Cisco Systems 3130 manuale d’uso

Americas Hea dquarters Cisc o Syst ems , Inc . 170 West Ta sman Driv e San Jos e, CA 95 134-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553- NETS (638 7) Fax: 408 527-0883 Cisco Catal yst Blade Switc h 31 30 f or Dell S of tw are Conf iguration Guide Cisco IOS Release 12.2(40) EX 1 December 20 07 Text Pa rt Numbe r: OL -13270-0 1[...]

THE SPECIFICATIONS AND INFORMATION REG ARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOU T NOTICE. ALL STATEMENT S, INFORMATI ON, AND RE COMMENDATIONS IN T HIS MANUAL ARE BELI EVED TO BE A CCURATE BUT ARE P RESENTED W ITHOUT WARRANTY OF ANY KIND, EXPRE SS OR IMPLIED. USERS MUST TAKE FULL RESPON SIBILITY FOR THEIR AP PLICATION OF ANY P[...]

iii Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 CONTENTS Preface xli ii Audienc e xliii Pur pose xliii Conv enti ons xliii Rela ted Publi cations xliv Obtain ing Documentati on and Submitting a Servic e Reque st xlv CHAPTER 1 Overview 1- 1 Features 1-1 Deployme nt F eatures 1-3 Perfor mance Features 1-4 Ma[...]

Cont ents iv Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Using Comma nd History 2-6 Changin g the Command Histor y Buffer Si ze 2-6 Recall ing Commands 2-6 Disabl ing th e Command Hist ory Featur e 2- 7 Using Edi ting Featu res 2-7 Enabli ng and Disablin g Edit ing Featu res 2-7 Editi ng Commands th rough K[...]

Content s v Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 CHAPTER 4 Configur ing Cisc o IOS CNS Agent s 4-1 Underst andi ng Cisco Con figurat ion En gine Soft ware 4-1 Config uration Servi ce 4-2 Event Se rvice 4-3 Name Sp ace Ma ppe r 4-3 What You Sh oul d Know Abou t the CN S IDs an d Devi ce Ho stna mes 4[...]

Cont ents vi Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Minor V ersio n Num ber Inco mpat ibility Amo ng Sw itc hes 5-1 2 Underst andi ng Auto-Upg rade and Auto-Advi se 5-13 Auto-Up grade and Auto-A dvise Exa mple Messages 5-14 Incom pat ible S oftw are and Sta ck M embe r Imag e U pgr ades 5-16 Switch St [...]

Content s vii Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Config uring a System Na me and Prompt 6-14 Defaul t System Name and Prom pt Config uration 6-15 Config uring a System Na me 6-15 Underst anding DNS 6-15 Defau lt D NS C onfig urat ion 6-16 Setti ng Up DNS 6-16 Displa ying the DNS Config uration 6-1[...]

Cont ents viii Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Contro lling Swi tch Access with TACACS+ 7-10 Underst anding TAC ACS+ 7-1 0 TACACS+ Operat ion 7-12 Config uring TACACS+ 7-12 Defaul t TACACS+ Co nfigura tion 7-13 Identi fyi ng the TACA CS+ Server Host and Se tting th e Authenticati on Key 7-13 Con[...]

Content s ix Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Config uring SSH 7-39 Config uration Guidel ines 7-39 Setti ng Up the Switc h to Run SSH 7-40 Config uring the SSH Serve r 7-41 Displa ying the SSH Config urat ion and Stat us 7-42 Config uring th e Switch for Secu re Sock et Layer HTTP 7-42 Underst [...]

Cont ents x Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Using IE EE 802.1x Authent icat ion with VL AN Assign ment 9-10 Using IE EE 802.1x Authent ication with Pe r-Use r ACLs 9-12 Using IE EE 802.1x Authent ication with Gue st VLAN 9-13 Using IE EE 802.1x Authent ication with Re strict ed VLAN 9-14 Using I[...]

Content s xi Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 CHAPTER 10 Configur ing Interface Chara cteri stics 10-1 Underst anding Interf ace Typ es 10-1 Port-Base d VLANs 10-2 Switc h Por ts 10-2 Access Po rts 10-3 Trunk Po rts 10-3 Tunn el Por ts 10 -4 Routed Po rts 10-4 Switch Vi rtua l Interf aces 10-5 E[...]

Cont ents xii Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 CHAPTER 11 Configur ing S martports Macros 11-1 Underst andi ng Smartpor ts Macros 11-1 Config uring Smartport s Macros 11-2 Defaul t Smartports Macro Config uration 11-2 Smartpor ts Macr o Configu ration Gui delines 11-3 Creati ng Sma rtport s Macr [...]

Content s xiii Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Config uring an Etherne t Interface as a Trunk Po rt 12-20 Intera ctio n wit h O ther F eat ures 12-20 Config uring a Trunk Port 12-21 Defin ing th e Allow ed VLA Ns on a Trunk 12-22 Changin g the Pruning-E l igibl e List 12-23 Config uring the Nat[...]

Cont ents xiv Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 VTP Confi gura tion Guid elin es 13-8 Domain Names 13-8 Passw or ds 13-8 VTP Versi on 13-9 Config uration Requir ement s 13-9 Config uring a VTP Serv er 13-9 Config uring a VTP Clien t 13-11 Disabl ing VTP (VTP Trans paren t Mode) 13-1 2 Enabli ng VT[...]

Content s xv Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Privat e-VLAN C onfiguratio n Guide l ines 15-7 Seco ndar y a nd Pr imar y VL AN C onf igur atio n 15-7 Priva te-V LAN Po rt Co nfigur atio n 15 -8 Limita tions wit h Other Features 15-9 Config uring and Associ atin g VLANs in a Pri vate VLAN 15-10 C[...]

Cont ents xvi Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Spannin g-Tree Interf ace St ates 17-5 Blocki ng St ate 17-6 List ening Sta te 17-7 Learni ng St ate 17-7 Forw ardi ng S tat e 17-7 Disabl ed State 17-7 How a Switch or Port Become s the Roo t Switch or Ro ot Port 17-8 Spannin g Tree and Redund ant C[...]

Content s xvii Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 IST, C IST , and CST 18-3 Operati ons Withi n an MST Region 18-3 Operati ons Betw een MST Reg ions 18-4 IEEE 802 .1s Ter minolog y 18-5 Hop Count 18-5 Boundar y Ports 18-6 IEEE 802 .1s Implement ation 18-6 Port Rol e Naming Chan ge 18-7 Inter opera[...]

Cont ents xviii Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 CHAPTER 19 Configur ing Opti onal Spann ing-Tree Fe atures 19-1 Underst anding Optiona l Spannin g-Tree Feature s 19-1 Underst anding Port Fast 19-2 Underst andi ng BPDU Guard 19-2 Underst anding BPDU Filt erin g 19-3 Underst andi ng UplinkF ast 19[...]

Content s xix Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Config uring Flex Lin ks and MAC Addr ess-Table Move Upda te 20-6 Config uring Flex Link s 20-6 Config uring VLAN Load Bala ncing on Flex Lin ks 20 -8 Config uring the MAC Addr ess-T able Move Upda te Feat ure 20-9 Monitor ing Flex Links and th e MA[...]

Cont ents xx Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 CHAPTER 22 Configur ing Dynami c ARP Ins pection 22-1 Underst anding Dyn amic ARP Inspecti on 22-1 Inter face Tr ust State s and Net work Secu rity 22-3 Rate Lim iting of ARP P ack ets 22-4 Relati ve Priority o f ARP ACLs and DHCP Sn ooping Entries 22[...]

Content s xxi Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Displa ying IGMP Snooping Inform ation 23-16 Unde rsta nding Mult icas t V LAN R egi strati on 23-18 Using MV R in a Multic ast Televisi on Application 23-19 Config uring MVR 23-20 Defaul t MVR Configu r ation 23-20 MVR Conf iguration G uidelines a [...]

Cont ents xxii Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 CHAPTER 25 Configur ing Port -Based Traf fic Control 25-1 Config uring Storm Contr ol 25-1 Underst anding St orm Contro l 25-1 Defaul t Storm Co ntrol Con figurat ion 25 -3 Config uring Storm Contr ol and Threshol d Level s 25-3 Config uring Prote c[...]

Content s xxiii Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Config uring LLDP and LLDP- MED 27-3 Defau lt L LDP C onfig ura tion 27-3 Config uring LLDP Char acteri stic s 27-4 Disab ling an d En abli ng LL DP Glob ally 27-5 Disab ling an d Enab ling LL DP on an Inte rface 27-5 Config urin g LLDP-MED TLVs 2[...]

Cont ents xxiv Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Creati ng a Loca l SPAN Sess ion and Con figuri ng Inco ming Traf fic 29-14 Specif ying VL ANs to Filt er 29-15 Config uring RSPAN 29 -16 RSPA N Co nfig urat ion G uide line s 29-16 Config urin g a VLAN as an RSPAN VLAN 29-17 Creati ng a n RSPA N So[...]

Content s xxv Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 CHAPTER 32 Configur ing S NMP 32-1 Underst anding SNMP 32-1 SNMP Vers ions 32-2 SNMP Manage r Functions 32-3 SNM P Agen t Func tion s 32-4 SNMP Communi ty Str ings 32-4 Using SNMP to Access MIB Variabl es 32-4 SNMP No tifica tion s 32-5 SNMP if Inde[...]

Cont ents xxvi Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Handli ng Fragment ed and Unfragmente d Traffi c 34-5 ACLs and Swi t ch Stacks 34-6 Config uring IPv4 ACL s 34-7 Creati ng Stan dard and Ext ended IPv4 ACLs 34-8 Access Li st Numbers 34-8 ACL Loggi ng 34-9 Creati ng a Numbered Stan dard ACL 34-10 Cr[...]

Content s xxvii Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 CHAPTER 35 Configur ing IPv6 A CLs 35-1 Underst andi ng IPv6 ACLs 35-2 Support ed ACL Featu res 35-3 IPv6 ACL Li mitati ons 35-3 IPv6 A CLs and Swit ch S tacks 35-3 Config uring IPv6 ACL s 35-4 Defaul t IPv6 ACL Configur ation 35-4 Inter action wi[...]

Cont ents xxvii i Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Config uring Standa rd QoS 36-29 Defau lt S tan dard Q oS Conf igur atio n 36 -30 Defaul t Ingress Queu e Configur ation 36-3 0 Defaul t Egres s Queue Confi gura tion 36 -31 Defaul t Mapping Table Configur atio n 36-32 Standar d QoS Configurat io[...]

Content s xxix Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Config uring SRR Shared Wei ghts on Egress Queue s 36-7 6 Config uring the Egres s Expedite Queue 36-76 Limiti ng the B andwidth o n an Egres s Interf ace 36-77 Displa ying Standard QoS Inform ation 36-78 CHAPTER 37 Configur ing E therCha nnels and[...]

Cont ents xxx Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 CHAPTER 38 Configur ing IP Uni cast Routing 38-1 Underst andi ng IP Routi ng 38-2 Type s of Routin g 38-2 IP Ro utin g and Sw itch S tac ks 38-3 Steps for Conf igur ing Routi ng 38-5 Config uring IP Addr essing 38-5 Defaul t Addressing Conf iguration[...]

Content s xxxi Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Config uring a Loopba ck Inter face 38-35 Moni tori ng OS PF 38-36 Config uring EIGRP 38-36 Defaul t EIGRP Configur ation 38-3 8 EIGRP Nons top Forwarding 38-39 Config uring Basic EIGR P Parameter s 38-40 Config uring EIGRP Int erfac es 38-41 Confi[...]

Cont ents xxxii Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 User Int erface f or uRPF 38-72 User Inte rface for Syslo g 38 -72 User Int erface f or Traceroute 38-73 User Int erface f or FTP and TFTP 38-73 Config uring Multi cast VRF s 38-74 Config uring a VPN Routing Sessio n 38-74 Config uring BGP PE to CE[...]

Content s xxxii i Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Unsuppor ted IPv6 Unicas t Routing Featur es 39-9 Limita tions 39-9 IPv6 a nd Switc h S tack s 39-10 SDM Templ ates 39-1 1 Dual I Pv4-and IPv6 SDM Templates 39-1 1 Config uring IPv6 39-12 Defaul t IPv6 Config uratio n 39-13 Confi guri ng I Pv6 A[...]

Cont ents xxxiv Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Config uring IP SLAs Op eration s 41-6 Defau lt C onfig urat ion 41-6 Config uration Guidel ines 41-6 Config uring the IP SLAs Responde r 41-8 Analyz ing IP Servic e Levels by Using t he UDP Jitte r Opera tion 41-8 Analyz ing IP Servic e Levels by [...]

Content s xxxv Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 CHAPTER 44 Configur ing I P Multic ast Routing 44 -1 Underst andi ng Cisco’ s Implem entatio n of IP Multi cast Rout ing 44-2 Underst andi ng IGMP 44-3 IGMP V ersio n 1 44-3 IGMP Ve rsio n 2 44-3 Underst andi ng PIM 44-4 PIM V ers ions 44-4 PIM M[...]

Cont ents xxxvi Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Contr olling Acce ss t o IP Mu ltic ast G roups 44-3 2 Chang ing the IG M P Vers ion 44-3 3 Modi fyin g the IGMP Ho st-Qu ery Mess age Int erval 44-33 Changin g the IGMP Query Ti meout f or IGMPv2 44-34 Changin g the Maximum Query Resp onse Ti me f[...]

Content s xxxvi i Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Request ing Source Info rmation from an MSDP Pee r 45-8 Contr ollin g Sou rce Infor mat ion th at Yo ur S witch Or iginat es 45-9 Redist ribu ting So urces 45-9 Filt ering So urc e-A ctive R eque st Mes sag es 45-1 1 Contro lling Source In forma[...]

Cont ents xxxvii i Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Monitor ing SFP Module St atus 47-10 Monitor ing Temper ature 47-10 Using Pi ng 47 -10 Underst andi ng Ping 47-10 Exec uting Pi ng 47-1 1 Using Laye r 2 Trac ero ute 47-12 Underst andi ng Layer 2 Tr acerou te 47-12 Usage Gu idelines 47-12 Displa[...]

Content s xxxix Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 APPENDI X A Supported MIBs A-1 MIB List A-1 Using FTP to Access th e M IB Files A-4 APPENDI X B Working with the Cisco IOS Fil e System, Conf iguration Files , and Softwa re I mages B-1 Work ing wit h the Fl ash File Sys tem B-1 Displa ying Availa[...]

Cont ents xl Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Image Loc ation on the Switc h B-2 5 File Forma t of I mages on a Server or Cisco. com B-25 Copyin g Image Fi les By Usin g TFTP B-26 Prepar ing to Download or Upl oad an Image File By Using TF TP B-27 Download ing an Image File By Using TF TP B-27 Up[...]

Content s xli Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 HSRP C-5 Unsuppor ted Global Conf igurati on Comman ds C-5 Unsuppor ted Interfac e Configur ation Co m mands C- 5 IGMP Snoopi ng Commands C-5 Unsuppor ted Global Conf igurati on Comman ds C-5 Inter face Comma nds C-6 Unsuppor ted Privile ged EXEC Co[...]

Cont ents xlii Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Unsuppor ted Global Conf igurati on Comman ds C-12 SNMP C-12 Unsuppor ted Global Conf igurati on Comman ds C-12 Span ning Tre e C-13 Unsuppor ted Global Conf igurati on Comman d C-1 3 Unsuppor ted Interfac e Configur ation Co m mand C-13 VLAN C-13 U[...]

xliii Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 Preface Audience This guide is for th e networki ng profes sional managing t he standa lone Cisco Catalyst Blade Swit ch 3130 for De ll or bla de sw it ch st ac k, refe rr ed to as t he sw itch . Before usin g thi s guid e, y ou shou ld h ave experien ce wo[...]

xliv Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Preface Related Publi ca tions • Brace s ({ }) grou p req uired choices, and verti cal bars ( | ) se para te the alternati ve e lements. • Brace s and ve rtical bar s within squar e brack ets ([{ | }]) mean a required choic e within an optional elemen t. [...]

xlv Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Preface Obtainin g Docume ntation and Su bmitting a Service Requ est • Cisco Catal yst Blade Switch3130 for Del l System Message Guide (n ot orde ra ble but available on Cisco.com) • Cisco Softwar e Ac tivation Docu ment for D ell • Device manage r on li[...]

xlvi Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Preface Obtainin g Docume ntation and Su bmitting a Service Requ est[...]

CH A P T E R 1-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 1 Overview This chapte r provides these topics about the switch softw are: • Feat ures , page 1-1 • Defa ult Settin gs After I nitial Swi tch Configurati o n, page 1-14 • Network Configu ratio n Exa mp les, pa ge 1-16 • Where to Go Next, page[...]

1-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Ch ap ter 1 Ov er vi ew Feature s The switc h supports one of thes e featu re sets: • IP bas e feat ure set, whic h provid es Layer 2+ f eatures (ente r prise- class intellig ent serv ices). Thes e features include a ccess control lists ( A CLs), q uality of[...]

1-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 1 Overview Features Deployme nt Fea tures The swi tch ships with these featur es: • Express Se tup for quickly configur in g a swit ch for t he first time w ith basi c IP inf orma tio n, con tact inform ati on, sw itc h and T eln et pa sswords, an d Sim[...]

1-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Ch ap ter 1 Ov er vi ew Feature s – Provisioning a new mem ber for a sw it ch st ack wi th t h e offline c onfigurati on fea ture . Y ou can conf igure in adv ance the inter face c o nfigu ration for a spec ific stack member num ber and f or a specif ic swit[...]

1-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 1 Overview Features • IIGMP Helper to allo w the switch to forw ard a host req uest to join a multicast stre am to a specif ic IP destinati on address • Multica st Liste ner Disc overy (MLD) snooping to enabl e efficient distribution of IP V ersi on 6[...]

1-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Ch ap ter 1 Ov er vi ew Feature s • Chassis mana gement control ler (CMC ) GU I—The i nternal Ethern et manage ment p ort (al so refer red to as the F a0 or fast ethern et0 port ) on the sw it ch se nds and re ceives only m anag emen t t raffic betwe en th[...]

1-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 1 Overview Features • Out-of- band ma nageme nt access through the switch co nsole p ort to a directl y attached ter minal or to a remot e t erm in al thro ugh a seri al conn ec ti on or a mo dem • Out-of-b and man agemen t access throug h the Eth ern[...]

1-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Ch ap ter 1 Ov er vi ew Feature s – Root gua rd for p reventing switch es outsi de the n etwork cor e fro m b ecom i ng the spanning -tree root – Loop gu ar d for pr ev e nting alterna te or roo t ports fr om bec oming d esignat ed port s because of a fail[...]

1-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 1 Overview Features Security Fea tures The switch ships wi th these sec urity featu res: • W eb authentication to allo w a supplican t (client ) that doe s not suppor t IEEE 802. 1x functio nality to be authent icate d using a web browser . • Passwo r[...]

1-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Ch ap ter 1 Ov er vi ew Feature s – V oice VLAN to permit a Cisco IP Phone to access the voice VLAN re gardless of the authorized or unau th oriz e d sta te of the p ort – IP phone detect ion enhanc ement to detect and rec ognize a Cisco IP pho ne – Gue[...]

1-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 1 Overview Features • Classif ication – IP type- of-service/D iff erentiated Services Co de Point (IP T oS/DSCP) and IEEE 802.1p CoS markin g pri or ities o n a pe r-port basi s for pr ote ctin g t he p er forma nce of mis sio n-cr itic al applicatio[...]

1-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Ch ap ter 1 Ov er vi ew Feature s Layer 3 Featu res These are th e Layer 3 featu res: Note Some features noted in t h is section are a vailable only in the I P service s feature set. • HSRP for Laye r 3 router redunda ncy • IP routin g protoco ls for load[...]

1-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 1 Overview Features • Nonstop forwar ding (N SF) awaren ess to ena ble the Laye r 3 switc h to c onti nu e for wardi ng pac kets from a n N SF-ca pabl e ne ighb ori ng r oute r when t he prim ar y r oute p roce ssor (R P) is faili ng an d t h e backup [...]

1-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Ch ap ter 1 Ov er vi ew Default Set t ings After I nitial Swi tch Config uration Default Settings After Initial Switch Configurat ion The swi tch is d esigned for p lug-and -play o pera tion, re quirin g only t hat yo u assign basic I P inform ation to the sw[...]

1-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 1 Overview Default Settings After Initial Switch Configuration – Auto-MDI X is enab led. F or more informa tion, see Cha pter 10, “C onfiguring In terface Characte ristics. ” – Flo w con trol is of f. For more inf ormation, see Chap ter 10, “ C[...]

1-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Ch ap ter 1 Ov er vi ew Netwo rk Conf igurati on Ex amples – Unicast and multi cast traf fic flooding is not block ed. For more information, see Chapter 2 5, “Configur ing Port-B ased Traf fic Control.” – No secu re por ts are configured . For more in[...]

1-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 1 Overview Network Configuration Examples Bandwidt h alone is not the only c onsiderat ion when d esigning you r network. As you r network t raff ic profiles evolv e, con side r p roviding ne twork se rvic es tha t can su ppor t appl ic atio ns for voice[...]

1-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Ch ap ter 1 Ov er vi ew Netwo rk Conf igurati on Ex amples Y ou can use th e switches and swit ch stacks to create the foll ow in g: • Data cente r ( Figure 1-1 )—For high -spee d a ccess to n etwor k resour ces, yo u ca n use sw itch es an d switch st ac[...]

1-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 1 Overview Network Configuration Examples QoS and policin g on the switches pro vide pref erential trea tment for certai n data streams. The y se gment traf fic s treams into di f feren t pat hs for proces sing. Securit y featu res o n the switch ensure [...]

1-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Ch ap ter 1 Ov er vi ew Where to Go Nex t When an end s tatio n in one VL AN nee ds to comm unic ate with a n en d s tation in ano ther VLAN, a rou ter or La yer 3 switch route s the tr af fic to t he destinat ion VLA N. In this netw ork, t he switch stack is[...]

CH A P T E R 2-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 2 Using the Command-Line Interface This c hapte r descr ibes t he Cisc o IOS comm and-li ne in terface ( CLI) and how to use it to configure your standalone switc h or a switch stack, refer red to as the switch . It contai ns the se sect ion s: • U[...]

2-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce Underst an ding Comm and Mode s Ta b l e 2 - 1 describes th e main co mman d modes, how to acc ess each o ne, the prom pt you s ee in that mo de, and how to exit the mode. Th e examples i n the tab le use t[...]

2-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 2 Using the Comm a nd-Line In terface Understa nding th e Help Syst em For more detail ed info rmat ion on the command mode s, see the c omma nd refe rence g uide for th is rel ease. Understandin g the Help Syste m Y o u can enter a question ma rk (? ) at[...]

2-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce Underst an ding Abbre viated Co mmand s Understandin g Abbreviated Co mmands Y ou ne ed t o en ter on ly e nough ch ar act e rs for th e sw it ch t o re c ogniz e t he c om man d a s u ni que. This e xample[...]

2-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 2 Using the Comm a nd-Line In terface Unders tandin g CLI Err or Messa ges Understandin g CLI Error Mes sages Ta b l e 2 - 3 lists so me err or messa ges t hat you mi ght enc oun ter whil e usi ng the CLI to co nfigure you r switch. Using Configuratio n L[...]

2-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce Usin g C omm a nd His t o r y Using Command History The software provides a histor y or reco rd of comma nds that yo u hav e entered . The co mman d history feature is particular ly useful for recal ling lo[...]

2-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 2 Using the Comm a nd-Line In terface Using Edit ing Featu res Disabling th e Com mand His tor y F eatu re The comman d history featu re is automatica lly enabled. Y ou can di sable it for the current te rminal sessi on or for the c omman d line. Th ese p[...]

2-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce Using E diting Feature s Editing C ommands throu gh Keystrok es Ta b l e 2 - 5 sho ws the keys trok es that you need to ed it command lin es. The se ke ystrokes are optional . T able 2-5 Editing Comma nds t[...]

2-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 2 Using the Comm a nd-Line In terface Using Edit ing Featu res Editing C ommand Lines that Wrap Y ou can use a wrapa round feature for commands t hat extend beyond a singl e line on th e screen . When the cursor reaches the right mar gin, the command line[...]

2-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce Searching and F iltering O utput of show and more Com man ds Use lin e wrapping with the co mman d history fe ature to recall and modif y previous complex co mmand entries. F or information a bout r ecalli[...]

2-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 2 Using the Comm a nd-Line In terface Acce ssi ng th e C L I Accessing the CLI throu gh a Co nsole Conn ection or through Telnet Before yo u can a cce ss the CL I, you must con nect a t ermi n al or a PC to the sw itch c onso le or conn ec t a PC to the [...]

2-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce Access ing the CLI[...]

CH A P T E R 3-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 3 Assigning the Switch IP Address and Default Gateway This chap ter de scribe s ho w to create the initial switch co nf iguration (f or ex ampl e, assign ing the IP address an d default gateway informa tion) by using a variety of aut omatic an d manu[...]

3-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 3 Assigning the S witch IP Add ress and Defau lt Gateway Assign ing Swi tch In format ion The nor ma l b oot p ro cess i nv ol ves the opera tion of th e bo ot l oade r soft ware, w hic h perfo rm s the se acti vities: • Performs lo w-le vel CPU init[...]

3-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Assigning Switch Information Note Stac k memb er s r etai n the ir IP ad dress when yo u remove th em from a swit ch st ack . T o av oid a c onf lict by ha ving two devices with the same IP add [...]

3-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 3 Assigning the S witch IP Add ress and Defau lt Gateway Assign ing Swi tch In format ion W i th DHCP-b ased autoc onfiguration , no DHCP client -side c onfiguration is needed on your switch. Howe ver , you need to configu re the D HCP ser ver for vari[...]

3-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Assigning Switch Information The DHCP serv er sends the client a DHCPN A K denial broadcast message, which means that the of fered configurati on param eters have not been assign ed, tha t an er[...]

3-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 3 Assigning the S witch IP Add ress and Defau lt Gateway Assign ing Swi tch In format ion If you do no t conf igure the DHCP server with the lea se options d escribed pre viously , it re plies to clien t requests wit h only those par ameters t hat are [...]

3-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Assigning Switch Information Configuring the Relay Device Y ou must co nfigure a relay device, also referr ed to as a re l a y a g e n t , when a sw it ch se nd s broa dcas t pack ets th at requ[...]

3-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 3 Assigning the S witch IP Add ress and Defau lt Gateway Assign ing Swi tch In format ion • The IP a d dress and the confi guration f ilename is reser ved for th e switch, b ut the TFTP serv er address i s not provided in the DH CP reply (o ne-file r[...]

3-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Assigning Switch Information Ta b l e 3 - 2 sho ws the conf igurati on of the reser ved leases on the DHC P serv er . DNS Ser ver Conf iguration The DNS server ma ps the TF TP server name tftpse[...]

3-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 3 Assigning the S witch IP Add ress and Defau lt Gateway Assign ing Swi tch In format ion Switches B through D retrie ve their conf iguration files and IP addresses in the same way . Manually A ssignin g IP Information Beginn ing in pri vilege d EXEC [...]

3-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Chec king and Savin g the Ru nnin g Co nfig ur atio n By def ault, VLAN 1 is the interf ace that connects to the managemen t networ k. When t he switch boots up, th e DHCP clie nt (sw itc h) re[...]

3-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 3 Assigning the S witch IP Add ress and Defau lt Gateway Modifyin g th e Startup Config uration This com ma nd saves the configurati on set tings that you mad e. If you fail to do thi s, you r co nfiguration will be lost the n ext time you reload the [...]

3-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Modifying the Startup Configuration Specifying the Filename to Read and Write the System Co nfigur ation By default, the Cisco IO S software uses the f ile config.text to read and write a non v[...]

3-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 3 Assigning the S witch IP Add ress and Defau lt Gateway Modifyin g th e Startup Config uration T o disable ma nual b ooting, u se the no boot manual gl obal configura tio n com mand . Booting a Specific Software Image By default, the switch attempts [...]

3-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Modifying the Startup Configuration T o return to the default settin g, use the no boot system g loba l c onfigurati on com ma nd. Controlling Environment Variables W ith a n orm all y op er at[...]

3-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 3 Assigning the S witch IP Add ress and Defau lt Gateway Modifyin g th e Startup Config uration Ta b l e 3 - 4 describes th e functi on of the mos t comm on en viron ment variable s. T able 3-4 Env iro nment V ar iables V ariable Boot L o ader Co m m [...]

3-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Schedul ing a Reload of the Sof tware Image When the s witch is conn ected to a PC throug h the inte rnal Ethe rnet manageme nt port , you can download or uplo ad a configurat ion file t o the [...]

3-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 3 Assigning the S witch IP Add ress and Defau lt Gateway Scheduli ng a Re load of the S oft w are Image Note Use the at keyw ord on ly i f t he sw itch sy stem c lock h as be en se t ( throu gh Network Time Protocol (NTP), t he hardwa r e calendar , o[...]

CH A P T E R 4-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 4 Configuring Cisco IOS CNS Age nts This chapte r des cribe s ho w to con fig ure th e Ci sco IOS C isco Network Ser vices (CNS) agents on t he switch. Un less otherwise noted , the term switch refers to a sta ndalone switch and to a swit ch sta ck. [...]

4-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 4 Configurin g Cisco IOS CNS Agents Underst an ding Cisco Conf iguratio n Eng ine Softw are Figur e 4-1 Configur ation Engine Ar chit ectur al Ove rview These secti ons cont ain this co nceptu al in forma tion: • Configuration Ser vice, page 4 -2 ?[...]

4-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 4 Configuring Cisco IOS CNS Agen ts Understanding Cisco Configuration Engine Software Event Servic e The Con figuratio n Eng ine uses the E vent Serv ice for rece ipt and gene ration o f co nfiguration ev ent s. T he e vent ag ent is on the switc h and fa[...]

4-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 4 Configurin g Cisco IOS CNS Agents Underst an ding Cisco Conf iguratio n Eng ine Softw are DeviceID Each co nfigured swit ch parti cipati ng on the ev ent bus has a unique DeviceID, which is a nalogou s to the switch source ad dress so that the switc[...]

4-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 4 Configuring Cisco IOS CNS Agen ts Understanding Cisco IOS Agents Understandin g Cisco IOS Age nts The CNS e vent ag ent featu re allo ws the switch to publish an d subscr ibe to e vents on th e e vent b u s and works with the Cisc o IOS agent. Th e Cisc[...]

4-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 4 Configurin g Cisco IOS CNS Agents Configuring Cisco I OS A ge nts Incremental (Partial) Configur ation After t he ne twork is r unn ing, new serv ice s c an b e adde d by usi ng t he Cisc o IOS a gent . In cr em en tal (partia l) co nfigurations can[...]

4-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 4 Configuring Cisco IOS CNS Agen ts Configuring Cisco IOS Agents Note For more informatio n about running the setup program and creating templ ates on the Config uration Engine , see the Cisc o Configuration En gine Inst allat ion and Setup G uide, 1.5 fo[...]

4-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 4 Configurin g Cisco IOS CNS Agents Configuring Cisco I OS A ge nts Enabling th e CNS Ev ent Agent Note Y ou must e n able t h e CNS ev ent agent on the switch before you enable the CNS co nf igurat ion ag ent. Beginn ing in pri vileged EXEC mode, fol[...]

4-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 4 Configuring Cisco IOS CNS Agen ts Configuring Cisco IOS Agents Enabling th e Cisco IOS C NS Agent After enabling th e CNS e vent age nt, start t h e Cisco IOS CNS agent on the switch. Y ou can enab le the Cisco IOS ag ent with the se comman ds: • The [...]

4-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 4 Configurin g Cisco IOS CNS Agents Configuring Cisco I OS A ge nts Step 7 discover { con tro ller contr ol ler-type | dlci [ subinterface subinterfa ce-n umber ] | interface [ interface-typ e ] | line line-type } Specify the int erfac e parameters i[...]

4-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 4 Configuring Cisco IOS CNS Agen ts Configuring Cisco IOS Agents Step 13 cns id interf ace num { dns-reve rse | ipaddress | mac-addr ess } [ ev en t ] [ image ] or cns id { hardwar e-serial | hostname | string string | udi } [ even t ] [ image ] (Optiona[...]

4-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 4 Configurin g Cisco IOS CNS Agents Configuring Cisco I OS A ge nts T o disable the CN S Cisc o IOS ag ent, use the no cns co nf ig initial { ip- addr ess | hostname } global configurati on comm a nd. This e xample shows how to c onfi g ure an initia[...]

4-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 4 Configuring Cisco IOS CNS Agen ts Configuring Cisco IOS Agents This e xample shows how to c onfi g ure an initial c onfi guration o n a r emote switch when th e switch I P address is known. T he Co nfigurati on Engi ne I P a ddr ess is 172. 28 .12 9.2 [...]

4-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 4 Configurin g Cisco IOS CNS Agents Displaying CNS Con figuration Displaying CNS Confi guration Y ou can use the privileged EXEC command s in Ta b l e 4 - 2 to displ ay CNS c onfiguratio n in for matio n. T able 4-2 Displa ying CNS Co nfigur ation Co[...]

CH A P T E R 5-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 5 Managing Switch Stack s This ch apter pr ov ides the co ncepts and proce d ures to ma nage switch sta cks. Note For c omplete s yntax and u sage in forma tion fo r the command s used in th is cha pter , see the co mmand refere nce fo r thi s r ele [...]

5-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Underst an ding Switch St ack s All stack memb ers are eligible to be stack m asters. I f the stack master b ecomes unava ilable, the remain ing sta ck me mber s elec t a ne w st ack master from amon g thems elv es. The s witc[...]

5-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Understanding Switch Stacks – Switch Stack Ma nageme nt Connect ivity , page 5-17 – Switch Stack C onf iguration Scenario s, pa ge 5-19 Switch Stac k Membersh ip A swit ch st ack ha s up to ni ne stack me mbers connec ted th[...]

5-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Underst an ding Switch St ack s Figur e 5-1 Cr eating a S witch Stac k fr om T wo Stand a lone Switc hes in T wo Enclos ur es Blade s witch Blade s witch Blade s witch 1 2 Blade s witch Blade s witch Blade s witch Blade s witc[...]

5-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Understanding Switch Stacks Figur e 5-2 Cre a ting a Switc h Stac k fr om T wo Stand alone S witches in the Same Enclosur es Blade s witch Blade s witch Blade s witch Blade s witch Blade s witch Blade s witch 3 Enclosure Enclosu[...]

5-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Underst an ding Switch St ack s Figur e 5-3 Addin g a Standa lone S witch t o a Switc h Stack Stack Mas ter Election an d Re-Ele ction The stac k master is electe d or re-elec ted base d on one of the se factors a nd in the or[...]

5-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Understanding Switch Stacks 4. The switch with the high er prio rity featu re set and softw are imag e combinati on. These combina tions are listed from highest to lowest prio rity: – Advanced I P se rvic es f ea ture set and [...]

5-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Underst an ding Switch St ack s Switch Stac k Bridge ID and Router M AC Addres s The br idge ID and ro uter MA C addre ss identify the s witch st ack in t h e netw ork. When the sw itch st ack initializ es, the MA C address of[...]

5-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Understanding Switch Stacks Stack Memb er Priority Values A highe r priority v alue for a stack m ember incre ases its lik elihood of being el ected st ack master and retaining its sta ck member number . The p riority v alue can[...]

5-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Underst an ding Switch St ack s T able 5-1 Results of Compar ing the Pr ovisioned Co nfiguration wi th the Pr o visioned Switch Scenario Result The sta ck memb er nu mbers and th e swit ch type s ma tch . 1. If the stac k mem[...]

5-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Understanding Switch Stacks If you add a pro vision ed switch that is a d if fere nt type than speci f ied in th e pro visioned conf igu ration t o a po wered-d ow n switch stack and then apply po wer , the s witch s tack reje [...]

5-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Underst an ding Switch St ack s All stack members must run the same Cisco IOS software image and feature set to ensure compatibility betwee n s tack m e mbers. For exa mple , a ll stack me mb ers sh oul d ru n t he cr yptog r[...]

5-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Understanding Switch Stacks Understanding Auto-Upgrade and Auto- Advise When the software detects mismatc h ed softwa re and t ries to upg rade the switch in V M mode, two soft ware pr ocesses are in volv ed: automatic up grade[...]

5-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Underst an ding Switch St ack s Y ou can use the archi ve-downlo ad-sw /al low -featur e-upgrade privile ged EX E C com ma nd to allo w installing an dif feren t software ima ge. Auto-Upgrade and Auto-Advise Example Messages [...]

5-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Understanding Switch Stacks *Mar 11 20:36:15.038:%IMAGEMGR-6-AUTO_COPY_SW:extracting cbs31x0-universal-mz.122-0.0.313.EX1/cbs31x0-universal-mz.122-40.EX1 (4945851 bytes) *Mar 11 20:36:15.038:%IMAGEMGR-6-AUTO_COPY_SW:extracting [...]

5-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Underst an ding Switch St ack s Note A uto-a dv ise an d a uto -c opy id ent ify w hic h imag es are r unnin g by exa mi ning t he i n fo file a nd by search ing the dire ctory structure on the swit ch stac k. If you downloa [...]

5-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Understanding Switch Stacks Y ou back up and re store the st ack configurati on in the same way as you would for a standal one switch configurati on. For more info rmation a bout file systems and configurat ion files, see Appe [...]

5-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Underst an ding Switch St ack s Connectivity to the Switch Stack Thr ough an IP Address The switch stack is managed thro ugh a single IP ad dress. The IP addr ess is a system-lev el setting and is not specif ic to the stack m[...]

5-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Understanding Switch Stacks Switch Stac k Configuratio n Scen arios Ta b l e 5 - 2 pro vides swit ch stac k conf igurati on scen arios. Most o f the scenario s assu me that at least two switch es are connect ed through their St[...]

5-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Underst an ding Switch St ack s Stack mas ter elect ion sp eci fica l ly d et e rm in ed by the cr yptog ra phic soft ware i mage an d the IP base feat ur e se t Assuming that all stack members have the same priority v alue: [...]

5-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Configuring the Switch Stack Configuring the Switch Stack These sec tions co ntain this configura tion info rmat ion: • Default Switc h Stack Configurat ion, page 5-21 • Enab lin g Persi ste nt M AC Address, page 5 -21 • [...]

5-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Conf igurin g the Sw itch Stack • If you e nter a t i me de lay of 1 to 60 minut es, the st a ck MAC address of the pr evious stack m ast e r is used unt il the configur ed time period expires or until y ou ent er th e no s[...]

5-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Configuring the Switch Stack WARNING: not appear elsewhere in this network domain. If it does, WARNING: user traffic may be blackholed. Switch(config) # end Switch# show switch Switch/Stack Mac Address : 0016.4727.a900 Mac pers[...]

5-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Conf igurin g the Sw itch Stack Beginn ing in pri vilege d EXEC mode, follo w these steps to assign a priority v alue to a stack member: This proc edure is option al. Provisioning a New Member for a Switch Stack Note This tas[...]

5-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 5 Managing Sw i tch Stacks Accessing the CLI of a Specific Stack Member T o remo ve pro visioned in formation and to a void recei ving an error me ssage, remo ve the speci fied swi tch from t he st ack befo re you use the no form o f th i s c om ma nd. F[...]

5-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 5 Managing Switch S tacks Displaying Swit ch Stack Inform a tion T able 5-4 Commands for Display ing S witc h Stack Inf or mation Command Description show platform stack-ma nager all Displays all sw itch stack information . sho w swit ch Displays summ[...]

CH A P T E R 6-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 6 Administering the Switch This c hapt er d escri bes how to pe rfor m one-t ime ope rat ions to a dmi nist er t he sw itc h. Unl ess ot herw ise noted, th e term switch refers to a stand alone switch and to a switch stack. This chap ter cons ists of[...]

6-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Managin g the Syste m Time and Date The sy stem c lock can pro vide tim e to these s ervices: • User show comman ds • Logging and de bugging m essag es The syste m clock keeps tr ack of time internal ly based on Univ ers[...]

6-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e Figure 6-1 shows a typi cal netw ork e xample using NTP . Switch A is the NTP master , with the Switch E, Switch B, and Switch C conf igured in NTP server mode, in serve r associa tio[...]

6-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Managin g the Syste m Time and Date These sec tions co ntain this configura tion info rmat ion: • Def aul t NT P Conf igurati on, pag e 6-4 • Conf iguring NTP Authen tication, page 6-4 • Configuring NT P Association s,[...]

6-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e T o disabl e NTP au th en tic at io n, use the no ntp authenticate global configurat ion comm and. T o remove an auth enticatio n k ey , use th e no n tp auth enti cati on-k ey num be[...]

6-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Managin g the Syste m Time and Date Beginning in privileged EXE C mode, foll ow these steps to form a n NTP associ ation with a nother device: Y ou need to co nfigure only one en d of an assoc iation; t he other de vice can [...]

6-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e The switc h can send or re ceive NTP broadcast pa ckets on an interface -by-interfac e basis if the re is an NTP broa dcast ser ver , such as a router , broad casting time infor matio[...]

6-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Managin g the Syste m Time and Date T o disable an i nterface from r eceiving NTP br oadcast packets, u se th e no ntp broadcast client interf ace configurat ion c omm and. T o c han ge t he est ima ted r oun d-tr ip del ay [...]

6-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e The ac c ess gr oup keywords a re sc an ned i n this ord er, from le ast rest ric tive to most r estr ict ive: 1. peer —Allo ws time requests and NTP control queries and al lo ws th[...]

6-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Managin g the Syste m Time and Date Disabling N TP Serv ice s on a Specific I n te r face NTP service s are enabled on all interfa ces b y default. Beg i n n i n g i n p r iv i l e g ed EX E C m o d e , f o l l ow t h e s e[...]

6-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e Displaying the NTP Config uration Y ou can use two privileged EXEC c omman ds to display NTP inform ation: • show ntp associations [ detail ] • show ntp status For detailed infor[...]

6-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Managin g the Syste m Time and Date Displaying the Time and Dat e Configuration T o d isplay the time and date conf iguration, use the show clock [ detail ] pri vileg ed EXEC comm and. The syst em c lock keeps an au thorita[...]

6-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e Configuring Summer Time (Daylight Saving Time) Beginning in pr ivileged EXEC mode, fo llow these steps t o co nfigure summer time (dayligh t saving time) in areas wh ere it sta rts a[...]

6-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Configur ing a Sys tem Nam e and Prompt Beginning in privileged EX EC mode, fol low these steps if summ er time in your area do es not follow a recurr ing patt ern (con figure the exact dat e and time of the next summer tim[...]

6-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Confi guring a S ystem Name an d Prompt For complete syntax a nd usage information for th e comman ds used in this se ction, see the Cisc o IOS Configuration Fund amen tals Comma nd Reference, Relea se 12.2 a nd the Cisco I O[...]

6-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Configur ing a Sys tem Nam e and Prompt T o k e ep trac k of dom ain nam es, IP has d efined the co ncept o f a domai n name server , w hich hol ds a cac he (or dat aba se) o f name s m appe d to IP addr esse s. T o map dom[...]

6-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Creat ing a Bann er If you u se t he switc h IP ad dress a s its hostnam e, the IP a ddress i s used and no DNS query oc curs. I f you configure a ho stname that contai ns no periods (.), a period foll owed by the default dom[...]

6-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Creating a Banner Configurin g a Mess age-of-the -Day Log in Bann er Y ou can crea te a single or multilin e m essa ge b anne r tha t a ppea rs on the screen when someone lo gs in to the switch. Beginning in privileged EX E[...]

6-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Managin g the MAC Ad dress Tabl e Configurin g a Login B anner Y ou can configur e a l og in ba nner t o be di spla yed on al l c onn ect ed t ermi nal s. Thi s ba nn er ap pe ar s aft er the M O TD bann er a nd be fo re the [...]

6-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Managin g the MAC A ddre ss Table These sec tions co ntain this configura tion info rmat ion: • Building t he A ddre ss T able, page 6 -20 • MA C Addre sses and VLA Ns, page 6-20 • MA C Ad dresse s and Swit ch Sta cks[...]

6-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Managin g the MAC Ad dress Tabl e When pr iv ate VLAN s are co nfigured , addre ss le arnin g depen ds on th e type of MAC add ress: • Dynami c MA C addresses lea rned in one VLA N of a pri vate VLAN ar e replicate d in the[...]

6-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Managin g the MAC A ddre ss Table Beginn ing in pr i vilege d EXEC m ode, follo w these st eps to co nf igure the d ynamic a ddress table aging time: T o return to the default valu e, use t he no mac address- table aging-ti[...]

6-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Managin g the MAC Ad dress Tabl e Beginning i n privileged E X EC mo de , follow these s teps to c on figure th e switc h t o send M A C addr ess notif ication traps to an NMS host: Command Purpos e Step 1 configur e terminal[...]

6-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Managin g the MAC A ddre ss Table T o disab le the swi tch from sendi ng MA C address notification t raps, use the no snmp-ser ver enable traps mac-notification global con f igura tion co mmand. T o disab le the MAC address[...]

6-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Managin g the MAC Ad dress Tabl e Beginning i n privileged EX EC mo de , follo w these steps to add a static addr ess: T o remove sta tic en tr ies fr om t he addr es s ta ble, u s e t he no mac address-table st atic mac-addr[...]

6-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Managin g the MAC A ddre ss Table • If you add a uni cast MA C address as a static address a nd conf igure unicast MA C address f iltering, the switc h eithe r add s the MA C addres s as a stat ic addres s or drops pack e[...]

6-27 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 6 Adminis ter ing the Switch Managi ng the ARP Table Displaying A ddress Table Entries Y ou can displ ay the MAC address table by using one or more of the privileged EXEC command s describe d in Ta b l e 6 - 4 : Managing the ARP Ta ble T o communic ate w[...]

6-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 6 Adm inistering the Switch Managin g the ARP Table[...]

CH A P T E R 7-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 7 Configuring Switch-Based Authentication This chapte r describes ho w to configure switc h-based authent ication on the switch. Unless ot herwise noted, th e term switch refers to a stand alone switch and to a switch stack. This chap ter cons ists o[...]

7-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Protecting A ccess to Privileged EXE C Comman ds • If you want to u se use rn ame and pa ssword p airs, but you wa nt to st ore t hem c e ntra lly o n a server instead o f locall y , you can store them in a [...]

7-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Prote c ting Acce ss t o Priv i lege d EX EC Co mman ds Setting o r Changin g a Static Enab le Pa ssword The en able password control s access to the privileged EXEC mode. Beginning in privileged EXEC mode, fo[...]

7-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Protecting A ccess to Privileged EXE C Comman ds Be ginnin g in pri vileged EXE C mode, follo w these step s to conf igure encryp tion for en able and enab le secr et pas swords : If bo th the e nable and enab[...]

7-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Prote c ting Acce ss t o Priv i lege d EX EC Co mman ds This exampl e shows ho w to configure th e encrypt ed password $1$F aD0$Xyt i5Rk ls3LoyxzS 8 for pri v ilege le vel 2: Switch(config)# enable secret leve[...]

7-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Protecting A ccess to Privileged EXE C Comman ds Setting a Telnet P assword fo r a Terminal L ine When you p ower-up your sw it ch f or the first ti me, a n au to mat ic setup p rog ram run s t o as sig n IP i[...]

7-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Prote c ting Acce ss t o Priv i lege d EX EC Co mman ds Beginn ing in pri vileged EXEC mode, follo w these steps to establish a usernam e-based authentic ation system that re quests a logi n usernam e and a pa[...]

7-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Protecting A ccess to Privileged EXE C Comman ds Setting the Privil ege Level for a Command Beginn ing in pri vile ged EXEC mode, follo w these steps to set the pri v ilege le vel for a comman d mode: When y o[...]

7-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Prote c ting Acce ss t o Priv i lege d EX EC Co mman ds Changing the Default Pri vilege Level fo r Lines Beginn ing in pri vileged EXEC mode, fo llo w these steps to chan ge the defaul t pri vilege le vel for [...]

7-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controlling Sw itch Acce ss w ith TACACS+ Controlling Switch Access with TACACS+ This sec tio n de scribes ho w to enable an d co nf igure T erminal Acce ss Con tr ol l er Access Con t r ol System Plus (T A C[...]

7-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with TACACS+ Figur e 7 -1 T ypical T ACA CS+ Networ k Configur ation T A CAC S+, adm iniste red th rough t h e AAA s ecurit y ser vices, ca n pro vide these services: • Authent ica[...]

7-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controlling Sw itch Acce ss w ith TACACS+ TACACS+ Ope ration When a use r attempts a sim ple ASCII login by authenticating to a switch u sing T A CACS+, this process occurs: 1. When th e connection is establi[...]

7-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with TACACS+ • Conf iguring T A CA CS+ Authorizat ion for Pri vile ged EXEC Access and Network Servic es, page 7-16 • Startin g T ACA CS+ A ccountin g, page 7-17 Default TACAC S+[...]

7-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controlling Sw itch Acce ss w ith TACACS+ T o remov e the specif ied T A CA CS+ serv er name or add ress, use the no tac acs- server host hostna me global configurat ion comm and. T o remove a server grou p f[...]

7-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with TACACS+ T o disa ble A AA, u se t he no aaa new-model global configur ati on comm a nd. T o di sabl e A AA authenti cation, use th e no aaa auth enti ca tion log in { default | [...]

7-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controlling Sw itch Acce ss w ith TACACS+ Note T o se cure the switch for HTT P acce ss b y using AAA meth ods, you must con fi gure t he switch with th e ip htt p a u the ntica ti on aaa g loba l c onfigurat[...]

7-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS Starting TACACS+ Accounting The AA A acco unting fe ature tr acks the s ervices that users a r e a ccessi ng an d the amoun t of n etwo rk resources th at the y are co ns[...]

7-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controllin g Switch A cce ss wit h RA DIUS Understanding RADIUS RADIUS is a distr ibuted clie nt/ser ver system that secures netw orks against u nauthori zed access . RADIUS c l ients run on sup por ted Cisc [...]

7-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS Figur e 7-2 T ransitioning fro m RADIUS t o T ACACS+ Services RADIUS Operation When a user attem pts to log in and authentic ate to a switch that is acce ss controlled by[...]

7-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controllin g Switch A cce ss wit h RA DIUS Configuring RADIUS This se ctio n de scri bes how to c onfigure yo ur sw itch to su ppo rt R ADI US. At a mi nim um, y ou mus t identify t he host or host s that ru [...]

7-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS Y ou identif y RADIUS security serve rs by their hostname or IP address, hostname a nd specific UDP p ort numbers, or their I P addre ss and specific UD P port num bers. [...]

7-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controllin g Switch A cce ss wit h RA DIUS Beginn ing in pri vileg ed EXEC mode, follo w these steps to conf igure per - server RADIUS server comm unicatio n. This pr oced ure is requir ed. Comma nd Purpos e [...]

7-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS T o re mov e the specif ied RADIUS serv er , use the no radius-serv e r host hostname | ip- address global configurati on comm a nd. This exam ple sh ow s ho w to conf ig[...]

7-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controllin g Switch A cce ss wit h RA DIUS Step 3 aaa authent ication logi n { default | list-name } method1 [ meth od2... ] Create a logi n authen tica tion meth od list. • T o create a def ault list that [...]

7-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS T o disa ble A AA, u se t he no aaa new-model global configur ati on comm a nd. T o di sabl e A AA authenti cation, use th e no aaa auth enti ca tion log in { default | l[...]

7-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controllin g Switch A cce ss wit h RA DIUS Be ginning in pri v ile ged EXEC mode, fo llo w these step s to def ine the AAA ser ver group and associate a particula r RADIUS serv er with it: Comma nd Purpos e S[...]

7-27 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS T o re mov e the specif ied RADIUS serv er , use the no radius-serv e r host hostname | ip- address global configurati on comm and. T o remove a server group from t he co[...]

7-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controllin g Switch A cce ss wit h RA DIUS T o disable authoriza tio n, u se the no aaa authorizati on { network | exec } method1 gl obal c onfiguratio n comm an d. Starting RADIUS Accountin g The AAA acco un[...]

7-29 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS Configuring Settings for All RADIUS S ervers Beginning i n privileged E X EC mo de , follow these s teps to c on figure gl obal com mun ica tion sett ings between the swi[...]

7-30 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controllin g Switch A cce ss wit h RA DIUS This e xam ple s ho ws ho w to pro vid e a user loggin g in fr om a swit ch with immedia te ac cess t o pri vileged EXEC co mmands : cisco-avpair= ”shell:priv-lvl=[...]

7-31 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with Kerberos As ment ioned ea rlier, to configure RAD IUS (w hether vendor-proprie tary or IETF dr aft-c omplia nt), yo u must specif y the host ru nning the RADIUS se rver daemon a[...]

7-32 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controllin g Sw itch Acce ss with Kerb eros Y o u can do wnload th e cryptograph ic softwar e image from www .dell.com/supp ort For mor e infor mati on, see th e rel ease notes fo r this rel ease. These se ct[...]

7-33 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with Kerberos In this software relea se, Kerberos supports these n etwork servic es: • Te l n e t • rlogin • rsh (R emot e She ll Pr otoc ol) Ta b l e 7 - 2 lists the common K [...]

7-34 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Controllin g Sw itch Acce ss with Kerb eros Kerberos Operation A Kerberos server can be a s wi tc h th at is configur ed a s a netwo rk sec ur ity server a nd t hat can authe nticat e remote use rs by using t[...]

7-35 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Controlling Switch Access with Kerberos 4. The KDC send s an encryp ted TGT that includes the user ide ntity to the swi tch. 5. The switch attem pts to decrypt the TGT b y using the passwor d that the user en[...]

7-36 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Configur ing the Switc h fo r Local Au thentica tion and A uthorizat ion Note A Kerberos server ca n be a s witc h th at is c onfigured as a netwo rk secur i ty se rver a nd tha t c an authe nticate use rs by[...]

7-37 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Configuring the Switch for Secure Shell T o disa ble A AA, u se t he no aaa new-model global co nfigur atio n c omm and. T o disa ble a uthor iza tion, use the no aaa autho rizat ion { network | exec } method[...]

7-38 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Conf igurin g the Sw itch for Sec ure Shel l For SSH configuration examples, see t he “SSH Configurat ion Exam ples ” section i n the “Configur ing Secure Shell” se ction in the “Other Security Fe a[...]

7-39 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Configuring the Switch for Secure Shell SSH also supports these user authen tication methods: • T ACA CS+ (fo r m ore inf orm ation , se e th e “Controlling Switch Acc ess with T A C A CS+” section on p[...]

7-40 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Conf igurin g the Sw itch for Sec ure Shel l • When genera ting the RSA key pair , the message No domain spe cified might ap pear . If it does, you must c onfigure an I P d oma in na me by usi ng t he ip do[...]

7-41 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Configuring the Switch for Secure Shell Configuring the SSH Server Beginn ing in pri vileged EXEC mode, follo w these steps to confi gure the SSH serv er: T o return to the defau lt SSH contr ol param eters, [...]

7-42 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Conf igurin g th e Sw itch for Sec ure Sock et L a yer HT TP Displaying th e SSH Co nfiguration an d Status T o displa y t h e S SH se r v er conf iguratio n an d s t at us, use one or mo re of the pr i vile [...]

7-43 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Configuring the Switch for Secure Socket Layer HTTP The pri mary ro le of t he HTTP se cure se rver (the sw itch) i s to liste n for HTTPS reque sts on a designat ed port ( the default H T TPS por t i s 4 43)[...]

7-44 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Conf igurin g th e Sw itch for Sec ure Sock et L a yer HT TP <output truncated> Y ou can remo ve this self-sig ned certif icate by disab ling the secure HTTP server and enter ing the no crypto pki trust[...]

7-45 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Configuring the Switch for Secure Socket Layer HTTP Configuring S ecure HT TP Serve rs and C lients These sec tions co ntain this configura tion info rmat ion: • Default SSL Con f igura tion, page 7-4 5 •[...]

7-46 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Conf igurin g th e Sw itch for Sec ure Sock et L a yer HT TP Use the no crypto ca tr ustpo int nam e global conf ig uration command to delete all id entity information and ce rtifica tes ass oci ated wit h th[...]

7-47 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Configuring the Switch for Secure Socket Layer HTTP Use th e no ip http server global configu ratio n com ma nd to disa ble the st an dard HTT P ser ver . U se t he no ip http secur e-serv er global co nfigur[...]

7-48 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Conf igurin g th e Sw itch for Sec ure Sock et L a yer HT TP T o v erify the secure HTTP conne ction by using a W e b browser , ent er https: // URL , wher e the URL is the IP address or hostname of the serve[...]

7-49 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 7 Configuri ng Sw itch-Ba sed Auth entication Config uring the Swit ch for Secure C opy Pr otocol Displaying S ecure HTTP Server an d Client Status T o display the SSL se cure se rver and clie nt statu s, use the pr i vile ged EXEC comman ds in Ta b l e [...]

7-50 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 7 C onfiguring Switch-Based Authentication Conf igurin g the Sw itch for Sec ure Copy Proto col[...]

CH A P T E R 8-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 8 Configuring SDM Templates This chapte r describes ho w to config ure the Switch Databa se Management (SDM ) templates on the switch. Un less otherwise noted , the term switch refe rs to a standalone switch and to a switch stack. Note For c omplete [...]

8-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 8 C onfiguring SDM Templates Underst an ding the SD M Templ ate s The f irst eight rows in the tables (unicast MA C addresses through security A CEs) re present appro ximate hardw are boundaries set wh en a template is selecte d. If a section of a hard[...]

8-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 8 Configuring SD M Te mplates Underst anding the SDM Templ ates SDM Template s and Switch St acks All stack members must use the same SDM d esktop template t h at is stored o n the stack master . When a ne w switch is added to a sta ck, the S D M conf igu[...]

8-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 8 C onfiguring SDM Templates Conf igurin g the Sw itch SDM Temp lat e 2d23h:%SDM-6-MISMATCH_ADVISE:compatible desktop SDM template: 2d23h:%SDM-6-MISMATCH_ADVISE: 2d23h:%SDM-6-MISMATCH_ADVISE: "sdm prefer vlan desktop" 2d23h:%SDM-6-MISMATCH_AD[...]

8-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 8 Configuring SD M Te mplates Config uring the Swit ch SDM Template Setting the SDM Template Beginn ing in pri vileged EXEC mode, follo w these step s to use the SDM template to maximi ze feature usage: After the system rebo ots, you c an use the show sdm[...]

8-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 8 C onfiguring SDM Templates Display ing the SDM Tem p lates On next reload, template will be “desktop vlan” template. T o return to the default templ ate, use the no sdm p refer globa l c on figuratio n co mma nd . This e xample shows how to c onf[...]

8-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 8 Configuring SD M Te mplates Displaying the SDM Templates This is an example of output fro m the show sdm prefer dual-ipv4-and-ipv6 r outing comma nd: Switch# show sdm prefer dual-ipv4-and-ipv6 routing The current template is "desktop IPv4 and IPv6 [...]

8-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 8 C onfiguring SDM Templates Display ing the SDM Tem p lates[...]

CH A P T E R 9-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 9 Configuring IEEE 802.1x Port-Based Auth entic ation This ch apter de scribes ho w to con figur e IEEE 8 02.1x port-based authentic ation on the switc h. IEEE 802. 1x authe nticati on prevents unauthori zed devices (client s) from gaining acc ess to[...]

9-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Underst andin g IE EE 802.1x Port-Ba sed Au th enticati on • IEEE 8 02. 1x A ccou nt ing, page 9-9 • IEEE 802. 1x Accou nting Attr ibute-V alu e Pairs, page 9-9 • Using IE EE 802.1x Au thentic[...]

9-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Underst anding I EEE 802.1x P ort-Base d Auth enticat ion Authentic ation Protocol (EAP) e xtensions is th e only suppor ted authentic ation serv er. It is a vailab le in Cisco Secure Acc ess Control[...]

9-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Underst andin g IE EE 802.1x Port-Ba sed Au th enticati on Figure 9-2 shows the au thent ication pr ocess. If Multi Do main Authentica tion (MD A) is en abled on a p ort, this flo w can b e used wit[...]

9-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Underst anding I EEE 802.1x P ort-Base d Auth enticat ion The Session- T imeout RADIUS attrib ute (Attribu te[27]) spec ifie s the time after which re-auth enticatio n occurs. The T e rminati on-Acti[...]

9-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Underst andin g IE EE 802.1x Port-Ba sed Au th enticati on Figur e 9-3 Mess ag e Exc han g e If IEEE 802.1 x authentica tion times out while wai ting f or an EAPOL message e xchange and MA C authent[...]

9-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Underst anding I EEE 802.1x P ort-Base d Auth enticat ion Ports in Au thorized and Un authorized S tates During IEEE 802.1x authen tication, depe n ding on the switch port state, the switch can grant[...]

9-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Underst andin g IE EE 802.1x Port-Ba sed Au th enticati on If IP connecti vity to the RADIUS serv er is interrupt ed becau se the swit ch that was co nnected to the serv er is rem ove d or fails, th[...]

9-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Underst anding I EEE 802.1x P ort-Base d Auth enticat ion Figur e 9-5 Multiple Hos t Mode Ex ample IEEE 802.1 x Acco unting The IEEE 802.1x stan dard de fines ho w users ar e author ized and aut hent[...]

9-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Underst andin g IE EE 802.1x Port-Ba sed Au th enticati on Y ou can view the A V pairs that are bei ng sent by the swit ch by entering t he debug r adius accounting pri vileged EXEC comman d. Fo r [...]

9-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Underst anding I EEE 802.1x P ort-Base d Auth enticat ion V oi ce device au thentic ation is support ed. Wh en a voice device is authorize d and th e RADIU S server returne d an author ized VL AN, t[...]

9-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Underst andin g IE EE 802.1x Port-Ba sed Au th enticati on • Assign v endor -specific t u nnel attr ib utes in the RADIUS ser ver . T he RADIUS server must return these attr ibu tes to the switch[...]

9-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Underst anding I EEE 802.1x P ort-Base d Auth enticat ion For ex amples of vend or -speci fic att ribut es, see the “Configuring the Swit ch t o Use V end or-Specific RADIUS Attributes” section [...]

9-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Underst andin g IE EE 802.1x Port-Ba sed Au th enticati on Any number of IEEE 802 .1x-inc apable clie nts are allo wed acces s when the switc h port is mov ed to the guest VL A N. I f an I EE E 802[...]

9-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Underst anding I EEE 802.1x P ort-Base d Auth enticat ion After a p ort mo ves to the restr icted VL AN, a sim ulated EAP success message is sent t o the clie nt. This prev ents c lients fr om inde [...]

9-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Underst andin g IE EE 802.1x Port-Ba sed Au th enticati on Inaccessible au thenticatio n bypass interac ts with these features: • Guest VLAN—Inacce ssible auth entication bypass is comp atible [...]

9-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Underst anding I EEE 802.1x P ort-Base d Auth enticat ion In single-hos t mode, only the IP phone is allowe d on the voice VLAN. In multiple-hosts mode , additional clients can send t r af f ic on t[...]

9-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Underst andin g IE EE 802.1x Port-Ba sed Au th enticati on • When an IEE E 802 .1x cli ent logs off, the port chang es to an unauthe nt icate d state, and all dynamic entrie s in t h e secur e h [...]

9-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Underst anding I EEE 802.1x P ort-Base d Auth enticat ion frame w ith a u ser name and pa ssword based on the M AC address. If a uthor izat ion suc ceeds, the swi tch grants the client access to the[...]

9-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Underst andin g IE EE 802.1x Port-Ba sed Au th enticati on Network Admission Control La yer 2 IEEE 802. 1x Validation The switc h supports t he Network Admi ssion C ontrol (NA C) Laye r 2 IEEE 8 02[...]

9-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Underst anding I EEE 802.1x P ort-Base d Auth enticat ion • If more than one de vice attempts au thorizatio n on e ither the vo ice or th e data domain o f a p ort, it is erro r d isab led. • Un[...]

9-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n For exam pl e: proxyacl# 10=permit ip any 10.0.0.0 255.0.0.0 proxyacl# 20=permit ip any 11.1.0.0 255.255.0.0 proxyacl# 30=permit udp any any eq syslog pro[...]

9-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Configur ing IEEE 802. 1x Authenticat ion • Conf iguring IEEE 802.1x Authentica tion with W oL, page 9-39 (optional ) • Configuring M A C Aut hent ic ation Byp ass , pa ge 9-40 (op tiona l) • [...]

9-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n IEEE 802.1x Authenticatio n Configur atio n Guidelines These sec tion has configu ration gui delines fo r these fe atures: • IEEE 8 02. 1x Aut hent icat[...]

9-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Configur ing IEEE 802. 1x Authenticat ion • The IEEE 802.1x pr otocol is supp orted on La yer 2 stati c-acces s ports, voice VL AN ports, a nd Layer 3 rou ted ports, but it is not supp orted on th[...]

9-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n the IEEE 802. 1x auth entic ation pr ocess ( dot1x timeout quiet-period an d dot1 x timeo ut t x-perio d interfac e configurat ion com man ds ). The am ou[...]

9-27 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Configur ing IEEE 802. 1x Authenticat ion Step 4 The switch sends a start message to an accounting server . Step 5 Re-a uthe nti cati on i s per for med, as n ecessar y . Step 6 The switch sends a n[...]

9-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n Configuring the Sw itch-to-RADIUS-Serv er Communication RADIUS se curity servers are identi fied by their ho stname or IP ad dress, hostname and specific [...]

9-29 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Configur ing IEEE 802. 1x Authenticat ion Y ou also need to config ure some settings on the RADI US server. These settings in clude the IP addre ss of the switch and the ke y string to be shared by [...]

9-30 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n Configuring Periodic Re-Authentication Y ou can ena ble perio dic IEE E 802.1 x clien t re-auth entica tion an d specify h ow often it occurs. If you do n[...]

9-31 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Configur ing IEEE 802. 1x Authenticat ion Changing the Quiet P eriod When the swi tch ca nno t auth en tic ate th e c lien t, the swi tch remains idle for a set pe ri od o f time an d th en tries ag[...]

9-32 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n T o return to the defaul t retransmission time, use the no d ot1x ti meou t tx-p eriod in terface con figu ration comm and. This e xample sho ws how to se[...]

9-33 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Configur ing IEEE 802. 1x Authenticat ion Setting th e Re-Aut hentication Number Y ou can also chan ge the n umber of times that the switch restar ts the auth entication process bef ore the port cha[...]

9-34 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n Note Y ou must configure th e RADIUS server to perform account ing tasks, suc h as loggin g start, stop , and interim-upd ate messages and time stamps. T [...]

9-35 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Configur ing IEEE 802. 1x Authenticat ion T o disable an d rem o v e the gues t VLAN, use the no dot1x gue st-vlan interface con f igurat ion co mmand. The port returns to the unau thorized state. T[...]

9-36 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n T o disable and remo ve the rest ricted VLAN, use the no dot1x auth-fa il vlan inter face configurat ion comm and. Th e port retur ns to the una utho rize[...]

9-37 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Configur ing IEEE 802. 1x Authenticat ion T o return to the default v alue, u se the no d ot1 x au th-f ail ma x-a tte mpt s interface conf iguration comm and. This exam pl e sh ows how to set 2 as [...]

9-38 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n Step 4 radius-se rver host ip- ad dress [acct- port udp-port ] [ auth-por t udp-port ][ test username name [ idle-time ti me ] [ ignor e-acct- port ] [ ig[...]

9-39 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Configur ing IEEE 802. 1x Authenticat ion T o return to the RADIUS ser ver defau lt settings, u se the no radius-serv er dead-crite ria , the no radius-serv er deadtime , and the no radius-server ho[...]

9-40 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n T o disable IE EE 80 2. 1x au th en tic atio n w it h W oL, us e th e no dot1x control-dir ection interf ace configurati on comm a nd. This e xample sho w[...]

9-41 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Configur ing IEEE 802. 1x Authenticat ion Configuring NAC Layer 2 IEEE 802.1x Validation Y ou ca n configure NA C Layer 2 IE EE 802. 1x validation, whic h is also refe rred to as IE EE 802. 1x authe[...]

9-42 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n Configuring Web Authentication Beginn ing in pri vileged EXEC mode, fo llo w these steps to conf igure authentica tion, authorizat io n, accoun tin g (A A[...]

9-43 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Configur ing IEEE 802. 1x Authenticat ion Beginn ing in pri vileged EXEC mode, follo w these steps to conf igure a port to use web authen tication: This example shows ho w to co nfigure only web aut[...]

9-44 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Configur ing IEEE 802 .1x Authen ticatio n This e xampl e sho ws ho w to c onf igure IEEE 802.1 x auth enticatio n with web authenti cati on as a f allback method . Switch(config) configure termina[...]

9-45 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 9 Configuri ng IEEE 802. 1x Port-Ba sed Auth entication Displaying IEEE 802 .1x Statistics and Status T o configure the port as an IEEE 802.1x port ac cess entity (P AE) authent icator , which enable s IEEE 802. 1x on t he port but doe s not allow client[...]

9-46 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 9 Configuring IEEE 802.1x Port -Based Authen tication Displaying IEEE 802.1x St atistics and St atus[...]

CH A P T E R 10-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 10 Configuring Interface Cha racteristics This c hapt er d efines the type s o f in terfa ces on the swi tch and de scri bes how to c onfigure th em . Un less otherwise noted, the term switch ref ers to a st andalo ne swit ch and to a switch stack. [...]

10-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Underst an ding In te rface Type s • 10-Gigabi t E the rnet In terfac e s, page 10 -6 • Connecti ng In t erfaces, page 10-6 Port-Based VLANs A VLAN is a switched netwo rk that is logically segmente d by fu[...]

10-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Unde rsta ndi n g In t erf ac e Ty p es Note Whe n you put an int erface that is in Layer 3 mod e into La yer 2 mode, the previous configuration informatio n related to th e af fected interf ace might be lost, [...]

10-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Underst an ding In te rface Type s traffic is forwarde d to an d f rom th e trun k p ort for tha t V L AN. I f VTP l ear ns of a new , ena ble d VLA N that is not in the allo wed list for a trunk port, the por[...]

10-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Unde rsta ndi n g In t erf ac e Ty p es Switch Virtual Interfaces A switch virtual i n terf ace (SVI ) represe nts a VL AN of switch ports as one interfa ce to the routin g or bridging f unctio n in the sys tem[...]

10-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Underst an ding In te rface Type s When you c onfigure an Et herCha nnel, you cr eate a port -chan nel lo gical inte rface an d assign a n inte rface to the Ethe rCha nnel. For Layer 3 in terfaces, you manual [...]

10-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Using Inte rface Configu ration Mo de possibl e, to mainta in high perfo rman ce, for warding is done by the switch hard ware. Howev er , only IPv4 pack ets with Ethe rnet II encapsulati on are route d in hardw[...]

10-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Using I nterface Configu ration Mode Y ou ca n ident ify physica l interfac es by physical ly chec king th e inte rface loca tion on t he switch . Y ou can also us e th e show priv ilege d EXEC commands to dis[...]

10-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Using Inte rface Configu ration Mo de Ente r t he show int erfaces p ri vilege d EXEC comman d to s ee a list of al l interf ace s on or configu red f or the s witc h. A report is pr o vided for ea ch in ter f [...]

10-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Using I nterface Configu ration Mode Note Wh en yo u use the int erface rang e command with por t channels, the f irst and last port-ch anne l n umb er must b e ac tive port c hanne ls. • Y ou must add a sp[...]

10-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Using Inte rface Configu ration Mo de Use the no de fine interface-range macr o_nam e global conf igura tion comm and to delete a macro. When usin g the def ine interface- range global configuratio n command ,[...]

10-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Using the I nt ernal Ethe rnet Manage ment Por t This exam pl e s h ows how to cr ea te a mu lti p le-i n te rface m a cr o n amed macr o 1 : Switch# configure terminal Switch(config)# define interface-range [...]

10-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Using the Int ernal E therne t Manage ment Port For a nonstacki ng-cap abl e switch or a stan dalone stacking- capabl e switch , connec t the Ether net manageme nt port to th e PC as sho wn in Figure 10 -2 . F[...]

10-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Using the I nt ernal Ethe rnet Manage ment Por t Figur e 1 0-3 Connect ing a S witch Stac k to a PC By defa ult, the Ethe rnet ma nageme nt por t is en abled. The switch canno t rout e packet s from t he Et h[...]

10-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Using the Int ernal E therne t Manage ment Port • T eln et with passwor ds • TFTP • Secure Shell ( SSH) • DHCP-bas ed autoc onfi g uration • SMNP (o nly the ENTITY -MIB and th e IF-MI B) • IP ping [...]

10-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Configur ing Ethernet Int erfaces TFTP and th e Et hern e t Ma nage ment P o rt Use the commands i n Ta b l e 1 0 - 1 when using TFT P to download or uplo ad a configurat ion file to the boot loader . Configu[...]

10-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Configuring Ethernet Interfaces Note T o conf igure Layer 2 parameter s, if the interf ace is in Layer 3 mode, you must enter the switchport interf ace conf iguratio n command without an y parameters to put th[...]

10-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Configur ing Ethernet Int erfaces Configuring In terface Sp eed and Du plex M ode Ether net int erfac es on the sw itch o per ate a t 1 0, 10 0, 1000, or 1 0,0 00 M b/ s and i n eithe r fu ll- or half-d uplex[...]

10-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Configuring Ethernet Interfaces Setting the Interface Speed and Duplex Pa rameters Beg i nn i n g i n pr ivi le ge d E X EC mo d e , f o l low t h es e s t e p s t o set the speed and dupl ex mode f or a physi[...]

10-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Configur ing Ethernet Int erfaces This exampl e shows ho w to set the int erface spee d to 100 Mb/s an d the dupl ex mode to half on an external 10/10 0/100 0 Mb/s port: Switch# configure terminal Switch(conf[...]

10-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Configuring Ethernet Interfaces T o disabl e flo w control , use the fl owcont rol r ecei ve off interface co nfiguration c omman d. This exampl e shows ho w to turn on flow contro l on a port: Switch# configu[...]

10-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Configur ing Layer 3 In ter faces T o disabl e auto- MDIX, u se th e no mdix auto i n terfa ce c on figura tion co mm an d. This e xample sho ws ho w to enable au to-MDIX on a po rt: Switch# configure termina[...]

10-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Configuring Layer 3 Interfaces Note Wh en you cr eate an SVI, it does n ot becom e acti ve until it is associat ed with a physic al port. For informat ion about ass igning La yer 2 por ts to VLANs , see Chapt [...]

10-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Conf igurin g th e Syst em MTU T o remov e an IP a ddress f rom a n interf ace, use th e no ip addre ss interfa ce conf iguration co mmand. This exam ple shows how to con figure a port as a r oute d port and [...]

10-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Confi guring t he System MTU The upp er limit of t he system ro uting MTU v alue is ba sed on the swit ch or switch stack co nfiguration and refer s to either th e currently applied system MT U or the system j[...]

10-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Monito rin g and Mai nt aining th e In terfaces Monitoring and Main taining the In terfaces These section s contain interf ace monitor ing and maintenan ce information: • Monitori n g Int erfac e Statu s , [...]

10-27 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 10 Configuring Interf ace Char act eristics Monitoring and Maintaining the Interfaces Clearing and Resetting In terfaces and Counters T able 10-5 lists the pri vile ged EXEC mode c lear command s that you can u se to clear coun ters and re set interf ac[...]

10-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 10 Con figuring Interface Characteristics Monito rin g and Mai nt aining th e In terfaces[...]

CH A P T E R 11-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 11 Configuring Smartports Macro s This chap ter describ es how to conf igure and apply Smartpo rts macr os on the switch. Note For c omplete s yntax and u sage in forma tion fo r the command s used in th is cha pter , see the co mmand refere nce fo [...]

11-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 11 Configuring Smartpor ts Macro s Configuring Smartpor ts Mac ros Cisco also provid es a collection of prete sted, Cisco-recomme nded baseline conf iguration templates for Catalyst switc hes. The onli ne reference g uide temp lates pro vide the CLI c[...]

11-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 11 Configuring Smart por ts Macros C onfiguring Sm artports Macros Smartports Mac ro Con figuration Guidelines Follow these guideli nes when configuring ma cros on your sw itch: • When crea ting a macro , do not use the exit or end comm ands or change [...]

11-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 11 Configuring Smartpor ts Macro s Configuring Smartpor ts Mac ros Foll ow th ese guidelines when you apply a Cisco-d efault Smartp orts macro on an interf ace: • Display all macr os on the switch by using the show pa rs er m a cro u ser E XE C co m[...]

11-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 11 Configuring Smart por ts Macros C onfiguring Sm artports Macros Applying Smar tpo rts Macro s Beginning i n privileged EX EC mode , follow th ese s teps t o app ly a Sma rtpor ts m acro : Y ou can d elete a glo bal macr o-applie d configurati on on a [...]

11-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 11 Configuring Smartpor ts Macro s Configuring Smartpor ts Mac ros This exam pl e sh ows how to app ly t h e user-cre ate d ma cr o ca lle d snmp , to set the h ostname address to test- server , and to set the IP prec edence valu e to 7 : Switch(confi[...]

11-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 11 Configuring Smart por ts Macros C onfiguring Sm artports Macros Y ou can d elete a glo bal macr o-applie d configurati on on a swi tch only by ente ring the no v ers ion of ea ch comm and th at is in t he macro. Y ou c an del ete a macr o-app lied con[...]

11-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 11 Configuring Smartpor ts Macro s Displaying Smartpor ts Mac ros Displaying Smartports Macros T o display the Smar tports ma cros, use one or mor e of the pri vileged EXEC comm ands in T able 1 1-2 . T able 1 1 - 2 C om man ds f or Displ a y ing Smar[...]

CH A P T E R 12-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 12 Configuring VLANs This c hapt er d escri b es how to c onfigure norm al -ra nge V LAN s (V L AN IDs 1 to 100 5) and extended -rang e V LAN s (V LAN IDs 1006 to 40 94) on th e swi tch . It in clud es inf orm at ion abo ut VL AN member ship mod es,[...]

12-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Underst a n ding VLAN s Figure 12-1 shows an exam ple of V L ANs segmented into l ogica lly defined n etwor ks. Figur e 12-1 VLANs as Logically Defined Netw ork s VLANs are of ten associated wit h IP subnetw orks. For e xampl e,[...]

12-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Unde rst an din g VLA Ns Although the switch or sw itch stac k supports a total of 1005 (n ormal range and extende d range) V LANs, the num ber of ro uted por t s, SVIs, a nd oth er configur ed fe atu re s affects t he us e o f the [...]

12-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configur ing Normal- R ang e VLAN s For more de taile d definitions of ac cess and tru nk mo des a nd t heir func tions, see T able 12 -4 on page 12-1 8 . When a port belongs to a VLAN , the switch l earns and mana ges the add r[...]

12-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Config uri ng Norm a l-R an ge VLAN s Cautio n Y ou can cause inconsistenc y in the VLAN d atabase if you attempt to manually d elete the v lan.dat file. If you wa nt to modi fy the V LAN c onfiguration, use the comma nds descr ibed[...]

12-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configur ing Normal- R ang e VLAN s Token Rin g VLANs Although the sw itch does not suppo rt T oken Ring connectio ns, a remote device such as a Cata ly st 5000 series switch w ith T oken Ri ng c on necti on s coul d be m ana ge[...]

12-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Config uri ng Norm a l-R an ge VLAN s VLAN Configuration Mode Options Y ou can c onfigure nor mal -rang e VL A Ns (w ith V LAN IDs 1 to 1005) by usin g the se two configu ratio n modes: • VLAN Configur ation in co nfig-vlan Mode ,[...]

12-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configur ing Normal- R ang e VLAN s When you save VLAN and VTP infor mation (i ncluding extended-r ange VL AN configurati on informatio n) in the star tup conf iguration f ile and re boot the switch, the swit ch configurat io n [...]

12-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Config uri ng Norm a l-R an ge VLAN s Creating or Modifyin g an Et hernet VLAN Each E the rnet VL AN in th e VLAN d ata base ha s a u niq ue, 4- digit I D th at ca n b e a nu mber fr om 1 to 1001. V LAN IDs 1002 to 1005 are re serve[...]

12-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configur ing Normal- R ang e VLAN s Y ou can also c reate o r modify Et hernet VLANs by using the VLAN database co nfiguration mo de. Note VLA N d ata base co nfigurati on mode d oes not sup port RSP AN VLAN configura tio n or [...]

12-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Config uri ng Norm a l-R an ge VLAN s Cautio n When you delete a VLAN, a ny por ts assigned to that VLAN be come inac tiv e. They r emain associ ated with th e VLAN ( and thus inacti ve) until you assign them to a ne w VLAN. Beginn[...]

12-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configur ing Extended-R ange VLA Ns T o return an interface to its default conf iguration, use the defaul t interface interface-id interface configurati on comm a nd. This example shows ho w to configure a port as an access por[...]

12-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Confi guring Exte nded- Range VLANs Extended -Ran ge VLAN C onfiguration G uidelines Foll ow th ese guidelines when cr eating exte n ded-range VLANs: • T o add an extended-range VLA N, you must use the vlan vlan-i d global con fi[...]

12-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configur ing Extended-R ange VLA Ns Creating an E xtended-Ra nge VL AN Y ou cr ea te an exten de d-ran ge V LAN i n g lo bal configur ati on mode by ent eri ng the vlan gl obal configurati on comm and with a VLA N ID from 1006 [...]

12-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Confi guring Exte nded- Range VLANs This e xample shows how to c reate a ne w ex tended-ra nge VLAN w ith all d efault charac teristics, e nter config-vlan mo de, an d save the new VLAN in the swi tc h sta rtup configu rat ion file[...]

12-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Displa ying VL ANs Displaying VLANs Use the show vlan privi leged EXEC command to display a list of all VLA Ns on the switch, including extended -range V LANs. Th e displa y includ es VLAN status, port s, and configurat ion inf[...]

12-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Config uri n g VL AN Tr unk s Figure 12-2 shows a network of swit ches that are conn ected by ISL trunk s. Figur e 12-2 Switche s in an ISL T r unking Envir onment Figure 12-3 shows a network of swit ches that are connected by IEEE[...]

12-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configur ing VLAN Trunk s Ethern et t runk in terface s sup port di fferent trunkin g mode s (see Ta b l e 1 2 - 4 ). Y ou can set an interf ace as trunking or nontru nking or to negoti ate trunk ing with the neighbor ing inter[...]

12-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Config uri n g VL AN Tr unk s Encapsulation Type s T able 12-5 lists the Ethe rnet trun k encapsul ation ty pes and keywords. Note Th e switch does not su pport La yer 3 tr unks; you c annot c onfigure subinte rfaces or u se the en[...]

12-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configur ing VLAN Trunk s Default Layer 2 Ethernet Inte rface VLAN Con figur ation T able 12-6 shows the de fault Lay er 2 E ther ne t i nte rface VLA N co nfigurat ion. Configuring a n Ethern et Interface as a Trunk P ort Beca[...]

12-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Config uri n g VL AN Tr unk s – STP Port Fa st setting. – trunk s tat us: i f o ne po rt i n a po rt g rou p ce as es t o b e a t runk, a ll por t s ce ase t o be t runk s. • W e recomm end tha t you co nfigure no mor e than [...]

12-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configur ing VLAN Trunk s T o return an interface to its default conf iguration, use the defaul t interface interface-id interface configurat ion com mand. T o reset a ll tru nking cha r act eris tic s of a tr unki ng int erfac[...]

12-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Config uri n g VL AN Tr unk s T o return to the def ault allo wed VLAN l ist of a ll VLANs, us e the no switchport trunk allowed vlan interf ace c onfig uration co mmand. This exam ple sh ows how to re move VLAN 2 fro m th e allowe[...]

12-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configur ing VLAN Trunk s T o return to the def ault pruning-eli gible list of all VLANs, use the no switchport trunk pruning vlan interf ace c onfig uration co mmand. Configuring the Native VLAN for Untagged Traff ic A tru nk [...]

12-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Config uri n g VL AN Tr unk s Y ou conf igure load shari ng on trun k ports b y using ST P port p riorities or STP path c osts. F or load sharing using ST P port pri orities, both load- sharing links must be c onnected t o the same[...]

12-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configur ing VLAN Trunk s Beginning in pr ivileged EXEC m ode, fol low these steps t o configure t he network shown in Figur e 12-4 . Comma nd Purpose Step 1 conf igur e terminal Ente r global configurati on mode on Swi tch A. [...]

12-27 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Config uri n g VL AN Tr unk s Load Sharing Using STP Path C ost Y ou can co nfigure parallel trunks to share VLAN traffic by se tting di fferent path costs on a tru nk and associat ing the pat h costs wi th d ifferent set s of VLAN[...]

12-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configuring VMPS Configuring VMPS The VLA N Qu ery Prot ocol (VQ P) is used to suppor t dyna mic -a ccess por ts , whi ch are not pe rmane ntl y assigne d to a VLAN, but gi v e VLAN assi gnment s based on the MA C source addres[...]

12-29 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Configuring VMPS If the p ort is curren tly unassigned (that is, it does not yet hav e a V LAN assignment), the VMPS pro vides one of these re sponses: • If the host is allo wed on the port, the VMPS sends the client a vlan-assig[...]

12-30 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configuring VMPS Default VMPS Client Configuration T able 12-7 shows the de fault V MPS a nd dyna mic- a cces s po rt con figurat ion on clie nt sw it ches . VMPS Con figurat ion Guidelines These guide li nes and re stric tio n[...]

12-31 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Configuring VMPS Entering the IP Address of the VMPS Y o u must f irst ente r the IP addr ess of the server to conf igure the sw itch as a client . Note If the VMPS is being defined for a cl uster of swit ches, ente r the address o[...]

12-32 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configuring VMPS T o return an interface to its default conf iguration, use the defaul t interface interface-id interface conf iguration co mmand. T o return an interf ace to its def ault switc hport mode (dynamic a uto), use t[...]

12-33 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Configuring VMPS Changing the Retry Count Beginn ing in pri vileged EXEC mode, follo w these steps to change the numbe r of times that the switch attempt s to conta ct the VMPS befor e queryi ng the n ext serv er: T o return th e s[...]

12-34 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configuring VMPS Troublesho oting Dyna mic-Acce ss Po rt VLAN Memb ership The VMPS shuts down a dynamic -access port unde r these cond itions: • The VMPS is in secure mode, and it does not allo w the host to connect to the po[...]

12-35 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 12 Configuring VLA Ns Configuring VMPS Figur e 12-6 Dynami c P or t VLAN Membe rship Con figur ation Primar y VMPS Ser ver 1 Catalyst 6500 series Secondar y VMPS Ser ver 2 Catalyst 6500 series Secondar y VMPS Ser ver 3 172.20.26.150 172.20.26.151 Cataly[...]

12-36 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 12 Co n figuring VLANs Configuring VMPS[...]

CH A P T E R 13-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 13 Configuring VTP This c hapt er d escri b es how to us e t he V LAN Trunking Pr otoc ol ( VTP) a nd t he V LAN dat aba se for managing VLANs wi th the switch. Unl ess otherwise noted, the te rm switch refers to a stand alon e switc h and to a swit[...]

13-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 13 Configuring VTP Underst an ding VTP The swi tch support s 1005 VLANs , but the num ber of r oute d port s, SVIs, and othe r configured feature s af fects th e usa ge of th e switch hardw are. If the switch is n otif ied by VTP of a ne w VLAN and th[...]

13-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 13 Configuring VTP Understanding VTP For domain na m e an d p assword configur ation g uide lin es, se e the “VTP Conf iguration G uidelines” section on page 13-8 . VTP Mode s Y ou can co nfigure a suppor ted switch or sw itch stac k to be in one of [...]

13-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 13 Configuring VTP Underst an ding VTP VTP adv ertiseme nts distrib ute this global domain i nformation: • VTP domain na me • VTP configurati on revision number • Update id entity an d updat e timestam p • MD5 diges t VLAN conf iguration, incl[...]

13-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 13 Configuring VTP Understanding VTP VTP pruni ng blocks unn eeded floo ded traffic to VLANs on tr unk ports th at are inc luded in the pruning -elig ible list. Only VLAN s includ ed in t he pruning -elig ible lis t can be prun ed. By default , VLANs 2 t[...]

13-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 13 Configuring VTP Conf igurin g VTP Enab ling V T P prun in g on a V TP ser ver e nabl es pr un ing f or the ent ire m a nagem e nt d oma in. Mak ing VLANs pru ning-e ligib le or p run in g-ineli gible affect s prun ing e lig ibility for th ose VL AN[...]

13-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 13 Configuring VTP Configuring VTP Default VTP Configuration T able 13-2 sho ws the default VTP conf iguration. VTP Configuration Options Y ou can co nfigure VTP by using these co nfiguration mo des. • VTP Configurat ion in G loba l Co nfiguration M od[...]

13-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 13 Configuring VTP Conf igurin g VTP VTP Configuration in VLAN Database Configuration Mode Y ou can configure all VTP param eters in VLA N database con figuration mod e, which you access by entering th e vlan data bas e privileged EXEC comm and. For m[...]

13-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 13 Configuring VTP Configuring VTP VTP Ve rs ion Foll ow these guidelines w hen decidin g which VTP v ersion to implem ent: • All switches in a VTP domain must run the same VTP versi on. • A VTP V ersion 2-cap able swi tch can o perate in the sam e V[...]

13-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 13 Configuring VTP Conf igurin g VTP When you con figure a domain na me, it cannot be rem oved; you can only rea ssign a switc h to a different domain. T o return t he sw it ch t o a no- pa ssword s tat e, u s e t he no vtp password global co nfigura[...]

13-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 13 Configuring VTP Configuring VTP This exam ple shows how to use VLAN data base configura tio n mode to c onfigure t he s witc h a s a V TP serv er with th e domain name eng_group and the password mypassw or d : Switch# vlan database Switch(vlan)# vtp [...]

13-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 13 Configuring VTP Conf igurin g VTP Use the no vtp mode glob al configurat ion com mand to re turn the swi tch to VT P server mode. T o return the swi tch to a no-pa ssword st at e, u se the no vt p password privileged EX EC c om mand. W hen y ou co[...]

13-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 13 Configuring VTP Configuring VTP Note Y ou ca n also configure V TP transpare nt mode by using the vlan dat ab ase pri vi leged EXEC c omman d to enter VLAN datab ase conf iguratio n mode and by ente ring the vtp transparent command, simila r to the s[...]

13-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 13 Configuring VTP Conf igurin g VTP Enabling V TP Prunin g Pruning inc reases available bandwi dth by restric ting flood ed traffic to those trunk links th at the traffic must use to acces s the destinat ion devices. Y o u can o nly ena ble V TP pru[...]

13-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 13 Configuring VTP Configuring VTP Beginning i n privileged E XEC mo de, foll ow these s teps to ver ify an d r es et th e VTP co nfigurati on revision number on a switch befor e adding it to a VTP domain: Y o u can also chan ge the VTP domain na me b y[...]

13-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 13 Configuring VTP Monito rin g VTP Monitoring VTP Y ou mon itor V T P by disp layin g VT P c onfigurat ion in for mat ion: t he dom ain na me, the cur rent VT P revision, and the n umb er of VL AN s. Y ou c an al so di spla y stati stic s about th e[...]

CH A P T E R 14-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 14 Configuring Voic e VLAN This ch apte r descr ibes how to configure th e voice VLAN featu re on t he switc h. Unl ess ot herwis e note d, the term switc h refers to a standalo ne switch and to a switc h stack. V oic e VLAN is re ferred to as an au[...]

14-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 14 C onfiguring Voice VLAN Underst an ding Voice VL A N Figure 14-1 shows one way to conne ct a Cisco 7960 IP Phon e. Figur e 14-1 Cisco 7960 IP Phone Connected t o a Switc h Cisco IP Phone Voice Traffic Y o u can c onf i gure a n ac cess por t w ith [...]

14-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 14 Configuring Voice VLA N Configuring Voice VLAN Note Un tag ged t raffic from t h e device a tt ache d to th e Cisco I P Pho ne passe s th rou gh the ph one u ncha nged, regardless of the tr ust sta te of the a cce ss por t on t he p hone. Configuring [...]

14-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 14 C onfiguring Voice VLAN Configuring Voic e VL AN • If the Cisc o IP Phon e and a d e vice attach ed to th e phon e a re in t h e same VLAN , t he y must be in the same IP subnet . These condit ions indicate that they ar e in the same VLAN: – Th[...]

14-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 14 Configuring Voice VLA N Configuring Voice VLAN Configuring Cisco IP Phone V oice Traffic Y ou can c onfigure a po rt conn ecte d to th e Cisco IP Phon e to se nd CDP pa ckets to th e phon e t o configure the wa y in whic h the phone sends v oic e traf[...]

14-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 14 C onfiguring Voice VLAN Configuring Voic e VL AN This example shows ho w t o configure a port connect ed to a Cisco IP Phone to use the CoS value to classify inco ming traf fic, to use I EEE 802.1p prior ity tagging for v oice traf fi c, and to use[...]

14-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 14 Configuring Voice VLA N Displaying Voice VLAN This exa mple sh ows ho w to configu re a port c onnected to a Cisco IP Pho ne to not c hange th e pr iority of frame s rece i ved from t he PC or the attached de vice: Switch# configure terminal Enter con[...]

14-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 14 C onfiguring Voice VLAN Displa ying Vo ice VLA N[...]

CH A P T E R 15-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 15 Configuring Private VLANs This ch apter d escrib es how to configure private VLANs on the swi tch. Unl ess otherw ise not ed, the term switch ref ers to a sta ndalone switc h and to a switch stack. Note For c omplete s yntax and u sage in forma t[...]

15-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 15 Co n figuring Private VLANs Underst an ding Priva te VL A Ns Figu re 15-1 Priv a te-VL AN Doma in Ther e ar e two type s o f s econd ar y VLA N s: • Isol ated VLA Ns—Ports within an iso lated VL AN cann ot comm unicate with ea ch oth er at t h [...]

15-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 15 Configuring Privat e VLA Ns Unde rs tan din g Priv at e VLA Ns Primary an d second ary VLANs ha ve these char acter istics: • Primary VLAN—A pri v ate VLAN h as only one primar y VLAN. Ev ery por t in a p ri v ate VLAN is a member of the prim ary [...]

15-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 15 Co n figuring Private VLANs Underst an ding Priva te VL A Ns Private VLANs across Multiple Switches As with regula r VLANs, priv ate VLANs can span multip le switches. A trunk port carrie s the primary VLAN a nd se co ndary V LANs to a n eig hbor i[...]

15-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 15 Configuring Privat e VLA Ns Unde rs tan din g Priv at e VLA Ns Y ou should al so se e the “Se c ondar y and Prima ry VLAN Co nfiguration” sec tion on page 15-7 und er th e “Priv ate-VLAN Co nfig uration G uidelines ” section . Private VLANs an[...]

15-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 15 Co n figuring Private VLANs Configur ing Priv at e VLANs • If tw o sta cks merg e, pr i v ate VL ANs on the wi nning stac k are not af fected, b ut pri v ate-VLAN conf iguration on the losing switch is lost when that switch reboots. For more info[...]

15-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 15 Configuring Privat e VLA Ns Confi guring Privat e VLANs Private-VLAN Co nfig uration Guidelines Guideli nes for conf ig uring pri v ate VLANs fa ll into these cate gori es: • Seconda ry and Primary VLAN Configuratio n, page 15-7 • Priv at e- VLAN [...]

15-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 15 Co n figuring Private VLANs Configur ing Priv at e VLANs Connec ting a dev ice with a di ff erent MA C addres s b ut with the sam e IP addres s genera tes a message , an d t he AR P ent ry is n ot c re ated . Y ou must m anua lly r em ove priv ate-[...]

15-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 15 Configuring Privat e VLA Ns Confi guring Privat e VLANs Limitations with Other Features When conf iguring pri vate VL ANs, remember these limitations with other features: Note In some cases , the conf igurati on is accepte d with no error me ssages , [...]

15-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 15 Co n figuring Private VLANs Configur ing Priv at e VLANs Configur ing and As soc iatin g VLANs in a Priv ate VLAN Beginning i n privileged E XEC mo de, foll ow these s teps to c on figure a private VLAN : Note Th e private- vlan co mmand s d o n o[...]

15-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 15 Configuring Privat e VLA Ns Confi guring Privat e VLANs When you as sociat e seconda ry VLANs with a prim ary VLA N, note this s yntax info rmation : • The seco ndary_ vlan_lis t paramete r cannot conta in spaces. I t can contain multip le comma-se[...]

15-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 15 Co n figuring Private VLANs Configur ing Priv at e VLANs This exa mple sho ws ho w to conf igure an interf ace as a pri vate-V L AN host port, associ ate it with a pri vate- VLAN pair , and v erify the conf iguration: Switch# configure terminal Sw[...]

15-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 15 Configuring Privat e VLA Ns Confi guring Privat e VLANs Configur ing a Lay er 2 In ter fac e as a Priv ate- VLAN Prom isc uous P ort Beginning i n privileged E XEC mo de , fol low these s teps t o con figure a Laye r 2 in terfa ce a s a priv a te-V L[...]

15-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 15 Co n figuring Private VLANs Configur ing Priv at e VLANs Mapping S econd ary VLAN s to a Primary VLAN Layer 3 VLAN Interfa ce If the p ri vate VL AN will be used f or inter -VLAN routing , you con fig ure an S VI for the prim ary VLAN and map sec [...]

15-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 15 Configuring Privat e VLA Ns Monitoring Private VLANs Monitoring Private VLANs T able 15-1 sho ws the pri vile ged EXEC commands for mon itoring pri vate-VLAN ac tivity . This i s a n exam ple of the o utput from t he show vlan private- vlan co mmand [...]

15-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 15 Co n figuring Private VLANs Monito rin g Private VLAN s[...]

CH A P T E R 16-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 16 Configuring IEEE 802.1Q and Layer 2 Protocol Tunneling V irtual pri v ate netw orks (VPNs) pro vide enter prise-scale connecti vity on a shared infras tructure, ofte n Etherne t-based, w ith the sam e securi ty , prio ritization , reliabili ty , [...]

16-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 16 Configuring IE EE 802.1Q and Lay er 2 Protoc ol Tunneling Underst andin g IE EE 802. 1Q Tunnelin g Custome r traff i c tagged in the normal way with appropr iate VLAN IDs comes from a n IEEE 802.1 Q trunk port on the custom er device and into a t u[...]

16-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 16 Configuring IEE E 80 2.1Q and L ay er 2 Protocol Tun neling Understanding IEEE 802.1Q Tunneling Figur e 16-2 Or iginal (Nor mal), IEEE 802 .1Q, and Dou ble-T agge d Ether net P ac ket F or mats When the pack et enters the trunk port of the service- pr[...]

16-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 16 Configuring IE EE 802.1Q and Lay er 2 Protoc ol Tunneling Configur ing IEEE 802 .1Q Tunnel ing Configuring IEE E 802.1Q Tunneling These sec tions co ntain this configura tion info rmat ion: • Default IE EE 802.1Q T unne ling Configura tion, page [...]

16-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 16 Configuring IEE E 80 2.1Q and L ay er 2 Protocol Tun neling Configuring IEEE 802.1Q Tunneling These are some wa ys to solv e this problem: • Use ISL tru nks betw een core switches in the servi ce-provi der network. Althoug h custome r interfaces con[...]

16-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 16 Configuring IE EE 802.1Q and Lay er 2 Protoc ol Tunneling Configur ing IEEE 802 .1Q Tunnel ing IEEE 802.1 Q Tunn eling and Oth er Featu res Although IEEE 802.1Q tunneling works well for Layer 2 packet switching, there are incompatibilities betwee n[...]

16-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 16 Configuring IEE E 80 2.1Q and L ay er 2 Protocol Tun neling Understan ding Layer 2 P rotoco l Tunnel ing Use the no switchport mode dot1q- tunnel i nterfac e conf iguration comma nd to retu rn the p ort to t he default stat e of dyn am ic desi rabl e.[...]

16-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 16 Configuring IE EE 802.1Q and Lay er 2 Protoc ol Tunneling Underst andin g L ayer 2 Pro tocol Tunn eling as nor mal packet s. Lay er 2 proto col da ta units (PDUs) f or CDP , STP , or VT P cross th e ser vice-provid er network and ar e delivered to [...]

16-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 16 Configuring IEE E 80 2.1Q and L ay er 2 Protocol Tun neling Understan ding Layer 2 P rotoco l Tunnel ing Figur e 16-4 Laye r 2 Pr otocol T unneling Figur e 16-5 Lay er 2 Networ k T opolog y withou t Pr ope r Con ver g e nce In an SP net work, y ou c a[...]

16-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 16 Configuring IE EE 802.1Q and Lay er 2 Protoc ol Tunneling Configur ing Layer 2 Prot oco l Tunne ling For exam ple, in Figure 16- 6 , Customer A has two switc hes in the same VLAN that are connected through the SP network. When th e network tun nel[...]

16-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 16 Configuring IEE E 80 2.1Q and L ay er 2 Protocol Tun neling Configu r ing Layer 2 Prot ocol Tunnel ing See Figure 16-4 , with Customer X and C ustom er Y in acc ess VLANs 30 and 4 0, res pecti vel y . Asymmetric lin ks connec t the custo mers in Site[...]

16-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 16 Configuring IE EE 802.1Q and Lay er 2 Protoc ol Tunneling Configur ing Layer 2 Prot oco l Tunne ling Layer 2 Protoco l Tunneling C onfigura tion Guide lines These ar e some co nfigurat ion gu ideli nes and o pe ratin g c hara cte rist ic s of L a [...]

16-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 16 Configuring IEE E 80 2.1Q and L ay er 2 Protocol Tun neling Configu r ing Layer 2 Prot ocol Tunnel ing Configuring L ayer 2 P rotocol Tu nneling Beginning in privileged EXEC mo de, foll ow these steps to con figure a port for Laye r 2 protoco l tunne[...]

16-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 16 Configuring IE EE 802.1Q and Lay er 2 Protoc ol Tunneling Configur ing Layer 2 Prot oco l Tunne ling Use the no l2protocol-tunnel [ cdp | stp | vtp ] int erfac e c onfigura tio n com ma nd t o disabl e prot ocol tunnel ing for one of the Laye r 2 [...]

16-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 16 Configuring IEE E 80 2.1Q and L ay er 2 Protocol Tun neling Configu r ing Layer 2 Prot ocol Tunnel ing Use the no l2pr otocol-tunnel [ point-to-point [ pag p | lacp | udld ]] inter fa ce co nf ig urati on com mand to disable po int-t o-point p rotoco[...]

16-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 16 Configuring IE EE 802.1Q and Lay er 2 Protoc ol Tunneling Configur ing Layer 2 Prot oco l Tunne ling Configuring the Customer Sw itch After conf iguring the SP edge switch, begin in pri vileged EXEC mode and follo w these steps to configure a c us[...]

16-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 16 Configuring IEE E 80 2.1Q and L ay er 2 Protocol Tun neling Configu r ing Layer 2 Prot ocol Tunnel ing Switch(config-if)# l2protocol-tunnel drop-threshold point-to-point pagp 1000 Switch(config-if)# exit Switch(config)# interface gigabitethernet1/0/3[...]

16-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 16 Configuring IE EE 802.1Q and Lay er 2 Protoc ol Tunneling Monito rin g and Maint ain ing Tunnel ing Statu s Monitoring and Main taining Tun neling Sta tus T able 16-2 sho ws the pri vile ged EXEC commands for monitoring and maint aining IEEE 802. [...]

CH A P T E R 17-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 17 Configuring STP This chapt er desc ribes how to configure the Sp anni ng T ree Protocol (ST P) on por t-base d VLANs on t he switch. The sw itch ca n use eithe r the per-VLAN spa nni ng-tree plus ( PVST+) protoc ol base d on the IE EE 802.1 D sta[...]

17-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Underst an ding Spa nning- Tree Featu res • Supporte d Spanning -T ree Inst ances, pa ge 17-10 • Spanning- T ree Interop erability and Backw ard Compatibi lity , page 17-11 • STP and IE EE 802. 1Q Trunks, pa ge 17- 11 • VLAN[...]

17-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 17 Configuring STP Unders tanding Spanni ng-Tree Feat ures Spannin g- Tr ee To polo gy and BP DUs The stable, ac tiv e sp anning-tree topology of a switched ne twork is controlle d by these elem ents: • The uni q ue br i dge I D (sw it ch p rior ity a [...]

17-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Underst an ding Spa nning- Tree Featu res Only one outgoin g port on the stac k root switch is selected as the root port. Th e remaining switch es in the stack become its designated switch es (Switch 2 and Switch 3) as sho wn in Fig[...]

17-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 17 Configuring STP Unders tanding Spanni ng-Tree Feat ures The swi tch sup ports t he IEEE 802.1t spanni ng-tre e extension s, and some of t he bits pr eviously used for the switch prior ity are no w used as the VLAN identif ier . The result is that fe w[...]

17-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Underst an ding Spa nning- Tree Featu res • From le arning t o fo rwardi ng or t o disabl ed • From for war ding to d i sable d Figure 17-2 illustrates ho w an interface mo ve s through the states. Figur e 17 -2 Spannin g-T r ee[...]

17-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 17 Configuring STP Unders tanding Spanni ng-Tree Feat ures • Does not lea rn addres ses • Rece ives BPDUs Listening State The li stening state i s the fir st state a Layer 2 inte rface enter s after the block ing sta te. The interf ace e nters this s[...]

17-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Underst an ding Spa nning- Tree Featu res How a Sw itch or Port Beco mes th e Root S witch o r Root Port If all switches in a netw ork are enabl ed with default spann ing-tree setti ngs, the switch with the lowe st MA C address beco[...]

17-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 17 Configuring STP Unders tanding Spanni ng-Tree Feat ures Figur e 17 -4 Spannin g T r ee and Redun dan t Connectivity Y ou can also c reate red undan t links betwee n switches by using EtherChann el gro ups. For more inform ati on, see Ch apter 37 , “[...]

17-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Underst an ding Spa nning- Tree Featu res Span ning- Tr ee Mo des a n d Pr ot ocols The switc h supports t hese spannin g-tr ee modes and prot ocols: • PVST+—Th is spann ing-t ree m ode is ba sed on the IE EE 802. 1D s ta ndar [...]

17-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 17 Configuring STP Unders tanding Spanni ng-Tree Feat ures Spanning-Tree Interoperability and Backward Compati bility T able 17-2 lists the interopera bility and compa tibility among the s uppo rted s panning -tree mode s in a network. In a mi xed MSTP [...]

17-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Configur ing Span ning-T ree F eature s VLAN sp an ning tre es t o prevent loops f ro m for ming i f t here are m ultip le co nnec tio ns am ong VLA Ns . It also prevents the individual spanning trees from the VLAN s being bri dged[...]

17-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 17 Configuring STP Confi guring Spanni ng-Tree Feat ures • Conf iguring th e Switch Priority of a VLAN, page 17-21 (optional) • Conf igur ing Sp anning-T ree T imers, page 17 -22 (optional) Default Span ning-T ree Configur ation T able 17-3 shows th[...]

17-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Configur ing Span ning-T ree F eature s Cautio n Switches that are not running spanning tre e still forwar d BPDUs that they rece iv e so that the other switche s on the V LA N that have a run ning span ning -tree in stance can b r[...]

17-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 17 Configuring STP Confi guring Spanni ng-Tree Feat ures Changing the Spa nning-Tree M ode. The sw itch s upports th ree spanning -tree mo des: PV ST+, rapi d PVST+, or MS TP . By de fault, t he switch runs th e PVST+ pr otoc ol. Beginning in privileged[...]

17-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Configur ing Span ning-T ree F eature s Disabling Sp anning Tree Spanning tree is enab led by defau lt on V LAN 1 and on all newly crea ted VL ANs up to the spannin g-tree limit specif ied in the “Sup ported Spanning-Tree Inst an[...]

17-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 17 Configuring STP Confi guring Spanni ng-Tree Feat ures Note Th e ro ot swi tch fo r eac h s pan ning -t ree inst anc e shoul d b e a ba ckbon e or dist ribution sw itch . D o no t conf igure an acces s switch as the span ning -tre e primar y root. Use[...]

17-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Configur ing Span ning-T ree F eature s Configur ing a Se co ndar y R oot S witch When you con figure a switch as the secondary root, the switc h priori ty is modified from t he default value (32768 ) to 28672. Th e switc h is then[...]

17-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 17 Configuring STP Confi guring Spanni ng-Tree Feat ures Note If yo ur sw itch i s a m em ber of a sw itch sta ck , you mu st us e the spanning-tree [ vlan vlan-id ] cost cost interfac e configurati on comma nd instea d of the spanning-tree [ vlan vla n[...]

17-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Configur ing Span ning-T ree F eature s T o return to the default settin g, use the no spanning-tree [ vlan vlan-id ] p ort-pr iority interface configurati on comm a nd. For inf orm ati on on how to co nfigure loa d sh ari ng on t [...]

17-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 17 Configuring STP Confi guring Spanni ng-Tree Feat ures Note Th e show spanning-tree int erface interfac e-id privileged EXEC comma nd displays in formati on only for por ts that are in a lin k-up ope rati ve stat e. Othe rwise, y ou can u se the show [...]

17-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Configur ing Span ning-T ree F eature s Configuring S pannin g-Tree Timers T able 17-4 de scribe s the timers th at af fect the entire spanni ng-tree perfo rmanc e. The sectio ns that follo w pro vide the conf iguration steps. Conf[...]

17-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 17 Configuring STP Confi guring Spanni ng-Tree Feat ures Configuring the Forwarding -Delay Time fo r a VLAN Beginning i n privileged E XEC mo de , fol low these s teps t o con figure t h e for war ding -de lay ti me for a VLAN. Th is proc edure is opt i[...]

17-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 17 Configuring STP Displaying the Spannin g-Tree Stat us Configuring the Transmit Hold -Count Y ou can co nfigure the BPDU burst size by changing th e transm it hold coun t v alue. Note Changing this parameter to a hi gher va lu e can hav e a signif [...]

CH A P T E R 18-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 18 Configuring MSTP This c hapt er d escri b es how to c onfigure the Cis co imp lem enta tion of the I EEE 802 .1s Multipl e STP (MSTP ) on the switch. Note The multiple spanning-tree (MST) implementation is based on the IEEE 802.1s standard. The M[...]

18-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Underst an ding MST P • Configuring M STP Fea tur es , p ag e 18-14 • Displayin g the MST Configura tion and Status , page 18-26 Understandin g MSTP MSTP , wh ich uses RSTP fo r rapid conver gence , enable s VLANs to be groupe[...]

18-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Unde rsta ndi n g MS TP IST, CIST, an d CST Unlik e PVST+ and rapid PVST+ in whi ch all the spann ing-t ree inst ances are in depend ent, the MST P establishes and maintains tw o types of sp anning trees: • An interna l spanning tre[...]

18-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Underst an ding MST P For correct operatio n, all switch es in the MST region m ust agree on the sam e CIST reg ional root. Theref ore , any two switch es in th e region on ly sync hro nize thei r port role s for an MST inst anc e[...]

18-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Unde rsta ndi n g MS TP MSTP switch es use V ersio n 3 RSTP B PDUs or IEE E 802.1D ST P BPDUs to c ommunica t e w ith legacy IEEE 8 02. 1D swi tc hes . MST P sw itch es use M ST P BPDU s to c ommun ica te with M STP switc hes. IEEE 80[...]

18-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Underst an ding MST P The messa ge-age and maxim um-ag e inform ation in the RSTP portion of the BPDU re main the sam e through out the region, and the sam e v alues are propagated by the region designat ed ports at t he boundary [...]

18-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Unde rsta ndi n g MS TP Port Role Naming Change The bo undary role is no lo nger in the f inal MST standar d, b u t this boundary c oncept is maintained in Cisco’ s implemen tation. Howe ver , an MST instan ce por t at a boundar y o[...]

18-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Underst an ding MST P Detecting Unidirect ional Link Failure This fea ture is not yet pr esent in the IEEE MST st andard, but it is included in this Ci sco IOS release . The sof tware chec ks the c onsist ency of the port ro le an[...]

18-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Understa nding RST P Interoperability with IEEE 802.1D STP A switch r unning M STP supp orts a built-in pr otocol migrat ion mecha nism that enable s it to i nteroper ate with legacy IEEE 802.1D switches. If this switc h receives a le[...]

18-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Underst an ding RSTP • Backup po rt —A cts a s a b ackup for t he p ath p rovid ed by a desi gn ate d po rt toward the leaves of the spannin g tr ee. A bac kup p ort can exist only w hen t wo po rt s are con ne cte d in a l o[...]

18-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Understa nding RST P After recei ving Switch B’ s agreement messa g e, Switch A a lso immediately transitions i ts designated port to t he forwar ding state. No loop s in the ne two rk are f ormed becau se Swi tch B blo ck ed all o[...]

18-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Underst an ding RSTP If a designa ted port is in the forwarding state and is not con fig ured as an edge port, it transitions to the blocking state when the R STP for ces it to s ynchro nize with new root in format ion. I n gen e[...]

18-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Understa nding RST P The sending switch sets the proposal flag in the RSTP BPDU to propose itself as the d esignated switch on that LAN. The p ort role in the proposa l message is alway s set to the designated port. The send ing swit[...]

18-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Configur ing MSTP F eatures • Notificati on —Un like IE E E 802.1D , w hi ch u ses T CN BPDU s, th e RST P d oe s n ot us e them . Ho we ver , for IEEE 802.1D interoperability , an RSTP switch processes and generat es TCN BPD[...]

18-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Confi guring MSTP Featu res Default MSTP Configuration T able 18-4 shows the de fault M ST P configur ation . For informat ion about the suppor ted number of spanning- tree in stance s, see the “Supporte d Spanning -Tree Instan ce [...]

18-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Configur ing MSTP F eatures • VTP propa gation of the MST co nfiguration i s not suppo rted. Howev er , you ca n manual ly configure the MS T configur ati on (r egio n nam e , revision num ber, and VL AN-t o-in stanc e map ping[...]

18-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Confi guring MSTP Featu res T o return t o the default M ST r egion configurat i on, u se th e no spanning-tree mst configurat ion global conf iguratio n command. T o return to the default VLAN-to-in stance map, use the no instance i[...]

18-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Configur ing MSTP F eatures T o conf igure a sw itch to become the r oot, u se th e spanning-tree mst instance- id root glob al configurati on comm a nd to m odif y th e sw itch prio ri ty f rom th e default value (327 68) to a s[...]

18-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Confi guring MSTP Featu res T o return th e switch to its def ault setting, use the no spanning-tree mst insta nce-id roo t global configurati on comm a nd. Configur ing a Se co ndar y R oot S witch When you c onfigure a swi tc h wi [...]

18-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Configur ing MSTP F eatures Configuring Port Priority If a l oop occur s, the MST P uses the p ort priority w h en selecting an interf ace to put into th e forw arding state. Y ou can assign hig her prior ity v alues (lo wer nume[...]

18-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Confi guring MSTP Featu res T o return the in terfa ce to it s defau lt setting, use the no spanning-tree mst insta nce-id port-priority interf ace c onfig uration co mmand. Configuring Path Cost The MSTP path cost def ault v alue is[...]

18-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Configur ing MSTP F eatures Configuring the Switch Priority Y ou can conf igure the switch priority and make it more lik ely that a stand alone switc h or a switch in the stack will be c hosen as the root switch. Note Exercis e c[...]

18-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Confi guring MSTP Featu res Beginn ing in pri vileged EXEC mode, follo w these steps to conf igure the hell o time for all MST instances. This pro cedure is optional. T o return the switch to its d efau lt setting, u se th e no spann[...]

18-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Configur ing MSTP F eatures Configuring the Maxi mum-Aging Time Beginn ing in p ri vileg ed EXEC mode, fo llo w these s teps to conf ig ure the maximum-a ging time f or all MST inst ance s. This proc edure is optio nal. T o retur[...]

18-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 18 Configuring MSTP Confi guring MSTP Featu res By default, the link type is c ontrolle d from the duplex mode of the i nterface: a ful l-dupl ex port is conside red t o have a po int -to- point co nne cti on; a ha lf- dup lex por t i s co ns ide red t [...]

18-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 18 Co nfiguring MSTP Displaying the MST Configu rat ion and Status Restarting the Protocol Mi gration Proce ss A switch r unning M STP supp orts a built-in pr otocol migrat ion mecha nism that enable s it to i nteroper ate with legacy IEEE 802.1D swi[...]

CH A P T E R 19-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 19 Configuring Optional Spannin g-Tree Features This c hapter describe s how to con figure opti onal spann ing-tr ee feat ures on thesw itch. Y ou can c onfigure all of the se featu res when your switc h is running the per-VLAN span ning-t ree plus [...]

19-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 19 Configurin g Optional Sp anning -Tree F eature s Underst an ding O pti on al Spann ing -Tree Fe atures Understand ing Port Fa st Port Fast immedia tely br ings an inte rface configured as an acces s or trunk port to t he forwardin g state from a b[...]

19-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 19 Configuring Op tiona l Spa nni ng-Tree Features Understan ding Optio nal Spanni ng-Tree Featu res At the interf ace le vel, you en able BPDU guard on an y port by usin g the spanning-tree bpduguard enab le interface conf iguration command with out als[...]

19-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 19 Configurin g Optional Sp anning -Tree F eature s Underst an ding O pti on al Spann ing -Tree Fe atures Figur e 19-2 S witche s in a Hier arc hical N etwor k If a switch loses co nnectivity , it begins using t he alterna te paths as soon as the spa[...]

19-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 19 Configuring Op tiona l Spa nni ng-Tree Features Understan ding Optio nal Spanni ng-Tree Featu res Figur e 19-3 UplinkF ast E xample Bef ore Di rect Link F ailure If Switch C detects a link failu re on the currentl y acti ve link L2 on the root port (a[...]

19-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 19 Configurin g Optional Sp anning -Tree F eature s Underst an ding O pti on al Spann ing -Tree Fe atures How CSUF Work s CSUF ensures that one link in the stack is elected as the path to the root. As shown in Figure 19-5 , the stack- root po rt o n [...]

19-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 19 Configuring Op tiona l Spa nni ng-Tree Features Understan ding Optio nal Spanni ng-Tree Featu res Each switch in the stac k decides if the sending switch is a better cho ice than itself to be the stack root of this span ning- tree inst ance b y compar[...]

19-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 19 Configurin g Optional Sp anning -Tree F eature s Underst an ding O pti on al Spann ing -Tree Fe atures Backbon eFas t, w h ich is e na ble d by u sin g the spanning- tr ee backbonefast global c onfigura tio n comm and, star ts when a ro ot port or[...]

19-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 19 Configuring Op tiona l Spa nni ng-Tree Features Understan ding Optio nal Spanni ng-Tree Featu res If lin k L 1 fail s as s hown in Figure 19 -7 , Switch C cannot detect this fail ure becaus e it is not conne cted direct ly to link L1. Ho wev er , beca[...]

19-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 19 Configurin g Optional Sp anning -Tree F eature s Underst an ding O pti on al Spann ing -Tree Fe atures Understand ing Ethe rCha nnel Gua rd Y ou can use Ethe rC hanne l gua rd to de tec t an Ethe rC han nel misc onfigurati on betwe en t he swit c[...]

19-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 19 Configuring Op tiona l Spa nni ng-Tree Features Configurin g Optional Spanning- Tree Features Figur e 19-9 Root Guar d in a D ata-Center Netw ork Understand ing Loop Guard Y ou ca n use loo p g ua rd t o prevent al tern ate or roo t po rt s from b ec[...]

19-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 19 Configurin g Optional Sp anning -Tree F eature s Configur ing Optiona l Spanning- Tree Fea tures • Enab ling B ac kb oneFast, page 1 9-1 6 (optional) • Ena bling Ether Channel Guard, page 19-1 7 (opti onal) • Enab ling Root Guard, pa ge 19-[...]

19-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 19 Configuring Op tiona l Spa nni ng-Tree Features Configurin g Optional Spanning- Tree Features Beginn ing in pri vile ged EXEC mode, follo w these steps to enable Port Fast . This procedure is option al. Note Y ou ca n use the spa nning-tre e portfast[...]

19-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 19 Configurin g Optional Sp anning -Tree F eature s Configur ing Optiona l Spanning- Tree Fea tures The BPDU guard feat ure pr ovides a secur e response t o in valid co nfigurati ons becau se you must manual ly put the por t bac k in servic e. Use t[...]

19-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 19 Configuring Op tiona l Spa nni ng-Tree Features Configurin g Optional Spanning- Tree Features Y ou can also use the spanning-tree bpduf ilter enable inte rface conf iguration com mand to enable BPDU fil terin g on any inte rfac e without also en abli[...]

19-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 19 Configurin g Optional Sp anning -Tree F eature s Configur ing Optiona l Spanning- Tree Fea tures Beginn ing in privile ged EXEC mode, follo w these steps to enable Uplin kFast and CSUF . This procedure is optional. When UplinkF ast is enabled, th[...]

19-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 19 Configuring Op tiona l Spa nni ng-Tree Features Configurin g Optional Spanning- Tree Features Note If yo u use Bac kbon eFast, you m ust e nable it o n all swi tch es i n th e network. B ackb oneFast is no t supported on T oken Ring VL ANs. Thi s f e[...]

19-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 19 Configurin g Optional Sp anning -Tree F eature s Configur ing Optiona l Spanning- Tree Fea tures Enabling R oot Guard Root gu ar d ena bl ed on an int erfac e a ppli es t o all th e VLA Ns t o whi ch t h e i nter face bel ongs . Do no t enable t [...]

19-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 19 Configuring Op tiona l Spa nni ng-Tree Features Display ing the Spanning -Tree Status T o globally d is able lo op guard , use t he no spa nning-tree loopguard default global configuratio n command. Y ou can ov erride the setting of the no spanning-t[...]

19-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 19 Configurin g Optional Sp anning -Tree F eature s Displaying the Spannin g-Tree Stat us[...]

CH A P T E R 20-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 20 Configuring Flex Link s a nd the MAC Address-Table Move Upd ate Feature This chap ter de scribe s ho w to conf igure Flex Link s, a pair o f interf aces on the switch that pr ovide a mutual ba ck up. I t a lso d escri bes how to c onfigure t he M[...]

20-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 20 Configuring Flex Links and the MAC Address- Table Mo ve Update Feat ure Underst andin g F lex Links and the MAC Addres s- Table M o v e Updat e Y ou configure Flex Link s on one Layer 2 interface (the activ e link) by assign ing anothe r Layer 2 i[...]

20-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 20 Configuring Fl ex Links an d the MAC A ddress-Ta ble Mo ve Update Featu re Unde rsta ndin g Fle x L inks and t he M A C Add res s -Ta bl e M ov e Up dat e Figur e 20-2 VLAN Flex Links Load Bal ancing Configu ratio n Example MAC Addr ess-Ta ble Move Up[...]

20-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 20 Configuring Flex Links and the MAC Address- Table Mo ve Update Feat ure Underst andin g F lex Links and the MAC Addres s- Table M o v e Updat e Figur e 20-3 MAC A ddress -T able Mov e Updat e Example Switch C Po r t 3 Po r t 1 Po r t 2 Po r t 4 Sw[...]

20-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 20 Configuring Fl ex Links an d the MAC A ddress-Ta ble Mo ve Update Featu re Config uring Fl ex Links an d MAC Address- Table Move Update Configuring Flex Links and MAC Address-Tab le Move Update These se ctions conta in this i nformation: • Configura[...]

20-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 20 Configuring Flex Links and the MAC Address- Table Mo ve Update Feat ure Configur ing Flex L inks and MA C Addr ess -Tabl e Mo ve Upd ate Configuring Flex Links and MAC Address-Tab le Move Update This section contain s this information: • Configu[...]

20-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 20 Configuring Fl ex Links an d the MAC A ddress-Ta ble Mo ve Update Featu re Config uring Fl ex Links an d MAC Address- Table Move Update Beginning in privileged EX EC m o de, f ollow these ste ps t o configure a p reempt ion sche me for a pair o f Flex[...]

20-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 20 Configuring Flex Links and the MAC Address- Table Mo ve Update Feat ure Configur ing Flex L inks and MA C Addr ess -Tabl e Mo ve Upd ate Configuring V LAN Load Ba lancing on Flex Lin ks Beginning in privileged EXEC mo de, follow these steps t o co[...]

20-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 20 Configuring Fl ex Links an d the MAC A ddress-Ta ble Mo ve Update Featu re Config uring Fl ex Links an d MAC Address- Table Move Update When a Flex Link in terface com es up, VLA Ns pre ferred on thi s interfa ce ar e blocked on the pee r interf ace a[...]

20-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 20 Configuring Flex Links and the MAC Address- Table Mo ve Update Feat ure Configur ing Flex L inks and MA C Addr ess -Tabl e Mo ve Upd ate T o disab le the M A C ad dress- table move update featur e, use the no mac address- table move update transm[...]

20-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 20 Configuring Fl ex Links an d the MAC A ddress-Ta ble Mo ve Update Featu re Monitoring Flex Links a nd the MAC Addr ess-Tabl e Move Update T o disab le the M A C ad dress- table move update featur e, use the no mac address- table move update rec e ive[...]

20-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 20 Configuring Flex Links and the MAC Address- Table Mo ve Update Feat ure Monito ring Flex L in ks and the M AC Addr es s-Tabl e Mo ve Upd ate[...]

CH A P T E R 21-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 21 Configuring DHCP Features and IP Source Gua rd This ch apt er descri bes how to configur e DHC P snoopi ng and t he o ption-82 d ata in sertion featu res on the switch. It also de scr ibes how to configur e the IP sourc e guard f eat ure. U nless[...]

21-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 21 Configuring DHC P Featur es and IP Source Gua rd Underst an ding DHCP Feat ures For informat ion about th e DHCP client , see t he “ Configuring DHCP ” section of th e “ IP Addr essing an d Services ” section of the C isco IOS IP Configura[...]

21-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 21 Configuring DH CP Features and IP Sou rce G uard Understa nding DHCP Fe atures The s witch drops a DH CP pack et when on e of t hese situa tions occurs : • A pack et from a DHCP serv er, such as a DHCPOFFER, DHCP A CK, DHCPN AK, or DHCP LEA SEQU ER [...]

21-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 21 Configuring DHC P Featur es and IP Source Gua rd Underst an ding DHCP Feat ures Figure 21-1 is an ex amp le of a bla de swi tch in an enc los ure in whic h a centr al ized DHCP se rv er ass igns IP addres ses to subs cribers connec ted to the swit[...]

21-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 21 Configuring DH CP Features and IP Sou rce G uard Understa nding DHCP Fe atures • Remote-ID suboptio n fields – Suboption t ype – Length o f th e subopt ion type – Remote-ID typ e – Leng th o f t h e re mo te -I D t yp e In the port field of [...]

21-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 21 Configuring DHC P Featur es and IP Source Gua rd Underst an ding DHCP Feat ures The values fo r these fields in the packets chang e from t he default values when you configur e the remote-I D and circu it-ID subo ptions: • Circuit-ID subop tion [...]

21-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 21 Configuring DH CP Features and IP Sou rce G uard Understa nding DHCP Fe atures Each da tabase en try ( binding ) has an IP addr ess, an ass ociated MA C address, the lea se time (in hexa d ecimal format), the in terface to which the binding applies, a[...]

21-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 21 Configuring DHC P Featur es and IP Source Gua rd Configur ing DHCP Fe at ures DHCP Snoop ing and Switch Sta cks DHCP sn oopin g is mana ge d on the st ack ma ster . When a ne w switch joins th e stac k, t he switch recei ves the DHCP snooping conf[...]

21-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 21 Configuring DH CP Features and IP Sou rce G uard Config uring DHC P Featu res DHCP Snooping Config uration Guidelines These ar e the configur ation g uidelin es for DHCP snoo ping. • Y ou must global ly enable DHCP snooping on the switch. • DHCP s[...]

21-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 21 Configuring DHC P Featur es and IP Source Gua rd Configur ing DHCP Fe at ures • Before conf iguring the DHCP rel ay agent on your switch, make su re to conf igure the de vice that is acti ng as t he DH CP s er ver . For exa mple , you m ust sp [...]

21-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 21 Configuring DH CP Features and IP Sou rce G uard Config uring DHC P Featu res Configuring the DHCP Relay Agent Beginn ing in pri vileged EXEC mode, follo w these steps to enable the DHCP relay agen t on the switch: T o disabl e the DH C P ser ver and[...]

21-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 21 Configuring DHC P Featur es and IP Source Gua rd Configur ing DHCP Fe at ures T o remo ve the DH CP pac ket f orwar ding addres s, us e the no ip helper -address address interfa ce configurati on comm a nd. Enabling DHC P Snoo ping and Op tion 82[...]

21-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 21 Configuring DH CP Features and IP Sou rce G uard Config uring DHC P Featu res T o disab le DHCP snooping , use the no ip dhcp snooping glob al con figuration co mman d. T o disable DHCP snoo ping o n a VLA N or r ange of VL A Ns, use t he no ip dhcp [...]

21-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 21 Configuring DHC P Featur es and IP Source Gua rd Configur ing DHCP Fe at ures Switch(config)# interface gigabitethernet2/0/1 Switch(config-if)# ip dhcp snooping limit rate 100 Enabling DHC P Snoo ping on Priva te VLANs Y ou can en ab le D HCP sno[...]

21-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 21 Configuring DH CP Features and IP Sou rce G uard Displaying DHCP Snooping Information T o stop us ing the da tab as e ag en t a nd bindi n g files, u se th e no ip dhcp sno oping database glob al configurati on comm a nd. T o re set the ti meou t or [...]

21-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 21 Configuring DHC P Featur es and IP Source Gua rd Underst an ding IP So urce Gu ard Note If DHCP snooping is enabled and an in terface ch anges to the do wn state, the switch does not delete th e static ally co nfigured bindi ngs. Understandin g I[...]

21-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 21 Configuring DH CP Features and IP Sou rce G uard Confi g uring IP S our ce Gu ard Source IP and MA C Address Filtering When IP s ource guard is enabl ed with th is option , IP tra ff ic is f ilter ed bas ed on the s ource IP and MA C addr esses. The [...]

21-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 21 Configuring DHC P Featur es and IP Source Gua rd Conf igurin g IP S our ce Gu ard • When configur ing IP source guard on int erfaces on which a private VLAN is co nfigured, por t securit y is not supporte d. • IP source guard i s n ot su ppo [...]

21-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 21 Configuring DH CP Features and IP Sou rce G uard Displ aying IP Sou rce Guard In format ion T o disable IP sou rce guard with source IP address f iltering, use the no ip ver ify s ource interface configurati on comm a nd. T o delete a static IP sourc[...]

21-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 21 Configuring DHC P Featur es and IP Source Gua rd Display ing IP Sou rce Gua rd In formatio n[...]

CH A P T E R 22-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 22 Configuring Dynamic ARP Insp ectio n This chapt er desc ribes how to configure dynam ic Addr ess Resolu tion Proto col inspec tion ( dynami c ARP inspection) on the switch. This feature helps prev ent malicious a ttacks on th e switch by n ot rel[...]

22-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 22 Config uring Dyn amic ARP I nspect ion Underst an ding Dyn amic ARP Ins pection Figur e 22-1 ARP Cache P oisoning Hosts A, B, and C are connected to the switch on interfaces A, B and C, all of which are on the same subnet. Th eir IP a nd MAC addre[...]

22-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 22 Configuring Dy namic A RP In sp ectio n Understandi ng Dynami c ARP Inspect ion Y ou can co nfigure dynam ic ARP inspec tion to drop ARP packets when the IP addre sses in the pac kets are i nv alid or whe n t he M AC addresses in the body of t h e A R[...]

22-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 22 Config uring Dyn amic ARP I nspect ion Underst an ding Dyn amic ARP Ins pection Dynamic ARP inspe ctio n e nsure s tha t h osts ( on un truste d in terfa ces) conne ct ed to a sw itch run ning dynami c ARP inspect ion do not po ison the ARP ca che[...]

22-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 22 Configuring Dy namic A RP In sp ectio n Configuring Dynamic ARP Inspection Logging o f Dropped Packet s When th e sw itc h d r op s a p ac k e t , i t pl ace s an entry in the lo g b uffe r a nd th en g en er ates s ys tem m es sag es on a ra te-contr[...]

22-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 22 Config uring Dyn amic ARP I nspect ion Configur ing Dynam ic ARP Insp ect ion Dynamic ARP In spectio n Configuratio n Guidelin es These are the dynam ic ARP inspec tion con figu ration guidel in es: • Dynamic ARP inspectio n is an ingress sec ur[...]

22-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 22 Configuring Dy namic A RP In sp ectio n Configuring Dynamic ARP Inspection • The operati ng rate for the port cha nnel is cumulati ve across all the physical ports wi thin the channel. For ex ample, if y ou conf igure the port ch annel with an ARP r[...]

22-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 22 Config uring Dyn amic ARP I nspect ion Configur ing Dynam ic ARP Insp ect ion T o disable dynami c ARP insp ection, use the no ip arp inspection vlan vlan-range gl obal con figuration command. T o return the interf aces to an untr usted sta te, us[...]

22-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 22 Configuring Dy namic A RP In sp ectio n Configuring Dynamic ARP Inspection If you configure p ort 1 on Switch A as trusted, a secur ity hole i s created beca use both Swit ch A and Host 1 could be atta cked by e ither Swit ch B or Ho st 2. T o pre ven[...]

22-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 22 Config uring Dyn amic ARP I nspect ion Configur ing Dynam ic ARP Insp ect ion Step 5 ip ar p inspection f ilter arp-acl-name vlan vlan-range [ static ] Apply the ARP A CL to the VLAN. By defau lt, no defined ARP A CLs are ap plied to any VLAN. ?[...]

22-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 22 Configuring Dy namic A RP In sp ectio n Configuring Dynamic ARP Inspection T o remov e the ARP A C L, use the no arp acce ss-list global configurat ion comm and. T o remove the ARP A CL attach ed to a V LAN, use the no ip arp inspection f ilter a rp-[...]

22-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 22 Config uring Dyn amic ARP I nspect ion Configur ing Dynam ic ARP Insp ect ion T o re turn to the default ra te-limit conf iguratio n, use the no ip a rp inspect ion limit interf ace configurati on comm and. T o disable e rror recovery for dy nami[...]

22-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 22 Configuring Dy namic A RP In sp ectio n Configuring Dynamic ARP Inspection Be ginnin g in pri vileged EXE C mode, fo llo w these st eps to perf orm specif ic chec ks on inco ming ARP packet s. This procedure is option al. T o disable ch ecking , use [...]

22-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 22 Config uring Dyn amic ARP I nspect ion Configur ing Dynam ic ARP Insp ect ion If the log b u ffe r ov erflo ws, it mean s that a log ev ent does not fit in to the log buf fer , and the display for the show ip arp inspection l og pri v ile ged EXE[...]

22-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 22 Configuring Dy namic A RP In sp ectio n Displaying Dynamic ARP Inspection Information T o return to the default log b uf fer settings , use the no ip arp inspection log-b uffer { entrie s | logs } global configurati on com mand. T o return to the de [...]

22-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 22 Config uring Dyn amic ARP I nspect ion Display ing Dyna mic ARP Insp ectio n In format ion T o clear or display dynamic ARP inspection stati stics, use the pri vileged EXEC comma nds in T able 22-3 : For t he show ip arp inspec tion statisti cs c[...]

CH A P T E R 23-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 23 Configuring IGMP Sno oping an d MVR This cha pt er descr ibes how to configure Inte rnet G roup Ma na gement Pro tocol ( IGMP) snoo ping on th e switch, including an applic ation of lo cal IGM P snooping, M ulticast V LAN Registr ation (MV R). It[...]

23-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Underst an ding IGM P Snoopin g Understandin g IGMP Snooping Layer 2 switches can use IGMP snooping to constra in the flooding of multic ast traf f ic by dynamically conf iguring Layer 2 interfaces so that mult[...]

23-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Un derstanding IGMP Snooping IGMP Versions The sw itc h supp ort s IGM P V er si on 1, I GMP V ersion 2, a nd IGM P V ersion 3. Th ese version s a re interope rabl e o n t he sw itch. For exam ple , if I GMP snoo pi[...]

23-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Underst an ding IGM P Snoopin g Figur e 23-1 Initial IGM P Join M essag e Router A sends a ge neral qu ery t o t he swi tch, wh ich for wards the quer y t o por ts 2 throug h 5, w h i c h are all members of the[...]

23-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Un derstanding IGMP Snooping If anot her bla de server (f or exam ple , Blad e Ser ver 4 ) sends a n uns olic it ed I GMP join mes sag e for the same g roup ( Figu re 23-2 ), the CPU recei ves that messa ge and adds[...]

23-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Underst an ding IGM P Snoopin g Immediat e Leave Immedi ate Leave is only support ed on IGM P V ersion 2 hosts. The swi tch uses IG MP snoop ing Imme diate Leave to remove from the forwar ding ta ble an inte rf[...]

23-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping IGMP Snoop ing and Switch Sta cks IGMP snooping functi ons ac ross th e sw itch sta ck; th at is, I GMP contro l in forma tion fro m one swit ch is distrib uted to all switches in t he stac[...]

23-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Configuring IG MP Sn ooping Enabling or Disa bling IGM P Sn oopin g By default, IGM P snoopin g is globall y enab led on the swit ch. When glob ally en abled or disabled, i t is also enabled or disa bled in all[...]

23-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping Setting th e Snoo ping M ethod Multicast -capable ro uter port s are added to the forw arding table for e very Layer 2 multicast entry . The switch learn s of such port s through one of the[...]

23-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Configuring IG MP Sn ooping This example shows ho w t o configure IGMP sno oping to use CGMP packets as t he learni ng method : Switch# configure terminal Switch(config)# ip igmp snooping vlan 1 mrouter learn [...]

23-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping Beginn ing in pri vile ged EXEC mode, follo w the se steps to add a Layer 2 port a s a member of a multicast group: T o remove th e Layer 2 port fro m the multicast group, use the no ip ig[...]

23-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Configuring IG MP Sn ooping T o disable IGMP Immediate Lea ve on a VLA N, use the no ip igmp snooping vlan vlan- id immediate-lea ve glo ba l configur atio n c om mand. This exam ple sh ows how to enab le IG M[...]

23-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping Controlling the Multicast Floodin g Time After a TCN Event Y ou can contro l the time that multicast tr af fic is flooded after a TCN e vent b y using the ip igmp snooping tcn flood query [...]

23-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Configuring IG MP Sn ooping T o return to the defau lt query solici tation, use the no ip igmp snooping tcn query solicit global configurati on comm a nd. Disabling Multicast Flooding Dur ing a TCN Event When [...]

23-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping • When it is admi nistratively enable d, the I GMP snoop ing q uerier moves to the ope rationa lly disa bled state unde r these co nditi ons: – IGMP sn oop ing i s disa bled in the VLA[...]

23-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Displaying IG MP Sn ooping Informa tion This exam ple sh ows how to set th e IG MP sn oop ing q ue rier f e atur e to V ersion 2: Switch# configure terminal Switch(config)# no ip igmp snooping querier version [...]

23-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Displaying IGMP Snooping Information T o display I GM P snoo ping info rm ati on , u se on e or mo re o f t h e privilege d EX EC co mman ds in T able 23-4 . For more inf orm ati on abou t the keywords a nd opti on[...]

23-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Underst an ding Mu lticas t VLA N Registrat ion Understandin g Multicast VL AN Registrati on Multica st VLA N R egistrat ion (M VR) is desi gned f or ap pli cati ons usi ng wi de-sc ale d ep loymen t of multic[...]

23-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Underst anding Multicast VLAN Registration Using MVR in a M ulticast Television Application In a multi cast tele vision applica tion, a serv er connected to a blade sw itch can rec ei ve the multicas t stream . Mul[...]

23-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Conf igurin g MVR IGMP lea ve was recei ved. As soon as the leav e message is recei ved, the r ecei ver port is remo ved from multic ast group me mber ship, whi ch speeds up leave laten cy . Enable the Imm edi[...]

23-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Configuring MVR MVR Configuratio n Gu idelin es and Limitatio ns Foll ow these guidelines whe n conf iguring MVR: • Receiver ports can onl y be ac c ess ports; they cannot be tr unk p orts. Rece iv er ports on a [...]

23-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Conf igurin g MVR T o return t he switch to its defa ult settin gs, use the no mvr [ mode | group ip-ad dress | querytime | vlan ] global configurati on comm ands. This e xample sho ws ho w to enable MVR, con [...]

23-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Configuring MVR T o return the interface to its default setti ngs, use the no mvr [ ty pe | immediate | vl an vlan -id | gro up ] interf ace c onfig uration co mmands. This exam pl e sh ows how to co nfigure a por [...]

23-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Disp l ay in g MV R Info rma t ion Displaying MVR Information Y ou can display MVR information for th e switch or for a sp ecif ied inter face. Beg inning in priv ilege d EXEC mode, use th e comm ands in Ta b [...]

23-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Configuring IGMP Filtering and Throttling IGMP f iltering is applicab le only to the dynamic lea rning of IP multicast group add resses, not static configurat ion. W ith the IG MP thro ttli ng fea t ure, yo u ca n [...]

23-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Con figur ing IGM P Fil ter in g an d Thr o tt li ng • permit : Spec ifie s that m atching addr esses are p ermitted. • rang e : Specif ies a ra nge o f IP addre sses for the pr of ile. Y ou can enter a si[...]

23-27 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Configuring IGMP Filtering and Throttling Beginn ing in pri vileged EXEC mode, follo w these steps to apply an IGMP prof ile to a switch port: T o remov e a profil e from an interf ace, use the no ip igmp f ilter p[...]

23-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Con figur ing IGM P Fil ter in g an d Thr o tt li ng T o remo ve the m aximum group li mitation and ret u rn to the def ault of no maximum, use th e no ip igmp max-groups interf ace con fig urat ion comm and. [...]

23-29 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 23 Configuring IGMP Sno oping and M VR Displaying IGMP Filtering and Throttling Configuration T o return to the default a ction of dropping the report, u se the no ip igmp max- groups action interface configurati on comm a nd. Displaying IGMP Filtering [...]

23-30 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 23 Co nfiguring IGMP S noo ping and M VR Displaying IGMP Filterin g and Thro tt ling Co nfigurat ion[...]

CH A P T E R 24-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 24 Configuring IPv6 MLD Snooping Y ou can use Mu lticast Liste ner Disc ove r y (MLD) snooping to enabl e ef ficient d istrib ution of IP V ersion 6 (IPv6) multicast data to clients and router s in a switched network on the switch. Unless otherwise [...]

24-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 24 Configuring IPv6 MLD S nooping Underst an ding ML D Snoo ping MLD is a protoco l used b y IPv6 multica st routers to disco ver the pre sence of multic ast listeners ( nodes wishing to re cei ve IPv6 multi cast pack ets) on t he links th at a re dir[...]

24-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 24 Configuring IPv6 M LD Snooping Unders tanding MLD Snoop ing MLD Mess ages MLDv1 sup por ts t hree ty pes of m essage s: • Listen er Querie s are the equ i v alent of IGM Pv2 quer ies and are ei ther General Quer ies or Multicast -Address-Spec ific Q[...]

24-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 24 Configuring IPv6 MLD S nooping Underst an ding ML D Snoo ping Multicast Rou ter Discov er y Like IG MP snoopi n g, M LD s noopi ng perfo rm s m ultic ast r oute r di scovery , wit h these ch ar ac teri stics: • Ports c onfigured by a us er never [...]

24-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 24 Configuring IPv6 M LD Snooping Confi guring IPv6 MLD Sn ooping The numbe r of MASQs gene rated is configured by using the ipv6 mld snooping last-listener -query count global con figuration co mmand . The de fault numb er is 2. The MASQ i s sent to the[...]

24-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 24 Configuring IPv6 MLD S nooping Configur ing IPv 6 MLD Snoo pi ng Default MLD S noopi ng Configuration T able 24-1 shows the de fault M LD snoopi ng configura tion. MLD Snoo ping Co nfig uration Guidelines When configur ing MLD snoopi ng, consi der [...]

24-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 24 Configuring IPv6 M LD Snooping Confi guring IPv6 MLD Sn ooping Enabling o r Disab ling MLD Sn ooping By default, IPv 6 M LD snoopi ng is globa lly d i sable d on t he sw itch and e nabl ed on al l V LANs . Wh en MLD snoop ing is global ly disabl ed, i[...]

24-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 24 Configuring IPv6 MLD S nooping Configur ing IPv 6 MLD Snoo pi ng Configuring a Sta tic Multicast Group Hosts or La yer 2 port s normal ly join m ulticast groups dyna micall y , but you can also sta tically configure an IPv6 mu lticast address an d [...]

24-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 24 Configuring IPv6 M LD Snooping Confi guring IPv6 MLD Sn ooping Beginn ing in pri vileged EXEC mode, follo w these steps to add a multicast rou ter port to a VLAN: T o remove a multicast rou ter por t from the VL AN, use the no ipv6 mld snooping vlan v[...]

24-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 24 Configuring IPv6 MLD S nooping Configur ing IPv 6 MLD Snoo pi ng Configur ing MLD Sn oopi ng Querie s When Imme diate Le ave i s not en ab led an d a por t receives an MLD Done mess age, the switch gene rates MASQs on th e por t and sen ds them to[...]

24-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 24 Configuring IPv6 M LD Snooping Displaying MLD Snooping Information This exam ple shows how to set th e MLD sn oop ing gl obal r obustness variab le t o 3: Switch# configure terminal Switch(config)# ipv6 mld snooping robustness-variable 3 Switch(confi[...]

24-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 24 Configuring IPv6 MLD S nooping Display ing MLD Sn oopi ng Informa tion T able 24-2 Commands f or Displa ying MLD Snooping In for mation Comma nd Purpos e show ipv6 ml d sn ooping [ vla n vlan-i d ] Dis play the MLD snooping configuration in format[...]

CH A P T E R 25-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 25 Configuring Port-Base d Traffic Control This chap ter de scribe s ho w to conf igure th e port-b ased tr af fic contro l featur es on the swit ch. Unl ess otherwise noted, the term switch ref ers to a st andalo ne swit ch and to a switch stack. N[...]

25-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 25 Configuring Port-Based Traffic Co ntro l Configuring Stor m Control Storm cont rol use s one of th ese meth ods to measu re t raf f ic acti v ity: • Bandwidth as a perc entage of the tot al av ailable bandwidth of the port that can be used b y th[...]

25-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 25 Configuring Port -B ased Tra ffic Control Configuring Storm Control Y ou use the storm-control in terface configurati on comman ds to set the th reshold v alue for eac h traf fic type. Default Storm Control Configuration By default, unic ast, bro adca[...]

25-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 25 Configuring Port-Based Traffic Co ntro l Configuring Stor m Control Step 3 sto rm- contr ol { broadc ast | multic ast | unicast } le vel { le vel [ level-low ] | bps bps [ bps-low ] | pps pps [ pps-low ]} Configure broa dcast , m ult icast , or uni[...]

25-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 25 Configuring Port -B ased Tra ffic Control Configuring Protected Ports T o disable st orm con trol, use the no storm-control { broadcast | multicast | unicast } level interface configurati on comm a nd. This exa mple shows how to ena ble un icast stor [...]

25-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 25 Configuring Port-Based Traffic Co ntro l Configur ing Port Blocking Prot ecte d P or t Co n figurat ion Guidelines Y ou can co nfigure prote cted ports on a physic al int erface (fo r example, Gigabi t Ether net port 1) or an Ether Channel group (f[...]

25-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 25 Configuring Port -B ased Tra ffic Control Confi guring Port Secu rity Default Port Blocki ng Configuration The default is to not b lock floodin g of unkn own multicast and unicast traff ic out of a port, but to flood these pac kets to a ll ports. Bloc[...]

25-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 25 Configuring Port-Based Traffic Co ntro l Configuring Port Security These sect ions co ntain this co nceptu al and configura tio n infor mati on: • Understa ndin g Po rt Se curi ty , page 2 5-8 • Default Port Se curity Configur ation, pa ge 25-1[...]

25-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 25 Configuring Port -B ased Tra ffic Control Confi guring Port Secu rity If st icky le ar ning i s d i sab led , t he s tic ky s ecu re M AC address es ar e co nv erted t o dyn am ic sec ur e addresse s and a re r emoved fro m the ru nning configu ratio [...]

25-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 25 Configuring Port-Based Traffic Co ntro l Configuring Port Security Default Port Security Configuration T able 25-2 sho ws the default port securi ty conf iguration for an inter face. Port Secu rity Con figuration Guidelines Foll ow these g uidelin[...]

25-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 25 Configuring Port -B ased Tra ffic Control Confi guring Port Secu rity • A secu re po rt cann ot be a private-VLAN p ort. • When y ou enab le por t secu rity on an i nterface t h at i s also config ured w ith a v oice VLAN, set t he maxim um allow[...]

25-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 25 Configuring Port-Based Traffic Co ntro l Configuring Port Security Enabling a nd Con figuring Port S ecurity Beginn ing in pri vileged EXE C mode, follo w these steps to restrict input to an interfac e by limiting and identify ing MA C addresses o[...]

25-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 25 Configuring Port -B ased Tra ffic Control Confi guring Port Secu rity Step 7 switchport port-security violation { protec t | r estrict | shutdown | shutdown vlan } (Optiona l) Set the vi olatio n mode, the action to be taken when a sec urity violatio[...]

25-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 25 Configuring Port-Based Traffic Co ntro l Configuring Port Security Step 8 switchport port-security [ mac-addre ss mac-address [ vlan { vlan-id | { access | voice }}] (Optional) Ent er a secure MA C address for the interface . Y ou can use this com[...]

25-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 25 Configuring Port -B ased Tra ffic Control Confi guring Port Secu rity T o return the interf ace to th e def ault condition as n ot a secure port, use th e no switchport port-se curity interf ace co nf igurati on com mand. If you enter this comman d w[...]

25-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 25 Configuring Port-Based Traffic Co ntro l Configuring Port Security Switch(config-if)# switchport port-security mac-address 0000.0000.0003 Switch(config-if)# switchport port-security mac-address sticky 0000.0000.0001 vlan voice Switch(config-if)# s[...]

25-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 25 Configuring Port -B ased Tra ffic Control Confi guring Port Secu rity T o disab le port secu rity agin g for all secur e addresses on a por t, use the no switchport port-security aging tim e interfac e conf iguratio n c ommand. T o disabl e aging for[...]

25-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 25 Configuring Port-Based Traffic Co ntro l Displaying Port-Base d Traffic Cont rol Settings This exam ple shows how to con figure por t secu ri ty o n a PVLA N ho st and pr omisc uou s port s Switch(config)# interface gigabitethernet 1/0/8 Switch(co[...]

CH A P T E R 26-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 26 Configuring CDP This chapter describ es how to configure Cisco Discovery Protocol ( CDP) on the switch. Unless otherwise noted, the term switch ref ers to a st andalo ne swit ch and to a switch stack. Note For c omplete s yntax and u sage in form[...]

26-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 26 Co nfigu ri n g CDP Conf igurin g CDP CDP and Switch Stacks A switch stack appe ars as a si ngle swi tch in the netw ork. Therefor e, CDP disco v ers the s witch stac k, not the individual stack mem bers. Th e switch stac k sends CDP message s to [...]

26-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 26 Configuring CDP Configuring CDP Use the no form of the CDP commands to return to the de fault settings . This e xample sho ws how to confi gure CDP charac teristic s. Switch# configure terminal Switch(config)# cdp timer 50 Switch(config)# cdp holdtime[...]

26-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 26 Co nfigu ri n g CDP Conf igurin g CDP Disabling an d Enab ling CDP on a n Interfac e CDP is enabled by def ault on all supported inter faces to send and to recei ve CDP informa tion. Beginning in privileged E XEC mo de , fol low these s teps to d [...]

26-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 26 Configuring CDP Monitoring and Maintaining CDP Monitoring and Maintaining CDP T o monitor a nd m ainta in CD P on yo ur device, u se one o r mor e of the p rivileged E XEC co mm an ds in T able 26-2 . T able 26-2 Commands for Displ a y ing CDP Inf or [...]

26-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 26 Co nfigu ri n g CDP Monito rin g and Mai nt aining CDP[...]

CH A P T E R 27-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 27 Configuring LLDP and LLDP-MED This c hapt er d escri b es how to c onfigure the Li nk Laye r Discovery Pr otoc ol ( LL DP) an d LLD P Medi a Endpoint Disco very (LLDP-MED) on the switch . Unless otherwise note d , the term switch refers to a stan[...]

27-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 27 Configur ing LLDP and LLDP-ME D Underst an ding LLD P and LLDP-MED LLDP sup ports a set of att ributes that it uses to discover neighbo r devices. Thes e a tt rib ute s con tain ty p e, length, and v alue descriptions and are referred to as TL Vs. [...]

27-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 27 Configuring LL DP and LLD P -M ED Configuring LLDP and LLDP-MED • Locat ion TL V Pro vides locatio n information fro m the switch to the endpoin t devic e. The location TL V can send this information: – Civ ic location infor mation Pro vides the c[...]

27-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 27 Configur ing LLDP and LLDP-ME D Configur ing LLDP a nd L LDP-M ED Configuring LLDP Characteristics Y ou can co nfigure the fr eque ncy of LLDP updat es, th e amount of time to ho ld the informat ion befo re discardin g it, and the initi alization d[...]

27-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 27 Configuring LL DP and LLD P -M ED Configuring LLDP and LLDP-MED Disabling an d Enab ling LLDP Glo bally LLDP is e nabled b y def a ult. Beginning in privileged E XEC mo de , fol low these s teps to g loba lly d is able L L DP: Beginn ing in priv ilege[...]

27-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 27 Configur ing LLDP and LLDP-ME D Configur ing LLDP a nd L LDP-M ED Beginn ing in pri vileged EX EC mode, follo w these steps t o enable LLDP on an interface when it has been disabled : This e xample sho w s how to enable LLDP on an interf ace. Switc[...]

27-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 27 Configuring LL DP and LLD P -M ED Monitoring and Maintaining LLDP and LLDP-MED Beginn ing in p ri vileged EXE C mode, f ollo w these steps to enable a TL V on an inter face: This exampl e shows ho w to enable a TL V on an interface when it has bee n d[...]

27-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 27 Configur ing LLDP and LLDP-ME D Monito ring and Ma i n t a in ing LLD P and L LDP-M ED[...]

CH A P T E R 28-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 28 Configuring UDLD This c hap ter d esc rib es how to configu re t he U n iDire ctio nal Lin k D et ecti on (UD LD) prot ocol o n th e switch. Un less otherwise noted , the term switch refers to a sta ndalone switch and to a swit ch sta ck. Note Fo[...]

28-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 28 Co nfiguring UDLD Underst andin g U DLD In norm al mode, UDL D detects a unid irectio nal link when f iber strand s in a f iber -optic por t are misconnecte d and the Layer 1 mechanisms do no t detect this mi sconnection. If th e ports are co nnect[...]

28-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 28 Configuring UD LD Configur ing UDLD If the dete ction window ends and no valid reply message is received, the link mi ght shut down, dependi ng o n t h e UDL D m ode . Whe n U DLD is i n n orm al mo de, t h e l ink mi ght be consi d ered undete rmi ne[...]

28-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 28 Co nfiguring UDLD Conf igu rin g UDLD Default UDLD Configuration T able 28-1 shows the de fault U DLD configur ation. Configuratio n Guidelines These ar e the U DLD con figuration gui deline s: • UDLD is not supp orted on A T M ports. • A UDLD-[...]

28-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 28 Configuring UD LD Configur ing UDLD Enabling UDL D Globally Beginn ing in pri vileged EXEC mode, follo w these steps to enable UDLD in the aggr essiv e or normal mode a nd to se t th e co nfigurab le m essag e tim er o n all fiber-optic p orts on the [...]

28-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 28 Co nfiguring UDLD Conf igu rin g UDLD Enabling UDL D on an Inte rface Beginn ing in p ri vileg ed EXEC mode, fo llo w thes e steps ei ther to enable U DLD in t he aggressi ve or normal m ode o r to disa ble U DL D on a po rt: Resetting an Interface[...]

28-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 28 Configuring UD LD Displaying UDLD Status Displaying UDLD Status T o display the UDLD status for the specif ied port or for all port s, use the show udld [ interface-id ] pri vileged EXEC comman d. For detaile d informat ion about the f ields in the co[...]

28-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 28 Co nfiguring UDLD Displa ying U DLD Sta tus[...]

CH A P T E R 29-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 29 Configuring SPAN and RSPAN This chap ter de scribe s ho w to conf igure Switc hed Port Analyzer ( SP AN) and Remot e SP AN (RSP AN) on the switch. Unless otherwise noted, th e term swit ch refers to a standal one switch an d to a switch s tack. N[...]

29-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Understan din g SPA N and RSPAN These secti ons cont ain this co nceptu al in forma tion: • Local SP AN, page 29- 2 • Remo te SP AN, page 29-3 • SP AN and RSP AN Concept s and T ermi nol ogy , pa ge 29-4 • SP AN [...]

29-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 29 Configuring SPAN and RSPAN Understandi ng SPAN and R SPAN Figur e 29-2 Example o f Local SP AN Configur ation on a S witch Stack Remote S PAN RSP AN suppo rt s s ource p orts, sourc e V LAN s, a nd dest ination p orts on differen t sw itches (or d iff[...]

29-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Understan din g SPA N and RSPAN Figur e 29-3 Example o f RSP AN Configur ation SPAN and RS PAN Conc epts a nd Terminology This secti on descri bes conce pts and te rminology associate d with SP AN and RSP AN co nfigurati[...]

29-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 29 Configuring SPAN and RSPAN Understandi ng SPAN and R SPAN An RSP AN source session is very similar to a local SP AN session, ex cept for wher e the pack et stream is directe d . In an RSP AN source session, SP AN pa ckets a re relabeled with th e RSP [...]

29-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Understan din g SPA N and RSPAN Featur es t hat ca n ca use a p acket to be d roppe d d uring r eceive proce ssing have no effect on ingr ess SP AN ; t he d esti nat ion por t re ceives a copy of the pac ket even if t he[...]

29-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 29 Configuring SPAN and RSPAN Understandi ng SPAN and R SPAN A sourc e port has the se ch arac teri stic s: • It can be m onitored in multiple SP AN sessions. • Each s our ce p ort can be configu red w it h a di rec tio n (i ngr ess, egr ess, o r bot[...]

29-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Understan din g SPA N and RSPAN Destination Port Each local SP AN session or RSP AN destination session must have a destination port (a lso called a monitoring po rt ) th at receives a copy of traff ic fro m the sourc e [...]

29-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 29 Configuring SPAN and RSPAN Understandi ng SPAN and R SPAN RSPAN V LAN The RSP AN VLAN carries SP AN traf fic be tween RSP AN sourc e and d estination se ssions. It h as these special ch aracter istics: • All traf fi c in th e RSP AN VLAN i s alway s[...]

29-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Configuring SPAN and RSPAN A physical port tha t belongs to an Ethe rChannel group can be con figured as a SP A N source port and still be a part of the Eth erChannel . In this case, data from the physic al port is moni[...]

29-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 29 Configuring SPAN and RSPAN Config uring SPAN a nd RS PAN Default SPAN and R SPAN Configura tion T able 29-1 shows the de fault SP AN and R SP AN configuration . Configuring Local SPAN These sec tions co ntain this configura tion info rmat ion: • SP[...]

29-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Configuring SPAN and RSPAN • Y ou can limi t SP AN tra f fic to specific VLANs by using the filter vl an keyword. If a trunk po rt is being monitored , only traff ic on the VLANs specif ied with this keyw o rd is moni[...]

29-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 29 Configuring SPAN and RSPAN Config uring SPAN a nd RS PAN T o delet e a SP AN session, use the no monitor session sessi on_numb er global c onfiguration comma nd. T o remove a source o r d estina ti on por t or V LA N fr om the SP AN sessio n, use t h[...]

29-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Configuring SPAN and RSPAN This example shows how to remov e any e xisting configuration on SP AN session 2, configure SP AN session 2 to moni tor received traff ic on all port s belongin g to VLAN s 1 through 3, an d s[...]

29-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 29 Configuring SPAN and RSPAN Config uring SPAN a nd RS PAN T o delet e a SP AN session, use the no monitor session sessi on_numb er global c onfiguration comma nd. T o remove a source o r d estina ti on por t or V LA N fr om the SP AN sessio n, use t h[...]

29-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Configuring SPAN and RSPAN T o monitor all VLANs on the trunk port, use the no monitor session session_nu mber filter gl obal configurati on comm a nd. This example shows how to remov e any e xisting configuration on SP[...]

29-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 29 Configuring SPAN and RSPAN Config uring SPAN a nd RS PAN • Y ou can apply a n output ACL to RSP AN traf fic to select iv ely filte r or monitor spe cifi c packe ts. Specify these A CLs on the RSP AN VLA N in the RSP AN source switches . • For RSP[...]

29-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Configuring SPAN and RSPAN T o remov e the remo te SP AN character istic from a VL AN and con v ert it ba ck to a normal V LAN, use the no remote-span V LAN c on figurat ion co mm an d. This exam ple sh ows how to crea [...]

29-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 29 Configuring SPAN and RSPAN Config uring SPAN a nd RS PAN T o delete a SP AN session, use the no monitor session sess ion_num ber g loba l c onfigurati on c om mand. T o remove a source port or VL A N from the SP AN session, use the no monitor session[...]

29-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Configuring SPAN and RSPAN T o monito r all VLA Ns on the trun k port, use the no monitor session session_n umber filter vlan globa l configurati on comm a nd. This exam pl e shows how to remove any existing c onfigurat[...]

29-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 29 Configuring SPAN and RSPAN Config uring SPAN a nd RS PAN T o delet e a SP AN session, use the no monitor session sessi on_numb er global c onfiguration comma nd. T o remove a destination por t f rom t he SP AN session, use th e no monito r session se[...]

29-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Configuring SPAN and RSPAN T o delete an RSP AN session, use the no monitor session session_number globa l configuration comman d. T o remove a destinati on port from the RSP A N session, use the no monit or session ses[...]

29-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 29 Configuring SPAN and RSPAN Displaying SPAN and RSPAN Sta tus Displaying SPAN and RSPAN Status T o display the current SP AN or RSP A N configuration , use the show monitor u ser E XEC c ommand. Y ou can also use t he show running-conf ig privileged E[...]

29-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 29 C onfiguring SPAN and RSPAN Display ing SPAN and RSPAN Status[...]

CH A P T E R 30-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 30 Configuring RMON This c hapt er d escri bes how to c onfigure Re mo te N etwork Mo nito ring ( RMON ) on t he sw itch . Unless otherwise noted, the term switch ref ers to a st andalo ne swit ch and to a switch stack. RMON i s a st anda rd m onit [...]

30-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 30 Co n figuring RM ON Conf igu rin g RMON Figur e 30-1 Remote Mo nito r ing Ex ample The switc h supports t hese RM ON groups (defined in RFC 1757) : • Statistics ( RMON group 1)—Collects E thernet statistic s (includi ng Fast Ethernet and Giga b[...]

30-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 30 Configuring RMON Confi guring R MON Default RMON Configuration RMON is disa bled by default ; no alarms or events are configured . Configuring R MON Alarms a nd Events Y ou ca n co nfigure you r s wi tc h for RM ON by usi ng t he com ma nd -li ne i nt[...]

30-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 30 Co n figuring RM ON Conf igu rin g RMON T o disable an al arm, use th e no rm on al arm number glo bal c on figurati on c omma nd on ea ch alarm you configured . Y ou c anno t di sabl e at once a ll t he a la rms tha t yo u c onfigure d. T o di sab[...]

30-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 30 Configuring RMON Confi guring R MON Collectin g Group Hist ory St atistics on an Interface Y ou must first c onfigure RM O N a lar ms an d events to displ ay co llec tio n inf orma tio n. Beginn ing in pri vileged EXE C mode, follo w these steps to co[...]

30-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 30 Co n figuring RM ON Displa ying R MON Sta tus T o disabl e the collecti o n of grou p Ethe rnet statis tics, use th e no rmon collec tion stats index inte rface configurati on comm a nd. This e x ample sho ws how to collec t RMON statistic s for th[...]

CH A P T E R 31-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 31 Configuring System Message Logg ing This ch apter d escrib es how to configure s ystem me ssage l ogging on the s witch.U nless oth erwise noted, the term switc h refers to a stan dalo ne switch and to a switch stac k. Note For c omplete s yntax [...]

31-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 31 Configuri ng System Me ssage Logging Configur ing System Mes sage Logg ing Y ou can set the se verity le vel of the messages to control the type of messa ges display ed on th e conso les and ea ch o f th e dest inati on s. Y ou c an tim e-st amp l [...]

31-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 31 Configuring Sys te m Message L ogging Co nfiguring System Message Logging T able 31-1 describes the elemen ts of syslog messag es. This exam ple sh o ws a p artial s witch system m essage for a stack master and a stack member (hos tname Switc h-2 ): 0[...]

31-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 31 Configuri ng System Me ssage Logging Configur ing System Mes sage Logg ing *Mar 1 18:46:11: %SYS-5-CONFIG_I: Configured from console by vty2 (10.34.195.36) 18:47:02: %SYS-5-CONFIG_I: Configured from console by vty2 (10.34.195.36) *Mar 1 18:48:50.48[...]

31-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 31 Configuring Sys te m Message L ogging Co nfiguring System Message Logging Disabling the lo gging proce ss ca n slo w down the switch because a p rocess m ust w a it until the messages are writte n to the console b efore c ontinuing. When the loggin g [...]

31-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 31 Configuri ng System Me ssage Logging Configur ing System Mes sage Logg ing The logging buffered g loba l configur ation comm and c opies l ogging messa ges to a n inte rnal buffer . The b uf fer is circular , so ne wer messages o verwri te older me[...]

31-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 31 Configuring Sys te m Message L ogging Co nfiguring System Message Logging Beginning i n privileged E X EC mo de , follow these s teps to c on figure s ynchr onou s log ging . This procedur e is optional. T o disable synchron ization of unsolicite d me[...]

31-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 31 Configuri ng System Me ssage Logging Configur ing System Mes sage Logg ing Enabling a nd Disab ling Time S tamps on Log M essages By default, log message s are not time-stam ped. Beginning in privileged EX E C mode, follow these st eps to en able t[...]

31-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 31 Configuring Sys te m Message L ogging Co nfiguring System Message Logging T o disab le sequ ence num bers, use t he no service sequence-number s global configurat ion comm and. This example shows part of a logging displa y with sequenc e numbe rs enab[...]

31-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 31 Configuri ng System Me ssage Logging Configur ing System Mes sage Logg ing T able 31-3 des cribe s the le vel keywords. It a lso l ists the cor respo nding U NIX sysl og definitions f rom the most se vere le vel to the least se ve re le vel. The s[...]

31-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 31 Configuring Sys te m Message L ogging Co nfiguring System Message Logging Beginn ing in p ri vilege d EXEC m ode, follo w these st eps to ch ange the le ve l and hi story table si ze defaults. T his proc edure i s optiona l. When the histor y table i[...]

31-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 31 Configuri ng System Me ssage Logging Configur ing System Mes sage Logg ing Beginning i n privileged EX EC mode , follow th ese s teps t o ena ble con figurat ion loggi ng: This e xample sho ws how to enable the conf iguratio n-change logger an d t[...]

31-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 31 Configuring Sys te m Message L ogging Co nfiguring System Message Logging Log in as root , a nd perf orm thes e st eps: Note Som e recent versi ons of UNIX syslog da emons no longer ac cept by default syslog pac kets from the networ k. If this is the[...]

31-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 31 Configuri ng System Me ssage Logging Display ing the Log gi ng Configur ation T o remov e a syslog serv er, u se the no logging host global configuration comm and, a nd spe cify the syslog server IP address. T o disable logging to syslog servers, [...]

CH A P T E R 32-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 32 Configuring SNMP This chapt er describ es ho w to configure the Sim ple Network Mana gement Prot ocol (SNM P) on the switch. Un less otherwise noted , the term switch refers to a sta ndalone switch and to a swit ch sta ck. Note For c omplete s yn[...]

32-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 32 Configuring SNMP Underst an ding SNM P These secti ons cont ain this co nceptu al in forma tion: • SNMP V ersions, pa ge 32-2 • SNMP Manage r Functions , page 32- 3 • SNMP Agent Functions, page 32 -4 • SNM P Co mmuni ty Str ings , p age 32-[...]

32-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 32 Configuring SNM P Underst andin g SNMP T able 32-1 identif ies the characteristics o f the dif feren t combinations of secur ity models and le vels. Y ou must configur e the SNMP age nt to use the SNMP versio n supporte d by the manageme nt stati on. [...]

32-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 32 Configuring SNMP Underst an ding SNM P SNMP Agen t Fun ctions The SNMP a gent respond s to SNMP manager requests as follows: • Get a MIB v a riable—Th e SNM P agen t be gins this function in response to a requ est from the NM S. The agent r etr[...]

32-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 32 Configuring SNM P Underst andin g SNMP SNMP Notifications SNMP allo ws the switch to send notif ications to SNMP m anagers w hen particu lar e vents occu r . SNMP notifications ca n be sent as tr aps or inform request s. In com mand synt ax, un less t[...]

32-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 32 Configuring SNMP Conf igurin g SNMP Configuring SNMP These sec tions co ntain this configura tion info rmat ion: • Default SNMP Con figuration, page 32-6 • SNMP Configuration Gu idelines, page 32-6 • Disablin g the SNMP Agent, page 32-7 • C[...]

32-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 32 Configuring SNM P Configuring SNMP When configur ing SNMP , fo llow these guidel ines: • When configuring an SNMP group , do not specif y a notify view . The snmp- s erver h o st global configurat ion c omma nd au toge ne rat es a no tif y v iew for[...]

32-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 32 Configuring SNMP Conf igurin g SNMP Configuring Community Strings Y ou use t he SN MP com mun ity str ing to de fine the rela tio nship bet wee n the SNM P mana ge r a nd the agent. The co mmunity string acts like a password to perm it access to th[...]

32-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 32 Configuring SNM P Configuring SNMP Note T o disabl e acce ss for an SNM P commu nity , set th e comm unity string fo r that communi ty to t he null string (do not enter a value for th e communi ty string ). T o remove a specif ic community str ing, us[...]

32-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 32 Configuring SNMP Conf igurin g SNMP Step 3 snmp- server grou p gr o upn ame { v1 | v2c | v3 { auth | noauth | priv }} [ rea d re a dv ie w ] [ write writevi ew ] [ notify notifyvie w ] [ ac cess access -list ] Configure a ne w SNMP gro up on the r[...]

32-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 32 Configuring SNM P Configuring SNMP Configuring SNMP Notifications A trap manag er is a mana gement sta tion that re cei ves and pro cesses tr aps. T raps are sy stem aler ts that the switc h gener ates whe n cert ain events occu r . By de fault, no t[...]

32-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 32 Configuring SNMP Conf igurin g SNMP cluster Generate s a trap when th e cluster conf iguration chang es. conf ig Generate s a trap for SNMP conf igurati on changes. copy-co nf ig G enerat es a trap for SNMP copy configuration ch ange s. entity Gen[...]

32-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 32 Configuring SNM P Configuring SNMP Note Th ough visi ble in t he co mmand- line help stri ngs, th e cpu [ threshold ] keyword i s not s upporte d. Though visible in the c ommand- line help strings, the cpu [ threshold ], fru-ctrl , insertion , and re[...]

32-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 32 Configuring SNMP Conf igurin g SNMP The snmp-serv er host co mmand speci fies which hosts r ecei ve the notif ications. T he snmp-serv er enab le trap command global ly enables the mech anism f or the speci f ied notif ication (f or trap s and inf[...]

32-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 32 Configuring SNM P Configuring SNMP T o re mov e the specif ied host from rece i ving traps, use the no sn mp - server ho s t host global configurat ion c omma nd. The no snmp-serv er host comm and with no keyw ords di sabl es tra ps, b ut not inform [...]

32-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 32 Configuring SNMP Conf igurin g SNMP SNMP Examp les This example shows ho w to enable all versions of SN MP . The co nfiguration permits any SNMP man ager to access all objects with read-only permissions usin g the community string public . This co[...]

32-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 32 Configuring SNM P Disp la yin g S N M P S t at us This exa mple shows ho w to send Entity MIB traps to the host cisco.co m . The co mmunity string is restrict ed. The f irst line enable s the switch to send Entity MIB traps in addition to any traps p[...]

32-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 32 Configuring SNMP Displaying SNM P Status[...]

CH A P T E R 33-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 33 Configuring Embedded Event Manager This ch apte r descr ibes how to use the em bedd ed event manag er (EEM ) to mo nitor and m anage t he swi tch and ho w to configu re it. Unless otherwise noted, the ter m switch refers to a standalone switch or[...]

33-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 33 Configuri ng Embedded Ev ent Manag er Underst an ding Emb edded Ev en t Manag er Figur e 33-1 Embedded Ev ent Manage r Cor e Event Detect ors These secti ons cont ain this co nceptu al in forma tion: • Event Dete ctors, pa ge 33-2 • Embedde d [...]

33-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 33 Configuring Em be dded Ev ent Manage r Underst anding Em bedde d Event Manag er EEM all ow s these e ve nt dete ctors: • Applic ati on-spe c ific event detec tor – Al lows any EE M po l icy to p ublis h an event. • IOS CLI event detec tor – Ge[...]

33-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 33 Configuri ng Embedded Ev ent Manag er Underst an ding Emb edded Ev en t Manag er Embedded Event Man ager Actions EEM pr ovides ac tio ns that oc cu r in r esponse to a n event. EE M su ppor ts t he se a ctio ns : • Modify ing a name d counte r .[...]

33-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 33 Configuring Em be dded Ev ent Manage r Con figuring Embe dded Eve nt Manag er • Cisco b uilt-in var iables (a vailable in EE M applets) Defined by Cisco and ca n be read -on ly or rea d-write. T he read -only variables ar e set by the syste m before[...]

33-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 33 Configuri ng Embedded Ev ent Manag er Configur ing Embedde d Event Man ager This example show s the output for EEM when one of the fields specified by an SNMP object ID crosses a defined threshol d: Switch(config-applet)# event snmp oid 1.3.6.1.4.[...]

33-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 33 Configuring Em be dded Ev ent Manage r Displayin g Embedded Event Man ager In formati on 4 _config_cmd1 interface Ethernet1/0 5 _config_cmd2 no shut Th i s ex amp l e s h ow s a CRON timer en viron ment variable, which is assigned by the software, to [...]

33-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 33 Configuri ng Embedded Ev ent Manag er Display ing Embedde d Event Man ager Inform ation[...]

CH A P T E R 34-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 34 Configuring Network Security with ACLs This c hapter d escrib es how to c onfigure networ k sec urity on the swi tch by us in g ac cess cont rol lists (A CLs), whic h in commands and tables ar e also refer red to as acce ss lists.Un less ot herwi[...]

34-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Underst andin g ACLs Y ou configure ac cess lists on a rout er or Layer 3 swit ch to provide basic security fo r your network. If you do not c onfigure A CLs, all packets passi ng throug h the swit ch could[...]

34-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Unde rsta ndi n g AC Ls • When an output router A CL and input p ort A CL ex ist in an SVI, incomin g pack ets recei ved on the ports to which a por t A CL is applied are f iltered b y the port A CL. Outgoin[...]

34-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Underst andin g ACLs Figur e 34-1 Using ACLs to Control T ra ff ic t o a Netw ork When you apply a port A CL to a trunk port, the A C L filters tra ff ic on all VLANs present on the trunk port. When you app[...]

34-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Unde rsta ndi n g AC Ls As w ith p ort A CLs, t he sw itch exam ines A CLs ass oci ated wi th f eatur es co nfigur ed on a given in terface . Howe ver, router ACLs are su pport ed i n bo th dir ec tions. As pa[...]

34-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Underst andin g ACLs Some ACEs do not chec k Layer 4 info rmati on and th eref ore can be appl ied to al l packet f ragment s. A CEs that do test Lay er 4 inform ation cannot b e applied in the stand ard ma[...]

34-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring IPv4 ACLs • If pac kets m ust b e forwa rded by softwa re f or any rea son ( for exa mple , not enoug h h ar dware resourc es), the ma ster switc h forwards th e packets only after app lying ACLs[...]

34-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Conf igu ring I Pv4 ACLs Creating Stan dard and Exten ded IPv4 AC Ls This sec ti on de scr ibes IP ACLs. An ACL is a seque nti al co llecti on of pe rm it and de ny co ndit ions. One by one, the switch tes [...]

34-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring IPv4 ACLs Note In addit ion to numb ered standa rd an d e xte nded A CLs, yo u can also cr eate s tand ard a nd e xt ende d nam ed IP A CLs by u sing the sup por ted nu mbers. Tha t i s, the n ame [...]

34-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Conf igu ring I Pv4 ACLs Creating a Numbered Standard ACL Beginning in privileged EX EC mode, fol low these steps to cr eate a nu mbered st andard ACL: Use th e no access-list access-list-numbe r glo bal c[...]

34-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring IPv4 ACLs The switch always re writes the order of standard access lists so th at entries with host matches and en tries with mat ches having a do n’t car e mask of 0.0.0.0 are mo ved to the top[...]

34-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Conf igu ring I Pv4 ACLs Beginn ing in pri vileged EXEC mode, follo w these steps to create an ex tended A CL: Command Purpo se Step 1 co nfi g ure terminal Enter glob al configura tion mode . Step 2a acce[...]

34-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring IPv4 ACLs or access-list access- list-num ber { deny | permit } pr ot ocol any any [ prec edence pr ecedence ] [ tos tos ] [ fragmen ts ] [ log ] [ log-input ] [ time-r ange ti me-range-na me ] [ [...]

34-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Conf igu ring I Pv4 ACLs Use the no a ccess-lis t a ccess-list-number global conf igurat ion command to delete the entire access list. Y ou ca nnot del ete in dividual ACEs from n umb ered a cce ss li sts.[...]

34-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring IPv4 ACLs After c reating a numbered e xtended A CL, you can a pply it to terminal lin es (see th e “ Applying an IPv4 A CL to a T er m inal Li ne” sec tion on page 34 -19 ), to interf aces (s[...]

34-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Conf igu ring I Pv4 ACLs Beginning in privileged EXEC mo de, foll ow these steps to crea te a standa rd A C L using na mes: T o remov e a named stan dar d A CL, use the no ip access-list standard name g l [...]

34-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring IPv4 ACLs When you ar e creat ing standa rd extende d A CLs, remembe r that, by default , the en d of the ACL contains an implicit de ny statement f or everything if it did no t find a mat ch befo[...]

34-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Conf igu ring I Pv4 ACLs Beginn ing in privile ged EXEC mode, follo w these steps to co nfigure a ti me -range para meter for an A CL: Repeat the steps if you ha ve multiple items tha t you want in ef fect[...]

34-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring IPv4 ACLs This exampl e uses name d A CL s to perm it and deny the sa me traff ic. Switch(config)# ip access-list extended deny_access Switch(config-ext-nacl)# deny tcp any any time-range new_year[...]

34-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Conf igu ring I Pv4 ACLs Beginning i n privileged EX EC mod e, fo llow these st eps t o restri ct i ncom ing a nd ou tgoing co nne ction s betwee n a vi rtua l t erm in al lin e an d t he ad dre sses i n a[...]

34-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring IPv4 ACLs Beginn ing in p ri vilege d EXEC m ode, follo w these st eps to co ntrol acce ss to an interf ace: T o remov e the specif ied access group, use the no ip access- group { access-list- num[...]

34-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Conf igu ring I Pv4 ACLs Hardware and Softw are Treatment of IP ACLs A CL processing is primar ily acco mplished in hardw are, b ut requires f orward ing of some tr af f ic flo ws to the CPU for so ftwar e[...]

34-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring IPv4 ACLs Use rout er ACLs to do this in one of two ways: • Creat e a stan dard ACL, and filter traffic comi ng to the s erver from port 1. • Create an ex tended A CL, and filte r traf fic com[...]

34-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Conf igu ring I Pv4 ACLs Numbered ACLs In this e xampl e, netw ork 36.0.0.0 is a Class A netw ork whose second oc tet specif ie s a subnet; th at is, its subnet ma sk is 255.2 55.0.0 . The thi rd and fou r[...]

34-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring IPv4 ACLs Named ACLs Thi s exa mple cr eates a sta nda rd A CL name d internet_f ilter an d an exten ded ACL name d marketing _gr oup . The internet_filter A CL allows all traffic from the sour ce[...]

34-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Conf igu ring I Pv4 ACLs In this e xampl e of a number ed A CL, th e W inter a nd Smith serv ers ar e not allo wed to br ow s e the web: Switch(config)# access-list 100 remark Do not allow Winter to browse[...]

34-27 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Creat ing N ame d MA C Ext e nde d AC L s This i s a an exampl e of a lo g f or a n exte nded ACL: 01:24:23:%SEC-6-IPACCESSLOGDP:list ext1 permitted icmp 10.1.1.15 -> 10.1.1.61 (0/0), 1 packet 01:25:14:%SE[...]

34-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Creating Nam e d MAC Exten ded ACL s Use the no mac access-list extended name global conf iguration co mmand to dele te the entir e A CL. Y ou can a lso d ele te in dividual ACEs from n am ed M AC extended[...]

34-29 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Creat ing N ame d MA C Ext e nde d AC L s Applying a MAC ACL to a La yer 2 Interfa ce After y ou cr ea te a M AC A C L, y ou ca n ap pl y it t o a La ye r 2 i n terfa ce t o filter non -IP t ra ff ic c oming [...]

34-30 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Configur ing VLA N Maps Configuring VL AN Ma ps This section descr ibes ho w to config ure VLAN maps, which is the only w ay to control f iltering within a VLA N. V LAN ma ps h ave no direct ion. T o filte[...]

34-31 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring VLAN Maps VLAN Map C onfiguration Gu idelines Foll ow these guidelines whe n conf iguring VLAN maps: • If th ere is n o A CL conf igured to den y tra ff ic on an inte rf ace and no VLAN map is c[...]

34-32 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Configur ing VLA N Maps Creating a VL AN Map Each VLA N map consi sts of an ordered ser ies of entri es. Beginning i n privileged EXEC mode, follow thes e step s to crea te, ad d to, or de lete a VLAN map [...]

34-33 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring VLAN Maps This exampl e shows how to c rea t e a V LAN map to pe rmit a packet. ACL ip2 permits UDP pack ets and any pack ets that m atch the ip2 A C L are f orw ar ded . In th is map , an y IP pa[...]

34-34 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Configur ing VLA N Maps Switch(config-ext-macl)# permit any any vines-ip Switch(config-ext-nacl)# exit Switch(config)# vlan access-map drop-mac-default 10 Switch(config-access-map)# match mac address good-[...]

34-35 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Configuring VLAN Maps Denying Access to a Server on Anothera VLAN Y ou can r estrict ac cess to a se rver on an other VLA N. For example , server 10.1. 1.100 in VLAN 10 n eeds to ha v e access d enied to thes[...]

34-36 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Using VL AN Ma ps wi th Rout er AC Ls Using VLAN Maps with Router ACLs T o access co ntrol both bridged an d routed tra ff ic, you can use VLAN ma ps only or a com binatio n of router ACLs and V LAN map s.[...]

34-37 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Using VLAN Maps with Router ACLs • A void including Laye r 4 information in an A CL; adding this informati on complicates the mer ging process. The be st me rge results a re obtained if t he ACLs are filter[...]

34-38 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Using VL AN Ma ps wi th Rout er AC Ls Figur e 34-6 Applying A CLs on Br idged P ack ets ACLs and Routed Packe ts Figure 34-7 sho ws ho w A CLs are applied on r outed pack ets. F or rout ed pack ets, the A [...]

34-39 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 34 Configuring Net work Securi t y with ACLs Displayin g IPv4 ACL Configurat ion ACLs and Multicast Pa ckets Figure 34-8 shows ho w A CLs a re ap plied o n pa ck ets that are replic ated f o r IP m ul tica stin g. A m u ltica st packet be ing ro ut ed h[...]

34-40 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 34 Con figuring Network Sec urity with AC Ls Display ing IPv4 ACL Co nfigurat ion Y ou can also disp lay info rmation a bout VLAN access ma ps or VLA N filters. Use t he pri vileged EXEC comm ands in Ta b l e 3 4 - 3 to display VLA N map inf ormation[...]

CH A P T E R 35-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 35 Configuring IPv6 ACLs When the switch is running the adv anced IP serv ices feature set, you can f ilter IP V ersion 6 (IPv6) traf fic by cre ating IPv6 access control lists (A CLs) and applying them to interf aces similarly to the way that you c[...]

35-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 35 Configuring I Pv6 ACLs Underst andin g IPv 6 ACLs Understandin g IPv6 ACLs A swit ch ru nnin g the ad vanced IP ser vi ces feat u re se t su pport s two type s of IPv6 ACLs: • IPv6 rout er ACLs are suppor ted on outboun d or inbound traffic on L[...]

35-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 35 Configuring IPv 6 ACLs Understanding IPv6 ACLs Supporte d ACL F eatures IPv6 A CLs on the switch hav e these characteristics: • Fragme nted frame s (t he fragments keyword as in IPv4) are supporte d. • The sa me statis tic s su ppo rted in IPv4 ar[...]

35-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 35 Configuring I Pv6 ACLs Conf igu ring I Pv6 ACLs If a ne w switch tak es ove r as stack mas ter , it distrib utes the A CL conf igur ation to all stack membe rs. The member switche s sync up the configur ation distributed by the new stack master an[...]

35-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 35 Configuring IPv 6 ACLs Configuring IPv6 ACLs • Y ou canno t use MA C A CL s to filter IPv6 fra mes. MAC A CLs can onl y filter non-IP fr ames. • If the hard ware me mory is full, for an y additio nal conf igured A CLs, pack ets are forw arded to t[...]

35-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 35 Configuring I Pv6 ACLs Conf igu ring I Pv6 ACLs Step 3a { deny | permit } pr ot ocol { source-ipv6-pref ix / p r efix-length | any | host sour ce-ipv 6-address } [ operator [ port- number ]] { destination-ipv6 -pr efix / pref i x-le ngth | any | h[...]

35-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 35 Configuring IPv 6 ACLs Configuring IPv6 ACLs Step 3b { deny | permit } tcp { source-ipv6-pref ix / p r efix-length | any | host sour ce-ipv 6-address } [ operator [ port- number ]] { destination-ipv6 - pr ef ix / pref ix-leng th | any | host destinati[...]

35-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 35 Configuring I Pv6 ACLs Conf igu ring I Pv6 ACLs Use the no { deny | permit } IPv 6 acce ss-list co nfiguration commands w ith keywords to remove the deny or permit conditio ns from the specif ied access list. This example configures the IPv6 a cce[...]

35-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 35 Configuring IPv 6 ACLs Displaying IPv6 ACLs Use th e no ipv6 traff ic-filter access-list-name interface co nf igurat ion comman d to remo ve an access list from an int erface . This exam ple sh ows how to ap ply t h e ac c ess l ist Cisco to outbound [...]

35-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 35 Configuring I Pv6 ACLs Displa ying I Pv6 ACL s[...]

CH A P T E R 36-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 36 Configuring QoS This chapte r describes ho w to config ure quality of service (QoS) by using automat ic QoS (auto-QoS) comman ds or by us ing stan da rd QoS c omm ands on the sw itch. With QoS, you can provi de pre fere nti al treatment to cer ta[...]

36-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Underst andin g Q oS Understandin g QoS T ypically , netw orks operat e on a b est-ef fort deli v ery basis, wh ich means th at all t raff ic h as equal priority and an equ al chance of being deli vere d in a timel y manner .[...]

36-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Under sta n din g Q oS Figur e 36-1 QoS Classificatio n Lay ers in F rames and P ack ets All swi tches and ro uters that a ccess the Inte rnet rely on the cla ss inf ormation to pro vide the sam e forwar din g treatm ent to p ac ke ts[...]

36-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Underst andin g Q oS Figure 36-2 sh o ws the basic QoS model. Ac tions at the ingress port incl ude classifying tra f f ic, policing, markin g, qu euei ng , and s chedu l ing: • Classifying a distin ct p ath f or a pa ck et[...]

36-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Under sta n din g Q oS Classification Classification is the proce ss of distingu ishing one kind of traffic from another by examinin g the fields in the packe t. Classif ica tion is enabled only if QoS is globa lly enabled on the swit[...]

36-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Underst andin g Q oS After cla ssification, th e pac ket is sent to the polic ing, marki ng, and the ing ress queue ing and schedul ing stag es. Figur e 36-3 Classification Flo wc har t 8 6834 Generate the DSCP based on IP pr[...]

36-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Under sta n din g Q oS Classification Based on QoS ACLs Y ou can u se IP st andard , IP exten ded, or Laye r 2 MAC A CLs to define a group of packet s with the sa me char act eris tics ( class ). In the QoS conte xt, the permit and de[...]

36-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Underst andin g Q oS The po licy map can cont ain the police and polic e aggregate policy- map cla ss configurati on com mand s, which def ine the polic er , the bandwidth li m itations of th e traf fic, an d the ac tion to t[...]

36-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Under sta n din g Q oS Policing on Physical Ports In policy m a ps o n physi cal por ts, you c an c reate the se typ es of po lic ers: • Indi vidual—QoS applies the bandwid th limits spe cif ied in th e policer separately to eac h[...]

36-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Underst andin g Q oS Figur e 36-4 P olicing and Mar king Flo wch art o n Ph ysical P orts Policing on SVIs Note Be fore configuring a hi erarc hical poli cy map with individual po licers on an SVI, you must en able VLAN-base[...]

36-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Under sta n din g Q oS When co nf iguring policin g on an SVI , you can cr eate and conf igure a h ierarch ical polic y map with the se two le vels: • VLAN le ve l—Create this primary le vel by conf iguring class maps and classes[...]

36-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Underst andin g Q oS Mapping T ables During Qo S processing, the switc h represe nts the pri ority of a ll traff ic (includi ng non-IP t raff ic) with an QoS label base d on the DSCP or CoS value from the classification st a[...]

36-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Under sta n din g Q oS Queuein g an d Sc hedu lin g Overv ie w The swi tch has queue s at specif ic points to help pre vent conge stion as sho wn in Figure 36 -6 . Figur e 36-6 Ingres s and Egr ess Queue Location Because t he tota l [...]

36-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Underst andin g Q oS Figu re 36-7 W TD a nd Que ue Ope ratio n For more infor mation, see the “Mapp ing DSCP or CoS V alues t o an Ingres s Queue an d Setting WT D Threshol ds” se ction on pa ge 36-6 7 , the “ Allocati[...]

36-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Under sta n din g Q oS Queueing and Scheduling on Ingre ss Queues Figure 36-8 shows th e queuei ng and schedul ing flowc hart for ingr ess port s. Figur e 36-8 Queuein g and Sc heduling Flow char t for Ingr ess P orts Note SRR servic[...]

36-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Underst andin g Q oS Y ou assign e ach pa cket that flows through t he switch t o a q ueue an d to a thresho ld. Speci fically , you map DSCP or CoS values to an ingress que ue and map DSCP or CoS values to a threshol d ID. [...]

36-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Under sta n din g Q oS Queueing and Scheduling on Egress Que ues Figure 36-9 shows the queuei ng and sched uling flowchart for egress port s. Note If the ex pedite que ue is enable d, SRR services i t until it is empty b efore servic[...]

36-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Underst andin g Q oS These q ueues are assign ed to a queu e-set. All traf fic e xiting the swit ch flo ws through one o f these fo ur queues an d is subjected t o a threshold based on the QoS labe l assigned to th e packet.[...]

36-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Under sta n din g Q oS WTD Thresh olds Y ou can assig n each packet t hat fl ows through th e sw itch to a que ue and to a thresho ld. Spe cifically , you map D SCP or C oS values to an egress qu eu e an d map D SCP or Co S values t [...]

36-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Conf igurin g Auto-Q oS • During po l i cing, IP a nd no n-IP pac kets can have anothe r D SCP assign ed to them ( if they are out of prof ile and the polic er spec ifies a ma rkdow n DSCP). Onc e again, the DSCP in the pa[...]

36-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Configuring Auto-QoS Generated Auto-QoS Configuration By def ault, auto -QoS is di sabled on all ports. When au to-QoS is enabled , it use s the ing ress pa ck et label to c ategorize traf fic, to assign pack et labels, and to config[...]

36-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Conf igurin g Auto-Q oS If the packet does not have a D SCP v alue of 24, 26, or 46 or is out of pr ofile, the switch ch anges the DSCP v alue to 0. The switch conf igures ingress and egress queues on the port acco rding to [...]

36-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Configuring Auto-QoS The switch au tomatical ly maps DSCP va lues to an ingress queue and t o a thre shol d ID. Switch(config)# no mls qos srr-queue input dscp-map Switch(config)# mls qos srr-queue input dscp-map queue 1 threshold 2 [...]

36-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Conf igurin g Auto-Q oS The sw itc h aut om atic ally configur es the egress queue buffer sizes . It configures t he ba ndw idth an d th e SR R m ode (s hape d or shared) on the egress queues ma pped to the por t. Switch(con[...]

36-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Configuring Auto-QoS Effects of Auto-QoS on the Configuration When auto- QoS is en abled, the au to qos v oip interface co nfiguration c omman d and the ge nerated configurati on are add ed to the ru nning configuratio n. The swi tch[...]

36-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Conf igurin g Auto-Q oS Enabling Auto-QoS for VoIP Beginn ing in pri vileged EXEC mode, follo w these steps to enable auto -QoS for V oIP within a QoS domain: T o display the QoS command s that are auto matically g enerated [...]

36-27 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Configuring Auto-QoS Auto-QoS Co nfi gura tion Ex am ple This se ction describe s how you co uld im pleme nt auto- QoS in a net work, as shown in Figur e 36-11 . F o r optimum QoS perfo rmance, enable au to-QoS on all the de vices in[...]

36-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Conf igurin g Auto-Q oS Note Y ou shou ld no t c onfigure a ny stand ard QoS c om mands befo re ent ering t he a uto- QoS c om mands. Y ou can fine-t une t h e Qo S configu rat ion, but we r ecom mend t hat yo u do s o onl y[...]

36-29 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Displaying Auto-QoS Information Displaying Auto-Q oS Information T o display the initial auto-QoS con figur ation, use the sho w auto qos [ interface [ interface- id ]] privileged EXEC c omma nd. T o displa y any user cha nge s to th[...]

36-30 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Default Standard QoS Configuration QoS is disa ble d. Ther e i s n o con ce pt of tru sted or u ntru ste d por ts beca use t he pa c kets are not m odified (the CoS, DSCP , and IP prec edence valu [...]

36-31 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Default Egress Queue Configur ation T able 36-9 shows the de fault egre ss queue co nfigura tion for ea ch queu e- set wh en QoS is ena ble d. All ports a re m ap pe d to qu eu e-se t 1. T he po rt b andw i[...]

36-32 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Default Mapping Table Conf iguration The default CoS-to-DSCP map is sho wn in T ab le 36-12 on pa ge 36-6 0 . The default IP-pre cedenc e-to-D SCP map is shown in T able 36-13 on page 36-6 1 . The [...]

36-33 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS • Follow these gu id eline s wh en c onfiguri ng policy m ap s o n p hysica l p orts or SVIs: – Y ou canno t apply the same policy map to a physical port and to an SVI. – If VLAN -b ased QoS is config[...]

36-34 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S • A switch that is r unning t he IP se rvices f eature s et suppo rts QoS D SCP and IP preced ence matc hing in polic y-based routing (PBR) r oute maps wi th these limitations: – Y ou canno t a[...]

36-35 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Use the no mls qos vla n-based interfa ce c on figurati on comm and to di sabl e V LAN -base d QoS o n the physical por t. Configuring Classification Using Port Trust States These sec tions descr ibe how to[...]

36-36 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Figu re 36-1 2 P ort T r usted St ates wit hin the Qo S Do mai n Beginn ing in p ri vilege d EXEC m ode, follo w these st eps to co nf igure the p ort to tr ust the classif icati on of the traf fic[...]

36-37 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS T o return a port to its untrusted state, use the no mls qos t rust interfa ce con figura ti on comm an d. For informatio n on ho w to chan ge the d efault Co S v alue, see the “ Confi guring the C oS V a[...]

36-38 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S T o return to the defaul t setting, us e the no mls qos cos { de fault- cos | over ride } interface co nfigurat ion comm and. Configuring a Truste d Boundary to Ensure Port Securit y In a t yp ical[...]

36-39 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS In some sit uatio ns, yo u ca n p revent a PC c onne cted t o the Cisc o IP Ph one f ro m ta king advantage o f a high-pr iority da ta queue. Y ou ca n use the switchport priority exte nd cos in terfac e co[...]

36-40 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Reg ardl ess of t he DSCP tr an spar en c y co nf iguration, the sw itch m odif ies the internal DSCP value of the pack et, which the switch us es to generate a cla ss of service (CoS) valu e that [...]

36-41 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Figur e 36-13 DSCP -T r usted Stat e on a P ort Bor der ing Anoth er QoS Domain Beginning i n privileged EX EC mo de, foll ow these s teps to c onfigure th e DS CP-tru sted sta te o n a port and modi fy the[...]

36-42 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S T o return a port to its non-trusted state, use the no mls qos t rust interfa ce configur ation comman d. T o return to the d efault D SC P-to-DSCP-m utation m ap v a lues, us e the no mls qos ma p[...]

36-43 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Classifying Traffic by Using ACLs Y ou can cl assi fy IP tra ff i c by using IP sta nda rd or IP extend ed ACLs; you can cla ssify non-I P traffic by usin g Layer 2 MA C A CLs. Beginn ing in pri vileged EXE[...]

36-44 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Beginn ing in pri vileged EXEC mode, follo w these steps to create an IP extended A CL for IP traff ic: T o delete an access list, us e the no access-list acc ess-list-numbe r global con figuration[...]

36-45 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Beginning in privileged EXEC mod e, follow these st eps to c reate a L ayer 2 M A C A CL for non- IP traffic: T o delete an access list, us e the no mac acces s-list exte nded access- list-name global con f[...]

36-46 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Classifying Traffic by Using Class Ma ps Y ou use the class-map global conf iguration co mmand to name and to i solate a spe cif ic tra ff ic flo w (or class) f rom all o ther traf fic. The cla ss [...]

36-47 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS T o delete an existing polic y m ap, use the no policy-map poli cy-ma p-nam e globa l configuration comm and. T o delete an existing cla ss map, use th e no class-map [ match-all | match-any ] class-map-na [...]

36-48 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Classifying, Policing, and Marking Traff ic on Physical Ports by Using Policy Maps Y ou can co nfigure a nonhier archi cal poli cy map on a physical po rt that spec ifies which traffic class to act[...]

36-49 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Beginning in privileged EX EC mode, fol low these steps to cr eate a no nhiera rchical policy map: Command Purpose Step 1 conf igur e terminal E nter g loba l c onfigurati on m ode . Step 2 class-map [ matc[...]

36-50 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Step 5 trust [ co s | dscp | ip-prece dence ] Configure the t rust state, w hich QoS uses to gene rate a CoS-ba sed or DSCP-based QoS lab el. Note This co mmand is mutuall y exclusi ve with the set[...]

36-51 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS T o delete an existing polic y m ap, use the no policy-map poli cy-ma p-nam e globa l configuration comm and. T o delete an existing cla ss map, use th e no class cla ss-map-name poli cy-map configurati on [...]

36-52 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Switch(config-ext-mac)# exit Switch(config)# class-map macclass1 Switch(config-cmap)# match access-group maclist1 Switch(config-cmap)# exit Switch(config)# policy-map macpolicy1 Switch(config-pmap)[...]

36-53 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS • When configuri ng a hierarc hical pol icy map on trunk por ts, the VLA N ranges must not overlap. If the ranges overlap, t he actio ns specif ied in th e polic y map af fect the in coming and o utgoing [...]

36-54 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Step 3 match { access-group acl -index-or-name | ip dscp dscp-list | ip prec edence ip-pr eceden ce-list } Def ine the match crite rion to classify traf fic. By defau lt, no mat ch cr iteri on is d[...]

36-55 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Step 10 policy-map policy- map-nam e Create an inte rf ace-lev el policy m ap b y entering the polic y-map name, and en t er po licy-m ap c on figurat ion mod e. By default, no policy maps ar e defined, an [...]

36-56 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Step 17 trust [ co s | dscp | ip-prece dence ] Configure the t rust state, w hich QoS uses to gene rate a CoS-ba sed or DSCP-based QoS lab el. Note This co mmand is mutuall y exclusi ve with the se[...]

36-57 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS T o delete an existing polic y m ap, use the no policy-map poli cy-ma p-nam e globa l configuration comm and. T o delete an existing cla ss map, use th e no clas s class-map-na me policy-map c onfiguration [...]

36-58 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Switch(config-pmap-c)# exit Switch(config-pmap)# class-map cm-2 Switch(config-pmap-c)# match ip dscp 2 Switch(config-pmap-c)# service-policy port-plcmap-1 Switch(config-pmap)# exit Switch(config-pm[...]

36-59 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS T o remove the spe cified a ggr egate pol ic er fr om a po licy ma p, use the no police ag gr egate aggr egate-polic er-name poli cy map c onfigura tio n m ode. T o del ete an ag gregat e p ol icer an d it [...]

36-60 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Switch(config-pmap-c)# trust dscp Switch(config-pmap-c)# police aggregate transmit1 Switch(config-pmap-c)# exit Switch(config-pmap)# class ipclass2 Switch(config-pmap-c)# set dscp 56 Switch(config-[...]

36-61 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Beginn ing in pr iv ilege d EXEC mode, follo w these steps to modify t he CoS-to-DSCP map . This procedur e is optional. T o return to the default map, use th e no mls qos cos-dscp globa l c onfigurat ion c[...]

36-62 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Beginn ing in pr i vilege d EXEC m ode, follo w these st eps to mo dify the I P-precede nce-to-DSCP ma p. This proc edure is option al. T o return to the default map, use th e no mls qos ip-prec -d[...]

36-63 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS T o return to the default map, use th e no mls qos policed-dscp gl obal con f igurat ion command. This exam ple shows how to ma p DS CP 50 t o 57 t o a marked- down DS CP value of 0: Switch(config)# mls qos[...]

36-64 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Beginning in privileged EXEC mo de, follow these s teps to modify th e DSCP-to- CoS map. This procedur e is optional. T o return to the default map, use th e no mls qos dscp-cos globa l c onfigurat[...]

36-65 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Beginning in privileged EXEC mo de, foll ow these steps to mod ify the DSCP-t o-DSCP-m utati on map. This proc edure is option al. T o return to the default map, use th e no mls qos dscp-mutation dscp -mut [...]

36-66 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Note In the above DSCP-to-D SCP-m utatio n map, t he mutate d values are shown in the bod y of the matr ix. Th e d1 colum n specif ies the most-signif icant digit o f the or iginal DSCP; th e d2 ro[...]

36-67 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Mapping DSCP or CoS Values to an Ingress Queue and S etting WTD Thresholds Y ou can prioriti ze traf fic by placing pack ets with particul ar DSCPs or CoSs into certain queues and adjusting the queue thr es[...]

36-68 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S This exampl e shows ho w to map DSCP values 0 to 6 to ingres s queue 1 an d to thresh old 1 with a dro p thresho ld of 50 p ercent . It m aps DSC P values 20 to 2 6 to in gress qu eue 1 and to th r[...]

36-69 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Beginn ing in pri vileg ed EXEC mode, follo w these steps to allocate bandwid th between the ingress queues. Thi s p roce dur e i s op tio nal . T o return to the default settin g, use the no mls qos srr-qu[...]

36-70 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Beginning in privileged EXEC mod e, follow these steps to configure the pri ority queue. T his proc edure is optional. T o return to the default settin g, use the no mls qos srr-queue input pri ori[...]

36-71 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS These sec tions co ntain this configura tion info rmat ion: • Configuration Gu idelines, page 36-71 • Alloca ting Buffer Space to and Setting WT D Threshol ds for an Egress Queu e-Set , page 36- 71 (opt[...]

36-72 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Beginn ing in pri vile g ed EXEC mode, follo w these steps to conf igure the memor y allocat ion and to drop thresholds for a queue-set. This procedu re is optional. Comma nd Purpos e Step 1 conf i[...]

36-73 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS T o return to the d efault se tting, use the no mls qos queue-set output qs et -id bu ff e r s global confi gurati on comm and. T o return to the default WTD thresho ld perce ntage s, use the no mls qos que[...]

36-74 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Beginning in privileged EXE C mode, follow thes e st eps to map DSCP or CoS values to an egress queu e and to a thr eshold ID . This p rocedur e is optio nal. T o return t o th e default DS CP out [...]

36-75 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Configuring SRR Sh aped Weights on Egress Queues Y ou can speci fy how much of the available bandw idth is al locate d to each queu e. The ratio of the we ights is the r atio of f reque ncy in whi ch the SR[...]

36-76 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Configur ing Standard Qo S Configuring SRR Sh ared Weights on Egress Queues In shar ed mod e, the que ue s share th e band w idt h among th em acc ord ing t o the co nfigured we ight s. The bandwidth is gu aranteed at this l[...]

36-77 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 36 Configuring Qo S Confi guring Standa rd QoS Beginn ing in pri vileged EXEC mode, follo w these steps to enable the e gress exped ite queue. This procedur e is optional. T o disab le th e egre ss expe di te qu eu e, u se th e no priority-queue out int[...]

36-78 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt e r 3 6 Co nf igur ing Q oS Display ing Stan dard Qo S Inf orm ation T o return to the default setting, use the no srr -queue bandwidth limit interf ace configur ation command. This exam ple sh ows how to limit t he ba nd wid th on a p ort to 8 0 p erc[...]

CH A P T E R 37-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 37 Configuring EtherC hannels and Link-State Tracking This cha pter describ es how to configure EtherCha nnels on La yer 2 and La yer 3 ports on the switch. Ether Channel provides fault-tol erant hi gh-speed links bet ween switc hes, ro uters, an d [...]

37-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Underst an ding Et her Channel s EtherChann el Overview An Eth erChanne l consis ts of ind ividual Gigabit Et hern et links bundled into a si ngle log ical link as shown in Figu re 37 -1 . Fig[...]

37-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Understa nding Et herChann els Figur e 37 -2 Single-S witch Ethe rChannel Figur e 3 7 -3 Cros s-Stac k EtherChannel Switch 1 Blade s witch stack Switch 2 Channel group 1 Channel group 2 StackWise P[...]

37-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Underst an ding Et her Channel s Port-Chan nel Interfaces When you c re ate an E ther Cha nn el, a po rt-c hann el lo gica l i n terfa ce i s inv o lved: • W i t h Laye r 2 por ts , use the [...]

37-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Understa nding Et herChann els Port Aggreg ation Pro tocol The Port Aggr egation Protocol (P AgP) is a Cisco-propr ietary pr otocol that can be run onl y on Cisco switches and on tho se switches li[...]

37-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Underst an ding Et her Channel s Use the silent mode when the switch is connected to a devi ce that is not P AgP-capable and seldom, if e ver , sends pack ets. A n ex ample of a silen t par tn[...]

37-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Understa nding Et herChann els Ports can f orm an Ether Chann el when the y are in d if ferent LA CP mo des a s lon g as the modes are compatible. For e xample: • A port in the act ive mode ca n [...]

37-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Underst an ding Et her Channel s W ith des tination -MA C addr ess fo rw arding , when pack ets a re forwar ded to a n EtherCh annel, they ar e distributed acr oss the port s in the c hannel b[...]

37-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Understa nding Et herChann els Figur e 37 -5 Load Di str ibution and F orwa rdin g Methods EtherChann el and S witc h Stack s If a stack mem ber that ha s ports parti cipating i n an Ether Channel [...]

37-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Configur ing Eth erChann els For more information about switch stack s, see Chapter 5, “ M anaging Sw itch Stacks.” Configuring Eth erChannels These sec tions co ntain this configura tion[...]

37-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Config uring EtherCh annels EtherChann el Configuratio n Guidelin es If imp rop erl y co nfigure d, so me Et her Chann el por ts are a utom atic all y disa bled to avoid network lo ops and othe r [...]

37-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Configur ing Eth erChann els – An Ethe rCh anne l sup ports the same allowed r ange of V LA Ns on a ll t he po rts i n a tru nking Layer 2 E therCh annel. I f the a llowed range of VL ANs i[...]

37-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Config uring EtherCh annels T o remove a port from t he E th erC hann el gro up, u se th e no channel-group interface co nfiguration comm and. Step 4 channel- group c hann el-gr oup- number mo de [...]

37-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Configur ing Eth erChann els This exam ple shows how to con figure an Eth erCha nn el o n a single swi tch in the sta ck. I t a ssigns two ports as static-acce ss ports in VLAN 10 to channel [...]

37-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Config uring EtherCh annels Beginning in pr ivileged EXE C mode, fol low these step s to create a po rt-cha nnel int erface for a La yer 3 Ether Channel . This proc edure is requir ed. T o remove [...]

37-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Configur ing Eth erChann els Step 5 channel- group c hann el-gr oup- number mo de { auto [ non- silent ] | desirable [ no n-silent ] | on } | { active | passive } Assign th e port to a ch ann[...]

37-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Config uring EtherCh annels This example shows ho w to configure an Ethe rChannel . It assign s two ports to cha nnel 5 with the LACP mode ac tive : Switch# configure terminal Switch(config)# inte[...]

37-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Configur ing Eth erChann els T o return Eth er Cha nnel loa d- ba lan cing t o the defau lt co nfigur ation, u se t he no port-channel load-balanc e global con figurati on comm and. Configuri[...]

37-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Config uring EtherCh annels Beginning i n privileged E X EC mo de , follow these s teps to c on figure your sw itch as a P AgP physical- port lea rner a nd to a djust the p riority so th at the sa[...]

37-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Configur ing Eth erChann els If you configure more than eight links for an EtherC hannel group , the soft ware automa ticall y decides which of the h ot-standby p orts to make active based on[...]

37-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Config uring EtherCh annels Configuring the LACP Port Pr iority By def ault, al l ports us e the same port prio rity . If the lo cal system has a lo wer v alue fo r the syste m priority a nd the s[...]

37-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Displaying Eth erChannel, PA gP, and LACP Status Displaying EtherCh annel, PAgP, a nd LACP Status T o displa y EtherCha nne l, P AgP , and LA CP stat us info rma tio n, use th e priv ile ged [...]

37-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Understanding Link-State Tracking Figur e 37 -6 T ypical Link -Stat e T rac king Configur ation The co nfigur ation i n Figure 3 7-6 ensures that whe n ser v er NIC adapter t eam in g is us e d, t[...]

37-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Configur ing Link-S tate Tracki ng In a l ink- stat e g rou p, the up stre am p orts ca n be co me u navailable o r lose c onn ect ivity bec aus e t he distr ibu tion swit ch or router f ails[...]

37-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 37 Configuring Eth erCh annels and Link-Stat e Tra cking Configuring Link-State Tracking • Do not conf igure an EtherChan nel as a do wnstream interf ace. • Only interf aces gigabiteth ernet n/ 0/1 thro ugh gigabit ether net n / 0/16, whe re n is th[...]

37-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 37 Configurin g Ether Channels an d Link-S tate Tr acking Configur ing Link-S tate Tracki ng Displaying L ink-S tate Trac king Sta tus Use the show link state gr oup comman d to display the li nk-state g roup infor mation. Ent er this comman d wi t [...]

CH A P T E R 38-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 38 Configuring IP Unicast Ro uting This c hapter d escrib es how to c onfigure I P V e rsion 4 ( IPv4) unic as t ro uting on the switch. Un less otherwise noted, the term switch ref ers to a st andalo ne swit ch and to a switch stack. A switc h stac[...]

38-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Underst an ding IP Ro uting Note When configuring routing parameter s on the switch and to allocate system resourc es to maximize the number of un icast routes allowed, you can use the sdm prefer r outing global c [...]

38-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Understanding IP Rout ing Default ro uting refe rs to sendi ng traffi c with a de stination unknown to the route r to a default outle t or destinatio n. Static unicas t routi ng fo rwards pa ckets from pre deter mined[...]

38-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Underst an ding IP Ro uting Stack memb ers per form these fun ction s: • The y act as routi n g standb y switches , ready to tak e ov er in case the y are elected as the ne w stack master if the stack master fail[...]

38-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Steps f or Co nfiguri ng Routing Steps for Configurin g Routing By default, IP ro uting is disabl ed on the switc h, and you must enable it before rou ting can take pl ace. For detailed IP routing co nf iguration in f[...]

38-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g IP Ad dr essi ng • Configuring A dd ress Resol u tion M et hods , page 38 -9 • Rout ing Assistan ce W hen I P Rout ing is Dis abled, page 38-12 • Conf iguri ng Bro adca st Pack et Han dlin g, pa[...]

38-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Config uring I P Address ing Assigning IP Address es to Netwo rk Interface s An IP ad dress identi fie s a location to which IP pack ets ca n be s ent. Som e IP add resses are reser ved for special u ses an d ca nnot [...]

38-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g IP Ad dr essi ng Classless Routing By default, classless routing beha vior is enabled on the switch when it is confi g ured to route. W ith classle ss routi ng, i f a rout er re ceives packets fo r a [...]

38-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Config uring I P Address ing Figur e 38-3 No IP Clas sless Ro uting T o prev ent the swi tc h from f or warding pa ckets dest ined f or unre co gniz ed sub ne ts t o t he best supe rne t route poss ible, you can disab[...]

38-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g IP Ad dr essi ng The swi tch can use these forms of address r esolutio n: • Address Resolut ion Protoc ol (ARP) i s used to associa te IP ad dress wi th MA C addresses. T aking an IP addre ss as i [...]

38-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Config uring I P Address ing T o remove an entr y from th e ARP ca che, use the no arp i p -a d d re s s h a rd wa re- a d d res s t yp e glob al conf iguratio n command . T o remov e all n onstatic entries f rom the[...]

38-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g IP Ad dr essi ng Enable Proxy ARP By default, the sw itch uses pro xy ARP to help hosts learn MA C addresses of hosts on ot her network s or subnets. Beginning i n privileged E X EC mo de , follow th[...]

38-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Config uring I P Address ing Beginning i n privileged E XEC mo de, fol low these s teps to d efine a default gat eway (router ) when I P routing is disa bled: Use the no ip default-gateway global c on figuratio n com[...]

38-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g IP Ad dr essi ng If you chang e the maxadvertinterv al va l u e , th e holdtime and minadvertinterval v alues also cha nge, so it is importan t to f irst change the ma xadvertinte rval v alue , befor[...]

38-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Config uring I P Address ing Enabling Directed Broadcast-to- Physical Broadcast Translation By default, IP direct ed broadc asts are dr opped; th ey are not forwarde d. Drop ping IP-di rected broa dcast s makes route[...]

38-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g IP Ad dr essi ng Forwarding UDP Broadcast Packets and Prot ocols User Da tagram Prot ocol (UD P) is an IP host -to-host la yer protoc ol, as is TCP . U DP provides a low-ov e rh ead, conn ec tionl es[...]

38-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Config uring I P Address ing Establishing an IP Broadcast Address The mo st po pula r IP b roa dca st a ddr ess (and t he d efaul t) i s an a dd ress c ons isti ng of a ll on es (255.255 .255.2 55). Howe ver, the swi[...]

38-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g IP Ad dr essi ng Beginning i n privileged EX EC mo de , follow these s teps to u se the b ridgin g sp an ning- tre e da tab ase t o flood U DP dat agr am s: Use the no ip f orwa rd-prot ocol spanning[...]

38-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Enabli ng IP Unic ast Rout ing Enabling IP Uni cast Routing By default, the switch is in Layer 2 switching mode and IP routin g is disabled. T o use the Layer 3 capabiliti es of the switch, you must enable I P routin[...]

38-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g RIP Switch(config-router)# network 10.0.0.0 Switch(config-router)# end Y ou can now set up parame ters for the selected routing prot ocols as descr ibed in the se secti ons: • Conf igur ing RIP , p[...]

38-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring RIP Default RIP Configuration T able 38-4 sho ws the default RIP conf iguration. Configuring Basic RIP Parameters T o configure RIP , you enabl e RIP routing for a network a nd op tionall y configure oth [...]

38-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g RIP Step 4 network network number Associ ate a n etwork with a RIP ro uting proc ess. Y ou c an specif y multipl e network commands. RIP rou tin g upda te s are sent and r ece ived through interfa ce[...]

38-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring RIP T o turn of f the RI P ro uti ng pr ocess , u se the no router rip global configurat ion comm and. T o displ ay the par ameter s and curr ent stat e of the ac tive routing protoco l process , use the [...]

38-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g RIP If you want t o configur e an int erfac e run ni ng R IP to a dvertis e a sum mari zed lo cal IP addr ess p ool on a network acce ss server for dial- up client s, use the ip summary-address rip i[...]

38-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuri ng OSPF Configuring Split Horizon Router s conne cted t o bro adca st-ty pe I P networ ks and us in g distan ce -vect or r outing p rotoc ols no rm all y use th e split-horiz on mechan ism to reduc e the po[...]

38-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring OSPF • Plain text and MD 5 authe nticat ion among neighborin g routers w ithin an ar ea is suppor ted. • Conf igurable routing in terf ace param eters incl ude interf ace output cost, retransmissio[...]

38-27 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuri ng OSPF T able 38-5 Def ault OSPF Configura tion Feature D efault Setting Interfa ce parameters Cost: No default cost predef ined. Retransmit interv al: 5 seconds. T r an smit del ay: 1 se co nd. Priority: [...]

38-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring OSPF OSPF Nonstop Forwarding The switc h or switch stac k supports t wo le vels of nonstop forward ing (NSF): • OSPF NSF A wareness, page 38-28 • OSPF NSF Capability , page 38 -28 OSPF NSF Awarenes[...]

38-29 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuri ng OSPF After a stack master change, the ne w master se nds an OSPF NSF signal to neighboring NSF-aware devices. A device recogni zes this signal to mea n that it sho uld not res et the neighbo r relat ions[...]

38-30 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring OSPF T o end an OSPF r outing process, use the no route r ospf pr ocess-id global configurat ion comm and. This e xample sho ws how to confi g ure an OSPF rou ting process and assign it a process numbe[...]

38-31 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuri ng OSPF Use the no form of these comm ands to remo ve th e conf igured paramete r value or return to the default value. Configuring OSPF Area Parameters Y ou can optionally configure se veral OSPF area para[...]

38-32 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring OSPF Use the no form of thes e command s to remo ve the conf igured param eter valu e or to retu rn to the default value. Configuring Other OS PF Pa ra met ers Y ou can optionally confi gure other OSPF[...]

38-33 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuri ng OSPF • Defa ult Metrics: OSPF calculates the OSPF metric for an inter face accordi ng to the bandwidth of the in terfa ce. The m etric is calculated as ref -b w divided by bandw id th , wher e re f is [...]

38-34 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring OSPF Beginning in privile ged EXEC mode, follow the se steps to configure these OSPF parameter s: Command Purpose Step 1 conf igur e terminal E nter g loba l c onfigurati on m ode . Step 2 router ospf [...]

38-35 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuri ng OSPF Changing LSA Gro up Pa cing The OSPF LS A gr oup pa cing featur e a llows the router to gr oup OSPF L SAs and pac e the refr eshing, check- summi ng, and a ging functions f or mo re efficient rout e[...]

38-36 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing EIG R P Monitoring OSPF Y ou can display specifi c statisti cs such as th e conten ts of IP routing tab les, cac hes, and da tabases. T able 38-6 lists some of the pr i v ileged EXE C comm ands fo r d[...]

38-37 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring EIGRP EIGRP of fers these f eatures: • Fast co n vergenc e. • Incr em en tal upd ate s wh en th e st ate of a des tin at ion cha ng es , i nst ea d of s en ding t he en tir e cont e nts of the rout in[...]

38-38 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing EIG R P • Configuring E IGRP Route Au th entic ation , page 38 -42 • EIGRP Stub Ro uting, p age 38- 43 • Moni tor ing and Mai ntainin g EIGR P , pag e 38-44 Note T o enab le EIGRP , the switch o[...]

38-39 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring EIGRP T o crea te an EIGRP rou ting proc ess, you must enable EIGRP an d associ ate networks . EIGRP se nds updates to the interf aces in the specif ied networks. If you do not specify an inter face netwo[...]

38-40 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing EIG R P EIGRP N SF Capabili ty The IP- ser vice s feat ure set al so su pport s EIG RP NSF-c apab le rou ting f or IPv 4 for be tter conver gence and l ow er traf fic loss follo wing a stac k mas ter [...]

38-41 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring EIGRP Use the no forms of these co mmand s to disabl e the featur e or retur n the sett ing to the de fault value. Configuring EIGRP Interfaces Other o pt iona l E IGRP pa rame ter s c an b e configure d [...]

38-42 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing EIG R P Use the no forms of th ese comman ds to disa ble the featur e or retur n the sett ing to the de fault value. Configuring E IGRP Ro ute Authentication EIGRP r oute aut hent ic ati on pr ovides [...]

38-43 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring EIGRP Use the no forms of th ese comman ds to disa ble the f eature or to r eturn the se tting to t h e def ault v alue. EIGRP Stub R outing The EIGRP stub routing featu re, av ailable in all featur e set[...]

38-44 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g BGP Figur e 38-4 EIGRP St ub Rout er Confi gurat ion For more inf ormation about E IGRP stub routing, see “Configu ring EIGRP St ub Rout ing” sect ion of the Cisco I OS I P Con figuration G uide,[...]

38-45 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring BGP For details abo ut BG P comm an ds a nd keywords, se e t he “I P Rout ing Protoc ols” p art of the Cisco IO S IP Com mand Re ference, V olume 2 o f 3: R outi ng P r otocols, Rel ease 1 2.2 . For a[...]

38-46 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g BGP In BGP , ea ch r oute con si sts of a n etwork num be r , a l ist of a utono mo us s yst ems t h at in for mat ion ha s passed thr oug h (t he a utonomo us system path ), and a list of other path[...]

38-47 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring BGP T able 38-9 Def ault BGP Config urati on Feature Default Setting Aggregat e a ddr es s D isabl ed: No ne defined. AS pa th a ccess l ist N one d efined. Au to su m ma r y En ab le d. Bes t pat h • T[...]

38-48 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g BGP Nonstop Forwarding Awareness The BGP NSF A wa r eness feat ure is sup ported for IPv4 in the IP services fea ture set. T o enable this featu re with BGP ro uting, you need to en able Gr aceful Re[...]

38-49 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring BGP neig h bo r i n g r o ut er during th e interv al betw ee n t he primar y Route Pr oc essor (RP ) in a router f ai ling and the backup RP taking over , or while th e primar y RP is manual ly relo aded[...]

38-50 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g BGP Use the no router bgp auto nomous-system globa l configuratio n com mand to re move a BGP AS. Use t he no network net work-n umber router configurat ion com mand to remove the network fr om the B[...]

38-51 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring BGP Router B: Switch(config)# router bgp 200 Switch(config-router)# neighbor 129.213.1.2 remote-as 100 Switch(config-router)# neighbor 175.220.1.2 remote-as 200 Router C: Switch(config)# router bgp 200 Sw[...]

38-52 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g BGP establi sh a TCP sessi on. A so ft re set all ows the dynam ic exchange of route refresh requests and r outing informa tion b etween B GP rout ers a nd th e subseq uent re-ad ver tisemen t of t h[...]

38-53 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring BGP Configuring BGP Decision Attributes When a BGP speak er receiv es updates from multiple autono mous systems that describe dif ferent paths to the sa me destination, it must ch oose the single best pat[...]

38-54 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g BGP Beginning i n privileged EX EC mo de , follow these s teps to c on figure s ome d ec ision a ttributes: Command Purp ose Step 1 co nfi g ure terminal Enter glo bal configura tion mode . Step 2 r [...]

38-55 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring BGP Use the no form o f each comma nd to re turn to the default s tate. Configuring BGP Filtering with Route Maps W i thi n B GP , ro ute m aps can be use d to c ontro l a nd to m od ify rou tin g in for [...]

38-56 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g BGP path, comm unity , and network num bers. Auto nomous sys tem path ma tching re quires the match as-path access-lis t rou te-map com mand, com munit y based matc hing requir es the match community[...]

38-57 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring BGP Configuring Prefix Lists for BGP Filtering Y o u can us e prefix lists as an alte rnati ve to acces s lists in man y BGP route f ilterin g commands, including the neighbor distrib ute-list router conf[...]

38-58 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g BGP sequence number command; to reenable a utomatic gener ation, use th e ip pr ef ix-list sequence number command. T o clear the hit-cou nt table o f pref ix list e ntries, u se the c lear ip pr ef [...]

38-59 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring BGP Configur ing BGP Ne igh bors and P e er Gr oups Often m any BGP ne ighbo rs are c onfigured wi th t he sam e upda te poli cies ( t hat is, the same o utbou nd route ma ps, distribute lists, filter l i[...]

38-60 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g BGP Step 7 neighbor { ip-addre ss | pe er-gr oup -name } default-originate [ route-map ma p-name ] (Op tional) All ow a BGP speaker (the loca l router) to sen d the default r oute 0 .0. 0.0 to a n ei[...]

38-61 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring BGP T o disable an existin g B GP neighb or or nei ghb or pe e r grou p, use th e neighbor shutdown rout er configurat i on comm and. T o enable a previou sly existin g neig hbo r or neig hbor pee r gr ou[...]

38-62 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g BGP T o delete an aggr e gate en try , use the no aggregate-addr ess address mask rout er configurati on comma nd. T o return opt ions to the def ault valu es, use th e comman d with ke ywords . Conf[...]

38-63 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring BGP When the ro ute refl ector recei ves an ad vert ised route, it tak es one of these acti o ns, depen ding on the neighb or: • A route from an e xternal B GP speak er is adv ertised to a ll clients an[...]

38-64 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Conf igurin g BGP Beginning i n privileged EX EC mode , use t hese c omma nds to c on figure B GP ro ute da mp enin g: T o disabl e flap damp ening, use the no bgp dampening route r configurati on comm and wit hou[...]

38-65 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring Multi-VRF CE Y ou can al so en able t he logging of messa ge s generate d when a BG P neighbo r resets , co mes up, o r go es down b y using the bgp log -neighbor changes router configuration command. Con[...]

38-66 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring Mul ti-VRF CE These se ctions conta in this i nformation: • Understan ding Multi-VRF CE, page 38-66 • Default Mul ti-VRF CE Configu ration, pa ge 38-68 • Multi-VRF CE Conf iguration Guidelines, p[...]

38-67 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring Multi-VRF CE Figure 38-6 shows a c onfig uration u sing switche s as multipl e virtual CEs. This scenario i s suited for custome rs w ho have low bandwid th requ ireme nts fo r thei r VP N servi ce, fo r [...]

38-68 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring Mul ti-VRF CE T o configu re VRF , you create a VRF tabl e and spec ify the Layer 3 interf ace assoc iated with the VRF . Then configur e the r outing pro t ocol s in t he V PN an d bet wee n the CE a [...]

38-69 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring Multi-VRF CE • A customer can use multiple VLANs as long as the y do not over lap with tho se of other customer s. A customer’ s VLANs are mapped to a specific routing table ID that is used to identif[...]

38-70 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring Mul ti-VRF CE Use t h e no ip vrf vrf-name global con figu ration command to delete a VRF and to remo ve all in terfa ces from it. Use the no ip vrf f or warding interf ace con fig uratio n command to [...]

38-71 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring Multi-VRF CE User Interface for PING Beginning i n p rivileged EXEC m ode, follow these st eps to configure VRF-aware serv ices f or ping. For compl ete synt ax and usag e infor mation fo r the comman ds,[...]

38-72 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring Mul ti-VRF CE User Interface for uRPF uRPF can b e co nfigured on an interface a ssigned to a V R F , and source l ookup is done in the V RF tabl e . Beginning in privileged EXEC mo de, fo llow these s[...]

38-73 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring Multi-VRF CE User Interface for Tracer oute Beginn ing in privile ged EXEC mode, follo w these steps to conf igure VRF-awa re services for traceroute. For complete syntax and usage informa tion for the co[...]

38-74 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring Mul ti-VRF CE Configuring Multicast VRFs Beginn ing in pri vile ged EXEC mode, follo w these steps to config ure a multic ast within a V RF table. F or compl ete synt ax and usag e informa tion for the[...]

38-75 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring Multi-VRF CE Beginning in pri vileged EXEC mode, follo w these steps to config ure OSPF in the VPN: Use t he no r o uter ospf pr ocess-id vrf vrf-nam e global configura tion com mand to disass ociat e the[...]

38-76 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring Mul ti-VRF CE Use the no r outer bgp autono mo us-syst em -numb er glob al configura ti on co mm an d to de le te th e BG P routing pro cess. Use the command w ith keywords to delete ro uting ch aract [...]

38-77 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring Multi-VRF CE Configur ing Switch A On Switch A, enable routing and conf ig ure VRF . Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)# ip routing Swit[...]

38-78 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configuring Mul ti-VRF CE Switch(config)# interface vlan118 Switch(config-if)# ip vrf forwarding v12 Switch(config-if)# ip address 118.0.0.8 255.255.255.0 Switch(config-if)# exit Switch(config)# interface vlan208 [...]

38-79 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Configuring Multi-VRF CE Configur in g Switch F Switch F bel ongs t o VPN 2. C onfigure the c onn ect ion to Sw it ch A by u sing the se co mman ds. Switch# configure terminal Enter configuration commands, one per li[...]

38-80 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing Unica st Rev erse Path Fo rward ing Router(config)# router bgp 100 Router(config-router)# address-family ipv4 vrf v2 Router(config-router-af)# neighbor 83.0.0.8 remote-as 800 Router(config-router-af)#[...]

38-81 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Confi guring Proto col-Ind ependent Featu res Configuring Proto col-Independ ent Features This secti on descri bes how to configure IP routing pro tocol -indepe ndent fe atures . These fe atures a re av ailable on sw[...]

38-82 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing Protocol-I nde penden t Feature s The def ault conf ig uration is CEF or dCEF enable d on all Layer 3 interfa ces. Enterin g the no ip route- ca che c e f in terface co nfiguration co mman d disab les[...]

38-83 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Confi guring Proto col-Ind ependent Featu res Even though the ro uter au tomat ically learns about an d configur es equal -cost ro utes, you can cont rol the maxim um number of para llel pat hs supporte d by an IP ro[...]

38-84 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing Protocol-I nde penden t Feature s Static rout es tha t po int to an int erfac e a re a dver tised t hrough RI P , I GRP , a nd oth er dyna mic r outi ng protocol s, w heth er o r n ot sta tic re d is [...]

38-85 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Confi guring Proto col-Ind ependent Featu res Use the no ip default-netw ork net work n umbe r global co nfiguration c omman d to remove the route . When default in format ion is passed th rough a dy namic ro uting p[...]

38-86 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing Protocol-I nde penden t Feature s Note Alth ough e ach of St eps 3 th roug h 14 in the following secti on is o pti onal , you m ust e nte r at leas t on e match rou te- ma p con figura ti on co mm an [...]

38-87 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Confi guring Proto col-Ind ependent Featu res T o delete an entry , use the no r oute-map map tag global c onfiguration c ommand or t he no match or no set route- map co nf igurati on commands. Y ou can dist ribute r[...]

38-88 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing Protocol-I nde penden t Feature s Beginn ing in p ri vileg ed EXEC mode, fo llo w these s teps to control r oute re distrib ution. Note that the keywords are the same as defined in th e previous proce[...]

38-89 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Confi guring Proto col-Ind ependent Featu res W ith PBR, you clas sify tra f f ic using acc ess contro l lists (A CLs) and th en make t raf f ic go through a dif ferent path. PBR is applied t o incoming pac ket s. Al[...]

38-90 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing Protocol-I nde penden t Feature s • T o use PBR, y ou must first en able the routin g template by using the sdm pr efer r outing gl obal conf iguratio n command. PBR is not supported with the VLAN o[...]

38-91 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Confi guring Proto col-Ind ependent Featu res Beginn ing in pri vilege d EXEC mode, follo w th ese steps to con fi gu re PBR: Comma nd Purpos e Step 1 conf igur e terminal Enter global configurati on mode. Step 2 rou[...]

38-92 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing Protocol-I nde penden t Feature s Use the no ro ute-map map- tag g loba l c onfigura tio n com mand or the no match or no set rou te-ma p conf iguratio n commands to delete an entry . Use the no ip po[...]

38-93 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting Confi guring Proto col-Ind ependent Featu res Use a net work monit oring privileged EXEC co mman d such as show ip ospf interf ace to v erify the interfaces t hat you enab led as passive, or use the show ip interface[...]

38-94 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Configur ing Protocol-I nde penden t Feature s router to inte lligen tly di scrimina te bet ween so urces of rout ing in format ion. Th e rou ter always picks th e route whose rout ing pr otoc ol has t he lowest a[...]

38-95 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 38 Configuring IP Unic as t Rou ting M onitoring and Maintaining the IP Network Beginning i n privileged E X EC mo de , follow these s teps to m a nage aut henti cat ion keys: T o remov e the ke y chain, use the no key chain name-of -chain gl obal co nf[...]

38-96 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 38 Co n figuring IP Unicast Ro uting Monito rin g and Mai nt aining th e IP Ne twork show i p route s u pern et s-onl y D isplay supe rnets. show ip cache Display the routing ta b le used to swit ch IP tr af fic . show route-map [ map-name ] Display [...]

CH A P T E R 39-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 39 Configuring IPv6 Unicast Routing Intern et Protoc ol V ersio n 6 ( IPv6) i s the net work-la yer Int erne t Pr otoc ol intend ed to re pla ce V e rsion 4 (IPv4) in the TCP/IP su ite of pro tocols. T his cha pter descr ibes how to configure IP v6 [...]

39-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Underst andin g IPv 6 The arc hitecture of IPv6 allo ws e x isting IPv4 users to transi tion easily to IPv6, a n d pro vides ser vices such as end-t o-end sec urity , quality of service (Qo S), and glob ally uni qu[...]

39-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Understanding IPv6 For more inform ation about IPv6 add ress for mats, ad dress type s, and the IPv6 packet heade r , go t o “Impl ementing Bas ic Conn ecti vity for IPv6 ” chapter of the Cisco IOS IPv6 C onfigura[...]

39-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Underst andin g IPv 6 • Link local u nicast add resses can be automat ically conf igured on any in terfa ce by using the lin k-local prefix FE80:: /10(111 1 1110 1 0) an d the i nterfac e iden tifier in the modif[...]

39-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Understanding IPv6 A value of 137 in the IC MP p acket he ader T y pe field ide ntifies an IPv6 neig hbor redi re ct mes sage. The switch suppo rts ICMPv 6 redir ect (RFC 2463). Ro uters se nd neighbor-re direct messa[...]

39-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Underst andin g IPv 6 The switch uses hardware memory to store unic ast ro utes, MAC addresses, access control lists (A C Ls), and othe r fe atu re s, and provi d e s the switc h da tabase man ageme nt (SDM) templa[...]

39-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Understanding IPv6 Passive Interfaces As with EIGRP IPv4, EIGRP IPv 6 allo ws you to spec i f y your E IGR P IPv4 i nte rface s a nd t o sele ct a subset of those to be pass ive interfaces. Us e t he passive-interf ac[...]

39-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Underst andin g IPv 6 For more compl ete syntax and usage infor mation on these co mmands, se e the Cisco IO S command refere nces. EIPRP IP v6 sup por ts t he exi stin g pro to col -indepe nd en t debug an d sh ow[...]

39-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Understanding IPv6 For complete sy ntax and us age informa tion on these co mmands , see the Cisco IOS command r eferences . Unsupporte d IPv6 Unica st Routing F eatures The switc h does not supp ort these IPv6 featur[...]

39-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Underst andin g IPv 6 • In addi tion to the normal SP AN and RSP AN limitatio ns defined in the software configu ration gu ide, these limitatio ns are specif ic to IPv6 packets: – When y ou e gress RSP AN IPv [...]

39-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Understanding IPv6 Note I Pv6 pack ets are routed in hardw are acro ss the stac k pro vided the pack et does not hav e exceptions (I Pv6Opti on s) an d th e switc hes in the sta ck h ave not run ou t of h ardwa re re[...]

39-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Conf igu rin g IPv6 • Dual IPv4 and IPv6 VL AN templa te—supports b asic Layer 2 , multicast, QoS, and A CLs fo r IPv4, and basic La yer 2 and ACLs for IPv6 on the switc h. Note An IPv4 rout e requi res only o[...]

39-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Confi guring IPv6 Default IPv6 Configuration T able 39-5 shows the de fault I Pv6 co nfigurat ion . Configuring IPv6 Addressi ng and Enablin g IPv6 Routing This se ction de scri bes how to a ssign IPv6 a ddr esses to[...]

39-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Conf igu rin g IPv6 Beginning in privileged EXEC mode, foll ow these steps to assign an I Pv6 ad dress to a L ayer 3 interfac e and en able IPv6 ro uting: T o remov e an IPv6 add ress fro m an interf ace, use the [...]

39-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Confi guring IPv6 without arg uments. T o disable IPv 6 processing on an in terfa ce that has not bee n exp licitly c onfig ured with a n IPv6 addres s, use the no ipv6 enable interface co nfiguration co mman d. T o [...]

39-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Conf igu rin g IPv6 T o disable IPv4 ro uting, use the no ip routing global configuration comm and. T o disabl e IPv6 ro uting, use the no ipv6 unicast-routing globa l c onfigurati on com ma nd. T o rem ove an IP [...]

39-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Confi guring IPv6 Configuring IPv6 IC MP Rate Limiting IPv6 ICMP rate limitin g uses a token- bu cket algorith m for limiting the ra te at which IPv6 ICMP error messages are sent to the network. The interv al between[...]

39-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Conf igu rin g IPv6 T o disabl e IPv6 CEF or distri b u ted CEF , use t he no ipv6 cef or no ipv6 ce f distr ibuted glob al configurati on comm and. T o re enabl e IPv6 C EF or dCEF if it ha s been disabl ed, use [...]

39-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Confi guring IPv6 Beginn ing in pri vileged EXEC mode, follo w these steps to conf igure an IPv6 static route: Comma nd Purpos e Step 1 conf igur e terminal Ente r global con figuration mod e. Step 2 ipv6 route ipv6-[...]

39-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Conf igu rin g IPv6 T o remov e a configu red sta tic route , use the no ipv6 route ipv6- pr efix/pr ef ix length { ipv6- address | interface- id [ ipv6-add r ess ]} [ admi nist ra tive di stance ] glo bal co nfig[...]

39-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Confi guring IPv6 Beginning in privileged E XEC mo de, fol low these re quire d an d opti onal ste ps t o con figure I Pv6 RI P: T o disab le a RIP routin g process, use the no ipv6 r outer rip name global configurat[...]

39-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Conf igu rin g IPv6 Configuring OSPF for IPv6 Open Shortest Path First (OSPF) is a link-state prot ocol for I P , which means t h at routing decisions ar e based o n t h e st ate s o f th e lin ks th at co nne ct [...]

39-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Confi guring IPv6 Beginn ing in pri vileged E XEC mode, follo w these r equired and o ptional steps to conf igure IPv6 OSPF: Comma nd Purpose Step 1 conf igur e terminal Ente r global co nfigurati on mode. Step 2 ipv[...]

39-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Displa ying I Pv6 T o disabl e an OSPF routing process, use the n o ip v6 router ospf process-id global configura tion command. T o disable the OSPF routin g process for an inter face , use the no ipv6 ospf proces[...]

39-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Displaying IPv6 ND router advertisements are sent every 200 seconds ND router advertisements live for 1800 seconds <output truncated> This i s a n exam ple of the o utput from t he show ipv6 ce f pri vileged EX[...]

39-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Displa ying I Pv6 This i s a n exam ple of the o utput from t he show ipv6 neig hbor pri vileged EXEC comman d: Switch# show ipv6 neighbors IPv6 Address Age Link-layer Addr State Interface 3FFE:C000:0:7::777 - 000[...]

39-27 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 39 Configuring IPv6 Uni cast Routing Displaying IPv6 ICMP statistics: Rcvd: 1 input, 0 checksum errors, 0 too short 0 unknown info type, 0 unknown error type unreach: 0 routing, 0 admin, 0 neighbor, 0 address, 0 port parameter: 0 error, 0 header, 0 opti[...]

39-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 39 C onfiguring IPv6 Unicast Routing Displa ying I Pv6[...]

CH A P T E R 40-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 40 Configuring HSRP This ch apter descr ibes how to us e Hot Sta ndby Router Protocol ( HSRP) o n the sw itch to provide rou ting redunda ncy for routin g IP traffic without being d epende nt on the availability of a ny single router .Unless otherwi[...]

40-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 40 Co nfiguring HSRP Underst an ding HSRP HSRP is use ful for hosts that do no t support a route r discovery prot ocol an d cannot sw itch to a new router when their select ed router re loads or lo ses po wer . When HSRP is conf igured on a netwo rk s[...]

40-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 40 Configuring HSRP Unde rsta ndin g HS RP Figur e 40-1 T ypical HSRP Con figur ation Multiple HSRP The switch sup ports Mu ltip le H SRP (MHSRP), an e xten sio n of HSRP that a llo ws load sharing betw een two or more HSRP gro ups. Y ou c an configure M[...]

40-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 40 Co nfiguring HSRP Configuring HSRP Figu re 40-2 M HSR P L oad Sharing HSRP and S witch S tacks HSRP hel lo mes sa ges ar e g en erat ed by th e s tac k ma st e r . If an H SRP -a ctive stac k m as ter fa ils , a fl ap in the HSRP acti ve state migh[...]

40-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 40 Configuring HSRP Configur ing HSRP • Enablin g H SRP Supp ort for I CM P Re dir ect M e ssages, p age 40-11 • Configuring H SRP Group s and Clust eri ng, pa ge 40-1 1 Default HSRP Configuration T able 40-1 sho ws the default HSRP configu ration. H[...]

40-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 40 Co nfiguring HSRP Configuring HSRP When th e standby ip comma nd is enabled on an interf ace and pr oxy A RP is en abled, if the interfa ce’ s Hot Standb y state is acti ve, prox y ARP reque s ts are answer ed using the Hot Standb y group MA C ad[...]

40-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 40 Configuring HSRP Configur ing HSRP Configuring HSRP Priority The standby priority , st andby preempt , and standby track interfa ce configu ratio n com mands ar e al l used to set c ha rac terist ics f or finding active and st andby rou t ers a nd beh[...]

40-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 40 Co nfiguring HSRP Configuring HSRP Use the no standby [ gr o up-numbe r ] priority priority [ preempt [ delay delay ]] a nd no standby [ gr oup-num ber ] [ priority priority ] preempt [ delay delay ] interface co nf igurati on commands to restore d[...]

40-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 40 Configuring HSRP Configur ing HSRP This exam ple a ctiv ates a po rt, se ts a n I P a dd ress a nd a pr iori ty of 12 0 (hi gh er t han th e de fault value) , and waits for 30 0 second s (5 minutes ) before atte mpt ing to become the active router: Sw[...]

40-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 40 Co nfiguring HSRP Configuring HSRP When conf iguring these a ttrib utes, fo llo w these g uideline s: • The aut hentica tion string i s sent unencryp ted in all HSRP message s. Y ou must configure th e same authenti cation strin g on al l router[...]

40-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 40 Configuring HSRP Displa ying HSRP Con figurations This exampl e shows ho w to set the time rs on standby group 1 wi th the time between hello packet s at 5 seconds an d the tim e after whic h a rout er is consi dered down to be 15 seco nds: Switch# c[...]

40-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 40 Co nfiguring HSRP Displaying HSRP Configu rations This is a an exampl e of o ut put fro m the show standby privileged EXEC comma nd, displa ying HSRP inform ation fo r two standby groups (gro up 1 and group 100) : Switch# show standby VLAN1 - Grou[...]

CH A P T E R 41-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 41 Configuring Cisco IOS IP SLAs Operations This chap te r d escr i bes ho w to use Cisco IOS IP Ser v ice Le vel Agreem en ts (SL As ) on th e switc h. Cisco IP SLAs i s a part of Cisc o IOS softwa re t ha t allows C isco cu stom er s to an alyz e [...]

41-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLAs Operations Unde rst a n din g Cis co IO S IP S LAs options such as sour ce and de stinatio n IP address, User Datagram Pr otocol (UDP)/T CP port num bers, a type of se rvice (T oS) b yte (incl uding Dif ferentiated Se [...]

41-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLA s Operation s Understa nding Ci sco IOS IP SLAs Using Cisco IOS IP SLAs to Measure Netw or k Per form ance Y ou ca n use I P SL As to mon ito r th e pe rform an ce b etwe en any ar ea in th e n etwor k—c ore , di stribut[...]

41-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLAs Operations Unde rst a n din g Cis co IO S IP S LAs IP SLAs Res ponder an d IP SLAs Co ntrol Protocol The IP SLAs respond er is a compon ent embedded in th e destinatio n Cisco de vic e that allo ws the system to antici[...]

41-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLA s Operation s Understa nding Ci sco IOS IP SLAs Figur e 41 -2 Cisco IO S IP SLAs Res ponder Time Stam ping An addi tional benef it of the two t ime stamps a t the ta rge t de vice is the abili ty to t rack one-w ay dela y [...]

41-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLAs Operations Configur ing IP SLAs Op erati ons • One-way mean op inion sco re (MOS) • One-w ay latenc y An IP SLAs thresh old viola tion can also tri gger anothe r IP SLAs opera tion for furt her anal ysis. For exa m[...]

41-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLA s Operation s Configuring I P SLAs Operati ons Note that no t all of the IP SLAs comm ands or ope rations de scribed in this guide ar e suppor ted on the switch. Th e switch supports IP servi ce lev el analysis by using UD[...]

41-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLAs Operations Configur ing IP SLAs Op erati ons Configurin g the IP SLAs Respond er The IP SLA s respond er is av a ilabl e only on Ci sc o IOS software -based devices , includi ng some La yer 2 switches th at do not supp[...]

41-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLA s Operation s Configuring I P SLAs Operati ons • Per-direction de la y (one -way de lay ) • Round-tr ip delay (average roun d-trip time) Because the paths for the sendin g and receiving of dat a can be different (as ym[...]

41-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLAs Operations Configur ing IP SLAs Op erati ons Step 3 udp-jitter { destination-ip-addr ess | dest inat ion-ho stn ame } des tinat ion -port [ source- ip { ip-address | hostname }] [ sour ce-port port-number ] [ cont rol[...]

41-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLA s Operation s Configuring I P SLAs Operati ons T o disable the IP SLAs operation, ente r the no ip sla o per ati on-n umber gl obal co nfigurati on comman d. This example shows ho w to co nfigure a UDP jitte r IP SLAs ope[...]

41-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLAs Operations Configur ing IP SLAs Op erati ons Note Th is oper ation does not requ ire the IP SLAs respo nder to be enab led . Beginn ing in pri vileged EXEC mode, fo llo w these steps to conf igure an ICMP echo operati[...]

41-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLA s Operation s Configuring I P SLAs Operati ons T o disable the IP SLA s operat ion, enter the no ip sla oper ation-nu mber global con figuration c ommand. This exampl e shows ho w to configure an IC MP echo IP SLAs oper a[...]

41-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 41 Configuring Cisco IOS IP SLAs Operations Monito rin g IP SLAs O perations Monitoring IP SLAs Operations Use th e user EXEC o r pri vileg ed EXE C com mands in Ta b l e 4 1 - 1 to display IP SLAs operations configurati on and re sults . T able 41 -[...]

CH A P T E R 42-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 42 Configuring Enhanced Object Tracking This chapter describes how to configure en hanced ob ject tra cking on the sw itch. Thi s feature provides a more complete alte r nati ve to the Hot Standby Routin g Protocol (HSRP) track ing mechanism. whic h[...]

42-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 42 Configurin g Enhanced Obje ct Track ing Configur ing Enhance d Object Tracking Fe atures Configuring En hanced Objec t Trackin g Features These sec tions descr ibe configuri ng enhanc ed obj ect tracki ng: • Default Con figuration, page 42-2 •[...]

42-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 42 Configuring Enha nced O bje ct Trackin g Co nf i gur i ng E n hanc ed Obje ct Tr acki n g F eatur es This exam pl e c onfigure s t he t r acki ng o f a n int erfac e l ine- pr otoc ol st at e an d verifies t he c on figurat ion: Switch(config)# track [...]

42-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 42 Configurin g Enhanced Obje ct Track ing Configur ing Enhance d Object Tracking Fe atures Beginn ing in pri vileg ed EXEC mode, follo w these steps to conf igure a tracke d list of objects with a Bool ean expr essio n: Use the no track trac k-numbe[...]

42-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 42 Configuring Enha nced O bje ct Trackin g Co nf i gur i ng E n hanc ed Obje ct Tr acki n g F eatur es Beginning in p rivileged EXEC m ode, follow these st eps to co nfigure a tr acked list of o bjects by using a weight thr esh old an d t o configure a [...]

42-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 42 Configurin g Enhanced Obje ct Track ing Configur ing Enhance d Object Tracking Fe atures Beginning in p rivileged EXEC m ode, follow these st eps to co nfigure a tr acked list of o bjects by using a per cent age thr eshold: Use the no track trac k[...]

42-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 42 Configuring Enha nced O bje ct Trackin g Co nf i gur i ng E n hanc ed Obje ct Tr acki n g F eatur es Configuring HS RP Objec t Trackin g Beginning in privileged EXE C mode, fol l ow these ste ps t o co nfigure a standby HSRP gr oup to tra ck an object[...]

42-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 42 Configurin g Enhanced Obje ct Track ing Configur ing Enhance d Object Tracking Fe atures Configuring Oth er Trackin g Characteris tics Y ou ca n also use t h e en ha nc ed obj ect tra cki ng fo r tr acki ng o ther cha ra cte rist ic s. • Y o u c[...]

42-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 42 Configuring Enha nced O bje ct Trackin g Co nf i gur i ng E n hanc ed Obje ct Tr acki n g F eatur es Configuring IP SLAs Object Tr acking Cisco IOS IP Service Le vel Agr eements (IP SL As) is a net work perfo rmanc e measuremen t and diagno stics to o[...]

42-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 42 Configurin g Enhanced Obje ct Track ing Monito rin g Enhanc ed Object Trac king Latest operation return code: over threshold Latest RTT (millisecs) 4 Tracked by: HSRP Ethernet0/1 3 This exam ple ou tput shows wh ethe r a ro ute is rea cha ble: Sw[...]

42-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 42 Configuring Enha nced O bje ct Trackin g Monitori ng Enhan ced Object Track ing[...]

42-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapte r 42 Configurin g Enhanced Obje ct Track ing Monito rin g Enhanc ed Object Trac king[...]

CH A P T E R 43-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 43 Configuring Web Cac he Services By Using WCCP This chapter describes ho w to configure y our switch to redi rect traf fic to wide-a rea applica tion engines (such as the Cisco Ca che Eng i ne 550) by using the W eb Cache Com munica tion Protoc ol[...]

43-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 43 Configuring Web Cache Serv ices By Using WCCP Understan ding WCCP When an applica tion engine recei ves a request , it attempts to service it from its o wn local cache. If the requested info rmati on i s not present, th e ap plica tio n en g ine se[...]

43-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 43 Configuring Web Cache Services By Usi ng WCCP Understa nding WCCP WCCP Negotiation In the exchange of WCCP protocol messages , the design ated appl ication engi ne and the WCCP-enable d switch ne g otiate these items: • Fo rwar ding method (the met [...]

43-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 43 Configuring Web Cache Serv ices By Using WCCP Understan ding WCCP Y ou ca n co nfigure up to 8 se rv ice gr ou ps o n a sw itch an d u p to 32 cl ients pe r ser vi ce gro up. W C CP maintains the p riority of the serv ice group in the gr oup defin [...]

43-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 43 Configuring Web Cache Services By Usi ng WCCP Configuring WCCP Unsupporte d WCCP Features These WCCP features are not supporte d in this software release: • Packet redirect ion on an outb ound inte rface tha t is configured by using the ip wccp r ed[...]

43-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 43 Configuring Web Cache Serv ices By Using WCCP Configuring WCCP • The num ber of av ailable policy-based routing (PB R) label s are reduc ed as mor e interfac es are enabl ed for W CCP ingress r edirecti on. For ev ery inter face that suppo rts se[...]

43-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 43 Configuring Web Cache Services By Usi ng WCCP Configuring WCCP Comma nd Purpos e Step 1 conf igur e terminal Enter globa l configurati on mode. Step 2 ip wccp { w eb- cach e | service-number } [ group-addr ess groupaddr ess ] [ group-list access-list [...]

43-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 43 Configuring Web Cache Serv ices By Using WCCP Configuring WCCP T o disabl e the web cache s ervic e, u se the no ip wc cp web- cache global configur ation co mman d. T o disable inbo und pa cket r edir ect ion, u se the no ip wccp web-cache redir e[...]

43-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 43 Configuring Web Cache Services By Usi ng WCCP Mo nitoring and Maintaining WCCP This e xample sho ws how to conf igure SVIs an d how to enable the web cache ser vice with a multica st group l ist. VL AN 29 9 is cr ea ted and c onfigure d wi th an IP ad[...]

43-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 43 Configuring Web Cache Serv ices By Using WCCP Monitorin g and Maintainin g WCCP show ip interface Di splay s sta tus ab out a ny IP WCC P redi r ecti on comm an ds th at ar e conf igured on an interf ace; for exam ple, Web Cache Re direct is enabl[...]

CH A P T E R 44-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 44 Configuring IP M ulticast R outing This chapte r describes ho w to configure IP m ulticast routing on the switch. IP multicasting is a more ef ficient w ay to use networ k resour ces, especially for bandwi dth-intensi ve servi ces such as audio a[...]

44-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Underst an ding Cisco ’s Imple mentat io n of IP Multica st Routing Understandin g Cisco’s Imp lementati on of IP Multicast Ro uting The Cisco IOS softwa re supports these protocols to implem ent IP multica st [...]

44-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Understanding Cisco’s Implementation of IP Multicast Routing Understand ing IGMP T o participat e in IP multicast ing, multicast hosts, routers, and multil ayer switches must hav e the IGMP operati ng. T his pro to[...]

44-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Underst an ding Cisco ’s Imple mentat io n of IP Multica st Routing Understand ing PIM PIM is called pr otoc ol-in depen dent : regardle ss of the unic ast routi ng protoco ls used to pop ulate the unicast r outi[...]

44-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Understanding Cisco’s Implementation of IP Multicast Routing When a new receiv er on a previously prune d branch of t he tree joins a multicas t group, the PIM DM de vic e detect s the ne w receiv er and immedi ate[...]

44-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Underst an ding Cisco ’s Imple mentat io n of IP Multica st Routing The red und an t PIM stub r oute r to pology is not su ppor ted . The redu nda nt t opol ogy exist s whe n th ere is more than one PIM router fo[...]

44-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Understanding Cisco’s Implementation of IP Multicast Routing Mapping agen ts listen to these candidate RP announce ments and use the informatio n to creat e entries in their Gr oup-t o-RP ma pping c aches. Only o n[...]

44-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Underst an ding Cisco ’s Imple mentat io n of IP Multica st Routing W ith multicasting, the source is sending tra f fic to an arbitra ry gro up of hosts repr esente d by a multicast group add ress in the destinat[...]

44-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Multicast Routing and Switch Stacks Sparse-mode PIM uses the RPF looku p function t o decide wher e it needs to send joi ns and prunes: • (S,G ) joins (whic h are source-tr ee states) are sent to ward th e source. [...]

44-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con fi gur ing IP Mu ltic ast R ou ti ng In a switch s tack, the routing m aster (st ack maste r) perf orms these function s: • It is r esponsible for completing th e IP mul ticast rout ing functions o f the sta[...]

44-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring IP Multicast Routing Multicast Routing Con figuration Guidelines T o a void miscon figuring m ult icas t ro uti ng on yo ur switc h, r eview the infor mat ion in the se sec tion s: • PIMv1 an d PIMv2 I[...]

44-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con fi gur ing IP Mu ltic ast R ou ti ng Sparse- m ode group s in a mix ed PIMv1 and PIMv2 reg ion ar e possib le becaus e the Aut o-RP feat ure in PIMv 1 in tero pera tes with the PIMv 2 RP fea ture. Alt houg h a[...]

44-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring IP Multicast Routing In po pula tin g th e mult ic ast rou tin g ta ble , de nse-mo de int erfac e s are always adde d to t he t abl e. Spars e-m ode in te rfa ces are ad de d to t he ta ble on l y wh en[...]

44-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con fi gur ing IP Mu ltic ast R ou ti ng T o d isable multicastin g, use the no ip multicast-rout ing distrib uted global configuratio n comma nd. T o return to the def ault PIM v ersion, use the no ip pim version[...]

44-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring IP Multicast Routing Enabling PIM Stub Routin g Beginn ing in pri vile ged EXEC mode, f ollo w these steps to en able PIM stub r outing on an int erface. Th is procedur e is optional. T o disable PIM stu[...]

44-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con fi gur ing IP Mu ltic ast R ou ti ng • show i p igmp detail displays the intereste d clients that ha ve joined the specif ic multicast source group. • show ip igmp mroute verif ies that the multicast strea[...]

44-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring IP Multicast Routing Beginn ing in pr i vilege d EXEC m ode, follo w these step s to manually configure the address o f the RP . This proc edure is option al. T o remov e an RP address , use the no ip pi[...]

44-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con fi gur ing IP Mu ltic ast R ou ti ng Configuring Auto-RP Auto-RP us es IP multicast to automa te the distribution of group-to-R P mappings to all Cisco routers and multilaye r switches in a PIM network. It has[...]

44-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring IP Multicast Routing Beginning in privileged EXE C mod e, fol low these step s to deploy Au to-RP i n an existi ng sparse -mod e cloud. T his p roc e dure i s o pti onal . Command Purpose Step 1 show run[...]

44-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con fi gur ing IP Mu ltic ast R ou ti ng T o remove the PIM devic e c onfigured a s t he ca nd idat e R P , u se the no ip pim send-rp-announce interface- id global configu ra tion c o m mand. T o remove the swi t[...]

44-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring IP Multicast Routing Beginn ing in pri vile ged EXEC mode, foll ow th ese steps to filte r incoming RP announcement messages. This proc edure is option al. T o re mov e a filte r on incoming RP announcem[...]

44-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con fi gur ing IP Mu ltic ast R ou ti ng Switch(config)# access-list 20 deny 239.0.0.0 0.0.255.255 Switch(config)# access-list 20 permit 224.0.0.0 15.255.255.255 In thi s example, th e m ap ping a gent ac cept s c[...]

44-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring IP Multicast Routing Figur e 44-4 Constr ainin g PIMv2 BSR Me ssag es Defini ng the IP Multi cast Bou ndary Y ou define a multicast boundary to prev ent Auto-RP messages from entering the PIM domain. Y o[...]

44-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con fi gur ing IP Mu ltic ast R ou ti ng This e xample sho ws a portion of an IP multicast boundar y config uration that den ies Auto-RP inform ation: Switch(config)# access-list 1 deny 224.0.1.39 Switch(config)# [...]

44-25 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring IP Multicast Routing Configur ing Can d ida t e RPs Y ou can configure one or more candida te RPs. Similar to BSRs, the RPs shoul d also have good connec tivity to other devices and be in the backbo ne p[...]

44-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con fi gur ing IP Mu ltic ast R ou ti ng This e x ample sho ws how to configur e the swi tch to ad ver tise itself as a candi date RP to the BSR in its PIM domain . Standar d access list nu mber 4 sp ecif ies the [...]

44-27 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Confi guring Ad vanced PIM Fe atures Monitoring the RP Mapping Information T o monitor the RP mapping information, use these co mmands in pri vileged EXEC mode: • show i p pim bsr displays in formation about the e[...]

44-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Configur ing Advan ced PIM Fea tures Figur e 44-5 Shar ed T ree and Sou rc e T r ee (Shor test-P ath T ree) If the d ata r ate warr an ts , le af rou ters (r oute rs with out any downst ream c onn ect ions) o n th[...]

44-29 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Confi guring Ad vanced PIM Fe atures Delaying the Use of PIM S hortest-Path Tree The ch ange from shar ed to sour ce tr ee ha ppens wh en the first da ta packe t arrives at the las t-hop rou ter (Route r C in Figur [...]

44-30 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con f i gur ing Op ti o n a l IG M P Fea tu res T o return to the default settin g, use the no ip pim spt-thr eshold { kb ps | infinit y } glob al configura tion comm and. Modifying th e PIM R outer-Query Mes sage[...]

44-31 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring Optional IGMP Features • Modify ing the IGM P Host-Qu ery Messa ge Interval, pag e 44-33 (o ptiona l) • Changin g the IGM P Query Timeout for IGMP v2, page 44 -34 (optional) • Changin g th e Maxim [...]

44-32 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con f i gur ing Op ti o n a l IG M P Fea tu res T o cancel membe rship in a gr oup, u se the no ip igmp join-gr oup gr oup-address interf ace co nf igurati on comm and. This exam ple sh ows how to enabl e t h e sw[...]

44-33 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring Optional IGMP Features T o disab le groups on a n interfa ce, use the no ip igmp access- group interf ace conf iguration command. This exampl e shows ho w to configure hosts at tached to a port as abl e [...]

44-34 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Con f i gur ing Op ti o n a l IG M P Fea tu res The switch elect s a PIM designated router (DR) for the LAN (subn et). The DR is the router or multilayer switch wi th the highest I P address f or IGMPv2. For IGMPv[...]

44-35 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring Optional IGMP Features T o return to the default settin g, use the no ip igmp querier -timeout interfa ce con figura ti on co mman d. Changing the Max imum Query Resp onse Time for IG MPv2 If you ar e us[...]

44-36 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Configur ing Optiona l Multic as t Routing Feat ures Beginn ing in p ri vilege d EXEC m ode, follo w these st eps to co nf igure the swi tch itself to be a statica lly connec ted mem ber of a gro up (and enable fa[...]

44-37 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring Optional Multicast Routing Features T o disabl e CGMP o n the interf ace, u se the no ip cgmp interfac e configurati on comma nd. When multi ple Cisc o CGMP-c apab le devices are co nnecte d to a switc h[...]

44-38 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Configur ing Optiona l Multic as t Routing Feat ures Enabling sdr Listener Support By def ault, the switch doe s not listen to session directory adv ertisements. Beginn ing in pri vileged EXEC mode, follo w these [...]

44-39 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring Optional Multicast Routing Features Configuring an IP Multicast Boundary Administrativ ely-scoped boun daries can be used to li m it the forwarding of multicast traf fic outside of a domain or subdomain.[...]

44-40 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Configur ing Basi c D VMRP Interope rabilit y F eat ures Beginning in pr ivileged EXEC mode, fo llow these step s to set up an admi ni stratively-scope d bounda ry . This proc edure is option al. T o remove the bo[...]

44-41 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring Basic DVMRP Interoperability Features Configuring DVMR P Interoperability Cisco multicast routers and multila yer switches using PIM can interoperate with non-Cisco multicast router s tha t u s e t he DV[...]

44-42 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Configur ing Basi c D VMRP Interope rabilit y F eat ures T o disable the metric or ro ute map, use the no ip dvmrp met ric metric [ lis t access-list-num ber ] [[ pr otoc ol p ro cess-id ] | [ dvmrp ]] or th e no [...]

44-43 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring Basic DVMRP Interoperability Features Configurin g a DVMRP Tunne l The soft ware sup ports DVMRP tunne ls to th e MBO NE. Y ou c an configur e a DVMRP tunn el on a router or multilaye r switch if the o t[...]

44-44 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Configur ing Basi c D VMRP Interope rabilit y F eat ures T o disabl e the f ilter , use th e no ip dvmrp accept-f ilter access-list-number [ distan ce ] neighbor-list access-list -numbe r inte rface c on figurat i[...]

44-45 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring Advanced DVMRP Interoperability Features Beginning i n privileged EX EC mode , follow th ese s teps t o adver tise net work 0.0 .0.0 to DVMRP neighb ors on an interfa ce. Th is proced ure is op tional. T[...]

44-46 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Configur ing Advan ced DVM RP Interope rability Fe atures These sec tions co ntain this configura tion info rmat ion: • Enab ling DVMRP U nic ast Routin g, pa ge 44-46 ( optional) • Rejectin g a D V MRP Nonpru[...]

44-47 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring Advanced DVMRP Interoperability Features Rejectin g a DVM RP Nonp runing Ne ighbor By def ault, Cisco d e vices accept a ll D VMRP neig hbors as peer s, r e gardless of their D VMRP capability . Howe ver[...]

44-48 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Configur ing Advan ced DVM RP Interope rability Fe atures Figur e 44-8 Route r Rejects Nonpr uning D VMRP Neighbor Note that the ip dvm rp reject-non -prun ers in te rfa ce c on fig urat ion co mm an d p revents p[...]

44-49 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring Advanced DVMRP Interoperability Features Controlling Rout e Exchanges These sec tions descr ibe how to tune the Cisco device ad vertisemen ts of D VMRP routes: • Limiting the Number of D VMRP Routes Ad[...]

44-50 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Configur ing Advan ced DVM RP Interope rability Fe atures Beginning in privileged EXEC mo de, follow these s teps to change t he threshol d number of rou tes that trigger the warn in g. T hi s p roce dur e is op t[...]

44-51 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Configuring Advanced DVMRP Interoperability Features Figur e 44-9 On Connect ed Unicast Rout es Are A dver tised by De f ault Beginn ing in pri vileg ed EXEC mode, follo w these steps to customize the summar ization[...]

44-52 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Configur ing Advan ced DVM RP Interope rability Fe atures Disabling DVMRP Autosummarization By def ault, the software automatically perform s some le vel of D VMRP summarizati o n. Disabl e this func tion if you w[...]

44-53 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Monitoring and Maintaining IP Multicast Routing T o return to the default settin g, use the no ip dvmrp met ric -o ffset i nterface c onfiguration command. Monitoring and Maintainin g IP Mu lticast Routing These sec[...]

44-54 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Mon i tor in g an d Mai nt a in in g IP M ultic as t Rou ting Displaying S ystem and Ne twork Statistic s Y ou can displa y specific statis tics, such as the conten ts of IP routi ng tables, caches, a nd database [...]

44-55 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 44 Configuring IP Mu ltic ast Routing Monitoring and Maintaining IP Multicast Routing Monitoring IP Multicast Routing Y ou can use the privileged EXEC comma nds in T able 44-6 to monitor I P mul tica st r o uters, p ac ke ts, and paths: sho w ip p im rp[...]

44-56 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 44 Co nfiguring IP Multicast Routing Mon i tor in g an d Mai nt a in in g IP M ultic as t Rou ting[...]

CH A P T E R 45-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 45 Configuring MSDP This chap ter describes ho w to conf igure the Multic ast Source Disco very Protocol ( MSDP) on the switch. The MS DP connect s multiple P r otocol-In dependent Mu lticast spa rse-mode ( PIM-SM) doma ins. MSDP is not fully suppor[...]

45-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chap ter 45 Config uring MS DP Underst an ding MSDP The purpose of this topology is to hav e domains discove r multicast sources in other doma ins. If the multicast so urces are of interest to a d omain that h as recei vers, m ulticast data is deli vered o ve[...]

45-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 45 Configuring MSDP Understandi ng MSDP Figur e 45-1 MSDP Running Be tween RP Peers MSDP Benefits MSDP has these benef its: • It break s up the shared m ulticast d istrib ution tree. Y ou can mak e the shar ed tree local to your domain. Y our local mem[...]

45-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chap ter 45 Config uring MS DP Conf igu rin g MSDP Configuring MSDP These sec tions co ntain this configura tion info rmat ion: • Default MS DP Configurati on, page 45-4 • Configuring a De fault M SD P Pe er, page 45-4 (r equire d) • Cachi ng Source- Ac[...]

45-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 45 Configuring MSDP Configuring MSDP Figur e 45-2 Def ault MSD P P eer Netw or k Beginning in pr i vileged EXEC mode, fo llow these step s to specify a de fault MSDP peer . This procedur e is required. ISP A PIM domain ISP C PIM domain SA Router A Switch[...]

45-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chap ter 45 Config uring MS DP Conf igu rin g MSDP T o remov e the defau lt peer , use the no ip msdp default-peer ip-a dd r es s | name globa l con figuratio n comm and. This exam ple shows a partia l co nfiguration of Ro uter A and Ro uter C in F igure 4 5-[...]

45-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 45 Configuring MSDP Configuring MSDP Beginn ing in pri vileged EXE C mode, fo llo w these steps to enable th e caching of source/group p airs. This procedur e is optional. Note An alternati v e to this co mmand is th e ip msdp sa-re quest globa l configu[...]

45-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chap ter 45 Config uring MS DP Conf igu rin g MSDP Requestin g Source Info rmation fro m an MSDP Peer Local RPs can send SA r eq uests and ge t i mmed iat e r esponse s f or a ll act ive sources fo r a given group. By default, the swi tch does no t se nd any [...]

45-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 45 Configuring MSDP Configuring MSDP Controlling Source In formation that Your Switch Originates Y ou can contro l the mult icast source informa tion that originat es with your switch: • Sources you advertise (base d on your sour ces) • Receivers of [...]

45-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chap ter 45 Config uring MS DP Conf igu rin g MSDP T o remove the f ilter , u se the no ip msdp r edistribut e global configurat ion c omma nd. Step 3 access-list access-list- number { deny | permit } sour ce [ so ur ce-wi ldcar d ] or access-list access-lis[...]

45-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 45 Configuring MSDP Configuring MSDP Filtering Source- Active R equest Messages By default, only switc hes tha t are ca ch in g SA informa tion can respon d to SA req uests. By def ault, such a switch honor s all SA reque st messages fr om its MSDP peer[...]

45-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chap ter 45 Config uring MS DP Conf igu rin g MSDP Controlling Source Informatio n that Your Switch Forwards By def ault, the switch for wards all SA me ssages it rec ei ves to all its MSDP pee rs. Ho we ver , you can prev ent o utgoi ng m e ssag es fr om be[...]

45-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 45 Configuring MSDP Configuring MSDP T o remove the f ilter , u se the no ip msdp sa-f ilter out { ip -a dd ress | nam e } [ list access-list-numbe r ] [ ro ut e -m a p map- tag ] glo bal configurat ion com ma nd. This e x ample sho ws how to allo w onl[...]

45-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chap ter 45 Config uring MS DP Conf igu rin g MSDP Using TTL to Limit the Multicast Data Sent in SA Messages Y o u can use a TTL v alue to control wh at da ta is enca psulated in the f irst SA message f or e ve r y source . Only mu lticast pa ckets w ith an [...]

45-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 45 Configuring MSDP Configuring MSDP Beginn ing in pri vileged EXEC mode, follo w these steps to apply a f ilter . This procedu re is optional. T o remove the f ilter , u se the no ip msdp sa-f ilter in { ip-address | name } [ list access-list-number ] [...]

45-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chap ter 45 Config uring MS DP Conf igu rin g MSDP Config ur ing an MS DP Mes h Gr ou p An MSDP me sh gro up is a gro up of M SDP spea kers tha t hav e fully me she d MSDP conn ectivity among one anot her . Any SA mes sages re ceived from a peer in a mesh gr[...]

45-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 45 Configuring MSDP Configuring MSDP Beginning in privileged EXEC mo de, f ollow these step s to shut down a peer . This pro cedure is o ptiona l. T o bring the pe er back up , use the no ip msdp shutdown { peer- name | peer ad dress } global conf igura[...]

45-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chap ter 45 Config uring MS DP Conf igu rin g MSDP Note that the ip msdp originator -id global config uration command also identif ies an interf ace to be used a s the RP a ddress. If both the ip msdp border sa-address and t he ip msdp originator -id global [...]

45-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 45 Configuring MSDP Monitoring and Maintaining MSDP Monitoring and Maintaining MSDP T o monito r MSDP SA me ssages, pee rs, state , or peer status, use one or more of the privileged EXEC comm ands in Ta b l e 4 5 - 1 : T o clear MSDP connectio ns, stati[...]

45-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chap ter 45 Config uring MS DP Monito rin g and Maint ain ing MSDP[...]

CH A P T E R 46-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 46 Configuring Fallbac k Bridging This chap ter describes ho w to conf igure fallbac k bridging (VLAN bridging) on the switch . W ith fallback bridging, you can for ward non -IP packets that the switc h does not ro ute bet ween VLA N brid ge domains[...]

46-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 46 Con figuring Fallback Bridging Underst an ding F all ba ck Brid gi ng A VLAN bridge domai n is represented with switch virtual interf aces (SVIs). A se t of SVIs and routed ports ( wh ich do no t have any VLA Ns associ at ed wi th t hem) c an b e c[...]

46-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 46 Configuring Fal lb ack Bri dg ing Configuring Fallback Bridging Figur e 46-1 F allback Br idging N etwor k Exam ple Fallback Brid ging an d Switch Sta cks When th e stack master f ail s, a stack member becomes the ne w st ack mas ter b y usin g the el[...]

46-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 46 Con figuring Fallback Bridging Configur ing Fallback Bridg ing Fallback Brid ging Co n figuration Guidelines Up to 32 bri dge g rou ps can be configu red o n the sw itch. An int erface (an SV I or rou ted po rt) ca n be a member of only one br idge[...]

46-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 46 Configuring Fal lb ack Bri dg ing Configuring Fallback Bridging Beginning i n privileged E XEC mo de, fol low these s teps to c r eat e a br idge g rou p and to ass ig n an interf ace to it. This proced ure is required . T o remov e a bridge group , u[...]

46-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 46 Con figuring Fallback Bridging Configur ing Fallback Bridg ing Switch(config-if)# bridge-group 10 Switch(config-if)# exit Adjusting Sp anning-Tree Parameters Y ou might nee d to adjust certain spanning -tree paramet ers if the defaul t val ues are [...]

46-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 46 Configuring Fal lb ack Bri dg ing Configuring Fallback Bridging T o return to the default set ting, use the no bridge bridge-gr oup priorit y global configuratio n comma nd. T o change th e prio rity on a por t, us e the br idge-gro up priority interf[...]

46-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 46 Con figuring Fallback Bridging Configur ing Fallback Bridg ing T o return to the def ault path cost, use the no bridge-group bri dg e-gr oup path-cost in te rface configurati on comm a nd. This exam ple sh ows how to chang e the pat h co st to 20 o[...]

46-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 46 Configuring Fal lb ack Bri dg ing Configuring Fallback Bridging T o return to the default settin g, use the no bridge bridge-gr o up hello-time global co nfigur ati on comm and. This exam ple sh ows how to ch ang e t he he ll o in ter val to 5 sec ond[...]

46-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 46 Con figuring Fallback Bridging Configur ing Fallback Bridg ing Beginn ing in pri vileged EXE C mode, follo w these steps to chan ge the maximum-id le interv al (maximum aging t ime). Th is proced ure is op tional. T o retur n to t he de fa ult se [...]

46-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 46 Configuring Fal lb ack Bri dg ing Monitoring and Maintaining Fallback Bridging Monitoring and Main taining Fallb ack Bridging T o monitor and maint ain the n etwork, use one or more of t he privileged EXE C comm ands in Ta b l e 4 6 - 2 : T o display[...]

46-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 46 Con figuring Fallback Bridging Monito ring and Ma i ntainin g Fall bac k Bridg ing[...]

CH A P T E R 47-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 47 Troubleshooting This chapter descr ibes ho w to identify and resolve softw are pro blems relat e d to the Cisco IOS software on the swi tch . Dep en ding o n th e na ture of th e pr oble m, you ca n u se th e c omm and- line inte rfac e (CL I) , [...]

47-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Recovering f rom a Softwa re F ailure Recovering fro m a Software Failure Switch software can be cor ru pted du ring an up grade , by downloadin g the wr ong file to the swi tch, and by d eleting the im age f ile. In all of these c[...]

47-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 47 Troublesho oti ng Recovering fr om a Lost or For gotten Passwo rd Y ou c an releas e the Mod e button after the syst em L ED st ops bl inking a nd i s so lid gr e en. Several line s of informatio n about the softwa re appear along with instru ctions: [...]

47-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Recoveri ng f rom a Lost or F org otten Pass word Y ou enable o r disable password rec ove ry by using the service passw ord-r ecovery glob al c onfiguratio n comm and. When you e nter t he service password-recov ery or no service [...]

47-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 47 Troublesho oti ng Recovering fr om a Lost or For gotten Passwo rd slot < stack-master-member-number > Proceed with reload? [confirm] y Step 6 For stacki ng-cap able swi tches, power on the rest of the swi tch stack. Procedure w ith Passw ord Rec[...]

47-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Recoveri ng f rom a Lost or F org otten Pass word Note Before cont inuin g t o St ep 9 , power o n any c onn ect ed st ack m embe rs and wa it unt il they have completely i nitialized . F ailure to follo w this ste p can result in [...]

47-7 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 47 Troublesho oti ng Recovering fr om a Lost or For gotten Passwo rd Would you like to reset the system back to the default configuration (y/n)? Cautio n Returning the switch to the d efault configurat ion result s in the lo ss of al l ex isting conf igu[...]

47-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Prev enting Switch S tac k Pr oblems Note Before cont inuin g t o St ep 9 , power o n any c onn ect ed st ack m embe rs and wa it unt il they have completely initia lized. Step 9 Write the running conf iguration to the sta rtup con[...]

47-9 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 47 Troublesho oti ng Prevent ing Aut onegoti ation Mi smatches Remo ving po wered- on stack me mbers caus es the switch stack to di vide (p artitio n) into tw o or mor e switch stacks, ea ch with the same conf iguration. If you wan t the swi tch stacks t[...]

47-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Monitorin g SFP Modu le Stat us error -disabled stat e. After the el apsed interv al, the s witch brings the in terf ace out of the er ror -dis abled state and retries th e operation. Fo r more information about the err disa bl e [...]

47-11 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 47 Troublesho oti ng Using Ping Executing Ping If you atte mp t to ping a host in a different IP sub netwo rk, you m ust define a stati c rout e to the netwo rk or have IP routing c onfigure d to ro ute be twee n those su bnet s. For mo re inf orm atio [...]

47-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Using La ye r 2 Trace r o ut e Using Layer 2 Traceroute These se ctions conta in this i nformation: • Understa ndin g L aye r 2 Traceroute , page 47 -12 • Usag e Guide lines , pag e 47-12 • Display ing the Physical Path, pag[...]

47-13 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 47 Troublesho oti ng Using IP Traceroute • The trac erout e m a c i p c omma nd outp ut sh ows the La yer 2 p ath whe n th e specified so urc e a nd destinati on IP addr es ses b elon g to t he sa me sub ne t. Wh en you s pe cify the IP addr esse s, t[...]

47-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Using I P Trac eroute of 1 or 0, it d rop s the datagr am and sends a n I nterne t Co ntro l Message Protoc ol (IC MP) time-t o-l iv e-excee de d messag e to the sende r . T race route finds the ad dress of the first hop by e xami[...]

47-15 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 47 Troublesho oti ng Usin g TD R T o end a trace in prog ress, en ter the e scape seq uence ( Ctrl-^ X by defa ult). Si multa neousl y press a nd release th e Ctrl , Shift , and 6 keys and then p ress t he X ke y . Using TDR These section s conta in thi[...]

47-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Using D ebug Command s • The open- en de d ca ble i s n ot t erm i nate d. When you run TDR, the switch d oes not re port accur ate infor mation if • The cab le for th e Giga bit link is a twisted-pair cable or is in series wi[...]

47-17 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 47 Troublesho oti ng Using Debug C ommands All deb ug comm ands are en tered in pri vileged EXEC mode , and most deb ug comman ds take no arguments . For example , beginning in privileged EXEC mo de, en ter thi s comma nd to en abl e the debugging for S[...]

47-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Using the s how pl atform fo rward Com m and Note Be aware that the debuggin g destin ation yo u use affects system overhead. Lo gging messages to the console produces very high ov erhea d, wherea s logging me ssages to a vir tual[...]

47-19 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 47 Troublesho oti ng Using the show platf orm forw ard Comma nd Gi1/0/1 0005 0001.0001.0001 0002.0002.0002 ------------------------------------------ Packet 2 Lookup Key-Used Index-Hit A-Data OutptACL 50_0D020202_0D010101-00_40000014_000A0000 01FFE 0300[...]

47-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Using t he c rashinfo Files This is an ex ampl e of the ou tput when the pack et c oming in on por t 1 in VLAN 5 ha s a destin ation MA C address s et to the rou ter MAC address in V LAN 5 and th e d estination IP add ress set to [...]

47-21 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 47 Troublesho oti ng Using On-Board Failure Logging fi le is created, you ca n use the rena m e pri v ileged EXEC command to rena me it, b ut the cont ents of the renamed f ile will n ot be di splayed b y the show stacks or the show tech-support privile[...]

47-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Using On- Board F ai lure Lo ggi ng • Uptime data—T ime whe n a standalone switch or a stack member star ts, the re ason the sw itch restarts, and the length of time the switch has been running since it last restarted • V ol[...]

47-23 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 47 Troublesho oti ng Using On-Board Failure Logging For more info rmat i on abou t using the comm ands in T able 47-3 and fo r exam ples of OB FL dat a, se e the comm an d ref e renc e for thi s rel eas e. show loggi ng onboard [ module [ switch-number [...]

47-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapter 47 Troubleshoo ting Using On- Board F ai lure Lo ggi ng[...]

CH A P T E R 48-1 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 48 Configuring Online Diagnostics This chapte r describes ho w to configure th e online diagnostic s on the switch. Note For c omplete s yntax and u sage in forma tion fo r the command s used in th is cha pter , see the co mmand refere nce fo r thi [...]

48-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 48 Configuri ng Online Di agnost ics Configur ing On li ne D iagno stics Configuring Onlin e Diagnostics Y ou must configur e the failur e thresho ld and the interval betwe en tests befo re enabli ng diagno stic monitoring. This section has this info[...]

48-3 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 48 Configuring Online D ia gnost ics Configuring Online Diagnostics Th is exa m pl e s h ow s ho w t o schedule diagnostic testing to o ccur weekly at a specific time on member switch 6 when this command is entered on a stack m aster: Switch(config)# dia[...]

48-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 48 Configuri ng Online Di agnost ics Configur ing On li ne D iagno stics T o disable diagnostic testi ng and return to the def ault settings, use the se commands: Note Th e switch nu mber option is supp orted only on stacking-capa ble switche s. • [...]

48-5 Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide OL-13270-01 Chapter 48 Configuring Online D ia gnost ics Runni ng Online Dia gnostic Tests • T o configur e the swit ch to not generate a syslog message when th e healt h-monitoring t est fails, use the no diagnostic monitor syslog global conf i gurat ion comm a nd. • T[...]

48-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Chapt er 48 Configuri ng Online Di agnost ics Running O nl ine Diagn ostic Tes ts This exam ple shows how to start a di agno stic t est by us ing t he t est na me: Switch# diagnostic start switch 2 test TestInlinePwrCtlr Th i s ex amp l e s h ow s h ow t o s [...]

A- 1 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 APPENDIX A Supported MIBs This appendix li sts the sup ported man agement infor mation base ( MIBs) for this r elease on the switc h. It contai ns these sections : • MIB List, pa ge A-1 • Usin g F TP to Acce ss th e MI B Fil es, p age A -4 MIB List • B[...]

A- 2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendi x A Suppor ted MIBs MIB Li st • CISCO-I ETF-ISI S-MIB (Onl y with the IP ser vices and ad v anced IP services fe ature sets ) • CISCO- IF- EXTEN SION S-MIB • CISCO- IGM P-FIL TER-M IB • CISCO-IMAGE-MIB (Only stack m aster featur e set de tails[...]

A-3 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix A Support ed MIBs MIB List • IEEE802 3-LAG-MIB • IF-MIB (In and out counte rs for VLANs ar e not supporte d.) • IGMP-M IB • INET -ADDRESS-MIB • IPMROUTE-MIB • OLD-CISCO -CHASSIS-M IB (Partial support on stacking -capab le switche s; some[...]

A- 4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendi x A Suppor ted MIBs Using FTP t o Acces s the MIB Fi le s Using FTP to Access the MIB Files Y ou can get eac h MIB file by using this proce dure: Step 1 Make sur e that your FTP cl ient is in passive mode. Note Some FTP clie nts d o n ot su pport pass[...]

B-1 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 APPENDIX B Working with the Cisco IOS File System, Configuration Files, an d Software Images This ap pendix descri bes how to manip ulate the switch flash file syst em, how to copy c onfiguration files, and how to archive (upload an d download) softwar e imag[...]

B-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working w it h t he F lash File Sy st em These sec tions co ntain this configura tion info rmat ion: • Displaying A vaila ble File Systems, page B-2 • Setting[...]

B-3 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Working with the Flash File System Setting the Def ault File System Y ou can specif y the f ile system or dir ectory th at the system use s as th e def a ul[...]

B-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working w it h t he F lash File Sy st em T o display information about f iles on a file system, use one of the pri vileged EXEC commands in Ta b l e B - 2 : T o d[...]

B-5 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Working with the Flash File System Creating and Rem oving Directo rie s Beginning i n privileged E XEC mo de , fol low th ese s tep s t o cr ea te an d re m[...]

B-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working w it h t he F lash File Sy st em Some in valid combinat ions of source and dest inatio n exist. Specifically , you c annot copy thes e comb inat ion s: ?[...]

B-7 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Working with the Flash File System Beginn ing in pri vilege d EXEC mode, follo w these steps to create a f ile, d isplay the contents, and e xtract it. Comm[...]

B-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working w it h t he F lash File Sy st em This e xam ple s ho ws ho w to cre ate a f ile. This comm and writ es the cont ents o f the new-configs director y on the[...]

B-9 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Working with Configuration Files service linenumber service udp-small-servers service pt-vty-logging ! <output truncated> Working with Configuration F[...]

B-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working w ith Con figuration Files Guidelines for Cr eating and Using Co nfiguration Files Creatin g configura tion files ca n a id in y our switc h con figurati[...]

B-11 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Working with Configuration Files Creating a Configuration File By Using a T ext Editor When cre ating a configura tion file, you must lis t commands lo gic[...]

B-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working w ith Con figuration Files • Ensure t hat the co nf iguratio n file to be do wnloaded is in the correct director y on the TFTP server (usually / tftpbo[...]

B-13 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Working with Configuration Files Step 3 Upl oad the sw itch configur ation to the TFT P server . Specify the IP ad dress or ho stname of the TF TP serv er [...]

B-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working w ith Con figuration Files These sec tions co ntain this configura tion info rmat ion: • Preparin g to Downlo ad or Upload a Conf iguration File By Usi[...]

B-15 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Working with Configuration Files This exam ple shows how to copy a c onfigurati on file named host 1-confg from the ne tadm in1 direct ory on the remo te s[...]

B-16 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working w ith Con figuration Files This exam ple shows how to copy t he run ni ng co nfigura tion file name d swi tch2-confg to the netadmin1 directo ry on t he [...]

B-17 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Working with Configuration Files The RC P requires a client t o send a re mote user name with each RCP requ est to a ser ver . When you c opy a conf igurat[...]

B-18 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working w ith Con figuration Files Downloading a Configura tion File By Using RCP Beginning in privileged EXEC mode , follow these steps to download a configurat[...]

B-19 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Working with Configuration Files Uploading a Configuration File By Using RCP Beginn ing in pr i vilege d EXEC m ode, follo w these step s to upload a conf [...]

B-20 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working w ith Con figuration Files Clearing the Startup Con figuration File T o clear th e c on tents of yo ur star t up co nfigur ation, u se the erase n vram: [...]

B-21 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Working with Configuration Files Y ou use the ar chi ve conf ig pr i vileged EX EC comm and to save configurations i n the configur ation archi ve by using[...]

B-22 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working w ith Con figuration Files Configuration Guideli nes Follow these guidel ines wh en configuri ng and perfo rmin g configurati on repla cement an d rollb [...]

B-23 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Working with Configuration Files Performing a Configurat ion Replacement or Rol lback Operation Starting in pri vileged E XEC mode, f ollo w these steps to[...]

B-24 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working wi th Soft ware Imag es Working with So ftware Image s This se cti on desc ribe s how to arc hive (download an d u ploa d) sof tware ima ge files, whi ch[...]

B-25 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Work ing with Software Images These sec tions co ntain this configura tion info rmat ion: • Imag e Locat ion on the Switch , pag e B-25 • File Format o[...]

B-26 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working wi th Soft ware Imag es board_ids:0x401100c4 0x00000000 0x00000001 0x00000003 0x00000002 0x00008000 0x0000 8002 0x40110000 info_end: Note On n onsta cki [...]

B-27 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Work ing with Software Images Preparing to Download or Uploa d an Image File By Using TFTP Before yo u begin dow nload ing or uplo ading an ima ge file by [...]

B-28 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working wi th Soft ware Imag es The do wnload algorithm veri fies th at the image is appropria te for the switch model and that eno ugh DRAM is prese nt, or it a[...]

B-29 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Work ing with Software Images The algorith m installs the do wnloaded image on the system board flash de vice (flash:). The imag e is placed into a ne w di[...]

B-30 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working wi th Soft ware Imag es Y ou upload a sw itch ima ge file to a server for back up purpos es. Y ou can use this upl oaded image for future do wnloads to t[...]

B-31 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Work ing with Software Images Before yo u begin dow nload ing or upload ing an image f ile by using FTP , do these tasks: • Ensur e that the swit ch has [...]

B-32 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working wi th Soft ware Imag es Step 7 archiv e download-sw /allow-feature-upgrade [ /direc tory ] /overwrit e /relo ad tftp: [[ // location ] / dir e ctor y ] /[...]

B-33 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Work ing with Software Images The download a lgor ithm verifies tha t t he i m age i s a pp ropri ate f or the swi tch m odel and t hat enou gh DRAM is pre[...]

B-34 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working wi th Soft ware Imag es The archiv e uplo ad-sw command builds an imag e file on the serv er by uploading these f iles in order: info, t he Cisco IOS im [...]

B-35 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Work ing with Software Images Preparing to Download or Uploa d an Image File By Using RCP RCP provide s another metho d of do wnloading and u ploading imag[...]

B-36 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working wi th Soft ware Imag es If the switch IP addre ss translates to Swit ch1.compa ny .com , the .rhosts file for User0 on the RCP server shou ld cont ai n t[...]

B-37 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Work ing with Software Images Step 6 archiv e download-sw /allow-feature-upgrade [ /direc tory ] /overwrit e /relo ad tftp: [[ // location ] / dir e ctor y[...]

B-38 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working wi th Soft ware Imag es The do wnload algorithm veri fies th at the image is appropria te for the switch model and that eno ugh DRAM is prese nt, or it a[...]

B-39 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix B Workin g w ith the Cisco IOS File System , Conf i guration F il es , and Softwa re Ima ges Work ing with Software Images The archive upl o ad-sw pri vileg ed EXEC comman d buil d s an image f ile on the serv er by upload ing these fi les in order[...]

B-40 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix B Working with the Cisco IOS File S ystem, Co nfigurat ion Files, an d Software Ima g es Working wi th Soft ware Imag es Beginn ing in priv ileged EXEC mode from the stack member th at you want to upgra de, follo w these steps to copy the ru nning i [...]

C-1 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 APPENDIX C Unsupported Co mmands in Cisco IOS Release 1 2.2(40) EX1 This app endix lists som e of the co mmand-line in terface (CLI) comm ands that ap pear when y ou enter t he question mark (?) at the switch prompt b ut are not supporte d in this release, ei[...]

C-2 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix C Unsupported Commands in Ci sco IOS Release 12.2(40)EX1 Archive Com m a nds Archive Commands Unsupporte d Privileged E XEC Commands ar chiv e conf ig sho w ar chiv e conf ig sho w ar chiv e log ARP Comma nds Unsupporte d Global Con figuratio n Comman[...]

C-3 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix C Unsupp ort ed Comm and s in Cisco IOS Re lease 12.2(40 )EX1 Embe dded Event Manag er Unsupporte d Privileged E XEC Co mmands debug platf orm cli-re direct ion main debug p latform c onfigurati on Embedded Event Ma nager Unsupporte d Privileged E X[...]

C-4 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix C Unsupported Commands in Ci sco IOS Release 12.2(40)EX1 Fallback B ridging show bridge vlan sho w interfac es crb sho w interfac es { ether net | f astether net } [ in ter fac e | slot /port ] irb show su bscr iber-polic y range Unsupporte d Global C[...]

C-5 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix C Unsupp ort ed Comm and s in Cisco IOS Re lease 12.2(40 )EX1 HSRP bridge-gr oup bridge-gr o up ou tp ut-lat -servi ce- per mit gr oup-list bridge-gr oup bridge-gr o up ou tput-lsa p-list a ccess-list-number bridge-gr oup bridge-gr o up ou tp ut-pa [...]

C-6 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix C Unsupported Commands in Ci sco IOS Release 12.2(40)EX1 Interface Co mmands Interface Command s Unsupporte d Privileged E XEC Commands show in terfac es [ interface-id | vlan vlan -id ] [ crb | fair -queue | irb | mac- accounting | pr ecedence | irb [...]

C-7 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix C Unsupp ort ed Comm and s in Cisco IOS Re lease 12.2(40 )EX1 IP Unicast Routing Unsupporte d Global Con figuratio n Commands ip multicast-r outing vrf vrf-name ip pim accept- rp { addr e ss | aut o-rp } [ group-access-lis t-number ] ip pim message-[...]

C-8 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix C Unsupported Commands in Ci sco IOS Release 12.2(40)EX1 IP Unicas t Rou ti ng show i p bgp re gexp r e gular e xpr es sion show i p pref ix-list r e gular expr es sion Unsupporte d Global Con figuratio n Commands ip accounting pr ecedence { input | o[...]

C-9 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix C Unsupp ort ed Comm and s in Cisco IOS Re lease 12.2(40 )EX1 MAC Addr ess Commands neighbor advertise- map neighbor allo was-in neighbor default-originate neighbor description network backdoor table-m ap Unsupporte d VPN Configu ration Comma nds Al[...]

C-10 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix C Unsupported Commands in Ci sco IOS Release 12.2(40)EX1 Miscella neous show ma c-addr ess-table interfa ce show mac-addr ess-table multicast show mac-addr ess-table notificat ion show mac-addr ess-table static show mac-addr ess-table vlan show mac a[...]

C-11 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix C Unsupp ort ed Comm and s in Cisco IOS Re lease 12.2(40 )EX1 MS DP MSDP Unsupporte d Privileged E XEC Co mmands show access-expression show ex cep tion show location show pm LINE show smf [ interface-i d ] show su bscr iber-polic y [ policy-n umbe[...]

C-12 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix C Unsupported Commands in Ci sco IOS Release 12.2(40)EX1 QoS QoS Unsupporte d Global Con figuratio n Command priority-list Unsupporte d Interface Configuration Commands priority-gr oup rate-limit Unsupporte d Policy-Map Configuration Command class cl[...]

C-13 Cisco Catalyst Bla de Switch 3130 for Dell Software Conf iguration Gui d e OL-13270-01 Append ix C Unsupp ort ed Comm and s in Cisco IOS Re lease 12.2(40 )EX1 Spannin g Tree Spanning Tree Unsupporte d Global Con figuratio n Command spanning-tree pathcost method { long | short } Unsupporte d Interface Configuration Command spanning-tree st ack-[...]

C-14 Cisco Catalyst Blade S witch 3130 for Dell Softwa re Configurat ion Guide OL-13270-01 Appendix C Unsupported Commands in Ci sco IOS Release 12.2(40)EX1 VTP[...]

IN-1 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 INDEX Numerics 10-Gi gabit E thern et i nte rface s 10-6 A AAA dow n polic y, NA C La ye r 2 I P va li datio n 1-10 abbrev iati ng comm ands 2-4 ABRs 38-26 acces s templates 8-1 acces s-class comma nd 34-20 acces s contr ol entries See ACEs access-de nie d r[...]

Index IN-2 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 matc hing cri teria 34-8 undef ined 34-21 IPv4 applyi ng t o int erfa ces 34-20 crea ting 34-8 matc hing cri teria 34-8 named 34-15 numbers 34-8 terminal lines, setting on 34-19 unsuppo rte d fea tur es 34-7 IPv6 and st acking 35-3 applyi ng t o int erfa [...]

Inde x IN-3 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 adminis trative di stances defined 38-93 OSPF 38-33 rout ing protoc ol defa ult s 38-84 advanc ed IP s ervi ces fe a ture se t 1-2 advertisements CDP 26-1 LLDP 27-2 RIP 38-20 VTP 12-20, 13-3 aggreg ata ble glob al unic ast ad dress es 39- 3 aggreg ate[...]

Index IN-4 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 autonegotiati o n duplex mo de 1-4 interfa ce confi gurat ion guidel ines 10-18 misma tches 47-9 autonom ou s sys tem bo und ar y r outers See ASBRs autonom ou s syste ms, in BG P 38-49 Auto-RP, d escribe d 44-6 autose nsing, port speed 1-4 auxili ary VLA[...]

Inde x IN-5 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 boot loader acce ssing 3-15 describe d 3-2 enviro nment variab les 3-15 pr ompt 3-15 trap- door mech anism 3-2 bootstrap router (BSR) , describe d 44-7 Border Gatewa y Protocol See BGP BPDU erro r-dis abled s tate 19-2 filtering 19-3 RSTP fo rm at 18-[...]

Index IN-6 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 Cisco Disc overy Pr otocol See CDP Cisco Expr ess For war ding See CEF Cisco Group Man agement Protoco l See CGMP Cisco IOS DHCP serv er See DHCP, Cisco IOS DHCP ser ver Cisco IOS File System See IFS Cisco IOS IP SLAs 41-1 Cisco Network Assistant See Netw[...]

Inde x IN-7 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 comm an d-li ne in te rf ac e See CLI comm an d m od es 2-1 comm ands abbrev iating 2-4 no and defaul t 2-4 commands, sett ing privilege levels 7-8 community li st, BGP 38-58 comm unity port s 15-2 communi ty strings config uring 32-8 overvi ew 32-4 c[...]

Index IN-8 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 corru pted s oftwa re, reco very steps wit h Xmodem 47-2 CoS in Layer 2 frames 36- 2 override prior ity 14-6 trust pr iority 14-6 CoS input queue threshold map for QoS 36-16 CoS outp ut qu eu e thre shol d m ap f or QoS 36-19 CoS-to-DSCP map for QoS 36-60[...]

Inde x IN-9 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 IPv6 39-13 Layer 2 int erface s 10-16 Layer 2 pro tocol tunneling 16-11 LLDP 27-3 MAC a ddr ess t abl e 6-21 MAC addr ess-tab le move upd ate 20-5 MSDP 45-4 MSTP 18-15 multi-VRF CE 38-68 MVR 23-20 NTP 6-4 optional spanning-t ree conf igurati on 19-12 [...]

Index IN- 10 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 for IP addres s info rmat ion 3-5 for rec eivi ng the conf igur ati on fi le 3-5 overvi ew 3-3 relationship to BOOTP 3-4 rela y suppo rt 1-6, 1-12 support fo r 1-6 DHCP bind i ng da tabase See DHCP snooping binding dat abase DHCP bi ndi ng tab le See DH[...]

Inde x IN- 11 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 distan ce-v ec tor pr otoc ols 38-3 distribu te-list com mand 38-93 DNS and D HCP-base d auto configu ration 3-6 default conf igur ati on 6-16 displaying t he c on figur ation 6-17 in IPv6 39-4 overvi ew 6-15 setting up 6-16 support fo r 1-6 documen[...]

Index IN- 12 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 displaying 44-54 favori ng one over an other 44-52 limiting the number i n jected in to MBONE 44-49 limiting unicast ro ute advertise ments 44-41 rou tin g ta ble 44-9 source distri bution tree , building 44-9 support fo r 1-12 tunnel s config uring 44-[...]

Inde x IN- 13 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 E EBGP 38-45 editing featu res ena bling and disab ling 2-7 keystro kes us ed 2-8 wrapped l ines 2-9 EIGR P authenti cation 38-42 comp onents 38-37 config uring 38-40 default conf igur ati on 38-38 definition 38-36 interfac e paramete rs, config uri[...]

Index IN- 14 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 Layer 3 int erface 38-5 load balancin g 37-7, 37-17 logical int erfaces, described 37-4 PAgP aggreg ate-port lea r ners 37-18 compatibilit y with Catalyst 1900 37-18 describe d 37-5 displaying sta tus 37-22 interactio n with other featur es 37-6 learn m[...]

Inde x IN- 15 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 fallback br idging and pro tected po rts 46-4 bridge group s crea ting 46-4 describe d 46-2 displaying 46-11 fu ncti on of 46-2 number supp orted 46-5 removi ng 46-5 bridge ta ble clearin g 46-11 displaying 46-11 config urati on guidelin es 46-4 con[...]

Index IN- 16 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 flash dev ice, num ber of B-1 Flex Links config urati on guidelin es 20-5 config uring 20-6, 20-7 config uri ng pre fe rred V LAN 20-9 configur ing VLAN load balan cing 20-8 default conf igur ati on 20-5 descript ion 20-1 link l oad balanc ing 20-2 moni[...]

Inde x IN- 17 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 HP OpenView 1-5 HSRP authenti cation st ring 40-9 comm an d-sw it ch r ed und an cy 1-2, 1-7 config uring 40-4 default conf igur ati on 40-5 definition 40-1 guideline s 40-5 monitoring 40- 11 object tracking 42-7 overvi ew 40-1 priority 40-7 routin [...]

Index IN- 18 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 IGMP configur able leave timer describe d 23-6 enab lin g 23-12 configurin g the switch as a membe r of a group 44-31 statically connect ed membe r 44-35 contro lling acc ess t o gr oup s 44-32 default conf igur ati on 44-31 deleting cache entries 44-54[...]

Inde x IN- 19 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 supported ve rsions 23-3 support fo r 1-4 VLAN c onfi gur ation 23-8 IGMP throttling config uring 23-28 default conf igur ati on 23-25 describe d 23-25 displaying a ction 23-29 IGP 38-25 Immed iate Lea ve, IG MP describe d 23-6 enab lin g 24-9 inacc[...]

Index IN- 20 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 IP addresses 128-bit 39-2 classes of 38-7 default conf igur ati on 38-6 discoveri ng 6-27 for IP rout ing 38-5 IPv6 39-2 MAC addr ess assoc iation 38-9 monitori ng 38-18 IP base feat ure set 1-2 IP b roadc ast addr ess 38-17 ip cef dist ributed co mman [...]

Inde x IN- 21 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 rever se path chec k (RPF) 44-8 rou tin g ta ble deleting 44-54 displaying 44-54 RP assigni ng manual ly 44-16 configurin g Auto-RP 44-18 config uring PI Mv 2 B SR 44-22 monitoring mapping information 44-27 using Auto-RP and BSR 44-26 stacking stack[...]

Index IN- 22 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 default conf igur ati on 21-17 describe d 21-16 disabling 21-19 displaying bindings 21-19 configuratio n 21-19 enab lin g 21-18 filtering source IP addr ess 21-16 source IP and MAC ad dress 21-17 source IP a ddres s fil terin g 21-16 source IP and MAC a[...]

Inde x IN- 23 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 IPv4 a nd IPv 6 configur ing on an interfac e 39-15 differ ence s 39-2 dual p roto col stacks 39-5 IPv6 ACLs displaying 35-9 limitation s 35-3 matc hing cri teria 35-3 port 35-2 prece dence 35-2 router 35-2 supported 35-3 addresses 39-2 address form[...]

Index IN- 24 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 describe d 7-32 KDC 7-32 operati on 7-34 realm 7-33 server 7-33 support fo r 1-10 switch as trus ted third part y 7-32 terms 7-33 TGT 7-34 tickets 7- 32 key distribut ion cen ter See KDC L l2protoc ol-tun nel comman d 16-13 LACP Layer 2 pro tocol tunnel[...]

Inde x IN- 25 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 supporte d TLVs 27- 2 switch stac k conside rations 27-2 transmission timer and holdtime, setting 27-4 LLDP -MED config uring 27-3 config uri ng TLV s 27-6 monitoring and maintaining 27-7 overvi ew 27-1, 27-2 supporte d TLVs 27- 2 LLDP Me dia En dpo[...]

Index IN- 26 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 manage ment acce ss in-band browser session 1-6 CLI session 1-6 device ma nager 1-6 SNMP 1-6 out-of- band consol e port co nnectio n 1-7 manageme nt options CLI 2-1 CNS 4-1 Network Assistant 1-3 overvi ew 1-5 switch stacks 1-3 mappin g ta ble s f or QoS[...]

Inde x IN- 27 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 multicas t router interface s 23-17, 24-12 multi-VRF CE 38-80 MVR 23-24 network traf fic for analysis with probe 29-2 object tracking 42-10 OSPF 38-36 port blocking 25-18 protection 25-18 privat e VL ANs 15-15 RP mappi ng i nf ormat ion 44-27 SFP st[...]

Index IN- 28 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 MSTP boundary po rts config urati on guidelin es 18-16 describe d 18-6 BPDU filtering describe d 19-3 enab lin g 19-14 BPDU guard describe d 19-2 enab lin g 19-13 CIST, descri bed 18-3 CIST reg ional root 18-3 CIST root 18-5 config urati on guidelin es [...]

Inde x IN- 29 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 overvi ew 18-2 Port Fast describe d 19-2 enab lin g 19-12 preven ting root switch selec tion 19-10 root gu ar d describe d 19-10 enab lin g 19-18 root switch config uring 18-18 effec ts of extended syst em ID 18-18 une xpe cte d beha vior 18-18 shut[...]

Index IN- 30 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 N NAC AAA down po licy 1-10 critical authentic ation 9-15, 9-37 IEEE 802. 1x authe nticatio n using a RADIUS server 9-41 IEEE 8 02. 1x va lid ation us ing R A DIU S se rver 9-41 inacce ssible a uthenti cation by pass 1-10, 9-37 Layer 2 IE EE 802.1x va l[...]

Inde x IN- 31 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 NTP associ ations authenti cating 6-4 defined 6-2 enab ling b roa dca st messa ges 6-6 peer 6-5 server 6-5 default conf igur ati on 6-4 displaying t he c on figur ation 6-11 overvi ew 6-2 restr icting access creatin g an access grou p 6-8 disabling [...]

Index IN- 32 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 passwords default conf igur ati on 7-2 disabling re cove ry of 7-5 encr ypting 7-3 for secu rity 1-9 overvi ew 7-1 recove ry of 47- 3 setting enab le 7-3 enab le sec ret 7-3 Telne t 7-6 with user names 7-6 VTP domain 13-8 path cost MSTP 18-21 STP 17-20 [...]

Inde x IN- 33 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 policers config uring for eac h match ed traff ic class 36-48 for mo re tha n one tr affic class 36-58 describe d 36-4 displaying 36-78 number of 36-33 types of 36-9 policing describe d 36-4 hierar chical See hier arch ical policy ma ps token-buc ke[...]

Index IN- 34 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 method lists 9-26 multiple-h osts mode, described 9-8 per-use r ACL s AAA aut horizat ion 9-26 config uration t asks 9-13 describe d 9-12 RADIUS server attr ibutes 9-12 ports author izatio n state and dot 1x port-c ontrol comm and 9-7 autho rized an d u[...]

Inde x IN- 35 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 port-shut down respon se, VMPS 12-29 power mana gement TLV 27-6 preemp tion, de fault con figurat ion 20- 5 preempt ion delay, defau lt configurat ion 20-5 prefe renti al treatmen t of tra ffic See QoS prefix lists, BGP 38-57 preven ting una uthoriz[...]

Index IN- 36 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 prun ing, V TP disabling in VTP domain 13-14 on a port 12-24 enab lin g in VTP domain 13-14 on a port 12-23 exam ples 13-5 overvi ew 13-4 pru nin g- eli gib le li st chan ging 12-23 for VT P p run ing 13-5 VLANs 13-14 PVST+ describe d 17-10 IEEE 802.1Q [...]

Inde x IN- 37 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 policy m aps o n phy sical port s 36-48 port trust states with in the domain 36-35 trusted bou ndary 36-38 default auto configuration 36-21 default sta ndard c onfi gurat ion 36-30 displaying stat istics 36-78 DSCP t ra nsp ar en cy 36-39 egres s qu[...]

Index IN- 38 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 hierar chical 36- 8 hierar chical on SVIs 36-52 nonhier arc hica l o n p hysic al port s 36-48 QoS label , de fine d 36-4 queues configurin g egress characteristics 36-70 conf iguring in gress ch aract eristics 36- 66 high pr iori ty (expe dit e) 36-19,[...]

Inde x IN- 39 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 redunda ncy EtherC hannel 37-2 HSRP 40-1 STP backbon e 17-8 multidr op back bone 19-5 path cost 12-27 port priority 12-25 redunda nt li nk s and U plinkFa st 19-15 reliabl e tran sport protoc ol, EIG RP 38-37 reloadi ng software 3-17 Remote Authent [...]

Index IN- 40 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 RMON default conf igur ati on 30-3 displaying sta tus 30-6 enab ling alarms and even ts 30-3 groups suppor ted 30-2 overvi ew 30-1 statistics collec tin g g rou p Ethe rn et 30-5 collec ting g rou p hist ory 30-5 support fo r 1-13 root gu ar d describe [...]

Inde x IN- 41 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 RSTP active topolog y 18-10 BPDU format 18-12 processing 18-13 designat ed po rt, de fine d 18-9 designated swi tch, defi ned 18-9 interoper ability with IEEE 802.1D describe d 18-9 restar ting migr ation proc ess 18-26 topolo gy chan ges 18-13 over[...]

Index IN- 42 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 SFPs monitori ng sta tus o f 10-26, 47-10 numberi ng of 10-8 securit y and identificatio n 47-9 status, displaying 47-10 shaped roun d ro bin See SRR show access- lists hw-s ummar y comm and 34- 22 show an d m or e co mm an d o ut pu t, f ilte ring 2-10[...]

Inde x IN- 43 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 system contact and lo cation 32-15 trap m ana ger , conf ig uring 32-13 traps describe d 32-3, 32-5 differ ence s from infor ms 32-5 disabling 32-15 enab lin g 32-11 enabling MAC address notif ication 6-22 overvi ew 32-1, 32-4 types of 32-11 users 3[...]

Index IN- 44 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 SSH config uring 7-39 describe d 1-6, 7-38 encryption methods 7-38 switch stac k conside rations 5-18, 7-38 user au then t icatio n m eth ods, su ppo rte d 7-39 SSL config urati on guidelin es 7-45 conf iguring a s ecure HTT P client 7-48 conf igurin g [...]

Inde x IN- 45 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 default conf igur ati on 5-21 descript ion of 5-1 displayi ng i nfo rmat ion of 5-25 enabling pe rsistent MAC addre ss timer 5-21 hardwar e comp atibility and SD M mismatch mode 5-11 HSRP consi d erati ons 40-4 incompatib le softwa re and i mage upg[...]

Index IN- 46 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 static access ports assigni ng to VLAN 12-11 defined 10-3, 12-3 static addre sses See ad dress es static IP routing 1-12 static MAC addressing 1-9 static routes config uring 38-83 config urin g f or IPv 6 39-18 static routing 38-3 static VLAN memb ershi[...]

Inde x IN- 47 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 describe d 19-10 disabling 19-17 enab lin g 19-17 exten ded s y st em I D effec ts on ro ot sw itch 17-16 effec ts on the sec ond ary r oot sw itch 17-18 overvi ew 17-4 une xpe cte d beha vior 17-16 featu res su pport ed 1-7 IEEE 8 02. 1D a nd br id[...]

Index IN- 48 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 SVIs and IP unicast routin g 38-5 and rou ter ACLs 34-4 connec tin g VL A Ns 10-6 defined 10-5 routing be tween VL ANs 12-2 switch co nsole port 1-7 Switch Data base Mana gement See SDM swit ched pac kets, AC Ls on 34-37 Switched Port A nalyzer See SPAN[...]

Inde x IN- 49 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 author izat ion 7-16 login a uthenticati on 7-14 default conf igur ati on 7-13 displaying t he c on figur ation 7-17 identify ing the server 7-13 limiting the service s to the u ser 7-16 operati on of 7-12 overvi ew 7-10 support fo r 1-10 tracki ng [...]

Index IN- 50 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 tracke d objects by Boolea n expressi on 42-4 by thresho ld percenta ge 42-6 by thresho ld weight 42-5 tracki ng interf ace line-pr otoc ol sta te 42-2 trac king IP rou ting s tate 42-2 trac king obj ects 42-1 trac king pr ocess 42-1 track st ate, track[...]

Inde x IN- 51 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 tunnel p or ts describe d 10-4, 16-1 IEEE 8 02. 1Q, co nf iguri ng 16-6 incompatib ilities w ith other f eatures 16-6 twisted-pa ir Ethernet, det ecting unidir ectional links 28-1 type o f ser vi ce See ToS U UDLD config urati on guidelin es 28-4 de[...]

Index IN- 52 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 uploadin g config urati on files prep aring B-11, B-14, B-17 reasons for B-9 using FTP B-15 using RC P B-19 using T FTP B-1 2 image fi les prep aring B-27, B-30, B-35 reasons for B-24 using FTP B-33 using RC P B-38 using T FTP B-2 9 User D ata gram Pr o[...]

Inde x IN- 53 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 VLAN memb ership confir ming 12-32 modes 12-3 VLAN Quer y Protocol See VQP VLANs adding 12-9 adding to VL AN datab ase 12-9 aging dyn amic ad dresse s 17-9 allowe d on trunk 12-22 and sp anning- tree in stance s 12-3, 12-6, 12-13 config urati on gui[...]

Index IN- 54 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01 describe d 14-1 displaying 14-7 IP phone data tra ffic, descri bed 14-2 IP phone vo ice traf fi c, d escri b ed 14-2 VPN configuring routin g in 38-74 forwar ding 38-68 in service pro vider networks 38-65 routes 38-66 VPN rout ing and forw ardin g table[...]

Inde x IN- 55 Cisco Catalyst Blade S witch 3130 for Dell Softwar e Configur ation Gui de OL-13270-01 support fo r 1-8 Token R in g supp ort 13-4 transp arent m ode, config uring 13-12 using 13-1 version, gui delines 13-9 Version 1 13-4 Version 2 config urati on guidelin es 13-9 disabling 13-13 enab lin g 13-13 overvi ew 13-4 W WCCP authenti cation [...]

Index IN- 56 Cisco Catalyst Blade Switch 3130 for Dell Software C onfiguration Guide OL-13270-01[...]