Cisco Systems IE 2000 manual

Americas Hea dquarters Cisc o Syst ems , Inc . 170 West Ta sman Driv e San Jos e, CA 95 134-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553- NETS (638 7) Fax: 408 527-0883 Cisco IE 20 0 0 S witc h So ftwa r e Configuration Guide Cisco IOS R elease 15.0(1) E Y July 20 12 Text Pa rt Numbe r: OL -25866-0 1[...]

THE SPECIFICATIONS AND INFORMATION REGARDING TH E PRODUCTS IN THIS MANUAL ARE SUBJE CT TO CHANGE WITHOUT NO TICE. ALL STATEMENT S, INFORMATI O N, AND RECOMME NDATIONS IN T HIS MANUAL ARE BELI EVED TO BE A CCURATE BUT ARE P RESENTED WI THO UT WARRANTY OF ANY KIND, EXPRE SS OR IMPLIED. USERS MUST TA KE FULL RESPONSIBILITY FOR THEIR AP PLICATION OF AN[...]

iii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 CONTENTS Preface li Audienc e li Pur pose li Conv enti ons li Relat ed P ubl icatio ns lii Obtain ing Documentat ion, Obt aining Su pport , and Secur i ty Guide l ines liii CHAPTER 1 Configur ation Overview 1-1 Featur es 1-1 Featur e Software Licens ing 1-1 Ease-o f-Deployment and[...]

Cont ents iv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Underst anding Abb reviated Commands 2-4 No and defa ult Forms of Commands 2-4 CLI Er ror Me ssage s 2-5 Config uration Loggi ng 2-5 How to Use the C LI to Conf igur e Fea tures 2-6 Config uring the Comman d History 2-6 Changin g the Command Histor y Buffer Si ze 2-6 Recall[...]

Content s v Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Monit orin g and Ma inta inin g Switch Alarms St atus 3-9 Config uration Exampl es for Switch Alar ms 3-10 Config uring External Alarms : Example 3-10 Asso ciat ing Te mper atur e Ala rms to a Relay : Exam ple s 3-1 0 Creati ng or Modif ying an Alarm Profil e : Example 3-1[...]

Cont ents vi Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uring the Cli ent 4-14 Manuall y Assig ning IP In formati on on a Routed Port 4-14 Manuall y Assigni ng IP Informati on to SVIs 4-15 Modi fyin g the Sta rtup Conf igurat ion 4-1 5 Specif ying the Filena me to Read and Wri te the System Confi gura tion 4-15 Manua lly [...]

Content s vii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring Cisco IOS Age nts 5-7 Enabli ng CNS Event Ag ent 5-7 Enabl ing Ci sco IO S C NS A gent and an Initi al Co nfig urat ion 5-8 Enab ling a Partial C onfiguratio n 5-10 Monitor i ng and Ma inta ining Ci sco IOS Configura tion Engine 5-11 Config uration Exam ples[...]

Cont ents viii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Managing Switch Cl uste rs 6-13 Using th e CLI to Manage Swit ch Clus ters 6-13 Using SNM P to Manag e Switch Clust ers 6-14 Additi onal Refere nces 6-15 Rel ated D ocu me nts 6-15 Standar ds 6-15 MIBs 6-15 RFCs 6-15 Techn ica l As sist anc e 6-15 CHAPTER 7 Performi ng Sw[...]

Content s ix Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring Login Banner s 7-12 Config uring a Message -of- the-Day Lo gin Banner 7-12 Config uring a Login B anner 7-13 Mana gin g the MA C Add ress Ta ble 7-13 Changin g the Address Aging Time 7-13 Config uring MAC Address Change Notifica tion Traps 7-14 Config uring M[...]

Cont ents x Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Troubl eshooting the PT P Configu ration 8-4 Additi onal Refere nces 8-4 Rel ated D ocu me nts 8-4 Standar ds 8-4 MIBs 8-4 RFCs 8-5 Techn ica l As sist anc e 8-5 CHAPTER 9 Configur ing PROFINET 9-1 Findi ng Feature Infor mation 9-1 Restri ctions for Configurin g PROFINET 9-1[...]

Content s xi Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Standar ds 10-3 MIBs 10-3 RFCs 10-3 Techn ica l As sist anc e 10 -3 CHAPTER 11 Configur ing S DM Templat es 11-1 Finding Fe ature Inform ation 11-1 Prere quis ites for C onf igur ing S DM T empla tes 11-1 Restri ctions for Confi guring SDM Temp lates 11-1 Inform at ion Ab[...]

Cont ents xii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 TACACS+ 12-5 TACACS+ Operat ion 12-6 Defaul t TACACS+ Configura tion 12-7 TACACS+ Server Host and the Au thenticatio n Key 12-7 TACACS+ Login Authenticat ion 12-7 TACACS+ Author izatio n for Privile ged EXEC Access and Network Servic es 12-7 TACACS+ Account ing 12-8 Switch[...]

Content s xiii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Setti ng or Chan ging a Stat ic Ena ble Passwor d 12-2 6 Protec ting Enable and Enab le Se cret P asswords with Encryption 12-27 Disabl ing Pas sword Recov ery 12-27 Setti ng a Telnet Passwor d for a Terminal Li ne 12-28 Config uring Username and Passwor d Pairs 12-28 S[...]

Cont ents xiv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Verif ying Secure HTTP Con necti on: Exampl e 12-4 7 Additi onal Refere nces 12-47 Rel ated D ocu me nts 12-47 Standar ds 12-48 MIBs 12-48 RFCs 12-48 Techn ica l As sist anc e 12 -48 CHAPTER 13 Configur ing IEEE 802. 1x Port-Based Authentication 13-1 Finding Fe ature Infor[...]

Content s xv Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 802.1x Authenti cation with Inac cessibl e Authent ication Bypass 13-2 2 Support on Multiple-Aut hentic ation Ports 13-22 Authent ication Res ults 13-22 Featur e Interacti ons 13-23 802.1x Authenti cation with Voic e VLAN Ports 13- 23 802.1x Authent icati on with Port Sec[...]

Cont ents xvi Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uring an Authen ticat or and Sup plicant 13-47 Config uring an Authe nticat or 13-47 Config uring a Supplic ant Switch with NEAT 13-47 Config uring 802.1 x Authenti cation with Downloa dable ACLs and Red irect URL s 13-48 Config uring Downloa dable A CLs 13-48 Confi[...]

Content s xvii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Host De tection 14-3 Sessio n Creation 14-3 Authent ication Pr ocess 14-4 Local We b Aut hen tica tion Ba nner 14-4 Web Auth entication Custo mizable Web Pages 14-6 Web Auth entication Guideli nes 14-6 Web-Based Authenti cation Inter actions with Other Feat ures 14-8 Po[...]

Cont ents xviii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Standar ds 14-17 MIBs 14-17 RFCs 14-18 Techn ica l As sist anc e 14 -18 CHAPTER 15 Configur ing Interfac e Characterist ics 15-1 Finding Fe ature Infor mation 15-1 Restri ctions for Configurin g Interfac e Characte risti cs 15-1 Inform at ion Ab out C onf igur ing In ter[...]

Content s xix Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring the Sys tem MTU 15-18 Monitor ing and Mainta ining Inte rface Charac terist ics 15-18 Moni tori ng I nter face Stat us 15-18 Cleari ng and Resettin g Interfaces and Counte rs 15-19 Shutti ng Down and R estarting t he Interfa ce 15-1 9 Config uration Exa mple[...]

Cont ents xx Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 VLANs 17-1 Support ed VLANs 17-2 VLAN Port Membe rship Mode s 17-3 Normal- Range VLANs 17-4 Token Ri ng VLANs 17-5 Normal- Range VL AN Configur ation Gui delines 17-6 Defaul t Ethernet VLA N Config uratio n 17-6 Ethern et VLANs 17-7 VLAN Removal 17-7 Stati c-Acce ss Ports f[...]

Content s xxi Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Load S haring Usi ng S TP Port Prioriti es 17-21 Confi guri ng L oad Shar ing Usi ng ST P Pa th C ost 17-21 Config uring the VMPS Clie nt 17-22 Enter ing the IP Ad dres s o f the V MP S 17-2 2 Config uring Dynamic -Access Po rts on VMPS Clients 17-2 3 Monit orin g and Ma[...]

Cont ents xxii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 How to Config ure V TP 18-11 Config uring VTP Domain and Parameter s 18-11 Config uring a VTP Vers ion 3 Passwo rd 18-12 Enabling the VTP Version 18-1 2 Enabling VTP Prunin g 18-13 Config uring VTP on a Per -Port Bas is 18-13 Adding a VT P Client Switch to a VTP Domain 18[...]

Content s xxiii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 RFCs 19-7 CHAPTER 20 Configur ing STP 20-1 Findi ng Feature Infor mation 20-1 Prere quis ites for Conf igur ing STP 20-1 Restri ctions for Configurin g STP 20-1 Inform at ion Ab out Conf igur ing STP 20-1 STP 20-2 Spannin g-Tree Topolog y and BPDUs 20-2 Bridg e ID, Swi[...]

Cont ents xxiv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uring Optional STP Paramet ers 20-17 Monit oring and Ma intainin g STP 20-17 Additi onal Refere nces 20-18 Rel ated D ocu me nts 20-18 Standar ds 20-18 MIBs 20-18 RFCs 20-18 CHAPTER 21 Configur ing MST P 21-1 Findi ng Feature Infor mation 21-1 Inform ation Ab out C[...]

Content s xxv Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Neighbo r Type 21-15 Restar ting the Pr otoc ol Migr ation Process 21-16 How to Config ure M STP 21-16 Specif ying the MST Re gion Configura t ion and En abling MSTP 21-16 Config uring the Root Swi tch 21-17 Config uring the Opt ional MS TP Parame ters 21-1 8 Monitor ing[...]

Cont ents xxvi Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 CHAPTER 23 Configur ing Resilient Ethernet Pro tocol 23-1 Findi ng Feature Infor mation 23-1 Prereq uisites for REP 23-1 Restri ctions for REP 23-1 Inform at ion Ab out Conf igur ing REP 23-1 REP 23-1 Link I nteg rity 23-4 Fast Conv ergence 23-4 VLAN Load Bal ancing 23-4 [...]

Content s xxvii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Learni ng the Other FlexLinks Por t as the mrout er Port 24-3 Generat ing IGMP Repo rts 24-3 Leakin g IGMP Reports 24-4 MAC Address- Table Mo ve Update 24-4 Defaul t Settings for Fl exLink s and MAC Address-Tabl e Move Upda te 24-5 Config uration Gui delines for FlexLi[...]

Cont ents xxvii i Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 DHCP Server Port-Based Addr ess Alloc ation 25-9 How to Config ure D HCP 25-10 Config uring the DHCP Re lay Agent 25-10 Specif ying the Packet Fo rward ing Addres s 25-10 Enabli ng DHCP Snooping an d Option 8 2 25-11 Enabli ng the DHC P Snoopi ng B inding Database A ge[...]

Content s xxix Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring Dynamic ARP Inspect ion in DHCP Enviro nments: Example 26-12 Config uring ARP ACLs for Non -DHCP Environm ents: Exa mple 26-12 Additi onal Refere nces 26-13 Rel ated D ocu me nts 26-13 Standar ds 26-1 3 MIBs 26-13 RFCs 26-13 Techn ica l As sist anc e 26 -13[...]

Cont ents xxx Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Restri ctions for IGMP Sn ooping and MVR 28-1 Infor matio n About IGMP Snooping an d MVR 28-1 IGMP Snoopi ng 28-2 IGMP Ve rsio ns 28-2 Joinin g a Mu ltic ast G roup 28-3 Leavin g a M ulti cast Group 28-5 Immediat e Leave 28-5 IGMP C onfig ura ble-Le ave T imer 28-5 IGMP R [...]

Content s xxxi Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring IGMP Snoop i ng: Exa mple 28-21 Disabl ing a Multi cast Router Port : Example 28-2 1 Stati cally Con figuring a Host on a Port: Exa mple 28-21 Enabli ng IGMP Immediate Lea ve: Exampl e 28-21 Setti ng the IGMP Snoopng Querie r Para meters : Examples 28-21 En[...]

Cont ents xxxii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uring Prote cted Port s 29-10 Config uring Port Bloc king 29 -11 Blocki ng Flooded Traf fic on an Interf ace 29-11 Config uring Port Se curity 29-11 Enabli ng and Co nfiguri ng P ort Se curity 29-11 Enabli ng and Configuri ng Port Securit y Aging 29-15 Config urin[...]

Content s xxxii i Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 RSPAN VLAN 30-7 SPAN and RSPAN I nteraction wit h Other Fea tures 30-8 Local SP AN Confi guratio n Guidelines 30-9 RSPAN Confi guration Guid elines 30-9 Defaul t SPAN and RSP AN Settings 30-10 How to Config ure S PAN and RSP AN 30-10 Creati ng a Local SPAN Session 30[...]

Cont ents xxxiv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uring LLDP-MED TLVs 31-6 Config uring Network -Polic y TLV 31-6 Confi guri ng L oca tion TL V and Wi red Locat ion Serv ice 31-7 Monitor ing and Ma intain ing LLDP, LLDP-ME D, and Wire d Location Ser vice 31-8 Config uration Exam ples for Co nfiguri ng LLDP, LLDP-[...]

Content s xxxv Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 CHAPTER 33 Configur ing UDLD 33-1 Findi ng Feature Infor mation 33-1 Prereq uisites for UDLD 33-1 Restri ctions for UDLD 33-1 Infor matio n About UDLD 33-1 UDLD 33-1 Modes of Oper ation 33-2 Methods t o Detect Unidire ctional Links 33-2 Defaul t UDLD Settings 33-4 How t[...]

Cont ents xxxvi Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Standar ds 34-6 MIBs 34-6 RFCs 34-6 Techn ica l As sist anc e 34 -7 CHAPTER 35 Configur ing System Message Logg ing 35-1 Findi ng Feature Infor mation 35-1 Restri ctions for System Message Log ging 35-1 Infor matio n About Syste m Message Lo gging 35-1 System Me ssage Lo[...]

Content s xxxvi i Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 CHAPTER 36 Configur ing S NMP 36-1 Findi ng Feature Infor mation 36-1 Prereq uisites for SNMP 36-1 Restri ctions for SNMP 36-1 Inform ation Ab out S NMP 36-2 SNMP 36 -2 SNMP Vers ions 36 -2 SNMP Manage r Functions 36-4 SNM P Agen t Func tion s 36 -4 SNMP Communi ty S[...]

Cont ents xxxvii i Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 CHAPTER 37 Configur ing Networ k Security wit h ACLs 37-1 Findi ng Feature Infor mation 37-1 Restri ctions for Network Security wi th ACLs 37-1 Inform at ion Ab out N etwo rk S ecu rity w ith ACLs 37-1 ACLs 37-1 Support ed ACLs 37-2 Port A CL s 37-2 Handli ng Fragment[...]

Content s xxxix Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Applyi ng ACL to a Port : Example 37-21 Applyi ng an ACL to an Inte rfac e: Example 37 -21 Route d A CLs: Exam ples 37-2 2 Config uring Numbered ACLs : Example 37-23 Config uring Extended ACLs: Exa mples 37-23 Creati ng Na med ACLs: Example 37-2 4 Applyi ng Time Range [...]

Cont ents xl Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Weight ed Ta il D rop 38-19 SRR Shapin g and Sharing 38-20 Queuein g and Scheduling o n Ingress Queue s 38-21 Queuein g and Scheduling o n Egress Queues 38-22 Packe t Modi fica tion 38-2 5 Classi fication U sing Port T rust States 38-2 6 Trust St ate on Po rts withi n the Q[...]

Content s xli Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring the Poli ced-DSCP Map 38-48 Config uring the DSCP-t o-CoS Map 38-48 Config uring the DSCP-t o-DSCP-Mutati on Map 38-49 Config uring In gress Qu eue Charac terist ics 38-4 9 Mapping DSC P or CoS Value s to an Ingress Queue and Setti ng WTD Thresholds 38-49 Al[...]

Cont ents xlii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Restri ctions for Auto-QoS 39-1 Inform ation Ab out A uto -QoS 39-2 Auto-Qo S 39-2 Generat ed Auto-QoS Conf igurat ion 39-3 Effect s of Auto-QoS on the Co nfiguration 39-7 How to Config ure A uto- QoS 39-8 Enabli ng Auto-QoS for VoIP 39-8 Config uring QoS to Pri oriti ze [...]

Content s xliii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 How to Config ure Et her Cha nnels 40 -11 Config uring Layer 2 EtherC hannels 40-11 Config uring Ether Channel Lo ad Balancin g 40-14 Config uring the PAgP Learn Method and Prior i ty 40-1 4 Config uring the LACP Hot-Stand by Ports 40-15 Monitor ing and Mainta ining Et[...]

Cont ents xliv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 IPv6 42-1 IPv6 Addr esses 42-2 Supp orte d IP v6 Ho st F eat ures 42-2 128-B it W ide Unic ast Add resse s 42-3 DNS fo r IPv6 42-3 ICMPv6 42-3 Neighbo r Discovery 42-3 Defau lt R out er P refe ren ce 42-4 IPv6 S tat eles s Aut oco nfig uratio n a nd Du plic ate Addr ess D[...]

Content s xlv Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring Link Stat e Tracking 43-4 Monitor i ng and Ma inta ining Li nk State Tracki ng 43-4 Config uration Exam ples for Co nfiguring Li nk State Tr acking 43-4 Displ ayin g Li nk S tat e In forma tion : Ex ampl es 43-4 Creat in g a Link State Gr oup : Exam ple 43-5[...]

Cont ents xlvi Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uration Exam ples for Co nfig uring IP v6 MLD Snooping 44-10 Static ally C onf igure an IPv6 Mu ltic ast G roup: Exa mple 44-1 0 Adding a Mul ticast Router Por t to a VLAN: Example 44-10 Enabli ng MLD Immediate Leav e on a VLAN: Ex ample 44-10 Setti ng MLD Snooping[...]

Content s xlvii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 MIBs 45-14 RFCs 45-14 Techn ica l As sist anc e 45 -14 CHAPTER 46 Troubles hooting 46-1 Findi ng Feature Infor mation 46-1 Infor mation for Tr oublesho oting 46-1 Autoneg otiation Mismat ches Prev entio n 46-1 SFP Mo dul e Secur ity an d Iden tifi cati on 46-2 Ping 46-[...]

Cont ents xlvi ii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Techn ica l As sist anc e 46 -17 APPENDI X A Working with the Cisco IOS Fil e System, Conf iguratio n Files, and Software I m ages A-1 Work ing wit h the Fl ash File Sys tem A-1 Displa ying Availabl e File S ystems A-1 Detecti ng an Unsupporte d SD Flash Memory Card A-[...]

Content s xlix Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uration Guidel ines A-20 Config uring the Conf igurat ion Ar chive A-21 Perfor ming a Configura t ion Repl acement or Rollb ack Oper ation A- 2 1 Work ing wit h Soft ware Images A-2 2 Image Loc ation on the Switc h A- 23 tar Fil e Format of Images on a Server or [...]

Cont ents l Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01[...]

li Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Preface Audience This gu ide i s for the n etworking pr ofession al managing your switch . B efore using t his gui de, you should ha ve e xperience working with the Cisco IOS softw are and be fam iliar with the con cepts and ter minology of Eth ernet and l ocal ar ea n etworking . [...]

lii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Preface • T er minal sessions and system displays are in screen font. • Informa tion y ou ent er is in boldf ace sc reen f ont. • Nonpri nting ch aract ers, such a s passwords or tab s, are in angle bra ckets (< >). Notes, cau tions, an d timesa vers use thes e con venti[...]

liii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Pre face http://www .cisco.com /en/US/products/hw/m odules/ps5455/p roducts_de vice_support_tables_list. html – Cisco Gigab it Et hernet T ranscei ver Modu les Compatib ility Matrix Obtaining Do cumentation, Obtaining Support, and Security Guidelines For informat ion on obtai n[...]

liv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Preface[...]

CH A P T E R 1-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 1 Configuration Overview Features Y our switch uses the Cisc o IOS software lice nsing (C ISL) archite cture to support a single universal cryptographi c image (supports encryption). Th i s i m ag e i m pl e m en t s t h e L AN B as e or LA N L it e f e at u r es dependi[...]

1-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Feature Software Licens ing Ease -of-Dep loyme nt and Eas e -of-Use F eatur es • Express Se tup for quickly configur ing a swi tch for t he first time with ba sic IP i nforma tion, contac t inform ation, sw itch a nd T eln et pa sswords, an d[...]

1-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Feature Software Licensing • IGMP throttl ing for conf iguring the ac tion when the maximum numb er of entries is in the IGMP forwarding tabl e • IGMP lea ve timer for conf iguring the leav e latenc y f or the netwo rk • Switch Data base Mana [...]

1-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Feature Software Licens ing Industrial Application • CIP—Comm on Industr ial Protoc ol (CIP) is a peer-to -peer ap plicatio n protoco l that provides appli cation level connecti ons betwee n the switc h and in dustrial de vice s such as I/O[...]

1-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Feature Software Licensing – PTP enha ncemen t to support PTP me ssages on the exp ansion m odule ports. • Cisco IOS File Syst em (IFS) for pro viding a single interf ace to all f ile systems that the switc h uses. • Support f or the SSM PIM p[...]

1-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Feature Software Licens ing • IEEE 802. 1D Span ning Tree Protocol (STP) for redundant back bone co nnectio ns and loop-f ree networks. STP ha s these features : – Up to 128 spanni ng-tre e instanc es supporte d – Per -VLAN sp anning-t re[...]

1-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Feature Software Licensing • VLAN 1 mi nimiza tion for re ducing th e risk of spa nning-t ree lo ops or storm s by allowing VLAN 1 to be disable d on any individual VLAN trunk link. W it h this featur e ena bled, no user t raff ic is sent or recei[...]

1-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Feature Software Licens ing • DHCP snooping to filter untrusted DHCP messages between untru sted hosts and DHCP servers • IP source gua rd to rest rict tra ff ic on non rout ed inte rfaces by filtering traffic based on the D HCP snooping da[...]

1-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Feature Software Licensing For inform ation ab out configu ring NA C Laye r 2 802 .1x validation, see the “Configuri ng N A C Layer 2 802 .1x V ali dation” section on page 13-46 – N A C Laye r 2 IP validation of the post ure of endpo int syste[...]

1-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Feature Software Licens ing • Support fo r 3DES and AES w ith version 3 of the Simp le Network Ma nageme nt Protocol (SN MPv3). This rele ase a dds suppo rt fo r the 168- bit Triple Data E ncryptio n Stan dard (3 DES) and the 1 28-bit, 192-b[...]

1-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Default Settings After Initial Switch Configurat ion – WTD as the co ngesti on-a voidan ce mechan ism for managing the queue lengths and pro viding drop pr ecedenc es for dif ferent traf fic clas sif icatio ns. – SRR as the schedul ing serv ice[...]

1-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Default Set tings A fter Initial Sw itch Conf iguration If you do not co nfigure the switc h at all, t he switch operate s with the se default sett ings: • Default swi tch IP addre ss, subnet mask , and defaul t gateway is 0.0.0.0. For more [...]

1-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Default Settings After Initial Switch Configurat ion • MSTP is disa bled. For mo re inform ation , see Chapt er 2 1, “Configu ring MSTP . ” • Optiona l spann ing- tree featur es are disable d. For m ore in forma tion, see Cha pter 22, “Co[...]

1-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Netwo rk Configura tion Examp les Network Config uration E xamples This se ction provides network co nfigurati on conc epts a nd inc ludes examples of using the s witch t o creat e dedica ted network segment s and int erconne ctin g the segmen[...]

1-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Network Configuration Examples Ethernet-to -the-Facto ry Architectur e This section is an o vervi ew of the Ethernet -to-the-F actory (EttF) architecture th at prov ides network and security servic es to the de vices and applic ations in automation[...]

1-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Netwo rk Configura tion Examp les Demilitarized Zone The demilitarized zone (DMZ) provides a buf fe r for sharin g of dat a and se rvice s betw een th e en terprise and manu facturing zones. Th e DMZ ma intains a vailabili ty , addresses sec u[...]

1-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Network Configuration Examples Figure 1-1 shows the EttF archite cture. Figur e 1 -1 Ether net-to-the-F actory Ar chit ecture LAN GE Link f or Fa i l o v e r Detection Ser vers Management tools Ser vers Catalyst 3750 s witch Catalyst 3750 s witch s[...]

1-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Netwo rk Configura tion Examp les Topology Options T opo logy design sta rts with co nsiderin g how de vices are co nnec ted to the netwo rk. The cell net work also requires physi cal topo logies that meet the physi cal co nstraint s of the pr[...]

1-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Network Configuration Examples Figur e 1 -2 Cell Netw ork– T r unk-Dr op T opolog y Cell N etwork—Ring Topo logy A rin g topology is sim ilar to a trunk -drop t opology except tha t the last sw itch i n the chain i s co nnect ed to the Layer 3 [...]

1-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Netwo rk Configura tion Examp les Figur e 1 -3 Cell Netw or k–Ring T opolog y Cell N etwork—Redunda nt-Star Top ology In a redun dant-sta r topolo gy , e very Layer 2 acce ss switch has dua l connect ions to a La yer 3 distri bution switch[...]

1-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Where t o Go Next Figur e 1 -4 Cell Netw ork– Redundant Star T opol og y Where to Go Next Before conf iguring the switch, re view these secti o ns for startup infor mation: • Chapter 2, “Using th e Comma nd-Line Interfac e” • Chapter 4, ?[...]

1-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Where to Go Nex t[...]

CH A P T E R 2-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 2 Using the Command-Line Interface Information About Using the Command-Line Inte rface This c hapte r descr ibes t he Cisc o IOS comm and-li ne in terface ( CLI) and how to use it to configure your switch. Command Mo des The Cisco IOS user interfa ce is di vided in to ma[...]

2-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 2 Using the Command-Line Interface Informat ion About Using the Comm and -Line Interf ace Ta b l e 2-1 describ es the ma in comm and mod es, how to access ea ch one, the prompt you see in th at mode , and how to exit the mode. Th e exampl es in the tab le use the h ostname S[...]

2-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 Using the Comma nd-Line In terface Information About Using the Command-Line Interface For more detailed inf ormation on the command modes, see th e command re ference guide f or this release. Help System Y ou can en ter a quest ion mark (? ) at the sys tem prom pt to di spl[...]

2-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 2 Using the Command-Line Interface Informat ion About Using the Comm and -Line Interf ace Understand ing Abbreviate d Commands Y ou need t o en ter on ly enou gh ch arac ters for the swit ch to recogn ize t he com mand as u nique. This e xample sho ws ho w to enter th e show[...]

2-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 Using the Comma nd-Line In terface CLI E rro r Me ssag es CLI Error Messages Ta b l e 2-3 lis ts some error message s that y ou mi ght e ncounter whil e using the C LI to configure your switch. Configur ation Logging Y ou ca n log and view chang es to the switc h configurat[...]

2-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 2 Using the Command-Line Interface How to Use th e CLI to Conf igure Feature s How to Use the CLI to Con figure Features Configuring th e Command History The software provides a histor y or rec ord of comma nds that you have enter ed. The co mman d history feature is particu[...]

2-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 Using the Comma nd-Line In terface How to Use the CLI to Configure Features Disabling the Command History Feature The comman d history featu re is automatica lly enabled. Y ou can disab le it for the cu rrent termin al session or for the c omman d line. These pr ocedure s a[...]

2-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 2 Using the Command-Line Interface How to Use th e CLI to Conf igure Feature s Press Ctrl-F , or press the right arrow ke y . Mo ve the curs or forw ard one charac ter . Press Ctrl-A . Mo ve t he cursor t o th e beginn ing of the c omma nd lin e. Press Ctrl-E . M ov e th e c[...]

2-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 Using the Comma nd-Line In terface How to Use the CLI to Configure Features Editing Command Lines That Wrap Y ou can use a wrapar ound feature for com mands that extend beyond a single line on the scre en. Whe n the cursor reaches the right mar gin, the command line shifts [...]

2-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 2 Using the Command-Line Interface How to Use th e CLI to Conf igure Feature s Searching and Filtering Output of show and more Commands Y ou can searc h and filte r the output f or show and mo re commands. This is useful when you need to sort through large amount s of outpu[...]

CH A P T E R 3-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 3 Configuring Switch Alarms Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use C[...]

3-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms Informatio n About Sw itch Alarms Global Status Monitoring Ala rms The switc h processe s alarms re lated t o temper ature a nd power supply cond itions, re ferred to as glob al or fa cility alar ms. FCS Error Hyste resis Th reshold The Et hern et[...]

3-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s Information About Switch Alarms Alarm p rofiles pr ovide a mech anism for yo u to enabl e or di sable alar m co nditions for a por t and associ ate the alarm conditio ns with o ne or both ala rm relays. Y ou can also use alarm pr ofiles to set al[...]

3-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms Informatio n About Sw itch Alarms The snmp-ser ver ena ble traps comman d can be change d so that th e user can se nd alarm traps to an SNMP se rver . Y ou c an use a larm profiles t o set environmental or port status alar m condi tions to send SN[...]

3-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s How to Configure Switch Alarms Default Switch Alarm Settings How to Configure Switch Alarms Configuring External Alarms Ta b l e 3-3 Def ault S witch Alar m Set tings Alarm Default Setting Global Po w er suppl y alarm Enable d in switch single po[...]

3-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms How to Configu re Switch Alarms Configuring th e Power Su pply Alarms Configuring th e Switc h Tempera ture Alarms Step 6 sho w en v alar m-contac t Sho ws the c onf igur ed al arm co ntacts. Step 7 copy running-config startup-conf ig (Optiona l) [...]

3-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s How to Configure Switch Alarms Associating the Temp erature Alarms to a Relay By default, the primary temperature a larm is associated to the relay . Y ou can use the alarm fa cility temperatur e glo b al configuration comm and to associate the p[...]

3-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms How to Configu re Switch Alarms Setting the FCS Error Hysteresis Threshold The hy steresis setting prev ents the to ggle of an alar m when t h e actu al bit e rror -rate f luctuates n ear th e configured rate. The FCS hystere sis th reshold i s ap[...]

3-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s Monitoring and Maintaining Switch Alarms S tatus Attaching an Alarm Pr ofile to a Specific Por t Enabling S NMP Trap s Monitoring and Maintaining Switch Alarms Status relay-maj or {fcs-error | link-fault | not-forwardi ng | not-operating} (Option[...]

3-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms Configur ation Examp les for Switch A larms Configuration E xamples for Switch Alarms Configuring E xternal Alarms: Ex ample This examp le configure s alarm i nput 1 n am ed door sens or to as sert a major ala rm wh en the d oor ci rcuit is close[...]

3-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s Configuration Examples for Switch Alarms Setting th e FCS E rror Hys teresis Th reshold: Ex ample This exampl e shows how to set the FCS bit e rror rate for a port to 10 -10 : Switch# configure terminal Switch(config)# interface fastethernet1/1 [...]

3-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms Addition al Referenc es Alarm Enabled Relay Notifies Disabled Syslog Enabled Input-Alarm 2 Alarm Enabled Relay Notifies Disabled Syslog Enabled Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat i[...]

3-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s Additional References RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s featur e, and suppor t for existing RFCs has not bee n modif ied b y this feature. — Description Link The Cisco T echnical Supp ort[...]

3-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms Addition al Referenc es[...]

CH A P T E R 4-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 4 Performing Switch Setup Configuration Restrictions for Performing Switch Setup Conf iguration • The DHCP -based au toconf iguration with a sa ved conf iguration pr ocess st ops if ther e is not at least one Laye r 3 interface in an up state wit hout an assigne d IP a[...]

4-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Informatio n About Perf orming Swi tch Setup Con figuration • Initial izes the flash memor y card f ile system on the syste m board. • Loads a default operating system soft ware i mage into m emory a nd boots up the switc h. The b[...]

4-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Information About Performing Switch Setup Configuration Default Switch Boot Settings Switch Boot Optimization The nor mal sw itch b oot p rocess inv olves a mem ory te st, file sy stem c heck ( FSCK), a nd power-on self -t es t (PO ST[...]

4-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Informatio n About Perf orming Swi tch Setup Con figuration Switch Information Assignment Y ou can assi gn IP inf ormatio n throug h the switch setup prog ram, thr ough a DHC P server , or manuall y . Use the swi tch setup prog ram if[...]

4-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Information About Performing Switch Setup Configuration W i th DHCP-b ased autoc onfiguration , no DHCP clie nt-side c onfiguration is needed on your switch. Howe ver, you need t o configure t he DHC P server f or various leas e opti [...]

4-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Informatio n About Perf orming Swi tch Setup Con figuration A DHCP client might recei ve off ers from multiple DHCP o r BOO TP servers and can accep t any of the of fers; howe ver , the client usually accepts the f irst of fer it rece[...]

4-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Information About Performing Switch Setup Configuration After you install the switch in your network, the au to-image update feature starts. The do wnloaded conf iguration file is sa ve d in the running conf iguration of the switch, a[...]

4-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Informatio n About Perf orming Swi tch Setup Con figuration these files: net work-config, ci sconet.c fg, and h ostname .c onfig (or host name .cfg ), w her e ho stname is th e switch ’ s curre nt hostn ame. The TFT P serv er addr e[...]

4-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Information About Performing Switch Setup Configuration Figur e 4-2 Rela y Device Use d in A utoc onfigur ation How to Obtain Co nfiguration Files Depending on the av ailability of the IP address an d the co nfig uration file name in [...]

4-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Informatio n About Perf orming Swi tch Setup Con figuration Note The switch br oadcasts TFTP serv er requests if the TFTP serv er is not obt ained from th e DHCP re plies, if all attempts to read the conf iguration f ile thr ough uni[...]

4-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Information About Performing Switch Setup Configuration Common Environment Variables Ta b l e 4-2 descri bes the fu nction of the mos t common environme nt variables. Schedule d Reload of th e Software Ima ge Y ou can schedule a relo[...]

4-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration How to Perform Sw itch Setup Config uration Y ou hav e these reload options: • Softwar e reload to take effec t in the specifie d minutes or hours and minutes. Th e reload must take place w ithin appro xima tely 24 days. Y ou can s[...]

4-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion How to Perform Switch Setup Configuration Configuring DHCP Aut o-Image Update (Configuration File and Image) This task de scribes DHCP au toco nfiguration to co nfigure TFT P and DHCP se tting s on a new switch to download a new imag[...]

4-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration How to Perform Sw itch Setup Config uration Configuring the Client Y o u should on ly configur e and en able t he Laye r 3 int erface. Do not assign a n IP ad dress or DHCP-ba sed autoconf iguration with a sav ed configurat ion. Manu[...]

4-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion How to Perform Switch Setup Configuration Manually Assigning IP Information to S VIs This task describes ho w to manually assign IP informati o n to multiple switch ed virtual interf aces (SVI s). Modifying th e Star tup Configuratio[...]

4-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration How to Perform Sw itch Setup Config uration Manually Booting t he Swit ch By def ault, the switch automatically boots u p; ho we ver , you can conf igure it to manually boot u p. Befo re Yo u Begin Use a sta ndalone switch for this t[...]

4-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Monitoring Switch Setup Configuration Booting a Specific Softw are Image By default, the switch attempts to automatic ally boot up the system using information in the BOO T en vironment v ariable. I f this v ariable i s not set , the[...]

4-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Configur ation Examp les for Perform ing Switc h Setup Configur ation . interface gigabitethernet1/1 no switchport ip address 172.20.137.50 255.255.255.0 ! interface gigabitethernet1/2 mvr type source <output truncated> ...! in[...]

4-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Configuration Examples for Performing Switch Setup Configuration Switches B through D retrie ve their conf iguration file s and IP addresses in the same way . Figure 4-3 shows a sam ple netwo rk for retrieving IP information by using[...]

4-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Configur ation Examp les for Perform ing Switc h Setup Configur ation switchd-confg prompt> cat network-confg ip host switcha 10.0.0.21 ip host switchb 10.0.0.22 ip host switchc 10.0.0.23 ip host switchd 10.0.0.24 DHCP Cli ent Con[...]

4-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Configuration Examples for Performing Switch Setup Configuration Switch(config)# tftp-server flash:boot-config.text Switch(config)# tftp-server flash: autoinstall_dhcp Switch(config)# interface gigabitethernet1/2 Switch(config-if)# n[...]

4-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Technica l Assista nce Rela ted T opic Document T itle Cisc o [...]

CH A P T E R 5-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 5 Configuring Cisco IOS Configuration Engine Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft wa[...]

5-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Informat ion About Conf iguring Cisco IOS Confi guration Engine Information About Configuring Cisco IOS Configuration Engine Cisco C onfiguration Engine is ne twork m anagemen t soft ware tha t acts as a configuration serv ice f o[...]

5-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e Information About Configuring Cisco IOS Configuration Engine Figur e 5-1 Configur ation Engine Ar chit ectur al Ov erview Configuration Service Configurati on Service is t he core co mponent of Cisco Configur ation En gine. It co[...]

5-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Informat ion About Conf iguring Cisco IOS Confi guration Engine Ev ent Servic e is a highly cap able publis h-an d-subs cribe comm unication metho d. Even t Service uses subject-ba sed add ressing to send messa ges to their de sti[...]

5-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e Information About Configuring Cisco IOS Configuration Engine The o rigin of t he DeviceID is defined by the C isco IO S hostnam e of the switch. However , the D e viceID v ariable and its usage reside within the e vent gate way a[...]

5-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Informat ion About Conf iguring Cisco IOS Confi guration Engine The Cisco IOS agents initiat e communication with Conf iguration Engine by using the appropriate Conf ig ID and Eve ntID. Conf iguration En gine maps the Conf igID to[...]

5-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e How to Configure Cisco IOS Configuration Engine How to Configure Cisco IOS Configuration Engine Configuring Ci sco IOS Agents CNS Event A gent and C isco IO S CNS Agent em bedded in the Ci sco IO S software on the switch al lows [...]

5-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Configuring Cisco IOS Agents Enabling Cisco IOS CNS Agent and an Initial C onfiguration Command Purpose Step 1 configur e t erminal Enters glob al co nfigurati on mo de. Step 2 cns te mpl ate co nnect nam e Enter s CNS template co[...]

5-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e Configuring Cisco IOS Agents Step 12 ip route network -number (Optional) Establishes a static r oute to Conf iguration Engi ne whose IP ad dress is netw ork-numb er . Step 13 cns id interface num { dns - reve r se | ipa ddress | [...]

5-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Configuring Cisco IOS Agents Enabling a Partia l Configuration Step 14 c ns conf ig initial { hostname | i p-address } [ port -n umbe r ] [ even t ] [ no-persist ] [ pa ge page ] [ source ip-address ] [ syntax-chec k ] Enables th[...]

5-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e Monitoring and Maintaining Cisco IOS Configuration Engine Monitoring and Maintaining Cisco IOS Configuratio n Engine Configuration E xamples for Cisco IOS Configuration Engine Enabling th e CNS Ev ent Agent: Ex ample This e xamp[...]

5-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Addition al Referenc es Switch(config-cns-conn)# discover interface gigabitethernet Switch(config-cns-conn)# template template-dhcp Switch(config-cns-conn)# template ip-route Switch(config-cns-conn)# exit Switch(config)# hostname[...]

5-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e Additional References Technica l Assista nce Description Link The Cisco T echnical Supp ort webs ite conta ins thousa nds of pag es of search ab le technic al cont ent, includ ing links to produ cts, te chnolog ies, so lutions, [...]

5-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Addition al Referenc es[...]

CH A P T E R 6-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 6 Configuring Switch Clusters This chap ter pr ovides the conce pts and procedu res t o crea te an d man age switc h clust ers o n your sw itch. Y ou can c reate and man age switch clusters by using Cisco Networ k Assistant (CNA), the comma nd-line interf ace (CLI), or S[...]

6-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters Prerequisites for Configuri ng Switch Cluste rs Standby C luster Comma nd Switc h Characteris tics A standb y cluster comm and switch must meet thes e requir ements: • Is running Cisco IOS 15.0 (1)EY or l ater . • Has an I P addr ess . • [...]

6-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters Restrictions for Configurin g Switch Clusters Restrictions for Configuring Switch Clu sters W e do not re comm end us ing the ip http access- class glob al conf iguration comm and to limit access to specific hosts or networ ks. Ac cess shoul d b[...]

6-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters How to Plan fo r Switc h Cluste ring How to Plan for Switch Clustering Anticipatin g conflicts and compatib ility issues is a high priority when you manage se veral switche s throug h a cluster . This section desc ribes the gu ideline s, requir[...]

6-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters How to Plan for Switch Clustering Automatic Disco very of Clus ter Candid ates and M embers The clust er com mand swit ch uses Cisc o Discovery Protoc ol (CDP) to discover cluste r member sw itches, candi date switc hes, n eighborin g switch c l[...]

6-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters How to Plan fo r Switc h Cluste ring Figur e 6-1 Disco very Thr ough CDP Hops Comm a nd de vice Member de vice 10 Member de vice 8 Member de vice 9 VLAN 62 Edge of clu s ter VLAN 16 101 3 21 De vice 11 c a ndid a te de vice C a ndid a te de vic[...]

6-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters How to Plan for Switch Clustering Discovery Through Non-CDP-Capabl e and Noncluster-Capable Devices If a cluster comman d switch is connec ted to a non-CDP- capab le third-party hub ( such as a non -Cisco hub), it can di scov er cluster- enabled[...]

6-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters How to Plan fo r Switc h Cluste ring Figur e 6-3 Disco very Thr ough Dif fe r ent VLANs Discovery Through Different M anagement VLANs Catalyst 2970, Catalyst 3550, Catalyst 3560, or Cata lyst 3750 cl uster c ommand swi tches ca n discover and m[...]

6-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters How to Plan for Switch Clustering Discovery Through Routed Ports Note Th e LAN B ase image sup ports static routi ng and RIP . If the c luster comma nd switc h has a r outed port (RP) configured , it d iscovers only c andida te and c luster memb[...]

6-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters How to Plan fo r Switc h Cluste ring Figur e 6-5 Disco very Thr ough Diff er ent Manag ement VLANs with a La yer 3 Clust e r Command Sw i tc h Discovery of Newly Installed Switches T o join a cluster , the new , out-of -the-b ox switch mu st b[...]

6-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters How to Plan for Switch Clustering Figur e 6-6 Disco very of Newl y Installed Switches IP Addresse s Y ou m ust assign IP info rmation to a c luster c ommand switch. Y ou can assi gn m ore than one IP addres s to the clus ter comm and swit ch, a[...]

6-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters How to Plan fo r Switc h Cluste ring If a sw itch r eceiv ed its hostnam e from the c luster comma nd swit ch, was re moved from a cluster, was then ad ded to a ne w cluster , and kept the s ame memb er number (such as 5 ), the switch o verwri[...]

6-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters Managin g Swit ch Clust ers LRE P rofil es A configurati on confl ict occur s if a sw itch clust er has L ong-Reach E therne t (LRE ) switches t hat use bo th pri vate an d public pro file s. If one LRE switch in a cluster is assigned a public [...]

6-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters Managin g Switch Cluster s Using SN MP to Mana ge Switch Clusters When you first power on the sw itch, SN MP is en abled i f you e nter the IP infor matio n by using the setup program and accep t its p ropose d configura tion. I f you did not [...]

6-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Technica l Assista nce Rela ted T opic Document T itle Cisc o IE 2000 com m[...]

6-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters Addition al Referenc es[...]

CH A P T E R 7-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 7 Performing Switch Administration This chap ter describ es how to perform one-ti me operat ions to admi nister your sw itch. Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature in[...]

7-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Informat ion About Perf orming Switch Admin istration The system c lock keep s trac k of wh ether the t ime i s authoritative or not (th at is, whether it has been set by a time source con sidered to be auth oritati ve). I f it is not auth[...]

7-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration Information About Performing Switch Administration Figure 7-1 shows a typical netw o rk ex ample usin g NTP . Switch A is the NTP master , with Switches B, C, and D configured in NTP server mod e, in server associa tion with Switc h A. Swit[...]

7-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Informat ion About Perf orming Switch Admin istration • Improved secu rity c ompare d to N TPv3. The N TPv4 pro tocol provides a sec urity framework base d on publ ic key crypt ograp hy and st andard X509 c ertificates . • Automatic ca[...]

7-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration Information About Performing Switch Administration System Name a nd Prompt Y ou configure t he system na me on the sw itch to ident ify it. B y default, the syste m name a nd prompt are Switc h . If yo u have not configur ed a system prom p[...]

7-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Informat ion About Perf orming Switch Admin istration When pr iv ate VLAN s are co nfigured , ad dress le arnin g dep ends on the t ype of MAC addres s: • Dynami c MA C addresses lea rned in one VLA N of a pri vate VLAN ar e replicate d [...]

7-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration Information About Performing Switch Administration Y ou c an add and r emove static address es and define the forwardi ng be havior for them. The for warding behavior defines how a port th at rec eiv es a pa cket forward s it to anothe r po[...]

7-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Informat ion About Perf orming Switch Admin istration MAC Address Learning on a VLAN By default, MAC address learning i s enabled on all VLANs on the swit ch. Y ou ca n contro l MA C address learnin g on a VLAN to ma nage the available MA [...]

7-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration How to Perform Switch Administration IP datagr ams and ARP request s and r eplies o n IE EE 802 networks other than E thernet is spe cified by the Subnetwork Acc ess Protocol (SNAP). By default, standa rd Etherne t-style ARP encapsulati on [...]

7-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration How to Perfo rm Switch Admi nistrat ion Configuring Summer Time (Daylight Saving Ti me) T o configu re summe r time (dayligh t saving tim e) in a reas wh ere it st arts an d ends on a part icular day of the wee k each year , perform th is[...]

7-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration How to Perform Switch Administration Configuring Summer Time (Exact Date and Time) T o conf igure su mmer time when it d oes not follo w a recurring pattern (co nf igure the e xact date a n d time of the next su mmer time e vents), perform[...]

7-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration How to Perfo rm Switch Admi nistrat ion Configuring L ogin Banne rs Configuring a Message-of-the -Day Login Banner Y ou can crea te a single or multilin e message b anner that a ppears on the screen when someone log s in to the switch. Co[...]

7-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration How to Perform Switch Administration Configuring a Login Banner Y ou c an configur e a log in banne r to be displa yed on al l conn ected termi nals. T his bann er ap pear s after the M O T D bann er and befo re the logi n pro mpt. Managin[...]

7-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration How to Perfo rm Switch Admi nistrat ion Configuring MAC Address Chan ge Notification Traps Command Purpose Step 1 configur e t erminal Enters global configurat ion mode . Step 2 snmp-server host host-addr { trap s | inf orms } { vers io n[...]

7-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration How to Perform Switch Administration Configuring MAC Address Mo ve Notification Traps When you configure M A C -move notification, an SN MP no tification is generate d and se nt to the ne twork manageme nt system w henever a MA C address m[...]

7-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration How to Perfo rm Switch Admi nistrat ion Command Purpose Step 1 configur e t erminal Enters global configurat ion mode . Step 2 snmp-server host host-addr { trap s | inf orms } { vers io n { 1 | 2c | 3 }} community-string notif ication-typ[...]

7-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration How to Perform Switch Administration Adding and Removing Static Ad dress Entries Configuring Unicast MAC Address Filtering Disabling MAC Address Learning on a VLAN Command Purpose Step 1 conf igur e terminal Enters glob al con figuration m[...]

7-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Monito ring and Mai ntainin g Switch Admi nistrat ion Monitoring and Maintainin g Switch Admini stration Configuration Examples for Performing Switch Admininistration Setting th e Syste m Clock: E xample This example shows ho w to ma nual[...]

7-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration Configuration Examples for Performing Switch Admininistration This e xample (for daylight sa vings time) sho ws ho w to specify that summer time starts on the fir st Sunday in April at 02:00 and ends on the l ast Sunday in October at 02:00[...]

7-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Configur ation Examp les for Perform ing Switc h Adminin istration Switch(config)# interface gigabitethernet1/2 Switch(config-if)# snmp trap mac-notification change added Sending MAC Address Move Notification Traps: Example This e xample [...]

7-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Technica l Assista nce Rela ted T opic Document T itle Cisc o IE 2000 [...]

7-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Addition al Referenc es[...]

CH A P T E R 8-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 8 Configuring PTP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci sco Fea [...]

8-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 8 Config uring PTP How to Configu re PTP Synchroniz ation beh avior depends on th e PTP clock sett ing mode tha t you configure on the switch. Th e mode c an be bounda ry , end- to-end tran sparen t, o r forwar d: • A switch c lock in boun dary mode pa rticipates in the s[...]

8-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 8 Conf iguring PTP Monitoring and Maintaining the PTP Configuration Setting Up PT P Monitoring and Main taining the PTP Configuration Command Purpose Step 1 conf igur e terminal Enters globa l configura tion m ode. Step 2 interfac e interface-id En ters inter face co nfig ura[...]

8-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 8 Config uring PTP Troublesho oting t he PTP Configurat ion Troubleshooting the PTP Configuration Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs Ta b l e 8-3 Comman ds for T r oub[...]

8-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 8 Conf iguring PTP Additional References RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s featur e, and suppor t for existing RFCs has not bee n modif ied b y this feature. — Description Link The Cisco T echnical Supp ort webs ite co[...]

8-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 8 Config uring PTP Addition al Referenc es[...]

CH A P T E R 9-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 9 Configuring PROFINET Finding F eature Information Y our soft ware rel ease may not support all the feat ures do cumented in this chapter . For t he lates t featur e info rmation an d caveats, see th e release notes for your platf orm and software r eleas e. Use Ci sco [...]

9-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 9 Configuring PROFINET Informatio n About Confi guring PROF INET PROFINET De vice Ro les Figur e 9-1 PROFIN ET Devi ce Roles An I/O controller i s a program mable lo gic co ntroller (PLC) that contro ls I/O devi ces an d ex chang es data such as co nfigurati on, a larms, and[...]

9-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 9 Configuring PROFI NET Information About Configuring PROFINET PR OFI NET d evices are i ntegrated by u sing a gene ral sta tion descrip tion (G SD) file tha t conta ins th e dat a for en ginee ring a nd d ata exch an ge betw een the I /O co ntroll er, the I/O superv isor, an[...]

9-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 9 Configuring PROFINET How to Configure PRO FINET Note Although the Cisco IE 2000 switch has a default reduc tion ra tio of 128 ms, we recom mend a reducti on rat io of 2 56 ms or 512 ms to r educe the load o n the switch CPU whe n the switch u ses a complex co nfiguration. [...]

9-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 9 Configuring PROFI NET Monitoring and Maintaining PROFINET Monitoring and Main taining PROFINET Troubleshooting PROFINET The PLC has LEDs that di splay red for alar ms, and t he I/ O super visor sof tware mo nitors those a larms. T o troubleshoot PR OFINET use the debug pr o[...]

9-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 9 Configuring PROFINET Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Technica l Assista nce Rela ted T opic Document T itle Cisc o IE 2000 c ommands C[...]

CH A P T E R 10-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 10 Configuring CIP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci sco Fe[...]

10-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 10 C onfiguring CIP Monitorin g CIP Enabling C IP Monitoring CIP Troubleshooting CIP Command Purpose Step 1 conf igur e terminal Enters globa l configura tion m ode. Step 2 cip security { password pa sswor d | window timeou t value } Sets CIP security options on the switch.[...]

10-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 10 Configur ing CIP Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Technica l Assista nce Rela ted T opic Document T itle Cisc o IE 2000 com mands Cisco [...]

10-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 10 C onfiguring CIP Addition al Referenc es[...]

CH A P T E R 11-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 11 Configuring SDM Templates Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use[...]

11-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 11 Configuring SDM Templates Informatio n About Conf iguring SDM Templates Y ou ca n select a t empla te to provide maximu m system us age fo r some func tions or use the default template to balanc e resources. T o allocate te rnary content add ressab le memor y (TCAM) re s[...]

11-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 1 Configuring SDM Templates Information About Configuring SDM Templates The f irst eight rows in the tab les (u nicast MA C address es thr ough security A CEs) re presen t appr oximat e hardw are boundaries set wh en a template is selecte d. If a section of a hardwar e res[...]

11-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 11 Configuring SDM Templates How to Configu re the Switch SDM Templates How to Configure the Switc h SDM Templates Setting the SDM Template Monitoring and Maintaining SDM Templates This is an example of output fro m the show sdm prefer defaul t comman d: Switch# show sdm pr[...]

11-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 1 Configuring SDM Templates Conf igurat ion Examples f or Conf iguri ng SDM Templates This is an example of output fro m the show sdm prefer dual-ipv4-and-ipv6 default co mmand: Switch# show sdm prefer dual-ipv4-and-ipv6 default "dual-ipv4-and-ipv6 default" templ[...]

11-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 11 Configuring SDM Templates Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Technica l Assista nce Rela ted T opic Document T itle Cisc o IE 2000 c om[...]

CH A P T E R 12-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 12 Configuring Switch-Based Authentication Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft war[...]

12-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Information About Configuring Switch-Ba sed Authentication Prevention fo r Unauth orized Switc h Access Y ou can prevent una uthorize d use rs from reco nfiguring your s[...]

12-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication Enable Secret Passwords with Encrypti on T o provide an addi tional layer of security , particularly for passw ords that cross the netw ork or that are stored on a T rivi[...]

12-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Telnet Password for a Terminal Line When you power-up your switch for the first ti me, a n au tomat ic setup prog ram runs to as sign IP inform ation and t o crea te a d[...]

12-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication Switch Access with TACACS+ This sec tion describe s ho w to enable and co nf igure T erminal Access C ontrol ler Access Control Sy stem Plus (T A CA CS+), which provi d e[...]

12-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication T A CA CS+, admin istered through the AA A security ser v ices, ca n provide these services: • Authent ication— Provides com plete con trol of au thentic ation th ro[...]

12-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication 3. If T A CA C S+ aut horizat ion is re quire d, the T ACA CS+ daem on is a gain conta cted, an d it retur ns an A CC EPT or REJE CT authorization response . If a n A CCE[...]

12-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Y ou can use the aaa aut horiz ation glo bal c onfiguration comma nd w ith the tacacs+ ke y word to set paramete rs that restrict a user’ s netw ork acce ss to pri vil[...]

12-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication • Networks that requir e resourc e accoun ting. Y o u can use RADIU S acc ounting indepen dently of RADIUS authen tication or au thorizatio n. The RADIUS acc ounting fu[...]

12-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication The A CCEPT or REJECT re sponse is bundle d with ad ditio nal data tha t is used f or privileged EXE C or networ k authorization. User s must first suc cessfully comple[...]

12-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication CoA Request Response Code The C oA Re quest respon se code c an be used to con vey a command to the swit ch. Th e su pporte d comm ands are list ed in Ta b l e 12-4 on p[...]

12-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Unless al l session i dentif ication at tribu tes include d in the Co A message match the sessi on, the switc h returns a Discon nect-N AK or CoA-N AK with the In vali [...]

12-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication CoA S ession Re authenticat ion The AAA server typically genera tes a session reauthentica tion request when a host with an unkn ow n identit y or postu re joins th e ne[...]

12-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication CoA Request : Disable Host Port This c ommand is car ried in a sta ndard Co A-Reque st messag e tha t has th is new VSA : Cisco:A vpair=" subscribe r:comm and=disa[...]

12-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication If two dif ferent host entrie s on the same RADIUS serv er are conf igured for the same service—for example, accoun ting— the s econd host entry c onfigured a cts as[...]

12-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Server groups also can includ e multiple host entries for the same server if each entry has a unique identi f ier (the combina tion of the IP addr ess and UDP por t num[...]

12-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication attributes no t suit able for g eneral use. The Ci sco RAD IUS impl ementa tion su pports on e vendor-speci fic option by using the format rec ommende d in the spec ific[...]

12-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication The K erberos cre dential s cheme uses a pr ocess called single logon . This pr ocess a uthenticat es a user once and the n allows secure authen tica tion (with out enc[...]

12-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication Kerberos Operation A Kerberos server ca n be a swit ch th at is configured as a netwo rk secur ity se rver and that can authe nticat e remote users by using the Kerberos[...]

12-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication 4. The KDC send s an encryp ted TGT that includes th e user ident ity to the swi tch. 5. The switch attem pts to decrypt the TGT b y using the passw ord that the use r [...]

12-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication Secure She ll T o use th is feat ure, you must inst all the cr yptog raphic (encryp ted) soft ware ima ge on your sw itch . Y ou must obt ain author ization to use this [...]

12-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Limitations These lim itations ap ply to SSH: • The switc h supports Riv est, Shami r , an d Adel man (RSA) authent icati on. • SSH supports only the ex ecution-she[...]

12-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication The prim ary role of the HTT P secure cli ent (the we b browser) is to respon d to Cisco IOS app licati on reques ts for HTTPS User Agen t serv ices, perfo rm HTTPS User[...]

12-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Note Th e cert ificate a uthori ties and trustp oints must be c onfigured o n each device individually . Copying t hem from ot her devices makes th em i n valid o n th [...]

12-25 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication Because SSH also relies on AAA aut h enticat ion, and SC P relies fur ther on A AA authorization, correc t config uration is necessary . • Before en abling SCP , you m[...]

12-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion How to Configure Switch-Based Au thentication Configuring Password Protection Setting or Changing a Static Ena ble Password Command Purpose Step 1 conf igur e terminal En ters [...]

12-27 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Protecting Enable and Enable Secr et Passwords with Encryption Disabling Password Recovery Command Purpose Step 1 configur e t erminal Enters globa l configura tion m ode. Step 2 [...]

12-28 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Setting a Telnet Password for a Termin al Line Configuring Username and Passwor d Pairs Command Purpose Step 1 Attaches a PC or wo rkstation wit h emulatio n softwa re to th e [...]

12-29 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Setting the Privil ege Level for a Command Changing the Default Pri vilege Level fo r Lines Step 4 login local E nables loca l password che c king at logi n time. Authen tication [...]

12-30 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Logging Into and Exiting a Privilege Level Configuring TACACS+ This se ction describe s how to configur e your switch to suppo rt T ACA CS+. At a minimu m, yo u must identify t[...]

12-31 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Configuring TACACS+ Login Authent ication Befo re Yo u Begin T o secure the switch for HTTP ac cess b y using AAA methods, you must conf igure the swit ch with the ip htt p au the[...]

12-32 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Step 3 aaa authent ication log in { default | list-name } method1 [ meth od2... ] Creates a login a uthenticat ion method li st. • T o create a def ault list that is used whe[...]

12-33 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Configuring TACACS+ Authorization for Pr ivileged EXEC Acce ss and Network Service s Starting TACACS+ Accounting Configur ing Radius Serv er Communication Befo re Yo u Begin Y ou [...]

12-34 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Command Purpose Step 1 conf igur e terminal Enters glob al con figuration mo de. Step 2 radius-server host { hostname | ip-addr e ss } [ au th-p ort p ort- number ] [ acct-po r[...]

12-35 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Defining AAA Server Groups Command Purpose Step 1 conf igur e terminal Enters globa l configuration mod e. Step 2 radius-server host { hostname | ip-addr e ss } [ auth-po rt port-[...]

12-36 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Configuring RADIUS Login Authentication Command Purpose Step 1 conf igur e terminal Ente rs globa l con f igurat ion mod e. Step 2 aaa new-model En ables AAA. Step 3 aaa au the[...]

12-37 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Configuring RADIUS Authorization for User Pri vileged Access and Network Service s Starting RADIUS Accounti ng Configuring Settings for All RADIUS S ervers Command Purpose Step 1 [...]

12-38 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Configuring the Switch for Vendor-Proprietar y RADIUS Server Communication Configuring CoA on the Sw itch Step 6 radius-se rver vsa send [ accounting | auth entica tion ] Enabl[...]

12-39 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Configuring the Switch for Local Authenti cation and Authorization Step 4 client { ip-a ddress | na me } [ vrf vr fnam e ] [ server -key string ] Enters dynam ic au thoriza tion l[...]

12-40 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Configuring S ecure Sh ell Setting Up the Switch to R un SSH Configuring the SSH Server Step 6 username name [ pri vilege level ] { password encrypt ion-type pass wor d } Enter[...]

12-41 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Step 4 crypto key g enerate rsa Enables th e SSH serv er for local an d remote authen tication on the swi tch an d gene rates an RSA k e y pair . W e rec ommend that a mini mum mo[...]

12-42 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Configuring S ecure HT TP Serve rs and C lients Configuring a CA Trustpoint Configuring the Secure HTTP Ser ver Befo re Yo u Begin If you are using a cer tificate a uthori ty f[...]

12-43 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Command Purpose Step 1 show ip h ttp server st atus (Optional) D isp lays th e status o f the HT TP serv er to determine if the secure HTTP se rver fea ture is supporte d in t he [...]

12-44 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Monito ring and Mai ntainin g Switch-Ba sed Au thent ication Configuring the Secure HTTP Cl ient Befo re Yo u Begin The st andard H TTP clie nt and secure HT TP client are al ways ena bled. A certif icate autho rity is requir ed f[...]

12-45 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Configuration Examples for Configuring Switch-Based Authenticat ion Configuration E xamples for Configuring Switch-Based Authentication Changing the Enable P assword : Example This exam ple sho ws ho w to ch ange th e enable pas[...]

12-46 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Configur ation Examp les for Confi guring Switc h-Based A uthenticat ion Defining AAA Se rver Grou ps: Example In this exa mple, the switc h is c onfigured to recogniz e two di f ferent R ADIUS group se rvers ( gr oup1 and gr oup2[...]

12-47 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Additional References <output truncated> crypto pki trustpoint TP-self-signed-3080755072 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-3080755072 revocation-check none rsakeypair TP-self-signed-30807550[...]

12-48 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Addition al Referenc es Standa rds MIBs RFCs Technica l Assista nce Password protec tion com mands Cisco IOS Secu rity Comm and Reference K erbero s commands Cisco IOS Se curity Com mand Refe r ence Sec ure Shel l co mmand s Cisco[...]

CH A P T E R 13-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 13 Configuring IEEE 802.1x Port-Based Authentic ation Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a [...]

13-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion Device Roles Figur e 13-1 802.1x Devic e Roles • Client —The de vice (works tation) that r equests ac cess to th e LAN and switch service s[...]

13-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Authentic ation Pro cess When 802 .1x p ort- based a uthent icati on is e nable d and t he cl ient sup port s 802.1 x-compl iant c lient soft ware, th[...]

13-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion The swi tch reauthenti cates a client when one of these situations occurs : • Periodic re authentica tion is enabled, and the reauthentic ati[...]

13-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Note If 802.1x au thentic ation is not enab led or suppor ted on the networ k access device, any EAPO L frames from the cli ent are dropped . If the c[...]

13-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion Figur e 13-4 Messag e Exc hange Dur ing MAC A uthenticat ion Bypass Authentic ation M anager Port-Based Authentication Methods Ta b l e 13- 1 l[...]

13-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Per-User ACLs and Filter-Ids In release s earlier than Cisco IOS Release 12. 2(50)SE, per -user A CLs and filter I Ds were only supported in single-ho[...]

13-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion Note Y o u can only se t any as the source in the A CL. Note For any ACL configured for multi ple-h ost mode , the source porti on of statem en[...]

13-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Ports in Au thorized and Un authorized S tates Durin g 802.1x authen ticati on, dependi n g on the swit ch port stat e, the switch can gr ant a client[...]

13-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion In mu ltiple-h osts m ode, y ou ca n att ach mult iple host s to a sin gle 80 2.1x-ena bled port. Figure 13-5 on page 13-10 sh ows 802.1x port[...]

13-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication • A voice device M AC address that is bi nding o n th e dat a VLAN is not cou nted towards the por t security MA C address limit. • MD A can use [...]

13-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion For more info rmat ion abo ut co nfiguring mu ltiaut h mode on a port, se e the “Conf iguring the Hos t Mode” section on page 13-38 . MAC [...]

13-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication If a port is in open authent ication mode, an y new MA C address is immediately ad ded to the MA C address table. For more information see the “Co [...]

13-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion Y ou ca n view the A V pa irs that ar e being sen t by the switch by entering the debug radius accounting pri vileged EXEC comman d. Fo r more[...]

13-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication 802.1x Authentication with VLA N Ass ignme nt The RADIUS s erv er sends the VLAN assi gnment to conf igure the switch po rt. The R ADIUS serv er data[...]

13-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion T o configure VL AN assignm ent you nee d to perform t hese task s: • Enable AAA authoriza tion by u sing the net work ke ywo rd to allow in[...]

13-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication 802.1x Authenticati on with Per-User ACLs Y ou ca n enab le per-user acce ss contro l lists (ACLs) to provide different levels of network access an d[...]

13-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion 802.1x Authentication with Downloada ble ACLs and Re direct URL s Y ou ca n download A C Ls and red irect URLs fr om a RADIUS server to the sw[...]

13-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication If a host falls ba ck to web a uthenti cation on a po rt withou t a configured A CL : • If the port is in open authen ticati on mode, the auth- def[...]

13-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion VLAN ID-Based MA C Authenticati on Y ou can use VLAN ID-b ased MAC authentic ation if you want to authe nticat e hosts based on a static VLAN [...]

13-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Any number of 802.1x-in capable client s are allowed acc ess when the switch port i s moved to the guest VLAN. If an 802.1x-cap able clie nt joins th[...]

13-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion Restricte d VLAN s are supporte d only on 802.1x ports in sing le-host mod e and on Layer 2 por ts. Y ou can conf igure an y activ e VLAN exce[...]

13-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Y ou can c onfi gure the criti cal port to rein itialize h osts and m ove th em out o f the critical VLAN when the RADIUS serv er is again a vailable[...]

13-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion A v oice VLAN p ort becom es acti ve when th ere is a link , and the de vice MA C address appears af ter the first CDP message from t he IP ph[...]

13-25 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication 802.1x Authentication with MAC Authentic ation By pass Y ou can c o nf igure the switc h to auth orize cl ients based on the clien t MA C addres s (s[...]

13-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion • Netw ork adm issio n cont rol (N AC) Laye r 2 I P v alidation—T his feat ure takes ef fect aft er an 802.1x port is authentica ted with [...]

13-27 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Network Admission Control Lay er 2 802.1x Va lidation The switc h supports t he Network Admi ssion Cont rol (NA C) Laye r 2 802.1x v a lidat ion, whi[...]

13-28 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion Open1x Authentication Open1x a uthent icati on allows a device acce ss to a port befor e that device is authent icate d. When open authenti ca[...]

13-29 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication • Host auth orization en sures that only tr af fic from au thorized h osts (connec ting to t he switch wi th supplica nt) is a llowed on the networ[...]

13-30 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion An IEEE 802.1x port in sing le-host mo de uses A CLs fro m the ACS to provide different levels of service to an IEEE 802.1x -authe nticat ed u[...]

13-31 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication 802.1x Ac counting Enabl ing A AA system accou nting with 8 02.1x a ccounting a llo ws system relo ad ev ents to be sent to the accou nting RA DIUS s[...]

13-32 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion Note Y o u must co nfigure the RAD IUS server to pe rform ac counting t asks, such as l ogging sta rt, stop, an d interim-upd ate messages and[...]

13-33 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication VLAN Assign ment, Gues t VLAN, Re stricted VLAN, a nd In access ible Authentication By pass Guidelines • When 802.1 x authe nticat ion is enabled o[...]

13-34 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation • If the p ort is in the auth orized sta te, t he port re mains in this state until reau thorization occurs. • Y ou ca n configure a time out per iod fo[...]

13-35 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Beginning i n privileged E XEC mo de, follow these steps to c onfigure 8 02.1x port-b ased authen tica tion: Command Purpose Step 1 conf igur e terminal Enters gl[...]

13-36 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configuring the Sw itch-to-RADIUS-Serv er Communication Y ou can glo bally co nfigur e the ti m eout, retr ansmission, and encry ption ke y values for all R[...]

13-37 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Enabling V oice Aware 8 02.1x Sec urity Configuring 802.1x Violation Mo des Y ou ca n configure an 802.1 x port so that i t shuts down, ge nerates a sy slog err o[...]

13-38 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configuring the Host Mode This task describes ho w to configure a single host (client) or multiple hosts on an 802.1x-author ized port. Step 5 switchport mo[...]

13-39 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Configuring Periodic Reauthentica tio n Y ou can enable peri odic 802.1 x client reauthentication and specify how oft en it occurs. If y ou do not specify a time [...]

13-40 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configuring Optional 802.1x Authentication Features Step 7 show a uthe ntica tion i nterf ace inte rf ace -i d V erifies your en tries. Step 8 copy running-[...]

13-41 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Step 6 dot1x ma x-reauth-req co unt (Optio nal) Set s the n umber of times that th e swit ch sends a n EAP-request/i dentity fra me to t he client before resta rt[...]

13-42 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configuring 802. 1x Accounting Befo re Yo u Begin AAA must be enabled on you r switch. Configuring a Guest VLAN When you con figure a gue st VLAN, c lients [...]

13-43 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Configuring a Restricted VLAN When yo u conf igure a restric ted VLAN on a switc h, clients that are 802.1x-c omplia nt are moved into the restricte d VLAN when t[...]

13-44 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configurin g Inacces sible Au thentica tion By pass Step 7 end Returns to pri vileged EXE C mode. Step 8 show a uthe ntica tion i nterf ace inte rf ace -i d[...]

13-45 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Step 4 radius-se rver host ip-add r es s [a cct-p ort udp-port ] [ auth -por t udp-port ] [ test usern ame name [ idle-time time ] [ ignore-a cct- port ] [ ignore[...]

13-46 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configuring 802.1x User Distribution Beginning in global configurat ion, f ollow these st eps to configure a VLAN group and to map a VL AN to it: Configurin[...]

13-47 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Configuring a n Authen ticator an d Supplican t Y o u can also use an A uto Smartpo rts user-de fined macro instea d of the switc h VSA to configure the authenti [...]

13-48 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configuring 8 02.1x Auth enticatio n with Dow nloadable ACLs and Redirec t URLs In additio n to configuri ng 802.1x a uthenti cation o n the switc h, you ne[...]

13-49 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Configuring a Downloadable Policy Step 6 inte rface interfa ce-id Specif ies the port to be configur ed, and enters interfac e configurati on mode. Step 7 ip acc [...]

13-50 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configuring Open1x Step 9 ip device tracking probe [ count | interval | use-svi ] (Optional) Config ures the IP de v ice trackin g table: • count count ?[...]

13-51 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Monitoring and Maintaining IEEE 802.1x Port-Based Authentication Resetting the 802.1x Auth entication Config uration to the Default Values Monitoring and Maintaining IEEE 802.1x Port-Based Authentication Configuration[...]

13-52 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Configur ation Examp les for Conf iguring IEEE 802. 1x Port-Bas ed Authen ticatio n Enabling 8 02.1x Auth entication : Example This e xample sho ws how to enable 802.1x authentic ation and to allo w multiple hosts: S[...]

13-53 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Configuration Examples for Configuring IEEE 802.1x Port-Based Authentication Enabling a n 802.1x G uest VLAN: Ex ample This example shows ho w to enable VL AN 2 as an 802. 1x guest VLA N: Switch(config)# interface gig[...]

13-54 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Configur ation Examp les for Conf iguring IEEE 802. 1x Port-Bas ed Authen ticatio n Configuring V LAN Groups: Ex amples This example shows ho w to configure the V LAN gro ups, to map t he VLANs t o the gro ups, and t[...]

13-55 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Configuration Examples for Configuring IEEE 802.1x Port-Based Authentication Switch(config)# interface gigabitethernet1/1 Switch(config-if)# switchport mode access Switch(config-if)# authentication port-control auto S[...]

13-56 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Rela ted T opic Document T itle Cisc o IE 200[...]

13-57 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Additional References Technica l Assista nce Description Link The Cisco T echnical Supp ort webs ite conta ins thousa nds of pag es of search ab le technic al cont ent, includ ing links to produ cts, te chnolog ies, s[...]

13-58 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Addition al Referenc es[...]

CH A P T E R 14-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 14 Configuring Web-Based Authentication Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware r[...]

14-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Informat ion About Conf iguring Web-Based Authenti cation • W eb- based a uthenti cation and Network E dge Ac cess T opology (NEA T) are mutua lly exclu sive. Y ou canno t use web- based au thentication wh en NEA T is enable d on[...]

14-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Information About Configuring Web-Based Authentication • Switch—C ontrol s the physi cal acces s to th e netw ork based o n the authenti cation status of the client. The switc h ac ts a s an in term edia ry ( pro xy) bet wee n [...]

14-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Informat ion About Conf iguring Web-Based Authenti cation If the server re sponse t o the NRH request is acces s rejected , the HTTP i ntercept A CL is acti vated , and the session waits for HT TP traff ic from the host. Authentic [...]

14-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Information About Configuring Web-Based Authentication Figur e 14-2 A uthentication Successful Banner Y ou can also cust omize the ba nner , as sho wn in Figure 14-3 . • Add a switch, router, or company name to the ba nner by usi[...]

14-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Informat ion About Conf iguring Web-Based Authenti cation Figur e 14-4 Login Scr een with No B anner For more infor mation, see th e Cisco IOS S ecurity Comma nd Reference and the “ Configuring a W eb Authe nticati on Loca l Bann[...]

14-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Information About Configuring Web-Based Authentication • If you configure web pages for H TTP authe ntic ation, th ey must include the appro priate HT ML comm ands (fo r example, to set t he page tim e out, to set a hi dden passw[...]

14-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Informat ion About Conf iguring Web-Based Authenti cation Figur e 14-5 Cust omiz eable A uthent ication P age Web-Bas ed Authen tication Inte ractions with Other Fea tures • Port Security , page 14-8 • LAN Po rt IP , page 14-8 [...]

14-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Information About Configuring Web-Based Authentication If the web- b ased authen tication idle tim er ex pires, the N AC polic y is remov ed. The host is authe n ticated, and posture is v alidate d aga in. Gateway IP Y ou ca nnot c[...]

14-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Informat ion About Conf iguring Web-Based Authenti cation Default Web-Based Au thentication S ettings Configuring Switch-to-RAD IUS-Server Co mmunication RADIUS security s erv ers ide ntif ication: • Host name • Host I P addr [...]

14-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on How to Configure Web-Based Authentication How to Configure Web-Based Aut hentication Configuring the Au thentication Rule and Interfaces Configuring AAA Authentication Command Purpose Step 1 ip admission name nam e proxy http Conf[...]

14-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on How to Conf igure Web-Bas ed Authen tication Configuring Switch-to-RAD IUS-Server Co mmunication Configuring the HTTP Server Command Purpos e Step 1 ip radius source-inter face interface_ name Specif ies that the RADIUS packets ha[...]

14-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on How to Configure Web-Based Authentication Customizing the Authentication Proxy Web Pages Befo re Yo u Begin Y ou can conf igure web authentic ation to display four substitute HTM L pages to the user in place o f the switch defaul [...]

14-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Monito ring and M aint aining Web -Based A uthentic ation Configuring a Web Au thentication L ocal Banne r Removin g Web-Ba sed Authen tication C ache Entries Enter a spec ific IP address to d elete th e entry for a single host. U[...]

14-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Configuration Examples for Configuring Web-Based Authentication This exampl e shows ho w to verify the configurat ion: Switch# show ip admission configuration Authentication Proxy Banner not configured Authentication global cache [...]

14-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Configur ation E xamples for Conf iguring Web-B ased A uthenti cation Authentication Proxy Watch-list is disabled Authentication Proxy Auditing is disabled Max Login attempts per user is 5 Configuring a Redirectio n URL: Examp le [...]

14-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs Rela ted T opic Document T itle Cisc o IE 2000 com mands Cisco IE [...]

14-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Addition al Referenc es RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature. — Description Link The Ci sco T e[...]

CH A P T E R 15-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 15 Configuring Interface Cha r acteristics Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft war[...]

15-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Informatio n About Conf iguring Interface Chara cteristics Port-Based VLANs A VLAN is a switched netwo rk that is logically segmente d by functi on, team, or application , without reg ar d to the physic al location of the users. For [...]

15-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Inform ation Abo u t Confi guring Interf ace Char acteristics Routed P orts Note The LAN base image supports static routin g. A routed port is a physic al p ort that acts lik e a port on a router; it does not ha ve to be connected [...]

15-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Informatio n About Conf iguring Interface Chara cteristics Trunk Ports A trunk port carries th e traf f ic o f multiple VLANs and b y default is a member of all VLANs in the VLAN database. The swi tch sup ports only IEEE 802.1 Q trun[...]

15-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Inform ation Abo u t Confi guring Interf ace Char acteristics By defa ult, th e switch dynam ically sel ects the interf ace type th at f irst links up. Ho wev er , you can use the media-type interfac e configuration command to manu[...]

15-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Informatio n About Conf iguring Interface Chara cteristics Figur e 15-1 Connect ing VLANs w ith a Lay er 3 Swit ch Basic rou ting (static routing and RIP) is supporte d on the LAN ba se image . Whenever possible, to mainta in hig h p[...]

15-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Inform ation Abo u t Confi guring Interf ace Char acteristics • Port numb er—Th e physica l inte rface num ber on the switc h. Th e port nu mber s for the IE-20 00-4TC switch model are 1– 4 for the Fast Etherne t port s and 1[...]

15-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Informatio n About Conf iguring Interface Chara cteristics Default Ethernet Interface Settings For more details on the VLAN paramet ers listed in the table, see Chapter 17, “ Configuring VLAN s. ” For details on controllin g traf[...]

15-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Inform ation Abo u t Confi guring Interf ace Char acteristics Interface Speed and Dup lex Mode Depen ding on the suppor ted po rt types, Et hernet interfaces on the switch operat e at 10, 100 , or 1000 Mb/s, or i n either ful l- or[...]

15-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Informatio n About Conf iguring Interface Chara cteristics Note Ports on the switc h can recei ve, b ut not send, pau se frames. Y ou use t he flowco ntrol interface configuration command to set the inte rface ’ s ability t o re c[...]

15-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics How to Configure Inter face Charact eristics Note Y ou cannot co nf igure a routi ng MTU siz e that exce eds the s ystem MTU size. If you chang e the syst em MTU size to a v alue smaller t han the curren tly conf igured routing MT[...]

15-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics How to Conf igure Interface Ch aracteris tics When configur ing SVIs, you can also configur e SVI autos tate exclud e on a port in the SVI to exc lude that po rt from being i ncluded in dete rmining SVI line- state stat us. See the [...]

15-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics How to Configure Inter face Charact eristics Configuring Interfaces These ge neral instr uctions app ly to all interf ace conf iguration p rocesses. Step 1 En ter the confi g ure terminal command at t he privileged EXEC prom pt: S[...]

15-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics How to Conf igure Interface Ch aracteris tics • All inter faces defined as in a rang e must be th e same type (all Fast Ethern et ports, all Gigab it Ethernet ports, all EtherCha nnel ports, or all VLANs), but you can combine mult[...]

15-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Config uring Etherne t Interfaces Configuring Eth ernet Interfaces Setting th e Type of a Dual-P urpose Uplink Po rt Perform this task to se le ct w hi ch du al -p urp os e u pli nk to activ ate so that you can set the speed an d [...]

15-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Configur ing Ethern et Interface s Setting th e Interface Speed an d Duplex Para meters Configuring IEEE 802.3x Flow Control Command Purp ose Step 1 conf igur e terminal Enters gl obal configurat ion mode. Step 2 interface interface[...]

15-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Config uring Etherne t Interfaces Configuring Auto-MDI X on an Interface Adding a De scription fo r an Interface Configurin g SVI Auto state E xclude Command Purpose Step 1 conf igur e terminal Enters global con figuration mo de. [...]

15-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Monito ring and Mai ntaining In terface Cha racteris tics Configuring th e System MT U Monitoring and Maintaining Interface Characteristics Monitoring Interface Status Command Purpose Step 1 conf igur e terminal Enters glob al con f[...]

15-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Monitoring and Maintaining Interface Characteristics Clearing and Resetting In terfaces and Counters Shutting Down and Restarting the Interface Shutting d ow n an i nterfac e disable s all fu nctions on the specif ied interf ace a[...]

15-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Configur ation E xamples for Conf iguring Interf ace Ch aracteri stics Configuration E xamples for Configuring Interface Characteristics Configuring th e Interface Range: Ex amples This example sho ws how to use the interfac e range[...]

15-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Config uration Examp les for C onfiguring Interfac e Characteri stics This exampl e shows how to enter i nterfac e-range configurati on mode for the inte rface-ra nge macro enet _list : Switch# configure terminal Switch(config)# i[...]

15-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Addition al Referenc es Configurin g SVI Auto state E xclude : Example This exam ple sh ows how to configure an a ccess or trunk port i n an SV I to be exc luded f rom th e stat us calculatio n: Switch# configure terminal Enter conf[...]

15-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Additional References RFCs RFCs T itle No new or m odified R FCs are suppo rted by thi s featur e, and suppor t for existing RFCs has not bee n modif ied b y this feature. —[...]

15-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Addition al Referenc es[...]

CH A P T E R 16-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 16 Configuring Smartports Macros Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.[...]

16-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 16 C onfigur ing Smartport s Macros How to Configu re Smartport s Macros Smartports Config uration Guidelin es • When a macro is applied globally to a switch or to a switch interf ace, all of the existin g conf igurations on the int erface are reta ined. This is helpful w[...]

16-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 6 Configuring Smartpor ts Macros How to Configure Smartports Macros • When yo u apply a ma cro to a switc h or a switch in terfa ce, the macr o name is autom atically added to the switch or int erface. Y ou can displ ay the a pplied comma nds and macro names by using the[...]

16-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 16 C onfigur ing Smartport s Macros Monito ring and Maint aining Smart ports Mac ros Monitoring and Main taining Smart ports Macros Configuration E xamples for Smartports Macros Applying the Smartports Macro: Examp les This exam ple sh ows ho w to di splay the ci sco-ie -de[...]

16-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 6 Configuring Smartpor ts Macros Additional References Macro type : default interface #macro name cisco-ethernetip #macro keywords ACCESS_VLAN #macro description cisco-ethernetip switchport host switchport access vlan ACCESS-VLAN storm-control broadcast level 3.00 1.00 ser[...]

16-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 16 C onfigur ing Smartport s Macros Addition al Referenc es RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature. — Description Link The Ci sco T echni cal[...]

CH A P T E R 17-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 17 Configuring VLANs Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci sco [...]

17-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs Figur e 17 -1 VLANs as Logica lly Defined Netw or ks VLANs are of ten associated with IP subnetw orks. For e xample, all the en d stations in a particula r IP subnet belong to the same V LAN. In terface VLAN m embe rship on the sw itch i s assigne[...]

17-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Although the switc h supports a total of 100 5 (normal range and extended range ) VLANs, the numbe r of routed ports, SVIs, and other c onfigured feat ures affects the use of the swi tch hard ware. The sw itch supp orts per-VLAN sp anning- tree pl[...]

17-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs For more de tailed definitions of acce ss and tru nk mo des and their f unctions, see Ta b l e 17 -3 on page 17-10 . When a port belongs to a VLAN , the switch l earns and ma nages the add resses associated wi th the port on a pe r-VLAN basis. For[...]

17-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Y ou ca n set the se parame ters when you cr eat e a new normal-ra nge VLA N or modif y an existin g VLAN in the VLAN database: • VLAN ID • VLAN name • VLAN type (Ether net, Fiber Distrib uted Data Interf ace [FDDI], FDDI network entity titl[...]

17-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs • T oken Ring T rCRF VLANs Fo r more i nfor m ati on on co nf iguring T oke n Ring V LANs , see the Catalyst 6500 Se ries Softwa r e Config uratio n Guide . Normal-Range VLAN Configuration Guidelines Follow these guidel ines wh en cre ating and [...]

17-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Ethernet VLANs Each E therne t VLA N in the VLAN d ataba se has a uni que, 4- digit I D tha t ca n be a nu mber fr om 1 to 1001. V LAN IDs 1002 to 1005 are re served for T oken Ring a nd FD DI VL ANs. T o c reate a nor mal-r ange VLAN to be added [...]

17-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs If you ar e assig ning a po rt on a clust er me mber switch to a VLAN , first use the rcommand pr ivileged EXEC co mmand to log in to the cluste r member switch. Note If you assign an inte rface to a VLAN that does not e xist, the ne w VLAN is cre[...]

17-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs • Each rou ted port on the sw itch create s an interna l VLAN for its use. These int ernal VLANs us e extended -rang e V LAN n umb ers, and t he inter nal V LAN I D c annot be us ed fo r an extend ed-r ange VLAN. I f you try to cr eate an e xten[...]

17-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs IEEE 802.1Q Configuration Guidelines The IE EE 8 02.1Q t runks i mpose these restric tions on the t runking strategy f or a network : • In a ne twork o f Cisco switch es conne cted through IEE E 802.1 Q trun ks, the switch es maint ain o ne spa[...]

17-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Default Layer 2 Ethernet Inter face VLAN Settings Ethernet Interfac e as a Trunk Port Because t runk po rts send a nd receive VTP advertisem ents, t o use VTP y ou must en sure th at at lea st one trunk p ort is c onfigured on th e switc h and th[...]

17-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs Allowed VLANs on a Trunk By default, a trunk port sends traf fic to and recei ves traf fic from all VLANs. All VLAN IDs, 1 to 4096, are al lowed o n each trun k. Ho wev er , you can remo ve VLANs from th e al low ed list, pr e ve nting traff ic f[...]

17-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Load Sharing Using STP Port Priorities When two ports on the same switch form a l oop, the switc h uses the STP port prio rity to decide which port is e nabled a nd whi ch port is in a blocking state. Y ou c an s et the pri orities on a para llel[...]

17-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs Figur e 17 -3 Load-Shar ing T run ks with T ra f fic Distr ibuted by P ath Cost See the “Configuri ng Lo ad Sharin g Using STP Path Co st” sect ion on page 17-21 . VMPS The VLA N Quer y Protocol (V QP) is u sed to suppor t dynami c-ac cess po[...]

17-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Dynamic-Access Port VLAN M embership A dynamic -access port can belo ng to only one VL AN with an ID from 1 to 4096. Wh en the link comes up, the switch does not for ward traf fic to or from this port until the VMPS provides th e VLAN assign ment[...]

17-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs • T r unk ports ca nnot be dyn amic- access port s, but you can enter the switchport access vlan dynamic interf ace configu ration co mmand fo r a trun k port. I n this case, the switch reta ins the setting and applies it if the port is la ter [...]

17-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs How to Con figure VLANs How to Configure VLANs Creating or Modifyin g an Et hernet VLAN Deleting a VLAN Assigning S tatic-Ac cess Ports to a VLAN Command Purpose Step 1 conf igur e terminal Ent ers glob al configura tion mo de. Step 2 vlan vlan-i d Ent[...]

17-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs How to Conf igure VLANs Creating an E xtended-Ra nge VL AN Creating an E xtended-Ra nge VLAN w ith an Internal V LAN ID Command Purpose Step 1 conf igur e terminal Enter s glo bal configurat ion mode. Step 2 vtp mode transparent Con figures th e switc [...]

17-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs How to Con figure VLANs Configuring a n Ethern et Interface as a Trunk P ort Defining the Allowed VLANs on a Trunk Changing the Pruning-Elig ible List Command Purpose Step 1 conf igur e terminal Enter s globa l co nfiguration mode . Step 2 interfac e i[...]

17-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs How to Conf igure VLANs Configuring the Native VLAN for Untagged Traff ic Step 3 switchport trunk pruning vlan { add | except | none | remo ve } vlan- list [ ,vlan [ ,vl an [ ,, , ]] Configures the list o f VL ANs a llowed to be pruned from the tru nk.[...]

17-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs How to Con figure VLANs Load Sharing Using STP Port Priorities Configuring Load Sharing Using STP Pa th Cost Command Purpose Step 1 conf igur e terminal Enters gl obal configur ation mode o n Swi tch A. Step 2 vtp domain domain-name Conf igures a VTP a[...]

17-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs How to Conf igure VLANs Configuring the VMPS Client Y ou conf igure dyna mic VLANs by us ing the V MPS (VLAN Mem bership Polic y Serv er). The swi tch can be a VMPS client ; it c annot be a VMPS serv er . Entering the IP Address of the VMPS Befo re Yo [...]

17-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs Monitoring and Maintaining VLANs Configuring Dynamic-Access Ports on VMPS Clients Befo re Yo u Begin If you are configurin g a por t on a clust er m ember switch as a dy nami c-acce ss port, first use the rcommand pr i vileged EXEC command t o log in t[...]

17-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs Configurati on Examp les for Configuri ng VLANs Configuration E xamples for Configuring VLANs VMPS Netwo rk: Ex ample Figure 17-4 shows a netw ork with a VMPS server switch and V MPS client switches with dynamic -acce ss port s. In this e xample, these[...]

17-25 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs Configuration Examples for Configuring VLANs Configuring a VLAN: Example This exampl e shows h ow to cre ate E the rnet V LAN 20, name it test20, and add it to the VL AN d atabase: Switch# configure terminal Switch(config)# vlan 20 Switch(config-vlan)#[...]

17-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs Addition al Referenc es Reconfirm Interval: 60 min Server Retry Count: 3 VMPS domain server: 172.20.128.86 (primary, current) 172.20.128.87 Reconfirmation status --------------------- VMPS Action: other Additional Ref erences The foll o wing sectio ns [...]

CH A P T E R 18-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 18 Configuring VTP Finding VTP Feature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci sco[...]

18-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Informatio n About Conf iguring VTP Information About Configuring VTP VTP A VLAN T r unking Pro tocol (V TP) is a L ayer 2 m essaging protoc ol that m aintains V LAN configu ration consist ency by managing the additi on, deleti on, an d renaming of VLANs [...]

18-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP Information About Configuring VTP If yo u conf igure a swi tch for VT P transparent m ode, you c an create and m odify VLANs, but th e chan ges are not se nt to other swi tches in the domain, and they affect only the i ndividual switc h. Howev er, configu[...]

18-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Informatio n About Conf iguring VTP Note For VTP version 1 and 2, befo re you c reate extend ed-rang e VLANs ( VLAN IDs 1006 to 4096), you must set VTP mode t o transparent b y using the vtp mode transparent global c onfiguration command. Sa ve this c onf[...]

18-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP Information About Configuring VTP • VLAN type • VLAN state • Additional VLA N config uration information specif ic to the VLAN type In VTP ver sion 3, VTP adver tisements also includ e the primary serv er ID, an instan ce number , and a start i ndex[...]

18-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Informatio n About Conf iguring VTP • VTP prim ary s erver and VTP sec ondary servers. A VTP p rimary server upd ates th e da tabase inform ation and sends upd ates t hat are hon ored by all devices i n the syste m. A VTP sec ondary se rver can on ly ba[...]

18-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP Information About Configuring VTP • When a VTP version 3 device detec ts a VTP version 2 device on a trunk port, it cont inues to send VTP version 3 packets, in additio n to VTP version 2 packets, to allow both kinds of ne ighbors t o coex ist on the sa[...]

18-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Informatio n About Conf iguring VTP Figur e 18-1 Flooding T r affic w ithout VTP Pr uning Figure 18-2 shows a switched ne twork with VTP pruni ng enabled. The broadca st traff ic from Switch A is not fo rwa rded to Swi tches C, E, and F becaus e traf fic [...]

18-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP Information About Configuring VTP VTP pruning is not designed to func tion in VTP transparent mode . If one or more switches in the netwo rk are in VTP transpar ent mode , you should do one of the se: • T urn off VTP prun ing in the en tire network . ?[...]

18-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Informatio n About Conf iguring VTP • If the VT P mode or the dom ain na me in th e start up co nfiguration do not m atch the VLAN d atabase, the do main n ame a nd the VTP mo de a nd configur ation for the first 1 005 V LANs use the VLAN database info[...]

18-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP How to Configure VTP How to Configure VTP Configuring VTP Doma in and Parameters Befo re Yo u Begin Y ou shou ld configure the VTP domai n before co nfiguring other VT P parameters. Command Purpose Step 1 conf igur e terminal Ente rs global configurat io[...]

18-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP How to Configu re VTP Configuring a VTP Version 3 Password Enabling th e VTP V ersion Step 3 show vtp stat us V erif ies your entries in the VTP Operating Mode and the VTP Domain Name fields of the display . Step 4 copy running-config startup-conf ig (Op[...]

18-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP How to Configure VTP Enabling V TP Prunin g Configur ing VTP on a Per-P ort Basi s Adding a VT P Client S witch to a VT P Domain Befo re Yo u Begin Before adding a V TP clien t to a VT P domai n, always verify tha t its VTP co nfiguration revision number[...]

18-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Monito ring and Mai ntaining VTP Monitoring and Ma intaining VTP Configuration E xamples for Configuring VTP Configurin g a VTP Se rver: Ex ample This e xample sho ws ho w to confi g ure the switch as a VT P server with the domain name eng_gr ou p and th[...]

18-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP Additional References for Configuring VTP Switch(config)# vtp password mypassword Setting device VLAN database password to mypassword. Switch(config)# end Configurin g a Hidden VTP Pas sword : Example This exam ple sh ows ho w to configure a hidden passw[...]

18-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Addition al Referenc es for Configur ing VTP MIBs RFCs MIB s MIBs Link — T o locate a nd download M IBs using Cisco I OS XR software, use the Cisco M IB Locat or found at the following URL an d choose a platfo rm unde r the Cisco Ac cess Produc ts menu[...]

CH A P T E R 19-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 19 Configuring Voic e VLAN Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use C[...]

19-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 19 Configuring Voice VLAN Informatio n About Conf iguring Voice VLAN Figur e 19-1 Cisco 7960 IP Ph one Conne ct ed t o a S witc h Cisco IP Phone Voice Traffic Y ou can conf igure an ac cess port wit h an att ached Cisco IP pho ne to u se one V LAN for v oice tr af fic and a[...]

19-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 9 Configuring Voice VLA N Information About Configuring Voice VLAN Cisco IP Phone Data Traffic The swi tch can also pro cess ta gged dat a traffic (traff ic in IEE E 802.1Q or IE EE 802.1 p fram e type s) from the device at tach ed to t he access port on the Cisc o IP phon[...]

19-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 19 Configuring Voice VLAN Informatio n About Conf iguring Voice VLAN – They both use IEEE 802.1p or un tagged frame s. – The Cisc o IP phone uses IEEE 802.1p frames, a nd the device uses unt agged fra mes. – The Cisc o IP phone uses untagge d frames, a nd the device u[...]

19-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 9 Configuring Voice VLA N How to Configure VTP How to Configure VTP Configuring Cisco IP Phone for Voice Traffic Configuring the Priori ty of Incoming Data Frames Command Purpose Step 1 co nfi gure termi nal Ente rs global con figuration mode. Step 2 int erface interface-i[...]

19-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 19 Configuring Voice VLAN Monito ring and Mai ntaining Voi ce VLAN Monitoring and Mainta ining Voice VLAN Configuration E xamples for Configuring Voic e VLAN Configuring a Cisco IP Phon e for Voice Traffic: Example This exam ple sh ows how to configure a por t conn ected to[...]

19-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 9 Configuring Voice VLA N Additional References for Configuring Voice VLAN Standa rds MIBs RFCs Protect ed port configur ation “Con figuring Prot ected Po rts” se ction on pag e 29-10 Secure por t configuration “Conf iguring Port Security ” section on page 29-11 St[...]

19-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 19 Configuring Voice VLAN Addition al Referenc es for Configur ing Voice VL AN[...]

CH A P T E R 20-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 20 Configuring STP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci sco Fe[...]

20-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP STP STP is a Layer 2 link mana gement pr otocol that provide s path re dundancy w hile preventing loop s in the network. For a Laye r 2 Ethern et network t o functi on prope rly , only one ac tive path can exist betwe e[...]

20-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP When the switc hes in a netw ork are p ow ered up, eac h functions a s the root swi tch. Eac h switch sends a configurati on BPDU thr ough all of its por ts. Th e BPDUs comm unica te and com pute the spa nning-t ree topol[...]

20-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP The swi tch sup ports t he IEEE 802.1t spanni ng-tre e extension s, and some of t he bits pr eviously used for the switch prior ity are no w used as the VLAN ident ifie r . The result is that fe wer MA C addresses are r[...]

20-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP Figure 20-1 illustrates ho w an interfa ce mov es through the states . Figur e 20-1 Spanning-T r ee Inte rf ace Stat es When yo u po wer u p the switch , spanni ng tree i s enabled b y defa ult, an d e very inter face in [...]

20-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP Listening State The li stenin g stat e is th e f irst state a Lay er 2 i nterf ace e nters af ter the blo cking s tate. The i nterf ace e nters this sta te w hen the spanni ng tre e d ecides t hat the inte rface s hould[...]

20-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP How a Sw itch or Port Beco mes th e Root S witch o r Root Port If all switches in a netw ork are enabled with default spann ing-tree setti ngs, the switch with the lo west MA C addre ss becomes the root switch. In Figure [...]

20-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP Figur e 20-3 Spanning T r ee and Redundant Connectivity Y ou can al so create redund ant links be tween swit ches by using Ethe rChann el groups. For more inform ation, see Ch apter 40, “C onfiguring Ethe rCha nnels. [...]

20-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP Span ning- Tree Modes a nd Pro tocols The switc h supports t hese spanni ng-tr ee modes an d protocols: • PVST+—Th is spann ing-tr ee mod e is ba sed on the IEEE 8 02.1D stand ard and Cisco proprie tary extensions. It[...]

20-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP Spanning-Tree Interoperability and Backward Compatibility Ta b l e 20- 2 lists the inter operability and compatibility among the s upported s panning-tree mo des in a network. In a mi xed MSTP and PV ST+ n etwork, the [...]

20-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP Default Spanni ng-Tree Settings Disabling Sp anning Tree Spanning tree is enab led by defau lt on V LAN 1 and on all newly crea ted VL ANs up to the spannin g-tree limit specif ied in the “Suppo rted Spa nning-Tree Ins[...]

20-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP If an y root switch for the specifi ed VLAN has a switch priority lo wer than 24576, the switch sets its o wn priority for the spe cifi ed VLAN to 4096 less than the low est switch priority . (4096 is the v alue of the[...]

20-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP Path Cost The spanni ng-tr ee path c ost defau lt value is derived from the med ia speed of an interfac e. If a loop occurs , spann ing tree u ses cost wh en sele cting an in terfac e to put in th e forw ardin g state. Y[...]

20-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP How to Configu re STP Y ou can pre vent thi s possibility by sett in g up allo wed lists on the trunk ports of switches that hav e used up their allo cation of spannin g-tree instances. Setting up allowed lists is not nece ssary in man y cases and can ma[...]

20-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP How to Configure STP Configuring th e Root Switch Step 5 end Returns to privileged EXEC mode. Step 6 clear spanning -tr ee detected-pr otocols (Re commend ed for rapid- PVST+ m ode o nly) Re starts the p rotoco l migration pr o cess on the entire switch [...]

20-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP How to Configu re STP Configur ing a Secondar y Root Switch Configuring Port Priority Configuring Path Cost Command Purpose Step 1 conf igur e terminal Enters globa l configura tion m ode. Step 2 spanning-tree vlan vlan-id r oot seconda ry [ diameter net[...]

20-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Monitoring and Maintaining STP Configuring Optiona l STP Parameters Befo re Yo u Begin Ex ercise ca re when co nfi g uring the priorit y , and hello time fo r STP . For most situ ati ons, w e rec omme nd that you use the spa nning-tree vlan vlan- id root[...]

20-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs show spanning-tree vlan vlan-id Disp lays spannin g-tree VL AN entries . copy runni[...]

CH A P T E R 21-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 21 Configuring MSTP Finding Feature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci sco Fe[...]

21-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP MSTP MSTP , which us es RSTP for rapi d con vergence, enab les VLA Ns to be group ed into a spanning- tree instan ce, w ith ea ch insta nce havin g a s panning -tree topo logy inde pendent of other spanning -tree inst[...]

21-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP • A com mon and inte rnal sp anning tree ( CIST), which is a collect ion of the I STs i n eac h MST region, and the common span ning tree (CST ) that inte rconn ects th e MST regions a nd single spa nnin g trees. T[...]

21-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP Figur e 21 -1 MST Regions, CIS T Masters, and CS T Root Only the CST instance sends an d receives BPDUs, and MST insta nces add their spanning- tree informatio n into the BPDUs to inter act with neighb oring switches [...]

21-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP • The CIST r egi onal root was call ed the IST master in the prestandard im plementa tion. If th e CIST root is in t he regio n, the CIST regional r oot i s the C IST ro ot. Otherw ise, t he CIST region al roo t is[...]

21-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP An MST region incl udes both switche s and LANs. A segment b elongs to the r egion of its designa ted port. Ther efore , a port in a different region than the designate d port fo r a segment is a bou ndary port . This[...]

21-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP the alt ernate b efore sendin g out a sing le pres tand ard BPDU , A Y c annot d etect t hat a pre standa rd swit ch is conn ecte d to Y a nd c ontinues to send standa rd BPDU s. T he port BY i s fixed in a bo undar [...]

21-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP Interoperability with IEEE 802.1D STP A switch r unning M STP supp orts a built-in pr otocol migrat ion mecha nism that enable s it to i nteroper ate with legacy IEEE 802.1D switche s. If this switc h receives a legac[...]

21-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP In a st able to pology with co nsisten t po rt roles througho ut the networ k, the RSTP ensur es that every root port a nd desi gnated p ort immedia tely transit ion to t he forwarding state while all a ltern ate and[...]

21-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP When S witc h C is co nnecte d to Swi tch B , a simil ar set of hands haki ng mes sag es are exch an ged. Switch C select s the port conn ected to Swi tch B as its root port, and both ends imm ediately transition to [...]

21-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP After en suring th at all of the por ts are sync hronized, the switc h sends an agreeme nt message to the designat ed switc h corre spondin g to its roo t port. W hen t he swit ches co nnecte d by a poin t-to-poi nt[...]

21-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP The sending switch sets the proposal flag in the RSTP BPDU to propose itself as the d esignated switch on that LAN. The p ort role in the proposa l message is alway s set to the designated port. The send ing switch s[...]

21-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP • Propagat ion—W hen an RSTP switch re ceives a TC messa ge from anot her switch t hrough a designat ed or r oot port, it pro pagate s the c hang e to a ll of i ts nonedge, desig nated port s and to th e root p [...]

21-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP • VTP propa gation of the MST co nfiguration i s not suppo rted. Howev er , you can ma nuall y configure the MS T co nfiguration (region n ame , revision num ber, and VLA N-to-in stance mappi ng) o n each switch wi[...]

21-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP Seconda ry Ro ot Switch When you con figure a swit ch wit h the extended system ID supp ort as the seconda ry root , the switc h priorit y is mo dified from t he default value (3276 8) to 2867 2. Th e swit ch is the[...]

21-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP How to Configu re MSTP Restarting the Protocol Mi gration Proce ss A switch r unning M STP supp orts a built-in pr otocol migrat ion mecha nism that enable s it to i nteroper ate with legacy IEEE 802.1D switche s. If this switc h receives a legac y IEEE[...]

21-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP How to Configure MSTP Configuring th e Root Switch Befo re Yo u Begin After conf iguring the switch as the root switch , we recommend that you av oid manually conf iguring the hello t ime, forward- delay time, and m aximu m-age tim e thro ugh th e spann[...]

21-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP How to Configu re MSTP Configuring the Opti onal MSTP Parame ters Befo re Yo u Begin Ex ercise care whe n conf iguring the switch priority . For most situati ons, we recomme nd that you use the spanning-tree mst instance- id roo t p ri m ar y and th e s[...]

21-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP How to Configure MSTP Step 4 spanning-tree mst forward-tim e second s Config ures the forward time for all MST instances. The forward dela y is the numb er of sec onds a por t waits befor e cha ngin g fro m its spanning -tre e learni ng and listeni ng s[...]

21-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Monito ring and Mai ntaining MST P Monitoring and Maintaining MSTP Configuration E xamples for Configuring MSTP Configuring th e MST R egion: E xample This example shows ho w to enter MS T configurati on mode, ma p VLANs 10 to 20 to MST instanc e 1, nam[...]

21-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Rela ted T opic Document T itle Cisc o IE 2000 com mands Cisco IE 2000 Switch C omma[...]

21-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Addition al Referenc es[...]

CH A P T E R 22-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 22 Configuring Optional S pannin g-Tree Features Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd so[...]

22-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Informat ion About Conf iguring the Optional Spanning-T ree Feat ures Interface s con nected to a si ngle workstat ion or server sho uld not re ceive bridge pr otocol data u nits (BPDUs). An interfac e with PortFast en abled go[...]

22-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 2 Configuring Op tional Spa nning-Tree Features Information About Configuring the Optional Spanning-Tree Features BPDU Filtering The BPDU fil tering feature can be global ly enabled on the switch or can be enabled per inter face, but the featu re operate s with so me dif f[...]

22-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Informat ion About Conf iguring the Optional Spanning-T ree Feat ures If a switch loses co nnectivity , it begins using t he alterna te paths as soon as the span ning tree selec ts a new root port . By enabli ng Upl inkFast w i[...]

22-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 2 Configuring Op tional Spa nning-Tree Features Information About Configuring the Optional Spanning-Tree Features Figur e 22-4 UplinkF ast E xample A ft er Dir ect L ink F ailur e Backbone Fast Backbo neFas t detects indirec t failur es in the core of the back bone. Bac kb[...]

22-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Informat ion About Conf iguring the Optional Spanning-T ree Feat ures Figur e 22-5 Bac kboneF ast Example Befor e Indir ect Link F ailur e If lin k L 1 fails as sh own in Fig ur e 22-6 , Switch C canno t detec t this failure be[...]

22-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 2 Configuring Op tional Spa nning-Tree Features Information About Configuring the Optional Spanning-Tree Features Figur e 22-7 A dding a S witch in a Shar ed-Medium T opolog y EtherChann el Guard Y ou can use Ethe rCha nnel guard to de tect an EtherC hanne l misconfigur at[...]

22-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Informat ion About Conf iguring the Optional Spanning-T ree Feat ures Root guard ena bled on an interf ace applies to all the VLANs to which the in terf ace belongs. VL ANs can be grou ped and map ped t o an M ST i nstance. Y o[...]

22-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 2 Configuring Op tional Spa nning-Tree Features How to Conf igure th e Optional Spanni ng-Tree Features Default Optional Sp anning-Tree Settings How to Configure the Optio nal Spanning-Tree Feature s Enabling Op tional SP T Features Befo re Yo u Begin • Make sure tha t t[...]

22-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Mainta ining and M onitorin g Optiona l Spanni ng-Tre e Features Maintaining an d Monitoring Optional Spanni ng-Tree Features Step 4 spanning-tree port fast bpduguard default Enables BPDU guard . By default, BPDU gu ard is dis[...]

22-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 2 Configuring Op tional Spa nning-Tree Features Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs show ether channel summary Displays the Ethe rChanne l confi[...]

22-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Addition al Referenc es RFCs RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature. —[...]

CH A P T E R 23-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 23 Configuring Resilient Ethernet Protocol Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft war[...]

23-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Informatio n About Conf iguring REP One REP segment is a chain of p orts co nnected to each other and conf igured with a se gmen t ID. E ach segment consis ts of standard (non-ed ge) segment port s and two user-configured edge [...]

23-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l Information About Configuring REP REP segm ents ha ve th ese charac teristic s: • If all po rts in the se gment are operati onal, one port (r eferre d to as the alternate port) is in the blocked state fo r each V LAN. If VLAN [...]

23-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Informatio n About Conf iguring REP Link Integrity REP does not use an en d-to -end polling me chani sm betwee n edge port s to verify link int egrity . It implemen ts local link failu re detection. The REP Lin k Status Layer ([...]

23-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l Information About Configuring REP • By enter ing the ne ighbor offset num ber of a port in the segment, which iden tifies the downstrea m neighb or port of an ed ge port. Th e neighb or offset number ra nge is –256 to +256; [...]

23-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Informatio n About Conf iguring REP When VLAN load balan cing is triggered , the primary edge por t sends out a message to alert all inter faces in the se gment about the preemptio n. When the second ary port recei ves the m es[...]

23-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l REP Seg men ts REP Segments A segment is a coll ection of po rts con necte d one to the oth er i n a ch ain and configured wit h a s egment ID. T o co nfigure REP segments , you configure th e REP admini strative VLAN (or use th[...]

23-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol REP Segmen ts • REP ports follo w these rules: – There is no limit to the number of REP p orts on a switch ; how ever , only two ports on a switch can be long to the sa me R EP segment . – If onl y one port o n a switch i[...]

23-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l How to Configure REP • If you do not co nfigure an admin istrative VLAN , the defaul t is V LAN 1. • There can be onl y one admi nistrat i ve VLAN on a switch and on a segme nt. H owe ver , thi s is not enfor ced by sof twar[...]

23-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol How to Configu re REP Step 4 rep s eg m e n t se gment-id [ edge [ no-neighbor ] [ primary ]] [ p referred ] Enables REP on the in terfa ce, and identif ies a segm ent number . The segment ID range is from 1 to 1024 . These op[...]

23-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l How to Configure REP Step 6 rep block port { id port-id | n eighbor_o ffset | pref err ed } vlan { vlan- list | all } (Optiona l) Configures VL AN load bala ncing on the primary ed ge port, id entify the REP alternate p ort in [...]

23-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Monito ring and Mai ntaining REP Setting M anua l Preemption for VLA N Load B alancin g Befo re Yo u Begin If you do not enter the rep pree mpt delay se conds interfac e co nfiguration comm and on the prima ry ed ge port to co[...]

23-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l Configuration Examples for Configuring REP Configuration E xamples for Configuring REP Configuring the Admi ni stra tive VLAN: Ex ample This exampl e shows ho w to configure th e admini strative VLAN as VLA N 100 and verify the[...]

23-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Addition al Referenc es Switch (conf-if)# rep preempt delay 60 Switch (conf-if)# rep lsl-age-timer 6000 Configuring V LAN Blocking: Example This exampl e shows ho w to configure th e VLAN blo cking co nfiguration shown in Figu[...]

23-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l Additional References MIBs RFCs MIB s MIB s Link — T o loc ate and download MIBs using Cisco IOS XR software, use the Cisco M IB Locat or found at the following URL an d choose a platfo rm unde r the Cisco Ac cess Produc ts m[...]

23-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Addition al Referenc es[...]

CH A P T E R 24-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 24 Configuring FlexLinks and the MAC Address-Table Move Update Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your pl[...]

24-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate Informat ion About Conf iguring the FlexL inks and th e MAC Addre ss-Tabl e Move Upd ate of the i n terfac es is in th e linkup stat e and forwarding traf fic. If the prim ary link shuts d o wn, th e standb y[...]

24-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e Information About Configuring the FlexLinks and the MAC Address-Table Move Update Figur e 24-2 VLAN Flex Links Load Balancing Configur ation Example FlexLinks Multicast Fast Convergence Flex Links Multi cas[...]

24-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate Informat ion About Conf iguring the FlexL inks and th e MAC Addre ss-Tabl e Move Upd ate Leaking IGMP Reports T o ach iev e multi cast tra ff i c conver g ence w ith minim al loss, a redund ant data pat h mus[...]

24-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e Information About Configuring the FlexLinks and the MAC Address-Table Move Update Figur e 24-3 MA C A ddr ess-T able M ov e Updat e Example Default Settings for FlexLinks an d MAC Address-Table Move Update [...]

24-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate How to Conf igure the F lexLinks and MAC Ad dress-Tab le Mov e Update Configur ation Guidelines for FlexLinks and M AC Addres s-Table Move Upd ate Foll ow these guidelines to conf igure FlexLinks: • Y ou ca[...]

24-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e How to Confi gure the Fle xLinks and MAC A ddress-Tab le Move Update Configur ing a Preemption S cheme fo r FlexLi nks Configuring V LAN Load Ba lancing on FlexLin ks Step 3 switchport backup interface inte[...]

24-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate How to Conf igure the F lexLinks and MAC Ad dress-Tab le Mov e Update Configuring th e MAC Ad dress-Table Move Update Fea ture Configuring th e MAC Ad dress-Ta ble Move Update M essages Step 3 switchport back[...]

24-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e Mainta ining an d Monitor ing the Fle xLinks an d MAC Address- Table Mo ve Update Maintaining an d Monitoring the FlexLinks and MAC Address-Table Move Update Configuration E xamples for the Fl exLinks and M[...]

24-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate Configur ation Exam ples f or the Flex Links and MAC Addres s-Tab le Move Update ---- ----- 1 Gi1/1(dynamic), Gi1/2(dynamic) 401 Gi1/1(dynamic), Gi1/2(dynamic) Similarly , both FlexLin ks ports are part of l[...]

24-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e Configu ration Examples for the Fle xLinks an d MAC Address- Table Move Upd ate 1 228.1.5.1 igmp v2 Gi1/1, Gi1/2, Gi1/1 1 228.1.5.2 igmp v2 Gi1/1, Gi1/2, Gi1/1 Whene ver a host respo nds to the ge neral qu[...]

24-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate Configur ation Exam ples f or the Flex Links and MAC Addres s-Tab le Move Update Configuring V LAN Load Ba lancing on FlexLin ks: Exa mples In the foll owing exampl e, VL ANs 1 to 50 , 60, a nd 10 0 to 120 a[...]

24-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e Additional References Configuring M AC A ddress-Table Move Upd ate: Exa mple This e xample sho ws how to confi gure an access switc h to send MA C address-tab le move update messages: Switch(conf)# interfa[...]

24-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate Addition al Referenc es MIBs RFCs MIB s MIBs Link — T o locate a nd download M IBs using Cisco I OS XR software, use the Cisco M IB Locat or found at the following URL an d choose a platfo rm unde r the Ci[...]

CH A P T E R 25-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 25 Configuring DHCP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci sco F[...]

25-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Informat ion About Conf iguring DHCP DHCP Relay Agent A DHCP relay agent is a Layer 3 device th at forw ards DHCP pack ets between clien ts and serv ers. Relay agen ts forward reque sts and replies be tween cl ient s and ser vers when they ar e not o n [...]

25-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP Information About Configuring DHCP If the switc h is an aggr egation swit ch s upporting DHC P snoop ing and is co nnecte d to a n ed ge swi tch that is inser ting DHCP op tion-82 inform ation, the swi tch drops pack ets with opt ion-82 inform ation when[...]

25-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Informat ion About Conf iguring DHCP When you ena ble the DHCP snoo ping info rmati on option -82 on the sw itch, this seq uence of eve n t s occu rs: • The host (DHCP client) genera tes a DHCP request and broadcasts it on the netw ork. • When the s[...]

25-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP Information About Configuring DHCP Figur e 25-2 Suboption P ack et For mats Figure 25-3 shows the packet fo rmats for user-configure d remote-I D and cir cuit-ID suboptions The switch uses these pa cket format s when DHCP sno oping is glob ally enabled a[...]

25-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Informat ion About Conf iguring DHCP Figur e 25-3 User -Configur ed Suboption P ack et For mats Cisco IOS DHC P Serv er Database Durin g the D HCP-bas ed au toconf igurati on proc ess, the de signated DH CP serv er uses the Ci sco I OS DHCP server datab[...]

25-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP Information About Configuring DHCP When a swit ch learns of ne w bindings or w h en it lo ses bindings, the switc h immediately updates th e entries in the d atabase. Th e switch also update s the entries in th e bindin g fi le. The frequenc y at which t[...]

25-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Informat ion About Conf iguring DHCP DHCP Snooping Config uration Guidelines • Y ou must globa lly en able DHCP snoo ping on the swit ch. • DHCP snooping is not acti ve until DHCP snooping is enabled on a VLAN. • Before glob ally en ablin g DHCP s[...]

25-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP Information About Configuring DHCP • Y ou can di splay DHCP snoo ping stati stics by entering th e show ip dhcp snooping stat istics user EXEC c omma nd, and y ou can clea r the snoopi ng sta tistic s coun ters by e nteri ng the clear ip dhc p snooping[...]

25-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP How to Co nf igur e DHC P option are id entified by the cl ient h ardware ad dress. When y ou configure this fe ature , the po rt na me of the interf ace o ver rides the clien t identif ier or hardw are address and the actual p oint of connectio n, the[...]

25-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP How to Configure DHCP Enabling DHC P Snoo ping and Op tion 82 Step 6 inte rface range port-range or interface interfa ce-id Configures mu ltiple physica l ports that are conne cted to the DHCP clients, and en ters i nterfac e range configuratio n mode. [...]

25-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP How to Co nf igur e DHC P Enabling th e DHCP Sn ooping Bind ing Data base Agen t Step 7 interface interface-id S p ecif ies the interfa ce to be conf igured, and e nters in terf ace configurati on mode. Step 8 ip dhcp snooping vlan vlan informa tion op[...]

25-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP How to Configure DHCP Enabling DHC P Server P ort-Based Addre ss Allocation Preassignin g an IP Addre ss Step 3 ip dhcp snooping database timeout second s Specifies (in secon ds) how long to wait for the da tabase tra nsfer proce ss to finish before sto[...]

25-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Monito ring and Mai ntainin g DHCP Monitoring and Maintaining DHCP Step 3 net work network-number [ ma sk | /p refix-le ng th ] Spe cifies the subne t network nu mber and mask of the DHCP address pool. Step 4 addr ess ip- addr ess client-id string [ as[...]

25-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP Configuration Examples for Configuring DHCP Configuration E xamples for Configuring DHCP Enabling DHC P Server P ort-Based Addre ss Allocation: Ex amples In this exam ple, a subscrib er identif ier is automatically genera ted, and the DHCP serve r ignor[...]

25-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Rela ted T opic Document T itle Cisc o IE 2000 c ommands Cisco IE 2000 Sw itch Co[...]

CH A P T E R 26-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 26 Configuring Dynamic ARP Insp ection Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware re[...]

26-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction Informatio n About D ynamic ARP Ins pection becau se ARP allo ws a gratuito us reply from a host e ven if an ARP request was not rece ived , an ARP spoofing attack an d the poiso ning of ARP cach es can occur . After the attac k, all t[...]

26-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n Information About Dynamic ARP Inspection Interface Trust State s and Netw ork Security D AI associa tes a trust state with ea ch interf ace on the switc h. Pack ets arri ving on tru sted interf aces byp ass all D AI v alidation check[...]

26-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction Informatio n About D ynamic ARP Ins pection Note Dep ending o n the set up of th e DHCP se rver and the ne twork, it might not be possi ble to validate a given ARP packet on all switc hes in the VLAN. Rate Limiting of ARP Packets The s[...]

26-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n Information About Dynamic ARP Inspection If the log b uffer o verf lows, it means that a log e vent does not fit into the lo g buf fer , and the display for the show ip arp inspection log pr i vile ged EX EC comm and is af fected. Da[...]

26-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction How to Conf igure Dynami c ARP Inspec tion Note Do n ot enable D AI on RSP AN VLANs. If D AI is enabled on RS P AN VLANs, D AI packets m ig ht not reach t he RSP AN destin ation port. • A physi cal p ort ca n joi n an Ether Chann el [...]

26-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n How to Conf igure Dyna mic ARP Insp ection Configuring ARP ACLs for Non-DHCP Environments This pr oced ure shows how to co nfigure DAI when Switch B shown in Figure 2 6-2 on page 26- 3 does not support D AI or DHCP snoop ing. If you [...]

26-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction How to Conf igure Dynami c ARP Inspec tion Step 3 permi t ip host sender-ip mac host sende r-mac [ log ] Permits ARP pac kets from t he s pecified host (Host 2). • sender-ip— Ente rs the IP address of Host 2. • sender-mac —Ente[...]

26-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n How to Conf igure Dyna mic ARP Insp ection Limiting the Rate of Incoming AR P Packets Command Purpose Step 1 co nfi g ure terminal E nters g lobal c onfiguration mode. Step 2 inte rface interfa ce-id Specif ies the interface to be ra[...]

26-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction How to Conf igure Dynami c ARP Inspec tion Perfor ming Validation Ch ecks Command Purpos e Step 1 co nfi g ure terminal Enters global co nfigurati on mode. Step 2 ip arp inspection vali date {[ src-m ac ] [ dst-mac ] [ ip ]} Perfo rms[...]

26-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n How to Conf igure Dyna mic ARP Insp ection Configuring the Log Buffer Command Purpose Step 1 co nfi g ure terminal Enters global con figuration mode. Step 2 ip ar p inspection log-b uffer { entries number | logs number interva l sec[...]

26-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction Monito ring and Mai ntainin g Dynam ic ARP Insp ection Monitoring and Maintainin g Dynamic ARP Inspection Configuration E xamples for Dynamic ARP Inspection Configuring Dynamic ARP Inspectio n in DHCP Enviro nments: Examp le This exam[...]

26-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Technica l Assista nce Rela ted T opic Document T itle Cisc o I[...]

26-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction Addition al Referenc es[...]

CH A P T E R 27-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 27 Configuring IP Source Guard Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. U[...]

27-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd Informatio n About IP So urce Guard Y ou can enable IPSG whe n DHCP snoo ping is ena bled on an untru sted in terface. Af ter IPSG is enabled on an interface, the switc h blocks al l IP traf fic r ecei ved o n the i nterf ace e xcept for DH[...]

27-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 7 Configuring IP Source G uard Information About IP Source Guard IPSG for static h osts al so support s dyn amic hosts. I f a dynami c hos t receives a DHCP- assigned IP address that is a vailable i n the IP DHCP snooping table, the same ent ry is learned by the IP de vice[...]

27-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd How to Conf igure IP Sourc e Guard • Y ou can enabl e this featur e when 802. 1x po rt-b ased au thentication is enabled. • If the numb er of te rnar y con ten t a ddressa ble mem ory ( TCAM ) e ntrie s excee ds th e ma xim um, th e CPU[...]

27-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 7 Configuring IP Source G uard How to Conf igur e IP So urce Guard Configuring IP Source Guard for Static Hosts on a Private VLAN Host Port Step 6 ip veri fy source tracking port-security Enables IPS G for static hosts with MA C address filt er ing. Note When you en able b[...]

27-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd How to Conf igure IP Sourc e Guard Step 6 pri vat e-vl an isolated Specif ies an iso lated VL AN on a pri v ate VLAN port. Step 7 exit Exits V LAN configurat ion m ode. Step 8 vlan vlan-i d1 Ente rs configurati on VLAN mode . Step 9 pri vat[...]

27-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 7 Configuring IP Source G uard Monitoring and Maintaining IP Source Guard Monitoring and Main taining IP Source Guard Configuration E xamples for IP Source Guard Enabling IPSG with Source IP and MAC Filtering: Example This e xample sho ws how to enable IPSG with source IP [...]

27-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd Configur ation Examp les for IP Source Guard Switch(config-if)# switchport access vlan 10 Switch(config-if)# ip device tracking maximum 5 Switch(config-if)# ip verify source tracking Switch(config-if)# end Switch# show ip verify source Inte[...]

27-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 7 Configuring IP Source G uard Configuration Examples for IP Source Guard 200.1.1.4 0001.0600.0000 9 GigabitEthernet0/2 ACTIVE 200.1.1.4 0001.0600.0000 8 GigabitEthernet0/1 INACTIVE 200.1.1.5 0001.0600.0000 9 GigabitEthernet0/2 ACTIVE 200.1.1.5 0001.0600.0000 8 GigabitEthe[...]

27-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd Addition al Referenc es Switch(config-vlan)# exit Switch(config)# vlan 200 Switch(config-vlan)# private-vlan association 201 Switch(config-vlan)# exit Switch(config)# int fastEthernet 4/3 Switch(config-if)# switchport mode private-vlan hos[...]

27-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 7 Configuring IP Source G uard Additional References Standa rds MIBs RFCs Stan dard s T itle No new or m odified standa rds are supp orted by th is featur e, and su pport for exist ing stand ards has n ot been modif ied b y this feature. — MIB s MIB s Link — T o loc a[...]

27-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd Addition al Referenc es[...]

CH A P T E R 28-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 28 Configuring IGMP Sno oping and MVR Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware rel[...]

28-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR IGMP Snooping Layer 2 switches can use IGMP snooping to constra in the flooding of multic ast tr af f ic by dynam ically configurin g Layer 2 interfaces so that multicast tra ff ic is forward[...]

28-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR An IGMPv 3 switc h suppo rts Basic IGMPv 3 Snoopin g Support (BISS), which includes support for t he snooping feat ures on IGMPv 1 an d IGMPv 2 switc hes a nd for IGMPv 3 membe rship r eport mess[...]

28-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR Router A sends a genera l quer y to th e switch , which forwar ds the qu ery to ports 2 t hroug h 5, whi ch are all members of the same VLAN. Host 1 wants to join multicast group 224.1.2.3 an[...]

28-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR Leaving a Multicast Group The router sends periodic multicast general querie s, and the switch forw ards these queries throug h all ports in the VLAN. Inte rested hosts respond to th e qu eries. [...]

28-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR IGMP Report Su ppression Note IGMP report suppression is supported only when t he multicast query has IGMPv 1 and IGMPv2 reports. This fea ture is not supp orted when the query i ncludes IG M[...]

28-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR Y ou can configure the swit ch eith er to sno op on I GMP que ries an d PIM/DVMRP packets or t o listen to CGMP se lf-join or prox y-join packets. By de fault, the switch snoops on PIM/DVMRP pack[...]

28-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR is no SVI IP address , the swit ch uses th e f irst av ailable IP ad dress co nf igured on the switc h. The firs t IP addr ess a vailab le appea rs in the o utput of the sho w ip interface pr[...]

28-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR Y ou can set the switc h for compa tibl e or dynamic mode of MVR ope ration: • In compatib le mode, multicast data recei ved by MVR hosts is forw arded to all MVR data ports, reg ar dless of MV[...]

28-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR Figur e 28-3 Multicast VLAN Registr ation Examp le When a subscriber chan ges channels or turns of f the tele v ision, the set-to p box sends an IGMP leav e message for t he multica st strea[...]

28-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR These messa ges dynamic ally re g ister f or streams of multic ast traf fic in the m ulticast VL AN on the Layer 3 device. Sw itch B. T he ac cess laye r switch, Switc h A, m odifies the f orwar[...]

28-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR IGMP Filtering and Throttling In some en vironments, for e xample, metropolitan or multiple- dwelling unit (MDU) installati ons, you might w a nt to control the set of multic ast groups t o [...]

28-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR IGMP Profiles T o conf igure an IGMP pro file, use the ip igmp prof ile global conf iguration command with a prof ile number t o crea te an IGM P profile a nd to ente r IGMP profile configur ati[...]

28-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR How to Conf igure IGMP Snoo ping and MVR How to Configure IGMP Sn ooping and MVR Configuring IGMP Snooping Enabling or Disabling IGMP Snoop ing By default, IGM P snoopin g is global ly enab led on the swi tch. When gl oball y enab le[...]

28-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR How to Co nfigure IGMP S noopi ng and MVR Configuring TCN Step 4 ip igmp snooping vla n vlan-id static ip_ad dr ess interface in terface-id (Opt ional) Stat ically conf igure s a Layer 2 p ort as a membe r of a multica st group : • [...]

28-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR How to Conf igure IGMP Snoo ping and MVR Configuring the IGMP Snoopin g Querier Disabling IGMP Re port Suppression Befo re Yo u Begin IGMP report suppression is supported only when the multicast query has IGMPv1 a nd IGMPv2 reports. [...]

28-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR How to Co nfigure IGMP S noopi ng and MVR Configuring MVR Int erfaces Command Purpose Step 1 conf igur e terminal En ters g lobal configurati on m ode. Step 2 mvr Enables MVR on the switch. Step 3 mvr group i p-address [ count ] Co nf[...]

28-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR How to Conf igure IGMP Snoo ping and MVR Configuring IGMP Configuring IGMP Profi les Configuring IGMP Interfac es Step 5 mvr vlan vlan-i d group [ ip-address ] ( Optional) Sta tically c onfigu res a por t to recei ve multic ast traf [...]

28-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Monito ring and Maint aining IGMP Snooping an d MVR Monitoring and Main taining IGMP Snooping and MVR Step 3 ip igmp f ilter pr ofil e number Applie s the specif ied IGM P prof ile to the in terface. The ran ge is 1 to 4294967295 . St[...]

28-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Monito ring and Mai ntaining IGMP Snooping and MVR show ip igmp snooping mrouter [ vlan v lan-id ] Displays i nform ation on dy namicall y learned a nd manuall y configured multicast rou ter interf aces. Note Whe n you enable IG MP s[...]

28-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Configuration Examples for IGMP Snooping Configuration E xamples for IGMP Snooping Configuring IGM P Sno oping: Examp le This example shows ho w to configure IGMP sno oping to use CGMP packet s as the lear ning method : Switch# config[...]

28-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Configur ation Examp les for IGMP Snooping Switch(config)# ip igmp snooping querier timeout expiry 60 Switch(config)# end This exam ple sh ows how to set the IG MP sn oopin g queri er fe ature to ver sion 2: Switch# configure termina[...]

28-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Additional References Applying an IGMP Profile: Example This exam ple sh ows how to appl y IGMP profile 4 t o a port: Switch(config)# interface gigabitethernet1/2 Switch(config-if)# ip igmp filter 4 Switch(config-if)# end Limiting IGM[...]

28-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Addition al Referenc es RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature. — Description Link The Ci sco T echn[...]

CH A P T E R 29-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 29 Configuring Port-Base d Traffic Control Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft war[...]

29-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Informat ion About Port -Based Tr affic Control W i th eac h metho d, the po rt bloc ks tr aff ic when the risi ng thre shold is r eache d. The po rt rem ains b locked until th e traf fic rat e drops be lo w the fa lling threshold [...]

29-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control Inform ation Abo ut Por t-Based Tr affic C ontrol Storm Control and Threshold Levels Y ou co nfigure storm contr ol on a port an d enter t he threshol d lev el that you want t o be used for a particula r type o f traf fic. Howe ve[...]

29-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Informat ion About Port -Based Tr affic Control Do not co nf igure a pri vate-V LAN port as a protecte d port. Do not conf igure a pr otecte d port as a priv a te-VLA N p ort. A priv ate- VLAN i solat ed po rt do es n ot forwa rd t[...]

29-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control Inform ation Abo ut Por t-Based Tr affic C ontrol Y ou ca n configure a n interfac e to convert the dynam ic MAC addresses to sticky secu re MAC addresses and to a dd them to the r unning c onfigu ration b y enablin g stick y lear[...]

29-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Informat ion About Port -Based Tr affic Control • shutdown vlan—U se to se t the sec urity violatio n mode per-VLAN. I n this m ode, the VLAN is error disabled instea d of the en tire port when a viol ation oc curs Default Port[...]

29-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control Inform ation Abo ut Por t-Based Tr affic C ontrol VLAN, but is not l earne d on the a ccess VL AN. If y ou co nnect a sing le PC to the Ci sco IP phone , no addi tional MA C addre sses are require d. If you conn ect m ore tha n on[...]

29-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Informat ion About Port -Based Tr affic Control Port Securi ty Aging Y ou can use port secur ity aging t o set the ag ing time fo r all secure addre sses on a port. T wo t ypes of aging ar e suppor ted per por t: • Absolu te—Th[...]

29-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control How to Conf igure P ort-Bas ed Traff ic Control Protoco l storm prot ection is disable d by default. Whe n it is enable d, auto -recovery of t he virtua l port is disabled by defau lt. How to Configure Port-Based Traffic Control C[...]

29-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control How to Conf igure Port-Bas ed Traffic Con trol Configuring Small-Frame Arri val Rate Configuring P rotected P orts • pps pps —Specifies th e rising threshold le vel for broa dcast, mult icast, or u nicast traff ic in pa ckets [...]

29-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control How to Conf igure P ort-Bas ed Traff ic Control Configuring P ort Blockin g Blocking Flooded Traffic on an Interf ace Note Th e inter face can be a physica l interfac e or an Ether Chann el group. When you blo ck multic ast or un[...]

29-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control How to Conf igure Port-Bas ed Traffic Con trol Step 6 switchport port-security [ maximum value [ vlan { vlan-list | { acces s | vo ic e }}]] (Opti onal) maximum —Specifi es th e maxim um numbe r of secu re MA C addre sses on the[...]

29-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control How to Conf igure P ort-Bas ed Traff ic Control Step 7 swit chpor t port -sec urity [viola tion { protec t | r estrict | shutdown | shutdown vlan }] (Optiona l) Sets th e viola tion mod e, the act ion to be taken when a sec urity[...]

29-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control How to Conf igure Port-Bas ed Traffic Con trol Step 8 switchport port-security [ mac-addre ss mac-address [ vlan { vlan-id | { access | voice }}] (Optional) Ent ers a secure MA C address for the interf ace. Y ou can use this comma[...]

29-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control How to Conf igure P ort-Bas ed Traff ic Control Enabling and Configuring Por t Security Aging Configuring P rotocol Sto rm Protection Enabling Protocol Storm P rotection Command Purpose Step 1 co nfi g ure terminal E nters g loba[...]

29-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Monito ring and Mai ntaining Port -Based Tr affic Control Monitoring and Main taining Port-Based Traffi c Control Configuration E xamples for Port-Based Traffic Co ntrol Enabling Un icast Sto rm Con trol: Example This exa mple sho[...]

29-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control Config uration Examp les for P ort-Bas ed Traffic Cont rol Enabling Bro adcast Add ress Storm Control o n a Port: E xample This exam ple sh ows how to enabl e broa dcas t addr ess stor m co ntrol on a port t o a l ev e l of 20 pe[...]

29-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Configur ation Examp les for Port-B ased Traff ic Control This exam ple sh ows how to configure a st atic se cure M A C addr ess on VLAN 3 o n a por t: Switch(config)# interface gigabitethernet1/2 Switch(config-if)# switchport mod[...]

29-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Technica l Assista nce Rela ted T opic Document T itle Cisc [...]

29-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Addition al Referenc es[...]

CH A P T E R 30-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 30 Configuring SPAN and RSPAN Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Us[...]

30-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Information A bout SPAN and RSPAN SP AN copi es (o r mir rors) t raff ic re ceived or sen t (or b oth) on so urce po rts or source VLA Ns to a destinat ion po rt fo r anal ysis. SP A N doe s not affect the switc hing of networ k traffic on the[...]

30-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Infor matio n Ab out SP AN an d RSP AN Figur e 30-2 Example o f RSP AN Configur ation SPAN Sessio ns SP A N sessi ons (lo cal or remot e) allow you t o monitor tr aff ic on o ne or more ports , or one or more VLANs , and sen d the mon itored tr [...]

30-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Information A bout SPAN and RSPAN There can be more than one so urce sess ion and more than one destin ation se ssion act iv e in the same RSP AN VLAN. There can also be interme diate switches separat ing the RSP AN source and destination sess[...]

30-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Infor matio n Ab out SP AN an d RSP AN Feature s that can caus e a packe t to be droppe d during tra nsmit pro cessing also af fect the duplicat ed copy for SP AN. The se feature s inclu de IP standa rd and extended ou tput A CLs and egress QoS [...]

30-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Information A bout SPAN and RSPAN • Source por ts can be in the same or differen t VLANs. • Y ou can monit or multiple source ports in a single session. Source VLANs VLAN-based SP AN (VSP AN) is the monitori n g of th e net work tr af fic [...]

30-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Infor matio n Ab out SP AN an d RSP AN A destinati o n port has th ese charact eristics: • For a local SP AN sessi on, the d estinatio n port must reside on t he same swi tch as the s ource por t. For an RSP AN session, it is located on the sw[...]

30-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Information A bout SPAN and RSPAN • An RSP AN VLAN cannot be a pri vate-VL AN primary or seco ndary VLAN . For VLAN s 1 t o 100 5 that are visibl e to VLAN Trunking Proto col (V TP), the VL AN ID an d its associa ted RSP A N chara cterist ic[...]

30-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Infor matio n Ab out SP AN an d RSP AN • A secu re port ca nnot be a SP A N dest inatio n port. For SP AN se ssions, do not enable port security o n ports with mo nitored egress when ingress forwarding is enable d on t he desti nation p ort. F[...]

30-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN How to Configure SPA N and RSPAN • The RSP AN VL AN is configured onl y on trunk por ts and not on acc ess ports. T o a void unwanted traf fic in R SP AN VLANs, mak e sure t hat the VL AN remote- span feature is supported in all the partici[...]

30-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN How to Conf igure SPAN and RSPAN Step 3 monitor s ession session_numbe r source { interface in terface-id | vl an vl an-id } [ , | - ] [ both | rx | tx ] Specifies the SP AN sessi on and the so urce po rt (mo nitored port). session_number — T[...]

30-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN How to Configure SPA N and RSPAN Creating a Local SPAN Session and Configuring Incoming Traffic Step 4 monitor s ession session_numbe r destination { interfa ce interface-id [, | -] [ encapsulation r eplicate]} Specifies the SP AN sessi on an[...]

30-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN How to Conf igure SPAN and RSPAN Specifying VLANs to Filter Step 4 monitor s ession session_numbe r destination { interfa ce interface-id [, | -] [ encapsulation r eplicate] [ ingr ess { dot1q vlan v lan-id | untagged vlan vl an-id | vlan vlan-[...]

30-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN How to Configure SPA N and RSPAN Configuring a VLAN as an RSPAN VL AN Step 4 monitor session sessio n_numbe r filter vlan vlan -id [ , | - ] Limits the SP AN source traff ic to specif ic VLANs. session_n umber —Ent ers the sessi on number s[...]

30-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN How to Conf igure SPAN and RSPAN Creating an R SPAN Sou rce Sessio n Command Purpose Step 1 conf igur e terminal Ente rs global configurati on mode . Step 2 no monitor session { session_numb er | all | local | remo t e } Removes any e xi sting [...]

30-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN How to Configure SPA N and RSPAN Creating an R SPAN Des tination Sess ion Creating an RSPAN Destination S ess ion and Configuri ng Incoming Traffic Command Purpose Step 1 conf igur e terminal Ente rs global configurat ion mode. Step 2 vlan v [...]

30-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN How to Conf igure SPAN and RSPAN Specifying VLANs to Filter Step 3 monitor s ession session_numbe r source re mote v lan vlan-id Specif ies the RSP AN session and the so urce RSP AN VLAN. session_number — The range is 1 to 66. vlan-i d —Spe[...]

30-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Monitorin g and Maintainin g SPAN and RSPAN Monitoring and Main taining SPAN and RSPAN Configuration E xamples for SPAN and RSPAN Configuring a Local S PAN Session : Example This example shows how to set up SP A N session 1 for monit oring so[...]

30-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Confi guratio n Examples fo r SPAN and RSPAN Switch(config)# end This exampl e shows ho w to disabl e received traff ic monit oring on por t 1, whic h was configured for bidirec tional mo nitorin g: Switch(config)# no monitor session 1 source i[...]

30-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Addition al Referenc es Configuring a VLAN for a SPAN S ession: Ex ample This example shows ho w to configure VLA N 901 as the sou rce remo te VLAN and por t 1 as the destinatio n interface: Switch(config)# monitor session 1 source remote vla[...]

30-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Additional References Standa rds MIBs RFCs Stan dard s T itle No new or m odified standa rds are supp orted by th is featur e, and su pport for exist ing stand ards has n ot been modif ied b y this feature. — MIB s MIB s Link — T o loc ate [...]

30-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Addition al Referenc es[...]

CH A P T E R 31-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 31 Configuring LLDP, LL DP-MED, and Wired Location Service Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platfo[...]

31-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service Informat ion About LLDP, LLDP-MED , and Wire d Locatio n Service LLDP sup ports a set of att ributes tha t it uses to discover neighbo r devices. The se at tri b utes co nta in ty pe , length, and v alue descriptions[...]

31-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 1 Configuring LLDP, LLDP-M ED, and Wired Location Serv ice Information About LLDP, LLDP-MED, and Wired Location Service • In ventor y manage ment TL V Allows an endpoint to send detail ed in vent ory info rmation ab out itsel f to the switc h, includi ng inform ation ha [...]

31-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service Informat ion About LLDP, LLDP-MED , and Wire d Locatio n Service • Slot and port t hat was disconne cted • MA C addr ess • IP addre ss • 802.1 X username i f applica ble • De vice catego ry is specif ied as[...]

31-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 1 Configuring LLDP, LLDP-M ED, and Wired Location Serv ice How to Configure LLDP, LLDP-MED, and Wired Location Service • For wired location to funct ion, you must f irst enter the ip de vice tracking globa l configuratio n comm and. LLDP-MED T LVs By def ault, the switch[...]

31-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service How to Conf igure LLDP , LLDP- MED, and Wire d Locatio n Service Configurin g LLDP-M ED TL Vs Configuring Netw ork-Policy TLV This t ask explain s how to c reate a network-p olicy pro file, con figure the p olicy att[...]

31-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 1 Configuring LLDP, LLDP-M ED, and Wired Location Serv ice How to Configure LLDP, LLDP-MED, and Wired Location Service Configuring Location TLV an d Wired Loc ation Se rvice This task e xplains ho w to conf igure locatio n informa tion for an e n dpoint an d to apply it to[...]

31-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service Monito ring and Mai ntainin g LLDP, LLDP-MED , and Wired Lo catio n Service Monitoring and Main taining LLDP, LLDP-MED, and Wired Location Service Step 4 interface interface-id S peci fies the interfac e on whic h yo[...]

31-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 1 Configuring LLDP, LLDP-M ED, and Wired Location Serv ice Configuration Examples for Configuring LLDP, LLDP-MED, and Wired Location Service Configuration E xamples for Configu r ing LLDP, LLDP-MED, and Wired Locati on Servic e Enabling L LDP: Example s This exam ple sh ow[...]

31-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service Configur ation Examp les for Confi guring LLDP, LLDP -MED, an d Wired Loca tion Servi ce Switch(config-if)# lldp med-tlv-select inventory-management Switch(config-if)# end Configuring Ne twork Policy : Example This [...]

31-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 1 Configuring LLDP, LLDP-M ED, and Wired Location Serv ice Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Technica l Assista nce Rela ted T opic Docum[...]

31-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service Addition al Referenc es[...]

CH A P T E R 32-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 32 Configuring CDP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci sco Fe[...]

32-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 32 Configur ing CDP How to Configure CD P For a switch and co nnect ed endpo int devices runni ng Cisco Me dianet , these events occur: • CDP ident ifies connec ted e ndpoints that c ommu nicate di rectly with the sw itch. • Only one wired switch reports the loca tion i[...]

32-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 2 Configuring CDP Monitoring and Maintaining CDP Disabling CDP CDP is enab led by default. Note Switc h clus ters a nd othe r Cisco devices (s uch as Cisco IP Phones ) regular ly exchange CDP messages. Disabling CDP ca n int errupt cluster discovery and device conne ctivit[...]

32-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 32 Configur ing CDP Conf igurat ion Exa mples fo r CD P Configuration E xamples for CDP Configuring C DP Pa ramete rs: Ex ample This exam ple sh ows ho w to con figure CD P parame ters: Switch# configure terminal Switch(config)# cdp timer 50 Switch(config)# cdp holdtime 120[...]

32-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 2 Configuring CDP Additional References Standa rds MIBs RFCs Stan dard s T itle No new or m odified standa rds are supp orted by th is featur e, and su pport for exist ing stand ards has n ot been modif ied b y this feature. — MIB s MIB s Link — T o loc ate and downloa[...]

32-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 32 Configur ing CDP Addition al Referenc es[...]

CH A P T E R 33-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 33 Configuring UDLD Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci sco F[...]

33-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 33 Configuring UDLD Informat ion About U DLD Modes o f Operation UDLD su pport s two mo des of o perat ion: n ormal (the d efault) a nd a ggressive. In norm al mode, U DLD can dete ct un idirec tional li nks due to miscon necte d port s on fiber-optic con nections . In aggr[...]

33-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 3 Configuring UD LD Information About UDLD When the switch rec e iv es a hello message, i t caches the infor mation until th e age time (hold time or time- to-li ve) e xpires. If the switch re ceiv es a ne w hello mess age befo re an olde r cache entry ag es, the switc h r[...]

33-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 33 Configuring UDLD How to Co nf igur e UDL D Default UDLD Settings How to Configure UDLD Enabling UDL D Globally Foll ow these steps to en able UDLD i n the aggressi ve or normal mod e and to set the c o nfig urable message timer on all f iber- optic ports on the switc h: [...]

33-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 3 Configuring UD LD How to Configu re UDLD Enabling UDL D on an Inte rface Setting and Resettin g UDLD Parameters Command Purpose Step 1 conf igur e terminal Enters g lobal c onfiguratio n mode . Step 2 interfac e interface-id Speci fies the port to be enable d for UDLD, a[...]

33-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 33 Configuring UDLD Main ta ining and M oni tor ing UD LD Maintaining an d Monitoring UDLD Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Command Purpose show udld [ interfac[...]

33-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 3 Configuring UD LD Additional References Technica l Assista nce Description Link The Cisco T echnical Supp ort webs ite conta ins thousa nds of pag es of search ab le technic al cont ent, includ ing links to produ cts, te chnolog ies, so lutions, technica l tips, a nd too[...]

33-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 33 Configuring UDLD Addition al Referenc es[...]

CH A P T E R 34-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 34 Configuring RMON Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci sco F[...]

34-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 34 Configuring RM ON Informat ion About RMO N Figur e 34-1 Remot e Monit ori ng Example The switc h supports these RM ON groups (defined in RFC 1757) : • Statistics ( RMON group 1)—Collects E thernet statistic s (including Fast Ethernet and Giga bit Ethern et statist ic[...]

34-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 34 Configur ing RMON How to Configu re RMON How to Configure RMON Configuring R MON Alarms a nd Events Y ou can co nfigure your s witch f or RM ON by usi ng th e com mand -line interfac e ( CLI) or an SNM P-com pati ble networ k manage ment st ati on. Command Purpose Step 1 [...]

34-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 34 Configuring RM ON How to Co nfig ure RM ON Collectin g Group Hist ory St atistics on an Interface Y ou must first c onfigure RMO N alar ms an d events to displ ay co llectio n info rmatio n. Collectin g Group Et hernet St atistics on an Interface Command Purpose Step 1 c[...]

34-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 34 Configur ing RMON Monitoring and Maintaining RMON Monitoring and Maintaining RMON Configuration E xamples for RMON Configur ing an RMON Alarm Nu mber: Exampl e The following exam ple sh ows how to configure an RMON alar m num ber: Switch(config)# rmon alarm 10 ifEntry.20.[...]

34-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 34 Configuring RM ON Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Rela ted T opic Document T itle Cisc o IE 2000 c ommands Cisco IE 2000 Sw itch Com[...]

34-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 34 Configur ing RMON Additional References Technica l Assista nce Description Link The Cisco T echnical Supp ort webs ite conta ins thousa nds of pag es of search ab le technic al cont ent, includ ing links to produ cts, te chnolog ies, so lutions, technica l tips, a nd tool[...]

34-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 34 Configuring RM ON Addition al Referenc es[...]

CH A P T E R 35-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 35 Configuring System Message Logg ing Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware re[...]

35-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging Informat ion About System Me ssage Loggi ng Y ou can access logged sy stem messag es by using the switc h command-line in terfa ce (CLI) or by sa ving them to a properly configured syslog server . The switch software sa ves syslog me[...]

35-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging Informat ion Abo ut System Mess age Logging When synch ronous loggi ng of unsolic ited message s and debug comman d output is enabled, un solici ted device output appe ars on the conso le or prin ted after solic ited device output app[...]

35-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging Informat ion About System Me ssage Loggi ng Logging Messages to a UNIX Syslog Daemo n Before yo u can send system log messages to a UNIX syslog server , you must con figure the syslog daemon on a UNIX ser ver . Thi s proc edure is o [...]

35-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging How to Conf igure System Message Logging Default Syste m Mess age Lo gging Con figuration How to Configure System Messag e Logging Disabling M essag e Logging Message logging is enab led by defau lt. It must be enabled to send message[...]

35-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging How to Co nfigure Syst em Mess age Lo gging Setting th e Mes sage Disp lay Destination Device If message logging is enabled , you can send messages to specific locations in addition to the conso le. Beginning in privileged EX EC mode[...]

35-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging How to Conf igure System Message Logging Synchronizing Log M essages Command Purpose Step 1 conf igur e terminal Enters gl obal con figuration mo de. Step 2 line [ cons ole | vty ] line-num ber [ ending -line -numb er ] Specifies the [...]

35-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging How to Co nfigure Syst em Mess age Lo gging Enabling a nd Disab ling Time S tamps on Log M essages Enabling a nd Disab ling Seq uence Numb ers in Lo g Messa ges Because there is a chanc e that more than one log message c an have the [...]

35-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging How to Conf igure System Message Logging Limiting Syslog Messages Sent to the History Table and to SNMP If you enable d syslog message traps to be sent to an SNMP network manage ment stati on by using the snmp-ser ver ena ble trap glo[...]

35-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging Monito ring and Mai ntainin g the Syste m Message Log Configuring the UNIX System Logging Facilit y When sending system log messa ges to an external de vice, you can cause the swit ch to ident ify its messages as originating from an[...]

35-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging Confi gura tion Exa mples for t he System M essa ge Lo g Logging Dis play: Examp les This example shows part of a logging displa y with the servi ce timestam ps log date time g lobal configurat ion c omma nd en abled: *Mar 1 18:46:11[...]

35-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Rela ted T opic Document T itle Cisc o IE 2000 c ommands Cisc[...]

35-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging Additional References Technica l Assista nce Description Link The Cisco T echnical Supp ort webs ite conta ins thousa nds of pag es of search ab le technic al cont ent, includ ing links to produ cts, te chnolog ies, so lutions, techn[...]

35-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging Addition al Referenc es[...]

CH A P T E R 36-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 36 Configuring SNMP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci sco F[...]

36-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P Informat ion About SNM P • Changing t he value of the SNMP eng ine ID has im portant im plicat ions. A use r's password (enter ed on the comm and line ) is conv erted to an M D5 or SH A secur ity dige st based o n the pa ssword and the local e ng[...]

36-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP Information About SNMP – Encryp tion—Mi xes t he contents of a package to prev ent it from being read by an un authoriz ed source. Note T o select encryption , enter the pri v keyword. Th is keyword is av a ilable only w hen the cryptogr aphic (encry[...]

36-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P Informat ion About SNM P SNMP Man ager Functio ns The SN MP ma nager uses inf orma tion in the M IB t o perfo rm th e ope rations des cribed i n Ta b l e 36- 2 . SNMP Agen t Fun ctions The SNMP a gent respond s to SNMP manager requests as follows: • G[...]

36-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP Information About SNMP Using SN MP to Acces s MIB Va riables An examp le of an NM S is th e Cisc oW orks network manag ement sof tware. C iscoW orks 200 0 softwa re uses the switch MIB v ariables to set de vice var iables and to poll de vices on the netw[...]

36-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P Informat ion About SNM P SNMP ifIndex MIB Object Values In an NMS, the IF-MIB g ener ates and a ssigns an inte rface index (if Index) obje ct value th at is a unique number gre ater than zero to ident ify a physica l or a logica l interfac e. When th e [...]

36-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP Information About SNMP This t able descri bes the suppo rted sw itc h trap s (noti fication ty pes ). Y ou can enab le any or al l of the se traps and c onfigure a trap ma nager to rece iv e them . T o enab le the sending of SNMP inform notificat ions, u[...]

36-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P How to Co nf igur e SN MP Note Th ough visi ble in the c ommand- line hel p strings, the fru-ctrl, inse rtion , and remo val ke ywords are no t supported. Y ou can use the snm p-server host global configura tion c omman d to a spec ific host to re ceive[...]

36-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP How to Configure SNMP Configuring Community Strings Note T o disabl e acce ss for an SNMP commun ity , set the community string for that co mmuni ty to t h e nu ll string (do not enter a value for th e communi ty string ). Command Purpose Step 1 c onfigu[...]

36-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P How to Co nf igur e SN MP Configur ing SNMP Groups and Us ers Y ou can spe cify an ide ntification name (engi ne ID) for the local or remote SNM P server engine on th e switch . Y ou can co nf igure an SNMP serv er group that m aps SNMP users to SNMP v[...]

36-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP How to Configure SNMP Step 3 sn mp- server grou p gr o upnam e { v1 | v2c | v3 { auth | noauth | priv }} [ rea d re a d v i e w ] [ write writevi ew ] [ notify notifyvie w ] [ ac cess access -list ] Configures a new SNMP group on the remote device. • [...]

36-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P How to Co nf igur e SN MP Configuring SNMP Notifications Step 4 sn mp- server user us ername gr oupnam e { rem o te host [ udp-port port ]} { v1 [ access access -list ] | v2c [ access access-list ] | v3 [ encrypted ] [ access access-list ] [ auth { md5[...]

36-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP How to Configure SNMP Step 3 snmp-serv er user username gr o upname { remo te host [ udp-port port ]} { v1 [ ac cess access- list ] | v2c [ acces s access-list ] | v3 [ encryp ted ] [ acces s access-list ] [ auth { md5 | sha } auth-pas swor d ]} Conf ig[...]

36-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P How to Co nf igur e SN MP Setting the CPU Th reshold Notification Types and Values Setting th e Agent C ontact and Location In formation Step 7 snm p-server trap -source interface-id (Op tional) Specif ies the source interface , wh ich prov ides the IP[...]

36-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP Monit oring and Maint ainin g SNMP Limiting TFTP Server s Used Thr ough SNM P Monitoring and Maintaining SNMP Command Purpose Step 1 configur e terminal E nters globa l configuration mod e. Step 2 snmp-se rver tftp-s erver-list access-list-number Limits[...]

36-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P Conf igurat ion Exa mples fo r SNMP Configuration E xamples for SNMP Enabling S NMP Vers ions: Example This example shows ho w to ena ble all versions of SN MP . Th e configurati on permi ts any SNMP manager to access all objects with read-only permiss[...]

36-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP Additional References Associatin g a User with a Remote Hos t: Exa mple This example shows ho w to associa te a user with a remote host a nd to send auth (authNo Pri v) authenti cation-le vel in forms when the us er ente rs global conf iguration mode: S[...]

36-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P Addition al Referenc es MIBs RFCs Technica l Assista nce MIB s MIBs Link — T o locate a nd download M IBs using Cisco I OS XR software, use the Cisco M IB Locat or found at the following URL an d choose a platfo rm unde r the Cisco Ac cess Produc ts [...]

CH A P T E R 37-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 37 Configuring Network Security with ACLs Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware[...]

37-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Informat ion About Ne twork Secu rity with A CLs switch rejects th e packet. I f there are no restricti ons, the switch for wards the pac ket; otherwise , the switch drops the pa cket. The switch can use A CLs on all packe ts it fo [...]

37-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Information About Network Security with ACLs The switch examines A C Ls asso ciat ed w ith al l inb ound f eatur es configur ed on a g i ven inte rface a nd permits or denies pa cket forwardi ng based on how the packet match es th[...]

37-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Informat ion About Ne twork Secu rity with A CLs Some ACEs do not chec k Layer 4 info rmati on and th eref ore can be appl ied to al l packet f ragment s. A CEs that do test Lay er 4 inform ation cannot b e applie d in the standard [...]

37-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Information About Network Security with ACLs Standard and Extended IPv4 ACLs This sec tion describ es IP ACLs. An A CL is a se quentia l co llection of pe rmit an d deny co nditi ons. One by one, the switch tes ts pack ets against[...]

37-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Informat ion About Ne twork Secu rity with A CLs Note In addit ion to n umbered standard and extended A CLs, you c an also create s tandar d and e xtended nam ed IP A CLs by u sing th e sup ported numbers. That is, t he nam e of a s[...]

37-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Information About Network Security with ACLs • User D atagr am Prot ocol ( udp ) Note IC MP echo-reply canno t be fi ltered. All other ICMP codes or types can be filte r ed. Note Th e switc h does not supp ort dyna mic or reflex[...]

37-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Informat ion About Ne twork Secu rity with A CLs When you ar e creat ing standa rd extende d A C Ls, reme mber tha t, by default, the end of the A CL contains an implicit de ny statement f or everything if it did no t find a match b[...]

37-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Information About Network Security with ACLs IPv4 ACL to a Terminal Line Y ou ca n use number ed ACLs to control acc ess to one or mor e termin al line s. Y ou ca nnot apply na med A CLs to lin es. Y ou must s et iden tical re str[...]

37-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Informat ion About Ne twork Secu rity with A CLs When you apply an u ndefined ACL to an i nterface, t he swit ch ac ts as i f the A CL has not be en appl ied to the interfac e and perm its all packet s. Remem ber this behavior if y[...]

37-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs How to Configure Network Security with ACLs T o determine the specia lized hardwa r e resources, en ter the show platform layer4 acl map pri v ileged EXEC co mmand. If th e switch does not ha ve av ailable resou rces, the o utput[...]

37-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs How to Conf igure Networ k Security with ACLs Command Purpose Step 1 co nfi g ure terminal Enter s globa l configura tion m ode. Step 2 access-list access-list-number { deny | permit } source [ sour ce-wil dcar d ] [ log ] Defines [...]

37-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs How to Configure Network Security with ACLs Creating a Numbered Exte nded ACL Command Purpos e Step 1 co nfi g ure terminal Enter s global configurat ion mode . Step 2a access-list acce ss-list-num ber { deny | permit } pr ot oco[...]

37-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs How to Conf igure Networ k Security with ACLs or access-list access- list-num ber { deny | permit } pr ot ocol any an y [ prec edence pr ecedence ] [ tos tos ] [ fragmen ts ] [ log ] [ log-input ] [ time-r ange ti me-range-na me ] [...]

37-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs How to Configure Network Security with ACLs Creating Named Standard and Extende d ACLs Step 2d access-list access- list-numbe r { deny | permit } icmp sourc e source-wildcar d destination destination-wild car d [ icmp-t ype | [[ [...]

37-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs How to Conf igure Networ k Security with ACLs Using Time Ranges with ACLs Repeat the steps if you ha ve multiple items tha t you want in ef fect at dif ferent times. Step 3 {d eny | pe rmit} { sour ce [ sour ce-wildca r d ] | host [...]

37-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs How to Configure Network Security with ACLs Applying an IPv4 ACL to a Termin al Line This task restrict s incom ing and outgoing c onne ctions be tween a virtual terminal line and the ad dresses in an A CL: Applying an IPv4 ACL t[...]

37-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs How to Conf igure Networ k Security with ACLs Applying a MAC ACL to a Layer 2 Inte rface Step 3 { deny | permit } { any | host sour ce MA C address | sour ce MAC addr ess mask } { any | host destinati on MA C addr e ss | destinati [...]

37-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Monitoring and Maintaining Network Security with ACLs Monitoring and Maintaining Ne twork Securi ty with ACLs Configuration E xamples for Network Security wit h ACLs Creating a Sta ndard AC L: Example This exampl e shows ho w to [...]

37-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Configur ation Examp les for Ne twork Secu rity with ACL s Switch(config)# end Switch# show access-lists Extended IP access list 102 10 deny tcp 171.69.198.0 0.0.0.255 172.20.52.0 0.0.0.255 eq telnet 20 permit tcp any any Configuri[...]

37-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Configuration Examples for Network Security with ACLs Including C omments in A CLs: Example s In this exam ple, the workstatio n that belongs to Jones is allowe d access, and the workstat io n that belongs to Smith is not allo we[...]

37-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Configur ation Examp les for Ne twork Secu rity with ACL s Router A CLs function as follo ws: • The hardwa re cont rols perm it and deny acti ons of stand ard an d extended A CLs (inpu t and outpu t) for secu rity access co ntrol[...]

37-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Configuration Examples for Network Security with ACLs Switch# show access-lists Standard IP access list 6 permit 172.20.128.64, wildcard bits 0.0.0.31 Switch(config)# interface gigabitethernet1/1 Switch(config-if)# ip access-grou[...]

37-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Configur ation Examp les for Ne twork Secu rity with ACL s In this example , the network i s a Class B networ k with the a ddress 128. 88.0.0 , and the ma il host ad dress is 128.8 8.1.2. The established keyw ord is use d only f or[...]

37-25 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Configuration Examples for Network Security with ACLs Switch(config-if)# ip access-group strict in Creating Commen ted IP ACL Entries: E xamples In this ex ample of a number ed A CL, the work station t hat belongs to Jon es is a [...]

37-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Configur ation Examp les for Ne twork Secu rity with ACL s <output truncated> 00:09:34:%SEC-6-IPACCESSLOGS:list stan1 permitted 0.0.0.0 1 packet 00:09:59:%SEC-6-IPACCESSLOGS:list stan1 denied 10.1.1.15 1 packet 00:10:11:%SEC-[...]

37-27 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Rela ted T opic Document T itle Cisc o IE 2000 com mands Cis[...]

37-28 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Addition al Referenc es Technica l Assista nce Description Link The Ci sco T echni cal Support websit e conta ins thousa nds of pag es of search ab le technic al cont ent, includ ing links to produ cts, te chnolog ies, so lutions, [...]

CH A P T E R 38-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 38 Configuring Standard QoS Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use [...]

38-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Information About Standard QoS This chapte r describes ho w to conf igure quality of service (QoS) b y using automat ic QoS (auto-QoS) comman ds or by using st andard Q oS comma nds on th e switch. With QoS,[...]

38-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Note IPv6 port-based trust with the dual IPv4 and IPv6 Switch Database Man agement (SDM) tem plates is supported on this switch. Y ou must reload the switch with the dual IPv4 and IPv 6 templates for switches runni[...]

38-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Standard QoS Mo del T o im plement QoS, the switch must distingu ish packets o r flow from o ne anot her (cl assify), assign a label t o indicate the g i ven quali ty of ser vice as the p ackets m ov e throu[...]

38-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Figur e 38-2 Standar d QoS Model Standard QoS Co nfig uration Guidelines QoS AC L These are the gui delines for conf iguring QoS with access control lists (A CLs): • It is not pos sible to mat ch IP fragm ent s a[...]

38-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS – In a hi erarc hical p olicy ma p attac hed to an SVI , you can onl y configur e an individual pol icer at the inte rface l e vel on a physic al port to specif y the bandwi dth limi ts for th e traffic on[...]

38-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Default Ingress Queue Setting s Ta b l e 38- 1 shows the def ault ingress queue sett ings when QoS is enabled. Ta b l e 38- 2 shows the def ault CoS input queue threshold map when QoS is enable d. Ta b l e 38- 3 sh[...]

38-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Ta b l e 38- 5 shows the default CoS o utput queue thr eshold map w hen QoS is ena bled. Ta b l e 38- 6 shows the default D SCP outpu t qu eue thresho ld map when QoS is enab led. Default Mapping Table Set t[...]

38-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Ta b l e 38- 8 sho ws the IP-pr ecedence- to-DSCP map to map IP preced ence v alues in incoming pa ckets to a DSCP v alue that Q oS uses inte r nally to represen t the p riority of the traf fic . Ta b l e 38- 9 sho[...]

38-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS The default DSCP-to-D SCP-muta tion map is a null map, whic h maps an inc oming DSC P value to the same DSCP value. The defa ult policed-D SCP map is a null map, which maps an incoming DSCP v alue to the sa[...]

38-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS • Perform t he cl assification ba sed on a c onfigured IP st andard or an exten ded ACL, which exami nes various fields in the IP head er . If no ACL is configured, th e packet i s assigned 0 as the DSCP and CoS[...]

38-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Figur e 38-3 Classification Flo wc hart 868 3 4 Gener a te the D S CP b as ed on IP precedence in p a ck et. U s e the IP-precedence-to-D S CP m a p. U s e the D S CP v a lue to gener a te the Qo S l a bel.[...]

38-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Classification Based on QoS ACLs Y ou ca n use IP standa rd, IP extende d, or La yer 2 M A C A CLs to define a group of packets with the sa me char act eris tics ( class ). In the QoS conte xt, the permit and den [...]

38-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS The po licy map can cont ain the police and polic e aggregate policy- map cla ss configurati on com mand s, which def ine the polic er , the bandwidth limitatio ns of the t r af f ic, and the action to tak [...]

38-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Policing on Physical Ports In policy m aps o n physic al por ts, y ou can create these types of pol icers: • Indi vidual—QoS applies the bandwid th limits spe cif ied in the polic er separately to eac h matche[...]

38-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Figur e 38-4 P olicing and Mar king Fl ow chart o n Physi c al P orts Policing on SVIs Note Be fore configuring a hi erarc hical pol icy map with ind i vidua l policers on an SVI, you must en able VLAN-base[...]

38-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS When co nf iguring polic ing on an SVI, yo u can cr eate and conf igure a hie rarchical p olic y map with the se two le vels: • VLAN le ve l—Create this primary le vel by conf iguring class maps and classes th[...]

38-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Mapping T ables During Qo S processing, the switc h represe nts the pri ority of a ll traff ic (inclu ding non- IP traff ic) with a n QoS label base d on the DSCP or CoS value from the classification st age[...]

38-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Queuein g and S chedulin g Overview The swi tch has queue s at specif ic points to help pre vent con g estion as sho wn in Figure 38-6 . Figur e 38-6 Ingr ess and Egr ess Queue Locat ion Because the tota l inboun [...]

38-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Figur e 38-7 WTD and Queue Opera tion For more infor mation, see th e “Mappi ng DSCP or CoS V alues to an Ingr ess Queue and Setti ng WTD Threshol ds” se ction on pa ge 38-49 , the “ Allocati ng Buffe[...]

38-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Queueing and Scheduling on Ingre ss Queues Figure 38-8 shows the queuei ng and sched uling flowchart for i ngres s ports. Figur e 38-8 Queuein g and Schedulin g Flowc hart f or Ingr ess P orts Note SRR services th[...]

38-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Y ou assi gn each packet tha t flows throug h the sw itch to a queu e and t o a thre shold. Spec ifically , you m ap DSCP or CoS values to an ingress que ue and map DSCP or CoS values to a threshol d ID. Y [...]

38-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Figur e 38-9 Queuein g and Schedulin g Flo wc hart f or Egr ess P orts Each p ort supp orts four egress qu eues, o ne o f wh ich (qu eue 1) can be th e egress expe dite qu eue. These queues a re configured by a qu[...]

38-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS b uf fers) or not empty (free b uffer s). If the queu e is not o ver- limit, the switc h can allocate bu f fer space from t he r eserved poo l or f rom th e co mmon pool (if it is n ot emp ty). I f th ere a[...]

38-25 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS modify it . Y ou m ap a port to queue-set by using the queue-set qset-id interf ace conf iguration command. Modify the queu e-set conf iguration to change the WTD threshol d percentages. F o r more informatio n ab[...]

38-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Classification Using Port Trust States Trust State on Ports within the Qo S Domain Pa ckets en tering a QoS do main are cla ssif ied at the edge of the QoS domain . When the pack ets are classif ied at the [...]

38-27 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS For most Cisco IP phon e configurat ions, th e traffi c sent fr om the telep hone to the swit ch should be trusted to ensure th at voice traf fic is properly prioritiz ed ov er other types of traf fic in the netwo[...]

38-28 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Figur e 38-12 DSCP -T r usted Stat e on a P ort Bor der ing Anoth e r QoS Dom ain QoS Policies Classifying, Policing, and Marking Traff ic on Physical Ports by Using Policy Maps Y ou ca n configure a non hi[...]

38-29 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS • Y ou ca n configur e a separat e second -level policy map for ea ch cl ass defined fo r the port . The second -lev el policy map specifi es the p olice action to tak e for each traff ic class. F or inform atio[...]

38-30 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS • When VLAN -based QoS is enabled, t he switch suppo rts VLA N-based fe ature s, such as the VL AN map. • Y ou ca n configure a hie rarch ical pol icy map only on the primary VLAN of a pri vate VLAN. DS[...]

38-31 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Egress Qu eue Ch aracter istics Depend ing on the co mplexity of yo ur networ k and your Qo S solution, you mig ht need to pe rform al l of the tasks in the ne xt sections. Y ou will need to make decisions about t[...]

38-32 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS How to Configure Stan dard QoS Enabling Qo S Globally Enabling V LAN-Based QoS on Physic al Ports By default, VLAN-base d QoS is di sabled o n all physic al switch ports. T he swit ch applie s QoS, inc ludin[...]

38-33 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Configuring the Trust State on Po rts Within the QoS Domai n Configuring the CoS Val ue for an Interface QoS assigns the CoS v alue specifi ed with the mls qos cos interfac e conf iguratio n command to unta gged [...]

38-34 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Configuring a Truste d Boundary to Ensure Port Securit y Enabling DSCP Transparency Mode T o conf igure the switc h to modify the DSCP v alue based on the trust se tting or on an A CL by disa bling DSCP tran[...]

38-35 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS If you disab le QoS by usi ng th e no mls qos global con figuration co mmand , the CoS and DSCP values are not c hanged (the default Q oS setting) . If you ent er th e no m ls q os rew rit e ip ds cp global con f[...]

38-36 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Configuring a QoS Policy Conf iguring a QoS polic y typically requi res classifying traf fic into cla sses, conf iguring policie s applied to those traf fic classes, and attaching policies to ports. These se[...]

38-37 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Creating IP Exte nded ACLs Creating a Layer 2 MAC ACL for Non-IP Traffic Command Purpose Step 1 conf igur e terminal Ent ers g lobal c onfiguration mode. Step 2 access-list access-list- number { deny | permit } p[...]

38-38 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Creating Class Map s Y ou use the class- map global con figurat ion comm and to name an d to isola te a specifi c traf fic flo w (or class) f rom all o ther traf fic. The class map def ines the crite r ia to[...]

38-39 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Command Purpose Step 1 conf igur e terminal Ent ers g lobal c onfiguration mode. Step 2 access-list access-list- number { deny | permit } sour ce [ so ur ce-wi ldcar d ] or access-list access-list- number { deny [...]

38-40 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Creating Nonhiera rchical Policy Maps Command Purpose Step 1 conf igur e terminal Ent ers g lobal c onfiguration mode. Step 2 class-map [ match-all | mat ch-any ] class-m ap-name Creates a class map, and e n[...]

38-41 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Step 5 trust [ cos | dscp | ip-pr ecedence ] Configures the trust state, whi ch QoS uses to gene rate a CoS-ba sed or DSCP-based QoS lab el. Note This co mmand is mutuall y exclusi ve with the set command withi n[...]

38-42 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Creating Hi erarchical Polic y Maps Step 8 end Return s to global co nfiguration mo de. Step 9 interface interface-id Sp ecif ies the port to attach to the polic y map, and enters inte rface configuration mo[...]

38-43 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Step 5 class-map [ match-all | mat ch-any ] class-m ap-name Crea tes a n inte rface-l evel class ma p, and en ters class -ma p configuration mode. By defau lt, no class maps a re defined. • (Opt ional) ma tch-a[...]

38-44 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Step 10 police rate-bps burst-byte [ exce ed-action { drop | policed-dscp- transmit }] Def ines an indi vidual police r for th e cla ssif ied traf fic. By defau lt, no pol icer i s defined. For info rmati on[...]

38-45 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Step 14 tr ust [ co s | dscp | ip-pr ecedence ] Confi g ures the t rust state, whi ch QoS uses to gener ate a CoS-based or DSCP-based QoS lab el. Note This co mmand is mutuall y exclusi ve with the set command wi[...]

38-46 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Creating Agg regate Policers By using an aggre gate poli cer , you can create a police r that is shared by multip le traf fic classes within the sa me pol icy map. Howev er, you ca nnot u se the a ggregate p[...]

38-47 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Configuring DSCP Maps These sec tions co ntain this co nfiguration info rmat ion: • Conf iguring the CoS-to-DSCP Map, page 38 -47 (opt iona l) • Configuring the I P-Prece dence -to-DS CP Map, page 38-48 (o pt[...]

38-48 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Configuring the IP-Pr ecedence-to-DSCP Map Configuring the Policed- DSCP Map Configuring the DSCP-to- CoS Map Command Purpose Step 1 conf igur e terminal Enters glob al con figuration mo de. Step 2 mls qos m[...]

38-49 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Configuring the DSCP-to- DSCP-Muta tion Map Configuring In gress Qu eue Charac teristics These sec tions co ntain this co nfiguration info rmat ion: • Mapping D SCP or CoS V a lues to an In gress Queu e and Set[...]

38-50 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Allocating Buffer Space Betw een the Ingress Queues Y ou d efine the ratio (alloc ate the amount of space) w ith w hich to divide the ingress buf fers be twee n the two queue s. The buffer and the bandw idth[...]

38-51 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Allocating Bandwidth Between the Ingress Que ues Y ou need t o specify how much of the av ai lable ban dwidt h is allocat ed betw een the ingr ess queue s. The ratio of the weights is the ratio of the fr equency [...]

38-52 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Configuring E gress Queu e Characteristic s These sec tions co ntain this co nfiguration info rmat ion: • Allo catin g Buffer Spac e to an d Sett ing WTD Th res holds for an Egre ss Q ueue- Set, page 38- 5[...]

38-53 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Mapping DSCP or CoS Values to an Egress Queue and to a Threshold ID Y ou can pr ioritize traf fic b y placing p ackets with particular DSCPs or costs of se rvice i nto certa in queues and ad justing th e queue th[...]

38-54 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Configuring SRR Sh aped Weights on Egress Queues Y ou can spe cify how much of the av ai lable ba ndwidt h is alloc ated to each queue. The ratio of the weights is the r atio of fre quency in w hich the SRR [...]

38-55 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Configuring SRR Sh ared Weights on Egress Queues In shar ed mod e, the queues share th e band width am ong th em ac cordi ng to the configured weight s. The bandwidth is gu aranteed at this le vel b ut not limite[...]

38-56 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Monito ring and Maint aining Sta ndard QoS Configuring the Egress Expedite Que ue Y ou can ensur e that c ertain p ackets have priority over all othe rs by queu ing them in the egress expedite queue. SRR services this queue until i t is em[...]

38-57 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Confi gurat ion Exam ples for Standard QoS Configuration E xamples for Standard QoS Configuring th e SRR S chedu ler: Example This example shows ho w to configur e the wei ght rati o of the SRR sched ule r running o n an egress por t. Four queu[...]

38-58 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Configur ation Examp les for Standa rd QoS Configuring DS CP-Truste d State on a Port: Examp le This exam ple sh ows how to configure a por t to the DSCP-tru sted state and to modi fy th e DSCP-t o-DSC P-mut ation map (nam ed gi0/2-mutatio[...]

38-59 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Confi gurat ion Exam ples for Standard QoS This example shows how to creat e a clas s map ca lled class3 , which match es incoming traf fic with IP-p recede nce va lues of 5, 6, and 7: Switch(config)# class-map class3 Switch(config-cmap)# match[...]

38-60 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Configur ation Examp les for Standa rd QoS Creating an Ag gregate Polic er: Exampl e This exa m ple sho ws how to create an aggre gate policer and attach it to multiple cla sses within a polic y map. In the c onfiguratio n, the IP ACLs per[...]

38-61 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Confi gurat ion Exam ples for Standard QoS Configur ing DSCP Maps : Examp les This exam ple sh ows how to modify and d isplay the I P-pre cedenc e-to-D SCP map: Switch(config)# mls qos map ip-prec-dscp 10 15 20 25 30 35 40 45 Switch(config)# en[...]

38-62 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Configur ation Examp les for Standa rd QoS This e xample shows h ow to define the DSCP-to-D SCP mutation map. All the entries that are not expli citly conf igured are not modif ied (remain s as specif ied in the nu ll map): Switch(config)#[...]

38-63 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Confi gurat ion Exam ples for Standard QoS This e xample shows h ow to assign the ingress bandwidths to the queues. Queue 1 is the priority queue with 10 percen t of the bandwidth al located to it. Th e bandwidth rat ios allocate d to queues 1 [...]

38-64 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Addition al Referenc es Switch(config-ext-macl)# permit 0001.0000.0001 0.0.0 0002.0000.0001 0.0.0 Switch(config-ext-macl)# permit 0001.0000.0002 0.0.0 0002.0000.0002 0.0.0 xns-idp ! (Note: all other access implicitly denied) Additional Ref[...]

38-65 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Additional References Technica l Assista nce Description Link The Cisco T echnical Supp ort webs ite conta ins thousa nds of pag es of search ab le technic al cont ent, includ ing links to produ cts, te chnolog ies, so lutions, technica l tips,[...]

38-66 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Addition al Referenc es[...]

CH A P T E R 39-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 39 Configuring Auto-QoS Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use Ci s[...]

39-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS Informat ion About A uto-QoS • Auto-Qo S configure s the sw itch f or V oIP with C isco IP phone s on n onrouted and r outed ports . Auto-QoS al so conf igures the switch for V oIP with dev ices running the Cisco SoftPh one application . • Whe[...]

39-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 9 Configuring Au to-QoS Information About Auto-QoS • Configures egress queues Generated Auto-QoS Configuration By def ault, auto -QoS is di sabled on all ports. When au to-QoS is enabled , it use s the ing ress pa cket label to c ategorize traf fic, to assign packet labe[...]

39-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS Informat ion About A uto-QoS When you en able the auto -QoS fea ture on the f irst port, the se automat ic actions occu r: • QoS is glob ally en abled ( mls qos g lobal c onfiguration c omma nd), a nd othe r globa l con figuration comm ands ar e[...]

39-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 9 Configuring Au to-QoS Information About Auto-QoS The switch automatica lly maps CoS v alues to an eg ress queue and to a threshold ID. Switch(config)# no mls qos srr-queue output cos-map Switch(config)# mls qos srr-queue output cos-map queue 1 threshold 3 5 Switch(config[...]

39-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS Informat ion About A uto-QoS The switch automat ically sets up the ingress queu es, with que ue 2 as the p riori ty qu eue and queue 1 in sh ared mod e. The switc h also configures the ba ndwid th and buf fer siz e fo r the ingress que ues. Switch[...]

39-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 9 Configuring Au to-QoS Information About Auto-QoS Effects of Auto-QoS on the Configuration When auto- QoS is enabled, th e au to q os v oip interface co nfiguration c omman d and the ge nerate d configurati on are add ed to the ru nning configuratio n. The swi tch applie [...]

39-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS How to Conf igure Auto-QoS comman ds ar e suc cessful ly app lied, a ny user-enter ed configu ration t hat was not ove rridd en rem ains in the ru nning c onfigurat ion. A ny user-entered configu ration t hat was overridden can b e ret riev ed by [...]

39-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 9 Configuring Au to-QoS Monitoring and Maintaining Auto-QoS Configuring QoS to Prioritize VoIP Traffic This task e x plains ho w to config ure the switch at the edg e of the QoS domain to prio ritize the V oIP traf fic ov er all other traf fic: Monitoring and Maintaining A[...]

39-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS Configur ation Examp les for Auto -QoS Configuration E xamples for Auto-QoS Auto-QoS Ne twork: E xample This is a n illustrated e xample that sho ws you ho w to implement auto- QoS in a network i n which the V oIP traf fic is prioritiz ed ov er a[...]

39-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 9 Configuring Au to-QoS Additional References Enabling Au to-QoS VOIP Trust: Example This e xample sho ws ho w to enable auto-QoS and to trust the QoS labels recei ved in incoming pack ets when the swi tch or rou ter conn ecte d to a port is a trus ted device: Switch(conf[...]

39-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS Technica l Assista nce Description Link The Ci sco T echni cal Support websit e conta ins thousa nds of pag es of search ab le technic al cont ent, includ ing links to produ cts, te chnolog ies, so lutions, technica l tips, a nd tools . Re gister[...]

CH A P T E R 40-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 40 Configuring EtherChannels Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release. Use[...]

40-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Informat ion About Conf iguring EtherChanne ls EtherChann els An EtherCh annel c onsists of individual Fast Ethernet or Giga bit Ether net links bundled int o a single logical lin k as shown in Figure 40 -1 . Figur e 40-1 T ypical EtherChann[...]

40-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Infor m ation About Configuri ng EtherChann els Port-Chan nel Interfaces When you cre ate an E therCha nnel , a po rt-cha nnel logi cal i nterfa ce is inv o lved: • W ith La yer 2 por ts, use the channel - group interfa ce configurati on comm[...]

40-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Informat ion About Conf iguring EtherChanne ls Port Aggreg ation Pro tocol The Port Aggr egation Protocol (P AgP) is a Cisco -propri etary prot ocol that ca n be run only on Cisc o switches and on tho se switches lice nsed by vendors to supp[...]

40-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Infor m ation About Configuri ng EtherChann els PAgP Learn Method and Priority Network devices are classi fied as P AgP physical lea rners o r agg regate-por t lear ners. A device i s a physical learner if it learns add resses by physical ports[...]

40-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Informat ion About Conf iguring EtherChanne ls PAgP Interaction with Other Features The Dyna mic Trunking Protocol (DT P) and the Ci sco Discovery Protoco l (CDP) send and receive packets over the physica l ports in the Et herChann el. T run[...]

40-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Infor m ation About Configuri ng EtherChann els LACP Hot-Stand by Ports When enabled , LA CP tries to conf igure the maximum number of LA CP- compatible ports in a channe l, up to a maxi mum of 16 ports. O nly eight LACP links can be a ctiv e a[...]

40-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Informat ion About Conf iguring EtherChanne ls EtherChann el On Mode EtherC hannel on mode can be used to manu ally c onf igure an Ethe rCha nnel. Th e on mode forc es a port to joi n an Et herChanne l without n eg otiations . The on mode ca[...]

40-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Infor m ation About Configuri ng EtherChann els W i th sourc e-and-de stination IP a ddress-ba sed f orwarding, packets are sent to an EtherC hannel a nd distributed ac ross the Et herCha nnel po rts, base d on bot h the sou rce and destinati o[...]

40-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Informat ion About Conf iguring EtherChanne ls Default EtherChannel Settings EtherChann el Configuratio n Guidelin es If imp roper ly con figured, so me E therCha nnel ports are a utomati cally disa bled t o av oid n etwork loops and othe r[...]

40-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels How to Conf igure EtherCh annels • Do not configure a Swit ched Po rt Ana lyzer (SP AN ) destin ation port as par t of a n Ethe rCha nnel. • Do not co nf igure a secure po rt as part of an Ether Channel or the re vers e. • Do not conf ig[...]

40-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels How to Conf igure Ether Channels This requir ed task ex plains ho w to config ure a Layer 2 Ethernet p ort to a L ayer 2 EtherCha nnel. Command Purpose Step 1 conf igur e terminal Ent ers glob al configurat ion mode . Step 2 interface inte [...]

40-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels How to Conf igure EtherCh annels Step 4 channel- group c hann el-gr oup- number mo de { auto [ non- silent ] | desirab le [ no n-silent ] | on } | { active | passive } Assigns the port to a channel group, and specifie s the P AgP or the LA CP [...]

40-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels How to Conf igure Ether Channels Configurin g EtherChan nel Lo ad Balan cing This task is optional. Configuring the PAgP Le arn Meth od and Priority This task is optional. Command Purpose Step 1 conf igur e terminal Ent ers glob al configur[...]

40-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Monitor ing and Ma intainin g EtherChannels on the IE 2000 Sw itch Configuring the LACP Hot-Standb y Ports This task is optional. Monitoring and Main taining EtherChannels on the IE 2000 Switch Step 4 pagp port-pr iority priority Assigns a pri[...]

40-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Configur ation Examp les for Confi guring Ethe rChannels Configuration E xamples for Configuring EtherChannels Configurin g EtherChan nels: E xamples This example shows ho w to con figure an Ether Chann el and assign two por ts as static-ac[...]

40-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Additional References MIBs RFCs Technica l Assista nce MIB s MIB s Link — T o loc ate and download MIBs using Cisco IOS XR software, use the Cisco M IB Locat or found at the following URL an d choose a platfo rm unde r the Cisco Ac cess Prod[...]

40-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Addition al Referenc es[...]

CH A P T E R 41-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 41 Configuring Static IP Unicas t Routing This chap ter describ es ho w to conf igure IP V ersion 4 (IPv4) stat ic IP unicast routing on the swit ch. Static routing i s suppor ted only o n switche d virtua l interface s (SVIs) a nd not on p hysical i nterfaces. T he swi[...]

41-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 41 Configuring Static IP Unicast Routing IP Routing IP Routing In some network en vi ronmen ts, VLAN s are assoc iated wit h individual netwo rks or subnet works. In an IP network, each subnetwork is mapped to an individua l VLAN. Con figuring VLANs he lps control the size [...]

41-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 41 Configur ing Static IP Unic ast Routing How to Configure Static IP Unicast Routing How to Configure Static IP Unicast Routing Steps for Config uring Routing In these p rocedures, t h e specif ied inte rface must b e a switch virt u al interf ace (SVI )—a VLAN int erface[...]

41-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 41 Configuring Static IP Unicast Routing Configur ing Static Un icast Routes This t ask explai ns how to assi gn an IP addr ess a nd a network m ask to an SVI Configuring St atic Unicast Routes Static uni cast routes are use r-def ined route s that cause packe ts moving bet[...]

41-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 41 Configur ing Static IP Unic ast Routing Additional References for Configuring IP Unicast Routing Additional Ref erences for Configuring IP Unicast Routing The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIB[...]

41-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 41 Configuring Static IP Unicast Routing Addition al Referenc es for Configur ing IP Uni cast Routing RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature. ?[...]

CH A P T E R 42-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 42 Configuring IPv6 Host Functions Note T o use IPv6 host fun ctions, the switch mus t be runn ing the LAN Base imag e. This c hapter d escrib es how to configure IPv6 host fun ction s on the switc h. Finding F eature Information Y our softw ar e release may not support[...]

42-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Informat ion About Configuri ng IPv6 Host Fu nctions For informat ion about IPv6 and othe r featu res in this cha pter • See the Cisco IO S IPv6 Con figuration Library at th is UR L: http://www .cisco.com /en/US//docs/i o s-xml/ios/i[...]

42-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions Information About Configuring IPv6 Host Functions • SNMP and Sysl og Over IPv6, page 42-5 • HTTP over IPv6, pa ge 42-6 Support on the switch incl udes expand ed a ddress c apabi lity , head er f orma t simplifica tion, i mproved suppo[...]

42-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Informat ion About Configuri ng IPv6 Host Fu nctions Neighbor disco very throttling ensures th at the switch CPU is not unnecessarily b urdened while it is in the pr ocess of obt ainin g the next hop f orwardi ng info rmat ion t o rou [...]

42-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions Information About Configuring IPv6 Host Functions Figure 42-1 sh ows a router fo rwardin g bot h IPv4 and IPv6 t raff ic th rough th e sam e inter face, base d on the I P pack et and desti n ation addresses. Figur e 42-1 Dual IPv4 a nd IP[...]

42-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Informat ion About Configuri ng IPv6 Host Fu nctions • Configuration of IPv 6 hosts as trap receiv ers For support over IPv6, SNMP modi f ies the existing IP transport ma pping to simu ltaneous ly support IPv4 and IPv6 . The se SNM P[...]

42-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions How to Configure IPv6 Hosting How to Configure IPv6 Hosting Configurin g IPv6 Add ressing a nd Enablin g IPv6 Host This se ction de scribe s how to assi gn IPv6 a ddresses to in dividual Laye r 3 int erfaces and t o globa lly forwar d IPv[...]

42-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions How to Co nfig ure I Pv6 Host ing Configuring Default Router Preferenc e Rout er adv ertise ment mess ages are se nt with the def ault router pref erence (D R P) conf igured b y the ipv6 nd route r -pref erence inte rface configuration[...]

42-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions Monitoring and Maintaining IPv6 Host Information Configuring IPv6 IC MP Rate Limiting ICMP rat e limitin g is enabl ed b y def ault with a default inter va l betwee n error messages of 1 00 millisecond s and a bu cket size ( maximum numbe[...]

42-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Configur ation Examp les for IPv6 Host Functi ons Configuration E xamples for IPv6 Host Functions Enabling IP v6: Exa mple This exam ple sh ows how to enab le IPv6 with b oth a li nk-loca l add ress and a g lobal a ddress based o n th[...]

42-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions Configuration Examples for IPv6 Host Functions Displaying Show Co mmand Outp ut: Example s This i s an exampl e of t he o utput from the show ipv6 inte rface privi leg ed EXEC com mand: Switch# show ipv6 interface Vlan1 is up, line proto[...]

42-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Configur ation Examp les for IPv6 Host Functi ons 0 unknown protocol, 0 not a router 0 fragments, 0 total reassembled 0 reassembly timeouts, 0 reassembly failures Sent: 36861 generated, 0 forwarded 0 fragmented into 0 fragments, 0 fai[...]

42-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs Rela ted T opic Document T itle Cisc o IE 2000 com mands Cisco IE 2000 Sw[...]

42-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Addition al Referenc es RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature. — Description Link The Ci sco T echni[...]

CH A P T E R 43-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 43 Configuring Link State Tracking Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware releas[...]

43-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 43 Configur ing Link State Tr acking Link State Tr acking Figure 43-1 on page 43-3 sho ws a netwo rk conf igured with link s tate tracking . T o enable link stat e tracki ng, create a link s tate gr oup , and spec ify th e int erfac es tha t are assi gned to the link sta te[...]

43-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 3 Configuring Li nk State Trac king Link St ate Tr acking do wnstream por ts change s to the link -do wn state. Conne cti vit y to serv er 1 and ser ver 2 is then chan ged from lin k state group1 to link state group 2. The downstrea m ports 3 and 4 do not change state b ec[...]

43-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 43 Configur ing Link State Tr acking How to Conf igure Link State Tr acking How to Configure Link State Track ing Configuring L ink State Tracking Monitoring and Main taining Link State Tracking Configuration E xamples for Configuring Link State T racking Displaying L ink S[...]

43-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 3 Configuring Li nk State Trac king Additional References Link State Group: 1 Status: Enabled, Down Upstream Interfaces : Fa1/7(Dwn) Fa1/8(Dwn) Downstream Interfaces : Fa1/3(Dis) Fa1/4(Dis) Fa1/5(Dis) Fa1/6(Dis) Link State Group: 2 Status: Enabled, Down Upstream Interfaces[...]

43-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 43 Configur ing Link State Tr acking Addition al Referenc es MIBs RFCs Technica l Assista nce MIB s MIBs Link — T o locate a nd download M IBs using Cisco I OS XR software, use the Cisco M IB Locat or found at the following URL an d choose a platfo rm unde r the Cisco Ac [...]

CH A P T E R 44-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 44 Configuring IPv6 MLD Snooping Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.[...]

44-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping Informat ion About Conf iguring IPv6 MLD Snooping MLD is a protoco l used b y IPv6 multica st routers to di scov er the presence of mu lticast listeners ( nodes that wa nt to recei ve IPv6 multica st pack ets) on its directly attached lin ks[...]

44-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping Information About Configuring IPv6 MLD Snooping Note When the IPv6 multicast router is a Catalyst 6500 switch and you are using extended VLANs (in the range 1006 to 4096), IPv6 MLD snooping must b e en abled on t he extend ed VLA N on t he [...]

44-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping Informat ion About Conf iguring IPv6 MLD Snooping When MLD snoop ing is enabl ed, MLD rep ort suppressi on, called liste ner messa ge suppressi on, is automatically enabled. W ith report sup pression, the switch forwar ds the f irst MLDv 1 r[...]

44-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping Information About Configuring IPv6 MLD Snooping Default MLD Snooping Configuration MLD Snooping Configuration Guidelines When configur ing MLD snoop ing, c onsider the se guid elines: • Y ou can co nfigure MLD sn oopin g chara cter istics[...]

44-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping How to Conf igure IP v6 MLD Sn ooping Enabling or Disabling MLD Sn ooping By default, IPv6 M LD sno oping i s globa lly d isabled on the switch and e nabled on al l VLAN s. When MLD snoop ing is global ly disabl ed, it is also disabl ed on a[...]

44-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping How to Configure IPv6 MLD Snooping Configuring a Sta tic Multicast Group Configuring a Multi cast Router Port Note Static connections to multicast router s are supported only on switch ports. Step 3 ipv6 mld snooping vlan vla n-id (O ptiona[...]

44-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping How to Conf igure IP v6 MLD Sn ooping Enabling M LD Immediate Le ave Configur ing MLD Snoopi ng Querie s Command Purpose Step 1 conf igur e terminal Ent ers glob al con figuration mo de. Step 2 ipv6 mld snooping vlan vla n-id immediate-lea v[...]

44-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping Monitoring and Maintaining IPv6 MLD Snooping Disabling M LD Listener M essage S uppression Monitoring and Main taining IPv6 MLD Snooping Y ou can di splay ML D snooping informa tion for dy namical ly learne d and stati cally con figured rou[...]

44-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping Configur ation Examp les for Confi guring IPv6 MLD Snoop ing Configuration E xamples for Configuring IPv6 MLD Sn ooping Statically Configure an IP v6 Multicast Group: Example This e xample sho ws how to statically conf igure an IPv6 multica[...]

44-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping Confi guratio n Examples for Conf iguring IPv 6 MLD Snoop ing Switch(config)# ipv6 mld snooping last-listener-query-interval 2000 Switch(config)# exit[...]

44-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs Technica l Assista nce Rela ted T opic Document T itle Cisc o IE 2000[...]

44-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping Additional References[...]

44-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping Addition al Referenc es[...]

CH A P T E R 45-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 45 Configuring Cisco IOS IP SLAs Operations Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft wa[...]

45-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations Informatio n About Conf iguring Cisco IOS IP SLAs Oper ations Cisco IOS IP S LAs Cisco IOS IP SLAs sends data across the network to measure per formance between multiple network locations or across multi ple network pa ths. It sim[...]

45-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s Information About Configuring Cisco IOS IP SLAs Operations Cisco IOS IP S LAs to Mea sure Network Performan ce Y ou can use IP SL As t o mon itor th e pe rform ance betwe en a ny area i n the networ k—core , dist ribution, and[...]

45-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations Informatio n About Conf iguring Cisco IOS IP SLAs Oper ations the responde r acce pts the reque sts and respo nds to them . It disab les the po rt after it re sponds to the IP SLAs pack et, or wh en the speci fied time ex pire s. [...]

45-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s Information About Configuring Cisco IOS IP SLAs Operations The pe nding op tion i s an interna l state of th e opera tion that is visible throug h SNMP . The pendi ng state is also used when an op eration is a reactio n (thres h[...]

45-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations How to Conf igure Cisco IOS IP SLAs Op erations • Round-tr ip delay (average roun d-tr ip time) Because the paths for t he sendin g and rece i ving of da ta can be different (asymm etric) , you can use the per -direction data to[...]

45-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s How to Configure Cisco IOS IP SLAs Operations Configurin g the IP SLAs Respond er Befo re Yo u Begin For the IP SLAs res ponder to functi on, you mu st also configure a source device, such as a Cat alyst 375 0 or Catalyst 3560 s[...]

45-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations How to Conf igure Cisco IOS IP SLAs Op erations Step 3 udp-jitter { destination-ip-addr ess | dest inat ion-ho stn ame } des tinat ion -port [ source- ip { ip-address | hostname }] [ sour ce-port por t-numb er ] [ cont rol { ena b[...]

45-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s How to Configure Cisco IOS IP SLAs Operations Analyzing IP Service Levels by Us ing the ICMP Echo Op eration Note Th is oper ation does not requ ire the IP SLAs respo nder to be e nabled . Step 6 ip sla schedule ope ration-numbe[...]

45-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations Monito ring and Mai ntaining Cisco IP SLAs Ope rations Monitoring and Maintaining Cisco IP SLAs Operation s Step 5 exit Exits UDP jitter configuratio n mode, and re turns to global c onfi guration mod e. Step 6 ip sla schedule op[...]

45-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s Configuration Examples for Configuring Cisco IP SLAs Operations Configuration E xamples for Configuring Cisc o IP SLAs Operations Configuring an ICMP Echo IP SLAs Oper ation: Example This exampl e shows ho w to configure an IC [...]

45-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations Configur ation Examp les for Confi guring Cisc o IP SLAs Oper ations Number of statistic hours kept: 2 Number of statistic distribution buckets kept: 1 Statistic distribution interval (milliseconds): 20 History Statistics: Number[...]

45-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s Additional References Switch(config)# ip sla schedule 5 start-time now life forever Switch(config)# end Switch# show ip sla configuration 10 IP SLAs, Infrastructure Engine-II. Entry number: 10 Owner: Tag: Type of operation to p[...]

45-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations Addition al Referenc es MIBs RFCs Technica l Assista nce MIB s MIBs Link — T o locate a nd download M IBs using Cisco I OS XR software, use the Cisco M IB Locat or found at the following URL an d choose a platfo rm unde r the C[...]

CH A P T E R 46-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 46 Troubleshooting This chapter descr ibes ho w to identify and resolv e software probl ems related to the Cisco IOS software on the swi tch. D ependi ng on the nature of the pr oblem, you ca n use t he comm and- line inte rface (CL I), Device Manager , or Network Assis[...]

46-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Informat ion for Trou bleshoot ing Note If a remot e device do es not au tonegoti ate, configure t he dupl ex settings o n the t wo ports t o matc h. The speed parame ter can adjust itself e ven if the connec ted port does not aut onegotia te. SFP Module[...]

46-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng Information for Troubleshooting Layer 2 Tracerou te The Lay er 2 tra cerou te feat ure al lows the swit ch to id entif y the physic al pat h that a packet takes fr om a source device to a destin ation device. La yer 2 trace route sup ports only unicast s[...]

46-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Informat ion for Trou bleshoot ing • When multipl e dev ices are at tached to one port t h rough hubs ( for e xample, multiple CDP neighbors are de tecte d on a por t), t he Lay er 2 tracero ute fe ature is not supp orted. When more than one CDP neighb[...]

46-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng Information for Troubleshooting Use TDR to di agnose and resolve cabling pr oblems i n these situa tions: • Replacing a switch • Setting up a wirin g closet • T r oublesh ooting a connecti on betwee n two devices when a l ink cann ot be establ ishe[...]

46-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Informat ion for Trou bleshoot ing Y ou ca n configure th e switch t o not crea te the extend ed cre ashinfo file by using the no exception crashinfo gl obal conf iguration co mmand . CPU Utilization This section lists some possible symptoms that co uld [...]

46-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng How t o Troub leshoot • For complete in formation about CPU utilization and ho w to troublesh oot utiliz ation prob lems, see the T r oubleshooting Hig h CPU Utiliza tion docu ment on Cisco .com. How to Troubleshoot Recovering from Software Failures Sw[...]

46-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting How to Trouble shoot switch% ls -l image_filename.bin -rwxr-xr-x 1 bschuett eng 6365325 May 19 13:03 <insert path for lan base image> -rw-r--r-- 1 boba 3970586 Apr 21 12:00 image_name.bin Step 3 Con nect your PC w ith te rminal -emula tion so ftwar[...]

46-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng How t o Troub leshoot • Y ou ha ve ph ysical ac cess to the switc h. • At least one switch port is ena bled and is not connected to a de vice. T o delete the switch passwo rd and set a new one, f ollow these steps: Step 1 Press th e Express Setup bu [...]

46-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting How to Trouble shoot Beginning in privileged EXEC mode , use this co mman d to ping a nother device on the netwo rk from th e switch: Note Oth er pro tocol keywords are av ail able w ith the ping command , b ut the y are not support ed in this r e lease[...]

46-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng How t o Troub leshoot Note Other p rot ocol keyw ords ar e a v ailable w ith the traceroute pri vile ged EXE C command, but t h e y are n ot supported i n this releas e. This exam ple sh ows how to perfo rm a tracer oute to an IP hos t: Switch# tracerou[...]

46-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting How to Trouble shoot Enabling Debugging on a Specific Feature Cautio n Beca use de bu gging outpu t is as signed high prio rity in the CPU pr ocess , it can re nder the sys tem unusab le. For t his re ason, use debug comma nds only to trou bleshoot spe [...]

46-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng Monitoring Information Redirecting De bug a nd Erro r Mes sage Outp ut By default, the net work server sen ds the out put from debug command s and system error me ssages to the console . If you use this default, you can use a virtu al term inal conn ect[...]

46-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Troubles hooting Examp les Troubleshooting Examples show pla tform forward Command The output from the s h o w p l a t fo r m fo r w a r d pr ivileged EXEC comma nd pr ovides some usef ul inform ation a bout the forwardin g result s if a packet ent erin[...]

46-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng Troubl eshootin g Exampl es This is an exam ple of the output whe n the packet coming in on port 1 in VLA N 5 is sent to an add ress already learne d on the VL AN on ano ther por t. It shou ld be forwa rded from the po rt on which the addre ss wa s le a[...]

46-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Addition al Referenc es Output Packets: ------------------------------------------ Packet 1 Lookup Key-Used Index-Hit A-Data OutptACL 50_10010A05_0A010505-00_40000014_000A0000 01FFE 03000000 Port Vlan SrcMac DstMac Cos Dscpv Gi1/2 0007 XXXX.XXXX.0246 00[...]

46-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng Additional References RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s featur e, and suppor t for existing RFCs has not bee n modif ied b y this feature. — Description Link The Cisco T echnical Supp ort webs it[...]

46-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Addition al Referenc es[...]

A- 1 Cisco IE 2000 Switch S oftware Conf iguration Gui d e OL-25866-01 APPENDIX A Working with the Cisco IOS File System, Configuration Files, an d Software Images This ap pendix descri bes how to manip ulate the switch flash file syst em, how to copy c onfiguration files, and how to archive (upload an d download) softwar e image s to a switch. Not[...]

A- 2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith the Flash F ile System * 134086656 117346304 flash rw flash: - - opaque rw system: - - opaque rw tmpsys: 524288 518334 nvram rw nvram: - - opaque ro xmodem: - - opaque ro ymo[...]

A-3 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with the Flash File System Note When you en ter the show pl atform sdf lash privileged EX EC comma nd, the name, date, an d other fiel ds that are disp layed depe nd on the ma[...]

A- 4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith the Flash F ile System Y ou can sp ecify the file sy stem or d irectory that t h e system uses as the def ault file system by u sing the cd filesystem: pri vileged EXEC comma[...]

A-5 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with the Flash File System Changing Dir ectories and Dis playing the Working Directory Beginning in privileged EX EC mode , foll ow these s teps to c hange direct ories a nd d[...]

A- 6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith the Flash F ile System Copying Files T o c opy a file f rom a source to a dest inatio n, use the co py source-url destination- url p rivileged EXEC comm and. For the so urce [...]

A-7 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with the Flash File System Creating, Displa ying, a nd Extracting tar Files Y ou can c reate a tar f ile and write f iles into it, list t he fi les in a tar f ile, and e xtrac[...]

A- 8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith the Flash F ile System • For the TFTP , the syntax is tftp: [[ // lo cation ] / dir ectory ] / tar - file name .tar The tar -file name .tar is th e tar f ile to disp lay . [...]

A-9 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files Displaying th e Conte nts of a File T o display the conten ts of any readable f ile, including a file on a remote f ile system, use the mor e [ /ascii[...]

A-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files Use these guidelin es when crea ting a conf iguration f ile: • W e recommend th at you c onnect th rough the co nsole port f or the in itial conf igura[...]

A-11 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files Step 4 Copy the c onfiguratio n file to the app ropria te ser ver locatio n. For example , copy the file to the TFT P directo ry on t he worksta tion[...]

A-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files Step 2 V erify that the T FTP serv er is p roperly conf igured b y referring to the “Preparin g to Down load or Uploa d a Configuration Fi le By Using [...]

A-13 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files Copying C onfiguratio n Files By Using FTP Y ou can co py configuration files to or from an FTP server . The FTP prot ocol r equires a cli ent to sen[...]

A-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files Downloading a Configura tion File By Using FTP Beginn ing in pri vile ged EXEC mode, follo w these steps to dow nload a conf iguration file by using FTP:[...]

A-15 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files %SYS-5-CONFIG_NV:Non-volatile store configured from host2-config by ftp from 172.16.101.101 Uploading a Configuration File By Using FTP Beginn ing in[...]

A-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files Copying C onfiguratio n Files B y Using RCP The RCP provide s another method of downloadi ng, uplo ading, a nd copyin g configuration files betw een remo[...]

A-17 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files ip rcmd remote-username User0 If the switch IP address tr anslates to Swit ch1.compa ny .com , the .rhosts file for User0 on the RCP server shou ld c[...]

A-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files Address of remote host [255.255.255.255]? 172.16.101.101 Name of configuration file[rtr2-confg]? host2-confg Configure using host2-confg from 172.16.101.[...]

A-19 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files Clearing Con figuration Informatio n Y ou ca n clea r the configurati on inf ormati on fr om the startup configurat ion. I f you reboot the sw itch w[...]

A-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files The Cisc o IOS configuration archive, in which the configurati on files are stored and av ailable for use with the conf igure replace command, is in an y[...]

A-21 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files – The interface inte rface-id command lin e cann ot be adde d to the runn ing configura tion if no such i n terf ace is phys icall y prese nt on th[...]

A-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images Working with So ftware Images This se ction descri bes how to a rchive (download an d upl oad) sof tware image files, whic h cont ain t he system softw are, t[...]

A-23 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Note Instead of u sing the copy pri vile ged EXEC comm and or the ar chiv e tar privileged EXEC comm and, we recomm end u sing the archive downl oad-s w [...]

A-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images stacking_number: x info_end: version_suffix: xxxx version_directory:image-name image_system_type_id:0x00000000 image_name:image-nameB.bin ios_image_file_size:[...]

A-25 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Preparing to Download or Uploa d an Image File By Using TFTP Before yo u begin downloading or uplo ading an ima ge file by using TFTP , do t hese task s:[...]

A-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images The do wnload algorithm veri fies th at the image is appropria te for the switch model and that enough DRAM is prese nt, or it abor ts the proce ss and report[...]

A-27 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Uploading an Image File By Using TFTP Y ou can up load an image from the switc h to a T FTP serv er . Y ou can later do wnload this image to the switch o[...]

A-28 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images Preparing to Download or Uploa d an Image File By Using FTP Y ou can co py images files to or from an FTP server . The FTP prot ocol r equires a cli ent to se[...]

A-29 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Downloading an Image File By Using FTP Y ou can d ownload a ne w image f ile and o verwrite the cu rrent image or keep the curren t image. Beginning in p[...]

A-30 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images The do wnload algorithm veri fies th at the image is appropria te for the switch model and that enough DRAM is prese nt, or it abor ts the proce ss and report[...]

A-31 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Beginn ing in p ri vilege d EXEC m ode, follo w these steps to upload an image to an FTP se rver: The archi ve upload-sw comman d builds an imag e file o[...]

A-32 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images Note Instead of u sing the copy pri vile ged EXEC comm and or the ar chiv e tar privileged EXEC comm and, we recomm end u sing the archive downl oad-s w and a[...]

A-33 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images • When yo u upload an image to the RCP to the serv er , it must b e properly conf igured to acc ept the RCP write reque st from the use r on the switch[...]

A-34 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images The do wnload algorithm veri fies th at the image is appropria te for the switch model and that enough DRAM is prese nt, or it abor ts the proce ss and report[...]

A-35 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Beginn ing in pri vileged EXEC mode, follo w these steps to upload an image to an RCP serv er: The archiv e upload-sw pr iv ile ged EXEC comma nd bu ilds[...]

A-36 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images[...]

IN-1 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 INDEX Numerics 802.1 x Acco unting Overvi ew 13-31 A AAA dow n po licy, N AC La yer 2 I P val idatio n 1-9 abbrev iati ng comm ands 2-4 acces s-class comma nd 37-17 acces s contr ol entries See ACEs access-de nied r espons e, VM PS 17-14 access group s Layer 2 37-17 acce ssing cl[...]

Index IN-2 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 matc hing 37-5, 37-9 named, IPv4 37-7 number pe r QoS class map 38-5 port 37-2 QoS 38-13, 38-36 resequenc ing entr ies 37-7 standa rd IPv4 crea ting 37-11 matc hing cri teria 37-5 support fo r 1-7 support in h ardware 37-10 types suppo rted 37-2 unsupport ed fea tures, IPv4[...]

Inde x IN-3 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 authenti cation co mpatibility with Catal yst 6500 switch es 13-7 authenti cation failed V L AN See rest ricted VLAN authe nticat ion mana ger CLI co mmands 13-8 overvi ew 13-6 authoritativ e time source, desc ribed 7-2 author izat ion with RADIUS 12-16, 12-37 wit h TACACS[...]

Index IN-4 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 BPDU filtering describe d 22-3 support fo r 1-6 BPDU guard describe d 22-2 support fo r 1-6 bridge protoc ol data unit See BPDU broa dcast storm-co ntrol co mmand 29-9 broa dcast st orms 29-1 C cables , monit oring for uni direc tional links 33-1 cand idat e sw itc h automa[...]

Inde x IN-5 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 keystroke ed iting 2-7 wrapped l ines 2-9 erro r messag es 2-5 filtering c ommand output 2-10 getting help 2-3 history chan ging t he b uffer siz e 2-6 describe d 2-6 disabling 2-7 recal ling co mman ds 2-6 managing clust ers 6-13 no and defaul t form s of c ommand s 2-4 C[...]

Index IN-6 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 configur able lea v e timer , IGMP 28-5 configuratio n, initial default s 1-11 Express Setup 1-2 config urati on chan ges, loggi ng 35-9 config urati on confli cts, re cover ing from l ost memb er connect ivity 46-9 config urati on exam ples , network 1-14 config urati on f[...]

Inde x IN-7 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 enabling all system diagn ostics 46-12 enab ling for a sp eci fic fe at ure 46-12 redirec ting err or messa ge out put 46-13 default comma nds 2-4 default confi guration 802.1 x 13-30 auto-Q oS 39-3 DHCP 25-7 DHCP option 82 25-8 DHCP sno oping 25-8 DHCP sn oopi ng bi nding[...]

Index IN-8 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 relationship to BOOTP 4-5 rela y suppo rt 1-4 support fo r 1-4 DHCP bind ing database See DHCP snooping binding da tabase DHCP bi nding table See DHCP snooping binding da tabase DHCP option 82 circuit ID suboption 25-4 config urati on guideli nes 25-8 default confi guration[...]

Inde x IN-9 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 deleting old i mage A- 26 prep aring A-25, A-28, A-32 reasons for A-2 3 using FTP A-29 using HTTP A- 23 using RC P A-33 using T FTP A-25 usin g the devi ce mana ger o r Netw ork Assistant A-23 DRP config uring 42-8 describe d 42-4 IPv6 42-4 DSCP 1-10, 38-2 DSCP input queue[...]

Index IN- 10 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 E editing featu res ena bling and disab lin g 2-7 keystro kes us ed 2-7 wrapped l ines 2-9 ELIN l ocation 31-3 enab le pa ssword 12-3 enable secret password 12-3 enab lin g SN MP tr aps 3-9 encrypt ion, Ci pherSuite 12-24 encrypt ion f or pa ssword s 12-3, 12-27 enviro nm[...]

Inde x IN- 11 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 connect ing interfaces with 15-6 VLAN-brid ge STP 20-10 Fast Converge nce 24-3 FCS bi t error ra te ala rm config uring 3-8 defined 3-3 FCS error hysteresis threshold 3-2 features, in compatible 29-7 fiber- optic, de tecting u nidirec tional li nks 33-1 files basic cr as[...]

Index IN- 12 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 global stat us moni toring alar ms 3-2 guest VLAN a nd 802.1x 13-20 GUIs See dev ice m anag er and Networ k As sistant H hardwa re lim itatio ns an d Laye r 3 i nterf aces 15-12 help, for th e command line 2-3 hierar chical policy ma ps 38-14 config urati on guideli nes 3[...]

Inde x IN- 13 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 IGMP f ilte ring config uring 28-13 default confi guration 28-12 describe d 28-12 support fo r 1-2 IGMP gr oups configurin g filtering 28-13 setting the maximum number 28-1 IGMP he lper 1-2 IGMP Imm ediate Leave describe d 28-5 IGMP pr ofile applyi ng 28-13 config urati [...]

Index IN- 14 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 clust er access 6-3 comm and sw itc h 6-1, 6-11 discoveri ng 7-8 for IP rout ing 41-3 IPv6 42-2 standby comma nd switc h 6-11 See also IP i nforma tion ip igmp profile command 28-13 IP inform ation ass igne d manually 4-15 through DHC P-based autoco nfig uratio n 4-4 IP m[...]

Inde x IN- 15 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 steps to config ure 41-3 subnet ma sk 41-3 with SVIs 41-3 IPv4 A CLs applyi ng to inter faces 37-9, 37-17 exten ded , crea ti ng 37-6, 37-13 named 37-7, 3 7-15 stand ard, cr eating 37-11 IPv4 a nd IPv 6 dual p rotocol stacks 42-4 IPv6 addresses 42-2 address forma ts 42-2[...]

Index IN- 16 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 Leaking IG MP Repo rts 24-4 LEDs , swit ch See hardw are instal lation gu ide ligh tweight d irect ory acc ess protoc ol See LDAP line conf igurat ion mode 2-3 Link A ggrega tion C ontrol Pro tocol See E therCha nnel link fai lu re, d etecting u nidirect io nal 21-7 link [...]

Inde x IN- 17 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 crea ting 37-11 defined 37-11 for QoS clas sificat ion 38-10 magic p acket 13-24 managea bility feat ures 1-4 manage ment acce ss in-band browser session 1-5 CLI session 1-5 device ma nager 1-5 SNMP 1-5 out-of- band co nsole port co nnec tion 1-5 manageme nt addre ss TLV[...]

Index IN- 18 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 describe d 21-5 BPDU filtering describe d 22-3 BPDU guard describe d 22-2 CIST, descri bed 21-3 CIST reg ional r oot 21-3 CIST root 21-4 config urati on guideli nes 21-13 config uring link ty pe for rapi d converg en ce 21-15 MST region 21-16 neighbo r type 21-15 path cos[...]

Inde x IN- 19 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 multicast t elevision application 28-9 multicas t VLAN 28-8 Multicast VLAN Regi stration See MVR multidomain authentica tion See MDA multiple au thenticatio n 13-11 multiple au thenticatio n mode config uring 13-38 MVR and address aliasing 28-11 and IGMP v3 28-11 default[...]

Index IN- 20 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 stratum 7-2 support fo r 1-4 time services 7-2 synchroniz ing 7-2 O off mode , VTP 18-3 open1x config uring 13-50 open1x a uthen ticati on overvi ew 13-28 Open Device Net Vendors Associat io n (ODVA) 10-1 optimizing syst em resour ces 11-1 options , manage ment 1-3 out-of[...]

Inde x IN- 21 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 describe d 38-15 port ACL s defined 37-2 types of 37-2 Port Aggreg ation Pro tocol See E therCha nnel port-base d auth enticati on accoun ting 13-13 authenti cation server defined 13-2, 14-2 RADIUS server 13-2 client , define d 13-2, 14-2 config uring guest VLAN 13-42 ho[...]

Index IN- 22 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 voice VL AN describe d 13-23 PVID 13-23 VVID 13-23 wake-on- LAN, de scribe d 13-24 with ACLs and RADIUS Filter-Id attr ibu te 13-29 port-base d auth entic ation c onfigur ation proc ess 13-34 port-base d auth entication metho ds, suppor ted 13-6 port blo cking 1-2, 29-4, [...]

Inde x IN- 23 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 proxy repo rts 24-3 prun ing, V TP enab lin g in VTP domain 18-13 on a port 17-19 exam ples 18-8 overvi ew 18-7 pruning-el igible list chan ging 17-19 for VT P prun ing 18-7 PTP config uring 8-3 default confi guration 8-2 displaying conf igurati on 8-3, 8-4 PVST+ describ[...]

Index IN- 24 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 WTD , des cri bed 38-24 enab ling g loba lly 38-32 flowchar ts classification 38-12 egress q ueuein g an d schedu ling 38-23 ingress qu eueing and scheduli ng 38-21 polici ng and marki ng 38-16 implici t deny 38-13 ingress qu eues allocat ing bandwidth 38-51 allocat ing b[...]

Inde x IN- 25 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 vendor-s peci fic 12-16 config uring accoun ting 12-16, 12-37 authenti cation 12-15, 12-36 author izat ion 12-16, 12-37 communi cation , global 12-15, 12-37 comm unication , per-se rver 12-14, 12-15 multiple UDP por ts 12-14 default confi guration 12-10 definin g AAA ser[...]

Index IN- 26 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 segments 23-2 char act eris tics 23-3 SNMP traps, conf igurin g 23-12 supported i nterfaces 23-2 trigger ing VLAN load balan cing 23-6 verify ing link inte grity 23- 4 VLAN bloc king 23-14 VLAN load bala ncing 23-4 report su ppressi on, IG MP describe d 28-6 reseque ncing[...]

Inde x IN- 27 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 describe d 21-8 restar ting migr ation pr ocess 21-16 topolo gy chan ges 21-12 overvi ew 21-8 port roles describe d 21-8 synchroniz ed 21-10 proposal -agree ment handsh ake pr ocess 21-9 rapid co nverg ence describe d 21-9 edge po rts an d Port Fast 21-9 point-to-poin t [...]

Index IN- 28 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 applyi ng glo bal pa ramet er valu es 16-3 config urati on guideli nes 16-2 default confi guration 16-1 tracing 16-2 SNAP 32-1 SNMP acce ssing MIB vari ables with 36-5 agen t describe d 36-4 disabling 36-8 and IP SL As 45-2 authenti cation l evel 36-11 communi ty strings [...]

Inde x IN- 29 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 source ports 30-5 transmitted tra ffic 30-4 VLAN-based 30-6 spannin g tree and native VLAN s 17-10 Spanning T ree Pro tocol See STP SRR config uring shaped weights on e gress queue s 38-54 shared weights on egress queues 38-55 shared weights on ingress queu es 38-51 desc[...]

Index IN- 30 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 switch p riority 20-17 default confi guration 20-11 defau lt option al featur e config urat ion 22-9 designat ed port , defi ned 20-3 designated switch , define d 20-3 detectin g indirec t link failu res 22-5 disabling 20-11 EtherC hannel g uard describe d 22-7 exten ded [...]

Inde x IN- 31 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 switch ed ports 15-2 switch info rmation as signm ent 4-4 swi tchpor t backup inte rface 24-4, 24-10 switchpor t block multicast co mmand 29-11 switchp ort block uni cast co mmand 29-11 switchp ort comma nd 15-8 swit chpor t prot ected comman d 29-11 switch p riority STP[...]

Index IN- 32 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 TFTP config urati on files dow nloa ding A-1 1 prep aring the server A-11 uploadin g A-12 config uration fi les in base di rectory 4-8 config uring for auto config urati on 4-7 image fi les deleting A-26 dow nloa ding A-2 5 prep aring the server A-25 uploadin g A-27 limit[...]

Inde x IN- 33 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 trunk p orts defined 15-4, 17-3 trunks allowed-V LAN list 17-12, 17-19 load sharing setting STP path costs 17-13 using STP port priori ties 17-13 nati ve VLAN for u ntag ged traf fic 17-12, 17-20 paralle l 17-13 pruning-el igible list 17-19 to non- DTP de vice 17-9 trust[...]

Index IN- 34 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 VLAN 1, di sablin g on a trunk port 17-12 VLAN 1 minimiz a tion 17-12 vlan-assignm ent resp onse, VMPS 17-14 VLAN bloc king, REP 23-14 VLAN c onfigur ation at bootu p 17-5 saving 17-5 VLAN c onfigur ation mode 2-2 VLAN database and st artup co nfigur ation file 17-5 VLAN [...]

Inde x IN- 35 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Cisco 7 960 ph one, po rt con necti ons 19-1 config urati on guideli nes 19-3 config uring I P ph ones for data traff ic override CoS of incom ing fr ame 19-4 trust CoS pr iority of i n coming frame 19-4 configurin g ports for voice traffic in 802.1p priori ty tagged fra[...]

Index IN- 36 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 setting thresholds egress queue -sets 38-31, 38-52 ingress qu eues 38-49 support fo r 1-10, 1-11 X Xmodem prot ocol 46-7[...]