IBM 12.1(22)EA6 инструкция обслуживания

Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter Software Configuration Guide Cisco IOS Release 12.1(22)EA6[...]

Note: Befor e using this informat ion and the pr oduct it sup ports, read th e genera l informat ion in Appendix C, “Getting Help and Technical Assistance” and Appendix D , “Notices.” First Edition (Octob er 2005) © Copyrigh t International Busi ness Machines Co rporation 2005. All rights reserved. US Government Us ers Restricted Right s ?[...]

iii Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 CONTENTS Preface xx iii Audienc e xxiii Pur pose xxii i Conv enti ons xxiv Relat ed Pu blic ations xxv CHAPTER 1 Overview 1- 1 Featur es 1-1 Ease of Use an d Ease of Deploy ment 1-1 Per forma nce 1-1 Manageabi lity 1- 2 Redund[...]

Cont ent s iv Cisco Systems In telligent Giga bit Ethernet Switc h Modules f or the IBM Bla deCenter, Software C onfiguration Guide 24R9746 Using Edi ting F eatur es 2-6 Enabli ng and Di sablin g Edit ing Featu res 2-6 Editin g Com man ds thr ough Keyst rok es 2-7 Editi ng Command Lin es that Wr ap 2-8 Searchi ng a nd Fil tering Output of show and [...]

Content s v Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Config urin g a System Na me and Promp t 4-13 Defaul t Syste m Name and Pro mpt Config urati on 4-14 Config urin g a System Na me 4-14 Underst anding DNS 4- 14 Defau lt DN S Co nfigur ation 4-15 Setti ng Up DNS 4-15 Di[...]

Cont ent s vi Cisco Systems In telligent Giga bit Ethernet Switc h Modules f or the IBM Bla deCenter, Software C onfiguration Guide 24R9746 Identi fyi ng the TACACS+ Server Host and Se tting th e Authen ticati on Key 5-12 Config urin g TACACS+ Lo gin Authen tica tion 5-1 3 Config urin g TACACS+ Autho riza tion for Privil eged EXEC Acce ss and Net w[...]

Content s vii Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Using IE EE 802. 1x with Por t Secur ity 6-7 Using IE EE 802. 1x with Voi ce VLAN Por ts 6-8 Using IE EE 802. 1x with VLAN Ass ignment 6-8 Using IE EE 802. 1x with G uest VLAN 6-9 Using IE EE 802. 1x with Wake- on-LA[...]

Cont ent s viii Cisco Systems In telligent Giga bit Ethernet Switc h Modules f or the IBM Bla deCenter, Software C onfiguration Guide 24R9746 Config urati on Guidel ines 7-11 Setti ng the In terfac e Speed an d Duplex Parameter s 7-11 Adding a De scrip tion for an Inte rface 7-12 Monitor ing an d Mainta inin g the In terf aces 7-13 Monitor ing I nt[...]

Content s ix Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Config urin g Spanni ng-Tree Featur es 9-11 Defaul t Spanni ng-Tre e Confi gurati on 9-12 Spannin g-Tr ee Configu rati on Guidel ines 9-12 Changin g the Spa nning -Tree Mo de 9-1 3 Disabl ing Spa nning Tre e 9-14 Conf[...]

Cont ent s x Cisco Systems In telligent Giga bit Ethernet Switc h Modules f or the IBM Bla deCenter, Software C onfiguration Guide 24R9746 Config urin g the Swit ch Prior ity 10-18 Config urin g the Hello Time 10-1 8 Config urin g the Forw arding- Delay Time 10-19 Config urin g the Maxi mum-Aging Ti me 10-20 Config urin g the Maxi mum-Hop Co unt 10[...]

Content s xi Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 VLAN Confi gurati on Mode Option s 12-6 VLAN Confi gurati on in confi g-vlan Mode 12-6 VLAN Confi gurati on in VLAN Conf igurati on Mode 12-6 Saving VLAN Configur ation 12-7 Defaul t Ether net VLA N Config uratio n 12[...]

Cont ent s xii Cisco Systems In telligent Giga bit Ethernet Switc h Modules f or the IBM Bla deCenter, Software C onfiguration Guide 24R9746 Moni toring the VMPS 12- 30 Troubl eshooti ng Dynami c Po rt VLAN Membershi p 12-31 VMPS C onfigur ation Exampl e 12-3 1 CHAPTER 13 Configur ing V TP 13-1 Unde rstand ing V TP 13-1 The VTP Domai n 13-2 VTP Mod[...]

Content s xiii Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Config urin g IGMP Snoop ing 14-7 Defaul t IGMP Snooping Co nfigu ration 14-8 Enabli ng o r Disab ling IGMP Sn oopin g 14-8 Setti ng the Sno oping Metho d 14-9 Config urin g a Multi cast Ro uter Po rt 14-10 Config u[...]

Cont ent s xiv Cisco Systems In telligent Giga bit Ethernet Switc h Modules f or the IBM Bla deCenter, Software C onfiguration Guide 24R9746 Defaul t Por t Se curity Conf igurat ion 15-6 Port S ecuri ty C onfig uratio n Gui deli nes 15-6 Enabli ng a nd Co nfiguri ng P ort Se curit y 15 -7 Enabli ng and Co nfig uring Por t Secur ity Agin g 15-9 Disp[...]

Content s xv Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 SPAN and RSPAN Se ssion Limits 18-7 Defaul t SPAN and RSP AN Configurat ion 18-7 Config urin g SPAN 18-7 SPAN Confi gurati on Guideli nes 18-7 Creat ing a SPAN Sess ion a nd Sp ecifyi ng P orts t o Moni tor 18-8 Creat[...]

Cont ent s xvi Cisco Systems In telligent Giga bit Ethernet Switc h Modules f or the IBM Bla deCenter, Software C onfiguration Guide 24R9746 Config urin g UNIX Syslog Ser vers 20-10 Loggin g Message s to a UNIX Sy slog Daemon 20-11 Config urin g the UNIX System Loggi ng Facil ity 20-11 Displa ying t he Loggin g Confi gurati on 20-12 CHAPTER 21 Conf[...]

Content s xvii Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Creati ng Named MAC Exten ded ACLs 22-17 Creati ng MAC Access Gro ups 22-18 Applyi ng ACLs to Termin al Lines or Physica l Int erfaces 22-18 Apply ing ACLs to a Te rmina l Line 22-19 Apply ing ACLs t o a Physic al I[...]

Cont ent s xviii Cisco Systems In telligent Giga bit Ethernet Switc h Modules f or the IBM Bla deCenter, Software C onfiguration Guide 24R9746 Config urin g the CoS Va lue for an I nter face 23-19 Config urin g Trusted Bo undar y 23-20 Enabli ng P ass-T hrough Mode 23-22 Config urin g a QoS Policy 23-23 Classi fyin g Traffi c by Usin g ACLs 23-23 C[...]

Content s xix Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Config urin g Lay er 2 T runk Fail over 24-1 6 Defau lt Lay er 2 Trun k Fail ove r Con figura tion 24- 16 Layer 2 Tr unk Fai lover Co nfigu ration Guidel ines 24-17 Config urin g Layer 2 Trunk Fail over 24-17 Displa [...]

Cont ent s xx Cisco Systems In telligent Giga bit Ethernet Switc h Modules f or the IBM Bla deCenter, Software C onfiguration Guide 24R9746 Changin g Dire ctories and Displa ying t he Working Di rector y B-4 Creati ng a nd Remo ving Di rector ies B-4 Copyin g File s B-5 Dele ting F iles B-6 Creati ng, Di splayi ng, and Extracti ng tar Files B-6 Cre[...]

Content s xxi Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Copyin g Image Fi les By Usin g RCP B-28 Prepar ing to Download or Upl oad an Image File By Using RC P B-28 Download ing an I mage File By Using RCP B-29 Uploa ding an Im age F ile By Using R CP B-31 APPENDI X C Gett[...]

Cont ent s xxii Cisco Systems In telligent Giga bit Ethernet Switc h Modules f or the IBM Bla deCenter, Software C onfiguration Guide 24R9746[...]

xxiii Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Preface Audience This gui de is for t he network ing professi onal man aging the Cisco Systems I ntellige nt Gigab it Ethernet Swit ch Mod ules, h erea fter refe rred to as the switc h . Before usi ng thi s guide, y ou shoul[...]

xxiv Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Preface Conv entions Conven tions This pu blicat ion uses t hese c on venti ons to conv ey i nstructi ons and informa tion: Command descript ions use these con venti ons: • Command s and keywords are in bo ldface text[...]

xxv Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Pre face Relate d Publicati ons Related Publications In addition to this document, the foll ow ing related docum entation come s with the Gigabit Et hernet switch module: • Cisco Systems Intellige nt Gigabit E thernet Switc [...]

xxvi Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Preface Related Publi cations • BladeC enter T ype 8677 Inst allation an d User’ s Guide This do cument is in PD F on t he IB M BladeCent er Docum entation CD . It co ntain s genera l inform ation about your Blad eC[...]

C HAPTER 1-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 1 Overview This chap ter pro vides these t opics about the Cisc o Systems Int elligent Gig abit Ethernet Swit ch Module: • Feat ures , page 1-1 • Managem ent Options, pag e 1-6 • Network Configu ration Exa mples[...]

1-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Ch apter 1 Over view Feature s • Port blo cking on forwar d ing un kno wn unica st and multicast tra ff ic • Per-port broadc ast storm contr ol for prev enting fault y end stations fr om degrading overall system per [...]

1-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 Ov erview Features • Out-of-ba nd manage ment access through the switch service port to a directl y -att ached ter minal or to a remote t ermin al thro ugh a se rial c onnect ion an d a mod em Note F or additional [...]

1-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Ch apter 1 Over view Feature s VLAN Suppo rt • The switc hes support 250 port-ba sed VLAN s for assigni ng users to VLANs associate d with appro priate ne twork resourc es, tra f fic patterns , and bandw idth • The s[...]

1-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 Ov erview Features Quality of Service and Class of Service • Automatic q uality of se r vice ( auto-QoS) t o simplify the deployment of e xisting QoS features by class ifyi ng traf fic an d configur ing egress queu[...]

1-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Ch apter 1 Over view Managem ent Optio ns • Syslog facili ty for logging system messages about au thenticatio n or authorization error s, resource issues, an d time-out events • Layer 2 tr acerout e to iden tify the [...]

1-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 Ov erview Network Configuration Examples Network Config uration E xamples Figure 1-1 , Figure 1-2 , and Figur e 1-3 show three different network co nfigurations. Figur e 1 -1 Basic Con figur ation Figur e 1 -2 T r un[...]

1-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Ch apter 1 Over view Where to Go Nex t Figur e 1 -3 Redundanc y Configura tion Where to Go Next Before conf iguring the swit ch, re view th ese sections for star t-up informati on: • Chapter 2 , “U sing the Co mmand [...]

C HAPTER 2-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 2 Using the Command-Line Interface This c hapter de scribes t he Cisco IOS com mand-line interface ( CLI) t hat you can use t o configure y our Cisco Systems Intelligen t Gigabit Ethernet Swit ch Module. It contains t[...]

2-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 2 Using the Comman d-Line Interface Cisco IOS Comm and Mode s Ta b l e 2 - 1 describes the main comm and modes, how to access each one, the p rompt you see in that mode , and ho w to exit the mode. The e x amples[...]

2-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 Using the Comma nd-Line Interfa ce Getting Help Getting Help Y ou can enter a ques tion ma rk (?) at the sy stem prom pt to display a lis t of comm ands a vai lable for each comma n d mode . Y ou can also obtain a li[...]

2-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 2 Using the Comman d-Line Interface Abbrev iating Commands Abbreviating Command s Y ou have to ente r only enough characte rs for t he swit ch to re cogni ze the command as uni que. T his exampl e shows how to en[...]

2-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 Using the Comma nd-Line Interfa ce Understanding CLI Messages Understandin g CLI Messages Ta b l e 2 - 3 lists so me erro r message s that y ou migh t encoun ter whi le using the CLI to co nfigure your switch. Using [...]

2-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 2 Using the Comman d-Line Interface Using E diting Features Recalling Commands T o reca ll comman ds from the history buf fer , perform one of the act ions listed in Ta b l e 2 - 4 : Disabling the Command History[...]

2-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 Using the Comma nd-Line Interfa ce Using Edit ing Features T o reconf igure a sp ecific line to h ave enhanced e diting mode, enter t his comm and in line c onf igur ation mode: Switch(config-line)# editing T o globa[...]

2-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 2 Using the Comman d-Line Interface Using E diting Features Editing C ommand Lines that Wrap Y ou can use a w raparound feat ure for comma nds that extend beyond a single line o n the screen . Whe n the cursor re[...]

2-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 Using the Comma nd-Line Interfa ce Searching and Filtering Output of show an d more Commands Use lin e wrapping with the co mmand hi story feat ure to recall and modif y previous complex comm and entries. F or inform[...]

2-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 2 Using the Comman d-Line Interface Access ing the CLI[...]

C HAPTER 3-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 3 Assigning the Switch IP Address and Default Gateway This chapt er describes ho w to create the initial swit ch conf ig uration (for exa m ple, assign the swi tch IP address and defau lt gate way information) for the[...]

3-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 3 Assigni ng the Switch IP Address and De fault Gateway Assign ing Swi tch Informat ion The bo ot loader provides ac cess to the fla sh file system bef ore the ope rating sy stem is loaded. Normally , the bo ot [...]

3-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 3 Assigning the Switc h IP Addres s and Defa ult Gatewa y Assigning Switch Information Manually Assigning IP Information Y o u can confi g ure multiple IP ad dresses for a switch. Each IP address an d its subnet mask m[...]

3-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 3 Assigni ng the Switch IP Address and De fault Gateway Checking and Saving the Run ning Configura tion T o remov e the switch IP address , use the no ip address interface configurat ion comma nd. If you are rem[...]

3-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 3 Assigning the Switc h IP Addres s and Defa ult Gatewa y Checki ng and Savi ng the Running C onfigu ration switchport trunk allowed vlan 2-4094 switchport mode trunk storm-control broadcast level 99.99 99.98 spanning-[...]

3-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 3 Assigni ng the Switch IP Address and De fault Gateway Modifyin g the Startup Config uration ! ip default-gateway 172.20.138.178 ip http server ! ip access-list extended SecWiz_Gi0_1_out_ip ip access-list exten[...]

3-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 3 Assigning the Switc h IP Addres s and Defa ult Gatewa y Modify ing the Start up Conf igurat ion Default Boot Configuration Ta b l e 3 - 2 shows the defaul t boot configu ration. Specifying the Filename to Read and Wr[...]

3-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 3 Assigni ng the Switch IP Address and De fault Gateway Modifyin g the Startup Config uration Booting a Specific Software Image By def ault, the switch att empts to a utomatically boot the sy stem using in forma[...]

3-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 3 Assigning the Switc h IP Addres s and Defa ult Gatewa y Modify ing the Start up Conf igurat ion Each l ine in th ese files conta ins an en v ironmen t variable na me and an equal si gn followed by the value of the v [...]

3-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 3 Assigni ng the Switch IP Address and De fault Gateway Modifyin g the Startup Config uration Ta b l e 3 - 4 describes th e function of the mos t common environment va riable s. T able 3-4 Env iro nment V ar ia[...]

3-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 3 Assigning the Switc h IP Addres s and Defa ult Gatewa y Schedul ing a Reload o f the Sof tware Image Scheduling a Re load of the Software Image Y o u can sche dule a reload of the softw are image to occur on the swi[...]

3-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 3 Assigni ng the Switch IP Address and De fault Gateway Scheduli ng a Reload of the S oftware Image This e xample sho ws how to reload the softw are on the switch at a future time: Switch# reload at 02:00 jun 2[...]

C HAPTER 4-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 4 Administering the Switch This chapter describes ho w to perform one-time operat io ns to ad minister your Cisc o Systems Intelligent Gigabit Eth ernet Switch Module. Th is chapter consists of the se sections: • Ma[...]

4-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Managin g the System Time and Da te The sy stem cl ock can prov ide time to th ese ser vices: • User show comman ds • Logging and de bugging messag es The syste m clock keeps trac k[...]

4-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 4 Administering the Switch Mana ging the S ys tem Ti me an d Dat e Figur e 4-1 T ypical NTP Netw or k Configur ation If the n etwo rk is iso lated f rom the In ternet, Cisc o’ s impleme ntation of NTP allows a device[...]

4-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Managin g the System Time and Da te Default NTP Configurati on Ta b l e 4 - 1 shows the defaul t NTP co nfiguration. NTP is enable d on all interf aces b y defa ult. All inter faces r e[...]

4-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 4 Administering the Switch Mana ging the S ys tem Ti me an d Dat e T o disabl e NTP au then tica tion, us e th e no ntp authenticate global configurat ion comma nd. T o remove an auth enticatio n ke y , use th e no n t[...]

4-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Managin g the System Time and Da te Y ou need to co nfigure only one en d of an associati on; the other device can automat ically esta blish the associat ion. If you are usin g the defa[...]

4-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 4 Administering the Switch Mana ging the S ys tem Ti me an d Dat e T o disable the interface fro m sending NTP broadcast pack ets, use the no ntp broadcast interface conf iguration command. This e xample sho ws how t o[...]

4-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Managin g the System Time and Da te Creating an Access Group and A ssigning a B asic IP A ccess List Beginn ing in pri vilege d EXEC mode, follo w these steps to control access to NTP s[...]

4-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 4 Administering the Switch Mana ging the S ys tem Ti me an d Dat e T o remov e access control to the sw itch NTP services , use the no ntp access-gr oup { query-only | serve -only | serve | peer } global configuration [...]

4-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Managin g the System Time and Da te The specif i ed interface is used for the s ource address for all p ackets sent to all destinations . If a sourc e address is to be used f o r a spe[...]

4-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 4 Administering the Switch Mana ging the S ys tem Ti me an d Dat e Displaying the Time and Dat e Configuration T o display the time and date conf ig uration , use the show clock [ det ail ] pri vileged E XEC co mmand.[...]

4-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Managin g the System Time and Da te Configuring Summer Time (Daylight Saving Ti me) Beginn ing in pri vileged EXEC mode, follo w these steps to conf ig ure summe r time (daylight sa vi[...]

4-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 4 Administering the Switch Confi guring a S ystem Name an d Prompt Beginning in privileged EX EC mode, foll o w these steps if summe r time in your area does not foll o w a recurr ing patte rn (configure the exact dat[...]

4-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Configur ing a System Nam e and Prompt This se ction c ontains this configura tion inf ormatio n: • Default Syste m Name and Prom pt Configuration , page 4-14 • Configuring a Syste[...]

4-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 4 Administering the Switch Confi guring a S ystem Name an d Prompt This se ction c ontains this configura tion inf ormatio n: • Default DN S Configuration, page 4-15 • Setting Up DNS, pag e 4-15 • Displayin g th[...]

4-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Creating a Ba nner If you u se the switch IP addre ss as its hostnam e, the I P addres s is u sed and no DNS query occ urs. If you configure a ho stname that contains no pe riods (.), [...]

4-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 4 Administering the Switch Creat ing a Bann er Beginning in privileged EX EC mode, foll o w these s teps to configure a MOTD login banner: T o delete the MO TD banner , use the no banner motd globa l configurati on co[...]

4-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Managin g the MAC Addre ss Table Configurin g a Login B anner Y ou can co nfigure a log in banne r to be displayed on all c onnected termin als. Thi s banner appear s after the M O TD [...]

4-19 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 4 Administering the Switch Mana ging the M AC Addr ess T able This se ction c ontains this configura tion inf ormatio n: • Building the Addre ss T a ble, pa ge 4-19 • MA C Add resses a nd VLA Ns, pa ge 4-19 • De[...]

4-20 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Managin g the MAC Addre ss Table Default MAC Address Table Configuration Ta b l e 4 - 3 sho ws the default MAC address table con figuration. Changing the Address Aging Time Dynami c ad[...]

4-21 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 4 Administering the Switch Mana ging the M AC Addr ess T able T o verif y that dynamic entries h a ve been r emo ved, u se the show mac addr ess-table dynamic privileged EXEC co mmand. Configuring MAC Addr ess Notific[...]

4-22 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Managin g the MAC Addre ss Table T o disab le the switch fr om sending MA C addr ess notificati on traps, use the no snmp-ser ver enable traps mac-notification global con f i gurat ion[...]

4-23 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 4 Administering the Switch Mana ging the M AC Addr ess T able Adding and Removin g Static Addres s Entries A static address has these characteristics: • It is manu ally enter ed in the a ddress table and must be man[...]

4-24 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 4 Administering the Switch Managin g the ARP Tabl e This exa mple s ho ws ho w to ad d the s tatic addres s c2f3 .220a.12f4 to the MA C addres s tab le. Wh en a packet is recei ved in VLAN 4 with this MA C addre[...]

C HAPTER 5-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 5 Configuring Switch-Based Authentication This chapte r describes ho w to conf igu re switch-b ased authentica tion on the Cisco Systems Intelligent Gigabit Eth ernet Switch Module. Th is chapter consists of the se se[...]

5-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Protecting A ccess to Privileged EXEC Commands Protecting Access to Privileged EXEC Commands A simpl e way of p roviding term inal a ccess cont rol in your ne twork is to[...]

5-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Prote cting Acce ss to Privile ged EXEC Co mman ds Setting o r Changin g a Static En able Pa ssword The en able password controls ac cess to the privileged EXEC mod e. Begin[...]

5-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Protecting A ccess to Privileged EXEC Commands Protecting En able an d Enab le Secret Pas sword s with Enc ryption T o provide an additional l ayer of security , partic u[...]

5-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Prote cting Acce ss to Privile ged EXEC Co mman ds If bo th the en able and enable secret passw ords ar e def ined, user s must enter the enable secret p asswo rd. Use th e [...]

5-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Protecting A ccess to Privileged EXEC Commands This example sho w s ho w to set the T elnet password to let45me67i n89 : Switch(config)# line vty 10 Switch(config-line)# [...]

5-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Prote cting Acce ss to Privile ged EXEC Co mman ds For example, if you want ma ny users to hav e access to th e clear line c ommand, you can as sign it le vel 2 security and[...]

5-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Protecting A ccess to Privileged EXEC Commands This example shows how to set the conf igure co mmand t o pri vile ge le vel 14 and de fine Se cre tPswd14 as the password [...]

5-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Controlling Switch Access with TACACS+ Controlling Switch Access with TACACS+ This se ction de scribes how to enabl e and co nfigure T ACA CS+, which provides d etailed ac c[...]

5-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Controlling Sw itch Access with TACACS+ Figur e 5-1 T ypical T AC ACS+ Ne two rk Configuration T A CA CS+, a dministe r ed through t h e AA A securit y services, ca n pr[...]

5-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Controlling Switch Access with TACACS+ TACACS+ Ope ration When a u ser attem pts a sim ple ASCII lo gin b y authentic ating to a switch b y using T ACA CS+, this process oc[...]

5-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Controlling Sw itch Access with TACACS+ This se ction c ontains this configura tion inf ormatio n: • Default T A CA CS+ Configuration , page 5-12 • Identifyin g the [...]

5-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Controlling Switch Access with TACACS+ T o remove th e specifie d T A CA CS+ server nam e or address, use the no tacacs- server ho st hostnam e global configurati on comman[...]

5-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Controlling Sw itch Access with TACACS+ Beginn ing in pri vileged EXEC mode, follo w these steps to conf igure login authenticat ion: Comma nd Purpos e Step 1 conf igure[...]

5-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Controlling Switch Access with TACACS+ T o disa ble AAA, use t h e no aaa new-model global configurat ion comm and. T o di sable A AA authenti cation, use th e no aaa auth [...]

5-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Controllin g Switch Acce ss with RA DIUS Starting TACACS+ Accounting The AAA acco unting feature tracks th e services that us ers are accessi ng and the am ount of netwo[...]

5-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Controlling Switch Access with RADIUS Understanding RADIUS RADIUS is a distr ibuted clie nt/ser ver system that secures netw orks against u nauthori zed acces s. RADIUS c l[...]

5-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Controllin g Switch Acce ss with RA DIUS Figur e 5-2 T ransitio ning fro m RADIUS to T ACA CS+ Services RADIUS Operation When a user attem pts to log in and auth enticat[...]

5-19 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Controlling Switch Access with RADIUS Configuring RADIUS This se ction de scribes how to configure yo ur swi tch to su pport R ADIUS. At a mi nimum, y ou mus t identify the[...]

5-20 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Controllin g Switch Acce ss with RA DIUS Y ou iden tify R ADIUS se curity s ervers by the ir host name or IP add ress, host name and spe cific UDP port num bers, or the [...]

5-21 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Controlling Switch Access with RADIUS Beginning i n privileged EX EC mode , foll o w th ese steps to con figure per-server R ADIUS server comm unication . This proc edure i[...]

5-22 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Controllin g Switch Acce ss with RA DIUS This exam ple sh ow s ho w to conf igure one RADI US server to be used for au thentica tion an d another to be us ed for accoun [...]

5-23 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Controlling Switch Access with RADIUS Step 3 aaa authent ication login { default | list-name } method1 [ meth od2... ] Create a logi n authen ticatio n method list. • T o[...]

5-24 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Controllin g Switch Acce ss with RA DIUS T o disa ble AAA, use the no aaa new-model global configurat ion c ommand. T o disabl e AAA authenti cation, use th e no aaa aut[...]

5-25 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Controlling Switch Access with RADIUS Beginning i n privileged E XEC mo de, foll o w th ese steps to define t he A AA ser ver group a nd assoc iate a particu lar RADIUS se [...]

5-26 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Controllin g Switch Acce ss with RA DIUS T o remove th e specifie d RADIUS serve r, use the no radius-serv er host hostname | i p-addre ss glob al configurat ion comm an[...]

5-27 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Controlling Switch Access with RADIUS T o disable au thorizati on, us e the no aaa aut horization { network | exec } method1 global configurat ion comm and. Starting RADIUS[...]

5-28 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Controllin g Switch Acce ss with RA DIUS Configuring Settings for All RADIUS S ervers Beginning i n privileged EXEC mode , follow these steps t o configure g lobal c omm[...]

5-29 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Controlling Switch Access with RADIUS For example , this A V p air acti vates Cisco’ s multiple named ip addr ess pools feature dur ing IP authorization (during PPP’ s [...]

5-30 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Controllin g Switch Acce ss with RA DIUS Beginning i n privileged EXEC mode, fol low these step s to specif y a vendor-propr ietary R ADIUS server host a n d a s hared s[...]

5-31 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Configuring the Switch for Local Authentication and Authorization Configuring the Switch for Local Authentication and Authorizat ion Y o u can c o nf igure AAA to operate w[...]

5-32 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Conf igurin g the Sw itch f or Se cur e Sh ell Configuring the Switch for Secure Shell This sec tion descri bes how to configure th e Secure Shell (SSH) fe ature. SSH i [...]

5-33 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Configuring the Switch for Secure Shell SSH also supports these user authen tication methods: • T A CA CS+ (fo r more inf ormatio n, see t he “Controlling Swi tch Acces[...]

5-34 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Conf igurin g the Sw itch f or Se cur e Sh ell • When gen erati ng the RSA k ey p air , the messag e “No doma in specif ied” mi ght appe ar . If it does, you must [...]

5-35 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 5 Configuring Swit ch-Base d Authentic ation Configuring the Switch for Secure Shell 3. Generate an RSA key pair for the switch, which automatically enable s SSH. Follo w this procedu re only if you are conf iguring t[...]

5-36 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 5 Configuring Switch-Based Authentication Conf igurin g the Sw itch f or Se cur e Sh ell T o return to the def ault SSH c ontrol par ameters, us e the no ip ssh { timeou t | aut henticati on-retrie s } global co[...]

C HAPTER 6-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 6 Configuring IEEE 802.1x Port-Based Auth enticat ion This chapt er describ es ho w to configure IEEE 802 .1x port-bas ed authe ntication on t he Cisco Systems Intell igent Gigabit Ethern et Switch Mo dule to prevent [...]

6-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Unders tanding IEEE 8 02.1x Port -Based Au thentic ation • Using IE EE 802.1x with Por t Security , pag e 6-7 • Using IE EE 802.1x with V oice VLA N Po[...]

6-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Underst anding I EEE 802.1x Port-Base d Authenticat ion informatio n with the authentic ation serv er, and relaying a re sponse to the client. The switch include [...]

6-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Unders tanding IEEE 8 02.1x Port -Based Au thentic ation Figur e 6-2 Messag e Exc hang e Ports in Au thorized and Un authorized State s Depend ing on the s[...]

6-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Underst anding I EEE 802.1x Port-Base d Authenticat ion • auto —en ables IEEE 8 02.1x au thent ication and ca uses the port to begin i n the unauth orized sta[...]

6-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Unders tanding IEEE 8 02.1x Port -Based Au thentic ation F o r more infor mation ab out A V pa irs, see RFC 3580, “IE EE 802 .1 X Rem ote Aut hen tic ati[...]

6-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Underst anding I EEE 802.1x Port-Base d Authenticat ion Figur e 6-3 Multiple Hos t Mode Ex ample Using IEEE 8 02.1x w ith Port Security Y o u can co nf igure an I[...]

6-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Unders tanding IEEE 8 02.1x Port -Based Au thentic ation • When an IEEE 802.1 x clien t address is man ually re moved from t he por t securi ty table , w[...]

6-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Underst anding I EEE 802.1x Port-Base d Authenticat ion • If IEEE 802.1x an d port secu rity are enabled on a po rt, the port is place d in the RADIUS-ser ver a[...]

6-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Unders tanding IEEE 8 02.1x Port -Based Au thentic ation Note If an EAPOL p acke t is detec ted on t h e wi re after th e inte rface has tran sitioned to [...]

6-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Configur ing IEEE 802. 1x Authent ication Configuring IEEE 802.1x Authentication These sections descri be how to con f igure I EEE 80 2.1x port-based authent ica[...]

6-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Configur ing IEEE 802 .1x Authen tication IEEE 80 2.1x Con fig uratio n Guidelines These ar e the IEEE 802.1x authenti cation co nfiguration guideli nes: [...]

6-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Configur ing IEEE 802. 1x Authent ication • When IEE E 802.1x i s enabled on a port, you cannot con figure a port VL AN that is equal to a voic e VLAN. • The[...]

6-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Configur ing IEEE 802 .1x Authen tication T o disa ble AAA, use the no aaa new-model global co nfiguration comm and. T o disable IE EE 802.1x AAA aut hent[...]

6-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Configur ing IEEE 802. 1x Authent ication Beginning i n privileged EX EC mode , fol low the se steps to con f i gure th e RAD IUS server pa ramete rs on the swit[...]

6-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Configur ing IEEE 802 .1x Authen tication Configuring IEEE 802.1 x Authentication Using a RADIUS Server Beginning i n pri vileged E XEC mode , follow thes[...]

6-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Configur ing IEEE 802. 1x Authent ication T o disable periodic re-aut henticat ion, use the no dot1x reauthen tication inter face configurat ion command. T o ret[...]

6-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Configur ing IEEE 802 .1x Authen tication Beginning i n privileged EX EC mode , follow these steps to chang e the qu iet period. T his pro cedure i s opti[...]

6-19 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Configur ing IEEE 802. 1x Authent ication T o return to the default ret ransmission time, use the no d ot1x time out tx -peri od interface con fig uration comm a[...]

6-20 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Configur ing IEEE 802 .1x Authen tication Configuring the Host Mode Beginn ing in pri vilege d EXEC mode, follo w these steps to allo w multiple hosts (cl[...]

6-21 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Configur ing IEEE 802. 1x Authent ication T o disabl e and rem ov e the guest V LAN, use the no dot1x guest- vlan interface co nfigurat ion comman d. The port re[...]

6-22 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Configur ing IEEE 802 .1x Authen tication T o disab le the option al guest VLA N behavior , use the no dot1x guest-vlan supplicant global configurat ion c[...]

6-23 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Configur ing IEEE 802. 1x Authent ication This i s the IEEE 8 02.1x authe nticatio n, author izati on and a ccounti ng pr ocess: Step 1 A user c onnect s to a po[...]

6-24 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Configur ing IEEE 802 .1x Authen tication Configuring IEEE 802.1x Accounting Enabling AAA sy stem accountin g with IEEE 802.1x acc o unting allo ws system[...]

6-25 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 6 Configuring IE EE 802.1x Port -Based Au thenticati on Displaying IEEE 802.1x Statistics an d Status Displaying IEEE 802.1x Statistics and Status T o display IEEE 802.1x statistics for all interface s, u se the show [...]

6-26 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 6 Confi guring I EEE 802.1x P ort-Bas ed Authent ication Displaying IEEE 802.1x Stati stics and Status[...]

C HAPTER 7-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 7 Configuring Interface Cha r acteristics This chap ter descr ibes the ty pes of inte rface s on a Cisco Systems Intell igent Gigabit Ethernet Switch Module and how to configure th em. The ch apter has these sect ions[...]

7-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 7 Configuring Interface Characteristics Unders tanding Inte rface Types Note Th e physica l switch ports ca n be 10 /100/1000 Etherne t ports, 10 0B ASE-FX p orts, 1 000B ASE-SX ports, or small form-factor plu gg[...]

7-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 7 Configuring Interfa ce Character istics Unde rsta ndin g Inter face Type s All possible VLANs (VLAN ID 1 to 4094) can be in the allo wed list. By default, th e allo wed list is differen t for th e switch inter nal an[...]

7-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 7 Configuring Interface Characteristics Using the Interface Command recogn ize the physical po rts within th e port group. Exce ptions are the DTP , the Cisco Disco very Protocol (CDP), the Port A ggregation Prot[...]

7-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 7 Configuring Interfa ce Character istics Using the Interface Command Ethernet ports), the port number resta rts with the second inter face type : gigabitether net0/1, gigabit ethernet0/2. The interfac e notation for s[...]

7-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 7 Configuring Interface Characteristics Using the Interface Command Step 3 Fo llo w each interface command with the interf ace config uration commands your par ticular interfa ce require s. The commands y ou ente[...]

7-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 7 Configuring Interfa ce Character istics Using the Interface Command – gigab itethern et slot/{ fi rs t p o r t } - { last port }, where slot is 0 – port-channel port-channe l-number - port-channel -number , wher [...]

7-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 7 Configuring Interface Characteristics Using the Interface Command Use the no de fine interface-range macr o_nam e global conf iguration co mmand to de lete a macro. When usin g the def ine interface- range glob[...]

7-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 7 Configuring Interfa ce Character istics Config uring Etherne t Interfa ces This e xample sho ws how to delete the inter face-ra nge macro enet_l ist and to verify that it ha s been deleted. Switch# configure terminal[...]

7-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 7 Configuring Interface Characteristics Configur ing Ethernet Int erfaces Configuring In terface Spee d and Duple x Mode By default, the non-SFP module exte rnal ports (ports 17 to 20) are set to autone gotiate [...]

7-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 7 Configuring Interfa ce Character istics Config uring Etherne t Interfa ces Y ou can configure interface speed on the G igabit Etherne t (10/10 0/1000 M bps). Y ou cannot configure speed on the fiber -optic SFP-modul[...]

7-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 7 Configuring Interface Characteristics Configur ing Ethernet Int erfaces Use the no spee d and no duplex interfa ce conf iguration comman ds to return the interf ace to the def ault speed and duple x settings ([...]

7-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 7 Configuring Interfa ce Character istics Monitoring and Maintaining the Interfaces Use the no description interface configurat ion comm and to dele te the descr iption. This exam ple sh o ws how to ad d a d escriptio[...]

7-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 7 Configuring Interface Characteristics Monito ring and Maint aining the In terfaces This exam ple shows how to displa y the stat us of sw itching p orts: Switch# show interfaces gigabitethernet 0/1 switchport N[...]

7-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 7 Configuring Interfa ce Character istics Monitoring and Maintaining the Interfaces Clearing and Resetting In terfaces and Counters Ta b l e 7 - 3 lists the privileg ed EXEC mo de clear command s that y ou can use to [...]

7-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 7 Configuring Interface Characteristics Monito ring and Maint aining the In terfaces Use the no shutdown inter face conf iguration command to rest art the interfa ce. This example shows how to shut do wn a port:[...]

C HAPTER 8-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 8 Configuring Smartports Macro s This cha pter descr ibes how to configure and ap ply Smartpor ts macros on t he Cisco Syste ms Intellig ent Gigabit Eth ernet Switc h Module. Note For c omplete s yntax and us age in f[...]

8-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 8 Confi guring Smart ports Mac ros Configuring Smartports Mac ros Cisco also provid es a collection of prete sted, Cisco-recommende d baseline conf iguration templates for Catalyst switches and Cisco Systems Inte[...]

8-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 8 Conf iguring Smartpo rts Macros Config uring Smartp orts Macros • When crea ting a macr o that req uires the ass ignment of unique valu es, use th e parameter value keywords to designate v al ues speci fic to the i[...]

8-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 8 Confi guring Smart ports Mac ros Configuring Smartports Mac ros Creating Sm artports Macros Beginn ing in pr ivilege d EXEC mode, fo llo w these s teps to cr eate a Smartports macro: The no fo rm of the macr o [...]

8-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 8 Conf iguring Smartpo rts Macros Config uring Smartp orts Macros Applying Smartports Ma cros Beginning i n privileged EX EC mode , follow these steps to appl y a Sma rtports m acro: Y ou can dele te a global macro-app[...]

8-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 8 Confi guring Smart ports Mac ros Configuring Smartports Mac ros This exam ple sh ows ho w to apply th e use r -cre ated m acro ca lled snmp , to set the host name address to test- server and to s et the IP prec[...]

8-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 8 Conf iguring Smartpo rts Macros Config uring Smartp orts Macros Y ou can dele te a global macro-app lied configurat ion on a swit ch only by enteri ng the no ver sion of each comm and th at is in the macro. Y ou can [...]

8-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 8 Confi guring Smart ports Mac ros Displaying Smartports Mac ros Displaying Smartports Macros T o display the Smar tports macros, use one o r more of the pri vile ged EXEC co mmands in Ta b l e 8 - 2 . T able 8-2[...]

C HAPTER 9-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 9 Configuring STP This chapt er describes how to configure the Spanni ng T re e Protocol (STP) on por t-based VL ANs on your Cisc o Systems Intelligent Gigabit Ethernet Switch Module. The swi tch can u se either the p[...]

9-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Unders tanding Spanni ng-Tree Fea tures • Supporte d Spanning-Tree Instanc es, page 9-9 • Spanning- T ree Interop erability and Backw ard Compatibi lity , page 9-10 • STP and IEEE 80 2.1Q[...]

9-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 9 Conf iguring STP Unders tanding Spanni ng-Tree Feat ures Spannin g-Tr ee Topo logy an d BPDUs The stabl e, acti ve span ning-tree t o polog y of a sw itched ne twork is determined by these elem ents: • The un ique [...]

9-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Unders tanding Spanni ng-Tree Fea tures Bridge ID, Switch Priority , an d Extended System ID The IE EE 80 2.1D stan dard re quires th at ea ch switch has an un ique br idge iden tifier (bri dge[...]

9-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 9 Conf iguring STP Unders tanding Spanni ng-Tree Feat ures An interfac e mov es through these states: • From initiali zation to blocking • From bl ocking t o liste ning or t o disab led • From list ening t o lear[...]

9-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Unders tanding Spanni ng-Tree Fea tures switch. If the re is only one switch in the netwo rk, no exchan ge occurs, the forward-d elay timer e xpires, and the inter faces m ov e to the listening[...]

9-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 9 Conf iguring STP Unders tanding Spanni ng-Tree Feat ures Disabled State A Laye r 2 inte rface in t he di sabled state do es not p artici pate in frame forwardi ng or i n the sp anning tree. An interf ace in the disab[...]

9-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Unders tanding Spanni ng-Tree Fea tures Spanning Tree and Re dunda nt Connec tivity Y ou can cr eate a re dundant ba ckbon e with spa nning tre e by connect ing two sw itch inte rfaces to an ot[...]

9-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 9 Conf iguring STP Unders tanding Spanni ng-Tree Feat ures Becau se each VLAN is a sepa rate sp anning -tre e instance , the switch acce lerates aging on a p er - VLAN basis . A spanni ng-tree rec onfigu ration on one [...]

9-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Unders tanding Spanni ng-Tree Fea tures Spanning-Tree Interoperability and Backward Compatibility Ta b l e 9 - 2 lists the interopera bility and comp atibility among the su pported spann ing-t[...]

9-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 9 Conf iguring STP Confi guring Spanni ng-Tree Feat ures Spanning Tree Consideratio ns for Cisco Systems Inte lligent Gigabit Ethernet Switch Modules A port-blocking filter exists betwee n the switch exte rnal ports a[...]

9-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Configur ing Spanning-T ree Feature s Default Span ning-T ree Config uration Ta b l e 9 - 3 sho ws the def ault spanni ng-tre e configu ration. Spannin g-Tr ee Conf iguration Guideli n es If m[...]

9-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 9 Conf iguring STP Confi guring Spanni ng-Tree Feat ures Cautio n Switches th at are not runn ing spanning tree still forwar d receiv ed BPDUs so that t he other switches on the VLA N wit h a ru nning sp anning- tree [...]

9-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Configur ing Spanning-T ree Feature s T o return to the def a ult settin g, use the no spanning-tr ee mode g lobal co nfiguration c ommand. T o retur n the port to its defa ult setting, use th[...]

9-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 9 Conf iguring STP Confi guring Spanni ng-Tree Feat ures Beginning in p rivile ged EX EC mode , follow these st eps to disa ble spanni ng tree on a per-VLAN b asis. This proc edure is op tional . T o re-enabl e spanni[...]

9-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Configur ing Spanning-T ree Feature s Use the diameter ke ywo rd to sp ecify the La yer 2 network d iamet er (tha t is, the max imum n umber of switch hops betw een any two e nd stati ons in t[...]

9-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 9 Conf iguring STP Confi guring Spanni ng-Tree Feat ures Configur ing a Secondar y Root Switch When you configure a Catalyst 2950 or Cataly st 2955 sw itch that suppor ts the ext ended syst em ID as the secondar y roo[...]

9-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Configur ing Spanning-T ree Feature s Beginn ing in pri vileged EXEC mode, follo w these steps to conf igure the port priority of an interf ace. This proc edure is op tional . Note Th e show s[...]

9-19 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 9 Conf iguring STP Confi guring Spanni ng-Tree Feat ures Configuring the Path Cost The spanni ng-tr ee path cost default value is derived from the med ia speed of an interface. If a loop occurs , spann ing tree us es [...]

9-20 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Configur ing Spanning-T ree Feature s T o return the interfa ce to its def ault setting, u se the no spanning- tr ee [ vlan vlan-id ] cost interf ace configurati on comm and. For inform ation [...]

9-21 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 9 Conf iguring STP Confi guring Spanni ng-Tree Feat ures Configuring S panning-Tree Timers Ta b l e 9 - 4 describe s the t imers that affect the ent ire spa nnin g-tree perfo rmanc e. The sectio ns that follo w pro vi[...]

9-22 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Configur ing Spanning-T ree Feature s Configuring the Forwarding -Delay Time for a VLAN Beginn ing in pri vileged EXEC mode, follo w these steps to conf igure the forwarding-d elay time for a [...]

9-23 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 9 Conf iguring STP Display ing the Spanning -Tree Status T o return the switch to it s defau lt setting, use the no spanning-tree vlan vlan -id max-age glob al configurati on comm and. T o return to the default settin[...]

9-24 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 9 Configuring ST P Displaying the Spanning-T ree Status[...]

C HAPTER 10-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 10 Configuring MSTP This chapte r describes ho w to configur e the Cisco impleme ntation of the IEEE 802.1s Multiple STP (MSTP) on your Cisco Systems Intell igent Gigabit Ether net Switch Module. The MS TP enables m [...]

10-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 10 Configuring MSTP Unders tanding MSTP Understandin g MSTP MSTP , whi ch uses RSTP for ra pid con v ergence, enab les VLANs to be grouped into a spanning- tree instan ce, wi th each instanc e having a s panning[...]

10-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 10 Configur ing MSTP Unde rsta ndin g MSTP All MST instances with in the same reg ion share the same protocol timers, bu t each MST instance has its own topology para meters, suc h as root switc h ID, root pat h cost,[...]

10-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 10 Configuring MSTP Unders tanding MSTP Hop Count The IST and M ST instan ces do not use the messag e-ag e and maximum -age in format ion in the configurati on BPDU t o comp ute the span ning-tree topology . I n[...]

10-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 10 Configur ing MSTP Understa nding RST P Ho we ver , the switch does not automatically re vert to the MSTP mode if it no longer recei ves IEEE 802.1 D BPDUs becaus e it cannot de termine whe ther the legacy switch ha[...]

10-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 10 Configuring MSTP Unders tanding RSTP In a st able top ology with consis tent po rt roles througho ut the n etwork, the RSTP ensur es that e very root port a nd designa ted port immedi ately transiti on to the[...]

10-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 10 Configur ing MSTP Understa nding RST P When S witch C is conne cted to Switch B , a simil ar set of han dsha king mes sag es are exch ange d. Switch C select s the port connec ted to Switch B as its ro ot port, and[...]

10-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 10 Configuring MSTP Unders tanding RSTP Figur e 1 0-2 Sequence of Ev ents Dur ing Rapid Con ver gence Bridge Protoco l Data Unit Format and P rocessing The R STP BP DU for mat is the sa me as t he IEEE 802.1D BP[...]

10-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 10 Configur ing MSTP Understa nding RST P The RSTP does not have a separat e topology ch ange no tification (TCN ) BPDU. It uses the topology change (TC) f lag to show the topology cha nges. Howe ver , f or interopera[...]

10-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 10 Configuring MSTP Configur ing MSTP Featur es • Propagat ion—When an RSTP switch rec ei ves a TC message from another switc h through a designat ed or r oot por t, it pro pagate s the c hange to all o f i[...]

10-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 10 Configur ing MSTP Confi guring MSTP Featu res Default MSTP Configuration T ab le 10-3 sh ows the default MSTP configuration . For informat ion about t he supported nu mber of spann ing-tree instance s, see the “[...]

10-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 10 Configuring MSTP Configur ing MSTP Featur es • All MST bounda ry port s must b e forwarding for load bala ncing be tween a PVST+ a nd an M ST cloud or be tween a rapi d-PVST+ and an MST cloud. For this to [...]

10-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 10 Configur ing MSTP Confi guring MSTP Featu res T o return to the default M ST region c onfiguration , use the no spanning- tr ee mst configurat ion globa l conf iguration command. T o return to the defa u lt VLAN-t[...]

10-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 10 Configuring MSTP Configur ing MSTP Featur es If an y root switch f or the spec ified instance has a switch prio rity lo wer than 24576, the switc h sets its o wn priority to 4096 less than the lo west switch[...]

10-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 10 Configur ing MSTP Confi guring MSTP Featu res Configur ing a Secondar y Root Switch When you configure a switc h that s upports the extend ed system ID as the seco ndary r oot, the spanning- tree switch priority i[...]

10-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 10 Configuring MSTP Configur ing MSTP Featur es Beginn ing in pri vileged EXEC mode, follo w these steps to conf igure the MSTP port priority of an interf ace. This procedure is option al. Note Th e show span n[...]

10-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 10 Configur ing MSTP Confi guring MSTP Featu res Configuring the Path Cost The MSTP path cost def ault v alue is deri ved from the media speed of an inte rface. If a loop occurs, the MSTP use s cost when sel ecting a[...]

10-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 10 Configuring MSTP Configur ing MSTP Featur es Configuring the Switch Priority Y o u can conf igure the switch priority and make it more lik ely that the switch will be chosen as the root switch. Note Exercis [...]

10-19 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 10 Configur ing MSTP Confi guring MSTP Featu res Beginn ing in pri vileged EXEC mode, follo w these steps to conf igure the hello time for all MST instances. This pro cedure is optional. T o return the switch to its [...]

10-20 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 10 Configuring MSTP Configur ing MSTP Featur es Configuring the Maxi mum-Aging Time Beginn ing in p ri vilege d EXEC mode, fo llo w these s teps to conf igure the maxim um-aging t ime for all MST inst ances. Th[...]

10-21 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 10 Configur ing MSTP Confi guring MSTP Featu res Specifying the Link Type to Ensure Rapid Transitions If you con nect a port to an other por t through a poi nt-to-po int link an d the local por t become s a designate[...]

10-22 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 10 Configuring MSTP Displaying the MST Configu ration and Status Displaying the MST Configuration and Status T o display th e spannin g-tree st atus, use one or mo re of the pri vileg ed EXE C command s in : Fo[...]

C HAPTER 11-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 11 Configuring Optional Spannin g-Tree Features This c hapter d escribes how to c onfigure opt ional spann ing-tree featur es on yo ur Cisc o Systems Intell igent Gi gabit Et hernet Switch M odule. Y ou can c onfigur[...]

11-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 11 Configuring Optional Span ning-Tree Features Unders tanding Option al Spanning -Tree Feat ures Understand ing Port Fast Port Fast imme diately b rings an i nterface configured as a n access or trunk po rt fro[...]

11-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 1 Configuring Op tional Spanning- Tree Featu res Unders tanding Opt ional Spanning- Tree Features Understanding BPDU Guard The BP DU guard feature can be glob ally en abled on the swi tch or can be enabled per in te[...]

11-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 11 Configuring Optional Span ning-Tree Features Unders tanding Option al Spanning -Tree Feat ures Understanding UplinkFast Switches i n hiera rchical networks c an be g rouped into backb one swit ches, di stribu[...]

11-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 1 Configuring Op tional Spanning- Tree Featu res Unders tanding Opt ional Spanning- Tree Features Figure 11-3 shows an example topology with no link failures. Swi tch A, the root switch, is conn ected direct ly to S[...]

11-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 11 Configuring Optional Span ning-Tree Features Unders tanding Option al Spanning -Tree Feat ures to the roo t switch). Unde r spannin g-tree rule s, the switch i gnores inf erior BPDUs for the configured maximu[...]

11-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 1 Configuring Op tional Spanning- Tree Featu res Unders tanding Opt ional Spanning- Tree Features Figur e 1 1 -6 Backbon eF ast Example Af ter Indir ect Link F ailur e If a ne w switch is introdu ced into a shared-m[...]

11-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 11 Configuring Optional Span ning-Tree Features Unders tanding Option al Spanning -Tree Feat ures Understand ing Ethe rChanne l Guard Y ou can use EtherCha nnel guard to det ect an Ethe rChan nel misc onfigurati[...]

11-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 1 Configuring Op tional Spanning- Tree Featu res Confi guring Opt ional Spanning- Tree Features Figu re 1 1 - 8 Root Gua rd in a Se rvic e-Provid er Net wor k Understand ing Loop Guard Y ou can use loo p guard to p [...]

11-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 11 Configuring Optional Span ning-Tree Features Configur ing Optiona l Spanning- Tree Features • Enab ling Root Gu ard, page 11-15 (opti ona l) • Enab ling L oop Gua rd, pa ge 1 1-16 (optional) Default Opti[...]

11-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 1 Configuring Op tional Spanning- Tree Featu res Confi guring Opt ional Spanning- Tree Features Beginn ing in pri vileged EXEC mode, follo w these steps to enable Port Fast . This proced ure is optional. Note Y ou [...]

11-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 11 Configuring Optional Span ning-Tree Features Configur ing Optiona l Spanning- Tree Features Y ou can also use the spanning-tree bpduguard enable int e rfac e conf ig uration command to enable BPDU gu ard on [...]

11-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 1 Configuring Op tional Spanning- Tree Featu res Confi guring Opt ional Spanning- Tree Features Beginn ing in pri vileged EXEC mode, follo w th ese step s to globally enable th e BPDU filter ing feature. This proc [...]

11-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 11 Configuring Optional Span ning-Tree Features Configur ing Optiona l Spanning- Tree Features When UplinkF ast is enabled, the switch priority of all VLANs is set to 49152. If you change the path cost to a val[...]

11-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 1 Configuring Op tional Spanning- Tree Featu res Confi guring Opt ional Spanning- Tree Features Enabling E therChanne l Guard Y ou can enab le EtherCh anne l guard to dete ct an Eth erChannel misconfigur ation if y[...]

11-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 11 Configuring Optional Span ning-Tree Features Configur ing Optiona l Spanning- Tree Features T o disa ble root guard, u se the no spanning-tree guard interfac e conf iguration command. Enabling L oop Guard Y [...]

11-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 1 Configuring Op tional Spanning- Tree Featu res Display ing the Spanning -Tree Status Displaying the Sp anning-Tree Status T o display th e spannin g-tree st atus, use one or mo re of the pri vileg ed EXE C comman[...]

11-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 11 Configuring Optional Span ning-Tree Features Displaying the Spanning-T ree Status[...]

C HAPTER 12-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 12 Configuring VLANs This chapte r describes ho w to conf igure normal-rang e VLANs on your Cisco Systems Intelligent Gigabit E thernet Sw itch Mod ule. I t incl udes infor mation about VL AN mode s and the VLAN Memb[...]

12-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Unders tanding VLAN s Figure 12-1 shows an example of VLAN s segmented i nto logic ally de fined networks. Figur e 12-1 VLANs as Logica lly Defined Networ ks VLANs are of ten associated with[...]

12-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Unde rstan ding VLA Ns VLAN Port M embership Mod es Y ou configure a por t to belo ng to a VLA N by assigning a member ship mode th at determi nes the kind of traf fic th e port carries and the n[...]

12-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configur ing Normal- Range VLAN s Configuring Normal -Range VLANs Normal- range VL ANs are VLANs with VLAN IDs 1 to 1005. If the switch is in VT P server or transpare nt mod e, you can a dd,[...]

12-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Config uring Norma l-Ran ge VL ANs This sect ion include s informa tion about these topics about no rmal-ran ge VLANs: • T o ken Ring V LANs, pa ge 12-5 • Normal -Range VLAN Configuratio n Gu[...]

12-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configur ing Normal- Range VLAN s are se veral adj acent switc hes that a ll ha ve run out o f spann ing-tree in stances. Y ou can pre vent th is possibil ity by setti ng allo wed lists on t[...]

12-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Config uring Norma l-Ran ge VL ANs Saving VL AN Configuration The co nfiguration s of VLAN IDs 1 to 1005 ar e always sav ed in the VL AN datab ase (vlan.d at f ile). If VTP mode is tr ansparent, [...]

12-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configur ing Normal- Range VLAN s Creating or Modifyin g an Ethern et VLAN Each E thernet VLAN in the VLAN databa se has a uniqu e, 4-digi t ID t hat ca n be a number from 1 to 1001. VL AN I[...]

12-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Config uring Norma l-Ran ge VL ANs T o return the VLAN name to the defa u lt setting s, use the no vlan name , no vlan mtu , or no remote span config-vl an comm ands. This e xample sh ows ho w to[...]

12-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configur ing Normal- Range VLAN s Deleting a VLAN When you delete a VLAN fro m a switch that is in VTP serv er mode, the VLAN is remo ved from the VLAN datab ase for all swi tches in the V [...]

12-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Conf igurin g Exten ded-R ange VL ANs T o return an interfac e to its default conf iguration, use the def ault interface interface - id interfa ce configurati on comm and. This exampl e shows ho[...]

12-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configur ing Extended-R ange VLA Ns Default VLAN Configuration See T able 12-2 on page 12-7 f or the d efault con figuration f or Ethe rnet VL ANs. Y ou ca n change only the MTU size o n ex[...]

12-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Displaying VL ANs Beginn ing in pri vileged EXEC mode, follo w these steps to create an extended- r ange VLAN: T o delete an exte n ded- range VLAN, use the no vlan vlan -id glob al configurat i[...]

12-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configur ing VLAN Trunk s For more detail s about th e show command op tions and explana tions of output fields, see th e comman d refere nce fo r this release . Configuring VL AN Trunks Th[...]

12-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Confi gurin g VLA N Trun ks Figur e 12-2 S witches in an IEEE 80 2.1Q T runk ing Envir onment Y ou can configure a trun k on a single Etherne t inte rface or on an Ether Channel bundle. For m or[...]

12-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configur ing VLAN Trunk s IEEE 802.1Q Configuration Considerations IEEE 802.1Q trunks impose these limitat io ns on a network: • In a ne twork of Cisco swi tches co nnected through IEEE 8[...]

12-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Confi gurin g VLA N Trun ks Default Layer 2 Ethernet Inte rface VLAN Con figuratio n T ab le 12-5 shows the default L ayer 2 Ether net inte rface V LAN co nfiguration. Configuring a n Ethernet I[...]

12-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configur ing VLAN Trunk s Interaction with Other Featu res T r unking int eracts wit h other featur es in these ways: • T r unk ports can be grouped i nto EtherC hannel port groups, but a[...]

12-19 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Confi gurin g VLA N Trun ks T o return an interfac e to its default conf iguration, use the def ault interface interface - id interfa ce configurat ion com mand. T o reset al l trunking charac t[...]

12-20 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configur ing VLAN Trunk s Beginning in privileged EXEC mo de, foll o w these ste ps to modify th e allowed list of an IEEE 802.1 Q trunk: T o return to th e def ault allo wed VLAN l ist of [...]

12-21 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Confi gurin g VLA N Trun ks T o return to the default pr uning-el igible list of a ll VLA Ns, u se the no switchport trunk pruning vlan interf ace config uration co mmand. Configuring the Native[...]

12-22 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configur ing VLAN Trunk s T o return to the default na ti ve VLAN, VL AN 1 , use the no switchport trunk nativ e vlan inte rfa ce configurati on comm and. If a pack et has a VL AN ID th at [...]

12-23 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Confi gurin g VLA N Trun ks Figur e 12-3 Load Sharing b y Using S TP P ort P rior ities Beginning in pr i vileged EX EC mode , follow these ste ps to con f i gure the network shown in Figure 12 [...]

12-24 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configur ing VLAN Trunk s Load Sharing Using STP Path C ost Y ou can configure pa rallel tru nks to share VLAN tr aff ic by settin g different path costs on a trunk and associ ating the pat[...]

12-25 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Confi guring VMPS Configuring VMPS The swi tch cannot be a VMPS serv er but can ac t as a client to the VMPS an d commu nicate w ith it through the VLAN Query Prot ocol (VQP ). VMPS dynamic ally[...]

12-26 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configuring VMPS Understand ing VMPS When th e VMPS r eceiv es a VQP requ e st from a c lient switch, it se arches its d atabase for a MA C- address-t o-VLA N mappi ng. The server respo nse[...]

12-27 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Confi guring VMPS VMPS Database Configurati on File The VMPS contains a datab ase conf iguration f ile that you create. This ASCII te xt f ile is stored on a switch -accessibl e TFTP serv er tha[...]

12-28 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configuring VMPS • Port chan nels cannot be configured as dyna mic acce ss ports. • The VTP mana gement doma in of the VMPS client and the VMPS ser ver must be the same. • VQP does no[...]

12-29 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Confi guring VMPS Beginning in pr i vileged E XEC mode, follow these step s to configure a d ynamic access port on a VM PS client switch: T o return an interfac e to its default conf iguration, [...]

12-30 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configuring VMPS Changing the Reconfirmation In terval VMPS cl ients per iodically re confirm the VLAN member ship inform ation r ecei ved from the VMPS. Y ou can se t the nu mber of minut [...]

12-31 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 2 Configuring VLANs Confi guring VMPS This i s an example of out put for the show vmps privileged EXEC c ommand: Switch# show vmps VQP Client Status: -------------------- VMPS VQP Version: 1 Reconfirm Interval: 60 [...]

12-32 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 12 Configuring VLANs Configuring VMPS Figur e 12-5 Dynami c Por t VLAN Membershi p Configur ation Primar y VMPS Ser v er 1 Secondar y VMPS Ser v er 2 BladeCenter BladeCenter 172.20.26.150 172.20.26.151 T runk p[...]

C HAPTER 13-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 13 Configuring VTP This c hapter d escribes how to use the VLA N Trunking Prot ocol (V TP) and the VLAN databa se for managing VLANs on yo ur Cisco System s Intelligent Gigabit Etherne t Switch M odule. Note For c om[...]

13-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 13 Configuring VTP Unders tanding VTP The VTP Do main A VTP do main ( also call ed a VLAN mana gement domain ) consi sts of o ne switch or several interconn ected swit ches under the same a d ministrati ve resp [...]

13-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 13 Configur ing VTP Underst anding VT P VTP Mode s Y ou can configure a supp orted switc h to be in one of the VTP mod es listed in Ta b l e 1 3 - 1 . When the netwo rk is configu red with more than the maxim um 250 V[...]

13-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 13 Configuring VTP Unders tanding VTP VTP adv ertiseme nts distrib ute this global d omain i nformation: • VTP domain na me • VTP configurati on revision number • Update id entity an d updat e timestamp ?[...]

13-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 13 Configur ing VTP Underst anding VT P VTP pruni ng blocks unnee ded floo ded traff ic to VLAN s on trunk port s that are i ncluded in the pruning -eligib le list. Onl y VLANs in cluded in the pruning -elig ible list[...]

13-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 13 Configuring VTP Conf igurin g VTP Enab ling VTP p runing o n a VTP ser ver enable s pruning f or the entire managem ent d omain. M aking VLANs pruning- eligible or pruni ng-ineligible af fects pruning eligib [...]

13-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 13 Configur ing VTP Configuring VTP VTP Configuration Options Y ou can configure VT P by using th ese configurat ion modes. • VTP Configura tion in G lobal Co nfiguration M ode, page 13-7 • VTP Configurat ion in V[...]

13-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 13 Configuring VTP Conf igurin g VTP VTP Configu ra tion Guidelines These sec tions descr ibe guidel ines you should follow when imp lementin g VTP in your netwo rk. Domain Names When co nfiguring VTP f or the f[...]

13-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 13 Configur ing VTP Configuring VTP • If there are T rBRF and TrCRF T oken Ring networks in y our environmen t, you must enab le VTP version 2 for T oken Ring VLAN sw itching t o func tion p roperly . T o run T oken[...]

13-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 13 Configuring VTP Conf igurin g VTP Switch(config)# vtp password mypassword Switch(config)# end Y ou can also use VL AN configuration mode to configure VTP parameter s. Beginning in privileged EXEC mode, foll [...]

13-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 13 Configur ing VTP Configuring VTP Cautio n If all switch es are operatin g in VTP client mode, do not co nf igure a VTP domain nam e. If you do, it is impossibl e to make chang es to t he VLA N configura tion of t [...]

13-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 13 Configuring VTP Conf igurin g VTP Beginn ing in pri vileged EXEC mode, follo w these steps to conf igure VTP transparent mode an d sav e the VT P conf iguration in the switc h startup conf iguratio n fil e: [...]

13-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 13 Configur ing VTP Configuring VTP Beginn ing in pri vileged EXEC mode, follo w these steps to enable VTP v ersion 2: T o di sable VTP version 2, use the no v tp version global configurat ion comm and . Note Y ou ca[...]

13-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 13 Configuring VTP Conf igurin g VTP Adding a VT P Client Switc h to a VTP Domain Before adding a V TP client to a VTP doma in, always verify tha t its VTP co nfiguration revision n umber is lower than the co n[...]

13-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 13 Configur ing VTP Monito ring VTP Monitoring VTP Y ou monito r VTP by disp laying V TP configurat ion infor mation: t he dom ain name , the c urrent V TP revision, and the n umber o f VLA Ns. Y ou c an al so displa[...]

13-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 13 Configuring VTP Monito ring VTP[...]

C HAPTER 14-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 14 Configuring IGMP Sno oping and MVR This cha pter d escribes how to co nfigure Interne t Group Ma nageme nt Protoc ol (IGMP) sn ooping on your Cisco Systems Intelligen t Gigabit Ethe rnet Switch Modul e, including [...]

14-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Unders tanding IGMP Snooping Understandin g IGMP Snooping Layer 2 switches can use IGMP snooping to constra in the flooding of multic ast tr af fic b y dynamically conf [...]

14-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Underst andin g IGMP Snoop ing Note The switch suppor ts IGMPv3 snooping based only o n the d estination mu lticast MA C address. It does not support snoo ping based on th e sour[...]

14-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Unders tanding IGMP Snooping Figur e 14-1 Initial IG MP J oin Message Router A se nds a genera l query to the switch, wh ich forwards th e query to por ts 2 thro ugh 5, [...]

14-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Underst andin g IGMP Snoop ing the mes sage is not flooded t o other po rts on the switc h. Any known multica st traffic is forwarded to the group a nd not to the CPU. Any un kno[...]

14-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Unders tanding IGMP Snooping Immediate-Le ave Proces sing Immediate L e a ve is only sup ported with IGMP v ersion 2 hosts. The switc h uses IGMP snoo ping Imme diate- L[...]

14-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Configuring IGMP Snooping Source-On ly Networks In a sou rce-only net work, sw itch ports ar e connected to multica st source po rts and multic ast router ports. The switch ports[...]

14-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Configuring IGMP Snooping Default IGMP Snoopi ng Configuration T ab le 14-3 shows the default IGMP snooping configurati on. Enabling or Disa bling IGMP Snooping By defau[...]

14-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Configuring IGMP Snooping T o disabl e IGMP snoop ing on a V LAN inter face, use the no ip igmp snooping vlan vlan-id glo bal configurati on comm and for the spe cified VLAN numb[...]

14-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Configuring IGMP Snooping This example shows how to configure IGMP sno oping to use CGMP packets as the lear ning method : Switch# configure terminal Switch(config)# ip[...]

14-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Configuring IGMP Snooping T o remov e the Layer 2 port fr om the multicast gro up, use the no ip igmp snooping vlan vla n-id static mac-address interf ace interface-i d globa l [...]

14-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Configuring IGMP Snooping Configuring th e IGMP Leav e Timer Foll ows these guidelines whe n config uring the IGMP lea ve timer: • Y ou can configure th e leave time [...]

14-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Configuring IGMP Snooping Beginning in privileged EXEC mo de, follow these s teps to disable IG MP report suppressio n: T o re-enabl e IGM P report suppre ssion, us e the ip igm[...]

14-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Displaying IGMP Snooping Information T o enable IP multicast-so urce-only learni ng, use the ip igmp snooping source-only-lear ning glob al conf iguration command. T o [...]

14-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Understanding Multicast VLAN Registration For more inform ation about t he keywords a nd option s in these comman ds, see the c ommand refere nce for th is rel ease. For example[...]

14-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Unde rsta ndin g Mu ltica st VLA N Re gistr atio n The switch CPU identif ies the MVR IP multicast str eams and their associated MA C addresses in the switch forwarding[...]

14-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Configuring MVR Figur e 14-3 Multica st VLAN Registr ation Example MVR elimin ates the n eed to d uplicate te levision-cha nnel multicast traff ic for subscriber s in each VL AN[...]

14-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Conf igurin g MVR Default MVR Configuration T ab le 14-5 shows the def ault MVR conf iguration. MVR Configuratio n Gu idelines and Limitations Foll ow these g uidelines[...]

14-19 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Configuring MVR T o return the switch to its defaul t settings, use th e no mvr [ mode | group ip-a ddress | querytime | vl an ] global configurati on comman ds. This e xample s[...]

14-20 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Conf igurin g MVR Y ou can use the show mv r members pri vileged EXEC command to v erify the MVR multic ast group addresses on the switch. Configuring MVR Interfaces Be[...]

14-21 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Displaying MVR Information This exam ple sh ows ho w to configure a port as a r eceiv er po rt, st aticall y configur e the port to receive multica st traf fic se nt to t he mul[...]

14-22 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Con figur ing IGMP F ilte ring a nd Th rott ling prof ile den ying access to a multic ast group is a pplied to a swit ch port, the IGMP join r eport requesti ng the str[...]

14-23 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Configuring IGMP Filtering and Throttling Configuring IGMP Profiles T o conf igure an IGMP prof ile, use the ip igmp pr ofile global co nf iguration co mmand with a prof ile num[...]

14-24 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Con figur ing IGMP F ilte ring a nd Th rott ling Switch# show ip igmp profile 4 IGMP Profile 4 permit range 229.9.9.0 229.9.9.0 Applying IGMP Profil es T o control ac c[...]

14-25 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Configuring IGMP Filtering and Throttling Setting th e Maximum Number of IGM P Groups Y ou can set t he maxim um numbe r of IGM P groups tha t a Laye r 2 inter face can join by [...]

14-26 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Con figur ing IGMP F ilte ring a nd Th rott ling • If you conf igure the thr ottling action and set the maximum group limitat ion after an interf ace has added mu lti[...]

14-27 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 4 Configuring IGMP Snoopi ng and MVR Displaying IGMP Filtering and Throttling Configuration Displaying IGMP Filtering and Throttling Configuration Y ou can displ ay IGMP p rofile charac teristics, and yo u can disp[...]

14-28 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapte r 14 Confi gurin g IGMP Sn ooping a nd MVR Displaying IGMP Filterin g and Throttling Co nfiguration[...]

C HAPTER 15-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 15 Configuring Port-Base d Traffic Control This chap ter describe s ho w to co nf igure th e port-b ased traf fi c contro l featur es on your Cisc o Systems Intell igent Gigabi t Ethern et Switch Mo dule. Note For c [...]

15-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 15 C onfiguring Port-Based Traffic Control Configuring Storm Control The th reshold s can e ither be expressed as a per centage of the total av ai lable b andwidt h that c an be u sed by t he broadcast, mu ltica[...]

15-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 5 Configuring Port-Base d Traffic Cont rol Configuring Protected Ports T o disabl e storm co ntrol, use the no storm-control br oadcast level , the no storm-contr ol multicast lev el , or the no storm-control unicas[...]

15-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 15 C onfiguring Port-Based Traffic Control Configuring Port Security Beginning in privileged EXE C mode, follow thes e steps to define a po rt as a protec ted port: T o disabl e protecte d port, use the no switc[...]

15-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 5 Configuring Port-Base d Traffic Cont rol Conf iguring Po rt Securit y Secure MAC Addresses Y ou can configure th ese types of sec ure MA C addresse s: • Static secure MA C addres ses—T hese a re man ually c on[...]

15-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 15 C onfiguring Port-Based Traffic Control Configuring Port Security out of this state by enteri ng the errdisable recov ery cause psecure-violat ion globa l configuration comm and, or you ca n manual ly re-ena [...]

15-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 5 Configuring Port-Base d Traffic Cont rol Conf iguring Po rt Securit y IP phone requ ires up to two MAC a ddresses . The addre ss of the IP phone is lea rned on the voice VLAN, a nd it might or migh t not be le arn[...]

15-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 15 C onfiguring Port-Based Traffic Control Configuring Port Security Step 4 switchport port-se curity Enable po rt security on th e interf ace. Step 5 switchport port-security maximum value (Optiona l) Set the m[...]

15-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 5 Configuring Port-Base d Traffic Cont rol Conf iguring Po rt Securit y T o return the inter face to th e defau lt conditi on as not a secu re port, u se the no switchport port -security interf ace config uration co[...]

15-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 15 C onfiguring Port-Based Traffic Control Configuring Port Security Use this feature to rem ove and add PCs o n a secure port without manu ally delet ing the existing secure MA C addresses and to still limit t[...]

15-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 5 Configuring Port-Base d Traffic Cont rol Displayin g Port-Bas ed Traffic Contr ol Settings Displaying Port-Based Traffic Control Settings The sho w interfa ces i nterface-id swi t chport privileged EXEC command d[...]

15-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 15 C onfiguring Port-Based Traffic Control Displaying Port-Based Tra ffic Control Sett ings[...]

C HAPTER 16-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 16 Configuring UDLD This c hapter d escribes how to configure t he Un iDirectio nal Lin k Detec tion (UD LD) pr otocol o n your Cisco Systems Intelligen t Gigabit Ethernet Swit ch Module. Note For c omplete s yntax a[...]

16-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 16 Configuring UDLD Unders tanding UDLD A unidirectio nal link occurs wh ene ve r traff ic sent by a local de vice is recei ved by its neigh bor but tr af fic from the neighb or is not recei ved by the local de [...]

16-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 6 Configuring UDL D Understand ing UDLD • Ev ent-dri ven detect ion and ec hoing UDLD re lies on ech oing a s its detectio n mechan ism. Whene ver a U DLD dev ice le arns about a ne w neighb or or receives a resyn[...]

16-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 16 Configuring UDLD Conf igurin g UDLD Configuring UDLD This se ction de scribes how to configure U DLD on your swi tch. It cont ains this configurati on inform ation: • Default UD LD Configurati on, page 16-4[...]

16-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 6 Configuring UDL D Configur ing UDLD Enabling UDL D Globally Beginn ing in pri vileged EXEC mode, follo w these steps to enable UDLD in the aggressi ve or norma l mode and to set the conf igurable message timer on [...]

16-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 16 Configuring UDLD Conf igurin g UDLD Enabling UDL D on an Inte rface Beginn ing in pri vileged EXEC mode, follo w these steps to enable UDLD in the aggressi ve or norma l mode on an i nterf ace: T o disable UD[...]

16-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 6 Configuring UDL D Displaying UDLD Status Y ou can also bri ng up the interfac e by using these com mands: • The shutdown interfac e configuration command fo llowed by the no shutdo wn interface conf iguratio n c[...]

16-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 16 Configuring UDLD Displa ying U DLD Sta tus[...]

C HAPTER 17-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 17 Configuring CDP This c hapter desc ribes how to c onfigure Cisco Discovery Protoco l (CDP) o n your C isco Syste ms Intell igent Gigabi t Ethern et Switch Mo dule. Note For c omplete s yntax and us age in forma ti[...]

17-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 17 Confi guring CDP Conf igurin g CDP Configuring CDP These sec tions inclu de CDP configurati on informat ion and proce dures: • Default CDP Configurat ion, page 17-2 • Conf iguring th e CDP Characte risti [...]

17-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 7 Configuring CDP Configuring CDP Use the no form of the CDP commands to return to the de fault settings . This e x ample sho ws how to confi gure CDP characteristic s. Switch# configure terminal Switch(config)# cdp[...]

17-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 17 Confi guring CDP Conf igurin g CDP Disabling an d Enabling CDP on an In terface CDP is enabled by def ault on all supported interf aces to send and receiv e CDP information. Beginn ing in pri vileged EXEC mod[...]

17-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 1 7 Configuring CDP Monitoring and Maintaining CDP Monitoring and Maintaining CDP T o monito r and m aintain CDP on yo ur device, per form one or mor e of the se tasks, beginning in privileged EXEC mode. Command Descr[...]

17-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 17 Confi guring CDP Monito ring and Maint aining CDP[...]

C HAPTER 18-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 18 Configuring SPAN and RSPAN This chap ter de scribe s ho w to conf igure Switche d Port Analy zer (SP AN) an d Remot e SP AN (RSP AN) on your Cisco Systems Intelligent Gigabit Ethernet Swit ch Module. Note For c om[...]

18-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 18 Configuring SPAN and RSPAN Understan ding SPAN and RSPA N Figur e 18-1 Examp le SP AN Configur ation Only traff ic that e nters or leaves source ports c an be monitore d by using SP AN. RSP AN ext ends SP A N[...]

18-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 18 Configuring SPAN and RSPAN Understandi ng SPAN and RSPAN SPAN and RS PAN Conc epts and T erminology This secti on describe s concepts and termi nology associ ated with SP A N and RSP AN configuration. SPAN Session [...]

18-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 18 Configuring SPAN and RSPAN Understan ding SPAN and RSPA N Source Port A source port (a lso called a monitor ed port ) i s a switched port that you monitor for ne twork traffic analy sis. In a single local SP [...]

18-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 18 Configuring SPAN and RSPAN Understandi ng SPAN and RSPAN Reflector Port The r eflec tor po rt is the me chanism that copi es pack ets onto an RSP AN VLAN. Th e ref lector port forwards onl y the t raff i c from t h[...]

18-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 18 Configuring SPAN and RSPAN Understan ding SPAN and RSPA N SPAN and RS PAN Interaction w ith Other Features SP AN interact s with these featu res: • Spanning T re e Protoc ol (STP) —A dest ination po rt o [...]

18-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 18 Configuring SPAN and RSPAN Configuring SPAN SPAN and RS PAN Session Limits Y ou can configure (a nd store in NVRA M) one l ocal SP A N session or mult iple RSP AN sessions on a switch . The number of acti ve ses si[...]

18-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 18 Configuring SPAN and RSPAN Configuring SPAN • An Ethe rChanne l port c an be a SP AN so urce po rt; it c annot be a SP AN destina tion port. • For SP AN so urce port s, you ca n monitor sent an d received[...]

18-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 18 Configuring SPAN and RSPAN Configuring SPAN This example sho ws how to set up a SP AN session, s ession 1, for monit oring source port traff ic to a destinati on port . First, a ny existing SP A N configurat ion fo[...]

18-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 18 Configuring SPAN and RSPAN Configuring SPAN This exam ple shows how to con figure the destinat ion po rt for ingress t raff i c on VL AN 5 by u sing a securi ty device tha t does not sup port IEEE 802.1Q enc[...]

18-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 18 Configuring SPAN and RSPAN Configuring SPAN Removin g Ports from a SPAN Session Beginning in pr ivileged EXEC mod e, follow these st eps to re move a port as a SP AN source for a se ssion: T o remove a source o r [...]

18-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 18 Configuring SPAN and RSPAN Configuring RSPAN Configuring RSPAN This secti on describe s ho w to configure RSP AN on your switch. It contain s this configurati on inform ation: • RSP AN C onfiguration Guide[...]

18-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 18 Configuring SPAN and RSPAN Configuring RSPAN Configuring a VLAN as an RSPAN VLAN First crea te a ne w VLAN to be the RSP AN VLAN for the RSP AN session. Y ou must create the RSP AN VLAN in all switches th at will [...]

18-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 18 Configuring SPAN and RSPAN Configuring RSPAN Creating an R SPAN Sour ce Session Beginning in privileged EXEC mo de, follow these st eps to star t an RSP A N source se ssion and to specify the monito red sour[...]

18-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 18 Configuring SPAN and RSPAN Configuring RSPAN This example shows how to clear any existing RSP AN configuration fo r session 1, co nfigure RSP AN session 1 to monitor multiple source inter faces, an d conf igure th[...]

18-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 18 Configuring SPAN and RSPAN Configuring RSPAN Removin g Ports from an RS PAN Session Beginn ing in pri vileged EXEC mode, fo llo w these steps to remo ve a port as an RSP AN source for a session: This exam pl[...]

18-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 18 Configuring SPAN and RSPAN Displaying SPAN and RSPAN Sta tus Displaying SPAN and RSPAN Status T o display the st atus of the cu rrent SP AN or RSP AN conf ig uration , use the show monitor privileged EXEC co mmand[...]

18-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 18 Configuring SPAN and RSPAN Display ing SPAN and RSP AN Status[...]

C HAPTER 19-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 19 Configuring RMON This c hapter d escribes how to c onfigure Remo te Network M onitori ng (RMO N) on you r Cisco Systems Intellige nt Gigabit Eth ernet Switch Module. RMON is a standard moni toring specif ication t[...]

19-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 19 Configuring RMON Conf iguring R MON Figur e 19-1 Remot e Monito ring Ex ample The switc h supports t hese RMON gr oups (defined in R FC 1757): • Statistics (RMON gro up 1)—Collects Ethernet, F ast Etherne[...]

19-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 19 Configur ing RMON Confi guring R MON Default RMON Configuration RMON is disa bled by default; no alarms or ev ents ar e configured. Only RMON 1 is supp orted on the swit ch. Configuring R MON Alarms and E vents Y o[...]

19-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 19 Configuring RMON Conf iguring R MON T o disable an al arm, use the no rm on al arm number glo bal con f igura tion com mand on e ach ala rm you configured . Y ou ca nnot disa ble at once a ll the a larms that[...]

19-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 19 Configur ing RMON Confi guring R MON Configuring RMON Colle ction on an Interface Y ou must f irst c onfigure RMO N alar ms and events to display collec tion infor mation. Beginning i n privileged EX EC mode , foll[...]

19-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 19 Configuring RMON Displa ying R MON Sta tus T o disabl e the coll ection o f gr oup Et hernet statistics, use the no rmon collec t ion stats inde x inte rface configurati on comm and. Displaying RMON Status T [...]

C HAPTER 20-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 20 Configuring System Message Logg ing This chapter d escribes how to configure system message logging on yo ur Cisco Systems Intelligent Gigabit Eth ernet Switc h Module. Note For c omplete s yntax and us age in for[...]

20-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 20 Config uring System Message Logging Configur ing System Mes sage Logg ing Configuring Sy stem Message Logging These sections descri be how to con figure syst em mes sage loggin g: • System Log Me ssage Form[...]

20-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 0 Configuring System Message Logg ing Config uring S ystem Message Logg ing This example shows a partial switch system message : 00:00:46: %LINK-3-UPDOWN: Interface Port-channel1, changed state to up 00:00:47: %LINK[...]

20-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 20 Config uring System Message Logging Configur ing System Mes sage Logg ing Disabling an d Enabling Mess age Logg ing Message logging is enab led by defau lt. It must be enabled to send messages to any destinat[...]

20-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 0 Configuring System Message Logg ing Config uring S ystem Message Logg ing The logging buffered global configurati on co mmand c opies log ging messages to an int ernal buf fer . T he buf fe r is c ircular, so newe[...]

20-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 20 Config uring System Message Logging Configur ing System Mes sage Logg ing Synchronizing Log Mes sages Y ou can configure th e system to synchro nize unso licited messa ges and debug pri v ileged EX EC comman [...]

20-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 0 Configuring System Message Logg ing Config uring S ystem Message Logg ing T o di sable synch ronization of unsolicite d messages an d debug output, use the no logg ing synchronous [ lev el sever ity- level | a ll [...]

20-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 20 Config uring System Message Logging Configur ing System Mes sage Logg ing Enabling a nd Disab ling Seque nce Numbers in Log Messa ges Becaus e ther e is a ch ance th at mo re than on e log mes sage ca n have [...]

20-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 0 Configuring System Message Logg ing Config uring S ystem Message Logg ing Note Specif ying a level ca uses messages at that le vel and nume ricall y lo wer le vels to appear at the destinatio n. T o d isable logg [...]

20-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 20 Config uring System Message Logging Configur ing System Mes sage Logg ing Limiting Syslog Messages Sent to the History Table and to SNMP If you enable d syslog message traps to be sent to an SNMP ne twork ma[...]

20-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 0 Configuring System Message Logg ing Config uring S ystem Message Logg ing Logging Messages to a UNIX Syslog Daemo n Before yo u can send sy stem log message s to a UNIX syslog server , you must con f igu re the s[...]

20-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 20 Config uring System Message Logging Display ing the Loggi ng Configur ation T o remov e a syslog serv er , use the no logging host global configurat ion comman d, and spec ify the syslog server IP address. T[...]

C HAPTER 21-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 21 Configuring SNMP This chapt er describes how to configure the Simple Net work Manageme nt Protocol (SN MP) on your Cisco Systems Intelligen t Gigabit Ethernet Swit ch Module. Note For comp lete synt ax and us age [...]

21-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 21 Co nfiguring SNMP Unders tanding SNMP • Using SNMP to Access MIB V ariables, page 21-4 • SNMP Notif ications, pag e 21-4 SNMP Versio ns This sof tware relea se suppor ts these SNMP version s: • SNMPv1?[...]

21-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 21 Configur ing SNMP Understanding SNMP T ab le 21-1 identif ies the charac teristics of the diff erent combina tions of security models and le vels. Y ou must configure t he SNMP agent to use the SNMP version supp or[...]

21-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 21 Co nfiguring SNMP Unders tanding SNMP The SNMP agent also sends unsolicited trap messages to notify an NMS that a signif icant e ve nt has occurred on the agent. Examples of tra p conditions in clude, b ut ar[...]

21-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 21 Configur ing SNMP Configuring SNMP T r aps a re un reliabl e bec ause t he re ceiver does n ot se nd an acknowled gment w hen it rece iv es a trap , and the send er canno t determin e if the trap w as rece iv ed. W[...]

21-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 21 Co nfiguring SNMP Conf iguri ng SN MP SNMP Config ura tion Guidelines If the switch starts and the switch startup conf iguration has at least one sn mp- ser ver global conf iguration comman d, the SNMP agen t[...]

21-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 21 Configur ing SNMP Configuring SNMP Configuring Community Strings Y ou use the SNMP c ommuni ty string t o define the relatio nship bet ween t he SNMP manager and th e agent. The co mmunity string ac ts like a passw[...]

21-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 21 Co nfiguring SNMP Conf iguri ng SN MP Note T o disabl e access for an SNM P commu nity , set the communi ty string for that com munity to the null string (do not enter a value for the c ommunity string). T o [...]

21-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 21 Configur ing SNMP Configuring SNMP Step 3 s nmp- server group groupname { v1 | v2c | v3 { auth | noauth | priv }} [ re ad re a d v i e w ] [ write writevi ew ] [ noti fy notify view ] [ access access -list ] Config[...]

21-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 21 Co nfiguring SNMP Conf iguri ng SN MP Configuring SNMP Notifications A trap manag er is a ma nageme nt station that re ceiv es and processes traps. T raps are s ystem alerts that the switc h gener ates when [...]

21-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 21 Configur ing SNMP Configuring SNMP Y ou can use the snm p-server host global configura tion c ommand to a sp ecific ho st to re ceive the notif ication types listed in T ab le 21-4 . Beginn ing in pri vile ged EXE[...]

21-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 21 Co nfiguring SNMP Conf iguri ng SN MP The snmp-ser ver host comm and sp ecif ies which ho sts rec ei ve the n otif ications. Th e snmp-server enab le trap command glob ally enab les the me chanism f o r the [...]

21-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 21 Configur ing SNMP Configuring SNMP Setting th e Agent Con tact and Lo cation Information Beginn ing in pri vileged EXEC mode, follo w these steps to set the system contact and locat ion o f the SNMP agen t so that[...]

21-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 21 Co nfiguring SNMP Conf iguri ng SN MP SNMP Examp les This example show s how to enable all versions of SNMP . Th e configuration permits any SNMP man ager to access all objects with read-only permissions usi[...]

21-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 21 Configur ing SNMP Disp la ying SNM P S tatu s Displaying SNMP Status T o display SNMP in put and ou tput statist ics, incl uding the number of illegal comm unity strin g entries , errors, and re quested vari ables[...]

21-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 21 Co nfiguring SNMP Displaying SNMP Status[...]

C HAPTER 22-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 22 Configuring Network Security with ACLs This chapte r describes ho w to conf igure network security on a Cisco Systems Intell ig ent Gigab it Ethern et Swi tch Mod ule b y using acc ess control li sts (A CLs), whic[...]

22-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Unders tanding A CLs Understandin g ACLs Pack et filter ing can lim it netw ork traf fic and r estrict net work use by cer tain user s or de vices. A CLs can fi lter tra[...]

22-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 2 Configuring Netw ork Security wit h ACLs Unde rsta ndin g ACL s Figur e 22-1 Usi ng ACLs t o Contr ol T raf fic t o a Networ k Handling Fragmented and Unfragmented Traffic IP packets can be fragmente d as they cro[...]

22-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Unders tanding A CLs • Packet B is fro m host 10.2.2. 2, port 65001, go ing to host 10.1 .1.2 on t he T elnet p ort. If this pa cket is frag mente d, the f irst fragme[...]

22-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 2 Configuring Netw ork Security wit h ACLs Unde rsta ndin g ACL s Switch (config-ext-nacl)# permit udp any any Switch (config-ext-nacl)# deny udp any any Switch (config-ext-nacl)# permit ip any any Switch (config-ex[...]

22-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Conf igurin g ACLs In this exam p le, the f irst A CE p ermits all th e TCP packets coming fro m host 10.1.1.1 with a destinati on TCP p ort num ber of 80. The second A [...]

22-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 2 Configuring Netw ork Security wit h ACLs Confi guring ACLs Creating Stan dard and Ex tended IP ACLs This se ction des cribes h o w to create swit ch IP A CLs. Th e switch te sts packets a gainst the cond itions in[...]

22-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Conf igurin g ACLs Note In addit ion to n umbered standard an d ex tended A CLs, you c an also creat e named standa rd and exte nded IP A CLs by u sing the suppor ted nu[...]

22-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 2 Configuring Netw ork Security wit h ACLs Confi guring ACLs Use th e no access-list access- list-number g lobal conf iguration command to delete the en tire A CL. Y ou cannot delete individual ACEs from n umbered a[...]

22-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Conf igurin g ACLs For more details a bout th e specific keywords re lative to each pr otocol, see the Cisco IP and IP R outing Comman d Reference, Cisco IOS Rel ease 1[...]

22-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 2 Configuring Netw ork Security wit h ACLs Confi guring ACLs Beginn ing in pri vileged EXEC mode, follo w these steps to create an extended A CL: Command Purp ose Step 1 co nfi g ure terminal Ent er globa l configu[...]

22-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Conf igurin g ACLs Use the no access-lis t acc ess-list-number gl obal conf iguration comman d to delete the entire access list. Y ou canno t dele te individual ACEs fr[...]

22-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 2 Configuring Netw ork Security wit h ACLs Confi guring ACLs Beginn ing in pr i vilege d EXEC m ode, follo w these st eps to cre ate a sta ndard named a ccess list using names: Beginning in pr ivile ged EXE C mode,[...]

22-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Conf igurin g ACLs When ma king th e stan dard and extended A C L, reme mber that, by de fault, the end o f the ACL cont ains an implicit de ny statement f or ev e ryth[...]

22-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 2 Configuring Netw ork Security wit h ACLs Confi guring ACLs Beginning i n privileged EX EC mode , foll o w th ese steps to con figure a tim e-range parame ter fo r an AC L : T o remov e a conf igured time-r ange, [...]

22-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Conf igurin g ACLs T o apply a time range, you must refere nce it by name (f or example , workhours ) in an extend ed A CL that can imple ment tim e ranges. This exampl[...]

22-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 2 Configuring Netw ork Security wit h ACLs Confi guring ACLs Switch(config)# ip access-list extended telnetting Switch(config-ext-nacl)# remark Do not allow Jones subnet to telnet out Switch(config-ext-nacl)# deny [...]

22-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Applying ACLs to Term inal Lines or Phy sical Interfac es Creating MAC Access Grou ps Beginning in privileged EXEC mo de, follow these steps t o create MAC access group[...]

22-19 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 2 Configuring Netw ork Security wit h ACLs Applying ACLs to Ter minal Lines or Physica l Interfaces After y ou cr eate a n A CL, y ou can apply it to o ne or m ore m anagem ent int erfaces or term inal lines. ACLs [...]

22-20 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Displa ying A CL Informa tion This e xample sho w s ho w to apply access list 2 on an interf ace to filter pack ets entering the interf ace: Switch(config)# interface g[...]

22-21 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 2 Configuring Netw ork Security wit h ACLs Displaying ACL Information Standard IP access list 32 permit 172.20.20.20 Standard IP access list 34 permit 10.24.35.56 permit 23.45.56.34 Extended IP access list 120 Exte[...]

22-22 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Examples for Compili ng ACLs interface GigabitEthernet0/1 7 ip access-group 11 in snmp trap link-status no cdp enable end! Examples for Co mpiling ACLs For detailed inf[...]

22-23 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 2 Configuring Netw ork Security wit h ACLs Examples for Compiling ACLs Numbered ACL Examples This example sho ws that the switch a ccepts ad dresses on net work 36.0.0.0 subnets an d denies all packets coming fro m[...]

22-24 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 22 Configuring Network Security with ACLs Examples for Compili ng ACLs In this ex ample o f a numbered A CL, the W inter and Sm ith w orkstatio ns are not al lowed t o bro wse the web: Switch(config)# access-li[...]

C HAPTER 23-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 23 Configuring QoS This chapte r describes ho w to conf igure quality of service (Qo S) by using autom atic-QoS (aut o-QoS) comm ands or by using standa rd QoS comma nds. Wi th QoS, you can give preferentia l treatme[...]

23-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Unders tanding QoS • Displayin g Stand ard QoS In formati on, page 23-36 • Standa rd QoS C onfiguration E xamples , page 2 3-36 Understandin g QoS This section descri bes how QoS is imp[...]

23-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Unde rsta ndin g QoS Figur e 23-1 QoS Cl assification La yers in F rames and P ack ets All swi tches and ro uters t hat access th e Inte rnet rely on the cla ss inf ormation to gi ve the same forw[...]

23-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Unders tanding QoS Action s at the egress in terface in clude queuei ng and scheduli ng: • Queuei ng e valuate s the CoS va lue and determi nes which of the four eg ress queu es in which [...]

23-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Unde rsta ndin g QoS For IP traff ic, you have these classification opti ons: • T r ust the IP DSCP in the incoming packet (configure the port to trust DSCP). The switch assigns the same DSCP to[...]

23-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Unders tanding QoS Classification Based on Class Maps and Policy Map s A class map is a mechanism th at you use to isolate an d name a speci fic traf fic flo w (or class ) from all other tr[...]

23-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Unde rsta ndin g QoS – 60 policers are supported on i ngress Gigabit-c apable Eth ernet ports . – Granular ity for the a verage burst ra te is 8 Mbps for Gigabit Ethernet ports. • On an inte[...]

23-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Unders tanding QoS Port Scheduli ng Each p ort on the swit ch has a single r eceiv e que ue buf f er (the ingre ss port) for incomi ng traffi c. When an untagged frame arr iv es, it is assi[...]

23-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Configuring Auto-QoS Configuring Auto-QoS Y ou can use t he auto-Q oS featur e to simp lify the deployment of existing QoS f eatures. Auto-QoS makes assumptions ab out the network design , and as [...]

23-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Conf iguri ng A uto -QoS T ab le 23-3 lists the generated auto-QoS conf iguration for the egress queues. When you en able the auto -QoS featu re on the f irst inte rfac e, these auto matic[...]

23-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Configuring Auto-QoS Effects of Auto-QoS on the Configuration When auto- QoS is enabled, th e auto q os vo ip interface co nfiguration comm and and the genera ted configurati on are add ed to the[...]

23-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Conf iguri ng A uto -QoS • By default, the CDP is enable d on all interf aces. For auto- QoS to function properly , do not disable the CDP . • Connecte d de v ices must use Cisco Call [...]

23-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Displaying Auto-QoS Information This e xample sho ws how to enab le auto-QoS an d to trust the QoS labe ls in incoming pack ets when the de vice connec ted to the i nterf ace i s detected as a Ci[...]

23-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Auto-QoS Con figuration Example Auto-QoS Configuratio n Example This se ction de scribes ho w you could impleme nt auto -QoS in a network, a s shown in Fi gure 23-3 . Fo r optimum Q oS per[...]

23-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Auto-QoS C onfiguratio n Example Beginn ing in pri vile ged EXEC mode, follo w these steps to conf igure the switch at the edge of the QoS domain to prior itize the V oIP traf fic ov er all other[...]

23-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Configur ing Standard Qo S Configuring St andard QoS Before configur ing standar d QoS, you must have a thorough unde rstandi ng of these item s: • The type s of applicat ions used and t[...]

23-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Confi guring Standa rd QoS • All ingress Q oS processing act ions apply to con trol traff ic (such as spa nning-tr ee bridge pro tocol data units [ BPDUs] and r outing update pack ets) that the[...]

23-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Configur ing Standard Qo S Configuring the Trust State on Po rts within the QoS Domain Pa ckets en tering a QoS do main are cla ssif ied at the edge of the QoS domain. When the pack ets ar[...]

23-19 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Confi guring Standa rd QoS T o return a port to its untrusted state, use the no mls qos trust inte rface c onfigurati on co mmand. For informatio n on ho w to chan ge the d efault Co S v alue, se[...]

23-20 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Configur ing Standard Qo S T o return to the default setting, u se the no mls qos cos { def ault-cos | override } interface co nfiguration comm and. Configuring Trusted Boundar y In a t yp[...]

23-21 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Confi guring Standa rd QoS Beginning in privileged EX EC mode , follow these ste ps to configure tr usted bound ary on a sw itch port: When yo u ente r the no mls qos trust interface con figurati[...]

23-22 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Configur ing Standard Qo S T ab le 23-6 lists the por t configuratio n when an IP phone is pr esent or abse nt. Enabling Pass-Through Mode The swit ch assigns a C oS v alue of 0 to all inc[...]

23-23 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Confi guring Standa rd QoS Configuring a QoS Policy Conf iguring a QoS polic y typically r equires classifying traf fic int o classes, conf iguring policies applied to those traf fic classes, and[...]

23-24 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Configur ing Standard Qo S For more information ab out creating IP stand ard A CLs, see the “Gui deline s for A pplying ACLs to Physical Int erfaces ” section on page 2 2-5 . T o delet[...]

23-25 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Confi guring Standa rd QoS Beginn ing in pri vileged EXEC mode, follo w th ese step s to create an IP exte nded A CL for IP traf f ic: Command Purpose Step 1 conf igure t erminal Enter g lobal c [...]

23-26 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Configur ing Standard Qo S For more information about crea ting I P e xtended A CLs, see the “Guide lines for Appl ying A CLs to Physical Int erfaces ” section on page 2 2-5 . T o dele[...]

23-27 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Confi guring Standa rd QoS This e xample sho ws how to create a L ayer 2 MA C A CL with a permi t stateme nt. The sta tement allo ws traff ic from the host with MAC address 0001.0 000.0001 to t h[...]

23-28 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Configur ing Standard Qo S T o delete an e x is ting clas s ma p, us e the no class-map c lass-map-nam e gl obal con f igurat ion comma nd. T o remove a ma tch cr iterio n, use th e no m a[...]

23-29 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Confi guring Standa rd QoS Beginning in privileged EX EC mode, fol low these steps to crea te a policy ma p: Command Purpose Step 1 conf igure t erminal Enter g lobal c onfiguration m ode. Step 2[...]

23-30 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Configur ing Standard Qo S T o delete an existing policy map, use th e no policy-map poli cy-map- name global configuratio n comm and. T o delete an exist ing class ma p, use the no cl ass[...]

23-31 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Confi guring Standa rd QoS This e xample sho ws ho w to create a polic y map and attach it to an ingress i nterf ace. In the co nf iguration, the I P standard A CL per mits traff ic from net work[...]

23-32 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Configur ing Standard Qo S Configuring the CoS-t o-DSCP Map Y o u use t h e CoS- to-DSCP ma p to map CoS v alues in in coming p ackets to a DSCP v alue that QoS u ses internall y to r epre[...]

23-33 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Confi guring Standa rd QoS Configuring the DSCP-to- CoS Map Y ou use the DSCP-t o-CoS map to ma p DSCP values in incoming pa ckets to a CoS value, which is use d to sele ct one of th e four egr e[...]

23-34 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Configur ing Standard Qo S This example shows how the DSCP values 26 and 48 are mapp ed to CoS value 7. For the remaini ng DSCP v alues, the DSCP-to-CoS mapping is the default. Switch(conf[...]

23-35 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Confi guring Standa rd QoS Configuring WRR Prior ity Beginn ing in pri vilege d EXEC mode, follo w th ese step s to configur e the WRR priority: T o disable the WRR scheduling and enable the stri[...]

23-36 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Display ing Standard Qo S Information Displaying Standard QoS In formation T o display sta ndard QoS informat ion, use on e or more of the pr ivileged EXEC co mmands i n Ta b l e 2 3 - 9 :[...]

23-37 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Stan dard QoS Co nfigur ation Examples Figur e 23-5 QoS Configu ration Exampl e Netw or k QoS Configuration for th e Existing Wiring Clos et Figure 23-5 shows an existing w iring closet wi th Cat[...]

23-38 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Standard Q oS Configuration Examples For the Cataly st 2900 an d 3500 XL switches , CoS configures each t ransmit p ort (the egress p ort) wit h a normal-pr iority tr ansmit queue and a hi[...]

23-39 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 3 Configuring Qo S Stan dard QoS Co nfigur ation Examples Step 18 show c lass-map videoclass show policy-map videopolicy show mls qos maps [ cos- dscp | dscp-cos ] V e rify y our ent ries . Step 19 copy running-con[...]

23-40 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapt er 23 Config urin g QoS Standard Q oS Configuration Examples[...]

C HAPTER 24-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 24 Configuring EtherChannels and Layer 2 Trunk Failover This ch apter describe s how to configure E therChann el on the switch Layer 2 interfaces a nd Lay er 2 trunk failover on Cisco Systems Inte lligent Gigabit Eth[...]

24-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 24 Configur ing EtherChanne ls and Layer 2 Trunk Failover Unders tanding Ether Channels Figur e 24-1 T ypical EtherChannel Con figuration Note Th e network device to wh ich you r switc h is conn ected can im pos[...]

24-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 4 Configuring EtherCh annels and Layer 2 Trunk Fa ilover Understa nding Et herChann els Figur e 24-2 Re lationship of P hysic al P orts, Lo gical Po rt Channels, and Channel Gr oups When a port joins an EtherC hanne[...]

24-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 24 Configur ing EtherChanne ls and Layer 2 Trunk Failover Unders tanding Ether Channels PAgP and LACP Modes T ab le 24-1 shows the user-configurable EtherC hannel modes f or the channel-gr o up interfa ce conf i[...]

24-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 4 Configuring EtherCh annels and Layer 2 Trunk Fa ilover Understa nding Et herChann els Exchanging LA CP Packe ts Both the acti ve and passive LA CP mo des allo w interf aces to negoti ate with partner inter faces t[...]

24-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 24 Configur ing EtherChanne ls and Layer 2 Trunk Failover Unders tanding Ether Channels P AgP sen ds and receives P AgP PDUs only fr om interface s that have P AgP enable d for the auto or desir able mode. LA CP[...]

24-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 4 Configuring EtherCh annels and Layer 2 Trunk Fa ilover Understa nding Et herChann els Figur e 24-3 Load D istr ibution and F orwar ding Methods W i th source-a nd-destin ation MA C address fo rwarding, pa ckets fo[...]

24-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 24 Configur ing EtherChanne ls and Layer 2 Trunk Failover Configur ing EtherChann els Configuring Eth erChannels These sec tions descr ibe how to configure EtherCh annel inte rfaces: • Default Eth erChanne l C[...]

24-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 4 Configuring EtherCh annels and Layer 2 Trunk Fa ilover Config uring Ether Channel s • When a group is first cr eated, all ports follow the parameters set for the f irst port to be added to the group. If you chan[...]

24-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 24 Configur ing EtherChanne ls and Layer 2 Trunk Failover Configur ing EtherChann els Step 3 switchport mode { access | trunk } switchport acces s vlan vl an-i d Assign all interf aces as static-access ports in[...]

24-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 4 Configuring EtherCh annels and Layer 2 Trunk Fa ilover Config uring Ether Channel s T o remove a port from the E therCha nnel group, u se t he no channel-group interface co nfiguration comm and. If you de lete t [...]

24-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 24 Configur ing EtherChanne ls and Layer 2 Trunk Failover Configur ing EtherChann els Beginning i n privileged EXEC mode , follow these steps t o configure E therChan nel loa d balanc ing: T o return Et herChan[...]

24-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 4 Configuring EtherCh annels and Layer 2 Trunk Fa ilover Config uring Ether Channel s The switc h supports ad dress learn ing only on aggregate ports even though the physical-por t keyword is prov ided in the comma[...]

24-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 24 Configur ing EtherChanne ls and Layer 2 Trunk Failover Configur ing EtherChann els If mor e than eig ht links are configured for an E therCha nnel gr oup, the software dete rmines which of the hot standby po[...]

24-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 4 Configuring EtherCh annels and Layer 2 Trunk Fa ilover Displaying Ethe rChannel , PAgP, and LACP Status Displaying EtherCh annel, PAgP, and LACP Status Y ou can use the privileged EXEC co mmands descri bed in T a[...]

24-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 24 Configur ing EtherChanne ls and Layer 2 Trunk Failover Configur ing Layer 2 Tru nk Failover The li nk state of the do wnstream in terfaces d epend on the link state of the upstre am interfaces in th e associ[...]

24-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 4 Configuring EtherCh annels and Layer 2 Trunk Fa ilover Confi guring L ayer 2 Trunk Failover Layer 2 Trunk Failo ver Configuratio n Guidelines Follow these guideli nes to avoid configuration pr oblems: • Do not [...]

24-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 24 Configur ing EtherChanne ls and Layer 2 Trunk Failover Display ing Layer 2 Tru nk Failover Stat us Displaying Layer 2 Trunk Failover Status Use the show link state gr oup command to display t he link-state g[...]

C HAPTER 25-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 25 Troubleshooting This chap ter descr ibes ho w to identify and resolv e Cisco Systems In telligent Gig abit Ethernet Switch Module sof tware prob lems rel ated to the Ci sco IOS s oftware. De pending on t he natur [...]

25-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 25 Troubl eshoot ing Using Re covery Procedures Foll ow these steps to reco ver fro m a softw are fai lure: Step 1 Connect a PC with ter minal-emulatio n software suppor ting the Xmodem Protoco l to the switch s[...]

25-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 5 Troubleshooting Using Reco very Procedu res Step 7 Load a ny helper files: switch: load_helper Step 8 Dis play th e cont ents of flash memory: switch: dir flash: The switch f ile system appears in the directory . [...]

25-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 25 Troubl eshoot ing Using Re covery Procedures Password Recovery with Password Rec overy Enabled If the pass word-re covery me chan ism i s en abled, th is mes sage appea rs: The system has been interrupted pri[...]

25-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 5 Troubleshooting Using Reco very Procedu res Step 10 Ente r global co nfiguration mo de: Switch# configure terminal Step 11 Chang e the password: Switch (config)# enable secret password The secre t passw ord can b [...]

25-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 25 Troubl eshoot ing Using Re covery Procedures Foll ow these steps when the passw ord-reco very mech anism is disa bled: Step 1 Elec t to cont inue with password r ecov ery and lose t he existin g conf iguratio[...]

25-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 5 Troubleshooting Prevent ing Aut onegoti ation Mismatches Preventing Autone gotiation Mismatches The IEEE 802.3ab a utonegotia tion proto col manages th e switch set tings for spee d (10 Mbps, 10 0 Mbps, and 1000 M[...]

25-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 25 Troubl eshoot ing Diagno sing Connec tivity Prob lems Using Pi ng This section cons ists of this information: • Understa nding Ping , page 25-8 • Executing Ping, page 25-8 Understanding Ping The switch su[...]

25-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 5 Troubleshooting Diagnosi ng Conne c tivit y Proble ms T ab le 25-1 descr ibes the po ssible ping cha racter out put. T o term inate a ping se ssion, ente r the esca pe sequen ce ( Ctrl-^ X by def a ult). Y ou ente[...]

25-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 25 Troubl eshoot ing Diagno sing Connec tivity Prob lems • A switch is reac hable fr om anothe r switch when you can t est conne ctivity by using the ping privileged EXEC comma nd. All switches in the physica[...]

25-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 5 Troubleshooting Using Debug C ommands Using Debug Commands This se ction expl ains h o w you use the debug comman ds to di agno se and resol ve intern etw orking proble ms. It co ntains this i nformati on: • En[...]

25-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 25 Troubl eshoot ing Using D ebug Com mands Enabling All-Sy stem Diagnos tics Beginn ing in pr iv ilege d EXEC mode, enter this command to enable a ll-system diag nostics: Switch# debug all Cautio n Because de [...]

25-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Chapter 2 5 Troubleshooting Usin g the cra shin fo Fil e For more information about auto-Q oS, see the “Configuri ng Auto-QoS” sec tion on page 2 3-9 . This e xample sho ws ho w to display t h e QoS co mmands that ar e a[...]

25-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R9746 Chapter 25 Troubl eshoot ing Using t he cras hinfo F ile Y o u can dis play th e most rec ent cras hinfo file (t hat is, the f ile with the hi ghest sequence n umber at the end of its f ilename) b y enter ing the show [...]

A- 1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 APPEND IX A Supported MIBs This append ix lists th e supported M IBs for this rele ase of the Cisco Syst ems Intell igent Gigab it Etherne t Switch M o dule. It contain s these section s: • MIB List, pa ge A-1 • Usin g FT[...]

A- 2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendi x A Supported MI Bs MIB List • CISCO-R TTM ON-MIB (sub systems support ed: sub_rt t_rmon and sub_ rtt_rmonli b) • CISCO-SMI • CISCO_ST A CKMAKER_MIB • CISCO-STP-EXTENSIONS-MIB • CISCO-SYSLOG-MIB • [...]

A-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix A Supported MIBs Using FTP to Access the MIB Files Using FTP to Access the MIB Files T o access the Managem ent Information Base ( MIBs) for th e Cisco Systems Intelligent Gi gabit Ethernet Switch M o dule, follo w t[...]

A- 4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendi x A Supported MI Bs Using FTP to Access the MIB Fi les[...]

B-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 APPEND IX B Working with the Cisco IOS File System, Configuration Files, an d Software Images This appendi x describes ho w to manipulate th e Cisco Systems Intelligent Gig abit Ethernet Switch Module fl ash file system, how t[...]

B-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith the Flash Fil e System Displaying Available File Systems T o display the av ai lable file systems o n your swi[...]

B-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with the Flash File System Setting the Def ault File System Y o u can specify the f ile system o r direct o ry tha t the [...]

B-4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith the Flash Fil e System T o display information about f iles on a file system, use one of the pri vilege d EXEC[...]

B-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with the Flash File System Use t he /recursiv e keyword to delet e the nam ed direc tory an d all subd irector ies and t [...]

B-6 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith the Flash Fil e System Deleting Files When you no lon ger nee d a file o n a flash memory device, you can pe r[...]

B-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with the Flash File System This e xample sho w s ho w to create a tar f ile. This command writes the content s of the new[...]

B-8 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configuration Files For flas h:/ f ile-url [ dir/file ...], sp ecify the loca tion on the local flash f ile sy[...]

B-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Configuration Files This section includes this informa tion: • Guidel ines for Creati ng and Using Con figuration [...]

B-10 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configuration Files Configuration File Types and Lo cation Startup co nfiguration files are used du ring syst[...]

B-11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Configuration Files Make sure tha t the /et c /service s file co ntains this line: tftp 69/udp Note Y ou must resta[...]

B-12 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configuration Files Uploading the Configurati on File By Using TFTP T o upload a con fig uratio n f ile f rom[...]

B-13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Configuration Files If the server has a di rectory st ructure, the configurat ion file is writte n to or copied fro[...]

B-14 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configuration Files This exam ple shows how to copy a c onfiguration file na med host1- confg from the ne tad[...]

B-15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Configuration Files This exam ple shows how to copy th e run ning co nfiguration f ile na med switch2-confg to the [...]

B-16 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configuration Files • The r emote usern ame ass ocia ted wi th th e cur rent T TY (te rmina l) proc ess. Fo[...]

B-17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Configuration Files Downloading a Configura tion File By Using RCP Beginning in privileged EXEC mode , follow these[...]

B-18 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configuration Files Uploading a Configuration File By Using RCP Beginn ing in pr i vilege d EXEC mode, follo [...]

B-19 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Software Images Clearing Con figuration Information Y ou can clear the configurat ion inform ation fr om the startu[...]

B-20 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Imag es Image Loca tion on the Sw itch The s oftw are image is stor ed as a .bin f ile in a dire cto[...]

B-21 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Software Images Copying Imag e Files By Us ing TFTP Y o u can do wnload a switch image fr om a TF TP serv er or upl[...]

B-22 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Imag es • Before up loadin g the image f ile, you mi ght need to create an em pty file on the TFTP[...]

B-23 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Software Images The do wnlo ad al gorithm ver ifies that the im age i s app ropriate for t he swit ch mode l and th[...]

B-24 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Imag es Cautio n For the download and uplo ad algor ithms to ope rate prope rly , do not rena me ima[...]

B-25 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Software Images Before yo u begin do wnloadi ng or uploadin g an image file by using FTP , do these tasks: • Ensu[...]

B-26 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Imag es The do wnload algorithm veri fies th at the image is appropria te for the switch model and t[...]

B-27 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Software Images The alg orithm installs the dow nloa ded image onto the syste m board flash device (flash:). The im[...]

B-28 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Imag es The archi ve upload-sw command build s an image file o n the server b y uploading these f il[...]

B-29 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Software Images Before yo u begin do wnloadi ng or uploadin g an image file by using RCP , do these tasks: • Ensu[...]

B-30 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Imag es The do wnload algorithm veri fies th at the image is appropria te for the switch model and t[...]

B-31 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Append ix B Working with the Cis co IOS File Syst em, Configura tion Files, and Sof tware Images Working with Software Images The alg orithm installs the dow nloa ded image onto the syste m board flash device (flash:). The im[...]

B-32 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix B W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Imag es The archi ve upload-sw priv ileged EXE C command bu ilds an image f ile on the serve r by up[...]

C-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 APPEND IX C Getting Help and Tech nical Assistance If you nee d help, servic e, or tech nical assi stance or ju st want more inf ormatio n about IBM pr oducts, you will find a wide variet y of sourc es available fro m IBM to a[...]

C-2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix C Getting Help and Technical Assistance Usin g the Docu mentati on Using the Docume ntation Informati on about your IBM BladeCenter , xSeries, or Intel liStation system and preinstalled softwa re, if any , is [...]

D- 1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 APPEND IX D Notices This i nformat ion was d e veloped fo r prod ucts and services offered in the U. S.A. IBM ma y not o f fer the produc ts, ser vices, or features discusse d in thi s docum ent in o ther cou ntries. Consult [...]

D- 2 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix D Notices Edition Not ice Edition Notice © Copyright Intern ation al Business M achi nes Corpo ration 2 004. A ll rights reserved. U.S. Go vernment Users Restricted Rights — Use, duplication, or disclosure[...]

D-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Appendi x D N otice s Tradema rks Ja v a and all J av a-based trademark s and l ogos are tr ademar ks or re gistered tr ademarks o f Sun Microsy stems, Inc . in the United States, oth er countries, or both. Other com pany , pr[...]

D- 4 Cisco Systems In te lligent Gigabit Ethernet S witch Modules f or the IBM BladeCenter, Soft ware Configuration Gu ide 24R 974 6 Appendix D Notices Tradem arks[...]

IN-1 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 INDEX Numerics 802.1 Q and trunk ports 7-2 enca psulat ion 12-14 A abbrev iating co mmand s 2-4 acces s-class comma nd 22-19 acces s contr ol entries See ACEs access con trol lists See ACLs access cont rol param eter See ACP [...]

Index IN-2 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 monitori ng 22-20 named 22-12 numbers 22-7 protoc ol param eters 22-9 standa rd IP configuring for QoS classi fication 23-23 crea ting 22-8 matc hing cri teria 22-7 time ranges 22-14 unsuppo rted fea tures 22-6 ACP syst[...]

Inde x IN-3 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 B Back boneFa st describe d 11-5 enab ling 11-14 support fo r 1-3 banners config uring login 4-18 mess age-of- the- day lo gin 4-16 default configur ation 4-16 when disp laye d 4-16 booting boot loa der, func tion of 3[...]

Index IN-4 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 CLI (co ntinued) history chan ging th e buff er si ze 2-5 describe d 2-5 disabling 2-6 recal ling comm ands 2-6 no and default forms o f comma nds 2-4 client mode, VTP 13-3 clo ck See system clock comm and-li ne in terf[...]

Inde x IN-5 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 default configur ation auto-Q oS 23-9 banners 4-16 booting 3-7 CDP 17-2 DNS 4-15 EtherC hannel 24-8 IEEE 8 02.1x 6-11 IGMP f ilteri ng 14-22 IGMP sn ooping 14-8 IGMP throttling 14-22 initial switc h information 3-2 Lay[...]

Index IN-6 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 DSCP 1-5, 23-2 DSCP-to-CoS ma p for QoS 23-33 DTP 1-4, 12-15 dynami c access port s char acte rist ics 12-3 config uring 12-28 defined 7-2 dynami c addresse s See ad dresses dynami c desirable t runking mode 12-15 dynam[...]

Inde x IN-7 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 exten ded-r ange VLA Ns (cont inued) config uring 12-11 crea ting 12-12 exten ded sys tem I D MSTP 10-13 STP 9-4, 9-15 Extensib le Authen tication Prot ocol over LA N 6-1 F fallba ck VLAN n ame 12-27 fea tures , Ci sco[...]

Index IN-8 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 help, for th e command line 2-3 history chan ging th e buff er si ze 2-5 describe d 2-5 disabling 2-6 recal ling comm ands 2-6 history t able, leve l and nu mber of syslog messages 20-10 hosts, limit on dynamic por ts 1[...]

Inde x IN-9 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 interfac es (continue d) config uring sp eed 7-11 coun ters, cle aring 7-15 describe d 7-12 descript ive name , addin g 7-12 displaying inform ation about 7-13 monitoring 7- 13 naming 7-12 physical, ide n tifying 7-4 r[...]

Index IN- 10 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Layer 2 trunk failov er config uration gui delines 24-17 config uring 24-17 default configur ation 24-16 describe d 24-15 displaying sta tus 24-18 Layer 3 pa ckets, classi ficatio n methods 23-2 Layer 3 pa rameter s o[...]

Inde x IN- 11 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 monito ring (co ntinued ) IGMP filters 14-27 snooping 14-14 interfac es 7-13 multicas t router p orts 14-15 MVR 14-21 network traf fic for analysis with probe 18-1 port pr otection 15-11 speed a nd dupl ex mode 7-12 [...]

Index IN- 12 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 MSTP (c ontinued) root switch config uring 10-14 effec ts of extended syst em ID 10-13 unexpec ted b ehavior 10-14 shutdown Po rt Fast-ena bled por t 11-3 multicas t groups and IGMP sno oping 14-7 Immedi ate Lea ve 14[...]

Inde x IN- 13 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 passwords default configur ation 5-2 encr ypting 5-4 overvi ew 5-1 recove ry of 25-2 setting enab le 5-3 enab le sec ret 5-4 Telne t 5-5 with user names 5-6 VTP domain 13-8 path cost MSTP 10-17 STP 9-19 per-V LAN spa[...]

Index IN- 14 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 port-base d authen tication (conti nued) ports author ization s tate and dot1x port-con trol comm and 6-4 autho rized an d unauth orized 6-4 port security , multiple-ho sts mode 6-6 resetting to defau lt values 6-22 s[...]

Inde x IN- 15 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 Q QoS and MQC comman ds 23-1 auto-Q oS categor izing tra ffic 23-9 config uration an d defaul ts display 23-13 config uration gui delines 23-11 describe d 23-9 displaying 23-13 effec ts on NVRAM co nfigura tion 23-11[...]

Index IN- 16 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 QoS (conti nued) policy m aps char acte ristic s of 23-28 config uring 23-28 displaying 23-36 queueing, define d 23-4 sc hedul ing, defi ned 23-4 support fo r 1-5 trusted bou ndary 23-20 trust sta tes 23-4 underst and[...]

Inde x IN- 17 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 remote mon itoring see RMON Remote Networ k Monitoring See RMON report su ppression , IGM P describe d 14-6 disabling 14-13 resettin g a UDLD-shutdown in terface 16-6 restr icting access NTP serv ices 4-7 overvi ew 5[...]

Index IN- 18 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 RSTP (contin ued) rapid co nvergen ce describe d 10-6 edge po rts an d Port Fast 10-6 point-to-poin t links 10-6, 10-21 root po rts 10-6 root po rt, de fined 10-5 See also MST P running confi guration, saving 3-4 S sc[...]

Inde x IN- 19 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 SNM P (co ntinue d) overvi ew 21-1, 21-4 types of 21-10 users 21-8 version s support ed 21-2 snooping , IGMP 14-2 softw are i mag es location in fla sh B-20 recove ry proced ures 25-1 sche duling r eloads 3-11 tar fi[...]

Index IN- 20 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 storm contr ol config uring 15-2 default configur ation 15-2 describe d 15-1 disabling 15-3 displaying 15-11 STP acceler ating ro ot port selection 11-4 Back boneFa st describe d 11-5 enab ling 11-14 BPDU filtering de[...]

Inde x IN- 21 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 STP (continued) root gu ard describe d 11-8 enab ling 11-15 root po rt, de fined 9-3 root switch affec ts of extended syste m ID 9-4, 9-15 config uring 9-15 elect ion 9-3 unexpec ted b ehavior 9-15 shutdown Po rt Fas[...]

Index IN- 22 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 operati on of 5-11 overvi ew 5-9 tracki ng servic es acce ssed by us er 5-16 tar fi les crea ting B-6 displaying t he contents of B-7 extractin g B-7 image fi le format B-20 Telne t acce ssing man agement inter f aces[...]

Inde x IN- 23 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 trunks ( continued) paralle l 12-24 pruning-el igible list 12-20 to non- DTP devi ce 12-15 VLAN 1 minimiz a tion 12-19 trusted bou ndary 23-20 twisted-pa ir Ethernet, det ecting unidirecti onal links 16-1 type-o f-se[...]

Index IN- 24 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 VLAN Quer y Protocol See VQP VLANs adding 12-8 adding to VL AN database 12-8 aging dyn amic ad dresses 9-9 allowe d on trunk 12-19 and sp anning- tree in stance s 12-2, 12-6, 12-12 config uration gui deline s, normal [...]

Inde x IN- 25 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746 VTP (continu ed) modes client 13-3, 13-10 server 13-3, 13-9 transitions 13-3 transp arent 13-3, 13-11 monitoring 13- 15 passwords 13-8 pruning disabling 13-13 enab ling 13-13 exam ples 13-5 overvi ew 13-4 pruning-el [...]

Index IN- 26 Cisco Systems Intelligent Gigabit Ethernet Switch Modules for the IBM BladeCenter, Software Configuration Guide 24R9746[...]

[...]

IBM@ 24R9746[...]