Cisco Systems SLM2008PTNA manual

Cis c o Small Busine s s S G200 S erie s 8-p or t Sm ar t Switche s ADMINISTR A TION GUIDE[...]

Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 2 Con t e n ts Chapter 1: Getting Started 8 Starting the Web-Based Swit ch Configuration Utility 8 Launching the Utility 9 Logging In 9 Logging Out 10 Quick Start Device Configuration 11 Window Navigation 12 Application Header 12 Other Resources 13 Navigation Window 14 Management Buttons 14 C[...]

Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 3 Con t e n ts Adding IPv6 Addresses 36 IPv6 Default Router Table 37 Viewing and Adding IPv6 Neighbors 38 Managing User Accounts 39 Adding a User 39 Changing a User Password 40 Deleting a User 41 Enabling Management Services 42 Configuring the Idle Session Timeout 42 Login Sessions 42 Login H[...]

Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 4 Con t e n ts Downloading an Image or Boot Code File Using TFTP 71 Downloading an Image or Boot Code File Using XMODEM 72 Rebooting the Switch 74 Pinging Hosts 74 Configuring Control Pa cket Forwarding 75 Diagnostics 76 Testing Copper Ports 77 Configuring Port Mirroring 78 CPU/Memory Utiliza[...]

Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 5 Con t e n ts Configuring VLAN Inte rface Settings 104 Changing the Interface VLAN Mode 106 Configuring VLAN Membership 108 Configuring Port to VLAN 109 Configuring Port VLAN Membership 110 Setting the Default VLAN 111 Voice and Media 112 Displaying and Adding Telephony OUI 113 Configuring O[...]

Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 6 Con t e n ts Configuring MAC Address Group Port Membership 135 Configuring Gr oup-to-Port 135 Configuring IGMP Snooping 136 Configuring MLD Snooping 138 Configuring IGMP Multica st Router Interfaces 140 Configuring MLD Multicas t Router Interfaces 141 Chapter 9: IP Configuration 142 ARP Tab[...]

Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 7 Con t e n ts Modifying Port PAE Capabilities 159 Configuring Port Authentication 160 Configuring Supplicant Port Authentication 162 Displaying Authenticated Host s 163 Chapter 11: Quality of Service 164 QoS Properties 165 Defining Queues 166 Queue Configuratio n Recommendations 167 Configur[...]

1 Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 8 Get ting St ar te d This chapter pr ovide s an intr oduction to the web-b ased switch configuration utility and include s the f ollowing topics: • Star ting the Web-B as e d Switch C onfigura tion Utilit y • Quick Star t Devic e Configuration • Window Naviga tion Star ting the W eb [...]

Get ting Star ted Star ting the W eb -Bas ed Switch Configur ation Ut ilit y Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 9 1 La unching the Utilit y T o open the web -based swit ch c onfiguration utility: STEP 1 Open a web browser . STEP 2 Enter the IP addr e ss of the switch that y ou are configuring in the addr es s bar on the br ows[...]

Get ting Star ted Star ting the W eb -Bas ed Switch Configur ation Ut ilit y Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 10 1 Select D on’t show this page on star tup to pr event the Get ting S tar te d page from being displayed each time that you logon t o the system. If y ou select this option, the Sy stem Summar y page is op ened [...]

Get ting Star ted Quick Star t Devic e Configur ation Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 11 1 Quick Star t D evic e Co nfigura tion T o simplify device configuratio n through quick na vigation, the Get ting S tar te d page provides links t o the mo st commonly-use d pages . Links on the Getting Star te d Page Categor y Link Na[...]

Get ting Star ted W indow Naviga tion Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 12 1 Window Na vigation This section de scribes the f eatur es of the web -based switch configuration utility. Applic a tion He ader The Application Header is displa yed on every page. It provides the f ollowing buttons : But tons Name De s cription The S[...]

Get ting Star ted W indow Naviga tion Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 13 1 O ther Res ourc es Y ou can use the f ollowing links on the Getting Star ted page f or additional inf ormati on and assistanc e with using your swit ch: • Suppor t —Displa ys the suppor t web page f or Cisco Small B usiness Managed Switches . •[...]

Get ting Star ted W indow Naviga tion Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 14 1 Na viga tion Window A navigation window is locat ed on the left side of each page. Click a top-level categor y t o displa y links t o re lated pages. Links that are pr ece ded by an arrow ar e subcategories that expand t o displa y the r elat ed page[...]

Get ting Star ted W indow Naviga tion Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 15 1 Select the number of table entries to displa y on each page. Indicates a mandat or y field. Add Click t o display the r elated Add page and add an entr y t o a table. Enter the inf ormation and click Apply . Click Clos e to re tu rn to t he ma in pa [...]

Get ting Star ted W indow Naviga tion Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 16 1 Cop y Sett i ng s A table typically c ontains one or more entries containing configurat ion sett ings. Instead of modifyin g each entr y individually , it is p ossib le t o modify one entr y and then copy it to multiple entries, as de scribe d below [...]

Get ting Star ted W indow Naviga tion Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 17 1 Sort b utto ns If the This table is sor table mes sage app ears below a table, each column heading is a sor t button. Click a colu mn he adi ng t o sort the r ecor ds in asce nd in g o r der , base d on the contents of the select ed column. After the[...]

2 Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 18 Viewing Sta tistic s This chapter describe s how t o displa y switch statistics . It contains the f ollowing t opics . • System Su mmar y • Interfac e Statistics • Etherlik e Statistics • 802. 1 X EAP Statistic s • IP v 6 DHCP Statistics • RAD IU S S t a ti st i cs • Logs S[...]

Viewing Statistic s Syst em Summar y Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 19 2 • System Con tact —Name of a contact pers on. Click Edit to d isp lay th e Sys tem Settin g s page and ent er this value. ( The characters ', ", %, and ? ar e not suppor ted.) • Ho stname —Name of the switch. Click Edit to d is pl ay[...]

Viewing Statistic s Syst em Summar y Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 20 2 Language Pack T able This table displays inf ormation ab out th e languages available on the swit ch. A language can be sele ct ed by the administ rator when logging into the configuration utilit y . English is the default language and it is built int[...]

Viewing Statistic s Syst em Summar y Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 21 2 • Por t — The Internet As signed Numbers Authorit y (IANA) por t number f or the ser vice. • IP Addres s — The I P add res s , if any , of a rem ote de vic e th at is co nne cted to this ser vic e on the switch. • Remote Por t — The IANA p[...]

Viewing Statistic s Inte r fac e S tati stic s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 22 2 Inter face St a tistic s Use the Int e r f a ce page to displa y statistics f or received and transmit ted packets. T o display this page, click Statu s and Statistics > Interface in the navigation window , or click Por t Statistics un de[...]

Viewing Statistic s Et he rl i ke St at ist ic s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 23 2 Etherlik e St a tistic s The system collects and r epor ts statistics on por ts and LAGs in acc or d ance with RFC2665. T o display this page, click Statu s and Statistics > Etherlik e in the navigation window . Select the interface (Po[...]

Viewing Statistic s 802 . 1 X E AP Statistics Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 24 2 802. 1 X E AP St a tistic s The switch port s can be configured t o use the IEEE 802. 1 X Extensible Authentication Pr otocol (E AP) to control network acces s (see 802. 1 X ). Y ou can us e the 802. 1 X E AP page to displa y inf ormation ab [...]

Viewing Statistic s IPv6 DHCP Statis tic s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 25 2 IP v 6 DHCP Sta tistic s The switch can be configured to allow mana gement over an IPv6 inter face, and to r ec eive its management IPv6 addres s thr ough the Dynamic Host Configuration Prot o col (DHCP v6). Se e Management Interfac e f or inf o[...]

Viewing Statistic s RAD IU S S t a ti s t i cs Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 26 2 R ADIUS St a tistic s The switch can be configured t o communicate with a RADIUS s er ver f or us er authentication. T o displa y the RA D I U S S t a t i s t i c s page, click Status and St a tistics > RAD IU S S t a ti st ics in the na [...]

Viewing Statistic s RMON Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 27 2 RMON RMON (Remote Networ king Monitoring) is an SNM P specification that enables an SNMP agent in the switch t o monitor traffic statistics over a given period and send traps to an SNMP manag er . The local S NMP agent compares actual, real-time counters against [...]

Viewing Statistic s RMON Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 28 2 • Multic ast Pack et s Rec eive d —Goo d multicast packets r e ceived on the interface sinc e the swit ch was last refr eshed. • CRC & Align Errors —CRC and Align errors that ha ve occurr ed on the interface sinc e the swit ch was last refr eshed. •[...]

Viewing Statistic s Lo gs Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 29 2 Lo gs The switch generat es mes sages to identify th e state of the syst em and to assist in diagnosing issue s that arise during swit ch operation. Mes sages might be generated in r espons e t o events , faults, or err ors occurring on the platf orm and t o cha[...]

Viewing Statistic s Lo gs Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 30 2 - Informational (6) —Inf ormational messages . - Deb u g ( 7) —Pr o vides detailed information about an event . Y ou can use the Lo g S e t t i n g s page to select the s everity levels that ar e re c o rde d i n t h e lo g . • Comp onent - The soft war e [...]

Viewing Statistic s Lo gs Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 31 2 The V ersion 1 log is the current or most recently creat ed log file, the V er sion 2 log is the next most recent , and the Ve rsion 3 log is the olde st file. When a new log file of the spe cified t ype i s cr eated, the V ersion 3 lo g is deleted and the V ers[...]

3 Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 32 Administra tion This chapter describe s how t o configure global system settings and p er f orm diagnostics . It contains the f ollowing t opics . • Configuri ng System S et tings • Management Inter face • Managing Us er Ac counts • Configuri ng the Idle Se s sion Time outs • L[...]

Admin ist ra tion Configuring Sys tem S ettings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 33 3 C onfiguring System S et tings The Sy ste m Se ttin gs page enables you t o c onfigur e inf ormation that identifie s the switch within the network . T o configur e syst em set tings: STEP 1 Click Admin ist ra tion > Syste m Set tings in[...]

Admin ist ra tion Management I n ter f ace Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 34 3 Management Inter face Swit ch management int er face enable acce ss to the web-based switch configuration utilit y fr om a management station on the net work . The swit ch suppor ts configuration of a management VLAN that s egregates the managem[...]

Admin ist ra tion Management I n ter f ace Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 35 3 STEP 3 Select one of the f ollowing options f or the IP Addr es s T ype : • DHCP — The management int er face obtains its IP v 4 address from a DHCP ser ver . DHCP is enabled by default and the swit ch r equests an IP addr es s fro m a DHCP [...]

Admin ist ra tion Management I n ter f ace Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 36 3 C onfiguring an IP v 6 Management Interfac e Use the IP v6 Inter face page to enable acces s t o the web-b ased switch configuration utilit y over IP v6. Y ou can co nfigur e the swit ch to dynamica lly learn its IP v6 addr es ses and you can co[...]

Admin ist ra tion Management I n ter f ace Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 37 3 • DA D Status — T he Duplicat e Addr es s Detection status. When you configure an IP v6 address on the switch, bef ore the swit ch actually assigns the address , it per forms neighbor discover y t o det ect if that addres s is already in use[...]

Admin ist ra tion Management I n ter f ace Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 38 3 Viewing and Adding IP v 6 Neighb ors When IP v6 management is enabled, the switch identifies IP v6-enable d devices on attache d links. The switch suppor ts the discover y of up t o 1 , 000 dynamic IPv6 neighbors and suppor ts the static configu[...]

Admin ist ra tion Managing Us er Acc ounts Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 39 3 STEP 4 Click Apply and then click Clo se . Y our changes are sav ed t o the Running Configuration. Managing Us er A cc ounts One management user is configured on the switch by def ault: • User Name : cisc o • Pas s wo rd: cisc o Y ou can use[...]

Admin ist ra tion Managing Us er Acc ounts Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 40 3 As you enter a password, the number and color of ver tical bars changes to in di ca te t h e p as s wo rd s tre ng th , as f ol lo ws : • Red— The password f ails t o meet the mi nimum comple xity requir ements. The te xt “B elow Minimu m [...]

Admin ist ra tion Managing Us er Acc ounts Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 41 3 As you enter a password, the number and color of ver tical bars changes to in di ca te t h e p as s wo rd s tre ng th , as f ol lo ws : • Red— The password f ails t o meet the mi nimum comple xity requir ements. The te xt “B elow Minimu m [...]

Admin ist ra tion Enabling Management Se r vice s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 42 3 Enabling Man agement Ser vic e s Use the Ma na g e me nt S e r vi c e s page t o enable and disable the available type s of management connections . By default , HTTP acc ess is enable d. C onfiguring the Idle S e s sion Timeout The soft [...]

Admin ist ra tion Lo gi n Hi sto r y Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 43 3 • Authentication Method —Lists the pr ot ocol us ed t o authenticat e the ses sion login. It can b e Radius, L ocal, or None. Lo gin Histor y Y ou can use the Lo g i n Hi s t o r y page t o display data on pr evious logins t o the management sof t[...]

Admin ist ra tion Ti m e S e t t i n g s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 44 3 By defa ult , the time is configured locally on the swit ch. NOTE The actual syst em time, dat e, time zone inf ormation, and daylight savings time status appears at the bot t om of the page. Specifying Clock Settings Locally T o configure the tim[...]

Admin ist ra tion Ti m e S e t t i n g s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 45 3 • USA /Europe an/Other —Select USA or Eur op ean t o ha ve the DST o ffset c o n f i g u r e d t o t h e v a l u e s u s e d i n t h o s e l o c a t i o n s . O r s e l e c t Oth e r t o configur e the set tings manually . When configuring man[...]

Admin ist ra tion Ti m e S e t t i n g s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 46 3 NOTE : If the T imezone Source - DHCP set ting is enabled and time zone informa tio n is re cei ved from t he DH CP s er ve r , th en th at i nf orm atio n wil l b e us ed to adjust inst ead of the manually configured GMT T ime Z one O ffset and A[...]

Admin ist ra tion Ti m e S e t t i n g s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 47 3 • Client Port — The logical p ort numb er t o use f or the S NTP client on the switch. The def ault is the well-known IANA por t number f or this ser vic e, 123. • Unicast Poll Inter val — The r elative rate at which the swit ch sends sync[...]

Admin ist ra tion Ti m e S e t t i n g s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 48 3 - Ser v er Kiss of De ath —SNTP ser ver has replied with a kiss of death packet, instructing the switch to st op s ending r equests to the ser ver , due t o traffic spikes or other error conditions. - Oth er — The status c ould not be determin[...]

Admin ist ra tion Ti m e S e t t i n g s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 49 3 • Por t —Specif y the UDP por t number to be specifie d in the SNTP mes sage headers. By default , the por t numbe r is the well-known IANA value of 123. • Ve r s i o n —Specif y the highest S NTP version ( 1 –4) that the ser ver suppor [...]

Admin ist ra tion Ti m e S e t t i n g s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 50 3 • Last Unic ast Attempt Time — The time of the most recent at tempt by the switch to synchr onize with an SNTP unicast s er ver . • Client Mode — The configur ed S NTP client mode (Unicast or Broadcast) . See the S ystem Time to configur e[...]

Admin ist ra tion Syst em L ogs Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 51 3 STEP 4 In the SNTP Authentication T able, click Add t o add a k ey t o the list . STEP 5 Enter the paramet ers: • Authentication K ey ID — The key number . When you define an SNTP s er ver on the syst em, you specify which ke y it uses f or authenticat[...]

Admin ist ra tion Syst em L ogs Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 52 3 C onfiguring Log S et tings Use the L og S et tings page to enable logs globally , and to define which ev ent t yp e s are lo gg e d i nto tem po ra r y m em or y ( R AM ) a nd p er si ste nt me mo r y (f l as h) . L o g mes sages in flash memor y ar e re [...]

Admin ist ra tion Syst em L ogs Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 53 3 • Informational —Device inf ormation. • Deb u g —Pr ovide s detailed inf ormation ab out an event. NOTE: When you select a severity level, any ev ents of that level or higher ar e automatically selected f or lo gging. STEP 4 Click Apply . Y our cha[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 54 3 STEP 6 Click Apply and then click Clo se . Y our changes are sav ed t o the Running Configuration. F ile Man agement Y ou can use the file management f eatur es to upgrade or backup the firmwar e, update the language files , sav e config uration changes[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 55 3 Files and File Types The f ollowing t ypes of c onfiguration and operational files ar e f ound on the switch: • Running Configuration —Paramet ers that are curr ently used by the switch t o operate. It is the only file type that is mo dified by you [...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 56 3 • Lan gua ge F il e — The dictionar y that allows the windows to be displayed in the selected language. • Flash Lo g —S Y SL O G mes sage s st ored in Flash memor y . • Operational Log —Events that ar e not sav ed to the Startup L o g. • S[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 57 3 T o upgrade or backup the firmwar e or t o up date the boot code or language file : STEP 1 Click Admin ist ra tion > Fil e M an a ge m ent > Upgrade/B ackup Firmware/ Langua ge in the na vigation window . STEP 2 Enter the paramet ers: • Tr an s [...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 58 3 WA R N I N G Ensur e that power to the swit ch r emains uninterrupt e d while downloading an im age or a boot code file to the swit ch. If a p ower failur e occurs while downloading a file, the file contents in persistent memor y are lost . If a power o[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 59 3 STEP 4 Enter the f ollowing paramet ers: • TFTP S er ver ( TF TP only)—Specify the IP v 4 or IPv6 address of the TF TP ser ver . Or spe cify the ser ver name if DNS is enabled in the IP configuration (see Domain Name Syst em ). • Sou rce Fi le N a[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 60 3 STEP 4 Enter the paramet ers: • TFTP S er ver ( TF TP only)—Specify the IP address of the TF TP ser ver . Or speci fy the ser ver ’ s domain name if DNS i s enabled in t he IP configuratio n (see Domain Name Syst em ). • De stination File Name ([...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 61 3 F or HT TP backups , you ar e pr ompted t o browse to a location to sa ve the file. A pr ogress b ar indicat es the status of the file transf er . D elete Configuration The Delete Con figuration page enables you t o delet e the Star tup configuration or[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 62 3 • Running Configuration —Curre nt configuration, including any changes applied in the current management ses sion. • Star tup C onfigura tion —Configuration file t ype use d when the switch last booted. This do es not include any configuration c[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 63 3 O ver view During star tup, the swit ch attempts communication wit h a DCHP ser ver to obtain its IP address and other information. If Aut o Configuration is enable d, the switch may also download a st artup c onfiguration file, d epending on the TF TP [...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 64 3 1. T h e sname field in a DHCP or BO OTP r eply . 2. The TFTP s er ver name (option 66) field in a DHCP r e ply . 3. The TFTP s er ver addr e ss (option 150) field in a DHCP reply . 4. The siaddr field of a DHCP or BOOTP r eply . If only the sname or op[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 65 3 NOTE The swit ch r equires the boot file name to ha ve a .cf g extension. Default Network Configuration File If Default Network C onfiguration Mode is enabled, the switch downloads the configuration file <hostname> .cfg when an y one of the f ollo[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 66 3 When the switch gets the def ault configurat ion file, the configuration is validated f or errors. If the validation is suc ces sful, then the switch copies the configuration t o the Star tup Configuration file t ype an d reboots . In this case, the def[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 67 3 Set ting DHCP Auto C onfiguration Y ou can use the DHCP Auto Configuration page to enable and disable the f eature, configure TFTP ser ver and file name settings , and view status information. When DHCP Aut o Configuration is enabled, it will be in the [...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 68 3 T o configur e DHCP Aut o C onfiguration: STEP 1 Click Admin ist ra tion > Fil e M an a ge m ent > DHCP Auto Configuration in the na vigation window . STEP 2 Enter the paramet ers: • Auto Configuration Via DHCP —Select Enable to enable this f [...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 69 3 F irmwar e Rec over y O ver HT TP The swit ch has a firmwar e r ecover y f eatur e that enables the rest oration of a valid image on the swit ch after a failed download. If the power go es down during an image download, the swit ch might not be able to [...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 70 3 NOTE: The HTTP firmware r ecover y f eatures suppor ts the following br owsers : • Fi ref o x 3.0 and later v ersions • Int ernet Explorer 6 and lat er versions A Firm ware Recover y page displays. No authentication is requir ed. The web page displa[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 71 3 D ownloading an Im age or B o ot Co de File F rom the System B o ot Prompt Y ou can download and install a new image or bo ot code file at the system boot pr ompt using the TFTP and XMODEM protocols. This proce ss may be nec ess ar y when the applicatio[...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 72 3 STEP 5 Enter the command to ha ve an IP addr es s assigned to the por t fr om a DHCP ser ver on the attache d network : CFE> ifconfig eth0 -auto When the switch receives a DHCP r eply , the IP inf ormation displays on the te rm i na l . STEP 6 Enter [...]

Admin ist ra tion F ile Management Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 73 3 STEP 3 St op the control at boot co de by pr es sing and holding < Ct r l > + C continuously as the swit ch boots up, until the following pr ompt displays: CFE> STEP 4 Enter the command t o download a sof tware image: CFE> flash uart0 fl ash[...]

Admin ist ra tion Rebooting the Switch Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 74 3 Reb o oting the Switch Use the Reb oot page r eboot the switch. T o r eboot the switch: STEP 1 Click Admin ist ra tion > Rebo ot in the na vigation window . STEP 2 Select one of the f ollowing options: • Rebo ot —Reboots the switch using the [...]

Admin ist ra tion Configuring Contr ol P acke t Forwar ding Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 75 3 STEP 3 F or an IPv4 addr e ss , ent er the f ollowing par amet ers: • IP Addres s/Host name —Enter the IP addr es s or the hostname of the station you want the swit ch to ping. • Cou nt —Specif y the number of pings t o [...]

Admin ist ra tion Diagno stics Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 76 3 • LLDP —Net work devices use the Link Layer Discover y Prot oc ol t o advertise their capabilities to other devices. See LLDP -MED f or inf ormation on configuring the LLDP f e atur e on the switch. T o configur e control pack et f or warding: STEP 1 Cl[...]

Admin ist ra tion Diagno stics Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 77 3 T esting C opp er Por ts Use the Copper Por t s page to per f orm tests on copp er cables . These physical lay er diagnostics can b e used to help dete rmine where in the cable a br eak might exi s t . The Coppe r P or ts T able lists each p or t and the f [...]

Admin ist ra tion Diagno stics Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 78 3 C onfiguring Por t Mirr oring Use the por t mirroring f eature t o s end network traffic on a p ort c opied to another por t f or analysis by a net work analyzer . A mirroring se ssion consists of a de stination prob e por t and at least one so ur ce por t [...]

Admin ist ra tion Diagno stics Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 79 3 T o configure a mirr oring s es sion: STEP 1 In the P or t Mirr oring Source Interface T able, click Add . STEP 2 Select a S ess ion ID . STEP 3 Select the Source Interface and the typ e of traffic t o be mirror ed . STEP 4 By using the T ype radio but ton,[...]

Admin ist ra tion Enabling Bon jour Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 80 3 T o clear the curr ent configuration f or a ses sion, select the s es sion and click Edit . Then select En able f or Reset S es sion field. CPU /Memor y Utilization Use the CPU /Memory Utiliz ation pa ge to mo ni tor CP U an d m em or y us a ge . T o d[...]

Admin ist ra tion LLDP - MED Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 81 3 • Cis co-sp ecific devic e des cription (c sco-sb)— This ser vic e enables clients t o discover C isco swit che s and other products deplo yed in small busines s networks . • Management user inter face s — This ser vice identi fies the management inte[...]

Admin ist ra tion LLDP - MED Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 82 3 The switch suppor ts the LLDP Media Endpoint Discover y (LLDP -MED) extensions t o the LLDP pr otocol. LLDP -MED enable s aut o-disc over y of LAN p olicies, devic e location, and other device characteristi cs , and automat e s management of P ower - over -Et[...]

Admin ist ra tion LLDP - MED Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 83 3 • Co ordina tes —Switch GPS coordinates in he xade cimal f ormat . • ELIN Addre ss — The ELIN number . • Co untr y —Countr y where the city is located. This is a t wo-charact er code as defined by ISO 3166. • Cit y —City where the street is lo[...]

Admin ist ra tion LLDP - MED Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 84 3 STEP 4 Select the A vailable TL V s that you want the por t t o include in LLDP adver tisements: • Net work Polic y — VLAN ID , the 802. 1 p clas s-of -ser vice value, and the Diff erentia ted Ser vice s Code P oint (DS CP) value. This inf ormation is use[...]

Admin ist ra tion LLDP - MED Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 85 3 LLDP -MED Por t St a tus D et ails The LLDP-MED Por t Status Details page displays the LLDP -MED configuration f or all por ts on which the f eature is enabled. T o display this page, click Admin istra tion > Disc over y - LLDP -MED > LLDP -MED Por t St[...]

Admin ist ra tion LLDP - MED Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 86 3 • Management Addres s — The management int er face IP address (see the IP v4 Inter face page or the IPv 6 In ter face page) . • Por t ID SubType — The t ype of the por t identifier . • Por t ID — The por t identifier . • Por t De s cription — [...]

Admin ist ra tion LLDP - MED Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 87 3 LLDP -MED Neighb or Information The Neigh bor Inf ormation page displays inf ormation received from other LLDP - MED -capable devices in the net work . T o display this page, click Adm ini stra tion > Disc over y - LLDP -MED > Neighbor Information in th[...]

Admin ist ra tion LLDP - MED Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 88 3 Inventory • Hard wa re Re vis ion —Swit ch har dware r evision ID . • Fir mw ar e R ev is io n —Swit ch firmwar e revision number . • Softwa r e Re vis ion —Switch soft ware r evision numb er . • Manufacturer Name —Swit ch manufacturer name. ?[...]

Admin ist ra tion Configuring DHCP Clien t V endor Options Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 89 3 • PoE Power Priorit y —Displays High, L ow , or Critical to indicat e how the por t is prioritized when there is less PoE power to deliver than r eque st ed by all powered device s. C onfiguring DHCP Client V endor Options Y [...]

4 Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 90 Por t Management This chapter describe s how t o configure swit ch por t set tings, c ombine por ts into link aggregation groups, and configure por t power f eatures . The f ollowing topics ar e included: • Configuring Por t S et tings • Link Aggregation • Con fi gu rin g P oE • [...]

Por t Management Configuring P or t Settings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 91 4 • Administrative Duplex Mode —If Aut o Ne gotiation is disabled, sele ct Half f or half-dup le x or Full f or full- duple x operation. • Admin Adve r ti semen t —If Autonegotiation is enabled, s elect the highest por t spee d and duple[...]

Por t Management Link Aggrega tion Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 92 4 Link Aggre ga tion Link Aggregation allows one or mor e full- duplex Ethernet links to be aggregat ed t ogether to f orm a Link Aggregation Gr oup (LAG) . The swit ch tr eats the LAG as if it is a single physical port , with impr oved fault t olerance a[...]

Por t Management Link Aggrega tion Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 93 4 LAGs can b e as signed memb ership in VL ANs; ho wever , individual por ts los e their individual VLAN memb erships when they bec ome LAG members . When a por t is r emoved from a LAG, it r ejoins the VLANs that it previously belong to as specifie d in [...]

Por t Management Link Aggrega tion Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 94 4 • Lo ad Ba lance Algorithm —S elect one of the options to enable the swit ch t o load-b alance outgoing pack ets among member p orts of a LAG. The switch selects one of the links in the channel f or transmitting sp ecific pack ets. The switch priori[...]

Por t Management Link Aggrega tion Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 95 4 • Admin K ey —A number that determines the dynamic L AG(s ) that the interface can join. All inter faces in a dynamic L AG must shar e the same admin key . • Por t Priorit y —A nonconfigurable priorit y as signed t o the por t . • L ACP Aggr e[...]

Por t Management Configuring P oE Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 96 4 - Long —Long LACP timeout is 3 time s the long periodic timer to transmit LACP packets. The default L ong L ACP timeout is 90 seconds . STEP 3 Click Apply and then click Clo se . Y our changes are sav ed t o the Running Configuration. C onfiguring PoE [...]

Por t Management Configuring P oE Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 97 4 • Power Management Mo de —Select how the switch prioritizes the power that it provides to multiple por ts: - Static with Port Priorit y —Static with priorit y power management . This algorithm pre-allocat es p ower based on the configur ed power li[...]

Por t Management Configuring P oE Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 98 4 C onfiguring PoE Por t Set tings Y ou can use the Por t Set tings page t o view and configure settings f or por ts acting as PSEs . T o configur e PoE settings f or a por t : STEP 1 Click Por t Management > PoE > Por t Set tings in the navigation w[...]

Por t Management Configuring P oE Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 99 4 - Dot3AF and LLDP -MED — T he maximum power that can be deliver ed by the por t is limit e d by the value in LLDP -MED TL V s received from a por t device. The value sp ecified by the device should b e in the range of 3- 16.2 wat ts. If it is not in th[...]

Por t Management Gree n Ethe rnet Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 100 4 • Invalid Signa ture Counter —Number of times an in valid signature was r ece ived. Signatur e s ar e the means by which the powered device identifies itself to the PSE . A signatur e is generat ed during p ower ed device detection, classification, [...]

Por t Management Gree n Ethe rnet Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 101 4 T o configure global Green Ethernet pr oper ties : STEP 1 Click Port Management > Green Ethernet > Proper tie s in the navigation windo w . By default , Energy Detect mode is enabled globally and on all por ts . STEP 2 If not already enabled, sele[...]

Por t Management Gree n Ethe rnet Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 102 4 - Link up — There is activity on the link . - Admin Dow n —Energy det ect mode is administr ativ ely disabled. STEP 2 Select the p or t t o configure and click Edit . STEP 3 Select Energy D etect t o administratively enable Energy D et ect on the po[...]

5 Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 103 VL AN Man agement This chapter describe s how t o configure virtual L ANs. It includes the following t opic s: • Creating VL ANs • Configuring VL AN In ter face S ettings • Configuri ng VL AN Memb ership • Configuri ng Port V L AN Membersh ip • Set ting the D efault VL AN • [...]

VL AN Management Crea ting VL ANs Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 104 5 Creating VL ANs The Create VL AN page enables you to define and configur e VLANs on the network . T o display this page VL AN Management > Cr eate VL AN in the na vigation window . The VL AN T a ble displays the VLAN ID , name, if one exists, a nd ty[...]

VL AN Management Configuring VL AN In ter f ace S e ttings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 105 5 T o configure VLAN interface s ettings : STEP 1 Select the por t or L AG t o configure and click Edit . STEP 2 Configure the f ollowing set tings f o r the selected por t or L AG: • Interfac e VL AN Mode —S elect an option t[...]

VL AN Management Configuring VL AN In ter f ace S e ttings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 106 5 • Fra m e T yp e —Spe cifies the frame type ac cepted on the por t: - Admit Untagged Only —Only untagged frames are accepted on the por t . T agged frames ar e discarded. - Admit T agged Only — Only tagged frames are acc[...]

VL AN Management Configuring VL AN In ter f ace S e ttings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 107 5 Changing from Trunk Port to Access Port If the original trunk por t has an untagg ed VLAN memb er on the por t , the po rt is r emoved from all its VLANs ex cept the untagged VL AN on the por t . The PVID is set to the untagged [...]

VL AN Management Configuring VL AN Memb ership Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 108 5 • If an Acces s por t was a member of the deleted VLAN, the Acces s por t bec omes a member of the default VLAN and its PVID is changed to the default VLAN. • If a General por t was configured t o use the VL AN ID as its PVID , the Gene[...]

VL AN Management Configuring VL AN Memb ership Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 109 5 C onfiguring Por t to VL AN Use the Por t to V L AN page t o : • Configure por ts as members of a selected VL AN. • Specif y that when a port receives packets fr om the selected VLAN, the packets ar e tagged with the VLAN ID upon f or w[...]

VL AN Management Configuring VL AN Memb ership Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 110 5 C onfiguring Por t VL AN Memb ership T o configure VLAN set tings f or po rts : STEP 1 Click VL AN Man agement > Port VL AN Memb ership in the na v igation window . B y d ef a u l t , t he p a g e d i s p l ay s V L A N i n for m ation f[...]

VL AN Management Se ttin g the Def au l t V L AN Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 111 5 • PVI D —When this option in selected, the por t us es the selected VL AN ID as its por t VL AN ID (PVID). The p ort assigns the PVID to all untagged frames r ec eived on the por t bef ore f or warding. The f ollowing configuration ru[...]

VL AN Management Vo i c e a n d M e d i a Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 112 5 • The typ e of the original default VLAN is change d fr om Default t o Static, and it can be deleted. One ex c eption is VL AN 1 . Ev en if it is no longer desi gnat ed as the default VLAN, VL AN 1 cannot be deleted. To s e l e c t a d e f a u[...]

VL AN Management Vo i c e a n d M e d i a Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 113 5 • Media VL AN • Auto V oIP S es sions Displa ying and Adding T elephony OUI The Te l e p h o n y O U I page lists the Organizational ly Unique Identifiers (OUIs ) as sociated with dif f erent voice VLANs . T o display this page, click VL AN [...]

VL AN Management Vo i c e a n d M e d i a Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 114 5 • Enable por ts f or this f eatur e. When enabled on a por t , the por t is automatically made member of the configured voice VLAN when the switch r ec eives an OUI frame (the administrator does not nee d t o manually add the por t as a member[...]

VL AN Management Vo i c e a n d M e d i a Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 115 5 STEP 1 Click VL AN Management > V oic e and Medi a > SIP /H323 B ase d in the na vigation window . The table lists the administrative and oper ational statuses f or S IP /H323 Aut o V oIP on each interface, and shows the class that traf fi[...]

VL AN Management Vo i c e a n d M e d i a Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 116 5 When a por t is LLDP - MED enabled with network p olicy , the switch will adv er tise its Media VL ANs in the LLDP -MED network p olicy TL V s out to the por t . When a LLDP Media Endpoint is disc over e d, the swit ch will install the Media VLA[...]

VL AN Management Vo i c e a n d M e d i a Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 117 5 STEP 6 F o r Application Status, sele ct Enable to enable priority as signment f or the selected application. Uncheck the b o x t o disable this f eature. STEP 7 If you enabled Application Status, ena ble or dis able the f ollowing f eatur es : [...]

6 Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 118 Sp anning T r e e This chapter describe s how t o c onfigur e the Spanning T ree Prot oc ol (S TP) on the switch. It includes the following t opic s: • O ver view of Spanning Tr ee • Configuring STP Status and Global S ettings • Configuri ng STP Interfac e Set tings • RSTP In te[...]

Sp anning Tree Configuring S TP Status and Global Sett ings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 119 6 When the r oot bridge is s elected and each r oot por t is establ ished, each netw ork segment can then determine which bridge pr ovide s the lowest cost path to the r oot por t . The por t that provides this path is named the [...]

Sp anning Tree Configuring S TP Status and Global Sett ings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 120 6 • STP Op era tion Mo de —Select one of the f ollowing STP mode s: - Class ic STP —Operates acc or d ing t o the original IEEE 802. 1 D spanning tree pr otocol. - Rapid STP —Is the default value and provides fast er span[...]

Sp anning Tree Configuring S TP Int er f ace S ettings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 121 6 The f ollowing information appears in the Designated Root section of the page: • Bridge ID — The bridge identifier , which is a c oncat enation of the bridge priorit y and the base MAC addr e s s of the bridge. • Root Bridge I[...]

Sp anning Tree Configuring S TP Int er f ace S ettings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 122 6 • STP —Select t o enable S TP operation on the port /L AG. • Auto Edge —Sele ct Enable t o allow the swit ch t o automatically det ermine if t he po rt i s a n ed ge po rt o r P o rt F as t. A po rt i s a n ed g e p ort if i[...]

Sp anning Tree RS TP In ter face S ettings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 123 6 • Por t State —Curr ent ST P stat e of a por t . If enabled, the por t state det ermines the forwarding action that is taken on tra ffic. Pos sible por t states are: - Disa bled —STP is curr ently dis abled on the por t . The por t does n[...]

Sp anning Tree RS TP In ter face S ettings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 124 6 By default, the RSTP Interface Set tings T able displays inf ormation f or each p or t . Use the Interface T ype list to displa y p ort s or LAGs in the table. The RS TP Int er face T able displays the f ollowing inf ormation f o r each por t: [...]

Sp anning Tree RS TP In ter face S ettings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 125 6 MSTP Instanc e Set tings MSTP Interfac e Set tings[...]

Sp anning Tree RS TP In ter face S ettings Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 126 6[...]

7 Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 127 MA C A ddr e s s T able s This chapter describe s the static config uration and dynamic learning of Media Acces s Control (MA C) addr es ses into the filt ering datab ase of the swit ch. The switch sear che s its filt ering database to det ermine which por t a packet is t o be f or ward[...]

M A C Ad dr ess T a bl es Configuring Sta tic MAC Address es Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 128 7 • MA C Addres s — Ent er the static MAC address . • Status —Select a status f or this static MAC address: - Permanent — When this status is s elected, the static MAC addr es s does not ex pir e. Not e, however , that[...]

M A C Ad dr ess T a bl es Configuring the Aging T ime for Dynamic Address es Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 129 7 C onfiguring the Aging Time for D ynamic A ddr e s s e s The Dynamic Addres s S et tings page enables you t o set an aging time, aft er which the syst em remov es addresse s in the dynamic MAC addr e ss table t[...]

M A C Ad dr ess T a bl es Dynamic MAC Addr ess es Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 130 7 The Dynamic Address T ab le displa ys the following fields f or each entr y it learns : • VL AN ID — VL AN on which the MAC address was learne d. Frames are f or warded t o the int er face only if they ar e as so ciat ed with this VL[...]

8 Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 131 Multic ast This chapter describe s how t o configur e the multicast pr ot ocols that f or war d packets fr om one s our ce to multiple destinations. It contains the f ollowing t opics : • Multicast Proper tie s • Configuring MAC Group Addres se s • Configuring Group -to-Port • C[...]

Multic ast Multicas t Pr op er ties Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 132 8 Multicast entrie s can be learne d by snoopin g (list ening in on ) the lay er 3 prot oc ols that manage multicast membership s: • IP v 4 multicast group addr e ss es can be learned through the Int ernet Gr oup Management prot o col (IGMP). • IP v[...]

Multic ast Configuring MAC Gr oup Address es Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 133 8 • For ward All —All multicast pack ets r eceived fr om a VLAN ar e flooded to al l por ts in the VLAN, regardless of p or t r egistrations to multicast addr e ss es. • Filter Unr egistere d —If a pack et is received fr om a VLAN f or [...]

Multic ast Configuring MAC Gr oup Address es Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 134 8 Viewing the MA C Group Addres s T able T o view the MAC Gr oup Addr es s T able, click Multic ast > MAC Gr oup Addres s in the na vigation window . By default , all entries disp la y in the table. Y ou can use the VL AN ID and MAC Gr oup A[...]

Multic ast Configuring Gr oup -to-Por t Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 135 8 C onfiguring MA C A ddres s Group Port Memb ership By default , pack ets destined to a multicast MAC addr e ss are floode d on all por ts. Ports might be come memb ers of a particular MAC addr ess group dynamically thro ugh the ex change of IGMP p[...]

Multic ast Configuring IGMP Sn ooping Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 136 8 STEP 4 Set the type to indicat e whether the entr y is statically configured or dynamically learned. Port s can become members of a par ticular MAC address group dynamically thr ough the e x change of IGMP pa ck ets, or you can statically configure [...]

Multic ast Configuring IGMP Sn ooping Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 137 8 T o configure IGMP snooping: STEP 1 Click Multic ast > IGMP Snooping in the navigation window . STEP 2 Select Enable f or the IGMP Snooping Status . STEP 3 Click Add in the IGMP Snooping T a ble. STEP 4 Fo r VL AN ID , s elect the VLAN that is t [...]

Multic ast Configuring MLD S nooping Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 138 8 STEP 7 Ensur e that an IGMP Mr outer int erface has b een configured f or this VLAN (or all VLANs). S ee C onfiguring IGMP Multicast Router Inter face s . C onfiguring MLD Sno oping MLD is a pr otocol us ed by IP v6 multicast r outers t o discover th[...]

Multic ast Configuring MLD S nooping Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 139 8 STEP 4 Fo r VL AN ID , s elect the VLAN that is t o suppor t MLD snooping. STEP 5 Enter the paramet ers: • MLD Fast Leave Mode —Sele ct Enable t o allow the switch t o immediately r emove a port (or L AG) fr om its multicast f or war ding table w[...]

Multic ast Configuring IGMP Multicas t Router In ter face s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 140 8 C onfiguring IGMP Multic ast Router In ter fac e s An IGMP r outer must e xist to manage th e IGMP clients in a VL AN. F or each VLAN that suppor ts IGMP snoopin g, the swit ch mu st be statically c onfigur e d with or must dyn[...]

Multic ast Configuring MLD M ulticas t Rout er In ter face s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 141 8 C onfiguring MLD Multic ast Router Inter face s An MLD multicast router must e xist to manage the MLD clients in a VL AN. For each VLAN that supp orts MLD sno oping, the swit ch must b e statically configured with or dynamical[...]

9 Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 142 IP C onfigura tion This chapter describe s the Addr es s Resolution Prot o col (ARP) and Domain Name Syst em (DNS) client f eatures . It includes the following t opic s: • ARP T able • Dom ai n Na m e S ys tem ARP T able The swit ch maintains an Addr ess Res olution Pr ot ocol (ARP)[...]

IP Configuration Domain Name Syst em Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 143 9 S e e t h e fo l l o w i n g t o p i c s fo r m o re i n fo r m a t ion on the configuration pages available in the IP Configuration > Doma i n Na m e S ys tem menu. • Co nfiguring DNS Ser vers • Ho stname Mapping C onfiguring DNS Ser vers T o[...]

IP Configuration Domain Name Syst em Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 144 9 NOTE: Default domain names may be learne d fr om r eply mes sage s fr om a DHCP ser ver . These name s display in the Default Domain Name List . STEP 4 Click Apply . Y our changes are sav ed to the Running Configuration. Adding DNS S er vers The DNS [...]

IP Configuration Domain Name Syst em Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 145 9 STEP 5 Click Apply and then click Clo se . Y our changes are sav ed t o the Running Configuration. Viewing and D eleting Dynamic DNS Entrie s The DNS Dynamic Entrie s table displa ys hostname s that ha ve be en learned by applications that use DNS lo[...]

10 Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 146 Sec u r i t y This chapter describe s the securit y f eatures f or the por t , user , and ser ver . It includes the following t opic s: • RA D IU S • Password Strength • Management Ac ce s s Profile Rules • Authentication Methods • Storm Control • Por t Se curit y • 802. [...]

Secu rity RAD IU S Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 147 10 C onfiguring Global R ADIUS S et tings T o configure the global set tings : STEP 1 Click Secu r i ty > RA DI US in the na vigation window . STEP 2 Enter the paramet ers: • Retrie s —Max imum number of times the R ADIUS client r etransmits r e quests t o the R [...]

Secu rity RAD IU S Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 148 10 T o add a R ADIUS Ser ver to the R ADIUS T able : STEP 1 Click Add STEP 2 Enter the paramet ers: • RA D I U S Se r v er —IP addres s or hostname of the ser ver . • Priorit y — The lower the priority numb er value, higher the priority of the ser ver . For e x [...]

Secu rity Passw or d Str ength Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 149 10 Pas sword Str ength Y ou can use the Pas sw ord St rength page to configur e characteristics of secure management user pas swor ds. T o configure password str ength set tings : STEP 1 Click Secu r i ty > Pas sw ord Stre ngt h in the na vigation window [...]

Secu rity Management Acce ss Pro file Rules Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 150 10 Management Ac c e s s Profile Rule s Use the Management Acces s Profile Rule s page t o define a pr ofile and rules for acce ssing the device f or management purpos es . Y ou can limit acc ess to specific us er names, ingres s por ts or LAGs [...]

Secu rity Management Acce ss Pro file Rules Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 151 10 T o limit acc ess to the web-b ased switch configuration utilit y only to specifie d users, fo r example, y ou can cr eate a rule in which HTTP ac ces s is denied to all users, and then create another rule in which specific users are permit t[...]

Secu rity Management Acce ss Pro file Rules Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 152 10 Mo dif ying and De leting Ac ce s s Profiles and Rule s Bef ore you can delet e an Acc ess Profile or modify the rules , you must disable the pr ofile. T o disable an acc es s pr ofile: STEP 1 Select the profile in the Acces s Pr ofile T able[...]

Secu rity Authentica tion Methods Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 153 10 STEP 3 Click Apply , and then click Close . Authentication Methods Y ou can use the Authe nti ca tion M ethods page t o sp ecify how users are allowed access t o swi t ch ports. T o select the authenticati on method: STEP 1 Click Secu r i ty > Authe[...]

Secu rity Storm Cont rol Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 154 10 Storm C ontr ol A traffic storm is the r esult of an ex c es s ive number of br oadcast , multicast , or unknown unicast mes sages simultane ously transmitted across a net work by a por t . Forwarded message respons es might creat e a lo op and overload network[...]

Secu rity Por t S e cu ri t y Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 155 10 NOTE : The actual rate of ingr es s traffic required to activat e Storm Control is base d on the actual siz e of incoming packets and the har d-c oded average packet siz e (512 by t es) paramet er . A packet -per -s econd rate is calculated, as the switch [...]

Secu rity Por t S e cu ri t y Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 156 10 • Interfac e Status —Select Lock t o enable por t securit y on the int er face. When an int er face transitions fr om unlocked t o lock ed, all addresse s that had been dynamically learn ed by the switch on that por t are r emoved from its MAC addr e s[...]

Secu rity 802 . 1 X Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 157 10 • Res et Por t —Select to r eset the p or t if it has been shut down by the Port Security f eatu re. STEP 4 Click Apply and then click Clo se . Y our changes are sav ed t o the Running Configuration. Viewing and C onfiguring Se cure MA C A ddres se s T o view th[...]

Secu rity 802 . 1 X Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 158 10 on the network —the au thenticat or —use s t o request authentication from a ser ver . • Authenticat or: An entity that facilitat es the authentication of the supplicant on the r emot e end of a link . An authenticat or grants p ort ac ces s t o a supplicant i[...]

Secu rity 802 . 1 X Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 159 10 • Lo cal — The switch per f orms local authentication of a remot e supplicant base d on EAP -MD5. The supplicant identification must be one of the management users configured on the switch ( see Man aging User Accounts ). • RA D I U S — The switch depends on[...]

Secu rity 802 . 1 X Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 160 10 STEP 3 Select the role f or the por t : • Authenticator —Select this option if the por t must authenticate the remot e supplicant bef ore granting acce ss to a local por t . • Supplicant —Select this option if the por t must be connected to an authenticator [...]

Secu rity 802 . 1 X Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 161 10 - auto —Select this option if the por t control is based on the result of the authentication pr oc ess . If the supplicant is authenticat ed, the por t control status bec omes Authorized, meaning the supplicant is granted ac ces s t o the por t . If the supplicant[...]

Secu rity 802 . 1 X Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 162 10 • Max EAP Re quests — The pr econfigu r ed maximum number of time s the switch can send an E AP r eques t bef ore restar ting the authentication proces s if it does not r eceive a response . • Te r m i n a t i o n C a u s e — The reason f or t ermination. ST[...]

Secu rity 802 . 1 X Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 163 10 • Us er Name —S elect the user to be used by the por t to identify itself as a supplicant . The user must be one of the switch management users configured in the switch. The password configured f or the us er will be use d in the authentication proces s. A s a s[...]

11 Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 164 Qualit y of S er vic e This chapter describe s the QoS f eatures of the device. • QoS Prop er ties • Defi nin g Qu eues • Mapping CoS/802. 1 p Prioritie s to Queues • Mapping IP Prec edenc e to Queues • Ma pp in g DSC P V al u es to Qu e u es • De fining Ra te Limit Profile[...]

Qualit y of Ser vice QoS Proper tie s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 165 11 The switch suppor ts f our egress queues for each por t or LAG. Queue 1 has the lowest priorit y and queue 4 has the highest prio rity . The pages in the Quality of Ser vice menu enable y ou t o define the pr oper ties of the queues , and t o asso [...]

Qualit y of Ser vice De fin ing Qu eues Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 166 11 • trust ip -pr ec e dence — The p or t uses the IP Precedence value in the IP packet header . If no value is provided, the def ault priority is as signed. Non-IP VLAN tagge d and untagged frame s are assigned the default priorit y . • trust[...]

Qualit y of Ser vice De fin ing Qu eues Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 167 11 Queue C onfigura tion Rec ommendations It is r eco mmended that higher number ed queues be configured with higher priority , weight , and minimum-bandwidth set tings. The f ollowing are r ec ommended scenario s f or strict priorit y (S P) and WRR[...]

Qualit y of Ser vice Mapping CoS/802. 1 p Priorities to Queue s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 168 11 • WRR —S elect to ha ve the sche duler ser vice the queue in turn with other WRR queues , based on bandwidth p er centage of the queue relativ e t o other W R R q u e u e s . ( S t r i c t q u e u e s c o n t i n u e t[...]

Qualit y of Ser vice Mapping CoS/802. 1 p Priorities to Queue s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 169 11 NOTE If you click Restore D efaults , the f ollowing mappings are applied t o the selected interface. 802. 1 p Priorit y Output Queue 01 11 22 33 43 54 64 74[...]

Qualit y of Ser vice Ma pp in g I P P r eced en ce t o Q ue u es Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 170 11 Mapping IP Prec e denc e to Queue s The priority of a packet arriving at an int erfac e can be identified by the T yp e of Ser vice ( T oS) field in an IP pack et header . Eight precedence levels ar e defined (0-7) . Y ou[...]

Qualit y of Ser vice Mapping DSCP V alues to Queue s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 171 11 NOTE If you click Restore D efaults , the f ollowing mappings are applied t o all interfaces . Mapping DS CP V alues to Queue s The priority of a packet arriving at an int erfac e can be identified by the Differ entiated Ser vice Cod[...]

Qualit y of Ser vice Defining R a te Limit Pr ofiles Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 172 11 NOTE If you click Restore D efaults , the f ollowing mappings are applied t o all interfaces . D efining Rate Limit Pr ofile s The rat e-limiting f eature enables yo u to set a maximum i ncoming traffic rat e f or a por t . When the [...]

Qualit y of Ser vice App lyin g Ra te Lim it P ro file s to Inter fac e s Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 173 11 • CB S —Spe cify a c ommitted burst size, which is the guaranteed amount of bandwidth f or burst y traffic on the por t . The range is 4- 16384 KB. STEP 4 Click Apply and then click Clo se . Y our changes are[...]

Qualit y of Ser vice Tr a f f i c S h a p i n g Cisco Small Busines s SG200 Serie s 8-por t Smart Switch 174 11 T ra f fic Shaping Y ou can use the Tr a f f i c S h a p i n g page t o smooth the packet output rat e. Y ou can configure the maximum output rat e f or each p or t and LAG, expr e ss ed as a percentage of bandwidth. When the traffic r at[...]

Copyright © 2010 Cisco Systems, In c. All rights reser ved. 78- 19562-01 Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U .S. and other countries. A listing of Cisco's trademarks can be found at www . c i sco. co m / go /t ra d e ma rk s . Third party trademarks mentioned are the property of their [...]