SMC Networks SMC6750L2 manual

T igerSwitch 10/100 50-P ort Layer 2 Switch ◆ 48 10B ASE-T/ 100B ASE-TX auto -MDI/MDI-X ports ◆ 2 auto-MDI/M DI-X 10/100 /1000B ASE-T comb o ports with associat ed SFP slots ◆ Non-blocking switching architect ure ◆ Support for redundant po w er unit ◆ Spanning T ree Protocol ◆ Up to six LA CP or static 4-port trunks ◆ Layer 2/3/4 C oS[...]

[...]

38 T esla Irvine, CA 92618 Phone: (9 49) 679-8000 T igerSwitch 10/100 Manag ement Gui d e From SM C’ s T iger line of f eature-rich work group LAN solut i ons June 200 2 Pub. # 15 0200016800A[...]

Infor matio n furn ished by SMC Networks , In c . (SMC) is believed to be accurate and reliable. Ho wever, no responsibili ty is assumed by SMC for its use, nor f or any infring eme nts of p atents or oth er righ ts of thir d par t ies which may result from its use. No license is g ranted by implic ation or oth- erwise unde r an y pate nt or p aten[...]

i L IMITED W ARRANTY Limited W ar ranty Statement: SM C Networks, Inc. (“SMC ”) war rant s its pro ducts to be free from d efects in w orkmanship and materials , under normal use and service, for the applicable warranty term . All SMC products carr y a standard 90-day li mi ted warranty from the date of purc hase from SMC or its Author i zed Re[...]

ii WARRA NTI ES E XCLUSIVE: IF AN SMC PR ODUCT DOES NOT OPERA TE AS W A RRANTED ABO VE, CUSTOMER’ S SOLE REMED Y SHALL BE REP A IR OR REPLA CEMENT OF THE PR ODUCT IN QUESTION , A T SMC’S OPTION . THE FOREGOING W ARRANTIES AND REMEDIES ARE EXCLUSIVE AN D ARE IN LIEU OF ALL OTHER W ARRANTIES OR CONDITIONS , EXPRESS OR IMPLIED , EITHER IN F A CT O[...]

iii C ONTENTS 1 Switch Management . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Connecting to the Sw itch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Configurat ion Optio ns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1 Required Co nnectio ns . . . . . . . . . . . . . . . . . . .[...]

C ONTENTS iv Configuri ng Interfa ce Connec tions . . . . . . . . . . . . . . . . . . . . . . 2-26 Setting Br oadcast Stor m Thresho lds . . . . . . . . . . . . . . . . . . . . . 2-28 Configuri ng Port Mir roring . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-29 Address Table Set tings . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

C ONTENTS v Configuri ng IGMP Parame ters . . . . . . . . . . . . . . . . . . . . . . . . . 2-72 Interface s Attac hed to a Multica st Router . . . . . . . . . . . . . . . . . 2-74 Displaying P ort Member s of Multicas t Services . . . . . . . . . . . . 2-77 Adding M ulticast Ad dresse s to VLANs . . . . . . . . . . . . . . . . . . 2-78 Showing Dev[...]

C ONTENTS vi whichb oot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-22 boot sys tem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-23 System Man agement C ommands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-24 hostname . . . . . . . . . . . . . . . . . . [...]

C ONTENTS vii show ip r edirect s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-54 ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-54 Line Comman ds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-56 line . . . . . . . . . . . [...]

C ONTENTS viii bridge pr iority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-87 bridge-gr oup path-co st . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-88 bridge-gr oup priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-89 bridge-gr oup portfas t . . . . . . . . . . . .[...]

C ONTENTS ix switchpor t priority de fault . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-121 queue ba ndwidt h . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-122 queue co s-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-123 show que ue band width . . . . . . . . . . . . . . . .[...]

C ONTENTS x A PPEN DICES : A Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A-1 Troubles hooti ng Chart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A -1 Upgrading Firmware via th e Serial Po rt . . . . . . . . . . . . . . . . . . . . . . . . . A-2 B Pin Assignments . . . . . . . . . . .[...]

1-1 C HAPTER 1 S WITCH M ANAGEMENT Connect ing to the Switch Configuration Opt ions The Tig erSwitch 10/100 SMC6750L2 includes a built-in network management agent . The agent offers a v ariety of ma nag ement o ptions , including SNMP , RMON and a W e b-based inte rface. A PC ma y also be connec ted directly t o the switc h for configura tion and m[...]

S WITCH M ANAG EMENT 1-2 The switch’ s CLI conf i guration prog ram, W eb interface, and SNMP agent allow you to perf or m th e following ma nage ment fu nctions: • Set user na mes and passwords for up to 16 users • Set an IP inter fac e for a mana geme nt VL AN • Con fi gure SNM P pa rame ter s • Enable /disa ble any port • Set th e sp[...]

C ONNECTING TO THE S WITCH 1-3 Attach a VT100-compatible ter minal, or a PC r unning a ter minal emu lation pro g ram to the switc h . Y ou can use the consol e cable pro vided with this pac kage, or us e a null-m odem cable th at compli es with the w iring assignmen ts shown in Appendix B. T o connect a ter minal to the co nsole port, compl ete th[...]

S WITCH M ANAG EMENT 1-4 4. Once y ou hav e set up the ter minal correctly , the con sole login s creen will be displayed. F o r a desc ription of how to use the CLI, see “Using th e Command Li ne Interface” on page 3-1. F o r a list of all the CLI commands and detailed information on usin g the CLI, refer to “Comma nd Groups” on page 3-10.[...]

B ASIC C ONFIGURATION 1-5 Basic Configuration Console Connection The CLI program provid es tw o differ ent command leve ls — normal access level (Nor mal Exec) and privileged access le vel (Pri vile ged Exec). The commands avail able at the Normal Ex ec level are a limited subs et of those available at the Pri vile ged Exec level and allow y ou t[...]

S WITCH M ANAG EMENT 1-6 P asswor ds can consist o f up to 8 alphan umeric chara cters and are ca se sensitive. T o p revent unau thorize d acce ss to th e switch, se t the pa sswords as follows: 1. Open th e console in terface with the default user name and pass word “admin” to access th e Privileged Exec lev el. 2. T ype “configur e” and [...]

B ASIC C ONFIGURATION 1-7 Note: Only one VLA N interface can be assigne d an IP address (the default is VLAN 1) . This defin es the manageme nt VLAN, the only VLAN through which you can gai n manage ment acces s to the switch. If you assign a n IP address to any other VLAN, t he new IP address overrides the original IP address an d this bec omes th[...]

S WITCH M ANAG EMENT 1-8 4. T o set the IP addr ess of th e default g atew ay for the netw ork t o whic h the switch belongs, type “ip default-g a teway gateway , ” where “gatew ay” is the IP address o f the defaul t gateway . Pres s <Enter>. Dynamic Configuration If you select the “boot p” or “dhcp” op tion, IP will be enable[...]

B ASIC C ONFIGURATION 1-9 3. T ype “exit” to retur n to the global config uratio n mode. Press <Ente r>. 4. T ype “ip dhcp restart” to begi n broadcasti ng ser vice reques ts. Press <Ente r>. 5. W ait a few min utes , and then c heck th e IP configur ation setti ngs, by typi ng the “sho w ip inte rface” comma nd. Press <E[...]

S WITCH M ANAG EMENT 1-10 Community Strings Comm unity string s are used to control managem ent access to SNMP stations , as w e ll as to aut h orize SNMP stat ions to receiv e trap messages from t he switch. Y ou therefore n eed to assign communit y strings to speci fie d user s or u ser g roup s, and set the acce ss l evel. Th e de fault stri ngs[...]

B ASIC C ONFIGURATION 1-11 Trap Receivers Y ou can a lso specify SN MP stations that are to re ceiv e traps from th e switch. T o configure a t rap receiv er, co mplete the fo llowing s t eps: 1. Fr om the Pri vileged Ex ec leve l global conf iguration mo de prompt, type “s nmp-ser ver host host-address community-string , ” where “host-ad dre[...]

S WITCH M ANAG EMENT 1-12 Managing Syst em File s Th e switch’ s fla sh memor y su ppor ts thr ee types of system f iles that can be managed by the CLI prog ram, W eb int erface, or SNMP . Th e switch’ s file syste m allo ws files to be uploaded an d downloade d, copied, deleted, and set as a st ar t-up file. Th e thr ee typ es of f iles a re: [...]

S YSTEM D EFAULTS 1-13 System Defaults The swit ch’ s sys tem defaults are provided in the configuration file “Factor y_Defa ult_Con fig.cfg. ” To reset th e swit ch defa ults, this file should be set as th e sta rtup con figurat ion file. Se e “S ettin g the Sta rtup Config uration Fil e” on page 2-19. The following table lists some of t[...]

S WITCH M ANAG EMENT 1-14 Console Port Connection Baud Rate 9600 Data bits 8 Stop bits 1 Parity none Local Console Timeou t 0 (disabl ed) Port Status Admin Status Ena bled Auto-negotiation Enabled Flow Control D isabled 10/100 Mbps Port Capability 10 Mbps half du plex 10 Mbps full du plex 100 Mbps half du plex 100 Mbps full duple x Full-duplex flow[...]

S YSTEM D EFAULTS 1-15 Virtual LANs Default VLAN 1 PVID 1 Acceptable Frame Type All Ingress Filterin g Disabled GVRP (global ) Disabled GVRP (port interface) Disabled Class of Service Ingress Port Priority 0 Wei ght ed Ro und Ro bin Cla ss 0 : 1 Class 1 : 4 Class 2: 16 Class 3: 64 IP Precede nce Prio rity Disabled IP DSCP Priority Disabled IP Port [...]

S WITCH M ANAG EMENT 1-16[...]

2-1 C HAPTER 2 C ONFIGU RING THE S WITCH Using the We b Interface This sw itch provides an embedded HTTP W eb ag ent. Using a W eb bro wser you can configure the s w itch and view statis tics to monito r netw ork acti vity . The W eb agent can be acc essed by any computer on the network us ing a sta ndar d W eb browse r ( Inter n et E xplor er 5 .0[...]

C ONFIGURING THE S WI TC H 2-2 3. After you enter a user name and passw o rd, you will hav e access to the system co nfigura tion prog r am. Notes: 1. Yo u are al lowed th ree atte mpts to enter the corr ect passw ord; on th e third failed at tempt the curr ent connec tion is terminate d. 2. If the path between your managem ent station and this sw [...]

N AVIGATIN G THE W EB B RO WS ER I NTE RF AC E 2-3 Configuration Opt ions Configur able param eters hav e a dialog box or a drop-down l ist. Once a config urati on chan ge ha s been made on a pa ge, be sure t o click on the “ Apply” or “ Apply Chang es” button to confir m the ne w settin g . T he foll owing ta ble summar izes the W eb page [...]

C ONFIGURING THE S WI TC H 2-4 Notes: 1. To ensu re pr oper scree n re fres h, be sure that Inter net Explor er 5.x is configured as follow s: Under the me nu “Tools / Internet Options / Gen eral / Temporary Internet Files / Setting s,” the setting f or it em “C heck for newe r vers ions of stor ed pag es” should be “Every visit to th e p[...]

M AIN M ENU 2-5 Main Menu Using the onboard W eb agent, y ou can def ine system p aramete rs, m anage and control the switch, and all its po rts, or monitor ne twork conditions. The following table brief ly describes the selections available from this prog r am. Menu Des cription Page System System In formation Provides basic syst em description , [...]

C ONFIGURING THE S WI TC H 2-6 Address Tab le Static A ddresse s Displays entrie s for interfac e, address or VLA N 2-30 Dynamic Address es Displays or ed its static entries in the Add ress Table 2-31 Address Aging Sets timeout for dynamicall y learned entries 2-32 Spanning Tree STA Information D isplays STA values used for the bridge 2-35 STA Conf[...]

M AIN M ENU 2-7 Priority Default Port Priority Sets the default priority for each port 2-54 Default Trunk P riority Sets the default prio rity for ea ch trunk 2-54 Traffic Class Maps IEEE 802.1p priority tag s to output queues 2-55 Queue Scheduling Configure s Weighted Round Robin queuein g 2-58 IP Precedence/D SCP Priority Status Globally sele cts[...]

C ONFIGURING THE S WI TC H 2-8 Basic Configuration Displaying System I nformation Y ou can e asily identi fy the system by provi ding a descri ptiv e name, location an d contact informat ion. Command Att ributes • Sy stem Na me – Nam e assigned to the switch sy stem. • Object ID – MI B II objec t ID for swi tch’s networ k manageme nt subs[...]

B ASIC C ONFIGURATION 2-9 We b – Clic k System/System In for mation. Spec i fy the system name , location , and contact information for th e system admini strator , then cl ick Apply . (T his pag e als o includes a T elnet button that allows you to access the Command Line Interface via T el net.) CLI – Specify the h ostname, location and contac[...]

C ONFIGURING THE S WI TC H 2-10 Setting the IP A ddress An IP address ma y be used fo r management acce ss to the switch o ver y our netw ork. By default, the switch us es DHCP to assign IP settings to VLAN 1 on the swit ch. If you wish to man u ally configure IP sett ings, y ou need to change the swit ch’ s user -specified defaults (IP add ress [...]

B ASIC C ONFIGURATION 2-11 • Subnet Mask – This mask id entifi es the host ad dress bi ts used for routing to specific sub n ets. • Gateway IP Address – IP a ddress of t he gateway router betw een this devic e an d mana gement stations that e xist on other n etwork segmen ts. • MAC Address – The MAC address of this switch. Manual Con fi[...]

C ONFIGURING THE S WI TC H 2-12 We b – Click Syste m/IP . Specify the Man age ment VL AN , se t the I P Address Mode t o DHCP or BOOTP . Then click “ A pply” to sa ve your changes . T he switch will broadcast a re quest for IP configuration setting s on the ne xt power rese t. Otherwise, you can cl ick “R es tar t DHC P” to immediat ely r[...]

S ECUR IT Y 2-13 Security Configuri ng the Logon P assword Th e gues t only h as read acce ss for mo st co nfigura tion par amete rs. Ho wever , the ad m inist rator has wri te access for parameters gov erning the onboa rd ag ent. Y ou s hould the ref ore ass ign a ne w adminis trator password as soon as possible , and store it in a safe place . No[...]

C ONFIGURING THE S WI TC H 2-14 Configuring Radius Logon Au thentication Re m ote Authentic ation Dial-in User Ser vice (RADI US) is an authent icat ion pr otocol th at use s a cen tral se r ver to c ontrol ac cess to RADIUS -complia nt devi ces on the network. A RA DIUS se r ver c an be prog r amme d with a d ataba se of multip le user nam e/pas s[...]

S ECUR IT Y 2-15 • Timeout for a reply – The number of seconds the switch w aits for a repl y from the RADIUS se rver before it rese nds the reques t . Note: The lo cal switch user d atabase has to be se t up by manually enter ing user names and p asswor ds usin g the CL I. We b – Clic k System/Radius . Specif y the authenticat ion sequence ,[...]

C ONFIGURING THE S WI TC H 2-16 Managing Firm ware Y ou c an upload /downl oad fir mware to or from a TFTP ser ver . By saving r untime code to a file on a TFTP ser ver , that file can later be downloaded to the sw itch to res tore op eratio n. Y o u can also set th e switch to u se new fir mware without overwriting the pr evious version. Command A[...]

M ANAGIN G F IR MWA R E 2-17 If you download specifying a new destinatio n file name, be sure to select the ne w file fro m the d rop-down box, an d then cli ck “ App ly Changes . ” T o start the new fi r mwa re, reboot the system . CLI – Ente r the IP address of the TF T P server , sele ct “config” o r “opcod e” file ty pe, then ente[...]

C ONFIGURING THE S WI TC H 2-18 Saving or Restoring Configuration Sett ings Y ou c an upload /downl oad conf iguratio n sett ings to /from a TFTP ser ver . The conf iguration file can be later downloade d to restore the sw itch’ s settings. Command Att ributes • Destination File Name — The de stination configurat ion file name should not cont[...]

M ANAGIN G F IR MWA R E 2-19 CLI – Enter the IP address of the TF T P ser ver , specify the source fi le on the ser ver, set the star tu p file name on the sw itch, and t hen re star t the switch. Setting the Startup Configu ration File If y ou downlo ad to a new fi l e na m e, then select the new file f rom the drop- down bo x, and click “ App[...]

C ONFIGURING THE S WI TC H 2-20 Copying the Running Configu ration to a File CLI – If you copy the r u nning config uration to a file, you can set this file as the startup file at a later time, and t hen restart the switc h. Displaying Bridge Extension Capabilities Th e Bridg e MIB in clude s extens ions for manag ed d evices th at sup por t Mult[...]

M ANAGIN G F IR MWA R E 2-21 • Configurable PVID Tagging – This switch a ll ows you to override the defau lt Port VLAN ID (PVID used in frame tags) and egress statu s (VLAN- Tagged or Unta gged) on each port. (Refer to “VLAN Configuration” on page 2-41.) • Local VLAN Capable – This switc h does not sup port multiple local bridges (i.e. [...]

C ONFIGURING THE S WI TC H 2-22 CLI – Enter the following command. Displaying Switch Hardware/Software Versions Command Att ributes Main Board • Serial Number – The ser i al numb er of the swit ch • Number of Ports – Number of ports on this switch • Hardware Versi o n – Hard ware version of t h e main boar d. • Internal Power Status[...]

M ANAGIN G F IR MWA R E 2-23 We b – Click System/Switch Infor mation. CLI – Use the followin g command to display version infor mation. Console#show version 3-37 Unit1 Serial number :0000000000000000 0000 Service tag :0000000 Hardware version :R0C Number of ports :50 Main power status :up Redundant power status :not present Agent(master) Unit i[...]

C ONFIGURING THE S WI TC H 2-24 Port Configura tion Displaying Connection Status Y ou c an use the Port Inf or matio n or T r u nk In for mation pa g es to disp lay the current c onnection status , includin g link sta t e, s peed/duplex mode, flow co ntrol, and aut o-neg otiati on. Command Att ributes • Name – Inter face label. • Type – Ind[...]

P ORT C ONFIGURATION 2-25 We b – Click P or t/P or t Infor m ation or T r unk Infor mation. Mo dify the required interface settings , and click “ Apply .” CLI – This example s hows the co nnection sta t us for P ort 13. Console#show interfaces status ethernet 1/13 3-75 Information of Eth 1/13 Basic information: Port type: 100tx Mac address:[...]

C ONFIGURING THE S WI TC H 2-26 Configuring I nterface Connections Y ou can use the T r unk Configuration o r P or t Configuration pag e to enable/disable an int erface, manua l ly fix t he speed and du plex mode , set flow con trol, set auto-n eg otiation, and set the inte rface capabilit ies to adve r tise. Command Att ributes • Name – Allows[...]

P ORT C ONFIGURATION 2-27 - Sym - Transmits and receives pause frames for flow c o ntrol (Gigabit Ethernet ports only) - FC - Supp orts flo w contr ol • Trunk – Indica t es if a port is a member of a trunk. To c reate trunks and sele ct port mem b ers, s ee “Port Trun k Configuration” on page 2-66. Note: Auto nego tiation mu st be disable d[...]

C ONFIGURING THE S WI TC H 2-28 Setting Broadcast Storm Thresholds Broadc ast stor ms may o ccur when a devi ce on your net work is malfunctioning, o r if application prog rams are not well designed or proper ly configured. If there is too muc h broadcas t traffic on y our network, per for ma nce ca n be severel y deg rad ed or ever yt hing can c o[...]

P ORT C ONFIGURATION 2-29 Configuri ng Port Mirr oring Y ou can mi r ror traffic fr om any source p or t to a ta rg et port for rea l-time analysi s. Y ou can th en attac h a logic analyz er or RMON probe to the target port and stud y the traffic cro s sing t h e sourc e port in a com pletely unobtrusiv e manner . Command Usa ge • The mi rror por[...]

C ONFIGURING THE S WI TC H 2-30 Addre ss Ta ble Settin gs Switches sto re t he addre sses f or all known devices. This infor mation is used to route traffi c directly betw een the inb ound and outbo und ports. All the add resses learned b y monitorin g traffic are s tored in the dy namic address t able. Y ou can also man ually configure stat ic add[...]

A DDR ES S T ABLE S ETTINGS 2-31 CLI – This example adds an address to the static ad dress table, but sets it to be deleted w hen the switch is rese t. Displaying the Address Table The Dynamic Address T able conta i ns th e MA C addresses learne d by monit oring the so urce address f or traffic e ntering the s witch. W hen the destination add res[...]

C ONFIGURING THE S WI TC H 2-32 F or example , the follo wing screen sh ows the dynam ic addresses for p or t 7. CLI – This example a lso displa ys the addre s s table entries for p or t 11. Changing the Agin g Time Y ou c an set the a ging tim e for entri es in the d ynamic addres s tabl e. Command Usa ge The range for the aging time is 10 - 100[...]

S PANNING T REE P RO TO CO L C ONFIGURATION 2-33 Spanni ng Tree P rotoc ol Configu ratio n The Spa nning T ree Al g orith m can be us ed to detec t and dis able ne twor k loops, and to provide bac k up links be tween switches , bridg es or routers. This allows the swi tch to interact with ot her bridging d evices (that is, an ST A-compli ant switc [...]

C ONFIGURING THE S WI TC H 2-34 The following glob al attributes can be con figured: • Spanning Tree State – Enable/disabl ed this switc h to participate in a STA-compliant netw ork. • Priority – Bridge priority is used in selecting t he root device, root port, an d designat ed port. The de vice with the highest prior ity becomes the STA ro[...]

S PANNING T REE P RO TO CO L C ONFIGURATION 2-35 • Forward Delay – The maximum tim e (in secon ds) the root device will wait befo re changing states (i.e., list ening to learnin g to forwardin g). This delay i s required becaus e every device m ust receive information about topology changes b efore it starts to forward frames. In ad dition , ea[...]

C ONFIGURING THE S WI TC H 2-36 CLI – Th is command displays global STA settings, followe d by the settings for each p or t. Note: The current root port an d current root co st display as zero when this de vice is not co nnected to the network. Console#show bridge group 1 3-91 Bridge-group information ----------------------------------------- ---[...]

S PANNING T REE P RO TO CO L C ONFIGURATION 2-37 Configuring th e global set tings for STA We b – Click ST A/STA Configuration. Modify the required attributes, click “ Apply .” CLI – T his examp le en able s Span ning Tree Proto col, an d the n sets the indicated att ributes . Managing STA Inter face Settings Y ou can configure STA attribut[...]

C ONFIGURING THE S WI TC H 2-38 • Disabled - The port ha s been d isab led by th e user or has fa iled diag nostic s. • Blocking - Por t recei ves STA configu ratio n mess ages, bu t do es not for war d pac kets. • Listening - Port will leave blocking state due to a topology change, s tart transmit t ing co nfiguration messages, but does not [...]

S PANNING T REE P RO TO CO L C ONFIGURATION 2-39 Th e fol lowing inter face attri but es ca n be confi gure d: • Priority – Define s the pri ority us ed for this po rt in the S pannin g Tree Protoc ol. If the p ath cost for al l ports on a s witch are the s ame, the port with the high est priority (i.e., lo west value) will be configured as an [...]

C ONFIGURING THE S WI TC H 2-40 We b – Click ST A/ST A Port Informat ion or ST A T r unk Infor mation. CLI – This example s hows the ST A attributes fo r port 5. Console#show bridge group 1 ethernet 1/5 3-91 Bridge-group information ----------------------------------------------------- --------- Spanning tree protocol :ieee8021d Spanning tree e[...]

VLAN C ONFIGURATION 2-41 We b – Click ST A/STA P or t Configuration or STA T r unk Config uration. Modify the required attributes, then click “ Apply .” CLI – T his examp le sets STA attribute s for por t 5. VLAN C onf igur ation In conventional networks with ro uters, broadcast traffic is s plit up into separate domains. Switches do not in[...]

C ONFIGURING THE S WI TC H 2-42 VLANs he lp to sim plify network mana g ement by allowing you to move device s to a new VL AN with out h aving to chang e an y physical conne ction s . VLA Ns ca n be eas ily org aniz ed to refl ect d epa rt menta l groups (su ch as Mar keting or R&D), usage groups ( such as e-m ail), or multicast g roups (use d [...]

VLAN C ONFIGURATION 2-43 in one or more VLANs, but th e dev ice a t the o ther end of the lin k do es not sup por t VLA Ns, then you must add t his por t a s an unta g g ed p ort (that is , a port attached to a VLAN-unaw are device). VLAN Cla ssifica tion – When the sw itch r eceives a fra me, it cl as sifie s the frame in one of tw o way s. I f [...]

C ONFIGURING THE S WI TC H 2-44 T o implement GVRP in a netwo rk, you mus t first config ure the static VLANs r equired on switche s that are co nnected to P Cs, ser vers , and ot her devices , so that these VLANs c an be propa g ated across the netw ork (W eb - VLAN / VLAN Members hip). F or othe r core switc hes in the netw ork, enable GVRP on th[...]

VLAN C ONFIGURATION 2-45 • Maximum Number of Supported VLANs – Maximum number of VLAN s that ca n be config ured o n this s witch. We b – Click VLAN /VLAN Ba sic Infor mati on. CLI – Enter the following command. Displaying Current VLANs Command Att ributes for Web Interface • VLAN I D – ID of configured VLAN (1-4094, no leading zeroes).[...]

C ONFIGURING THE S WI TC H 2-46 We b – Clic k VLAN/VLAN Current T able. Se lect any ID from the scroll-down list. Command Att ributes for CLI I nterface • VLAN – ID of configured VLAN (1-4094, no leading zeroes). • Type – Shows how this V LAN was a dded to the swi tch. - Dynamic : Au tomatic ally lear ned via GV RP. - Static : A dde d as [...]

VLAN C ONFIGURATION 2-47 CLI – Cur rent VLAN infor mat ion can be disp layed with the following command. Creati ng VLANs Command Att ributes • VLAN I D – ID of configured VLAN (1-4094, no leading zeroes). • Name – Name of the VLAN (1 to 64 charac ters). • Status – Show s if this VLAN is enabled or disabled (W eb). - Enable : VLAN is o[...]

C ONFIGURING THE S WI TC H 2-48 CLI – T his examp le cr eate s a new V LAN . Adding Interf aces Based on Membership Typ e Command Att ributes • Port – Port id entifier. • Trunk – Trun k id ent ifi er. • VLAN – ID of configured VLAN (1-4094, no leading zeroes). • Name – Name of the VLAN (1 to 64 charac ters). • Status – Show s [...]

VLAN C ONFIGURATION 2-49 • Trunk Member – Indicat e s if a po rt is a member of a t runk. To add a tr unk to the selec ted VLAN, use the last ta ble on the VLA N Static Table pag e. We b – Click VLAN/V LAN S tatic T ab le. Select a VLAN ID from t he scroll-down list. Modify the VLAN n ame and status if required. Select the membersh ip type by[...]

C ONFIGURING THE S WI TC H 2-50 Adding Interf aces Based on Static Membership Command Att ributes • Interface – Po rt or tr unk identi fier. • Member – VLANs for which th e selected int erface is a tagged member. • Non-Member – VLANs for w hich the select ed interface is not a tagged member . We b – Open VLAN/VLAN Static Membership . [...]

VLAN C ONFIGURATION 2-51 Configuring V LAN Behavior for Interfaces Y ou can configure VL AN behavior for specific interfaces, including the default V LAN identifier ( PVID), accepted fram e types, ing ress filteri ng, GVRP status , and GARP timers . Command Usa ge • GVRP – GAR P VLA N Regist ratio n Prot ocol de fines a way for switch es to exc[...]

C ONFIGURING THE S WI TC H 2-52 • GVRP Sta tus – Enables/di sables GVRP for the i n terface. G VRP must be globally enable d for the switch before this setti ng can take effect. (See “Disp laying Bridge Extensio n Capabilities” on page 2-20.) When disabled, any GVRP packets rec eived on this port will be discarded and no GVRP reg istrations[...]

C LASS OF S ER VICE C ONFIGURATION 2-53 We b – Click VLAN /VLA N Port Config urati on or VLAN T r unk Configuration. Fill in the required settings for each interface, click “ Apply .” CLI – This example s ets port 1 to accept only ta g ged frames , assigns PVID 3 as the na tive VLAN ID , en ables GVRP , sets the GA RP timers, and then sets [...]

C ONFIGURING THE S WI TC H 2-54 Setting the Default Priority for Interfaces Y ou can s p ecify t he default port prio rity for each interface on th e switch. All un tag g ed pack ets ente ring the swi tch are tagg ed with the specified default po r t priori ty , and then sor ted into the a ppropria te prio rity que ue at the ou tput port. Command U[...]

C LASS OF S ER VICE C ONFIGURATION 2-55 We b – Click Priority/Default P or t Priority or Default T r unk Priority . Modify th e default p riority for any inter face, the n click “ A pply .” CLI – This exampl e assigns a de fault priori ty or 5 to po r t 3. Mappin g CoS Valu es to E gress Queues This sw itch processes Class of Ser vice (Co S[...]

C ONFIGURING THE S WI TC H 2-56 to recommendations in the IEEE 802.1p standard as shown in the foll owing t able. The priority levels recommended in the IEEE 802.1p standard for various network applications are shown in th e follow ing table . How ever , you c an map the priority levels to the switch’ s output queues in any way that benefi ts app[...]

C LASS OF S ER VICE C ONFIGURATION 2-57 We b – Click Priority/T raffic Classe s . Assign p riorities to the output queues , then clic k “ Appl y .” CLI – The follow ing example s hows how to map CoS v alues 0, 1 a nd 2 to CoS priority queu e 0, value 3 to CoS priority queue 1, v alues 4 and 5 to CoS priority queu e 2, and values 6 and 7 to [...]

C ONFIGURING THE S WI TC H 2-58 Setting the Service Weight for Traffic Classes Th is swi tch us es the W eig hted Roun d Robin (WR R) al g ori thm to deter mine the frequency at which it ser vices each priority queue. As described in “ Mapping CoS V alues to Eg ress Queues ” on page 2-55, t he traffic classes are map ped to one o f the four egr[...]

C LASS OF S ER VICE C ONFIGURATION 2-59 Mapp in g Lay er 3/ 4 Pr ior iti es to C oS V alu es This sw itch suppor ts se veral common methods o f prioritizin g layer 3/4 traffic to meet application re quirements. T raffic priorities can be specified in the IP he ader of a frame, usin g the prio rity bits in the T y pe of Se r vice (T oS) oc tet or th[...]

C ONFIGURING THE S WI TC H 2-60 CLI – The follow ing example g lobally enabl es IP Precedence s er vice on the s witch. Mapping IP Precedence The T ype of Se r vice (T oS) oct et in the IPv4 he ader includes three preceden ce bits de fining eight different pri ority lev els rang ing from hig hest prior ity for ne twor k control packet s to low es[...]

C LASS OF S ER VICE C ONFIGURATION 2-61 We b – Clic k Priority/IP Pr ecedence Priority . Selec t a port or trunk from the Interfac e field (note that settings ap ply to all interfaces). Select an IP Preceden ce value from the IP Precede nce Priority T able by clicking o n it with y our cursor , enter a v alue in th e Class of Service V alue field[...]

C ONFIGURING THE S WI TC H 2-62 Mapping DSCP Priority The DSCP is six bits wide, allo wing coding for up t o 64 different forwardi ng behavior s . T he DSCP re pl aces th e T oS bits, and it retains backward compatibility with the three precedence bits so th at non-DSCP compliant, T o S-enabled d evices, will not conf lict with t he DSCP mapp ing .[...]

C LASS OF S ER VICE C ONFIGURATION 2-63 CLI – T he following example glo bally enables DSCP Priority se r vice on t h e s w i t c h , m a p s D S C P v a l u e 1 t o C o S v a l u e 0 o n p o r t 5 , a n d t h e n d i s p l a y s all the DSCP P riority settin gs for that por t. Console(config)#map ip dscp 3-130 Console(config)#interface ethernet [...]

C ONFIGURING THE S WI TC H 2-64 Map ping IP Por t Priorit y Y ou ca n also ma p network applic ations to Class of Ser vice values base d on the IP por t number (i.e., TCP/UDP por t number ) in the frame header. Some of the more common TCP ser vice ports inclu de: HTTP: 80, FTP: 21, T elnet: 23 and POP3: 110. Command Attributes • IP Port Priority [...]

C LASS OF S ER VICE C ONFIGURATION 2-65 CLI – T he following example globally enables IP P o rt Priority ser vice on the s witch , maps HTTP traf fic o n por t 5 to CoS value 0, an d then dis plays all the IP Port Pri ority se ttings for that por t. Console(config)#map ip port 3-126 Console(config)#interface ethernet 1/5 3-68 Console(config-if)#m[...]

C ONFIGURING THE S WI TC H 2-66 Port Trunk Conf iguration P orts can be combin ed into an ag greg ate link to increase the band width of a netw ork connectio n where bott lenecks exist or to ensure fau lt recov er y . Y ou can create up to six tr u nks at a time, wi th any sin gle tr unk contai ning up to f o ur ports . The swi tch suppo r ts bot h[...]

P ORT T RUN K C ONFIGURATION 2-67 Dynamically Configuring a Trunk with LACP We b – Click T r unk/LACP Configuration. Select any of the switch ports from the scroll-down por t list and cl ick “ Add.” After you ha ve completed adding por ts to the member list, click “ Apply .” CLI – The follow ing example enabl es LA CP for ports 17 and 1[...]

C ONFIGURING THE S WI TC H 2-68 Statically Configuring a Trunk We b – Click T r unk/T r unk Configuration. Enter a trunk ID of 1-6 in the T r unk field, sel ect any of the switch po r ts from th e scroll-do wn port list, and cl ick “ Add. ” After y ou hav e completed adding ports to the member list, click “ Ap ply .” CLI – This example [...]

C ONFIGURING SNMP 2-69 Configu ring SNMP The switc h includes an onboard ag ent that co ntinuou s ly moni tors the status of it s hardware, as well as the traffic p assing thro ugh its por ts, based on the Si mple Network Man ag ement Protoc ol (SNMP ). A network manageme nt statio n can access this in formatio n using software such as EliteV iew .[...]

C ONFIGURING THE S WI TC H 2-70 CLI – The followi ng example adds the string “spi der man” with read/ write access . Specifying Trap Managers Y ou can specify up to five management stations that will receive authentica tion failure messages and other trap messages from t he switch . Command Usa ge • You c an enable or d isable a uthenticat [...]

M ULTICAST C ONFIGURATION 2-71 CLI – This example adds a t rap manag er and e nables authentication traps. Multic ast Co nfigu ration Multicasting is used to suppor t real-time applic ations such as video conferen cing or stream ing audio . A m ulticast server does not hav e to establish a sep arate connection wit h each client. It merely broadca[...]

C ONFIGURING THE S WI TC H 2-72 The pu rpose of IP multicast filtering is to op timize a switched ne twork’ s perfor manc e, so multicast packets will only be forwarded to those ports conta ining multica st g rou p hosts or multicast route rs/swit ches , instea d of flo oding traffic to all por ts in the su bnet (V LAN). Configur ing IGMP Param e[...]

M ULTICAST C ONFIGURATION 2-73 Command Att ributes • IGMP Status — When enabled, the sw itch will monito r network traffic to determi ne which host s want to receive multicast tr affic. This is also referr ed to as IGMP Snoopin g . (Defau l t: Disabled) • Act as I GM P Qu erie r — When enabl ed, the switch can serve as t he Querier , which [...]

C ONFIGURING THE S WI TC H 2-74 We b – Click IGMP/IGMP Configuration. A djust the IGMP sett ings as required, and then click “ Apply .” (The default setting s are shown below .) CLI – T his example modifies th e settings for multicast filtering, and then disp lays the current s t atus . Interfaces Att ached to a Multicast Router Multicast r[...]

M ULTICAST C ONFIGURATION 2-75 Displaying Inte rfaces Attached to a Mult icast Router Command Attributes • VLAN ID – ID of configured VLAN (1-4094). • Multicast Router List – Multic ast routers dynamic ally discovere d by this switch or those t hat are stat ically assig ned to an in terface on this switch. We b – Clic k IGMP/Multicast Rou[...]

C ONFIGURING THE S WI TC H 2-76 (por t or tr unk) on your switch , you can m anually con figur e that int erfac e to join all the cur rent multicast g roups. This can ensure that multicast traffi c is passed to all the appropr iate inte rfaces w ithin th e switch. Command Attributes • Interface – Activates the Port o r Trunk scroll down list. ?[...]

M ULTICAST C ONFIGURATION 2-77 Displaying Port Mem bers of Multicast Services Y ou can d isplay th e port members associated wit h a specified V LAN and multicast IP address. Command Att ribute • VLAN I D – Selects the VLAN in which to disp lay port members. • Multicast IP Address – The IP addres s for a specifi c multicast service • Mult[...]

C ONFIGURING THE S WI TC H 2-78 CLI – T his example dis plays all the known multicast ser vices supp or ted on VLAN 1 , alon g with the po r ts prop ag ating the cor respondi n g services . The typ e field shows if this entr y was lear ned dynamic ally or was statically config ured. Adding Mu lticast Addresses t o VLANs Multicast filte ring can b[...]

S HOWING D EVI CE S TATI ST ICS 2-79 We b – Click IGMP/IGMP Member Port T able. Specify the interface attached to a multicast ser vice (via an IG MP-enabled sw itch or multicast router), indicate the VLAN that w ill propagate the multicast ser v ice, specify the multicast IP address, and then click “ Add.” After yo u have completed adding po [...]

C ONFIGURING THE S WI TC H 2-80 passing thro ugh each port. A ll values displayed hav e been acc umulated sinc e the last sy stem reboot , and are sh own as co unts per sec ond. Statisti cs are refres hed every 60 sec onds by de fault. Note: RMON groups 2, 3 and 9 can only be accessed usin g SN MP management software such as EliteView. We b – Cli[...]

S HOWING D EVI CE S TATI ST ICS 2-81 CLI – This example show s statistics for por t 13. Console#show interfaces counters ethernet 1/13 3-76 Ethernet 1/13 Iftable stats: Octets input: 868453, Octets output: 34 92122 Unicast input: 7315, Unitcast output: 6 658 Discard input: 0, Discard output: 0 Error input: 0, Error output: 0 Unknown protos input:[...]

C ONFIGURING THE S WI TC H 2-82[...]

U SIN G THE C OMMAND L INE I NTE RF AC E 3-1 C HAPTER 3 C OMMAND L INE I NTERF ACE This ch apter descr ibes how t o use the Com m and Li ne Interface ( CLI). Using the Com m and Line Interface Accessing the CLI When acces sing the man ag ement in terface for t he switch o ver a d irect connec tion to the s er v er’ s consol e port , or via a T el[...]

C OMMAND L IN E I NTE RF AC E 3-2 After c onnecting to the sy stem through the conso le port, the logi n screen displ ays: Telnet Connection T elnet operat es over the IP trans p ort protocol . In this en vironment, y our management station and any ne twor k device y ou want to manage o ver the network must hav e a valid IP address . V alid IP addr[...]

E NTERING C OMMANDS 3-3 After y ou configure t he switch with an IP addre ss, y ou can open a T elnet session by perfo r ming these st e ps: 1. Fr om the remote host, ente r the T elnet comma nd and the IP a ddress of the device you w ant to access . 2. At th e prompt, ent er the user name and sys tem passw ord. The CLI will display the “Vty-0 #?[...]

C OMMAND L IN E I NTE RF AC E 3-4 Y ou can e nter commands as follows : • To enter a simple com mand, ente r the command key word. • To enter multiple commands, enter each command in th e required order. For example, to enable Privil eged Exec comman d mode, and disp lay the star tup configur ation, ent er: Console> enable Console# show star[...]

E NTERING C OMMANDS 3-5 Sho win g Com man ds If you enter a “?” at the command prompt , the system will dis play the first lev el of key words for the current comm and class (No r mal Ex ec or Pri vileged Ex ec) or configur ation clas s (Global, In terface, Line, or VLAN Database). Y ou can also disp lay a list of v alid keywords for a specific[...]

C OMMAND L IN E I NTE RF AC E 3-6 betw een the comma n d and que stion mark.) F or example “ s? ” shows all the keywords sta rtin g with “s .” Negating the Effect of Commands F or many config uration commands you can enter the pre fix keyw ord “ no ” to can cel the effect o f a command o r reset th e configurati on to the default v alue[...]

E NTERING C OMMANDS 3-7 command classes and associated mo des are displa yed in the fo llowing table: Exec Commands When y ou open a ne w console se ssion on swit ch with the user name “gues t,” the system enters Normal Exec command mode ( or guest mo de). Only a limited number of the comman ds are av ailable in thi s mode. Y ou can a ccess all[...]

C OMMAND L IN E I NTE RF AC E 3-8 Configura tion Commands Configuration commands are privileged level commands used to modify switch setting s . T hese comman ds modify the r unning config uration only and are n ot sav ed when the s witch is r ebooted. T o store the r unning config uration in nonvolatile stor age, u se the copy r unning-config star[...]

E NTERING C OMMANDS 3-9 Global Configuration mode. The system prompt will chang e to “Conso le(conf ig-if)#,” “Console(con fig-line )#” or Con sole(co nfig-vla n)” indicat ing that yo u have access priv ileges to the as sociated comm ands . Y ou can u se the end comman d to retur n to the Pr ivilege d Exec mode. Command Line Pr ocessing C[...]

C OMMAND L IN E I NTE RF AC E 3-10 Comman d Groups The syst em commands c an be brok en down i nto the funct ional groups shown below . Command Grou p Descr iption P age General Basic comman ds for en tering privileged access mode, restarting the system, or q uitting the CLI 3-1 2 Flash/File Ma nages code imag e or switch config uration files 3-18 [...]

C OMMAND G RO UP S 3-11 Note that the access mode shown in the followin g tables is in dicated by thes e abbr eviat ions: NE (Nor mal Exec) PE (Privilege d Exec) GC (Global Con figuration) IC (Inter face Con figu rati on) LC (Line Configuration ) VC (VLAN Datab ase Configuration) Priority Sets port priori ty for untagged f rames, relative we ight f[...]

C OMMAND L IN E I NTE RF AC E 3-12 General Commands enable Use th i s comm and to acti vate Pr ivileged Ex ec mode . In pri vileged mode, addition al commands are av ailable, an d cer tain commands dis p lay additiona l infor mation. Se e “Unde rstanding Comman d Modes” on pag e 3-6. Syntax enab le [ leve l ] leve l - Privilege level to log int[...]

G ENERAL C OMMANDS 3-13 Command Usage • “super” is the default pass word required to ch ange the command m ode from Norma l Exec to Pr ivileged Exe c. (To set th is passw ord, see th e enable password command on page 3-27.) • T he “#” c harac ter is append ed to th e end of the pr ompt to indicat e that the syste m is in privileged acce[...]

C OMMAND L IN E I NTE RF AC E 3-14 Command Usage The “>” c h aracte r is appende d to the end of the prompt to indica te that t he system is i n normal access mo de. Example Related Commands enable configure Use this comman d to activate Glo bal Configu ration m ode. Y ou must ente r this mo de to modif y any s etti ngs on the s witch. Y ou [...]

G ENERAL C OMMANDS 3-15 show h ist ory Use this command to s how the co ntents of t h e comman d history buffer . Default Setting None Command Mode Nor m al Exec , Privileged Exec Command Usage The history buffer size is fixed at 20 co mmands . Example In this exam ple, th e show his tor y com mand lists the con tent s of th e comma nd history buff[...]

C OMMAND L IN E I NTE RF AC E 3-16 reload Use t his comm and to re start the sy stem. Note: When th e system is restarted, it will alwa ys run the Power-On Self-Test. It will also retain all config uration informatio n stored in non-vola tile memory by the co py running-config startup-config command. Default Setting None Command Mode Pri vileged Ex[...]

G ENERAL C OMMANDS 3-17 Example This examp le shows ho w to return to the Privi leged Exec mode from the Interface Config uration mode: exit Use this command to retur n to th e previous configuration mo de or exit the configuration prog ram. Default Setting None Command Mode Any Example This examp le shows ho w to return to the Privi leged Exec mod[...]

C OMMAND L IN E I NTE RF AC E 3-18 Command Usage The quit and exit comm ands can bot h exit the co nfiguratio n program. Example This e xample sh ows how to qui t a CLI sessio n: Flash/File Commands These comma nds are used t o manage the sy stem code or configuration files . copy Use th is command to mov e (uploa d/downlo ad) a code im ag e or con[...]

F LASH /F ILE C OMMANDS 3-19 Syntax copy file { file | r unning-config | star tup-confi g | tftp } copy runni ng-config { file | star tup-config | tftp } copy startup-config { fil e | r unning-config | tftp } copy tftp { fi le | r unning-config | star tup-co nfig } • file - Keyword that allows you to copy to/from a file. • running-config - Keyw[...]

C OMMAND L IN E I NTE RF AC E 3-20 Example The foll owing example sh ows ho w to upl oad the co nfiguratio n setting s to a file on the TFTP ser ver: Th e following e xamp le shows how to copy the r un ning co nfigur ation to a star tup file. Th e following examp le shows how to download a configuration file: delete Use this co mmand to delete a fi[...]

F LASH /F ILE C OMMANDS 3-21 Command Mode Pri vileged Exec Command Usage • If the file type is used for system startup, then this file cann ot be delet ed. • “Factory_D efault_Con fig.cfg” c annot be d eleted. Example This e xample shows how to delete the test2.cfg configuration file from Flash memor y . Related Commands dir dir Use this co[...]

C OMMAND L IN E I NTE RF AC E 3-22 Command Mode Pri vileged Exec Command Usage • If you ente r the command dir without an y parame ters, t he system displays all files. • F ile information is shown be low: Example The following example shows how to display all file infor m ation: whichboot Use this comman d to display which file s booted. Defau[...]

F LASH /F ILE C OMMANDS 3-23 Example This examp le shows the infor mation di splayed b y the whichboot command . See the tabl e on the pre vious page for a de scription o f the file infor mation displayed by this command. boot system Use this command to s p ecify t he file or image us ed to start up the sys tem. Syntax boot system { boot-rom | conf[...]

C OMMAND L IN E I NTE RF AC E 3-24 Example Related Commands dir whichboot System Mana gemen t Comman ds These comman ds are used to control sys tem logs , passw ords , user name , browser config urat ion optio ns, and disp lay or c onfigu re a varie ty of ot her system inf or ma tion. Console(config)#boot system config: start up Console(config)# Co[...]

S YSTE M M ANAGEME NT C OMMANDS 3-25 hostname Use this co mmand to specify or modi fy the host name for thi s device. Use the no for m to re store th e default host nam e. Syntax hostname name no hostname name - T he name of this host. (Maximum length: 255 c h aracters) Default Setting None Command Mode Global Configuratio n Example System St atus [...]

C OMMAND L IN E I NTE RF AC E 3-26 username Use this command to re quire user name au thenticati on at login. Use the no form to remov e a user name . Syntax user name nam e { acc ess-lev el level | nopassw ord | passw ord { 0 | 7 } password } no user name name • name - The name of the use r. Up to 8 charact ers, case sensitive. Maximum number of[...]

S YSTE M M ANAGEME NT C OMMANDS 3-27 Command Usage The encr ypted password is required for compatiblity with leg acy pas sword settings (i.e ., plain text or en cr ypted) when readi ng the conf iguration file duri ng system bo otup or when d ownlo ading the config urati on fil e from a TFT P se r ver . Th ere is n o nee d for you to man ually confi[...]

C OMMAND L IN E I NTE RF AC E 3-28 Command Usage The encr ypted password is required for compatiblity with leg acy pas sword settings (i.e ., plain text or en cr ypted) when readi ng the conf iguration file duri ng system bo otup or when d ownlo ading the config urati on fil e from a TFT P se r ver . Th ere is n o nee d for you to man ually confi g[...]

S YSTE M M ANAGEME NT C OMMANDS 3-29 Related Commands ip http se r ver ip http server Use this command to al low thi s device to be monitored or configured from a b rowser . Use the n o for m to disa ble this f unction. Syntax ip http ser ver n o ip h t t p s e rv e r Default Setting Enabl ed Command Mode Global Configuratio n Example Related Comma[...]

C OMMAND L IN E I NTE RF AC E 3-30 Command Mode Global Configuratio n Command Usage Th e log ging pr ocess cont rols e r ror messag es to be se nt to S NMP trap recei vers . Y ou can use the l og ging h istor y command to contro l the type o f e rr o r m e s s a ge s t h a t a r e s t o r e d i n m e m o ry a n d s e n t t o a s p e c i f i e d SNM[...]

S YSTE M M ANAGEME NT C OMMANDS 3-31 • level - One of the leve l arguments l i sted b elow. Messag es sent inclu de the selected level up th rough level 0. Default Setting Flash: errors (lev el 3 - 0) RAM: warnings ( level 7 - 0) Command Mode Global Configuratio n Command Usage Sending s yslog messag e s to the S NMP ne twork manag eme nt statio [...]

C OMMAND L IN E I NTE RF AC E 3-32 clear logging Use this command to clear mes sag es fr om the log buffer . Syntax clear lo gging [ fl a s h | ram ] • flash - Even t histo ry stor ed in Flas h memo ry (i.e. , perma nent memory). • ram - Event history stored in temporary RAM (i.e., m emory fl ushed on powe r reset) . Default Setting None Comman[...]

S YSTE M M ANAGEME NT C OMMANDS 3-33 Default Setting None Command Mode Pri vileged Exec Example show startup- config Use this command t o display the configuration file s tored in non-volatile memor y th at is used to star t up the syst em. Default Setting None Command Mode Pri vileged Exec Console#show logging flash Syslog logging: Disable History[...]

C OMMAND L IN E I NTE RF AC E 3-34 Example Related Commands show r unn ing- config Console#show startup-config building startup-config, please wait..... ! ! snmp-server community private rw snmp-server community public ro ! username admin access-level 15 username admin password 7 21232f297a57a5a 743894a0e4a801fc3 username guest access-level 0 usern[...]

S YSTE M M ANAGEME NT C OMMANDS 3-35 show runnin g-config Use this command to d isplay t h e conf igura t ion infor m ation cur rently in use . Default Setting None Command Mode Pri vileged Exec Command Usage Use this command in conj unction with the show star tup-config command to com pare the infor mation in r unn ing memor y to the infor mation [...]

C OMMAND L IN E I NTE RF AC E 3-36 show system Use this command to disp lay system infor mation. Default Setting None Command Mode Nor m al Exec , Privileged Exec Example show u ser s Shows all activ e console and T elne t sessions, including user name, idle time, and IP address of T elne t client. Default Setting None Command Mode Nor m al Exec , [...]

S YSTE M M ANAGEME NT C OMMANDS 3-37 Example show ve rsio n Use this command to d i spla y hardwar e and so ftware ver s ion infor m ation for the system. Default Setting None Command Mode Nor m al Exec , Privileged Exec Example Console#show users Username accounts: Username Privilege -------- --------- guest 0 admin 15 Online users: Line Username [...]

C OMMAND L IN E I NTE RF AC E 3-38 RADIUS Clie nt Commands Re m ote Authen tication Dia l-in User Ser vice (RA DIUS) is a system th at uses a c entral server r unni n g RADIUS soft ware to co ntrol access to RADIUS -aware dev ices on th e network. A RADIUS ser ver conta ins a database of multiple user name/pass w o rd pairs with asso ciated privile[...]

RADIUS C LIENT C OMMANDS 3-39 Default Setting None Command Mode Global Configuratio n Example Related Commands username - for s etting the local user names and pa sswo rds radius-server h ost Use this command to spe cify the RADIUS s er v er. Us e the no for m to restore the defau lt. Syntax radius-server host host_ip_address no radius-server host [...]

C OMMAND L IN E I NTE RF AC E 3-40 radius-server p ort Use th i s comm and to set the RADIUS server netw ork port. Use the no for m to restore the default. Syntax radius-ser ver port por t_number no radius-server por t por t_n um ber - RADIUS ser ver UDP port used for authentication messages . (Rang e: 1-65535) Default Setting None Command Mode Glo[...]

RADIUS C LIENT C OMMANDS 3-41 Command Mode Global Configuratio n Example radius-server re transmit Use this command to s et the num ber of retr ies . Use th e no for m to restore the defau lt. Syntax radius-server retransmit number_of _ retries no radius-server retransmit number_ of_r etrie s - Number of times the switch w ill try to authenticate l[...]

C OMMAND L IN E I NTE RF AC E 3-42 radius-server t imeout Use this c ommand to se t the inter val between trans mitting authentica tion request s to the RADIUS se r ver . Use the no for m to restor e the defau lt. Syntax radius-ser ver timeout number_of _secon ds no radius-server timeout number_of_ seconds - N umber of seconds th e swi tch waits fo[...]

SNMP C OMMANDS 3-43 SNMP Commands Controls access to this sw itch from SNMP manag ement stations, as well as the er ror ty pes sen t to t rap ma nage rs. snmp-serv er communit y Use this command to d efine the comm unity acce ss string for the Simple Network Man age ment Prot ocol. Use the no form to remov e the speci fied comm unity string . Synta[...]

C OMMAND L IN E I NTE RF AC E 3-44 Default Setting • public - Read-only access. Authorized manage ment stations are only able to retrieve MIB objects . • private - Read-write access. Authoriz ed m anagement station s are able to both r etrieve and modify MI B objects . Command Mode Global Configuratio n Command Usage The fi rst snmp-ser ver com[...]

SNMP C OMMANDS 3-45 Example Related Commands snmp-server lo cation snmp-serve r location Use this command to s et the syst em location string . Use the no for m to remov e the location s tring . Syntax snmp-ser ver location te xt no snmp-ser ver location text - String that de scribes th e system loc ation. (Maximum leng th: 255 ch aracters) Default[...]

C OMMAND L IN E I NTE RF AC E 3-46 Syntax snmp-server host host -addr community-string no snmp-ser ver host host-addr • host-ad dr - Name or Internet address of th e host (the targ eted recipient) . (Maximum host ad dresses: 5 trap destination ip addres s entries ) • community-string - Password-like commun ity stri ng sent with th e notifi cati[...]

SNMP C OMMANDS 3-47 Example Related Commands snmp-server enab le traps snmp-serve r enable traps Use this command t o enable this device to send Simple Ne twork Manag eme nt Prot ocol traps or info r ms (S NMP not ificat ions). Use the no for m to disable S NMP notific ations . Syntax snmp-server enable traps [ authenticati on | link-up-down ] no s[...]

C OMMAND L IN E I NTE RF AC E 3-48 comman d with no keywords, all notifi cation types a re en abled . If you enter th e com mand wit h a keyword, only the not ificat ion ty pe relate d to that key word is enable d. The snmp-ser ver enable tr aps command is us ed in conjunct ion with the snm p-s er ver h ost command. Us e the snmp-ser ver host comma[...]

IP C OMMANDS 3-49 Example IP Commands An IP address ma y be used fo r management acce ss to the switch o ver y our netw ork. By default, the switch us es DHCP to assign IP settings to VLAN 1 on the swit ch. If you wish to manually configure IP settings, you need to change the swit ch’ s user -specified defaults (IP add ress 0.0.0.0 and netmask 25[...]

C OMMAND L IN E I NTE RF AC E 3-50 ip address Use th i s comma nd to set the IP address fo r this device . Use the no for m to resto re the default I P address . Syntax ip address { ip-addr ess netmask | bootp | dhcp } no ip address • ip-address - IP address • netm as k - Network mask for t he associated IP s ubnet. This mask ident ifies the ho[...]

IP C OMMANDS 3-51 separated by periods. A nything ou tside this format will not be accepted by the configur ation pro gram . • If you select t h e bootp or dhcp option, I P is enabled but will not functi on until a BO OTP or DHCP repl y has been rec eived. Reques ts will be broadcast pe riodically by this devic e in an effort to learn its IP addr[...]

C OMMAND L IN E I NTE RF AC E 3-52 Command Usage • DHCP requires th e server to reassign the client ’s last address if available. • If the BOOTP or D HCP serve r has been moved t o a differ ent domain, the netw ork portion o f the add ress pro vided to th e client w ill be based on this ne w domain. Example In the fo llowing ex ample, th e de[...]

IP C OMMANDS 3-53 Command Usage A ga teway must be defined if th e manag ement st ation is lo cated in a different IP segment. Example The follo wing example defines a default gatew ay for this d evice: Related Commands show ip redirects show ip interface Use this command to d isplay t he settings of an IP int erface. Default Setting All interfaces[...]

C OMMAND L IN E I NTE RF AC E 3-54 show ip redirects Use this command to sho w the default gatew ay configur ed for this devic e. Default Setting None Command Mode Pri vileged Exec Example Related Commands ip defa ult-gatew ay ping Use this command to se nd ICMP ech o request pack ets to another no de on the netw ork. Syntax ping host [ co unt coun[...]

IP C OMMANDS 3-55 Command Usage • Use the pi ng command t o see if anot her site on the network can be reached. • Following are some resul ts of the p ing command: • Normal res ponse -The nor mal response occur s in one to te n seconds, depe nding on n etwork t raffic. • Destinatio n does not r espond - If th e host does not resp ond, a “[...]

C OMMAND L IN E I NTE RF AC E 3-56 Line Co mma nds Y ou can access the onboard c o nfiguration program by attaching a VT100 compa t ible de vi ce to the ser ver’ s serial p or t. These co m mands ar e used to set com munication p arameters for the serial po r t or a virtual ter minal. Note that T elnet i s considered a vir t ual ter minal c onnec[...]

L INE C OMMANDS 3-57 line Use this command to ide ntify a specifi c line for con figuration, an d to proce ss subs eque nt line config uratio n comm ands. Syntax line { console | vty } • console - Consol e terminal l i ne. • vty - Virtual termin al for remote console acce ss. Default Setting There is n o default line. Command Mode Global Config[...]

C OMMAND L IN E I NTE RF AC E 3-58 login Use this command to enab le passw ord chec king at login. Use the no for m to di sable passw ord chec king and al low con nection s without a passw ord. Syntax login [ local ] no login local - Selec ts local password checking . Authent ication is base d on the user name s pecif ied wi th the user name comman[...]

L INE C OMMANDS 3-59 password Use this command to s p ecify t he passw ord for a li n e. Use the no for m to remove the password . Syntax pass word { 0 | 7 } passw ord no pass word -{ 0 | 7 } - 0 m ean s plai n pa sswo rd, 7 mea ns en cryp te d pas swor d - password - Char acter string th at specifies t h e line password. The string can contain any[...]

C OMMAND L IN E I NTE RF AC E 3-60 Related Commands login password-thr esh exec-timeout Use this com mand to set the inter val that the s ystem wait s until use r input is det ect ed. Use the no for m to remo ve the tim eout defin ition. Syntax exec-timeout se conds no exec-timeout seconds - In teg er that spec ifies the number of sec onds . (Range[...]

L INE C OMMANDS 3-61 password-thr esh Use this comman d to se t the password intr usion t hresho ld which l imits th e number of failed logo n attempts. Use the no form to remov e the threshold value. Syntax passw ord-thresh thr esho ld no passw ord-thresh thr eshold - The numb er of allo wed passw ord att empts . (Range: 1-120; 0: no threshold) De[...]

C OMMAND L IN E I NTE RF AC E 3-62 silen t-tim e Use this c ommand to se t the amou nt of time the manag eme nt conso le is inacce ssible after th e number of unsuccessful l og on attemp ts exceed s the threshold set by th e pas sword -thr e sh comm and. Us e the no for m to remov e the silent ti me value . Syntax silent-tim e secon ds no silent-ti[...]

L INE C OMMANDS 3-63 databits Use this comma nd to se t the number of d ata bits per charact er that are inter prete d and g e nera ted by th e con sole por t. Us e the no fo r m to r est ore the de fault value. Syntax databi ts { 7 | 8 } no databits • 7 - Seven data bits pe r cha racter . • 8 - Eight data bits pe r charac ter. Default Setting [...]

C OMMAND L IN E I NTE RF AC E 3-64 parity Use this comman d to def ine generati on of a par ity bit. Use the no for m to restore the defaul t settin g . Syntax parity { none | even | odd } no parity • none - No parity • even - Even parity • odd - Odd parity Default Setting No parity Command Mode Line Configuration Command Usage Communic ation[...]

L INE C OMMANDS 3-65 bps - Ba ud rate in bits per se cond. (Options: 9600, 19200, 38400, 5760 0, 115200 bps) Default Setting 9600 bps Command Mode Line Configuration Command Usage Set the speed to ma tch the b aud rate of t he device conn ected to the seria l port . Some baud rates available on d evice s conne cted to th e por t might not be supp o[...]

C OMMAND L IN E I NTE RF AC E 3-66 Example T o specify 2 sto p bits , enter this command: show li ne Use this c ommand to di splay the te r min al line’ s paramete rs . Syntax show li ne [ console | vty ] • console - Consol e terminal l i ne. • vty - Virtual termin al for remote console acce ss. Default Setting Shows all li nes Command Mode N[...]

I NTERFACE C OMMANDS 3-67 Interface Commands These comman ds are used to displa y or set comm unication parameters fo r an Ethernet port, a g greg ated link, or VLAN . Command Fun ction Mode Page interface Configures an interface type and enters interface configurat ion mode GC 3-68 descriptio n Adds a description t o an interface co nfigurat ion I[...]

C OMMAND L IN E I NTE RF AC E 3-68 interface Use th i s comm and to confi gure an interf ace type and enter interf ace config urati on mode. Syntax interf ace interface interface • ethernet unit / port - unit - This is device 1. - port - Port number. • port-channel chann el-id (Range: 1-6) • vlan vlan-id (Range: 1-4094) Default Setting None C[...]

I NTERFACE C OMMANDS 3-69 Default Setting None Command Mode Interfac e Con figurat ion (Ethe rn et, Port Chan nel) Example Th e fo llowing e xamp le a dds a de scri ption to Ether net po rt 2 5. speed-duplex Use this command to co nfigure the speed and d uplex mode of a giv en interface when auto neg otiat ion is disabl ed. Use the no for m to re s[...]

C OMMAND L IN E I NTE RF AC E 3-70 Command Mode Interf ace Configur ation (Eth er net, P or t Channel ) Command Usage T o force operat ion to the spe ed and duplex mo de specified in a spee d-du ple x co mman d, use t he no neg otiation command t o disable auto-neg otia tion on th e se lected interfa ce. Example The following example configures por[...]

I NTERFACE C OMMANDS 3-71 Example The follo wing example confi gures port 1 1 to use autone g otiatio n. capabilities Use this command t o advertise the por t capabilitie s of a give n interface during autonegotiati on. Use the no for m with parame ters to re move an advertised capability , or the no for m withou t parame ters to r estore th e defa[...]

C OMMAND L IN E I NTE RF AC E 3-72 Example The fo llowing example configures E the r net port 5 capabilities to 100half, 100full and flow control. flowcontrol Use this command to en able fl ow control. Use th e no for m to disabl e flo w co ntro l. Syntax fl o w c o n t ro l no f l ow contr ol Default Setting Flow contr o l enabled Command Mode Int[...]

I NTERFACE C OMMANDS 3-73 • Due to a hard ware limitation, flo w control only works on those port s located in the same chip (ports 1-24, 49 and ports 25-48, 50). Cross -chip flow co ntrol do es no t work . Example The follo wing example enables flow control on port 5. Related Commands capabilities (f lowcontrol, symmetri c) shutdown Use this com[...]

C OMMAND L IN E I NTE RF AC E 3-74 Example The follo wing example disa bles port 5. switchport broadcas t Use this command to con figure broadcas t storm contr ol. Use the no for m to disa ble broadcast st or m contr ol. Syntax swi tc hpor t broadcast packet-rate rate no switchpor t broadcast rate - Threshol d level as a rate; i.e., pac kets pe r s[...]

I NTERFACE C OMMANDS 3-75 Example The following shows ho w to configure broadcast storm control at 600 packets pe r sec ond o n por t 5: show i nterface s st atus Use this co mmand to dis play the st atus for an inter face. Syntax show in te rfaces status interface interface • ethernet unit / port - unit - This is device 1. - port - Port number. [...]

C OMMAND L IN E I NTE RF AC E 3-76 Example show interfaces counters Use this co mmand to d i spla y statistics for an interface . Syntax show interfaces counters interface interface • ethernet unit/p or t - unit - This is device 1. - port - Port number. • port-channel chann el-id (Range: 1-6) Default Setting None Command Mode Nor m al Exec , Pr[...]

I NTERFACE C OMMANDS 3-77 Example show i nterfac es sw itch port Use this command t o display advanced interface configuratio n settings. Syntax show interfaces s w itchpor t [ interface ] interface • ethernet unit / port - unit - This is device 1. - port - Port number. • port-channel chann el-id (Range: 1-6) Default Setting Shows all inte rfac[...]

C OMMAND L IN E I NTE RF AC E 3-78 Command Mode Nor m al Exec , Privileged Exec Example This exampl e shows the configuration s etting for Et her net port 25. Addre ss T able Comma nds These comma nds are used t o confi gure the addre ss table for filtering speci fied addres ses, display ing current entri es, clearing t h e ta ble, or setting the a[...]

A DDRESS T ABL E C OMMANDS 3-79 bridge address Use this command to map a static address to a port in a VLAN . Use the no form t o remo ve an addres s. Syntax bridge bridge-group address mac-address vlan vlan-id forw ard in terface [ action ] no bridge bridge-gro up address add r ess vlan vlan -id • bridge-group - Bridge group index (brid ge 1). ?[...]

C OMMAND L IN E I NTE RF AC E 3-80 • Static address es are bound to the assigned interface and will not be mov ed. When a static addr ess is seen on another i nterface, the address will be ignored and will not be writte n to the address table. Example show b ridge Use th i s comm and to view clas ses of entri es in the bri dge-forwardin g datab a[...]

A DDRESS T ABL E C OMMANDS 3-81 Command Usage • The MAC A ddress Tabl e contains the MAC add resses ass ociated wi th each int erface. Note tha t the T ype field may in clude the follo wing types: • Learned - dyn amic address entries • Perm anent - sta tic entry • Delete-o n -rese t - stat ic entry to be deleted when system is re set • Th[...]

C OMMAND L IN E I NTE RF AC E 3-82 bridge-group aging- time Use th i s comm and to set t he aging tim e for entrie s in the addr ess table . Use the no form to r estore t he defaul t aging time. Syntax bridge-group bridge-gr oup agi ng-t ime se conds no bridge-group bridge-group agi ng -t im e • bridge-group - Bridge group index (brid ge 1). • [...]

S PANNING T REE C OMMANDS 3-83 Command Mode Pri vileged Exec Example Spanni ng Tree Com man ds This secti on includes co mmands that configure th e Spanning T ree Alg orith m (STA) globally for the switch, and com mands tha t configure ST A for the select ed interface . Console#show bridge group 1 aging-time Aging time: 300 sec. Console# Command Fu[...]

C OMMAND L IN E I NTE RF AC E 3-84 bridge spanning-t ree Use this com mand to enable STA globally for th e switch. Use the no fo r m to dis able i t. Syntax bridge bridge-group spanning-tree no bridge bridge-gro up spanning-tree brid ge-g r oup - Bridg e g roup in dex (bridg e 1). Default Setting Spanning tree is enabled. Command Mode Global Config[...]

S PANNING T REE C OMMANDS 3-85 bridge forward-time Use this command to co nfigure the spanning tre e bridge forwa rd time globally for this sw itch. Use the no for m to rest ore the d efault. Syntax bridge bridge-group forw ar d-time sec onds no bridge bridge-gro up fo rwa rd-tim e • bridge-group - Bridge group index (brid ge 1). • second s - T[...]

C OMMAND L IN E I NTE RF AC E 3-86 bridge hello-time Use th i s comm and to confi gure the span ning tree bri dge hello time globally for this sw itch. Use the no for m to rest ore the d efault. Syntax bridge bridge-group hello-time time no bridge bridge-gro up hell o -time brid ge-g r oup - Bridg e g roup inde x (bridg e 1). time - T i m e i n s e[...]

S PANNING T REE C OMMANDS 3-87 • The minimum value is the higher of 6 or [2 x (hello-t ime + 1)]. • The maxim um value is the lowe r of 40 or [2 x (for ward-time - 1)]. Default Setting 20 seconds Command Mode Global Configuratio n Command Usage This command s ets the maxim um time (in s econds) a devi ce can wait without receiving a co nfigura [...]

C OMMAND L IN E I NTE RF AC E 3-88 Command Mode Global Configuratio n Command Usage Bridge prio rity is used in sele cting the root d evice, root por t, and designa ted por t. T he d evice wi th the h ighes t priorit y beco mes th e STA root devi ce. How ever , if all devi ces hav e the same prior ity , the device with the lowe st MA C address will[...]

S PANNING T REE C OMMANDS 3-89 Command Usage • This comman d is used by the spanning-tree al gorithm to determine the best pa th between devi ces. Therefor e, lower values sh ould be assign ed to ports att ached to faster media , and highe r values assigned to ports with slower media. • Path cost t akes precedence o ver port priori ty. Example [...]

C OMMAND L IN E I NTE RF AC E 3-90 Example bridge-gro up portfast Use this co mmand to set a port to fast for warding . Use the no form to disable fast for wardi ng . Syntax bridge-group bridge-gr oup por tfast no bridge-group bridge-group por tfast brid ge-g r oup - Bridg e g roup in dex (bridg e 1). Default Setting Disabled Command Mode Interf ac[...]

S PANNING T REE C OMMANDS 3-91 show bridge group Use this command to s how the s p anning tree configur ation. Syntax show bri dge g roup bri dge -gr o up [ in te rface ] • bridge-group - Bridge group index (brid ge 1). • interface • ethernet unit / port - unit - This is device 1. - port - Port number. • port-channel chann el-id (Range: 1-6[...]

C OMMAND L IN E I NTE RF AC E 3-92 Example Console#show bridge group 1 ethernet 1/11 Bridge-group information ----------------------------------------- --------------- Spanning tree protocol :ieee8021d Spanning tree enable/disable :enable Priority :32768 Hello Time (sec.) :2 Max Age (sec.) :20 Forward Delay (sec.) :15 Designated Root :32768.0000e90[...]

VLAN C OMMANDS 3-93 VLAN Commands A VLAN is a g rou p of por t s that ca n be locat ed any where in the network, but co m mun icate as thoug h they belong to the same p hysical segment. This secti on describes co mmands used to create VLAN g roups , add port members , specify ho w VLAN tagging is used, and enable auto m atic VLAN reg istration for [...]

C OMMAND L IN E I NTE RF AC E 3-94 vlan database Use this command to en ter VLAN databas e mode. All commands in thi s mode will take effect immediate ly . Default Setting None Command Mode Global Configuratio n Command Usage • Use the VLAN databas e command mode to add, chan g e, and dele te VLANs. After fi nishing co nfiguratio n changes, y ou [...]

VLAN C OMMANDS 3-95 vlan Use this command to co nfigure a VLAN . Use th e no for m to restore the default se tting s or delete a VLAN . Syntax vlan vlan-id [ name vl an-name ] media ether net [ state { ac tive | suspend }] no vlan vla n-id [ name | state ] • vlan -i d - ID o f conf igured VLAN. (Ra n ge: 1-4094, n o leading zeroes) • name - Key[...]

C OMMAND L IN E I NTE RF AC E 3-96 Example The following example adds a V LAN , using vlan-id 105 and name RD5. The VL AN is act iv ated b y defaul t. Related Commands show vlan interface vlan Use this co mmand to enter int erface configurati on mode for VLANs , and configure a physical interface . Syntax interface vlan vlan- id vlan-id - ID of the[...]

VLAN C OMMANDS 3-97 switch port mode Use this command to co nfigure the VLAN members hip mode for a p or t. Use the no for m to restore the default. Syntax swi tc hpor t mode { tr unk | hy bri d } no switchpor t mode • trunk - Specifies a po rt as an end-po int for a VLAN trunk. A t runk is a direct link betwee n two switches, so the port transmi[...]

C OMMAND L IN E I NTE RF AC E 3-98 switchport acceptable-frame- types Use this command to config ure the acceptable fra m e types for a port. Use the no for m to restor e the defa ult. Syntax swi tc hpor t acceptable-frame-types { all | tagged } no switchpor t acceptable-fr am e-types • all - The p ort passes all fr ames, tagged or u ntagged. •[...]

VLAN C OMMANDS 3-99 switchport ingress-filter ing Use this command to en able ingress filtering for an in terf ace. Use the no for m to restore the default. Syntax swi tc hpor t ingr ess-filtering no switchpor t ingress-filtering Default Setting Disabled Command Mode Interfac e Con figurat ion (Ethe rn et, Port Chan nel) Command Usage • If ingre [...]

C OMMAND L IN E I NTE RF AC E 3-100 switchport native vlan Use this c ommand to c onfigure th e PVID (i. e., default VLA N ID) for a port. U se the no for m to r estore the de fault. Syntax swi tc hpor t nativ e vlan vl an- id no switchpor t nativ e vlan vlan-id - Default VLAN ID for a p or t. (Range: 1-4094, no leading zero es) Default Setting VLA[...]

VLAN C OMMANDS 3-101 switchport allowed vlan Use this command to co nfigure VLA N groups on th e selected in terface . Use the no for m to restore the default. Syntax swi tc hport allowed vlan { add vl an- list [ ta gged | untagged ] | remov e vlan-list } no switchpor t allo wed vlan • add vlan-lis t - List of VLAN ident ifiers to add. • rem ov[...]

C OMMAND L IN E I NTE RF AC E 3-102 switchport forbid den vlan Use this command to co nfigure forbid den VLANs . Use the no for m to remov e the list of forbidden V LANs . Syntax swi tc hpor t forbidden vlan { add vlan-list | remo v e vlan -l ist } no switchpor t forbidden vlan • add vlan-lis t - List of VLAN IDs to add. • rem ove vlan-l ist - [...]

VLAN C OMMANDS 3-103 show v lan Use this command t o show VLAN infor matio n. Syntax show v lan [ id vl an- id | name vlan-name ] • id - Keyw ord to be followe d by the VLAN ID. - vlan -i d - ID of the configured VLAN. (Range: 1-4094, no leading zeroe s) • name - Keyword to be follow ed by the VLAN nam e. - vlan -na me - ASCI I str ing from 1 t[...]

C OMMAND L IN E I NTE RF AC E 3-104 GVRP and Bridg e Exte nsio n Comma nds GARP VLA N Registratio n Prot ocol de fines a way for switches to exc hang e VLAN info r mation in order to automatically registe r VLAN members on interface s across t h e netw ork. This secti on describes how to enable GVRP for individual interfaces and globally for the sw[...]

GVRP AND B RIDGE E XTENSION C OMMANDS 3-105 Command Mode Interfac e Con figurat ion (Ethe rn et, Port Chan nel) Example show gvrp configuration Use this command t o sho w if GVRP is enab l ed. Syntax show gvr p configuration [ interface ] interface • ethernet unit / port - unit - This is device 1. - port - Port number. • port-channel chann el-i[...]

C OMMAND L IN E I NTE RF AC E 3-106 garp timer Use this command to s et the value s for the join , leav e and leav eall time rs. Use the no form to res tore the timers’ de fault v alues . Syntax gar p timer { jo in | leave | leaveal l } timer_value no gar p timer { join | leav e | leavea ll } •{ join | leave | lea vea ll } - Whic h timer to set[...]

GVRP AND B RIDGE E XTENSION C OMMANDS 3-107 Note: Set GVRP ti m ers on all Layer 2 device s connected in the same network to the same values. Otherwise, GV RP will not operate success fully. Example Related Commands show g arp time r show garp t imer Use this command to s how the G ARP timers for the selected interface . Syntax show garp timer [ in[...]

C OMMAND L IN E I NTE RF AC E 3-108 Related Commands gar p t ime r bridge-ext gvrp Use this co mmand to enab le GVRP . Use the no form to disable it. Syntax bridge-ext gvr p no bridge-ext gvr p Default Setting Disabled Command Mode Global Configuratio n Command Usage GVRP defines a way for switches to exchange VLAN infor mat ion in order to registe[...]

IGMP S NOOPING C OMMANDS 3-109 Example IGMP Snoo ping Comman ds Th is switch us es IGM P (In ter net Group Ma nag ement P rot ocol) to q uer y for any a ttached ho sts that w ant to recei ve a spec ific multi cast ser vice. It ident ifies the po r ts containi ng hosts requesting a se r vice and sen ds data out to those ports onl y . It then propaga[...]

C OMMAND L IN E I NTE RF AC E 3-110 ip igmp snooping Use this command to enable IGMP snooping on th is switch. Use t he no for m to disable it. Syntax ip igm p snooping no ip igmp snooping Default Setting Enabl ed Command Mode Global Configuratio n Example The follo wing exam ple enables I GMP snooping . ip igmp snoopi ng query -int erv al Configur[...]

IGMP S NOOPING C OMMANDS 3-111 ip igmp snooping vlan static Use this comma nd to add a port to a multicast g rou p . Use th e no for m to remov e the port. Syntax ip igm p snooping vlan vla n-i d static ip-address interface no ip igmp snooping vlan vlan-id st at ic ip-address interface • vlan -i d - VLAN ID (Range: 1-4094) • ip-address - IP add[...]

C OMMAND L IN E I NTE RF AC E 3-112 ip igmp snooping version Use th i s comm and to conf igure the IGMP s nooping v ersion. Use the no for m to restore the default. Syntax ip igm p snooping version { 1 | 2 } no ip igmp snooping version • 1 - IGMP Version 1 • 2 - IGMP Version 2 Default Setting IGMP V ersion 2 Command Mode Global Configuratio n C[...]

IGMP S NOOPING C OMMANDS 3-113 Command Mode Pri vileged Exec Example Th e following shows the cur re nt IGMP s noopin g con figurat ion: show bridge multicast Use this command t o show known multicast addresses . Syntax show bri dge bridge-gr oup multicast [ vlan vlan-id ] [ user | igmp- snoopi ng ] • bridge-group - Bridge group index. • vlan -[...]

C OMMAND L IN E I NTE RF AC E 3-114 Example The following shows the multicast entries lear ned through IG MP snoopin g for brid ge gr oup 1 , VLAN 1: ip igmp snooping querier Use this command to enable the switc h as an IG MP snooping que rier. Use the no for m to disable it. Syntax ip igm p snooping q uerier no ip igmp snooping querier Default Set[...]

IGMP S NOOPING C OMMANDS 3-115 ip igmp snooping query-count Use this command to co nfigure the quer y count. Use the no for m to restore the defau lt. Syntax ip igmp snooping quer y-count count no ip igmp snooping quer y -count count - T he maxi mum n umber of q ueries iss ued for wh ich th ere has been no r esponse b efore th e switch takes action[...]

C OMMAND L IN E I NTE RF AC E 3-116 Command Mode Global Configuratio n Example The following shows ho w to configure the query inter val to 100 seconds: ip igmp snooping query-max- response-time Use th i s comm and to conf igure the snoo ping report dela y . Use th e no for m of this c ommand to rest ore t he defa ult. Syntax ip igmp snooping quer [...]

IGMP S NOOPING C OMMANDS 3-117 Related Commands ip igmp sno oping version ip igmp snooping query-ti me-out Use this command to co nfigure the snooping query-timeo ut. Use the no for m of this c ommand to rest ore t he defa ult. Syntax ip igm p snooping q uer y-time-out se cond s no ip igmp snooping quer y -time-out seconds - T he time the switch wa[...]

C OMMAND L IN E I NTE RF AC E 3-118 ip igmp snooping vlan mrouter Use this command to st atically config ure a multicast router port . Use the no form t o remo ve the configurat ion. Syntax ip igm p snooping vlan vla n-i d mrouter interf ace no ip igmp snooping vlan vlan-id mrouter interface • vlan -i d - VLAN ID (Range: 1-4094) • interface •[...]

IGMP S NOOPING C OMMANDS 3-119 show ip igmp snooping mr outer Use this command to d i spla y infor mat ion on statically config ured and dynamically lear ned multicast rout er port s . Syntax show ip igmp snoo ping mrouter [ vlan vlan-id ] vlan-id - VLAN ID (Range: 1-4094) Default Setting Displays multicast router por ts for all configured V LANs .[...]

C OMMAND L IN E I NTE RF AC E 3-120 Priority Commands The com mands describe d in this section all ow yo u to specify which data pack ets hav e g reater p recedence when traffic is buffer ed in the switc h due to con g estion . T his swit ch supp or ts CoS w ith four pri ority queue s for each port. Data packets in a p or t’ s high-priority queue[...]

P RIORITY C OMMANDS 3-121 switchport prior ity default Use this command to s et a priority for incoming un tag g ed frames , or the prior ity of frames rec eiv ed by the de vice connected t o the specifi ed interface. Use the no form to restore the default value . Syntax swi tc hpor t priority default de faul t-p rio rit y-i d no switchport priorit[...]

C OMMAND L IN E I NTE RF AC E 3-122 • This switch pro v ides four priorit y queues for each port. It is configured to use Weighted Round R obin, which can viewe d with the queue bandwidth command. Inbou n d frames that d o not have VLAN tags are tagg ed with th e input por t’s default ingress user p riority, and then placed in the appropria t e[...]

P RIORITY C OMMANDS 3-123 Command Usage WRR all ows ban dwi dth s haring at th e eg re ss po rt by def ining schedul ing weight s . Example Th e followi ng ex ample shows h ow to ass ign WR R weight s of 1 , 3, 5 a nd 7 to the CoS priority queu es 0, 1, 2 and 3: Related Commands show que ue b andwi th queue cos-map Use this co mmand to as sign cla [...]

C OMMAND L IN E I NTE RF AC E 3-124 Default Setting This s witch suppor ts Class of Ser vice by using four priorit y queues , with W eighted Round R obin Q ueuing for e ach port. Eig ht separate traffic classes are defined in IEEE 802.1p . T he default priority lev els are assigned according to recommendations in the IEEE 802.1p standar d as shown [...]

P RIORITY C OMMANDS 3-125 Related Commands sho w queue cos-map show queue bandwidth Use th is command to displ ay the w eighte d round-rob in (WRR) band width allocatio n for the fo ur class o f ser vice (CoS ) priorit y queues. Default Setting None Command Mode Pri vileged Exec Example show queue cos-map Use this command to show th e class of ser [...]

C OMMAND L IN E I NTE RF AC E 3-126 Command Mode Pri vileged Exec Example map ip port (Global Con figuration) Use th i s comm and to enabl e IP port mapping (i.e. , class o f ser vice mapping for TC P/UDP sockets). Us e the no for m to disable I P por t mapping . Syntax map ip por t no map ip por t Default Setting Disabled Command Mode Global Confi[...]

P RIORITY C OMMANDS 3-127 map ip port (Int erface Configura tion) Use this comma nd to set I P por t priorit y (i.e., TCP/UDP po rt priority). Use the no for m to remove a specific setting . Syntax map ip por t port-number cos cos-value no map ip por t port-number • port-number - 16-b it TCP/UDP port number. (Range: 0-65535) • cos-va lue - Clas[...]

C OMMAND L IN E I NTE RF AC E 3-128 map ip precedence (Global Configuration) Use th i s comm and to enabl e IP precedence m apping (i. e., IP T ype of Service). Use the no for m to dis able IP prec edence mappi ng . Syntax map ip precedence no map ip precedence Default Setting Disabled Command Mode Global Configuratio n Command Usage • The preced[...]

P RIORITY C OMMANDS 3-129 • cos-va lue - Class-of-Service value (Range: 0-7) Default Setting The l ist below shows th e default priority mappin g . Command Mode Interfac e Con figurat ion (Ethe rn et, Port Chan nel) Command Usage • The preced ence for prio rity mapping is IP Port, I P Precedence or IP DSCP, an d default swit chport prio rity. ?[...]

C OMMAND L IN E I NTE RF AC E 3-130 map ip dscp (Global Con figuration) Use this command to enable IP DSCP mapp ing (i.e., Differentiated Ser vices Code Point mapping). Use th e no form to disable IP DSCP mapping . Syntax map ip dscp no map ip dscp Default Setting Enabl ed Command Mode Global Configuratio n Command Usage • The preced ence for pri[...]

P RIORITY C OMMANDS 3-131 • cos-va lue - Class-of-Service value (Range: 0-7) Default Setting The l ist below shows th e default priority mappin g . Note that all t he DSCP v alues that are no t specified are m apped t o CoS value 0. Command Mode Interfac e Con figurat ion (Ethe rn et, Port Chan nel) Command Usage • The preced ence for prio rity[...]

C OMMAND L IN E I NTE RF AC E 3-132 show map ip por t Use th i s comm and to sho w the IP port prio rity map . Syntax show map ip port [ in terface ] interface • ethernet unit / port - unit - This is device 1. - port - Port number. • port-channel chann el-id (Range: 1-6) Default Setting None Command Mode Pri vileged Exec Example Th e following [...]

P RIORITY C OMMANDS 3-133 show map ip precedence Use this command to s how the I P precedence p riority map . Syntax show map ip precedence [ in terface ] interface • ethernet unit / port - unit - This is device 1. - port - Port number. • port-channel chann el-id (Range: 1-6) Default Setting None Command Mode Pri vileged Exec Example Related Co[...]

C OMMAND L IN E I NTE RF AC E 3-134 show map ip dscp Use this command to show the IP DSCP priority map . Syntax show map ip dscp [ interface ] interface • ethernet unit / port - unit - This is device 1. - port - Port number. • port-channel chann el-id (Range: 1-6) Default Setting None Command Mode Pri vileged Exec Example Related Commands m ap [...]

M IR R OR P ORT C OMMANDS 3-135 Mirror Port Commands Th is sectio n desc ribes how to config ure po r t mir ro r sessio ns . port monitor Use this comma nd to co nfigu re a mir r or sessi on. Us e the no for m to clear a mir ror session. Syntax por t monitor interface [ rx | tx | bo th ] no por t monitor interface • interface - ethernet unit / po[...]

C OMMAND L IN E I NTE RF AC E 3-136 • Th e destination po rt is set by specifyin g an Ethernet interface. • You can create up t o nine mirror s essions, bu t all must share th e same desti nation port . However, you should avoid sendi ng too much traffic to the destin ation port from multip le source ports. • The sourc e and destinati on port[...]

P ORT T RUNKING C OMMANDS 3-137 Example The foll owing shows mirrorin g configured from port 6 to po r t 11: Related Commands por t mon itor Port Trun king Comm and s P or ts can be st atically g rouped in to an ag g reg ate link to increase the bandw idth of a network con nectio n or to en sure fault rec over y . Or you can use the L ink Ag g reg [...]

C OMMAND L IN E I NTE RF AC E 3-138 channel-group Use this comma nd to add a port to a tr unk. Us e the no for m to remov e a por t from a tr unk. Syntax channel-group channel-id no channel-group channel- id - T r unk index (Rang e: 1-6) Default Setting A new tr unk conta ins no por ts. Command Mode Interf ace Configur ation (Eth er net) Command Us[...]

P ORT T RUNKING C OMMANDS 3-139 lacp Use this command to enable 802.3ad Link Agg reg ation Control Protocol (LA C P) for the c ur ren t interfa ce. Use the no for m to disable it. Syntax lacp no lacp Default Setting Disabled Command Mode Inter face Con figurat ion (E ther net) Command Usage • Finish co nfiguring a port trunk before you connect th[...]

C OMMAND L IN E I NTE RF AC E 3-140 Example Th e following shows LA CP enab led on por ts 1 1-13. Becaus e LACP has also be en en abled on the por ts at the ot her en d of t he links, the show interfa ces statu s por t-chan nel 1 co mmand shows th at T r u nk1 has b een established. Console(config)#interface ethernet 1/11 Console(config-if)#lacp Co[...]

A-1 A PPENDIX A T ROUBLESHOOTING Troub lesho oting Ch art Troubl eshooting Ch art Symptom Action Cannot con nect using Telnet, Web browser, or SNMP software • Be sure to have configured the agent with a val id IP addre ss, sub net mask an d defau lt gate way. • Be sure that your manag ement sta tion has ma nagement VLAN access to the s witch (d[...]

T R OUBLESHOOTING A-2 Upgrading Firmwar e via the Serial Port Th e swit ch cont ains t wo fir mwa re comp onen ts tha t ca n be upg rade d; the diagn ostics (or B oot-R OM) code and runtime o peration co de. The r untime code can be upgraded via the switch’ s RS-232 serial console port, via a netw ork connect ion to a TF TP ser ver , or usin g SN[...]

U PGRADING F IR MW AR E VIA THE S ERIA L P ORT A-3 5. Press < c> to ch ang e the baud r ate of the sw itch’ s serial conn ection. 6. Press <b> to select the option for 115200 baud. There are two b aud rate settings av ailable, 9600 and 115200. Usi ng the higher ba ud rate minimi zes th e time req uired to downlo ad fir mwa re code fil[...]

T R OUBLESHOOTING A-4 If using W indows Hype rT er minal, click the “T ransfe r” butt on, and then c lick “Send Fi le.... ” Select the XModem Protoc ol and then use the “Br owse” button to select the req uired fir mware co de file from your PC sy stem . Th e “ Xmode m fil e send ” wind ow displ ays the prog r ess of th e down load p[...]

U PGRADING F IR MW AR E VIA THE S ERIA L P ORT A-5 15. P ress <q> to quit th e fir mwa re-downloa d mode and boot t he switch.[...]

T R OUBLESHOOTING A-6[...]

B-1 A PPENDIX B P IN A SSIGN MENT S Console Port Pin Assignments The DB-9 seria l port on th e switch’ s front pan el is used to connect to the sw itch for ou t-of -ban d conso le co nfig uratio n. T he on board menu-driven confi gurat ion prog ra m can be access ed fr om a ter minal, or a PC running a terminal emulation prog ram. The pin assign [...]

P IN A SSIG NME NTS B-2 Console Port to 9-Pin DTE Port on PC Console Port to 25-Pin DTE Port on PC Switch’s 9-Pin Seri al Por t Nu ll M od e m PC’s 9-Pin DTE Port 2 RXD <-- ------- TXD -- ------- --- 3 TXD 3 TX D - ---- ------R XD ---- ----- -> 2 RX D 5 SG ND --- ---- ----SG ND ---- ------ 5 SGN D No other pins are u sed. Switch ’s 9 -P[...]

Glossary-1 G LOSSA RY 10BASE-T IEEE 802.3 sp ecification for 10 Mbps E ther net over tw o pairs of Categ or y 3, 4, o r 5 UTP cable. 100BASE-TX IEEE 802.3u specif ication for 100 Mbps Fast Ether net over tw o pairs of Categ or y 5 UTP cable. 1000BASE-T IEEE 802.3ab spec ification for G igab it Ether net over tw o pa irs of Categ or y 5, 5e 100-ohm [...]

G LOSSAR Y Glossary-2 Collis ion D omain Single CSMA/C D LAN segment. CSMA/CD Car rier Sense Multiple Access /Collision Detect is the co mmunication method employed by Ethernet and Fast Ethernet. Dynamic Ho st Control Protoc ol (DHCP) Provides a framework for passing configuration in for mation t o hosts on a TCP/I P network. DHCP is based on the B[...]

G LOSSAR Y Glossary-3 that VLANs defined in each switch can work automatically ov er a Spanning Tree network. Generic Attr ibute Registra tion Proto col (GARP ) GARP is a protocol t hat can be used by endstations and switches to register and propag ate multicast g roup mem bership infor m ation in a switched environment so that multicas t data fram[...]

G LOSSAR Y Glossary-4 IEEE 802.3 Defines car rier se nse multiple access with collis ion detection (CSMA/C D) access method and physical layer specific ations. IEEE 802.3ab Defines CSMA/ CD access method and physical layer specificatio ns for 1000BASE-T F ast Ethern et. IEEE 802.3ac Defines frame exten sions for VLAN tag g ing . IEEE 802.3u Defines[...]

G LOSSAR Y Glossary-5 subnetwork, one of the routers is made the “querie r” and ass umes responsibility for keep ing track of grou p membership . In-Band Management Manag ement of the net work from a station atta ched directly to the network. IP Multicast Filteri ng A process whereby this switch can pass multicast traffic along to par ticipatin[...]

G LOSSAR Y Glossary-6 Multicas t Switc hing A process whereby the switch filters incoming multicast frames for ser vic es for which no attached host has reg istered, or forwards the m to all por ts contained wit hin the des ignated mu lticast VLA N g roup . Out-of-Band Management Manag ement of the network from a station not atta ched to the networ[...]

G LOSSAR Y Glossary-7 Transmission Control Protocol/Internet Protocol (TCP/IP ) Protocol sui te that include s TCP as the prim ar y transpor t protocol, and IP as the network layer protocol. Trivi al Fi le T rans fer Prot oco l (TFTP) A TCP/IP protocol com monly used for software downloads. Virtual LAN (VLAN) A Virtual LAN is a collection of networ[...]

G LOSSAR Y Glossary-8[...]

Index-1 A addres s table 2 -30 B BOOTP 2-11 broadcast st orm, threshold 2- 28 C Class of Se rvi ce configuring 2-5 3 queue mapping 2-53 community string 2-69 configurat ion setting s, saving or restoring 2-18 console port pin assignm ents B- 1 D default priority, ingres s port 2-54 default settings 1-13 DHCP 2-11 downloading software 2-16 , A-2 F f[...]

I NDE X Index-2 R RADIUS, logon authentication 2-14 S serial port configuring 3-5 6 XModem down loads A-2 SNMP community string 2-69 enab ling tr aps 2-70 trap manag er 2-70 software downloads 2-16 , A-2 software version, di splaying 2-22 Spanning Tre e Protocol 2-33 startup files displaying 2-16 setting 2-16 statistics, s witch 2-79 syst em softw [...]

[...]

38 T e sla Irvine, C A 9261 8 Phone: (949 ) 679-800 0 Model N umber: SMC 6750L2 Publication N umber: 1502000 16800A Revision Number: E06 2002-R01 FOR TECHNICAL SUPPOR T , CALL: From U.S.A. an d Cana da (24 hours a day , 7 days a week) (800) SMC-4-YOU; (94 9) 679-800 0; Fax: (949) 679- 1481 From E urope (8: 00 AM - 5:30 PM UK Time) 44 (0) 118 974 87[...]