-53 Example Console#show dot1x Global 802.1X Parameter s reauth-enabled: yes reauth-period: 3600 quiet-period: 350 tx-period: 300 supp-timeout: 30 server-timeout: 30 reauth-max: 2 max-req: 2 802.1X Port Summary Port Name Status Mode Authorized 1 disabled ForceAuthorized n/a 2 enabled A uto n/a ...................[...]

C OMMAND L INE I NTER FAC E 3-54 SNMP Commands Cont rols acces s to this swit ch from manag ement stat ions usi ng the Simp le Netw ork Managemen t Prot ocol (SNMP), as well as t he error types se nt to trap manager s. snmp-server community Use thi s comman d to define th e commun ity acces s strin g for the Sim ple Netw ork Ma nage ment Pr otoc ol[...]

SNMP C OMMANDS 3-55 • rw - Specifies read-write ac ce ss. A uth orized manage ment stati ons are able t o both retrie ve and m odify M IB obj ects. Default Settin g • public - Re ad-only acc ess. Auth orized m anagemen t stations are only able t o retr ieve MIB obj ects. • pr ivate - Read /wri te ac cess. Auth orized manag ement stat ions are[...]

C OMMAND L INE I NTER FAC E 3-56 Example Related Commands snmp -server locati on snmp-server location Use t his comman d to se t th e syst em loc ation string . U se the no fo r m t o remov e the loca tion st ring. Syntax snmp-ser ver locati on te xt no snmp-ser ver locati on text - String that describe s the syste m locatio n. (Maximum length: 2 5[...]

SNMP C OMMANDS 3-57 snmp-server host Use this command to spe cify the recipie nt of a Simple Network Manag ement Pro tocol notificatio n oper ation. Use the no for m to remo ve th e spec ifie d hos t. Syntax snmp-ser ver host hos t-ad dr communi ty- string version version-n umber no snmp-ser ver host hos t-a ddr • host -ad dr - Na me or In terne [...]

C OMMAND L INE I NTER FAC E 3-58 The snmp- serv er hos t co mmand is us ed in con junction with the snmp-server enabl e traps command . Use the snmp-ser ver enable traps command to s pecify wh ich SNMP noti ficati ons a re se nt glob ally . For a host to re ceive notifi cations, at least o ne snmp-s erver ena ble tra ps command and the snmp-server [...]

SNMP C OMMANDS 3-59 Default Settin g Issue authen tica tion and li nk-up- down traps . Command Mode Glob al Configu ration Command Us age If yo u do not e nter an s nmp-server enable trap s comman d, no no tific ations control led by t his comm and are s ent. In order to con figure t his devic e to se nd SNMP notif icati ons, you m ust enter at lea[...]

C OMMAND L INE I NTER FAC E 3-60 Command Mode Norma l Exec, Pri vileg ed Exec Command Us age Thi s comma nd prov ides i nformation o n the c ommun ity acce ss st rings, counter informat ion fo r SNMP inp ut an d output prot ocol data units, an d whether o r not SNMP lo gging h as been ena bled wi th th e snmp-ser ver enable traps co mmand. Example [...]

IGMP S NOOPI NG C OMMANDS 3-61 IGMP Snooping Commands Thi s switch uses I GMP (Inte r net Group Managemen t Prot ocol) to quer y for any attached hos ts that want to rec eive a specific mul ticast ser vice. It ident ifies t he ports co ntaini ng host s request ing a servi ce and sends data out to t hose p orts only. I t then pro pagates the service[...]

C OMMAND L INE I NTER FAC E 3-62 Default Settin g Ena ble d Command Mode Glob al Configu ration Example The fo llowing ex ample e nable s IGMP sn oopin g. ip igmp snooping query-count Use t his command t o co nfigure the quer y co unt. U se the no form to restore t he de fault. Syntax ip igmp snooping query-count cou nt no ip igmp snooping query-co[...]

IGMP S NOOPI NG C OMMANDS 3-63 re sp on se -t im e . If the co untdown f inishe s, and the clie nt stil l has not r espond ed, then t hat c lient is co nsid ere d to ha ve lef t the multicast g roup. Example The followi ng sho ws how to conf igure t he que ry cou nt to 1 0: Related Commands ip ig mp s noo pin g qu ery- max -res pons e-ti me ( 3-6 3[...]

C OMMAND L INE I NTER FAC E 3-64 query-count , bu t a clie nt has n ot res ponded, a countdo wn timer is start ed usin g an in itial valu e set b y this comm and. If the coun tdow n fini shes, a nd the cl ient still has not re spon ded, th en that c lient i s co nsider ed to hav e left the m ulticast group . Example The foll owing s hows how to con[...]

IGMP S NOOPI NG C OMMANDS 3-65 Command Us age T h e s w i t c h m u s t b e u s i n g I G M P v 2 f o r t h i s c o m m a n d t o t a k e eff ect . Example The followi ng sho ws how to conf igure t he defa ult t imeout to 300 seco nds: Related Commands ip igmp snoopi ng vers ion (3-6 5) ip igmp snooping version Use t his comman d to co nfigur e the[...]

C OMMAND L INE I NTER FAC E 3-66 • Some commands ar e only e nabled for IGMP v2, incl uding ip igmp query -max-response -time and ip i gmp query-timeout . Example The fol lowing con figure s the switc h to use IGMP V ersion 1: show ip igmp snooping Use t his comman d to sh ow the IG MP s nooping conf igurati on. Default Settin g None Command Mode[...]

IGMP S NOOPI NG C OMMANDS 3-67 show mac-address-table multicast Use t his co mmand t o show kn own mult icast addresses . Syntax show mac-addr ess-table multicast [ vlan vla n-id ] [ user | igmp-snooping ] • vlan-id - VL AN ID (1 to 4094) • user - Dis play onl y the us er-con figured multicas t entr ies. • igm p-s noo pin g - Di splay on ly e[...]

C OMMAND L INE I NTER FAC E 3-68 Line Commands Y ou can access t he onboard co nfigurat ion program by att aching a VT100 compat ible de vice to the server’ s seri al port . Th ese command s are use d to se t commun ication p arameters fo r the s erial port o r T eln et ( i.e., a vir tual te rm ina l). Command Function Mode Page line Identifies a[...]

L INE C OMMANDS 3-69 line Use th is command t o identify a spec ific line for configur ation, and to process subseq uent li ne co nfigurat ion com mands. Syntax lin e { console | vt y } • cons ole - Consol e termin al line . • vty - Virtu al termin al for remo te conso le acces s. Default Settin g Ther e is no de fau lt li ne. Command Mode Glob[...]

C OMMAND L INE I NTER FAC E 3-70 login Use thi s comman d to enab le passwor d checking at log in. Use the no form to di sable pass word chec king and allow conn ection s with out a pas sword. Syntax logi n [ local ] no login loc al - Sele cts local password checking . Authen tication is bas ed on t he user name s pecifie d with t he username comm [...]

L INE C OMMANDS 3-71 • Th is comman d contro ls logi n authen ticatio n via the switc h itse lf. To confi gure u ser nam es an d passw ord s for remo te auth enticat ion ser vers, you must use th e RADIU S softwar e inst alled o n thos e serve rs. Example Related Commands user na me (3 -27 ) passwor d (3-71) password Use thi s comman d to sp ecif[...]

C OMMAND L INE I NTER FAC E 3-72 Command Us age • Wh en a co nne ction is start ed on a line with pa ssword prot ecti on, the sys tem promp ts for the pas sword. If you enter the cor rect pas sword, the s ystem sh ows a promp t. You can us e the password-thres h command to set th e numbe r of time s a use r can enter an inc orrec t passwor d befo[...]

L INE C OMMANDS 3-73 Command Mode Line C onfigurati on Command Us age • If user input i s detec ted with in the t imeout interval , the sessio n is ke pt ope n; ot herwi se the se ssio n is te rmin ated. • Thi s comm and app lies to both the local c onsole an d Te lnet conn ectio ns. • The timeou t for T elnet c annot be dis abled. Example T [...]

C OMMAND L INE I NTER FAC E 3-74 Command Us age • Whe n the l ogon atte mpt thre shold i s reached , the sys tem inte rfac e be come s sile nt f or a s peci fied amo unt of tim e be fore allowi ng the next l ogon att empt. (U se the silent-ti me comman d to set th is inte rval.) When th is thr eshol d is reac hed for Telnet, the Teln et logo n in[...]

L INE C OMMANDS 3-75 Command Mode Line C onfigurati on Example T o set th e silen t time to 6 0 se conds , enter thi s comman d: Related Commands pas sword-thr esh (3-73) databits Use this command t o set the n umber of da ta b its per charact er that are in terp rete d and ge nerat ed by th e consol e por t. Use the no for m to r esto re the d efa[...]

C OMMAND L INE I NTER FAC E 3-76 Example T o speci fy 7 data bi ts, e nter thi s command : Related Commands parit y (3-76) parity Use t his com mand to define gener atio n of a parit y bit . Use t he no for m to re store th e defaul t settin g. Syntax parity { none | even | odd } no parity • none - No pari ty • even - Even par ity • odd - Od [...]

L INE C OMMANDS 3-77 speed Use th is com mand to set the ter min al line 's baud rate. Thi s comm and se ts both the t ransmit (to termi nal) and receiv e (from terminal ) speeds. Us e the no for m to re stor e the de fault sett ing. Syntax speed bps no speed bps - B a u d r a t e i n b i t s p e r s e c o n d . (Op tions: 9600, 5 7600 , 38400[...]

C OMMAND L INE I NTER FAC E 3-78 stopbits Use th is com mand to s et the nu mber of the st op bits tran smit ted per b yte. Use th e no form to restor e the default setti ng. Syntax stopbits { 1 | 2 } • 1 - One stop bit • 2 - Tw o stop bits Default Settin g 1 st op bit Command Mode Line C onfigurati on Example T o spec ify 2 st op bi ts, ente r[...]

IP C OMMANDS 3-79 Example T o show a ll lin es, ent er this c ommand: IP Commands The re are no IP addre sses ass igned t o this switch by de fault. Y ou must m anually configu re a n ew addre ss to mana ge the switch ov er your networ k. Y ou may al so need t o a estab lish a defau lt gate way betw een this d evice and m anagement stations that ex[...]

C OMMAND L INE I NTER FAC E 3-80 ip address Use thi s comm and to se t the IP addres s for th is devic e. Use t he no form t o restore the default IP addr ess. Syntax ip addr ess { ip-addr e ss netmask | bootp | dhcp } no ip addr ess • ip-address - IP address • netmask - Netwo rk mask for the associ ated IP sub net. This mas k identi fies t he [...]

IP C OMMANDS 3-81 • You can star t broadcast ing BOOTP or DHCP re quests by ente ring a n ip dhcp restar t comman d, or by reboot ing th e switc h. Note: Only one VLA N inter face can be ass igned an IP addr ess (the default is V LAN 1) . This define s the m anagemen t VLA N, the onl y VLA N throug h which you can gain manageme nt acces s to t he[...]

C OMMAND L INE I NTER FAC E 3-82 • If t he BOOTP or DHCP s erver h as been moved t o a differ ent doma in, th e ne twork porti on of th e addr ess pro vid ed to t he cli ent will be based on this n ew domain . Example In t he followi ng exam ple, t he devic e is re assign ed the s ame address. Related Commands ip a ddr ess (3- 80) ip default-gate[...]

IP C OMMANDS 3-83 Command Us age A gat eway must be def ined if t he manag ement s tation is located in a di fferent IP segment . Example The f ollowing e xample def ines a default g ateway for this device: Related Commands sho w ip redir ects (3-84) show ip interface Use thi s comman d to dis play the se ttings o f an IP interface. Default Settin [...]

C OMMAND L INE I NTER FAC E 3-84 show ip redirects Use th is comma nd to show th e defaul t gateway conf igure d for thi s devi ce. Default Settin g None Command Mode Pri vileged E xec Example Related Commands ip d efault-gat eway (3- 82) ping Use thi s comman d to send ICM P echo reques t pack ets to anoth er node on the network. Syntax ping hos t[...]

IP C OMMANDS 3-85 Command Mode Norma l Exec, Pri vileg ed Exec Command Us age • Use the pin g comm and to see if an othe r site on the ne twork can be re ached. • Fo llowing are some re sults of the pin g comm and: - Normal response -The nor mal res ponse o ccurs in one to ten secon ds, depen ding on networ k tr affic. - Destination does not re[...]

C OMMAND L INE I NTER FAC E 3-86 HOL Blocki ng Prevention Commands If head-o f-line (HOL) Bl ocking Pre vention is en abled it preven ts the f orwardin g of dat a to a po rt trans mit queue that i s blocke d. Thi s allows for a more efficient transfer of pa ckets acr oss the net work. Normally , when t he switc h sends traffic to a port it goes to [...]

HOL B LOC KING P RE V E N T I O N C OMMANDS 3-87 Syntax queue hol-pr evention no queue hol-pr evention Default Settin g Ena ble d Command Mode Glob al Configu ration Command Us age • If HOL Blocking Prevent ion is disabl ed on this swit ch.The trans mit queue may be completel y filled with frames awaiting serv ice. • If en able d, once the n um[...]

C OMMAND L INE I NTER FAC E 3-88 Example Thi s example dis plays the cu rren t status. Interface Comm ands The se commands are use d to di splay or set com munica tion par amete rs fo r an Ethernet p ort , aggre gate d link, or VL AN. Console#show queue hol- prevention HOL blocking prevention status: Disabled Console# Command Function Mode Page int[...]

I NTER FAC E C OMMANDS 3-89 interface Use this c ommand to confi gure an in terface ty pe and ente r int erface c onfigur ation mode. U se the no for m to rem ove a trunk . Syntax int er fa ce inter face no interfa ce port-channel channel-id inter face • ethernet un it / port - unit - This is de vice 1. - port - Por t num ber . • port-channel c[...]

C OMMAND L INE I NTER FAC E 3-90 description Use this command to add a de scription to an interface. Use the no for m to re move th e desc riptio n. Syntax descript ion string no descript ion stri ng - Co mment o r a des crip tion t o he lp you rememb er what is at tached to thi s inte rface. (Range : 1-64 characters) Default Settin g None Command [...]

I NTER FAC E C OMMANDS 3-91 • 10f ull - Forces 10 Mbps full-d uplex op eration • 10h alf - Force s 10 Mb ps half-d uplex operati on Default Settin g • Auto- negotiatio n is enabled b y defau lt. • When auto-neg oti ation is disab led, the def ault speed- duplex sett ing is 100half f or 100B ASE-TX p orts and 1000 full fo r Gigab it Ethe rne[...]

C OMMAND L INE I NTER FAC E 3-92 negotiation Use this command to enable autone gotiation for a given interface. Use th e no fo r m t o disab le aut onegoti ation . Syntax negotiation no negotiation Default Settin g Ena ble d Command Mode Int erface Co nfigurat ion (Ethe r net, Port Ch annel) Command Us age • When auto- negotia tion is enable d th[...]

I NTER FAC E C OMMANDS 3-93 capabilities Use thi s comman d to adve rtise th e port ca pabilit ies of a given inte rfac e duri ng auto nego tiation. Use the no fo r m with p arameters to remov e an advertis ed capabili ty, or th e no form wi thout par amete rs to restor e the d efault values. Syntax cap abiliti es { 1000full | 1 00full | 100ha lf |[...]

C OMMAND L INE I NTER FAC E 3-94 Command Us age When auto-negot iation is enabled wi th th e negotiation comm and, th e switch wil l nego tiate t he best set tings for a link ba sed on th e capa bilites command. When auto-n egotiation is dis abled, y ou must manual ly spec ify th e link att ributes with the speed-duplex and flowcontrol co mmands. E[...]

I NTER FAC E C OMMANDS 3-95 Command Us age • Flow cont rol can el iminate fr ame loss by “blocking ” traffic f rom end station s or se gme nts co nnected dire ctly to the swit ch when its b uffers fil l. When enabled , back p ressure is used fo r half -duplex o perati on and IEEE 802 .3x fo r full -duplex oper ati on. • To force flow contro[...]

C OMMAND L INE I NTER FAC E 3-96 shutdown Use this comman d to disable an interface. T o restart a disabled inte rfac e, use th e no form. Syntax shut down no shut down Default Settin g All interfaces are enable d. Command Mode Int erface Co nfigurat ion (Ethe r net, Port Ch annel) Command Us age This c ommand allo ws you to d isabl e a port due to[...]

I NTER FAC E C OMMANDS 3-97 switchport broadcast percent Use t his comman d to co nfigure broadcas t storm contr ol. Use the no form to di sable broadc ast storm control . Syntax switchport broa dcast per cent level no switchport broa dcast lev el - T hresh old leve l as a pe rcenta ge of band widt h. (Rang e: 6 or 20 perce nt) Default Settin g Ena[...]

C OMMAND L INE I NTER FAC E 3-98 clear counters Use this command to clear st atisti cs on an inte rface. Syntax clear counter s inter face inter face • ethernet un it / port - unit - This is de vice 1. - port - Por t num ber . • port-channel chan nel- id (Range: 1-4) Default Settin g None Command Mode Pri vileged E xec Command Us age Statis tic[...]

I NTER FAC E C OMMANDS 3-99 show interfaces status Use th is com mand to di splay the status for an interface. Syntax show inte rf aces sta tus inter face inter face • ethernet un it / port - unit - This is de vice 1. - port - Por t num ber . • port-channel chann el-i d (Range: 1-4) • vlan vl an-i d (R ange: 1- 4094) Default Settin g Shows st[...]

C OMMAND L INE I NTER FAC E 3-100 Example show interfaces counters Use this c ommand to d isplay statisti cs fo r an i nter face. Syntax show inter faces counte rs in ter face inter face • ethernet un it / port - unit - This is de vice 1. - port - Por t num ber . • port-channel chan nel- id (Range: 1-4) Default Settin g Shows counters for all i[...]

I NTER FAC E C OMMANDS 3-101 Command Us age If no i nterface is s pecified , information o n all interfac es is dis played. F or a desc ripti on of th e items di splay ed by thi s comm and, se e “Showing Por t Stati stics” on page -96. Example Console#show interfaces counters ethernet 1/7 Ethernet 1/ 7 Iftable stats: Octets input: 30658, Octets[...]

C OMMAND L INE I NTER FAC E 3-102 show interfaces switchport Use thi s comman d to dis play advanc ed interface co nfigur ation settin gs. Syntax show inte rf aces switc hport [ inter fac e ] inter face • ethernet un it / port - unit - This is de vice 1. - port - Por t num ber . • port-channel chan nel- id (Range: 1-4) Default Settin g Shows al[...]

I NTER FAC E C OMMANDS 3-103 • Gvrp status – Show s if G ARP VL AN Re gistra tion P rotoc ol i s enabl ed or di sabled (pag e 3-140). • Allowed Vlan – Shows t he VLANs th is inter face has jo ined, wher e “( u)” indica tes untagg ed and “(t)” indi cates ta gged (page 3 -129). • Forbidden Vlan – Sho ws th e VLA Ns th is inte rfac[...]

C OMMAND L INE I NTER FAC E 3-104 This exampl e shows the co nfigu ratio n for po rt 3 when se t to prom iscuous mode for pri vate VLANs . Rate Limit Commands This funct ion all ows th e netw ork m anager to co ntrol the m aximum rat e fo r traff ic tr ansm itted o r rec eive d on an inte r fa ce. R ate li miti ng is c onfigure d on interf aces at [...]

R ATE L IMI T C OMMANDS 3-105 rate-limit Use t his co mmand to set the rate limit. Use th e no form to re move the rate limi t. Syntax rat e-limit {input | output } percen t per cent no ra te- lim it in put • inp ut - Se ts the rate lim it for inboun d traffic. • output - Sets the rate limit for ou tboun d traffic • percent - Sets th e rate l[...]

C OMMAND L INE I NTER FAC E 3-106 Example This example se ts th e rate li mit for i nput an d outp ut traf fic on port 2 t o 312K when operat ing at 10 Mb ps or 3.1 2 Mbps when operating at 100 Mbps. Address Table Commands The se commands are use d to c onfigure the addr ess tab le for filter ing spe cified addresse s, displ aying cu rren t entrie [...]

A DDR ES S T ABLE C OMMANDS 3-107 mac-address-table static Use this command to map a static address to a destination port. Use th e no form to remove an addres s. Syntax mac-addr ess-table s tatic mac-addr ess { inter face | discar d } [ action ] no mac-addr ess-tabl e static mac-addr ess [ discar d ] • mac-address - MAC ad dress. • interface ?[...]

C OMMAND L INE I NTER FAC E 3-108 • Sta tic add resses will no t be re move d from t he add ress table when a given i nterface l ink is do wn. • Static address es are bound to th e assigned interface and will no t be moved. When a static addre ss is seen on an i nterfac e, the addr ess wil l be ig nored an d will n ot be wr itten to th e addres[...]

A DDR ES S T ABLE C OMMANDS 3-109 show mac-address-table Use th is com mand to vi ew class es of en tries in the brid ge- forw ardin g data base. Syntax show mac-addr ess-table [ addr ess mac- addr ess [ mask ]] [ int er fa ce inter face ] [ vlan vl an-i d ] [ sort { addr ess | vlan | int er fa ce }] • mac-address - MAC ad dress. • mask - Bi ts[...]

C OMMAND L INE I NTER FAC E 3-110 Example mac-address-table aging-time Use this c ommand to set t he agi ng time for entri es in the addr ess tabl e. Use th e no for m to rest ore th e de fault agi ng tim e. Syntax mac-addr ess-table ag ing-time seconds no mac-addr ess-table aging-t ime seco nds - Time i n second s (2-1 72800) . Default Settin g 30[...]

S PANNI NG T RE E C OMMANDS 3-111 show mac-address-table aging-time Use th is com mand to s how the agi ng tim e for entr ies in the address table. Default Settin g None Command Mode Pri vileged E xec Example Spanning Tree Commands Thi s sect ion inc ludes c ommands that config ure th e Spanning T ree Algorithm (ST A ) globa l ly for the switch, an[...]

C OMMAND L INE I NTER FAC E 3-112 spanning-tree Use thi s command to enab le the Sp a nni ng Tree Alg orit hm gl obal ly for th e sw itch. Use the no form to dis able i t. Syntax spanning-tre e no spanning-tre e Default Settin g Spanning tree is enable d. Command Mode Glob al Configu ration Command Us age The Sp anning T ree Al gorithm (ST A) can b[...]

S PANNI NG T RE E C OMMANDS 3-113 Example The f ollowing example shows ho w to enable the Spanning T r ee Algori thm for the s witch : spanning-tree forward-time Use t his comman d to co nfigur e the s panning tree b ridge f orw ard time glo ball y fo r th is s wit ch. U se the no for m to resto re the def ault . Syntax spanning-tre e forward-t ime[...]

C OMMAND L INE I NTER FAC E 3-114 Example spanning-tree hello-time Use th is co mmand to config ure the s panni ng tree brid ge hel lo time glo bally for this swit ch. Use th e no form to restore t he default. Syntax spanning-tre e hello-time time no spanning-tre e hello-time tim e - Time i n seconds. (Range : 1-10 secon ds). The ma ximum val ue is[...]

S PANNI NG T RE E C OMMANDS 3-115 spanning-tree max-age Use t his comman d to confi gure th e spannin g tree brid ge maxim um age gl obally for th is switch. Use the no form to resto re the default. Syntax spanning-tr ee max-age se con ds no spanning-tre e max-age seco nds - Time in seco nds. (Rang e: 6-40 s econds) Th e mini mum va lue is t he hig[...]

C OMMAND L INE I NTER FAC E 3-116 spanning-tree priority Us e this co mmand to con figure th e span ning t ree prio rity global ly for th is switch . Use the no for m to rest ore t he defa ult. Syntax spanning-tre e priority priority no spanning-tre e priority priorit y - Pri ority of th e brid ge. (R ange: 0 - 6553 5) Default Settin g 3276 8 Comma[...]

S PANNI NG T RE E C OMMANDS 3-117 The re commen ded rang e is: - Eth ernet: 50- 600 - Fast Et hernet: 10 -60 - Gigabit Ether net: 3- 10 Default Settin g • Eth ernet – half dup lex: 100 ; full duplex: 9 5; trun k: 90 • Fast Ether net – half duple x: 19; full duplex: 18; tr unk: 15 • Gigabit Ether net – fu ll duple x: 4; t runk: 3 Command[...]

C OMMAND L INE I NTER FAC E 3-118 Default Settin g 128 Command Mode Int erface Co nfigurat ion (Ethe r net, Port Ch annel) Command Us age • Thi s comm and d efines the p riorit y for the use of a p ort i n the spanni ng-tre e alg orithm . If t he pa th cos t for all port s on a switch are the same, th e por t with the hi ghest pr iori ty (tha t i[...]

S PANNI NG T RE E C OMMANDS 3-119 Command Mode Int erface Co nfigurat ion (Ethe r net, Port Cha nnel) Command Us age • This com mand is u sed to en able/dis able th e fast sp anning-t ree mod e for th e select ed port. In th is mode, po rts skip the Blocked, Li stening and Learning states and proceed straight to Forwardi ng. • Sinc e end- nodes[...]

C OMMAND L INE I NTER FAC E 3-120 Command Mode Pri vileged E xec Command Us age For a descr iption of the i tems di splayed under “Bridg e-grou p information, see “Managing Global Settin gs” on page -43. For a descr iption of t he item s displa yed for spe cific int erfaces, see “Managing ST A Interface Settings” on page -47. Example Cons[...]

VLAN C OMMANDS 3-121 VLAN Commands A VL AN is a g roup of ports that can be l ocate d anywhere in the netwo rk, bu t commun icate as though th ey bel ong to th e same phy sical se gment . This s ection d escri bes comman ds used to creat e VLA N groups , add port me mbers, specify how VLA N taggi ng is used , and enabl e automatic VLA N regi strati[...]

C OMMAND L INE I NTER FAC E 3-122 vlan database Use t his com mand to enter V LAN datab ase mo de. All com mand s in this mod e wil l take ef fect im medi ately. Default Settin g None Command Mode Glob al Configu ration Command Us age • Use t he VLAN data base comma nd mode to add, change, and dele te VL ANs. Af ter fi nishi ng conf igurati on ch[...]

VLAN C OMMANDS 3-123 Related Commands show vlan (3-131) vlan Use thi s comman d to co nfigure a VLAN . Use the no form to rest ore the default se ttings o r delet e a VLAN. Syntax vlan vl an-i d [ name vlan-name ] m edia ether net [ sta te { active | susp end }] no vlan vlan-id [ name | state ] • vlan-id - ID o f confi gured VLA N. (Ran ge: 1-40 [...]

C OMMAND L INE I NTER FAC E 3-124 • VLAN 1 cann ot be sus pended, but any othe r VLAN wi ll be suspe nded . • You c an co nfigu re up to 127 V LANs on t he s witch. Example The followi ng example adds a VLAN, using v lan-id 10 5 and n ame RD5 . The VL AN is activat ed by de fault. Related Commands show vlan (3-131) interface vlan Use this comma[...]

VLAN C OMMANDS 3-125 Example The followi ng examp le sh ows how t o set the i nterface con figurati on mode to VLAN 1, and then assign an IP add ress to the VLA N: Related Commands shut down (3-9 6) switchport mode Use t his com mand to configur e the VLA N mem bership m ode for a port. Use the no for m to res tore the default . Syntax switchport m[...]

C OMMAND L INE I NTER FAC E 3-126 Example The fo llowing sh ows how to se t the confi guratio n mode to po rt 1, and th en set the switchpo rt mod e to trun k: switchport acceptable-frame-types Use thi s comm and to conf igure th e acce ptable fr ame types for a port. Use the no for m to res tore the default . Syntax switchpor t acce ptable-fram e-[...]

VLAN C OMMANDS 3-127 switchport ingress-filtering Use thi s command to enable ing ress filt ering for an inte r fac e. Use the no fo r m t o rest ore the default . Syntax swit chport ing r ess -filtering no switchpor t ingr ess-filt ering Default Settin g Disab led Command Mode Int erface Co nfigurat ion (Ethe r net, Port Cha nnel) Command Us age ?[...]

C OMMAND L INE I NTER FAC E 3-128 switchport native vlan Use t his co mman d to co nfigure the P VID (i.e. , defau lt VL AN ID) for a po rt. Us e the no form to restor e the de fault. Syntax switchport native vlan vla n-id no switchport native vlan vlan-id - Def ault VLAN ID for a po rt. (Ran ge: 1-40 94, no leadi ng zeroes) Default Settin g VLAN 1[...]

VLAN C OMMANDS 3-129 switchport allowed vlan Use thi s comman d to config ure VLAN gro ups on the se lected int erface. Us e the no f orm t o r estor e t he defa ult. Syntax switchpor t allowed vlan { add vlan | re mo v e vl an } no switchpor t allowed vlan • add vlan - VLA N iden tifi er to a dd. • remove vlan - VLA N iden tifi er to re move .[...]

C OMMAND L INE I NTER FAC E 3-130 Example The following example shows ho w to add VLANs 1, 2, 5 and 6 t o the all owed list as ta gge d VLANs for port 1 : switchport forbidden vlan Use th is com mand to confi gure f orbid den VL ANs. Use th e no form to rem ove th e l ist of forb idden VLANs . Syntax switchpor t forbidden vlan { add vlan | remove v[...]

VLAN C OMMANDS 3-131 Example The followi ng examp le shows how to prevent port 1 from bei ng added to VLAN 3: show vlan Use t his co mmand t o sh ow VLAN in formation. Syntax show vlan [ id vlan- id | name vlan-name ] • id - Keywo rd to be foll owed by t he VLAN ID. • vlan-id - ID o f the configure d VLAN. (R ange: 1-409 4, no lead ing ze roe s[...]

C OMMAND L INE I NTER FAC E 3-132 Example The f ollowing example shows ho w to dis play info r mation for VLAN 1: Private VLAN Commands Private VLANs pro vide port -based securi ty and is ola tion be twee n ports within th e assigne d VLAN. This switch su pports tw o types of private VLAN ports : promis cuous, and commu nity po rts. A prom iscuous [...]

P RIVAT E VLAN C OMMANDS 3-133 T o configu re private VLA Ns, follow these steps: 1. Use th e private-vl an com mand to desig nate one or more comm unity V LANs an d the pri m ary VLAN that will chann el traffi c outsid e the co mmunity groups. 2. Use th e private-vl an associ ation comman d to map the secon dary (i.e., co mmunity) VLA N(s) to the [...]

C OMMAND L INE I NTER FAC E 3-134 private-vlan Use this c ommand to crea te a primary or secondary (i .e., comm unity) p rivate VLA N. Use t he no form to remove t he spec ified privat e VLAN. Syntax privat e-vlan vlan-id { community | prima ry } no private-vlan vlan -id • vlan-id - ID of privat e VLAN. (R ange: 2- 4094, no leadi ng zeroes). • [...]

P RIVAT E VLAN C OMMANDS 3-135 Example private vlan association Use this command to associate a primary VLAN with a secondary (i.e. , community) VLAN. Use the no fo r m to remove all associ atio ns for th e spec ifi ed prim ary VL AN. Syntax privat e-vlan primary-vlan-id associa tion { secondary-vlan-id | add secondary-vlan-id | rem ov e secondary-[...]

C OMMAND L INE I NTER FAC E 3-136 Example switchport mode private-vlan Use this c ommand to set t he pri vat e VLAN mode for an interface. Use th e no fo r m t o re store t he de faul t sett ing. Syntax swit chport mode private-vl an { host | promiscuous } no swit chport mode priva te-vlan • host - Thi s port type can comm unicate with all other [...]

P RIVAT E VLAN C OMMANDS 3-137 Example switchport private-vlan host-association Use this command to associate an interface with a seco ndary VLAN. Us e the no for m to remo ve this ass ociat ion. Syntax switchpor t private-vl an host-associati on secondary-vlan-id no switchpor t private-vlan host-a ssociation secondary- vlan-id - ID of seco ndary ([...]

C OMMAND L INE I NTER FAC E 3-138 switchport private-vlan mapping Use this comman d to map an inte rface to a primary VLAN. Use the no form to re move this mappi ng. Syntax switchpor t private-vlan ma pping primary-vlan-id no switchpor t private-vlan map ping primary-v la n- id - ID of primary VLAN. (Range: 2-40 94, no leadi ng zeroes) . Default Se[...]

P RIVAT E VLAN C OMMANDS 3-139 show vlan private-vlan Use th is command to show the pr ivate VLA N configu ration s ettings on th is sw itch . Syntax show vlan priva te-vlan [ communi ty | prima ry ] • com mun ity - Displ ays all community VLAN s, along with th eir assoc iate pr imary VLA N a nd assi gned ho st i nterf aces. • prima ry - Disp l[...]

C OMMAND L INE I NTER FAC E 3-140 GVRP an d Bridge Extension Commands GARP VLAN Regi strati on Pr otoc ol def ines a wa y for s witche s to exchan ge VL AN information in orde r to automati cally r egister VLAN m embers on i nter faces ac ross th e netw ork. Th is se ction des cribes ho w to enable GV RP fo r indivi dual in terface s and glo bally [...]

GVRP AND B RID GE E XTENSION C OMMANDS 3-141 Default Settin g Disab led Command Mode Int erface Co nfigurat ion (Ethe r net, Port Cha nnel) Command Us age GVRP can only be enab led for tagg ed port s. Y ou mus t set switchport mode to “tru nk” to co nfigure a ta gged por t. Example Related Commands switch port mode (3-1 25) show gvrp configurat[...]

C OMMAND L INE I NTER FAC E 3-142 Example garp timer Use t his command t o set the val ues for th e join, le ave and leave all timers. Use the no for m to re store the tim ers' d efault val ues. Syntax garp timer { join | leave | leaveal l } time r_value no garp timer { join | leave | lea veall } •{ join | leave | lea veall } - Wh ich ti mer[...]

GVRP AND B RID GE E XTENSION C OMMANDS 3-143 expe rienci ng diffic ultie s with G MRP or GVR P regist ration / deregi stratio n. • Timer val ues are applied to GVRP for all the po rts on al l VLANs. • Timer value s must meet the followi ng restric tions: - leave >= (2 x join ) - leave all > leave Note: Se t GVRP timers on all Laye r 2 dev[...]

C OMMAND L INE I NTER FAC E 3-144 Command Mode Norma l Exec, Pri vileg ed Exec Example Related Commands garp ti mer (3-1 42) bridge-ext gvrp Use t his co mmand to enable GVRP . U se the no form to dis able i t. Syntax bridge-ext gvrp no bridge-ext gvrp Default Settin g Disab led Command Mode Glob al Configu ration Command Us age GVRP defi nes a wa [...]

GVRP AND B RID GE E XTENSION C OMMANDS 3-145 Example show bridge-ext Use t his co mmand t o show the con figur ation for bridg e exte nsion command s. Default Settin g None Command Mode Pri vileged E xec Command Us age See “Displ aying Basic VLAN Information” on page -56 and “Displayi ng Bri dge Ext ension Capa biliti es” on pag e -24 for a[...]

C OMMAND L INE I NTER FAC E 3-146 Priority Commands Clas s of Service (CoS) allo ws data pack ets that have gre ater prece dence to rec eive high er servic e prior ity when traffic is buffered in t he switc h due t o conge stion. This swit ch sup ports CoS wi th fou r pr iori ty q ueues for each por t. D ata pa cke ts i n a po rt’ s hig h-priorit[...]

P RIORI TY C OMMANDS 3-147 queue mode Use thi s comman d to set th e queu e mode to str ict prior ity or W eighte d Round-R obin (WRR ) for t he four c lass of service (CoS) prior ity que ues. Use the no form to r estore the default value . Syntax queue mode { strict | wrr } no queue mode • strict - Ser vices th e egres s queue s in sequ ential o[...]

C OMMAND L INE I NTER FAC E 3-148 Command Mode Pri vileged E xec Example Mirror Port Commands Thi s section des cribes how t o mirror t raf fi c from a sour ce port to a target port. port monitor Use t his comman d to co nfigur e a mir ror se ssion. Use t he no form to clear a mi rror sessi on. Syntax port monitor inter face [ rx | tx | both ] no p[...]

M IRR OR P ORT C OMMANDS 3-149 Default Settin g No mir ror se ssio n is def ined. When enabl ed, th e defa ult mirr oring is for bo th rece ived an d transmit ted pac kets. Command Mode Int erface Conf iguration (Ethe r net, destinat ion port ) Command Us age • You ca n mi rror t raffi c from a ny sou rce p ort to a dest inati on p ort for real-t[...]

C OMMAND L INE I NTER FAC E 3-150 Default Settin g Shows al l sessi ons. Command Mode Pri vileged E xec Command Us age Thi s command displays the cur rently configur ed so urce p ort, desti nation por t, and mirror mode (i.e., R X, TX, RX/ TX). Example The followi ng s hows mi rror ing co nfigu red fr om por t 6 to port 11: Port Trunking Commands P[...]

P ORT T RUNKI NG C OMMANDS 3-151 Guidelines for Creat ing Trunks • Fin ish con figurin g po rt tr unks befo re yo u connec t the corr espondi ng network cable s between swi tches to av oid creati ng a loop . • A trun k can contain up to eight 10/100 Mbps ports or u p to two 1000 Mbps ports . • The po rts at b oth ends of a connec tion mus t b[...]

C OMMAND L INE I NTER FAC E 3-152 port-group Use th is comm and to add a pr edefined p ort group to a trunk. Use the no for m to re move a port g roup from a trunk. Syntax port-group p ort-gr o up-n umb er no port-group por t-gr oup -number - Group n umber (Ra nge: 1- 10) Default Settin g None Command Mode Int erface Conf iguration (Port Ch annel) [...]

P ORT T RUNKI NG C OMMANDS 3-153 Example The f ollowing example creates t runk 1 an d then adds port 1 and 13: Console(config)#interfa ce port-channel 1 Console(config-if)#port -group 1 Console(config-if)#[...]

C OMMAND L INE I NTER FAC E 3-154[...]

A-1 A PPENDIX A T ROUBLESHOOTING Troubleshooting Chart Troubleshooting Chart Symptom Action Cannot connect using Telnet, Web browser, or SNMP software • Be sur e to have configured the agent with a valid IP address, subnet mask and default gate way. • Be s ure that your management station has access to management VLAN (default is VLAN 1). • C[...]

T R OUBL ESHOOTING A-2 Cannot access the on-board configuration program via a serial port connection • Be sur e to have set the terminal e mulator program to VT100 compatible, 8 data bits, 1 stop bit, no parity and 9600 bps. • Check that the null-modem serial cable conforms to the pin-out connections provided in Ap pendix B. Forgot or lost the [...]

B-1 A PPENDIX B U PGRADING F IRMW ARE VIA THE S ERIAL P OR T The switch contai ns thre e firmware com ponent s that can b e upgra ded; the dia gnosti cs (or Bo ot-ROM ) co de, run time o perati on cod e a nd the loader cod e. The runt ime code ca n be upgraded vi a the switch ’s RS- 232 ser ial co nsole por t, via a networ k conne ction to a TFT [...]

U PGR ADIN G F IR MWAR E VIA THE S ERIAL P ORT B-2 4. When the swi tch init ializatio n screen appears, e nter fi r mware -downloa d mode by pre ssing <Esc > immedi ately aft er the d iagnost ic test r esult s. Scre en text si milar to th at show n belo w display s: 5. Pres s <3> t o change the b aud r ate of the swit ch’s serial conn[...]

B-3 9. If using Windo ws Hyper T erminal, c lick the “T ransfer ” butto n, and t hen click “Send Fi le.... ” Select the XMod em Protoc ol and the n use the “Brows e” button to sele ct the requ ired firmware cod e fi le from your PC sys tem. The “Xm odem file send ” windo w display s the progre ss of the do wnload pr ocedure . 10. Af[...]

U PGR ADIN G F IR MWAR E VIA THE S ERIAL P ORT B-4 For ex ample , the fo llow ing sc reen te xt show s the dow nloa d proc edure for a runt ime code fi le: 13. Set your PC’ s terminal emul ation so ftware baud ra te back to 9600 baud. Press <Enter> to res et com munic ations wi th t he switch . 14. Enter <G> to boot t he sy stem. Rest[...]

R ESTORING S WITCH D EFAULTS B-5 2. Ent er <0> to acce ss the F ile Mana ger menu . The fol lowing screen will appear: 3. Enter < S> and se t the Facto ry_De fault_ config. cfg file as th e startup configuration file. 4. Ent er <q > and th en <x> t o re turn to t he ma in me nu. File Name S/Up Type Size ---------------------[...]

U PGR ADIN G F IR MWAR E VIA THE S ERIAL P ORT B-6 5. Ent er <G> t o bo ot the system . [0]FileManager: [1]Test Mode Set: [x] Exit ! Enter Selection:x [1]Image Update [2]System Parameters [3]Change Baud rate [4]Do all the following Test [5]Testing the System S DRAM [6]MPC 850 internal clo ck Timer and Interrupt Test [7]WATCHDOG Timer and I nt[...]

Glossary-1 G LOSSARY 10BAS E-T IEEE 802.3 specification for 1 0 Mbps Ethernet over two pairs of Category 3, 4, or 5 UTP cabl e. 100BASE-TX IEEE 802.3u specification for 1 00 Mbps Fast Etherne t o ver two pairs of Category 5 UTP cable. 1000 BASE-T IEEE 802.3ab specification for Gigabit Ethernet over two pairs of Category 5, 5e 100-ohm UTP cable. 100[...]

G LOS SARY Glossary-2 Collision D omain Single CSMA/CD LAN segmen t. CSMA/CD Carrier Sense Multiple Access /Collision Detect is the communication method employed by Ethernet and Fast Ethernet. Dynamic Host Control Protocol (DHCP) Provides a framework f or passing configuration information to hosts o n a TCP/IP network. DHCP is base d on the Bootstr[...]

G LOSSAR Y Glossary-3 Full D uplex T ransmission method that allows switc h and network card to transmit and receive concurrently, effectively doubling the bandwidth of that link. GARP VLAN Registration Prot ocol (GVRP) Defines a way for switches to e xchange VLAN information in order to register necessary VLAN members on ports along the Spanning T[...]

G LOS SARY Glossary-4 LANs, and defines a standard w ay for VLANs to communicate across switched networks. IEEE 802.1p An IEEE standard for providing quality of service (QoS) in Ethernet networks. The standard uses p acket tags that define up to eight traffic classes and allows switches to transmit packets based on the tagged prior ity v alue . IEE[...]

G LOSSAR Y Glossary-5 IGMP Snooping Listening to IGMP Query and IGMP R eport packets transferred between IP Multicast Routers and IP Multi cast host groups to identify IP Multicast group members. Internet Control Message Protocol (ICMP) Commonly used to send echo m essages (i.e., Ping) for monitoring purposes. Internet Group M anagement Prot ocol ([...]

G LOS SARY Glossary-6 Management Infor mat ion Base (MIB ) An acronym for Management Inf or mation Base. It is a set of database objects that contains information about a specific devi ce. Mult icast Swi tching A process whereby the switch filters incoming multicast frames for services for which no a ttached host has registered, or for wards them t[...]

G LOSSAR Y Glossary-7 into or o ut of th e net work . Traffic t hat fal ls with in the r ate l imit is trans mitted, wh ile p ackets that ex ceed t he accept able amou nt of traf fic are drop ped. Remote Aut henticati on Dial-in Use r Servic e (RADIUS) RADIUS is a logon authentication protocol that uses software running on a central server to contr[...]

G LOS SARY Glossary-8 Virtual LAN (VLAN) A Virtu al LAN is a collection of network nodes that share the same collision domain regardless of their physical location or connection point in the network. A VLAN serve s as a logical workgroup with no physical barriers, and allows users to share i nfor mation and resources as though located on the same L[...]

C-1 A PPENDIX C P IN A SSIGN MENTS Console Port Pin Assignments The DB-9 s erial p ort on the s witch ’s fron t pa nel is used to con nect to the swit ch fo r out- of-band consol e conf igurati on. The onboard men u-driven con figurati on prog ram can be accesse d from a termi nal, or a PC runn ing a t er min al emulat ion prog ram. T he pin assi[...]

P IN A SSIGN MENTS C-2 DB-9 Port Pin Assignments Console Port to 9-Pin DTE Port on PC Console Port to 25-Pin DTE Port on PC EIA Circuit CCITT Signal Description Switch’s DB9 DTE Pin # PC DB9 DTE Pin # BB 104 RxD (Received Data) 2 2 BA 103 TxD (Transmitted Data) 3 3 AB 102 SGND (Signal Ground) 5 5 No other pins are used. Switch’s 9-Pin Serial Po[...]

Index-1 A address table 2 -38 B BOOTP 2-13 broadcast storm, threshold 2-34 C Class of Service configuring 2-77 queue mapping 2 - 77 community string 2-83 configuration settings, saving or restoring 2-22 console port pin assignments C-1 D default settings 1-14 DHCP 2-1 3 dot1x commands 3-44 configure 2-103 default 3-46 downloading software 2-20 F fi[...]

I NDEX Index-2 R RADIUS, logon authentication 2-17 rate limit configuration 2-98 restarting the system 2-24 S serial port configuring 3-61 , 3-68 , 3-8 6 SNMP community string 2-83 enabling traps 2-84 trap manager 2-84 software downloads 2-20 software version, displaying 2-28 Spanning Tree Protocol 2-42 startup configuration file, creat ing 2- 22 s[...]

[...]

38 T esla Irvine, CA 9 2618 Phone: (949 ) 679-800 0 FOR TECHNICAL SUPPOR T , CALL: From U. S.A. an d Cana da (2 4 hours a day , 7 da ys a w ee k) (800) SMC- 4-YOU; (94 9) 679-800 0; Fax: (949 ) 679- 1481 From Europe (8: 00 AM - 5: 30 PM UK Time) 44 (0) 118 97 4 870 0; Fax: 44 (0) 118 974 87 01 INTERNET E-mail addresses: techsupp ort@sm c.com europ [...]