Accton Technology VS4512 manuel d'utilisation

VDSL Switch-VS4512 VDSL Switch-VS4512DC Management Guide[...]

[...]

Manage ment Guide VDSL Switch-V4512 VDSL Switch ( with A C power connec tor) su pporting 12 VDS L lin es, wit h 2 Slots for Opt ional 100 0BAS E-SX, 1 000BA SE-LX, 1000BA SE-T or 1000 BASE- X GBIC u plink modul es VDSL Switch-VS451 2DC VDSL Switch ( with D C pow er conne ctor) s upporti ng 12 V DSL li nes, w ith 2 Slots for Opt ional 100 0BAS E-SX,[...]

Accton is a trade mark o f Accton T echnology Co rporat ion. Oth er tra demarks or bran d name s mentio ned herein are trad emark s or re gistered trade marks of th eir resp ectiv e companie s. Inter national Headqua rters No. 1 Creation Road III, Science-based Indust rial Park Hsinchu 300, T aiwan Phone: 886-3-5770-270 Fax: 886-3-5770-267 Internet[...]

i Contents Chapter 1: Introduc tion 1-1 Key Featu res 1-1 Descripti on of Software Features 1-2 Sys tem Defa ult s 1-5 Chapter 2: Initial Configuration 2-1 Connectin g to the Swit ch 2-1 Config uration O ptions 2-1 Requi red Connect ions 2-2 Remo te C onn ect ion s 2-3 Basi c Conf igu rati on 2-3 Conso le Conn ection 2-3 Setting Pa sswords 2-4 Sett[...]

Contents ii Savi ng or Resto ring Con figuration Setting s 3-16 Downloa ding Confi guration Se ttings from a Server 3-16 Sett ing the Star tup C onf igu rati on F ile 3-17 Copy ing the Ru nni ng C onfi gur at ion t o a Fil e 3-17 Resettin g the Syst em 3-18 Setti ng the Sys tem Clock 3-18 Config uring SNTP 3-18 Setting th e Time Zo ne 3-19 Simple N[...]

Cont ents iii Address T able Se ttings 3- 73 Setting Sta tic Addres ses 3-73 Displ aying th e Address Table 3-74 Chang ing the Agi ng Time 3-75 Spanning Tree Algorit hm Conf iguration 3-76 Displ aying Glob al Setting s 3-77 Config uring Globa l Settings 3-79 Display ing Interfa ce Settings 3-81 Config uring Inte rface Settin gs 3-84 VLAN Configura [...]

Contents iv Chapter 4: Comma nd Line Interfa ce 4-1 Using the Comm and Line I nterface 4-1 Acces sing the CL I 4-1 Cons ole Connec tion 4-1 Telnet Co nnection 4-1 Entering C ommands 4-3 Keywo rds and Arg uments 4-3 Minimu m Ab brevi ati on 4- 3 Comm and Compl etion 4-3 Gettin g Help on Co mmands 4-3 Showin g Command s 4-4 Partia l Keyword L ookup 4[...]

Cont ents v User Acce ss Com mands 4-24 usernam e 4-24 enable p assword 4-25 IP Filter Comm ands 4-26 managem ent 4-26 show man ageme nt 4-27 Web Serve r Comm ands 4-28 ip http po rt 4-28 ip http s erver 4-28 ip http s ecure-server 4-29 ip http s ecure-port 4-30 ip telnet serve r 4-30 Secure Sh ell Comma nds 4-31 ip ssh server 4-31 ip ssh timeout 4[...]

Contents vi System Status Com mands 4-49 show sta rtup-co nfig 4-49 show runn ing-confi g 4-51 show sy stem 4-53 show use rs 4-53 show ver sion 4-54 Flash/F ile Com mands 4-55 copy 4-55 delet e 4- 57 dir 4- 58 whic hboot 4-59 boot s yste m 4-59 Authentic ation Com mands 4- 60 Authe ntication Sequence 4-60 auth ent icat ion log in 4-60 RADIUS Client[...]

Cont ents vii SNMP Com mands 4-76 snmp- serve r comm uni ty 4 -76 snmp-serv er contact 4-77 snmp- serve r loca ti on 4-77 snmp- serve r host 4 -78 snmp-serv er enable traps 4-79 snmp i p filter 4-80 show sn mp 4-81 DHCP Commands 4-82 DHCP Client 4-82 ip dhcp clien t-identifie r 4-82 ip dhcp restart cl ient 4-83 Interface Commands 4-84 inter face 4-[...]

Contents viii show controlle rs efm ad min 4-112 show controlle rs efm pro file 4-112 show controlle rs efm st atus 4-114 show co ntrollers efm remote ethernet m ode 4-115 show controlle rs efm-no ise-ma rgin 4-116 show controlle rs efm ch annel-perf ormance 4-117 show controlle rs efm li ne-table 4-117 show controlle rs efm ph y-table 4-118 show c[...]

Cont ents ix Config uring Private VL ANs 4-144 pvlan 4-1 44 show pvlan 4-145 Bri dge Ex ten sio n Comm ands 4 -14 6 show brid ge- ext 4-14 6 Priority Com mands 4-147 Priority Co mmands (Layer 2) 4-147 switchpo rt priority default 4-147 queue m ode 4-148 queue ba ndwidth 4-149 queue co s-map 4-1 50 show q ueue mode 4-151 show q ueue band width 4-151[...]

Contents x IP Interface Comm ands 4-166 Basi c IP Configurati on 4-166 ip addre ss 4-167 ip defau lt-gateway 4-1 68 show ip interfac e 4-168 show ip redi rects 4-169 ping 4-1 69 Appendix A: Soft ware Specificatio ns A-1 Soft war e Fe atu res A- 1 Manage ment Featu res A-2 Stan dard s A-2 Manage ment Inform ation Bas es A-3 Appendix B: Trou bleshoot[...]

1-1 Chapter 1: Introduction The switc h provides a broad ran ge of feat ures for Lay er 2 swit ching. It includes a manage ment ag ent that al lows you t o config ure the feat ures listed in this man ual. The defau lt config uration ca n be used for most of t he featu res provide d by this switch . Howeve r , there are m any op tions that you sho u[...]

Introd ucti on 1-2 Description of Software Features The sw itch pr ovides a w ide range o f a dvanced perfor man ce enha ncin g featur es. Flow cont rol elimina tes the l oss of packets du e to bottlene cks cau sed by po rt satura tion. Broadc ast stor m suppr ession pr even ts broadcas t traffic storms f rom engulfin g the netwo rk. Port-b ased VL[...]

Desc riptio n of Sof tware F eatur es 1-3 Port Mirroring – The swi tch can un obtrusi vely mirr or traffic from any port to a monitor port. Y ou can then attach a protoc ol ana lyzer or RMON probe t o this port to perform traffic an alysis and veri fy conn ection integr ity . Port T run king – Ports can be combin ed into an aggregat e conn ecti[...]

Introd ucti on 1-4 Virtual LANs – The switch sup ports up to 255 VLA Ns. A Virtual LAN is a collect ion of network n odes t hat share the same collision do main r egard less of the ir physica l location or connec tion point in the netwo rk. The swi tch supp orts tagged VLA Ns based on the IEEE 80 2.1Q standard. Memb er s of VLAN groups can be man[...]

System Defaults 1-5 System Defaults The switc h’s system de faults are provi ded in the co nfigur ation file “Fact ory_D efault_ Config. cfg.” To re set the s witch defau lts, thi s file shou ld be set as the start up configur ation file (page 3-1 7). The f ollo wing t abl e list s so me of the ba sic sy stem de faul ts . Function Parameter D[...]

Introd ucti on 1-6 Web Management HTTP Server Enabled HTTP Port Num ber 80 HTTP Secure Server Enabled HTTP Secure Port Number 443 SNMP Community Strings “public” (read only) “private” (read/write) Traps Authentication traps: enabled Link-up-down events: enabled IP Filtering Disabled Port Configuration Admin Status Enabled Auto-negotiation E[...]

System Defaults 1-7 Acceptable Frame Type All Ingress Filtering Disabled Switchport Mode (Egress Mode) Hybrid: tagged/untagged frames Traffic Prioritization Ingress Port Priority 0 Weighted Round Robin Q ueue: 0:1 1:4 2:1 6 3:6 4 IP Precedence P riority Disabled IP DSCP Priority Disabled IP S ett ings IP Ad dress 0.0 .0 .0 Subnet Mask 255.0.0.0 Def[...]

Introd ucti on 1-8[...]

2-1 Chapter 2: Initia l Configuration Connecting to the Switch Configuration Options The switc h includes a built-in ne twork managem ent age nt. The ag ent offers a var iety of mana geme nt opt ions, i ncluding SNM P , R MON a nd a Web-base d int erface . A PC may also be connec ted dire ctly to the sw itch for configu ration and monitor ing via a[...]

Initial Config uration 2-2 • Glo bal ly set broadc ast storm con trol • Displa y system in forma tion and st atistics Required Connections The switch pr ovides an RS-232 serial port that enab les a co nnection t o a PC or termin al for monitor ing and co nfigur ing the sw itch. A nul l-modem conso le cable is provided w ith the swi tch. Attach [...]

Basic Confi gurati on 2-3 Remote Connections Prior to acces sing t he s witch’s on board a gent via a netwo rk c onnec tion, y ou mus t fi rst c onfi gure it w ith a val id I P add ress , su bnet m ask, and defaul t gatewa y usi ng a console connec tion, DH CP or BOO TP proto col. The IP address f or this switch is assigned by DHCP by default . T[...]

Initial Config uration 2-4 Setting Passwords Note: If this is yo ur first time to log into the CLI program, y ou should define new passwords for both default user names us ing the “u sername” comm and, record them and put them in a saf e place. Passwo rds can con sist of up t o 8 alphanu meri c charact ers and ar e case s ensitive . T o p reven[...]

Basic Confi gurati on 2-5 Before y ou can assi gn an IP addr ess to th e switch , you mus t obtain the fol lowing inform ation from y our netwo rk adm inistrat or: • I P addr ess fo r the sw itch • Default ga teway for the netwo rk • Network mask for thi s network T o assi gn an IP address to the sw itch, comp lete th e follow ing steps: 1. F[...]

Initial Config uration 2-6 5. W ait a few minutes, and then c heck t he IP conf iguratio n settings by typin g the “show ip int erface ” comm and. Pre ss <Ent er>. 6. Then save y our con figurat ion chang es by typi ng “copy running- confi g startup-co nfig.” Ente r the startup file name and pr ess <E nter>. Enabling SNMP Manage[...]

Basic Confi gurati on 2-7 T o configure a community string, complete the following steps: 1. From the Pr ivileged Exec leve l global con figurat ion mode pr ompt, ty pe “snmp -server com muni ty string mode ,” where “st ring” is the co mmuni ty acces s string an d “mode ” is rw (read/ write) or ro (rea d only). Pr ess <E nter>. (N[...]

Initial Config uration 2-8 Managing System Fil es The s wit ch’ s fl ash memory supp ort s th ree types of s yste m fi les t hat can be mana ged by the CLI prog ram, Web int erface , or SNMP . The sw itch ’s file system allow s files to be upload ed and d ownloade d, cop ied, deleted , and se t as a start-up fil e. The thre e types of files ar [...]

3-1 Chapter 3: Configuring the Switch Usi ng th e We b Int erfa ce This swi tch pr ovides an emb edded HTT P Web ag ent. Us ing a Web brow ser yo u can configure t he switch and vi ew stati stics to monito r network acti vity . The Web agent can be acce ssed by any com puter on the netwo rk using a standard Web brow ser (Interne t Explorer 5.0 or a[...]

Conf igurin g the Swit ch 3-2 Navigating the Web Browser Interfa ce T o acce ss the web-brow ser in terface yo u mus t first enter a us er name a nd password . The ad minist rator h as Rea d/Write ac cess to all co nfigurat ion parame ters and statisti cs. The de fault use r name an d passw ord for th e admin istrato r is “adm in.” Home Page Wh[...]

Navigating the Web Browser Inter face 3-3 Notes: 1. To ensure pr oper screen ref resh, be sure that Internet Explorer 5.x is configured as follows: Under the menu “Tools / Internet Options / G eneral / Temporary Int ernet Files / S ettings,” the s etting for item “Check for newer versions of stor ed pages” should be “Every visit to the pa[...]

Conf igurin g the Swit ch 3-4 SNTP 3-18 Configura tion Configures SNT P client set tings, incl uding broadc ast mode or a specified list of serv ers 3-18 Clock Tim e Zone Sets the l ocal tim e zon e for th e syste m clock 3-19 SNMP 3-20 Configura tion Configure s comm unity strings and re lated trap functio ns 3-21 IP Filterin g Sets IP a ddress es[...]

Navigating the Web Browser Inter face 3-5 Rate Limi t 3-50 Input Por t Config uration Sets the i nput ra te limit for ea ch port 3-50 Input Trun k Con figurati on Sets the i nput ra te limit for ea ch trun k 3-50 Output Po rt Con figurati on Sets the o utput rate lim it for e ach po rt 3-50 Output Trunk Con figurati on Sets the outp ut rate limit f[...]

Conf igurin g the Swit ch 3-6 VLAN 3-86 802.1Q V LAN 3-86 Basic Info rmatio n Displays i nforma tion on the VL AN typ e supp orted b y this switc h 3-88 Current T able Shows the curren t port mem bers of ea ch VLAN and wheth er or not the po rt is ta gged o r unta gged 3-89 Static List Used to crea te or re move V LAN g roups 3-91 Static Tab le Mod[...]

Basic Confi gurati on 3-7 Basic Configuration Displaying System Infor mation Y ou can easi ly identif y the syst em by dis playing t he device name , locatio n and contact infor mation. Field Attributes • Syst em Name – Name assi gned to th e switch s ystem. • Object ID – MIB II object ID for switch’s networ k manage men t subsystem . •[...]

Conf igurin g the Swit ch 3-8 We b – Click System, Sys tem Information. S pecify the s ystem name, locati on, and contac t informati on for the syst em administrator , then clic k Apply . (This page also includes a T elnet butt on that allows access to the Command Line Interface via T elnet.) CLI – S peci fy th e ho stnam e, l ocat ion and co n[...]

Basic Confi gurati on 3-9 Displaying Switch Hardw are/Software Ve rsions Use the Sw itch Infor matio n page to displa y hardw are/firm ware ve rsion nu mbers for the main board and management software, as well as t he power status of the s ystem. Field Attributes Main Board • Serial Numbe r – The serial numb er of the s witch. • Number o f Po[...]

Conf igurin g the Swit ch 3-10 CLI – Use the foll owing com ma nd to displ ay versi on inform ation. Displaying Bridge Exten sion Capabilities The Bridg e MIB includ es extens ions for manage d devices that supp ort Multi cast Fil ter ing, T raf fic Cl asses , and Vi rtu al LA Ns. Y ou c an ac ces s thes e ex tens ions t o dis play def ault se tt[...]

Basic Confi gurati on 3-11 We b – Click System, Bridge Extension. CLI – Enter the fo llowing co mman d. Setting the Switch’s IP A ddress An IP addre ss may be used fo r manage men t access to the switch over yo ur network. By defa ult, the switch u ses DHCP to assign IP setti ngs to VLAN 1 on the switch . If you wish to manuall y configur e I[...]

Conf igurin g the Swit ch 3-12 Command Attributes • Manageme nt VLAN – ID o f the co nfigur ed VL AN (1-40 93, no leadin g zeroe s). By default , all ports on the switch ar e memb ers of VLAN 1 . Howeve r, the manage ment s tation c an be attach ed to a port b elonging to a ny VLAN , as lo ng as that VLAN has been as sign ed an IP addr ess. •[...]

Basic Confi gurati on 3-13 CLI – S p ecify t he manag eme nt interfac e, IP addr ess and default ga teway . Using DHCP/BOOTP If your network pr ovides DHCP/BOOTP services, you can configure the switch to be dyna mic ally co nfi gured by thes e serv ices . We b – Clic k System , IP Config uration. Specify the VLAN t o which th e manage ment stat[...]

Conf igurin g the Swit ch 3-14 Renewing DCHP – DHC P may lease addres ses to clients indefini tely or fo r a specific period o f time. If the address ex pires or the switch i s moved to anothe r network segmen t, you will lo se management access to the switch. In this case, y ou can reboot th e switch or submi t a client requ est to rest art DHCP[...]

Basic Confi gurati on 3-15 Note: Up to two copies of t he system software (i.e., the runtime firmwa re) can b e stored in the file directory on the swit ch. The currently designated startup version of this file cannot be delet ed. Downloading System Softw are from a Server When dow nload ing runti me code, you can specify the destinat ion file na m[...]

Conf igurin g the Swit ch 3-16 CLI – Enter the IP address of the TFTP ser ver , select “c onfig” or “opc ode” file type, then enter the source and d estination fi le names, s et the new file to sta rt up the system, and then restart th e switch. Saving or Restoring Conf iguration Settings Y o u can up load/d ownlo ad configur ation s etti[...]

Basic Confi gurati on 3-17 Setting the Startup Config uration File If you dow nload to a new file nam e, sele ct the new f ile from the dr op-d own list for S tartup Configur ation File, and pr ess Apply Changes . T o use the new settings, reboot t he s ystem via the Sys tem/ Reset m enu. CLI – Enter the IP address of the TFTP s erver , specif y [...]

Conf igurin g the Swit ch 3-18 Resetting the System We b – Click System, Reset. Cli ck the Reset bu tton to rest art the switc h. CLI – Us e th e rel oad c omman d to rest art the swit ch. Note: When restarting the system, it will always run the Power-On Self-Test. Setting the System Clock Simple Network T ime Protocol (SNTP) allows the switch [...]

Basic Confi gurati on 3-19 • SNTP Poll Interval – Sets the in terval between se nding requests f or a time update from a tim e se rver w hen s et to SNTP Client mode . (Range: 16 -162 84 seconds ; Defa ult: 16 sec onds) • SNTP S erver – In un ica st mod e, s ets th e IP addr es s f or u p to thre e ti me servers. The switc h attempts to upd[...]

Conf igurin g the Swit ch 3-20 We b – Select SNTP , Clock T ime Zone. Set the of fset for y our time zone r elative to the UTC, an d click Ap ply . CLI - This exampl e shows ho w to set th e time zone for the sy stem clo ck. Simple Network Managem ent Protocol Simp le Ne twor k Manage ment Pr otoc ol ( SNMP) i s a commu nica tion pr otoc ol desig[...]

Simpl e Netwo rk Manag ement Protoc ol 3-21 Setting Community Acces s Strings Y o u ma y config ure up to five co mmunit y strings autho rized for manage ment ac cess. All commun ity strings used fo r IP T rap Ma nagers sh ould be listed in th is table. For securi ty rea sons, you shoul d co nsider remo ving the d efau lt st rings. Command Attribut[...]

Conf igurin g the Swit ch 3-22 Specifying Trap Manage rs and Trap Type s T raps indic ating statu s change s are iss ued by the sw itch to sp ecified t rap ma nagers. Y o u mus t specify trap man agers so t hat key ev ents are rep orted by t his switch to your ma nageme nt station (u sing net work man agem ent platform s such a s HP Ope nView . Y o[...]

Simpl e Netwo rk Manag ement Protoc ol 3-23 Filtering Addresses for S NMP Client Acce ss The sw itch allow s y ou to cr eate a list of up to 1 6 IP a ddre sses o r IP ad dress gr oups that are allo wed acc ess to the switch via SNM P ma nageme nt software. Command Usage • To specify th e clients all owed SN MP acces s, enter an IP address al ong [...]

Conf igurin g the Swit ch 3-24 CLI – This examp le allo ws SNMP access for a specif ic client. User Authentication. Use the Pas swords or RA DIUS/ T ACACS + m enu to restrict mana geme nt acc ess based on spec ified user na mes and pass words. Y ou can manual ly con figure a ccess rights on the sw itch (Pass words menu), or you can us e a remot e[...]

User Authentication. 3-25 CLI – Assign a us er name to acce ss-leve l 15 (i.e., adm inistr ator), th en spec ify the password . Configuring Local/Remote Logon Authenticat ion Use the Authe nticati on Se ttings menu t o res trict ma nagem ent a ccess bas ed on specifie d us er nam es and pas sword s. Y ou can ma nual ly con figure a cces s righ ts[...]

Conf igurin g the Swit ch 3-26 Command Attributes • Authentication – Se lect the aut henti cation, or aut henti cation sequ ence required : - Local – User authentication is performed only locally by the switch. - Radi us – User au thentica tion is per forme d using a RAD IUS s erver only . - TACACS – User auth enti cati on i s per for med[...]

User Authentication. 3-27 We b – Click Security , Authentication Settings. T o config ure local or re mote authenti cation preferenc es, sp ecify the au then tication se quence (i.e., on e to three methods), fill in the p a rameters f or RADIUS or T ACACS+ authenticat ion if selecte d, and click Ap ply . CLI – S p ecify a ll the requ ired param[...]

Conf igurin g the Swit ch 3-28 Telnet Settings T eln et acc ess to the swi tch ca n be enab led vi a the Web o r CLI . We b – Clic k Security , T elne t Settings, then check the checkb ox to ena ble acces s via T e ln et (i .e ., a vi rtu al te rmi nal) . CLI – This exam ple ena bles T elnet acces s to the swit ch. Configuring HTTPS Y o u can c[...]

User Authentication. 3-29 Command Attributes • HTTPS Status – Allows yo u to enable/d isable the HTTP S ser ver featu re on t he switch. (Default: E nable d) • Change HTTPS Port Number – Speci fies the UDP po rt numb er used for HTT PS/ SSL connec tion to the swi tch’s web inte rface. (De fault: Port 443 ) We b – Click Security , H TTPS[...]

Conf igurin g the Swit ch 3-30 Configuring the Secure S hell The Berkl ey-standa rd includ es remot e acce ss tools orig inally des igne d for Unix systems. Some of these too ls have also been imp lemen ted for M icrosoft Wi ndows and other environm ents. Thes e tools, in cluding co mmand s such as, rsh (remote shell), a nd rexec (remote execute ),[...]

User Authentication. 3-31 CLI – This examp le ena bles SSH, sets the authen tication param eters, and displays the cur rent c onfigura tion. It show s that t he ad minist rator has mad e a c onnec tion via SHH, and th en dis abled t his c onnec tion. Configuring Port Security Port securit y is a featur e that allow s you to co nfigure a sw itch p[...]

Conf igurin g the Swit ch 3-32 Command Attributes • Port – Port number. • Action* – The action t o be taken w hen a por t security violation i s detect ed: - None : No act ion shou ld be take n. (This is th e defaul t.) - Trap : Sen d an SNMP trap messa ge. - Shutdown : Disabl e the port . - Trap and Shutdo wn : Send an SNMP tra p messag e [...]

User Authentication. 3-33 Configuring 802.1x Port Authentication Netw ork switch es can pr ovid e open an d eas y access to netw ork re sourc es by simply attac hing a clie nt PC. Althou gh this automati c configur ation a nd acce ss is a desirabl e feature, it also allo ws unautho rized pe rson nel to eas ily intrude and possibly gain acces s to s[...]

Conf igurin g the Swit ch 3-34 Displaying 802.1x Global Settings The dot1x protoco l includes global param eters tha t contro l the client authent ication process that runs bet ween t he client and the swi tch (i.e., a uthentic ator), as we ll as the clien t identity look up pro cess that runs bet ween the sw itch and authen ticatio n server. These[...]

User Authentication. 3-35 CLI – This exampl e sh ows t he defa ult p rotocol settings for 8 02.1 x. For a de scripti on of the addi tional entr ies disp layed in the CLI, See “ show dot1x” on page 73. Console#show dot1x 4-73 Global 802.1X Parameters reauth-enabled: yes reauth-period: 300 quiet-period: 350 tx-period: 300 supp-timeout: 30 serve[...]

Conf igurin g the Swit ch 3-36 Configuring 802.1x Global Settin gs The dot1x protoco l includes global param eters tha t contro l the client authent ication process that runs bet ween t he client and the swi tch (i.e., a uthentic ator), as we ll as the clien t identity look up pro cess that runs bet ween the sw itch and authen ticatio n server. The[...]

User Authentication. 3-37 CLI – This enables re-authentication and sets all of t he global parameters for 802.1x . Configuring Port Au thorization Mode When d ot1x is e nabled, you n eed to s pecify the dot1x authent ication mode configur ed for eac h port. Command Attributes • Status – Indic ates if aut hentic ation is en abled or dis abled [...]

Conf igurin g the Swit ch 3-38 CLI – This examp le sets the aut hentic ation mod e to enabl e 802.1x o n port 2, and allows up t o ten client s to connect to this port . Displaying 802.1x Statistics Thi s swit ch c an di spl ay st ati sti cs fo r do t1x pr otoc ol e xch anges for any po rt. St atistical V a lues We b – Select Security , 802.1x,[...]

Port Co nfig uration 3-39 CLI – This examp le display s the 802. 1x statistic s for port 4. Port Config uration Displaying Connection S tatus Y o u can us e the Port Informa tion or Trunk Inform ation pages to displa y the curren t connect ion statu s, inc luding link s tate, s peed/du plex m ode , flow control , and auto-n egotiation . Field Att[...]

Conf igurin g the Swit ch 3-40 • Max MAC Count – Show s the ma ximum nu mbe r of MAC add ress tha t can be learned by a port. (0 - 20 addres ses) • Speed Duplex Status – S hows the cu rrent speed and duple x m ode. • Flow Cont rol Sta tus – Indicates t he type of flow contr ol curre ntly in use . (IEEE 8 02.3x, B ack-P ressure or No ne)[...]

Port Co nfig uration 3-41 - 10full - Sup ports 10 Mb ps full -duple x opera tion - 100half - Sup ports 10 0 Mbps hal f-dup lex operat ion - 100full - Suppo rts 100 Mbps f ull -dup lex operat io n - 1000full - Supports 100 0 Mbp s full-dupl ex operati on - Sym - Tra nsmits an d receiv es paus e frame s for flow co ntrol - FC - Suppor ts flow cont ro[...]

Conf igurin g the Swit ch 3-42 CLI – This exam ple sho ws the co nnection status for Port 5. Configuring Interface Conn ections Y o u ca n use the Port Co nfigurat ion or Trunk Configur ation page to e nable/ disable an interface, set auto-ne gotiat ion and the in terface capab ilities to advertise, or manua lly fix the spe ed, dupl ex mode, and [...]

Port Co nfig uration 3-43 • Autone gotiati on (Port Capabi litie s) – Allows auto- negotiat ion to be e nabled/ disabled . Wh en au to-neg otiation i s ena bled, yo u need to specify t he c apabiliti es to be ad vertised . Wh en auto- negotiat ion is di sabled, you can force t he se ttings for speed, mode , and flow con trol.The followin g capa[...]

Conf igurin g the Swit ch 3-44 CLI – Select the interfac e, and then ent er the requ ired set tings. Creating Trunk Groups Y o u can cr eate multiple lin ks betwee n devi ces that work as one vi rtual, aggregat e link. A por t trunk offers a dram atic inc rease in bandw idth for networ k segm ents where b ottle necks exist, as w ell a s prov idin[...]

Port Co nfig uration 3-45 Statically Configuring a Tru nk Command Usage • When co nfiguri ng stat ic trunk s, you may not be able to link switche s of differ ent types, dependi ng on the m anufact urer’s implementati on. However, note that the static t runks on this switch ar e Cisco EtherCh annel com patibl e. • To avoid crea ting a loop in [...]

Conf igurin g the Swit ch 3-46 CLI – This exampl e crea tes t runk 2 with po rt s 13 and 1 4. Jus t con nect these po rt s to two static trun k ports on ano ther swi tch to form a trunk . Enabling LACP on Selected Ports Command Usage • To avoid crea ting a loop in the net work, be su re you enab le LA CP b efore c onnectin g the ports, and als [...]

Port Co nfig uration 3-47 We b – Click Port, LACP , Configuratio n. Select switch p orts f rom the scroll-do wn port list and click Add. After you ha ve com pleted add ing ports to th e memb er list, click Apply . CLI – The followi ng exam ple ena bles LACP fo r ports 13 a nd 14. J ust c onnec t these ports to LACP -enabl ed trunk po rts on ano[...]

Conf igurin g the Swit ch 3-48 Setting Broadcast Storm Thresholds Broadca st storms may oc cur whe n a device on your network i s malfunc tioning, or if applicat ion progra ms are no t well des igned or pro perly co nfigured . If there is too much br oadca st traffic on you r network , perform ance can be sever ely degr aded or everythi ng can co m[...]

Port Co nfig uration 3-49 CLI – S p ecify a ny inter face, and t hen enter the thre shold. T he followi ng disab les broadca st stor m control for port 1, and t hen sets bro adcas t suppres sion at 600 packet s per second f or port 2. This threshold will then apply to all ports with broadca st st orm c ontrol e nabl ed. Configuring Port Mirroring[...]

Conf igurin g the Swit ch 3-50 We b – Click Port, Mirr or . S pecify the so urce port , the tr af fic type to be mir ror ed, and the target port , then cli ck Add . CLI – Use the in terface co mm and to select the mon itor port, then use th e port moni tor comman d to speci fy the sou rce por t. Not e that defau lt mir ror ing un der th e CLI i[...]

Port Co nfig uration 3-51 We b - Click Rate Li mit, Input/Outpu t Port/T runk Configur ation. Set the In put Rate Limit S tatus o r Output Rate Li mit S tatus, then set the rate li mit for the in dividual interfaces , and click Apply . CLI - This exampl e sets the rate lim it for input and output traffic passing throu gh port 1 to 50 M bps. Showing[...]

Conf igurin g the Swit ch 3-52 St atistical V a lues Parameter Description Inte rf ace S tati stic s Received Octets The total numbe r of oc tets rec eived o n the interfac e, incl uding f raming character s. Received Unicas t Pack ets The number of subnetw ork-un icast p ackets deliver ed to a highe r-layer protocol. Received Mu lticast Packet s T[...]

Port Co nfig uration 3-53 Single Co llision F rames Th e number of succ essfull y trans mitted frames for whi ch tran smissio n is inhibited b y exac tly one collisi on. Inte rn al MAC Tran smit Errors A count of fr ames f or wh ich t rans missi on on a part icu lar i nter face f ails due to an inte rnal MA C sub layer tr ansmit error. Multiple C o[...]

Conf igurin g the Swit ch 3-54 We b – Clic k Port, Port St atistics . Select the re quired interface, and click Quer y . Y ou can also use the Re fresh bu tton at the bottom of the page to upd ate the scre en. 64 Bytes Frames The total numbe r of fra mes (in cluding ba d pack ets) re ceived and transmitte d that were 6 4 octet s in len gth (exclu[...]

Port Co nfig uration 3-55 CLI – Th is ex ampl e show s st atisti cs f or po rt 12 . Console#show interfaces counters ethernet 1/12 4-92 Ethernet 1/12 Iftable stats: Octets input: 868453, Octets output: 34 92122 Unicast input: 7315, Unitcast output: 6 658 Discard input: 0, Discard output: 0 Error input: 0, Error output: 0 Unknown protos input: 0, [...]

Conf igurin g the Swit ch 3-56 VDSL Co nfigura tion Y o u can co nfigur e and disp lay com munica tion parame ters for VDS L and Etherne t ports on the swi tch and co nnect ed CPEs. VDSL Global Configuratio n This Web page ass igns the sam e profile t o each VDS L switch po rt. Details of these profiles ar e given in the table below. Notes: 1. The [...]

VDSL Configuration 3-57 4. The maximum distances for VDSL links using the recomm ended profiles are: 5. T ype-1 26 AWG (100 ohm)/0.4 mm, or T ype-2 24 A WG (100 ohm)/0.5 mm cable may be installed to achieve the maximum distance. However, typically , 24 A WG (100 ohm)/0.5 mm wire is better than 26 A W G (100 ohm)/0.4 mm wire. Note that the distance [...]

Conf igurin g the Swit ch 3-58 VDSL Port Configuration Y o u can en able/d isable a selected por t, enab le/disab le Remot e Digital Loo pback (RDL), se t the optima l trans mission rate, and con figure a pr ofile for the se lected port. Command Attributes • Active Stat us – Ch eck this box to enab le the sele cted port . • RDL – Ch eck th [...]

VDSL Configuration 3-59 Noi se mar gin s sho uld be con figu red to a leve l appr opr iat e to the ac tual noi se level of the e nvironm ent. A nois ier envi ronmen t requ ires a higher noise margin to ensure a st able link . The nois e margin on ly come s into effe ct after a li nk is activated. In creasing the noise margin can result in the swit [...]

Conf igurin g the Swit ch 3-60 We b – Clic k VDSL, Port Config uration. Select a port from the dro p-down list, and click Sele ct. CLI – The followi ng exa mples sho w how thes e featur es are con figure d in the CLI. Examples The follow ing exampl e disables VDSL por t 1. The follow ing exam ple shows how to en able/d isable RD L on VDSL por t[...]

VDSL Configuration 3-61 The fo llowing exam ple sh ows r ate a daptio n ena bled f or por t 1. The follow ing exam ple conf igures V DSL port 1 wi th an upstream noise mar gin of 6, and a dow nstream no ise mar gin of 6. The follow ing exam ple conf igures V DSL port 1 wi th: • M - do wnstream value: 16 , Upst ream valu e: 8 • I - down stre am [...]

Conf igurin g the Swit ch 3-62 - PBO – Ind icate s the stat us of the p ower b ack-of f mechani sm (o n/of f). If PBO is enabled , the power of transm issio n from the p ort will auto matical ly be adjusted to ensu re that the s ignal su ccess fully rea ches the r eceive po rt. - Rate Adaptati on – The data r ate on a VDSL line can be affected [...]

VDSL Configuration 3-63 CLI –The follo wing exam ples sho w how VDSL link cu rrent values are displ ayed in the C LI . Examples The follow ing exampl e displays VDSL link current value s on VDSL sw itch por t 2. The follow ing exam ple dis plays link status , signal -to-noi se ratios, R eed-S olomon errors, inter leaver param eters and PB O statu[...]

Conf igurin g the Swit ch 3-64 Displaying VDSL Port Et hernet Statistics VDSL P ort Ethe rnet Statistics displ ay key statistics for an inter face. We b – Click VDSL, VDSL Port Ethernet S tati stics.[...]

VDSL Configuration 3-65 CLI – Us e th e show interfaces counters command. Example VDSL Line Configuration Command Attributes • Line – Sel ect the VDSL line for config uration fro m the drop- down list. • Local/Remot e – In this v ersion this ma y only be set to Lo cal, ind icati ng that t he line conf iguration ap plies to th e line conne[...]

Conf igurin g the Swit ch 3-66 • Config Profile – In t his ve rsion, on ly “DEFVA L” is di splaye d. In futur e versi ons, a drop-d own list of all con figurabl e VDSL pr ofiles will be displayed i n this field. • Alarm Config Profile – The alarm profi le is pre-c onfigured to send trap messag es via SNM P protoc ol to registe r errors [...]

VDSL Configuration 3-67 • Physica l Interfac es Infor mation - Serial Number – A number give n by the m anufactur er to the item produc ed. This only displays on the CPE side. - Vendor ID – Th e name of the manu facturer of this switc h. - Version Number – The numb er of the c urr ent ha rdw are. - Current Sign al to Noise Ratio Margin – [...]

Conf igurin g the Swit ch 3-68 We b – Clic k VDSL, Inter face In formation . Select Line and Ch annel from t he drop-do wn lis ts, and click Query . CLI – The followin g exam ples sho w how thes e paramet ers are disp laye d in the CLI. Examples The fo ll ow in g exam ple dis plays phy sical inter face info rmation for VDSL port 1 . The fo ll o[...]

VDSL Configuration 3-69 VDSL Performance Moni tor Information This scree n disp lays line a nd chan nel perfor mance data inform ation sin ce the sw itch was last reset, durin g the cu rrent 15 minu te inte rval, and du ring th e current da y . Command Attributes • Line – Sel ect the VDSL line from the drop -down list. • Channel – Sele ct S[...]

Conf igurin g the Swit ch 3-70 We b – Click VDSL, Perfor mance Monitor Information.[...]

VDSL Configuration 3-71 CLI – Us e th e show cont rollers efm current-perfor mance comm and. Example Console#show controllers efm current-perf ormance vtu-c 1/1 4-120 VDSL_PERF_DATA_ENTRY : Ethernet 1/1 Loss of Framing 0 Ethernet 1/1 Loss of Signal 0 Ethernet 1/1 Loss of Power 0 Ethernet 1/1 Loss of Link 0 Ethernet 1/1 Errored Seconds 0 Ethernet [...]

Conf igurin g the Swit ch 3-72 Monitoring VDSL Performa nce History This page display s l ine an d ch annel p erforma nce data infor mation dur ing se lected 15 minu te in terval s ov er the last 2 4 ho urs of sw itch op erat ion, and dur ing se lected 1-day inte rvals fro m the cur rent day to 30 days ag o. Command Attributes • Line – Sel ect [...]

VDSL Configuration 3-73 We b – Click VDSL, Performanc e Monitor His tory . Note: The parameters described above are not disp layed in the CLI for periods before the current 15 minute, or 24 hour interval . To dis play these param eters during the current 15 min ute, or 24 hou r period see “VDSL Perf ormance Monitor Information” on page 3-69. [...]

Conf igurin g the Swit ch 3-74 We b – Cl ick Address T ab le, S tatic Addres ses. S p ecify t he interface , the MA C addr ess and V LAN, t hen clic k Add S tatic Addr ess . CLI – This exam ple add s an addres s to the static add ress table, but sets it to be deleted when t he switch is re set. Displaying the Address Table The Dyna mic Add ress[...]

VDSL Configuration 3-75 We b – Click Ad dress T able, Dy namic Addresse s. Specify the sea rch type (i.e., mark the Inte rfac e, M AC Add res s, or VLAN chec kbox) , se lect th e meth od of sort ing the displaye d addre sses, an d then c lick Query . CLI – This exam ple also di splays the addre ss table entr ies for por t 1. Changing the Aging [...]

Conf igurin g the Swit ch 3-76 We b – Cli ck Ad dress T able, Add ress A gin g. S pecif y t he ne w agin g tim e, cl ick Apply . CLI – Th is e xampl e set s the ag ing time t o 400 sec onds . Spanning Tree Algor ithm Configu ration The S panning Tree Algorithm (ST A ) can be used to detec t and disa ble netwo rk loops, and to provid e backu p l[...]

Span ning Tree A lgori thm Co nfig urati on 3-77 If a bridge does not ge t a Hello BP DU after a pred efined inte rval (Max imum Age), the bri dge a ssumes that the li nk to the R oot Bridge is do wn. T his bri dge w ill then initiate n egotiation s with oth er bridges to reconf igure the networ k to reestabl ish a valid net work topo logy . RSTP i[...]

Conf igurin g the Swit ch 3-78 • Configuration Cha nges – The num ber of time s the Sp anning Tree has been reconf igured. • Last Topology Chan ge – Time since the Sp anni ng Tre e was l ast r econf igur ed. These addi tiona l parameters ar e only disp layed for the CL I: • Spanning tree mod e – Spec ifies th e type of s panning tree u [...]

Span ning Tree A lgori thm Co nfig urati on 3-79 CLI – This command displays gl obal ST A settings, followed by settings f or each port . Note: The current root port and current root cost display as zero when this dev ice is not connected to the network. Configuring Global Setting s Global s ettings ap ply to the en tire swit ch. Command Usage ?[...]

Conf igurin g the Swit ch 3-80 • Priority – Bridge pr iority is used i n select ing the roo t device , root port, and designa ted port. The device with the highest prior ity becom es the STA r oot device. H owever , if all devices hav e the same priority , the device with t he lowest MAC a ddress will then beco me the root device . (Not e that [...]

Span ning Tree A lgori thm Co nfig urati on 3-81 We b – Clic k S panning Tree, ST A, Configu ration. Modify the re quired attributes , and click Apply . CLI – Th is ex ampl e en able s S panni ng T ree Prot ocol , an d the n con figu res the S T A par ameters. Displaying Interface Se ttings The S T A Por t Inform ation a nd ST A Trunk Info rmat[...]

Conf igurin g the Swit ch 3-82 The rules defining port s tatus are: - A port on a ne twork seg ment wi th no othe r STA comp liant bridg ing device i s always f orwarding . - If two po rts of a switch a re conn ected to the same segment and ther e is no other STA device atta ched to t his segmen t, the po rt with the sm aller ID forwar ds packet s [...]

Span ning Tree A lgori thm Co nfig urati on 3-83 These addi tiona l parameters ar e only disp layed for the CL I: • Admin stat us – Sh ows if this in terface is ena bled. • Path Cost – Thi s param eter is used by the STA to determine t he best path between devi ces. Th erefor e, low er val ues s hould b e ass igned t o po rts atta ched to f[...]

Conf igurin g the Swit ch 3-84 We b – Click S pa nning T ree, ST A, Port In formation or ST A T runk Information. CLI – This examp le show s the ST A attributes for port 5. Configuring Interface Sett ings Y o u can conf igure RSTP attribut es for spec ific int erfaces , includ ing po rt prior ity , path cost, link t ype, and ed ge por t. Y ou m[...]

Span ning Tree A lgori thm Co nfig urati on 3-85 • Trunk – Indica tes if a port is a me mber of a trun k. (STA Por t Confi guration o nly) The follow ing interfa ce attribu tes can be configu red: • Priority – De fines the prio rity use d for this por t in the Spanni ng Tree Protoc ol. If the path cos t for all po rts on a swi tch are the s[...]

Conf igurin g the Swit ch 3-86 • Migratio n – If at any time the switch detects STP BPDUs, incl uding Configuration or Topolo gy Change Notification BPDUs, it will automa tically set the selec ted inter face to forced STP- com patible mode. H owever , you ca n also use the Prot ocol Migr ation but ton to manu ally re-c heck the ap propriat e BP[...]

VLAN Configuration 3-87 VLANs pr ovide gr eater ne twork efficien cy by reduc ing broa dcast traffic , and allow you to m ake netwo rk cha nges wi thout hav ing to up date IP ad dres ses or IP s ubnets. VLANs inhe rent ly provide a high lev el of networ k secu rity sinc e traffic must pass through a co nfigur ed Laye r 3 link to reach a different V[...]

Conf igurin g the Swit ch 3-88 Port Overlapping – Po rt over lapping can be used t o allow ac cess to co mmonl y shared ne twork re sourc es among different VLA N groups, suc h as file ser vers or printers. Note that if you imple ment VLA Ns which do not over lap, bu t still need to comm unicat e, you can co nnect th em by ena bled rout ing on th[...]

VLAN Configuration 3-89 CLI – Enter the fo llowing co mman d. Displaying Current VLANs The VLAN Cu rrent T able shows the current port mem bers of each VLAN an d whether or not the port su pports VLAN taggi ng. Ports assign ed to a larg e VLAN group th at crosses s evera l switches shoul d use VLAN tagging. How ever , if you just want to crea te [...]

Conf igurin g the Swit ch 3-90 We b – Click VLAN, 802.1Q VLAN , Current T able. Select any ID from the scroll-do wn lis t. Command Attributes (CLI) • VLAN – ID of con figured VL AN (1-4094 , no leadin g zeroes) • Type – Show s how this VLAN was ad ded to the switch - Dynamic: Aut omat icall y le arned vi a GVRP * - Static: Adde d as a sta[...]

VLAN Configuration 3-91 Creating VLANs Use the VLAN S tatic List to create or remove VLAN grou ps. T o propagat e informat ion abo ut VLAN groups us ed on this sw itch to extern al netw ork devic es, y ou must spec ify a VLAN I D for each of th ese groups. Command Attributes • Current – Lists all the current VL AN grou ps creat ed for thi s sys[...]

Conf igurin g the Swit ch 3-92 Adding Static Members to VLANs ( VLAN Index) Notes: 1. Use t he VLAN S ta tic T abl e to conf ig ure por t membe rs for the sel ect ed VLAN index . Assign ports as tagged if the y are conn ected to 802.1Q VLAN com pliant devices, or untagged they are no t connec ted to any VLAN-a ware de vice s. You can also u se the [...]

VLAN Configuration 3-93 We b – Clic k VLAN, 802.1Q VLAN, St atic T able. Select a VLAN I D from the scroll-down list. M odify the VLAN name and status if required . Select the memb ership typ e by ma rking the ap propriat e radio bu tton in the list of ports or trunks. Cl ick Apply . CLI – The followin g exam ple adds tag ged and untag ged port[...]

Conf igurin g the Swit ch 3-94 We b – Open VLAN, 8 02.1Q VLAN, Static Members hip. Sel ect an interface from t he scroll-dow n box (Port or Trunk). Click Q uery to dis play me mbersh ip info rmation for the inte rface. Se lect a VLAN ID , and t hen click Add to add t he interfac e as a tagged member , or cli ck Remove to re move the inte rface. A[...]

VLAN Configuration 3-95 • Ingress Filter ing – Determ ines how t o process frames tagge d for VLAN s for whi ch the ing ress por t is not a memb er. ( Def ault : Dis able d) - Ingres s filtering onl y affec ts tagge d frames. - If ingre ss filtering is disa bled and a por t receive s fram es tagge d for VLA Ns for which i t is no t a memb er, t[...]

Conf igurin g the Swit ch 3-96 We b – Clic k VLAN, 802. 1Q VLAN, Port Config uration or VLAN Tr unk Configurat ion. Fill in the requ ired settin gs for eac h interface, click Appl y . CLI – Th is examp le s ets port 3 to acce pt o nly tagged f rames , assi gns P VID 3 as the native VLAN ID, set s the GARP timers, and then sets the switchport mo[...]

VLAN Configuration 3-97 Enabling Private VLANs Use the Priv ate VLAN St atus page to ena ble/disa ble the Private VL AN func tion. We b – Cli ck VLA N, Pr ivate VLAN, S tatus . Se lect Ena ble or Di sabl e fr om th e scroll-dow n box , and click Apply . CLI – Thi s exam ple en ables pr ivate VL ANs. Configuring Uplin k and Downlink Ports Use th[...]

Conf igurin g the Swit ch 3-98 CLI – This examp le con figures po rts 13 and 14 as uplink po rts and ports 1-8 as downlink port s. Class of Service Config uration Class of Service (C oS) allows you to sp ecify whic h data packets have greater precede nce when traffic is buffered in the s witch due to cong estion. Th is switch supports Co S with f[...]

Class of Servic e Conf igura tion 3-99 Command Attributes • Default Prio rity* – The priorit y that is assign ed to untag ged fram es receive d on the spec ified inter face. (Ran ge: 0 - 7, Def ault: 0) • Nu mber o f Egr ess Traf fic Cl asse s – The number of qu eue b uffe rs pr ovid ed fo r each port . * The CLI displays this information a[...]

Conf igurin g the Swit ch 3-100 Mapping CoS Values to E gress Queues Thi s swit ch p roc esses Class of S ervi ce ( CoS) pr io rity ta gged t raf f ic by u sing fou r priority qu eues fo r each por t, with ser vice sch edules b ased on strict or Weigh ted Round Ro bin (WRR ). Up to ei ght separate tra ffic priorities ar e defined i n IEEE 802.1p. T[...]

Class of Servic e Conf igura tion 3-101 We b – Clic k Priority , T raffic Classes . Mark an interface an d click Select to displa y the curren t mapping of CoS value s to outp ut queues . Assign priorities to the traffic classes (i.e., out put queue s) for the se lected interface , then cli ck Apply . CLI – Th e fo llow ing e xampl e sho ws ho [...]

Conf igurin g the Swit ch 3-102 CLI – The followi ng sets the queue mod e to strict priority se rvice mod e. Setting the Service Wei ght for Traffic Clas ses This switc h uses the Wei ghted Rou nd Ro bin (WRR) algorithm to deter mine the frequency at which i t services each prio rity queue . As descr ibed in “M apping CoS V alue s to Egres s Qu[...]

Class of Servic e Conf igura tion 3-103 CLI – The followi ng exa mple show s how t o assign W RR weig hts to each of th e priority qu eues. Mapping Layer 3/4 Priorities to CoS Valu es This swi tch suppo rts severa l common method s of prio ritizing laye r 3/4 traffic to meet applicat ion requ irements. Traffic priorities can be specif ied in the [...]

Conf igurin g the Swit ch 3-104 CLI – The followi ng exa mple enabl es IP P recedenc e servic e on the swi tch. Mapping IP Precedence The T ype of Servi ce (T oS) octe t in th e IPv4 header incl udes thr ee pre ced ence bit s defining eight different priority le vels ran ging from highes t priority for netwo rk control pac ket s to lo west pri or[...]

Class of Servic e Conf igura tion 3-105 CLI – The followi ng exam ple glob ally enabl es IP Prece dence service on th e switch , maps IP Prec edence va lue 1 to C oS value 0 (on port 1), and t hen disp lays the IP Pre ceden ce set ting s. * Mapping specif ic values for IP P recedence is implement ed as an interfac e configuration command, but any[...]

Conf igurin g the Swit ch 3-106 We b – Cl ick Pri or ity , IP DS CP Pr io rit y . Sel ect an en try fr om t he DS C P tab le , en ter a value in th e Class of Service V alu e field, then click App ly . CLI – The followi ng exam ple glob ally enabl es DSCP Priority se rvice on the switch, maps DSC P valu e 0 to CoS va lue 1 (o n port 1 ), and th[...]

Class of Servic e Conf igura tion 3-107 Mapping IP Port Priority In th e IP Po rt P rio rit y page, for e ach swi tch port or trunk, you ca n map IP ports (TCP/U DP ports) to the swit ch’s 4 traffic class que ues. Command Attributes • Current IP Port Table – displ ays a list of IP ports wit h their ma pped cla ss of service qu eues. • IP P [...]

Conf igurin g the Swit ch 3-108 CLI – The follo wing exam ple show s IP Port 80 mappe d to CoS v alue 0 for ether net port 1 . Copy Priority Settings In the Cop y Settings page you can copy the pr iority setti ngs from a se lected port or trunk to ano ther selec ted po rt or trunk. Command Attributes • Source I nterfac e – The por t or tr unk[...]

Multicast F iltering 3-109 Multica st Filt ering Multicast ing is u sed t o sup port real -time applicat ions su ch as video conferenc ing or strea ming au dio. A multic ast server does not hav e to establis h a separate c onnec tion with each client. It merely broadca sts its servic e to the network , and any ho sts that wan t to receiv e the mul [...]

Conf igurin g the Swit ch 3-110 Configuring IGMP Snooping and Query Param eters Y o u can co nfigur e the sw itch to forwar d multi cast traffic intel ligently . Based on the IGMP quer y and repo rt me ssage s, t he swi tch for wards traf fic on ly to the por ts t hat request multicast traffic. This pr events the sw itch from br oadca sting the t r[...]

Multicast F iltering 3-111 We b – Click IGMP Snooping, IGMP Confi guration. Adjust the IGMP s ettings as required , and then click Apply . (The defaul t settings are sho wn below.) CLI – Th is examp le mo difies t he s ettings for mul ticast filterin g, and then di splays the current status . Displaying Interfaces Attach ed to a Multicast Route[...]

Conf igurin g the Swit ch 3-112 We b – Click IGMP Snoopin g, Multicast Ro uter Port In formation. Select the require d VLAN ID from t he scr oll- down l ist t o disp lay th e associ ated multi cast rout ers . CLI – This examp le sho ws that Por t 1 1 has bee n statically co nfigur ed as a port attached to a m ulticas t router . Specifying Stati[...]

Multicast F iltering 3-113 We b – Click IGMP Snooping, S tati c Multicast Router Port Configuration. S pecify the interface s attached to a multicast rou ter , indicate the VLAN which will forward all the corres ponding multica st traffic, and then cl ick Add. After you have f inished ad ding interface s to the list, click Apply . CLI – Th is e[...]

Conf igurin g the Swit ch 3-114 We b – Clic k IGMP Snoo ping , IP Multicast R egistrati on T a ble. Select a VL AN ID and the IP add ress for a m ulticast servic e from the s croll-do wn lists. The sw itch w ill display al l the interfac es tha t are propagat ing this m ulticas t service. CLI – The followi ng show s the multic ast entries l ear[...]

Multicast F iltering 3-115 We b – Clic k IGMP Sno oping, IGM P Memb er Port T a ble. S pec ify the inte rface attached to a mul ticast s ervice (via an IGMP-en able d switch o r multicas t router) , indicate t he VLAN that will prop agate the multic ast service, s pecify the multica st IP address , and click Add. After you ha ve com pleted add in[...]

Conf igurin g the Swit ch 3-116[...]

4-1 Chapter 4: Command Line Interface This chap ter desc ribes ho w to use the Comman d Line Interface (CLI). Using the Command Line Interface Access ing t he CLI When acc essi ng the ma nagemen t interf ace for the sw itch ove r a direc t connect ion to the serve r ’s conso le port, or vi a a T eln et connec tion, the switch ca n be manag ed by [...]

Comm and L ine Int erface 4-2 T o acce ss the switch t hrough a T elnet ses sion, yo u must fi rst set the IP address for the switch , and se t the defaul t gatewa y if you are m anag ing the swi tch from a different IP su bnet. For exa mple, If your cor porate n etwork i s connect ed to anot her netwo rk outside your office or to the Int ernet, y [...]

Enter ing Co mmands 4-3 Entering Comm ands Thi s sect ion desc ri bes how t o ente r CLI com mands. Keywords and Arguments A CLI comma nd is a ser ies of keyw ords and ar gumen ts. Keyword s identify a comm and, and ar guments spec ify con figuration paramete rs. For exam ple, in the comma nd “show inte rfac es s ta tus et hernet 1 /5, ” show i[...]

Comm and L ine Int erface 4-4 Showing Commands If you ente r a “?” at the co mman d prompt , the sys tem will display th e first leve l of keywords for the cu rrent com mand cl ass (N ormal Exec or Privilege d Exec) or configur ation clas s (Globa l, ACL, Inter face, Line , VLAN Database , or MSTP ). Y ou can also display a list of valid ke ywo[...]

Enter ing Co mmands 4-5 Negating the Effect of Comm ands For many configur ation co mmand s you can enter th e prefix key word “ no ” to cancel the effect of a c omman d or rese t the con figurat ion to the d efault val ue. For exampl e, the logging command will log sys tem messages to a host server . T o disable logging, speci fy the no loggin[...]

Comm and L ine Int erface 4-6 The sys tem w ill n ow dis play the “ Conso le#” c omma nd prom pt. Y ou ca n also enter Privileged Exec mode from wi thin N ormal E xec m ode , by entering the enabl e comm and, follow ed by the privileg ed level password “sup er” (page 4- 25). T o ent er Privileg ed Exec m ode, enter the follo wing user names[...]

Enter ing Co mmands 4-7 T o ent er the other mode s, at the con figuratio n prompt type one o f the follow ing comm ands. U se the exit or end command to r eturn to th e Privileged Exec mo de. For exam ple, you can use the followin g comma nds to ent er interfac e conf iguration mode, and th en return to Priv ileged Exec mode Command Line Proce ssi[...]

Comm and L ine Int erface 4-8 Comma nd Grou ps The syst em com mands can b e brok en do wn into the fun ctional g roups show n be low . The access mode shown in th e followi ng tables is indi cated by t hese abbr eviation s: NE (Norm al Exec) LC (Line Co nfigurat ion) PE (Privileg ed Exec) VC (VLAN Da tabase Conf iguration) GC (Global Configur atio[...]

Line Com mands 4-9 Line Com mands Y o u can ac cess t he onboar d config uration pr ogram by attaching a VT1 00 compatible de vice to the server ’s serial port . These co mman ds are us ed to set communicati on para meters for th e serial p ort or T elnet (i.e., a virtual te rminal). line This comm and id entifie s a spe cific line for con figura[...]

Comm and L ine Int erface 4-10 Command Usage T elnet is considered a virtual terminal connection and will be shown as “Vty” in screen displays suc h as show u sers. However, the serial c ommunication parameters (e.g., databits) do not affect T elnet connections. Example T o ent er consol e line mod e, enter the follow ing comm and: Related Comm[...]

Line Com mands 4-11 Example Related Commands username (4-24) password (4-1 1) passwo rd This comm and sp ecifies t he password f or a line. Us e the no form to re move the password . Syntax password { 0 | 7 } pass wo rd no password •{ 0 | 7 } - 0 means pl ain pass word, 7 means en cryp ted passw ord • passw ord - Char acte r str in g that spe c[...]

Comm and L ine Int erface 4-12 exec-t ime out This comm and se ts the interval that the sys tem wai ts until user in put is dete cted. Use t he no form to re store the d efault . Syntax exec-timeout [ sec onds ] no exec-timeout seconds - Integer that specifies the number of seconds. (Range: 0 - 65535 seconds ; 0: no timeout) Default Sett ing CLI: N[...]

Line Com mands 4-13 Command Usage • When the lo gon atte mpt thres hold is reached, the syst em interfa ce beco mes silent for a specif ied amount of time before all owing th e next lo gon attem pt. (Us e the silent-time command to set thi s int erval .) Wh en this thres hold is r eached for Tel net, the Telne t logo n int erface s huts down . ?[...]

Comm and L ine Int erface 4-14 databits This comm and se ts the number of data bits per chara cter that are interp reted and generat ed by the co nsole po rt. Use the no for m to resto re th e defau lt va lue. Syntax dat abit s { 7 | 8 } no databi ts • 7 - Seve n data bits pe r charac ter. • 8 - Eight data bits per ch aracter. Default Sett ing [...]

Line Com mands 4-15 Command Mode Line Configuration Command Usage Communication protocols p rovided by devices such as terminals and modems often require a specific parity bit setting. Example T o specify no parity , enter this command: speed This comm and se ts the termina l line’s baud rate. This com mand sets both the transmi t (to termina l) [...]

Comm and L ine Int erface 4-16 stopbits This comm and se ts the number of the stop bi ts transmit ted per by te. Use the no form to r estore the defau lt setting. Syntax stopbit s { 1 | 2 } • 1 - One stop bit • 2 - Two st op bits Default Sett ing 1 stop bit Command Mode Line Configuration Example T o spec ify 2 stop bi ts, enter this comma nd: [...]

Gener al Comm ands 4-17 show line This comm and disp lays the termina l line’s parameter s. Syntax show line [ console | vty ] • console - Consol e termin al line. • vty - Vi rtua l ter min al fo r re mote c onsol e acces s (i. e., Telne t) . Default Sett ing Shows all lines Command Mode Normal Exec, Privileged Exec Example T o show all lines[...]

Comm and L ine Int erface 4-18 enabl e Thi s comm and a ctiva tes Priv il eged E xec mo de. In pr ivi leg ed mode , ad diti onal comm ands a re availa ble, an d certain c omman ds di splay a dditiona l informa tion. See “Unde rstandin g Comma nd Mod es” on page 4-5. Syntax enable level level - Privilege level to lo g into the device. The device[...]

Gener al Comm ands 4-19 Command Usage The “>” character is appended t o the end of the prompt to i ndicate that the system is in nor mal acce ss mode. Example Related Commands enable (4-18) configure This c omman d ac tivates Glob al Conf iguration mo de. Y ou mus t enter this mode to modify an y setting s on the switch. Y ou m ust also ente[...]

Comm and L ine Int erface 4-20 Example In this exa mple, th e show hist ory co mmand lists the conte nts of the comm and history bu ffer: The ! comman d re peat s co mmands fro m the Exec utio n comm and hi stor y bu ff er when yo u are in Norm al Exec or Pri vileged Exe c Mod e, and comm ands from the Configu ration com mand history buffer when yo[...]

Gener al Comm ands 4-21 end This comm and ret urns to Privile ged Exec mode. Default Sett ing None Command Mode Global Configuration, Interface Configuration, L ine Configuration, VLAN Database Configuration, and Multiple Sp anning Tree Configuration. Example Thi s exa mple shows how t o retur n to t he P rivi leg ed Ex ec mo de fr om th e In terf [...]

Comm and L ine Int erface 4-22 Command Usage The quit and exit commands can both exit the configuration program. Example Thi s exam ple show s how to qu it a CLI sessi on: System Management Comm ands Thes e com mands a re u sed t o con trol sys tem l ogs, p asswor ds, u ser na mes, brow ser configur ation op tions, and display or configur e a varie[...]

Syst em Mana gemen t Comm ands 4-23 prompt This comm and cu stomize s the CLI pr omp t. Use the no form to rest ore the de fault prompt. Syntax prompt string no prompt string - Any alphanumeric string t o use for the CLI prompt. (Maximum length: 255 characters) Default Sett ing Console Command Mode Global Configuration Example hostname This comm an[...]

Comm and L ine Int erface 4-24 User Ac cess Comm ands The bas ic c omma nds required for m ana gement access ar e liste d in t his s ection . This switc h also inc ludes othe r option s for passwor d chec king via th e conso le or a T eln et conne ction (page 4-9), us er au thentica tion v ia a remo te au thentica tion se rver (page 4-60), and host[...]

Syst em Mana gemen t Comm ands 4-25 Example This examp le sho ws how th e set the ac cess lev el and passw ord for a user . enable p asswor d Afte r in iti all y lo gg ing on to th e s yste m , yo u s ho uld se t th e P ri vil ege d E xe c pa ss wor d. Remem ber to rec ord it in a safe place. Th is comma nd contr ols acces s to the Privileged Exec [...]

Comm and L ine Int erface 4-26 IP Filter Commands management This comm and sp ecifies t he client IP address es that a re allow ed manage men t access t o the swit ch throu gh vario us protoc ols. Use the no form to res tore the default se tting. Syntax [ no ] management { all-client | http-cl ient | snmp-client | teln et- client } start-address [ [...]

Syst em Mana gemen t Comm ands 4-27 Example Thi s exam ple res tri cts m anage ment ac cess t o the in dica ted ad dress es. show management This comm and disp lays the client IP a ddresses that are allowed manag ement access t o the swit ch throu gh vario us protoc ols. Syntax show management { all-client | http-c lient | snmp-client | teln et- cl[...]

Comm and L ine Int erface 4-28 Web Server Commands ip http port This comm and sp ecifies the TCP port number us ed by the Web br owser interfac e. Use t he no form to us e the defa ult port. Syntax ip http por t port-number no ip http port port-number - The TCP por t to be use d by the browser interface. (Range: 1-65535) Default Sett ing 80 Command[...]

Syst em Mana gemen t Comm ands 4-29 Command Mode Global Configuration Example Related Commands ip htt p port (4-28) ip http s ecure-ser ver This comm and en ables the se cure hy pertext tra nsfer prot ocol (HTT PS) over t he Secure Socket Layer ( SSL), p roviding sec ure acc ess (i.e ., an encrypt ed conn ection ) to the swit ch’s Web interface .[...]

Comm and L ine Int erface 4-30 Example Related Commands ip http secure-port (4-30) copy tft p https-certificate (4-55) ip http secure-port This comm and speci fies the UDP port num ber used for HTTP S/SSL conn ection to the swi tch’s Web interf ace. Us e t he no for m to resto re the defau lt port. Syntax ip http secure-port port_number no ip htt[...]

Syst em Mana gemen t Comm ands 4-31 Command Mode Global Configuration Example Secure She ll Commands The Berkl ey-standa rd includ es remot e acce ss tools orig inally des igne d for Unix systems. Some of these too ls have also been imp lemen ted for Mi crosoft Windo ws and other environm ents. Thes e tools, in cluding co mmand s such as rs h (re m[...]

Comm and L ine Int erface 4-32 Default Sett ing Disabl ed Command Mode Global Configuration Command Usage • The SSH se rver supp orts up t o four client session s. The ma ximum number of client se ssions inc ludes both curr ent Teln et session s and SSH sess ions. • The SSH se rver uses DSA or RSA for k ey exchang e whe n the clien t first esta[...]

Syst em Mana gemen t Comm ands 4-33 Example Related Commands exec-timeout (4-12) show ip ssh (4-34) ip ssh au thenti cation-ret ries Use this comman d to conf igure the nu mber of times the SSH serv er attemp ts to rea uthe ntic ate a us er . Use th e no form to restor e the defa ult settin g. Syntax ip ssh authentication-retries count no ip ssh au[...]

Comm and L ine Int erface 4-34 Example show ip ssh Use this comman d to disp lay the conne ction s ettings us ed wh en authen ticatin g client acces s to the SSH s erver . Command Mode Privileged Exec Example show ssh Use this comman d to displa y the curren t SSH server co nnections . Command Mode Privileged Exec Example Console#disconnect ssh 0 C[...]

Syst em Mana gemen t Comm ands 4-35 Event Logging Commands logging on This comm and co ntrols lo gging of err or mess ages, se nding deb ug or er ror messag es to sw itch me mory . The no form dis able s the lo ggin g proc ess. Syntax [ no ] logging on Default Sett ing None Command Mode Global Configuration Command Usage The logging process control[...]

Comm and L ine Int erface 4-36 logging history This com mand l imits syslog messa ges sa ved to sw itch mem ory ba sed on s everit y . The no form re turns the logging of syslo g messages to t he default level. Syntax logging history { flash | ram } lev el no logging history { flash | ram } • flas h - Event hi story s tored in flas h memo ry (i.e[...]

Syst em Mana gemen t Comm ands 4-37 logging host This comm and ad ds a syslo g serve r host IP addr ess that will receiv e logg ing messag es. Use the no form to re move a syslo g server hos t. Syntax [ no ] logging host host_ip_address host_ip_address - The IP address of a syslog server . Default Sett ing None Command Mode Global Configuration Com[...]

Comm and L ine Int erface 4-38 Example logging trap This c omman d limi ts sysl og me ssage s sa ved t o a remo te ser ver ba sed o n se verity . Use t he no form to r eturn the remote logging of s yslog messages t o the defaul t lev el. Syntax [ no ] logging trap level level - One of the level arguments listed below . Messages sent include the sel[...]

Syst em Mana gemen t Comm ands 4-39 show logging This comm and disp lays the loggin g config uration, along with an y system and ev ent messa ges stor ed in memo ry . Syntax show logging { flash | ram | sendm ail | trap } • flas h - Event hi story s tored in flas h memo ry (i.e., perm anen t memory ). • ram - Event hist ory stored in temp orary[...]

Comm and L ine Int erface 4-40 The follow ing exam ple dis plays sett ings for th e trap funct ion. Related Commands show logging sendmail (4-43) SMTP Alert Commands Conf igur es SMT P even t han dling , and forw ardi ng of alert messa ges to the s peci fied SMTP ser vers and em ail recipien ts. Console#show logging trap Syslog logging: Enable REMO[...]

Syst em Mana gemen t Comm ands 4-41 logging sendmail host This co mmand spec ifies SMTP serv ers tha t will b e sent a lert me ssage s. Use t he no form to r emove an SMTP serv er . Syntax [ no ] logging sendmail host ip_address ip_address - IP address of an SMTP ser ver that will be sent alert messages for event handling. Default Sett ing None Com[...]

Comm and L ine Int erface 4-42 Command Usage The specified level indicates an event threshold. All events at this level or higher will be sent to the configured em ail recipients. (For example, using Level 7 will report all events from level 7 to l evel 0.) Example This examp le will sen d ema il alerts for system error s from leve l 3 through 0. l[...]

Syst em Mana gemen t Comm ands 4-43 Command Mode Global Configuration Command Usage Y ou can specify up to five recipients for al ert messages. However , you must enter a separate command to specify each r ecipient. Example logging sendmail This comm and en ables SMTP ev ent hand ling. Us e the no form to disable this func ti on . Syntax [ no ] log[...]

Comm and L ine Int erface 4-44 Example Time Commands The syste m clock can be dynam ical ly set by pol ling a set of specifie d time ser vers (NTP or SN TP), o r by u sing i nformat ion b roadcas t by local time s ervers . sntp client This comm and enabl es SNTP client reques ts for time synchron ization f rom NTP or SNTP time se rvers sp ecified w[...]

Syst em Mana gemen t Comm ands 4-45 Command Usage • The time acquir ed from t ime s ervers is used t o recor d accu rate da tes and times for log ev ents. W ithout SNT P, th e switch only re cords th e time star ting fro m the factory defa ult set at t he la st b ootup (e.g., 00 :00:00 , Jan. 1, 2001 ). • This comm and en ables clie nt time req[...]

Comm and L ine Int erface 4-46 Command Usage This command specifies time servers from which the swit ch will poll for time updates when set to SNTP client mode. The client will poll the time servers in the order specified until a response is received. It issue s time synchronization requests based on the inter val set via the snt p poll comma nd. E[...]

Syst em Mana gemen t Comm ands 4-47 sntp broadcast c lient This comm and sy nchroni zes the sw itch’s clock based on tim e broadca st from time server s (usi ng the mu lticast a ddre ss 22 4.0.1.1) . U se the no form to disable SNTP broadca st cl ient mo de. Syntax [ no ] sntp broadcast client Default Sett ing Disabl ed Command Mode Global Config[...]

Comm and L ine Int erface 4-48 clock timezone This command set s the time zone for the s witch’s internal cl ock. Syntax clock timezone name hour hours minute minutes { before-utc | after-utc } • name - Nam e of tim e zone, usu ally an acronym . (Ran ge: 1- 29 cha rac ters ) • hours - Num ber of hours befo re/afte r UTC. (R ange: 1-1 2 hours)[...]

Syst em Mana gemen t Comm ands 4-49 Default Sett ing None Command Mode Privileged Exec Example This examp le sho ws how to set the sy stem cloc k to 15:12 :34, Feb ruary 1st, 2002. show calendar This comm and disp lays the syste m clock . Default Sett ing None Command Mode Normal Exec, Privileged Exec Example Syste m Status C ommands show startup-c[...]

Comm and L ine Int erface 4-50 Command Mode Privileged Exec Command Usage • Us e th is co mmand in c onju nct ion wi th t he show running-conf ig command to compar e the infor mation in r unning m emory to the inform ation stored in non-vo latile memory . • This comm and displa ys setti ngs for key co mman d mo des. Eac h mode g roup is separat[...]

Syst em Mana gemen t Comm ands 4-51 Example Related Commands show running-config (4-51) show running-conf ig This comm and disp lays the config uration in format ion current ly in use. Default Sett ing None Command Mode Privileged Exec Console#show startup-config building startup-config, please wait..... ! ! username admin access-level 15 username [...]

Comm and L ine Int erface 4-52 Command Usage • Us e th is co mmand in c onju nct ion wi th t he show startup-config command to compar e the infor mation in r unning m emory to the inform ation stored in non-vo latile memory . • This comm and displa ys setti ngs for key co mman d mo des. Eac h mode g roup is separat ed b y “!” sym bols, and [...]

Syst em Mana gemen t Comm ands 4-53 Related Commands show startup-config (4-49) show sys tem This command displays system information. Default Sett ing None Command Mode Normal Exec, Privileged Exec Command Usage • For a descri ption of th e items sh own by th is comma nd, refe r to “D isplay ing System In formatio n” on pag e 3-7. • The PO[...]

Comm and L ine Int erface 4-54 Command Mode Normal Exec, Privileged Exec Command Usage The session used to execute this command is indic ated by a “* ” symbol next to the Line (i.e., sessi on) index number . Example show ver sion Thi s comma nd dis play s hardw are and soft war e vers ion inf ormat ion for the syste m. Default Sett ing None Com[...]

Flash/F ile Comm ands 4-55 Flash/File Commands These c omm ands a re u sed to ma nage the s ystem code or configur ation files. copy This comm and mov es (up load/do wnload) a code im age or co nfigurati on file between t he switc h’s flash memo ry and a T FTP server. Wh en you sa ve the sys tem code or con figurat ion setting s to a file on a TF[...]

Comm and L ine Int erface 4-56 Command Usage • The system prompts for data required to complete the copy command. • The destin ation file n ame s hould not contain sl ashe s ( or /), the le ading let ter of the file nam e should not be a period (.), and the max imum len gth for file nam es on the TFTP s erver is 127 characters or 31 characters[...]

Flash/F ile Comm ands 4-57 The follow ing exam ple show s how to do wnloa d a config uration file: This examp le show s how to copy a secur e-site ce rtificate from an TFTP s erver. It then r eboots t he sw itch to acti vate t he c ertificat e: delete This comm and de letes a file or image. Syntax delete f ilename filename - Name of t he configurat[...]

Comm and L ine Int erface 4-58 dir This command dis plays a list o f files in fl ash memory . Syntax dir [ boot-rom | config | opcode [: filename ]] The type of file or image t o display includes: • boot-rom - Boot ROM (or diagno sti c) im age fi le. • config - Swi tch c onfi gur ation fil e. • opcode - Run -time ope ration code image file. ?[...]

Flash/F ile Comm ands 4-59 whichboot This command displays wh ich files were booted when the system powered up. Default Sett ing None Command Mode Privileged Exec Example This examp le sho ws the infor mation d isplay ed by the whichb oot command. Se e the table un der the dir comman d for a d escr iption of t he file i nformat ion disp laye d by t[...]

Comm and L ine Int erface 4-60 Related Commands dir (4-58) whichboot (4-59) Authentication Commands Y ou can conf igure thi s switch to au then ticate use rs loggi ng into the syste m for manage ment ac cess us ing loca l or RADIU S authen ticat ion metho ds. Y ou can al so enable po rt-based authe ntication f or networ k client ac cess usi ng IEEE[...]

Authentication Commands 4-61 • RADIUS an d TACACS + logon a uthentic ation assi gns a sp ecific privileg e level for each user name an d pas sword pair. Th e user name, passw ord, and privi lege level mus t be conf igured on the auth entication serve r. • You can s pecify three au thentic ation m ethods in a si ngle com mand to indica te the au[...]

Comm and L ine Int erface 4-62 Command Mode Global Configuration Example radius -s erver p ort This comm and s ets the RADI US serv er netwo rk port. U se the no form to re stor e the default. Syntax radius-server port port_number no radius-server port port_number - RADIUS server UDP port used for authentication messages. (Range: 1-65535) Default S[...]

Authentication Commands 4-63 Example radius -serv er retra nsm it This c omman d se ts the number of r etries. Use the no form to res tore the def ault. Syntax radius-server retransmit number_of_retries no radius-server ret ransmit number_of_retries - Number of times the switch will try to authenticate logon access via t he RADIUS s erver . (R ange[...]

Comm and L ine Int erface 4-64 show ra dius-ser ver This comm and disp lays the current settings for the RAD IUS server . Default Sett ing None Command Mode Privileged Exec Example TACACS+ Client T ermina l Access Controller Acces s Control System (T ACA CS+) is a logon authenti cation protoco l that uses s oftware runni ng on a cent ral server to [...]

Authentication Commands 4-65 Example tacacs-ser ver po rt This command specifies the T ACACS+ s erver network port. Use the no form to restore t he defaul t. Syntax t acacs-serv er port po rt_number no tacacs-server port port_number - T AC ACS+ server TCP port used for authentication messages. (Range: 1-65535) Default Sett ing 49 Command Mode Globa[...]

Comm and L ine Int erface 4-66 Example show tacac s-ser ver This comm and disp lays the current settings for the T AC ACS + server. Default Sett ing None Command Mode Privileged Exec Example Port Security Commands These com man ds can be use d to disa ble the lear ning fu nction or manuall y specify secure ad dres ses for a po rt. Y ou may wan t to[...]

Authentication Commands 4-67 port security This comm and en ables or configure s port sec urity . Use the no f orm wi tho ut a ny keywords to disab le p ort s ecurity . Use the no form wit h the ap prop riat e keyw ord t o restore th e default settings fo r a respons e to security violatio n or for the ma ximum number of allowed a ddres ses. Syntax[...]

Comm and L ine Int erface 4-68 Example The follow ing exam ple enab les po rt security for port 5, an d sets the respo nse to a security violatio n to issue a trap mess age: Related Commands shutdown (4-89) mac-address-table stati c (4-122) show mac-address-table (4-123) 802.1x Port Authent ication The switch su pports IEEE 802.1x (d ot1x) po rt-ba[...]

Authentication Commands 4-69 Default Sett ing RADIUS Command Mode Global Configuration Example dot1x default This c omman d se ts all co nfigurab le d ot1x g lobal and po rt set tings to t heir def ault values. Syntax dot1x default Command Mode Global Configuration Example dot 1x ma x-req This co mmand sets the maximum num ber of times the s witch [...]

Comm and L ine Int erface 4-70 dot1x port-contr ol This comm and se ts the dot1x m ode on a port interface. Use the no f orm to resto re the defaul t. Syntax dot1x port-contr ol { auto | force-authorized | force-unauthorized } no dot1x port-control • auto – Requi res a dot 1x-aw are conne cted c lient to be aut horize d by the RADIUS server. Cl[...]

Authentication Commands 4-71 Example dot1x re-authent icate This comm and for ces re-au thentica tion on all por ts or a specif ic interfac e. Syntax dot1x re-authenticate interfac e interfa ce • etherne t unit / port - unit - This is devic e 1. - port - Port number . Command Mode Privileged Exec Example dot1x re-authentication This comm and en a[...]

Comm and L ine Int erface 4-72 Default 60 seconds Command Mode Global Configuration Example dot1x timeout re-aut hperiod This comm and se ts the time pe riod af ter whic h a connect ed clie nt must be re-authe nticated . Syntax dot1x timeout r e-authperiod seconds no dot1x timeout re-authperiod seco nds - The number of seconds. (Range: 1-65 535) De[...]

Authentication Commands 4-73 Example show dot1x Thi s comm and s hows genera l po rt au the ntica ti on rel ated sett in gs on the s witc h or a specific interfac e. Syntax show dot1x [ stat istics ] [ interfac e interface ] interfa ce • etherne t unit / port - unit - This is devic e 1. - port - Port number . Command Mode Privileged Exec Command [...]

Comm and L ine Int erface 4-74 • Authenticator Sta te Machine - Stat e– Cur rent state (inc luding initialize, disconn ected, connecting, authenticating, authenticated, aborting, held, force_a utho rized, force_un auth orized). - Re auth Co unt– Num ber of times connec ting stat e is re-ent ered. • Backend St ate Machi ne - Stat e – Curre[...]

Authentication Commands 4-75 Example Console#show dot1x Global 802.1X Parameters reauth-enabled: yes reauth-period: 300 quiet-period: 350 tx-period: 300 supp-timeout: 30 server-timeout: 30 reauth-max: 2 max-req: 2 802.1X Port Summary Port Name Status Mode Authorized 1 disabled ForceAuthori zed n/a 2 disabled ForceAuthori zed n/a . . . 25 disabled F[...]

Comm and L ine Int erface 4-76 SNMP Command s SNMP Co mmand s cont rol acce ss to this swi tch from manage ment stati ons using the Simp le Net wor k Man agemen t Pr otoc ol (S NMP), as w ell as th e err or t ypes sent to trap ma nagers. snmp-server community This comm and de fines the co mmun ity acce ss string f or the Sim ple Networ k Manage men[...]

SNMP Comm ands 4-77 Example snmp-serv er contact This comm and se ts the system contact string . Use t he no form to remove the system cont act informa tion. Syntax snmp-server contact string no snmp-server contact string - St ring that describes the syst em contact information. (Maximum length: 255 char acters) Default Sett ing None Command Mode G[...]

Comm and L ine Int erface 4-78 Example Related Commands snmp-server contact (4-77) snmp- ser ver h ost Thi s com mand s pec ifie s th e reci pi ent of a Si mple Net work Mana gement Pro toco l notificat ion operat ion. Use the no form to remov e the sp ecified ho st. Syntax snmp-server host host-addr comm unity-string [ version { 1 | 2c }] no snmp-[...]

SNMP Comm ands 4-79 Example Related Commands snmp-server enable traps (4-79) snmp-serv er enable traps This comm and enabl es this dev ice to sen d Simple Ne twork Mana geme nt Protoco l traps (SNMP no tifications ). Use the no form to disable SNMP noti fications. Syntax [ no ] snmp-server enable trap s [ authentication | link-up-down ] • authent[...]

Comm and L ine Int erface 4-80 snmp ip filte r This comm and se ts the IP addres ses of clients that are al lowed m anagem ent access t o the swit ch via SNM P . Use the no form th e remov e an IP addre ss. Syntax [ no ] snmp ip f ilter ip_address subnet_mask • ip_addres s - An IP ad dress indi catin g a client or gro up of clien ts that are allo[...]

SNMP Comm ands 4-81 show snmp This comm and ch ecks the s tatus of SNMP co mmuni cations . Default Sett ing None Command Mode Normal Exec, Privileged Exec Command Usage This command provides infor mation on the community access strings, counter information for SNMP input and output protocol data unit s, and whether or not SNMP logging has b een ena[...]

Comm and L ine Int erface 4-82 DHCP Commands Thes e comma nds ar e used t o confi gur e Dynami c Host Confi gurat ion Protoc ol (DHCP) client. Y ou can co nfigure an y VLAN in terface t o be automat ically as signed an IP address via DHCP . DHCP Client ip dhcp client-identifier This comm and sp ecifies the D CHP cl ient identi fier for the cur rent[...]

DHCP Commands 4-83 ip dhcp restart client This command submit s a BOOTP or DHCP client re quest. Default Sett ing None Command Mode Privileged Exec Command Usage • This command issues a BOOTP or DHCP client request for any IP interface th at has been se t to BOOT P or DHCP mo de via the ip a dd res s command. • DHCP requires t he server to re a[...]

Comm and L ine Int erface 4-84 Interface Commands Thes e comma nds ar e used to di splay or set commun ica tion p aram eter s for an Ethernet p ort, aggregat ed link, or VL AN. interfa ce This comm and co nfigures an interfac e type and en ter inter face confi guration mode . Use t he no form to r emove a trunk. Syntax interface in terfa ce no inte[...]

Inte rface C omm ands 4-85 Command Mode Global Configuration Example T o s peci fy por t 24, e nter t he fo llowin g comm and : description This comm and ad ds a desc ription to an interfac e. Use the no f orm to remov e the descri ption. Syntax description st ring no description string - Comment or a description to hel p you remember what is att a[...]

Comm and L ine Int erface 4-86 Default Sett ing • Auto-nego tiation is enable d by default . • When auto- negoti ation is disa bled , the default speed-du plex setting is 100 half for 100BASE- TX ports and 10 00full for Gigabit Ethern et ports. Command Mode Interface Configuration (Ethernet, Port Channel ) Command Usage • To force o perati on[...]

Inte rface C omm ands 4-87 Command Usage • When au to-nego tiation is enab led the switch will nego tiate th e best setting s for a link base d on t he capabilities co mman d. When auto-ne gotiat ion is di sabled, you must manual ly specif y the link at tribut es with the sp eed-du plex and flowcontrol c omman ds. • If autoneg otiation is disa [...]

Comm and L ine Int erface 4-88 Command Usage When auto-negotiation is enabl ed with the negotiation command, the sw itch will negotiate the best setti ngs for a link based on the capabilities command. When auto-negotiation is disabled, you must manually specify the l ink attributes with the spee d-duplex and flowcontrol com mands. Example The follo[...]

Inte rface C omm ands 4-89 Example The follow ing exam ple enab les flow control on p ort 5. Related Commands negotiation (4-86) capabilities (4-87) shutdown This comm and disa bles an i nterface. T o restart a disabled interfac e, use the no form . Syntax [ no ] shutdow n Default Sett ing All interfaces are enabled. Command Mode Interface Configur[...]

Comm and L ine Int erface 4-90 Default Sett ing Enabled for all por ts Packet-rate limit: 500 packet s per second Command Mode Interface Configuration (Ethernet) Command Usage • When bro adcast tra ffic exce eds th e specifie d thresh old, pac kets abov e that thresh old are drop ped. • This comm and ca n enable or disable br oadca st storm con[...]

Inte rface C omm ands 4-91 Example The follow ing exam ple cle ars statistics on port 5. show interfa ces status This comm and disp lays the status for an int erface . Syntax show interfaces s t atus [ interfac e ] interfa ce • etherne t unit / port - unit - This is devic e 1. - port - Port number . • port-chann el cha nnel-i d (Value: 1) • v[...]

Comm and L ine Int erface 4-92 Example show interfaces counters This c omman d disp lays i nterfac e stati stics. Syntax show interfaces counters [ interface ] interfa ce • etherne t unit / port - unit - Th is is devi ce 1 - port - Po rt n umb er • port-chann el cha nnel-i d (Value: 1) Default Sett ing Shows the counters for all interfaces. Com[...]

Inte rface C omm ands 4-93 Example Related Commands show controllers ethernet-controller (4-109) show interfaces switchport This comm and disp lays the adminis trative an d oper ational statu s of the spe cified int er fa ces . Syntax show interfaces switchport [ inte rface ] interfa ce • etherne t unit / port - unit - This is devic e 1. - port -[...]

Comm and L ine Int erface 4-94 Command Usage If no interface is s pecified, information on all interfaces i s displayed. Example This examp le sho ws the conf iguration settin g for port 2. * Not supported in the present v ersion * Not supported in the current v ersion Console#show interfaces switchport ethern et 1/2 Information of Eth 1/2 Broadcas[...]

Mirror Port Co mmands 4-95 Mirro r Port Comm ands This secti on descr ibes how to mirror t raffic from a sour ce port to a targ et port. port monitor This c omman d co nfigures a m irror sess ion. U se the no fo rm to clear a mirror session . Syntax port monitor inte rfac e [ rx | tx | both ] no port monitor inte rface • interface • etherne t u[...]

Comm and L ine Int erface 4-96 Example The follow ing exam ple conf igures the switch t o mirror al l packets from port 6 t o 1 1: show port monitor This command displays mirror informa tion. Syntax show port monitor [ int erfa ce ] interfa ce - ethernet un it / port (source port) • unit - Switch (unit 1 ) • port - Po rt n umb er Default Sett i[...]

Rate Limi t Comm ands 4-97 Rate Limit Commands This funct ion allows the netwo rk manag er to cont rol the m aximum r ate for traffic transmi tted or rec eived on an interfa ce. Rate l imiting is co nfigur ed on interf aces at the edg e of a n etwor k to limi t traffic int o or ou t of t he netwo rk. Traffic that fall s within the rate lim it is tr[...]

Comm and L ine Int erface 4-98 Li nk Aggr ega tio n Comman ds Ports can be statica lly groupe d into an aggregat e link (i.e., trunk) to incr ease the bandwidth of a networ k conne ction or to ensure fa ult recove ry . Or you can use t he Link Aggreg ation C ontrol Prot ocol (LA CP) to aut omaticall y negotiat e a trunk link between this s witch an[...]

Link Agg regat ion Co mmands 4-99 • Howeve r, if the p ort ch annel admi n key is set, th en th e port admin key mu st be set to the sa me va lue for a port t o be allowe d to join a cha nnel group. • If a link goes do wn, LAC P port prior ity is used to select the ba ckup l ink. channel-group This comm and a dds a po rt to a trunk . Use the no[...]

Comm and L ine Int erface 4-100 Command Usage • The ports on bo th end s of an LAC P trunk m ust be con figure d for full dup lex, either by for ced m ode or aut o-negot iation. • A trunk for med with ano ther sw itch usin g LACP w ill automa tically be as sign ed the next ava ilable por t-chan nel ID. • If the targ et switch h as al so enabl[...]

VDSL Commands 4-101 VDSL Commands These com mands are use d to to configur e and dis play com mun ication param eters for VDSL an d Etherne t ports on the switch and conn ected C PEs. Command Function M od e Page efm profile globa l Batch assign s profil es for s peed t o all th e VDSL p orts on the switch GC 4-102 efm profile Assigns p rofiles for[...]

Comm and L ine Int erface 4-102 efm profile global Use this com mand t o batch ass ign prof iles for spe ed to all the VDSL ports on th e switch . Syntax efm profile global profile name profile name - Name of the profile. Default Sett ing Default Profile Command Mode Global Configuration Command Usage Assigns the same profile to each VDSL sw itch p[...]

VDSL Commands 4-103 2. A suffix of “A” in the profile nam e (e.g., S2-16- 16A) indicates t hat this profile is for both V DSL and ADSL lines in a bundle. Prof iles without a suffix of “A” in the pr ofile name (e.g., S1- 16-16) are fo r VDSL lines only. 3. The following profiles are recommended for use with this switch: S1-16-16, S2-16-16A, [...]

Comm and L ine Int erface 4-104 Example The follow ing exam ple assign s EFM prof ile S1-16 -16 to VDSL po rt 1. Related Commands efm profile global (4-102) efm r ese t Use this comma nd to reset the s witch VDSL chipset or , if a CPE is connected, th e CPE VDSL chipset. Syntax efm res et { local | remote } • local - Resets the CO-sid e VDSL chip[...]

VDSL Commands 4-105 Command Mode Interface Configuration Command Usage Use this comman d to disable the VDSL chipset transmitter of a VD SL port that is not connected to a working C PE. In some unusual circumstances, the power emitted by VDSL ports can affect other VDSL ports. It is recommended that ports t hat are not wired to CPEs be shut down in[...]

Comm and L ine Int erface 4-106 efm i nter leave This comm and se ts the interleave paramete rs for the se lected VD SL port. Syntax efm interleave [ downstream M value ] [ upstream M value ] [ downstream I value ] [ upstream I value ] no efm int erleave • M value – M is the interleav ing dept h index. R ange: 0- 64 • I val ue – I is the in[...]

VDSL Commands 4-107 efm noise -margin This co mmand sets the noise ma rgin of the se lected VDSL p ort. Us e the no fo rm o f this comma nd to dis able this f eature . Syntax efm noise-margin [ downstream noise margin ] [ upstream noise margin ] no efm noise-margin • downstream noise m argin - A measure of the amount of noise that the downstream [...]

Comm and L ine Int erface 4-108 Example The follow ing exam ple conf igures V DSL port 1 wi th an upstream noise mar gin of 6, and a dow nstream no ise mar gin of 6. Related Commands efm interleave (4-106) show controllers efm-noise-margin (4-1 16) efm rate-ada pt This c omman d ena bles a nd dis ables t he rat e a daption f eatur e on the se lecte[...]

VDSL Commands 4-109 efm pbo This comm and en ables and disables po wer bac k-off on the selec ted VDS L port. Syntax [ no ] ef m pbo Default Sett ing Enabled Command Mode Interface Configuration Command Usage If PBO is enab led, the power of tran smiss ion from the p ort w ill autom atically be adjusted to ensu re that the sig nal suc cessfu lly re[...]

Comm and L ine Int erface 4-110 Example Related Commands show interfaces counters (4-92) Console#show controllers ethernet-control ler ethernet 1/2 Ethernet 1/2 : EFM PHY on Switch: Transmit 9671624 Bytes Transmitted 8487 Frames Transmitted 0 Pause frames 0 Single Collision Frames 0 Multiple collisions 0 Late collisions 0 Excessive collisions 0 Def[...]

VDSL Commands 4-111 show controllers efm actual Use this co mmand to disp lay the c urrent va lues of the VDSL lin k on a sp ecific VDS L port. Syntax show controllers efm interface-id act ual { dsrserrs | us rserrs | txpower | rxpower | snr | link } • interface- id - ID of the VDSL port. • dsrs errs - Disp lays the d ownst ream R eed- Solo mon[...]

Comm and L ine Int erface 4-112 Related Commands show controllers efm admin (4-1 12) show controllers efm profile (4-1 12) show controllers efm admin Use this com mand t o display th e actual values of th e VDSL link on a spec ific VDSL port. Syntax show controllers efm i nterface-id adm in { dsrate | usrate } • interface- id - ID of the VDSL por[...]

VDSL Commands 4-113 Command Mode Privil eged EXEC Command Usage See efm profile gl obal (4-102) for the VDSL profiles shipped with the switch, and for the their up stream and downstream data rates. Examples This example displays VD SL profiles and link status for the switch’s VDSL ports. This example displays profile names, t ype (Public or Priva[...]

Comm and L ine Int erface 4-114 show controllers efm status Use this comman d to displa y the VDS L link statistics an d profile informati on on a specific VDSL port including link state, link duration, dat a rates, power le vels, signal-to- noise r atio, and Ree d-Sol omon er rors. Syntax show controllers efm status { lin k | profile } in terface-[...]

VDSL Commands 4-115 This example displays the link status, uptime, profile name, downstream and upstream rates, and the numbe r of link failures for the switch’s VDSL ports. Related Commands show controllers efm interface-id actual show controllers efm interface-id admin show controllers efm remote ethernet mode Use this com mand t o display th e[...]

Comm and L ine Int erface 4-116 show controllers efm-noise-margin This comm and disp lays the noise m argin for the s witch’s VDSL p orts. Syntax show c ont roll ers ef m no ise- margi n Default Sett ing Default: 0 dBm Command Mode Privil eged EXEC Example This examp le disp lays the downst ream (DS ) and upstre am (US ) noise-m argin for the swi[...]

VDSL Commands 4-117 show controllers efm channel-performance This comm and disp lays the channe l performa nce fo r the chan nels in a VDS L line. For details see “ Displayin g VDSL Inte rface Inf ormation” on page 3-66. Syntax show controllers efm channel-pe rformance { vtu-r | vtu-c } [ fast | slow ] [ inte rfa ce ] { 15-mi n ut es | 1-day } [...]

Comm and L ine Int erface 4-118 Example show controllers efm phy-table This command displays physical interface info rmation for the selected VDSL port. For details see “ Displayin g VDSL In terface Inf ormatio n” on page 3-66 . Syntax show c ont roller s ef m phy- t able { vtu-r | vtu-c } [ int erfac e ] • vtu-r – VTU (VDSL T ransce iver U[...]

VDSL Commands 4-119 Command Mode Privil eged EXEC Example show controllers efm channel-table This c omman d disp lays c hanne l inter face i nforma tion f or t he se lected V DSL port. For details see “ Displayin g VDSL Inte rface Inf ormation” on page 3-66. Syntax show con trollers efm ch annel -table { vtu-r | vtu-c } [ interf ace ] • vtu-r[...]

Comm and L ine Int erface 4-120 show controllers efm current-performance Use this comman d to disp lay line and channe l performa nce data inf ormati on for the current 15 minut e interval, and for the cur rent day . Syntax show controllers efm current-performance { vtu-r | vtu-c } [ interf ace ] • vtu-r – VTU (VDSL T ransce iver U nit) at the [...]

VDSL Commands 4-121 Example Console#show controllers efm current-perf ormance vtu-c 1/1 VDSL_PERF_DATA_ENTRY : Ethernet 1/1 Loss of Framing 0 Ethernet 1/1 Loss of Signal 0 Ethernet 1/1 Loss of Power 0 Ethernet 1/1 Loss of Link 0 Ethernet 1/1 Errored Seconds 0 Ethernet 1/1 Severely Errored Seconds 0 Ethernet 1/1 Unavailable Seconds 0 Ethernet 1/1 Li[...]

Comm and L ine Int erface 4-122 Address Table Commands Thes e comma nds ar e used t o confi gur e the addr ess tabl e for f ilte ring speci fied addr esse s, dis play ing cu rren t entr ies , clea ring the ta ble, or set ting t he agi ng time . mac-a ddr ess- table stati c This comm and maps a static ad dress to a destina tion port in a VLAN. Use t[...]

Addr ess T able Co mmands 4-123 • S tatic addresse s are bou nd to the assi gned interfac e and will not be moved . When a s tatic add ress is see n on an other i nterface , the add ress will be ig nored and w ill not be w ritten to the add ress table. • A static addres s canno t be learn ed on anothe r port unti l the address is removed wit h [...]

Comm and L ine Int erface 4-124 Command Usage • The MAC Add ress Ta ble cont ains the MA C add resses as sociat ed with ea ch interface. Note tha t the Type fi eld may inc lude the fo llowing ty pes: • L earne d - D ynami c add res s entr ies • Permanen t - Static entry • Delete-on -reset - St atic entry to be deleted w hen sy stem is re se[...]

Span ning T ree Command s 4-125 show mac-address-table aging-time Thi s comma nd show s the agi ng tim e for en trie s in th e addres s ta ble. Default Sett ing None Command Mode Privileged Exec Example Spanning Tree Comm ands This secti on include s com mands t hat config ure the Sp anning T ree Algo rithm (S T A) globally fo r the switch , and co[...]

Comm and L ine Int erface 4-126 spanning-tree This comm and enables the Sp annin g Tr ee Alg orithm g lobally for the sw itch . Use the no form to d isable it. Syntax [ no ] spanning- tree Default Sett ing S panning tree is enabled. Command Mode Global Configuration Command Usage The S panning Tr ee Algorithm (ST A) can be used to detect and disabl[...]

Span ning T ree Command s 4-127 • Rapid S panning Tre e Prot ocol RSTP supports connecti ons to either STP or RSTP no des by monitoring th e incomin g protoc ol mess ages an d dynami cally adj usting th e type of prot ocol messag es the RS TP node tra nsmits, as descr ibed below: - STP Mode – If the switch rece ives an 802 .1D BPDU after a port[...]

Comm and L ine Int erface 4-128 Example spanning-tree hello-time This comm and co nfigures the spannin g tree bridg e hello ti me global ly for this swi tch. Use t he no form to re store the d efault . Syntax spannin g-tree hello-time time no spanning- tree hello-time time - Time in seconds. (Range: 1-10 seconds). The maximum value is the l ower of[...]

Span ning T ree Command s 4-129 Command Usage This command sets the maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure. All devic e ports (except for designated p orts) should receive configuration mess ages at regular intervals. Any port that ages out ST A information (provided in[...]

Comm and L ine Int erface 4-130 spanning-tree pathcost method This comm and config ures the path cost method used for Rapid Spanning Tree. Use the no form to restore the default. Syntax spannin g-tree pat hcost method {l ong | short } no spanning- tree pathcost method • lon g - Spec ifies 32- bit base d values t hat rang e from 1-20 0,000, 000. ?[...]

Span ning T ree Command s 4-131 Example spanning-tr ee cost This comm and co nfigures the spannin g tree path co st for the sp ecified int erface . Use t he no form to re store the d efault . Syntax spanning -tree cost cost no spanning- tree cost cost - The p ath cost for the port. ( Range: 1-200,000,000)) The recommended ra nge is: • Etherne t: [...]

Comm and L ine Int erface 4-132 spanning-tree port-priority This c omman d co nfigures the p riorit y for the s pecified interf ace. U se t he no form to restore t he defaul t. Syntax spannin g-tree port-priorit y priority no spanning- tree port-priority priority - The priority for a por t. (Range: 0-240, in steps of 16) Default Sett ing 128 Comman[...]

Span ning T ree Command s 4-133 Command Usage • You can enab le this opt ion if an int erface is at tached to a LAN seg men t that is at the end o f a bri dged LA N or to an end no de. Sinc e end n odes c annot ca use forwar ding loops, they can pass dir ectly thr ough to t he spa nning tree forwa rding state. Sp ecifyin g Edge Ports prov ides qu[...]

Comm and L ine Int erface 4-134 Example Related Commands spanning-tree edge-port (4-132) spanning-tree link-type This comm and con figures t he link type for Rapid Sp anning T ree. Use the no form to restore t he defaul t. Syntax spannin g-tree link-type { aut o | point-to-point | shared } no spanning- tree link-type • auto - Auto matica lly deri[...]

Span ning T ree Command s 4-135 spanning-tree protocol-migration This comm and re-c hecks the appro priate BPDU format to send on t he selected int er fa ce. Syntax spanning -tree protocol-migrati on int erf ace interfa ce • etherne t unit / port - unit - This is devic e 1. - port - Port number . • port-chann el cha nnel-i d (Value: 1) Command [...]

Comm and L ine Int erface 4-136 Command Usage •U s e t h e show spanning- tree com mand w ith no para meter s to disp lay the spannin g tree con figurat ion for the switch an d for ever y interface i n the tree. •U s e t h e show span ning-tree interfac e command to dis play the sp anni ng tre e configur ation for an interfa ce. • For a desc [...]

VLAN Commands 4-137 VLAN Commands A VLAN is a gro up of ports that ca n be locat ed anyw here in th e network , but comm unicat e as though they belo ng to the s ame phys ical seg ment. Thi s secti on describes comma nds use d to creat e VLAN gr oups, add por t member s, speci fy how VLAN taggi ng is used , and enab le autom atic VL AN registrat io[...]

Comm and L ine Int erface 4-138 Example Related Commands show vlan (4-143) vlan This co mmand confi gures a VLAN. Use t he no form to restore the def ault settin gs or de lete a V LAN . Syntax vlan vl an-id [ name vlan-nam e ] media ethernet [ state { active | suspend }] no vlan vl an-id [ name | state ] • vlan-i d - ID of configur ed VLAN. (Ran [...]

VLAN Commands 4-139 Configuring VLAN Interfaces interfac e vlan This comm and en ters interfac e config uration mod e for VLANs , which is use d to configur e VLAN param eters for a physic al interfac e. Syntax interface vlan vl an-id vlan-id - ID of the conf igured VLAN. (Range: 1 -4093, no leading zeroes) Default Sett ing None Command Mode Global[...]

Comm and L ine Int erface 4-140 switchport mode This comm and co nfigures the VLAN me mbersh ip mode for a port. Us e the no form to restor e the defaul t. Syntax switchport mode { trunk | hybrid } no switchport mode • trunk - Spe cifies a port as an end-p oint for a VLAN trunk. A trunk i s a dire ct link betw een two switch es, so the por t tran[...]

VLAN Commands 4-141 Command Usage When set to r eceive all frame types, any received frames that are untagged are assigned to the default VLAN . Example The follow ing exam ple show s how to re strict the t raffic receiv ed on port 1 to tagged fram e s: Related Commands switchport mode (4-1 40) switchport ingress-filte ring This comm and en ables i[...]

Comm and L ine Int erface 4-142 switchport native vlan This command configures the PVID (i.e., default VLAN ID) for a port. Use the no form to rest ore the d efault. Syntax switchport nati ve vlan vlan-id no switchport native vlan vlan-id - Default VLAN ID for a port. (Range: 1- 4093, no leading zer oes) Default Sett ing VLAN 1 Command Mode Interfa[...]

VLAN Commands 4-143 Command Mode Interface Configuration (Ethernet, Port Channel ) Command Usage • A po rt, or a trunk with switchport mode set to hybrid , mus t be a ssigned to at least one VL AN as unt agged. • If a trunk has s witchport mode set to trunk (i.e., 1Q Trunk), th en you ca n only assign a n interfac e to VLAN gro ups as a tag ged[...]

Comm and L ine Int erface 4-144 Default Sett ing Shows all VLANs. Command Mode Normal Exec, Privileged Exec Example The follow ing exam ple shows how to disp lay inf ormation f or VLAN 1: Configuring Private VLANs pvlan Use this comman d in global configura tion mode to enab le or configur e priva te VLAN. Us e the no form of this comm and to di sa[...]

Config uring Pr ivate V LANs 4-145 Command Usage A Private VL AN allows mod ification of the default VLAN to provid e port-base d securit y and isolat ion betwe en ports within t he VLAN. Da ta traffic on the downli nk ports can onl y be forwar ded to, and from , the upli nk port. Pr ivate VLANs an d norma l VLANs ca n exist simul taneousl y within[...]

Comm and L ine Int erface 4-146 Bridge Extension Co mmands This secti on descr ibes how to display default co nfigur ation set tings for the Bridg e Ext ensi on MIB . show bridge-ext Thi s comm and s hows the confi gurat ion for brid ge ex tens ion comman ds. Default Sett ing None Command Mode Privileged Exec Command Usage See “Displaying Basic V[...]

Priority Comm ands 4-147 Prio rity C om mand s The comm ands described in this se ction allow you to sp ecify whi ch data packets have grea ter prec edence w hen traffic is buffered in the swi tch due to con gest ion. This switch suppor ts CoS with fo ur priority q ueues for each port. Data pa ckets in a port’s high-pr iority queu e will be tra n[...]

Comm and L ine Int erface 4-148 Command Mode Interface Configuration (Ethernet, Port Channel ) Command Usage • The prece dence for prior ity mapping is IP P ort, IP Pre ceden ce or IP DS CP, an d default s witchpo rt priorit y. • The defau lt priority ap plies for an untagge d fram e receiv ed on a port set to accept a ll frame typ es (i.e, rec[...]

Priority Comm ands 4-149 Command Usage Y o u can set the switch to s ervice the queues bas ed on a s trict rule that requires all traffic in a higher priority queue t o be processed before lower priority queues are serviced, or use Weighted Round-Robin (WRR) queuing that specifies a relative weight of each queue. WRR uses a predefined relative weig[...]

Comm and L ine Int erface 4-150 queue cos-map This c omman d as signs class of s ervice ( CoS ) val ues to the p riority que ues (i. e., har dwar e out put qu eue s 0 - 3) . Use the no form set the CoS m ap to the d efault values. Syntax queue cos-map queue_id [ cos1 ... cosn ] no queue cos-map • queue_i d - The ID of th e pr iorit y queue . • [...]

Priority Comm ands 4-151 show queue mode This c omman d sh ows the cur rent queue mode. Default Sett ing None Command Mode Privileged Exec Example show queue bandwidth This command dis plays the weighted r ound-robin (WRR) bandwid th allocati on for the eight p riority queu es. Default Sett ing None Command Mode Privileged Exec Example show queue c[...]

Comm and L ine Int erface 4-152 Command Mode Privileged Exec Example Priority Commands (Laye r 3 and 4) map ip prece dence (Glo bal Con figurati on) Thi s com mand e nab les I P pr ecede nce m appi ng (i .e. , IP T ype of Serv ice) . Us e th e no form to dis able IP pr ecedenc e mapp ing. Syntax [ no ] map ip precedence Default Sett ing Disabl ed C[...]

Priority Comm ands 4-153 map ip prece dence (In terface C onfigurat ion) This co mmand sets IP prec edenc e priori ty (i.e., I P T ype of Se rvice p riority). U se the no form to restore the default table . Syntax map ip precedence ip-precedence- value cos cos-value no map ip precedence • precede nce-val ue - 3-bit p recedenc e valu e. (Range : 0[...]

Comm and L ine Int erface 4-154 Command Usage • The prece dence for prior ity mapping is IP P ort, IP Pre ceden ce or IP DS CP, an d default s witchpo rt priorit y. • IP Preced ence and I P DSCP ca nnot both be enab led. Ena bling one of these priority types will a utomatically dis able the other type. Example The follow ing exam ple show s how[...]

Priority Comm ands 4-155 Example The follow ing exam ple shows how to m ap IP DSCP value 1 to Co S value 0: map ip port (Glo bal Config urati on) Use this command to enable IP p ort mapping ( i.e., class of service ma pping for TCP/UDP soc kets). Use the no form to d isa ble I P port mapping. Syntax map ip port no map ip p ort Default Sett ing Disa[...]

Comm and L ine Int erface 4-156 show map ip precedence This comm and sh ows the IP pr eced ence priorit y map. Syntax show map ip precedence int erfac e interfa ce • etherne t unit / port - unit - This is devic e 1. - port - Port number. • port-chann el cha nnel-i d (Value: 1) Default Sett ing None Command Mode Privileged Exec Example Related C[...]

Priority Comm ands 4-157 Default Sett ing None Command Mode Privileged Exec Example Related Commands map ip dscp ( Global Configuration) (4-153) map ip dscp ( Interface Configuration) (4-154) show map ip port Use this co mmand to show the IP port priorit y map. Syntax show map ip port [ inte rface ] interfa ce • ethernet unit / port - unit - This[...]

Comm and L ine Int erface 4-158 Example The follow ing show s that HTT P traffic has be en mappe d to CoS va lue 0: Related Commands map ip port (Interface Configuration) (4-155) Multica st Filt ering Commands This switc h uses IGM P (Interne t Group M anage ment Prot ocol) to que ry for any attached ho sts that want to re ceive a spe cific m ultic[...]

Multicast Filter ing Comm ands 4-159 Default Sett ing Enabled Command Mode Global Configuration Example The follow ing exam ple enab les IGM P snoopin g. ip igmp snooping vlan static This comm and ad ds a port to a m ulticast gr oup. Us e the no form to remove th e port. Syntax [ no ] ip igmp snooping vlan vlan-id stat ic ip-address interface • v[...]

Comm and L ine Int erface 4-160 Default Sett ing IGMP V ersi on 2 Command Mode Global Configuration Command Usage All systems on the subnet mus t support the same version. If there are legacy devices in your network that only support V er sion 1, you will also have to configure this switch t o use V ersion 1. Some commands a re only enabled fo r IG[...]

Multicast Filter ing Comm ands 4-161 show mac-a ddress-table multica st This comm and sh ows know n multic ast addr esses . Syntax show mac-address-table multicast [ vlan vlan-id ] [ user | igmp-snooping ] • vlan-i d - VLAN ID (1 to 4094) • user - Display only the user -configu red mul ticast en tries. • igmp-snooping - Display o nly entries [...]

Comm and L ine Int erface 4-162 ip igmp snooping querier This co mmand enab les th e switc h as an IGM P quer ier . Use t he no form to disable it. Syntax [ no ] ip igmp snooping querier Default Sett ing Enabled Command Mode Global Configuration Command Usage If enabled, the switch will serve as querier if el ected. The querier is responsible for a[...]

Multicast Filter ing Comm ands 4-163 Example The f ollo wing shows how to conf igur e the qu ery co unt to 10: Related Commands ip igmp snooping query-max-response-time (4-163) ip igmp snooping query-interv al This c omman d co nfigures the q uery interva l. Us e th e no form to restor e the defaul t. Syntax ip igmp snooping query-interval seconds [...]

Comm and L ine Int erface 4-164 Command Usage • The switch must be us ing IGMPv2 for this command to t ake effect. • This comm and de fines the tim e after a qu ery, dur ing whic h a respons e is expecte d fro m a m ultica st cl ient. If a q uerier h as s ent a num ber of que ries defined by t he ip igmp snoop ing q uery-cou nt , but a clie nt [...]

Multicast Filter ing Comm ands 4-165 Related Commands ip igmp snooping version (4-159) Static Multic ast Routing Commands ip igmp snooping vlan mrouter This comm and statica lly configur es a mul ticast ro uter port. U se the no form to remov e the conf iguration. Syntax [ no ] ip igmp snooping vlan vlan-id mrouter interfa ce • vlan-i d - VLAN ID[...]

Comm and L ine Int erface 4-166 show ip igmp snooping mroute r This comm and d isplays i nformat ion on s tatically co nfigured and dy namica lly learned multicast router por ts. Syntax show ip igmp snooping mrouter [ vlan vlan-id ] vlan-id - VLAN I D (Range: 1-4093) Default Sett ing Displays multicast router ports for all configured VLANs. Command[...]

IP In terfa ce Comm ands 4-167 ip address This comm and se ts the IP addres s for the cur rently sele cted VL AN interfa ce. Use the no form to rest ore the d efaul t IP addr ess . Syntax ip address { ip-address netmask | bootp | dhc p } no ip address • ip-a ddre ss - IP addres s • netma sk - Net work mask fo r the as sociated I P subn et. This[...]

Comm and L ine Int erface 4-168 ip default -gateway This comm and es tablishes a static r oute bet ween this switch an d devices that exist on anothe r networ k segm ent. Use the no form t o remov e the static rout e. Syntax ip default-gateway gateway no ip default-gateway gateway - IP address of t he default gateway Default Sett ing No static rout[...]

IP In terfa ce Comm ands 4-169 show ip redirects This comm and sh ows the default ga teway configu red for this de vice. Default Sett ing None Command Mode Privileged Exec Example Related Commands ip default-gateway (4-168) ping This comm and se nds ICMP echo re quest packets to anothe r node on th e network . Syntax ping host [ count count ][ si z[...]

Comm and L ine Int erface 4-170 Example Related Commands interface (4-84) Console#ping 10.1.0.9 Type ESC to abort. PING to 10.1.0.9, by 5 32-byte payload IC MP packets, timeout is 5 seconds response time: 10 ms response time: 10 ms response time: 10 ms response time: 10 ms response time: 0 ms Ping statistics for 10.1.0.9: 5 packets transmitted, 5 p[...]

A-1 Appendix A: Software Specifications Software Features Authentication Local, RADIUS, T A CACS, Port (802.1x), HTTPS, SSH, Port Se curity DHCP Client Port Co nfigurat ion 1000BASE- T : 10/10 0/1000 Mb ps, half/full duplex 1000BASE- SX/LX: 1000 Mbps, full duplex Flow Control Ful l Dup lex: I EEE 80 2.3x Half D uplex: Ba ck p ressure Broadca st Sto[...]

A-2 Softw are S pecificatio ns Management Features In-Band Mana geme nt T eln et, Web-base d HTTP or HTT PS, SNMP m anage r , or Secure She ll Out-of-Ba nd M anag ement RS-2 32 DB -9 c onsol e po rt Software Loadin g TFTP in- band or X Modem out- of-b and SNMP Manage ment ac cess via M IB database T rap m anagem ent to s pecified hos ts RMON Groups[...]

A-3 Manage ment Informa tion Bases Management Information Bases Bridge MIB (R FC 1493) Entity MI B (RFC 2737) Ethernet MIB (RFC 266 5) Ether-l ike MIB (RFC 1 643) Extende d Bridge MIB (RF C 2674) Extensible SNMP Age nts MIB (RFC 2742) Forwardin g T ab le MIB (RFC 2096) IGMP MIB (RF C 2933) Interface G roup M IB (RFC 22 33) Int erf aces Ev olut ion [...]

A-4 Softw are S pecificatio ns[...]

B-1 Appe ndix B: Trou blesho oting T roubles hootin g Char t Sympt om Act io n Cannot co nnect using T e lnet, Web b row ser , or SNMP software • Be sure y ou hav e confi gured the age nt with a vali d IP addre ss, sub net mask and defau lt gatew ay. • If y ou are trying to conn ect to the ag ent via the IP ad dress f or a tag ged VLAN gro up, [...]

B-2 Troubleshooti ng[...]

Glossary-1 Glossary Boot Protocol (BOOTP) BOOTP is use d to provid e bootu p inform ation for networ k device s, includi ng IP address informa tion, the addr ess of the TFT P serve r that contains the devic es system fil es, and t he name of the boot file. Class of Service (CoS) CoS is supp orted by prioritizi ng packets bas ed on the re quired lev[...]

Glos sary Glossary-2 GARP VLAN Registration Protoco l (GVRP) Defines a way for swi tches to exc hange VLAN infor mation i n order to re gister necessa ry VLAN m ember s on po rts along the S pann ing Tree so that VLAN s define d in each swi tch can wo rk autom atica lly over a Sp anning Tree network. Generic Att ribute Registration Protocol (GARP) [...]

Glossary Glossary-3 IEEE 802.3x Def ines E the rnet fram e st art /st op req ues ts a nd ti mer s used for fl ow co ntro l on full-duple x links. IGMP Snoo ping Listenin g to IGMP Que ry and IGM P Report packe ts transferred bet ween IP Mul ticast Routers and IP Mul ticast ho st groups to identify IP Multica st group m ember s. IGMP Query On eac h [...]

Glos sary Glossary-4 Mana gement Informat ion Base (MIB) An acrony m for Mana gement Informa tion Bas e. It is a set of database objec ts that contains i nformat ion a bout a s pecific device . Multicas t Switching A proce ss wh ereb y the switch filte rs inc oming m ultica st fr ames for se rvices for which n o at tached ho st has reg istered, or [...]

Glossary Glossary-5 Remote Authe ntication Dial-i n User Service (RADIUS) RADIUS is a logon aut hentic ation protoc ol that uses so ftware running on a central serv er to contro l a ccess to RAD IUS-c ompli ant de vice s on the netw ork. Remote Monitorin g (RMON) RMON pr ovides compreh ensive ne twor k monitor ing capabilit ies. It elim inates the [...]

Glos sary Glossary-6 Transmiss ion Control Protocol /Internet Protocol (TCP/IP) Protocol suite that inc ludes TCP as the pri mary tran sport prot ocol, and I P as the network layer prot ocol. Trivial File Transfer Protocol (TFTP) A TCP/IP pr otocol com monly use d for softwar e downl oads. User Datagram Protocol (UDP) UDP provide s a datagr am m od[...]

Index-1 Numerics 802.1x, po rt authe ntication 3-33, 4-68 A accepta ble fram e type 3-94, 4-140 address tabl e 3-73, 4- 122 aging time 3-75, 4-125 B BOOTP 3- 13, 4-16 7 BPDU 3-76 broadca st stor m, thresh old 3-4 8, 4-8 9 C Class of Servic e See CoS CLI, s howin g com mand s 4 -4 comm and line inter face See CLI comm unity st ring 2-6 , 3-21 , 4-76[...]

Index Index-2 logon auth entica tion 3-24 , 4-60 RADIUS client 4 -61 RADIUS server 4-61 TAC ACS+ cl ient 3-25 , 4-64 TACACS + server 3-25 , 4-64 logon auth entica tion, sequ ence 3 -26, 4-60 M main menu 3-3 Manage ment Inf ormatio n Bases (MIB s) A -3 mir ror po rt, c onfi guri ng 3-49, 4- 95 multicast filtering 3 -109, 4- 158 multicast groups 3-11[...]

Index Index-3 startup f iles creating 3- 16, 4-55 displayi ng 3-15 , 4-49 setti ng 3 -15, 4-5 9 static ad dresses , setting 3- 73, 4-122 statistic s port 3-51 , 4-92 STP 3-79, 4- 126 STP Also see STA system clock, set ting 3-18 , 4-44 system softwa re, downloading fr om server 3-1 5, 4-55 T TACACS +, logon aut hentica tion 3-25 , 4-64 time, setti n[...]

Index Index-4[...]

[...]

VS4512 VS4512DC E122003-R 02 15000004 1800A[...]