Instruction/ maintenance manual of the product IE 2000 Cisco Systems
Go to page of 924
Americas Hea dquarters Cisc o Syst ems , Inc . 170 West Ta sman Driv e San Jos e, CA 95 134-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553- NETS (638 7) Fax: 408 527-0883 Cisco IE 20 0 0 S witc h So ftwa r e Configuration Guide Cisco IOS R elease 15.
THE SPECIFICATIONS AND INFORMATION REGARDING TH E PRODUCTS IN THIS MANUAL ARE SUBJE CT TO CHANGE WITHOUT NO TICE. ALL STATEMENT S, INFORMATI O N, AND RECOMME NDATIONS IN T HIS MANUAL ARE BELI EVED TO BE A CCURATE BUT ARE P RESENTED WI THO UT WARRANTY OF ANY KIND, EXPRE SS OR IMPLIED.
iii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 CONTENTS Preface li Audienc e li Pur pose li Conv enti ons li Relat ed P ubl icatio ns lii Obtain ing Documentat ion, Obt aining Su.
Cont ents iv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Underst anding Abb reviated Commands 2-4 No and defa ult Forms of Commands 2-4 CLI Er ror Me ssage s 2-5 Config uration Logg.
Content s v Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Monit orin g and Ma inta inin g Switch Alarms St atus 3-9 Config uration Exampl es for Switch Alar ms 3-10 Config uring Ext.
Cont ents vi Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uring the Cli ent 4-14 Manuall y Assig ning IP In formati on on a Routed Port 4-14 Manuall y Assigni ng IP Informati .
Content s vii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring Cisco IOS Age nts 5-7 Enabli ng CNS Event Ag ent 5-7 Enabl ing Ci sco IO S C NS A gent and an Initi al Co nf.
Cont ents viii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Managing Switch Cl uste rs 6-13 Using th e CLI to Manage Swit ch Clus ters 6-13 Using SNM P to Manag e Switch Clust ers 6-.
Content s ix Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring Login Banner s 7-12 Config uring a Message -of- the-Day Lo gin Banner 7-12 Config uring a Login B anner 7-13 .
Cont ents x Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Troubl eshooting the PT P Configu ration 8-4 Additi onal Refere nces 8-4 Rel ated D ocu me nts 8-4 Standar ds 8-4 MIBs 8-4 RF.
Content s xi Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Standar ds 10-3 MIBs 10-3 RFCs 10-3 Techn ica l As sist anc e 10 -3 CHAPTER 11 Configur ing S DM Templat es 11-1 Finding F.
Cont ents xii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 TACACS+ 12-5 TACACS+ Operat ion 12-6 Defaul t TACACS+ Configura tion 12-7 TACACS+ Server Host and the Au thenticatio n Key .
Content s xiii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Setti ng or Chan ging a Stat ic Ena ble Passwor d 12-2 6 Protec ting Enable and Enab le Se cret P asswords with Encrypti.
Cont ents xiv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Verif ying Secure HTTP Con necti on: Exampl e 12-4 7 Additi onal Refere nces 12-47 Rel ated D ocu me nts 12-47 Standar ds 12-48 MIBs 12-48 RFCs 12-48 Techn ica l As sist anc e 12 -48 CHAPTER 13 Configur ing IEEE 802.
Content s xv Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 802.1x Authenti cation with Inac cessibl e Authent ication Bypass 13-2 2 Support on Multiple-Aut hentic ation Ports 13-22 Authent ication Res ults 13-22 Featur e Interacti ons 13-23 802.
Cont ents xvi Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uring an Authen ticat or and Sup plicant 13-47 Config uring an Authe nticat or 13-47 Config uring a Supplic ant Switch with NEAT 13-47 Config uring 802.
Content s xvii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Host De tection 14-3 Sessio n Creation 14-3 Authent ication Pr ocess 14-4 Local We b Aut hen tica tion Ba nner 14-4 Web .
Cont ents xviii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Standar ds 14-17 MIBs 14-17 RFCs 14-18 Techn ica l As sist anc e 14 -18 CHAPTER 15 Configur ing Interfac e Characterist i.
Content s xix Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring the Sys tem MTU 15-18 Monitor ing and Mainta ining Inte rface Charac terist ics 15-18 Moni tori ng I nter fa.
Cont ents xx Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 VLANs 17-1 Support ed VLANs 17-2 VLAN Port Membe rship Mode s 17-3 Normal- Range VLANs 17-4 Token Ri ng VLANs 17-5 Normal- R.
Content s xxi Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Load S haring Usi ng S TP Port Prioriti es 17-21 Confi guri ng L oad Shar ing Usi ng ST P Pa th C ost 17-21 Config uring .
Cont ents xxii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 How to Config ure V TP 18-11 Config uring VTP Domain and Parameter s 18-11 Config uring a VTP Vers ion 3 Passwo rd 18-12 E.
Content s xxiii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 RFCs 19-7 CHAPTER 20 Configur ing STP 20-1 Findi ng Feature Infor mation 20-1 Prere quis ites for Conf igur ing STP 20-.
Cont ents xxiv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uring Optional STP Paramet ers 20-17 Monit oring and Ma intainin g STP 20-17 Additi onal Refere nces 20-18 Rel ated.
Content s xxv Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Neighbo r Type 21-15 Restar ting the Pr otoc ol Migr ation Process 21-16 How to Config ure M STP 21-16 Specif ying the MS.
Cont ents xxvi Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 CHAPTER 23 Configur ing Resilient Ethernet Pro tocol 23-1 Findi ng Feature Infor mation 23-1 Prereq uisites for REP 23-1 R.
Content s xxvii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Learni ng the Other FlexLinks Por t as the mrout er Port 24-3 Generat ing IGMP Repo rts 24-3 Leakin g IGMP Reports 24-4.
Cont ents xxvii i Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 DHCP Server Port-Based Addr ess Alloc ation 25-9 How to Config ure D HCP 25-10 Config uring the DHCP Re lay Agent 25-10.
Content s xxix Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring Dynamic ARP Inspect ion in DHCP Enviro nments: Example 26-12 Config uring ARP ACLs for Non -DHCP Environm e.
Cont ents xxx Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Restri ctions for IGMP Sn ooping and MVR 28-1 Infor matio n About IGMP Snooping an d MVR 28-1 IGMP Snoopi ng 28-2 IGMP Ve r.
Content s xxxi Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring IGMP Snoop i ng: Exa mple 28-21 Disabl ing a Multi cast Router Port : Example 28-2 1 Stati cally Con figuri.
Cont ents xxxii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uring Prote cted Port s 29-10 Config uring Port Bloc king 29 -11 Blocki ng Flooded Traf fic on an Interf ace 29-11.
Content s xxxii i Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 RSPAN VLAN 30-7 SPAN and RSPAN I nteraction wit h Other Fea tures 30-8 Local SP AN Confi guratio n Guidelines 30-9 RS.
Cont ents xxxiv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uring LLDP-MED TLVs 31-6 Config uring Network -Polic y TLV 31-6 Confi guri ng L oca tion TL V and Wi red Locat ion.
Content s xxxv Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 CHAPTER 33 Configur ing UDLD 33-1 Findi ng Feature Infor mation 33-1 Prereq uisites for UDLD 33-1 Restri ctions for UDLD.
Cont ents xxxvi Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Standar ds 34-6 MIBs 34-6 RFCs 34-6 Techn ica l As sist anc e 34 -7 CHAPTER 35 Configur ing System Message Logg ing 35-1 .
Content s xxxvi i Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 CHAPTER 36 Configur ing S NMP 36-1 Findi ng Feature Infor mation 36-1 Prereq uisites for SNMP 36-1 Restri ctions for .
Cont ents xxxvii i Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 CHAPTER 37 Configur ing Networ k Security wit h ACLs 37-1 Findi ng Feature Infor mation 37-1 Restri ctions for Network.
Content s xxxix Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Applyi ng ACL to a Port : Example 37-21 Applyi ng an ACL to an Inte rfac e: Example 37 -21 Route d A CLs: Exam ples 37-.
Cont ents xl Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Weight ed Ta il D rop 38-19 SRR Shapin g and Sharing 38-20 Queuein g and Scheduling o n Ingress Queue s 38-21 Queuein g and .
Content s xli Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring the Poli ced-DSCP Map 38-48 Config uring the DSCP-t o-CoS Map 38-48 Config uring the DSCP-t o-DSCP-Mutati on.
Cont ents xlii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Restri ctions for Auto-QoS 39-1 Inform ation Ab out A uto -QoS 39-2 Auto-Qo S 39-2 Generat ed Auto-QoS Conf igurat ion 39-.
Content s xliii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 How to Config ure Et her Cha nnels 40 -11 Config uring Layer 2 EtherC hannels 40-11 Config uring Ether Channel Lo ad Ba.
Cont ents xliv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 IPv6 42-1 IPv6 Addr esses 42-2 Supp orte d IP v6 Ho st F eat ures 42-2 128-B it W ide Unic ast Add resse s 42-3 DNS fo r I.
Content s xlv Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uring Link Stat e Tracking 43-4 Monitor i ng and Ma inta ining Li nk State Tracki ng 43-4 Config uration Exam ples.
Cont ents xlvi Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Config uration Exam ples for Co nfig uring IP v6 MLD Snooping 44-10 Static ally C onf igure an IPv6 Mu ltic ast G roup: Ex.
Content s xlvii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 MIBs 45-14 RFCs 45-14 Techn ica l As sist anc e 45 -14 CHAPTER 46 Troubles hooting 46-1 Findi ng Feature Infor mation 4.
Cont ents xlvi ii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Techn ica l As sist anc e 46 -17 APPENDI X A Working with the Cisco IOS Fil e System, Conf iguratio n Files, and Softwa.
Content s xlix Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Config uration Guidel ines A-20 Config uring the Conf igurat ion Ar chive A-21 Perfor ming a Configura t ion Repl acemen.
Cont ents l Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01.
li Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Preface Audience This gu ide i s for the n etworking pr ofession al managing your switch . B efore using t his gui de, you should ha ve e xperience working with the Cisco IOS softw are and be fam iliar with the con cepts and ter minology of Eth ernet and l ocal ar ea n etworking .
lii Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Preface • T er minal sessions and system displays are in screen font. • Informa tion y ou ent er is in boldf ace sc reen f ont. • Nonpri nting ch aract ers, such a s passwords or tab s, are in angle bra ckets (< >).
liii Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Pre face http://www .cisco.com /en/US/products/hw/m odules/ps5455/p roducts_de vice_support_tables_list.
liv Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Preface.
CH A P T E R 1-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 1 Configuration Overview Features Y our switch uses the Cisc o IOS software lice nsing (C ISL) archite cture to support a single universal cryptographi c image (supports encryption).
1-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Feature Software Licens ing Ease -of-Dep loyme nt and Eas e -of-Use F eatur es • Express Se .
1-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Feature Software Licensing • IGMP throttl ing for conf iguring the ac tion when the maximum numb .
1-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Feature Software Licens ing Industrial Application • CIP—Comm on Industr ial Protoc ol (CI.
1-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Feature Software Licensing – PTP enha ncemen t to support PTP me ssages on the exp ansion m odule ports. • Cisco IOS File Syst em (IFS) for pro viding a single interf ace to all f ile systems that the switc h uses.
1-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Feature Software Licens ing • IEEE 802. 1D Span ning Tree Protocol (STP) for redundant back bone co nnectio ns and loop-f ree networks.
1-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Feature Software Licensing • VLAN 1 mi nimiza tion for re ducing th e risk of spa nning-t ree lo ops or storm s by allowing VLAN 1 to be disable d on any individual VLAN trunk link.
1-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Feature Software Licens ing • DHCP snooping to filter untrusted DHCP messages between untru .
1-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Feature Software Licensing For inform ation ab out configu ring NA C Laye r 2 802 .
1-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Feature Software Licens ing • Support fo r 3DES and AES w ith version 3 of the Simp le Network Ma nageme nt Protocol (SN MPv3).
1-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Default Settings After Initial Switch Configurat ion – WTD as the co ngesti on-a voidan ce mechan ism for managing the queue lengths and pro viding drop pr ecedenc es for dif ferent traf fic clas sif icatio ns.
1-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Default Set tings A fter Initial Sw itch Conf iguration If you do not co nfigure the switc h at all, t he switch operate s with the se default sett ings: • Default swi tch IP addre ss, subnet mask , and defaul t gateway is 0.
1-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Default Settings After Initial Switch Configurat ion • MSTP is disa bled. For mo re inform ation , see Chapt er 2 1, “Configu ring MSTP . ” • Optiona l spann ing- tree featur es are disable d.
1-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Netwo rk Configura tion Examp les Network Config uration E xamples This se ction provides net.
1-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Network Configuration Examples Ethernet-to -the-Facto ry Architectur e This section is an o vervi .
1-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Netwo rk Configura tion Examp les Demilitarized Zone The demilitarized zone (DMZ) provides a buf fe r for sharin g of dat a and se rvice s betw een th e en terprise and manu facturing zones.
1-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Network Configuration Examples Figure 1-1 shows the EttF archite cture.
1-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Netwo rk Configura tion Examp les Topology Options T opo logy design sta rts with co nsiderin g how de vices are co nnec ted to the netwo rk.
1-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Network Configuration Examples Figur e 1 -2 Cell Netw ork– T r unk-Dr op T opolog y Cell N etwor.
1-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Netwo rk Configura tion Examp les Figur e 1 -3 Cell Netw or k–Ring T opolog y Cell N etwork.
1-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 Configurat ion Over view Where t o Go Next Figur e 1 -4 Cell Netw ork– Redundant Star T opol og y Where to Go Next Before.
1-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Ch apter 1 Conf igur atio n O verv iew Where to Go Nex t.
CH A P T E R 2-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 2 Using the Command-Line Interface Information About Using the Command-Line Inte rface This c hapte r descr ibes t he Cisc o IOS comm and-li ne in terface ( CLI) and how to use it to configure your switch.
2-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 2 Using the Command-Line Interface Informat ion About Using the Comm and -Line Interf ace Ta b l e 2-1 describ es the ma in comm and mod es, how to access ea ch one, the prompt you see in th at mode , and how to exit the mode.
2-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 Using the Comma nd-Line In terface Information About Using the Command-Line Interface For more detailed inf ormation on the command modes, see th e command re ference guide f or this release.
2-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 2 Using the Command-Line Interface Informat ion About Using the Comm and -Line Interf ace Understand ing Abbreviate d Commands Y ou need t o en ter on ly enou gh ch arac ters for the swit ch to recogn ize t he com mand as u nique.
2-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 Using the Comma nd-Line In terface CLI E rro r Me ssag es CLI Error Messages Ta b l e 2-3 lis ts some error message s that y ou mi ght e ncounter whil e using the C LI to configure your switch.
2-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 2 Using the Command-Line Interface How to Use th e CLI to Conf igure Feature s How to Use the CLI to Con figure Features Configuring th e Command History The software provides a histor y or rec ord of comma nds that you have enter ed.
2-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 Using the Comma nd-Line In terface How to Use the CLI to Configure Features Disabling the Command History Feature The comman d history featu re is automatica lly enabled. Y ou can disab le it for the cu rrent termin al session or for the c omman d line.
2-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 2 Using the Command-Line Interface How to Use th e CLI to Conf igure Feature s Press Ctrl-F , or press the right arrow ke y . Mo ve the curs or forw ard one charac ter . Press Ctrl-A .
2-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 Using the Comma nd-Line In terface How to Use the CLI to Configure Features Editing Command Lines That Wrap Y ou can use a wrapar ound feature for com mands that extend beyond a single line on the scre en.
2-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 2 Using the Command-Line Interface How to Use th e CLI to Conf igure Feature s Searching and Filtering Output of show and more Commands Y ou can searc h and filte r the output f or show and mo re commands.
CH A P T E R 3-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 3 Configuring Switch Alarms Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
3-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms Informatio n About Sw itch Alarms Global Status Monitoring Ala rms The switc h processe s alarms re lated t o temper ature a nd power supply cond itions, re ferred to as glob al or fa cility alar ms.
3-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s Information About Switch Alarms Alarm p rofiles pr ovide a mech anism for yo u to enabl e or di sable alar m co nditions for a por t and associ ate the alarm conditio ns with o ne or both ala rm relays.
3-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms Informatio n About Sw itch Alarms The snmp-ser ver ena ble traps comman d can be change d so that th e user can se nd alarm traps to an SNMP se rver .
3-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s How to Configure Switch Alarms Default Switch Alarm Settings How to Configure Switch Alarms Conf.
3-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms How to Configu re Switch Alarms Configuring th e Power Su pply Alarms Configuring th e Switc h Tempera ture Alarms Step 6 sho w en v alar m-contac t Sho ws the c onf igur ed al arm co ntacts.
3-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s How to Configure Switch Alarms Associating the Temp erature Alarms to a Relay By default, the primary temperature a larm is associated to the relay .
3-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms How to Configu re Switch Alarms Setting the FCS Error Hysteresis Threshold The hy steresis setting prev ents the to ggle of an alar m when t h e actu al bit e rror -rate f luctuates n ear th e configured rate.
3-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s Monitoring and Maintaining Switch Alarms S tatus Attaching an Alarm Pr ofile to a Specific Por t.
3-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms Configur ation Examp les for Switch A larms Configuration E xamples for Switch Alarms Configurin.
3-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s Configuration Examples for Switch Alarms Setting th e FCS E rror Hys teresis Th reshold: Ex amp.
3-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms Addition al Referenc es Alarm Enabled Relay Notifies Disabled Syslog Enabled Input-Alarm 2 Alarm.
3-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 Conf iguring Switch Alarm s Additional References RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s featur e, and suppor t for existing RFCs has not bee n modif ied b y this feature.
3-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 Configuring Switch Alarms Addition al Referenc es.
CH A P T E R 4-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 4 Performing Switch Setup Configuration Restrictions for Performing Switch Setup Conf iguration • The DHCP -based au to.
4-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Informatio n About Perf orming Swi tch Setup Con figuration • Initial izes the flash memor y card f ile system on the syste m board. • Loads a default operating system soft ware i mage into m emory a nd boots up the switc h.
4-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Information About Performing Switch Setup Configuration Default Switch Boot Settings.
4-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Informatio n About Perf orming Swi tch Setup Con figuration Switch Information Assignment Y ou can assi gn IP inf ormatio n throug h the switch setup prog ram, thr ough a DHC P server , or manuall y .
4-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Information About Performing Switch Setup Configuration W i th DHCP-b ased autoc onfiguration , no DHCP clie nt-side c onfiguration is needed on your switch.
4-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Informatio n About Perf orming Swi tch Setup Con figuration A DHCP client might rece.
4-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Information About Performing Switch Setup Configuration After you install the switch in your network, the au to-image update feature starts.
4-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Informatio n About Perf orming Swi tch Setup Con figuration these files: net work-config, ci sconet.c fg, and h ostname .c onfig (or host name .
4-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Information About Performing Switch Setup Configuration Figur e 4-2 Rela y Device Us.
4-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Informatio n About Perf orming Swi tch Setup Con figuration Note The switch br oadc.
4-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Information About Performing Switch Setup Configuration Common Environment Variables Ta b l e 4-2 descri bes the fu nction of the mos t common environme nt variables.
4-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration How to Perform Sw itch Setup Config uration Y ou hav e these reload options: • Softwar e reload to take effec t in the specifie d minutes or hours and minutes.
4-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion How to Perform Switch Setup Configuration Configuring DHCP Aut o-Image Update (Conf.
4-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration How to Perform Sw itch Setup Config uration Configuring the Client Y o u should on ly configur e and en able t he Laye r 3 int erface.
4-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion How to Perform Switch Setup Configuration Manually Assigning IP Information to S VIs This task describes ho w to manually assign IP informati o n to multiple switch ed virtual interf aces (SVI s).
4-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration How to Perform Sw itch Setup Config uration Manually Booting t he Swit ch By def ault, the switch automatically boots u p; ho we ver , you can conf igure it to manually boot u p.
4-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Monitoring Switch Setup Configuration Booting a Specific Softw are Image By default, the switch attempts to automatic ally boot up the system using information in the BOO T en vironment v ariable.
4-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Configur ation Examp les for Perform ing Switc h Setup Configur ation . interface gigabitethernet1/1 no switchport ip address 172.20.137.
4-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Configuration Examples for Performing Switch Setup Configuration Switches B through D retrie ve their conf iguration file s and IP addresses in the same way .
4-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Configur ation Examp les for Perform ing Switc h Setup Configur ation switchd-confg prompt> cat network-confg ip host switcha 10.0.
4-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 Perf orming Switch Setup Configura tion Configuration Examples for Performing Switch Setup Configuration Switch(config)# tftp-server flash:boot-config.
4-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 4 Performin g Switch Setup Configuration Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide r.
CH A P T E R 5-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 5 Configuring Cisco IOS Configuration Engine Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
5-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Informat ion About Conf iguring Cisco IOS Confi guration Engine Information Abou.
5-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e Information About Configuring Cisco IOS Configuration Engine Figur e 5-1 Configur ation Engine Ar chit ectur al Ov erview Configuration Service Configurati on Service is t he core co mponent of Cisco Configur ation En gine.
5-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Informat ion About Conf iguring Cisco IOS Confi guration Engine Ev ent Servic e is a highly cap able publis h-an d-subs cribe comm unication metho d.
5-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e Information About Configuring Cisco IOS Configuration Engine The o rigin of t he DeviceID is defined by the C isco IO S hostnam e of the switch.
5-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Informat ion About Conf iguring Cisco IOS Confi guration Engine The Cisco IOS agents initiat e communication with Conf iguration Engine by using the appropriate Conf ig ID and Eve ntID.
5-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e How to Configure Cisco IOS Configuration Engine How to Configure Cisco IOS Conf.
5-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Configuring Cisco IOS Agents Enabling Cisco IOS CNS Agent and an Initial C onfiguration Command Purpose Step 1 configur e t erminal Enters glob al co nfigurati on mo de.
5-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e Configuring Cisco IOS Agents Step 12 ip route network -number (Optional) Establishes a static r oute to Conf iguration Engi ne whose IP ad dress is netw ork-numb er .
5-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Configuring Cisco IOS Agents Enabling a Partia l Configuration Step 14 c ns con.
5-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e Monitoring and Maintaining Cisco IOS Configuration Engine Monitoring and Maint.
5-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Addition al Referenc es Switch(config-cns-conn)# discover interface gigabitethe.
5-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configurat ion Engin e Additional References Technica l Assista nce Description Link The Cisco T echn.
5-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 5 Configuring Cisco IOS Configuration Engine Addition al Referenc es.
CH A P T E R 6-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 6 Configuring Switch Clusters This chap ter pr ovides the conce pts and procedu res t o crea te an d man age switc h clust ers o n your sw itch.
6-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters Prerequisites for Configuri ng Switch Cluste rs Standby C luster Comma nd Switc h Characteris tics A standb y cluster comm and switch must meet thes e requir ements: • Is running Cisco IOS 15.
6-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters Restrictions for Configurin g Switch Clusters Restrictions for Configuring Switch Clu sters W e do not re comm end us ing the ip http access- class glob al conf iguration comm and to limit access to specific hosts or networ ks.
6-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters How to Plan fo r Switc h Cluste ring How to Plan for Switch Clustering Anticipatin g conflicts and compatib ility issues is a high priority when you manage se veral switche s throug h a cluster .
6-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters How to Plan for Switch Clustering Automatic Disco very of Clus ter Candid ates and M embers The.
6-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters How to Plan fo r Switc h Cluste ring Figur e 6-1 Disco very Thr ough CDP Hops Comm a nd de vic.
6-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters How to Plan for Switch Clustering Discovery Through Non-CDP-Capabl e and Noncluster-Capable Dev.
6-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters How to Plan fo r Switc h Cluste ring Figur e 6-3 Disco very Thr ough Dif fe r ent VLANs Discov.
6-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters How to Plan for Switch Clustering Discovery Through Routed Ports Note Th e LAN B ase image sup ports static routi ng and RIP .
6-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters How to Plan fo r Switc h Cluste ring Figur e 6-5 Disco very Thr ough Diff er ent Manag ement .
6-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters How to Plan for Switch Clustering Figur e 6-6 Disco very of Newl y Installed Switches IP Addresse s Y ou m ust assign IP info rmation to a c luster c ommand switch.
6-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters How to Plan fo r Switc h Cluste ring If a sw itch r eceiv ed its hostnam e from the c luster .
6-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters Managin g Swit ch Clust ers LRE P rofil es A configurati on confl ict occur s if a sw itch clust er has L ong-Reach E therne t (LRE ) switches t hat use bo th pri vate an d public pro file s.
6-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters Managin g Switch Cluster s Using SN MP to Mana ge Switch Clusters When you first power on the sw itch, SN MP is en abled i f you e nter the IP infor matio n by using the setup program and accep t its p ropose d configura tion.
6-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 6 Conf iguring Switch Clusters Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces re.
6-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 6 C onfiguring Switch Clusters Addition al Referenc es.
CH A P T E R 7-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 7 Performing Switch Administration This chap ter describ es how to perform one-ti me operat ions to admi nister your sw itch. Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
7-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Informat ion About Perf orming Switch Admin istration The system c lock keep s trac k of wh ether the t ime i s authoritative or not (th at is, whether it has been set by a time source con sidered to be auth oritati ve).
7-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration Information About Performing Switch Administration Figure 7-1 shows a typical netw o rk ex ample usin g NTP . Switch A is the NTP master , with Switches B, C, and D configured in NTP server mod e, in server associa tion with Switc h A.
7-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Informat ion About Perf orming Switch Admin istration • Improved secu rity c ompare d to N TPv3. The N TPv4 pro tocol provides a sec urity framework base d on publ ic key crypt ograp hy and st andard X509 c ertificates .
7-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration Information About Performing Switch Administration System Name a nd Prompt Y ou configure t he system na me on the sw itch to ident ify it. B y default, the syste m name a nd prompt are Switc h .
7-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Informat ion About Perf orming Switch Admin istration When pr iv ate VLAN s are co nfigur.
7-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration Information About Performing Switch Administration Y ou c an add and r emove static address es and define the forwardi ng be havior for them.
7-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Informat ion About Perf orming Switch Admin istration MAC Address Learning on a VLAN By default, MAC address learning i s enabled on all VLANs on the swit ch.
7-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration How to Perform Switch Administration IP datagr ams and ARP request s and r eplies o n IE EE 802 networks other than E thernet is spe cified by the Subnetwork Acc ess Protocol (SNAP).
7-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration How to Perfo rm Switch Admi nistrat ion Configuring Summer Time (Daylight Saving Ti me) .
7-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration How to Perform Switch Administration Configuring Summer Time (Exact Date and Time) T o co.
7-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration How to Perfo rm Switch Admi nistrat ion Configuring L ogin Banne rs Configuring a Message-of-the -Day Login Banner Y ou can crea te a single or multilin e message b anner that a ppears on the screen when someone log s in to the switch.
7-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration How to Perform Switch Administration Configuring a Login Banner Y ou c an configur e a log in banne r to be displa yed on al l conn ected termi nals.
7-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration How to Perfo rm Switch Admi nistrat ion Configuring MAC Address Chan ge Notification Traps Command Purpose Step 1 configur e t erminal Enters global configurat ion mode .
7-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration How to Perform Switch Administration Configuring MAC Address Mo ve Notification Traps Whe.
7-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration How to Perfo rm Switch Admi nistrat ion Command Purpose Step 1 configur e t erminal Enters global configurat ion mode .
7-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration How to Perform Switch Administration Adding and Removing Static Ad dress Entries Configur.
7-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Monito ring and Mai ntainin g Switch Admi nistrat ion Monitoring and Maintainin g Switch.
7-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration Configuration Examples for Performing Switch Admininistration This e xample (for daylight.
7-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Configur ation Examp les for Perform ing Switc h Adminin istration Switch(config)# inter.
7-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Adminis tration Additional References Additional Ref erences The foll o wing sectio ns prov ide referen c.
7-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 7 Performing Switch Admin istration Addition al Referenc es.
CH A P T E R 8-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 8 Configuring PTP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
8-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 8 Config uring PTP How to Configu re PTP Synchroniz ation beh avior depends on th e PTP clock sett ing mode tha t you configure on the switch.
8-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 8 Conf iguring PTP Monitoring and Maintaining the PTP Configuration Setting Up PT P Monitoring and Main taining the PTP Configuration Command Purpose Step 1 conf igur e terminal Enters globa l configura tion m ode.
8-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 8 Config uring PTP Troublesho oting t he PTP Configurat ion Troubleshooting the PTP Configuration Additional Ref erences The.
8-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 8 Conf iguring PTP Additional References RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s featur e, and suppor t for existing RFCs has not bee n modif ied b y this feature.
8-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 8 Config uring PTP Addition al Referenc es.
CH A P T E R 9-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 9 Configuring PROFINET Finding F eature Information Y our soft ware rel ease may not support all the feat ures do cumented in this chapter . For t he lates t featur e info rmation an d caveats, see th e release notes for your platf orm and software r eleas e.
9-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 9 Configuring PROFINET Informatio n About Confi guring PROF INET PROFINET De vice Ro les Figur e 9-1 PROFIN ET Devi ce Roles .
9-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 9 Configuring PROFI NET Information About Configuring PROFINET PR OFI NET d evices are i ntegrated by u sing a gene ral sta ti.
9-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 9 Configuring PROFINET How to Configure PRO FINET Note Although the Cisco IE 2000 switch has a default reduc tion ra tio of 128 ms, we recom mend a reducti on rat io of 2 56 ms or 512 ms to r educe the load o n the switch CPU whe n the switch u ses a complex co nfiguration.
9-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 9 Configuring PROFI NET Monitoring and Maintaining PROFINET Monitoring and Main taining PROFINET Troubleshooting PROFINET The PLC has LEDs that di splay red for alar ms, and t he I/ O super visor sof tware mo nitors those a larms.
9-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 9 Configuring PROFINET Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted.
CH A P T E R 10-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 10 Configuring CIP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
10-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 10 C onfiguring CIP Monitorin g CIP Enabling C IP Monitoring CIP Troubleshooting CIP Command Purpose Step 1 conf igur e terminal Enters globa l configura tion m ode. Step 2 cip security { password pa sswor d | window timeou t value } Sets CIP security options on the switch.
10-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 10 Configur ing CIP Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to s.
10-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 10 C onfiguring CIP Addition al Referenc es.
CH A P T E R 11-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 11 Configuring SDM Templates Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
11-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 11 Configuring SDM Templates Informatio n About Conf iguring SDM Templates Y ou ca n select a t empla te to provide maximu m system us age fo r some func tions or use the default template to balanc e resources.
11-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 1 Configuring SDM Templates Information About Configuring SDM Templates The f irst eight rows in the tab les (u nicast MA C address es thr ough security A CEs) re presen t appr oximat e hardw are boundaries set wh en a template is selecte d.
11-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 11 Configuring SDM Templates How to Configu re the Switch SDM Templates How to Configure the Switc h SDM Templates Setting t.
11-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 1 Configuring SDM Templates Conf igurat ion Examples f or Conf iguri ng SDM Templates This is an example of output fro m th.
11-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 11 Configuring SDM Templates Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces r.
CH A P T E R 12-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 12 Configuring Switch-Based Authentication Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
12-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Information About C.
12-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication Enable Secret Passwo.
12-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Telnet Password for.
12-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication Switch Access with T.
12-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication T A CA CS+, admin i.
12-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication 3. If T A CA C S+ aut horizat ion is re quire d, the T ACA CS+ daem on is a gain conta cted, an d it retur ns an A CC EPT or REJE CT authorization response .
12-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Y ou can use the aa.
12-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication • Networks that requir e resourc e accoun ting. Y o u can use RADIU S acc ounting indepen dently of RADIUS authen tication or au thorizatio n.
12-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication The A CCEPT or REJECT re sponse is bundle d with ad ditio nal data tha t is used f or privileged EXE C or networ k authorization.
12-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication CoA Request Response Code The C oA Re quest respon se code c an be used to con vey a command to the swit ch.
12-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Unless al l sessio.
12-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication CoA S ession Re aut.
12-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication CoA Request : Disa.
12-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication If two dif ferent h.
12-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Server groups also.
12-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication attributes no t suit able for g eneral use.
12-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication The K erberos cre dential s cheme uses a pr ocess called single logon .
12-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication Kerberos Operation .
12-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication 4. The KDC send s an encryp ted TGT that includes th e user ident ity to the swi tch.
12-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication Secure She ll T o use th is feat ure, you must inst all the cr yptog raphic (encryp ted) soft ware ima ge on your sw itch .
12-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Limitations These lim itations ap ply to SSH: • The switc h supports Riv est, Shami r , an d Adel man (RSA) authent icati on.
12-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication The prim ary role o.
12-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Informat ion About Conf iguring Switch-Bas ed Authen tication Note Th e cert ificate a uthori ties and trustp oints must be c onfigured o n each device individually .
12-25 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Information About Configuring Switch-Based Authent ication Because SSH also relies on AAA aut h enticat ion, and SC P relies fur ther on A AA authorization, correc t config uration is necessary .
12-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion How to Configure Switch-Ba.
12-27 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Protecting Enable and Enable Secr et Passwords with Encryption Disabling Password Recovery Command Purpose Step 1 configur e t erminal Enters globa l configura tion m ode.
12-28 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Setting a Telnet Password .
12-29 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Setting the Privil ege Level for a Command Changing the Default Pri vilege Level fo r Lines Step 4 login local E nables loca l password che c king at logi n time.
12-30 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Logging Into and Exiting a Privilege Level Configuring TACACS+ This se ction describe s how to configur e your switch to suppo rt T ACA CS+.
12-31 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Configuring TACACS+ Login Aut.
12-32 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Step 3 aaa authent ication log in { default | list-name } method1 [ meth od2.
12-33 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Configuring TACACS+ Authoriza.
12-34 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Command Purpose Step 1 conf igur e terminal Enters glob al con figuration mo de.
12-35 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Defining AAA Server Groups Command Purpose Step 1 conf igur e terminal Enters globa l configuration mod e.
12-36 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Configuring RADIUS Login Authentication Command Purpose Step 1 conf igur e terminal Ente rs globa l con f igurat ion mod e.
12-37 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Configuring RADIUS Authorizat.
12-38 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Configuring the Switch for.
12-39 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Configuring the Switch for Lo.
12-40 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Configuring S ecure Sh ell.
12-41 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Step 4 crypto key g enerate rsa Enables th e SSH serv er for local an d remote authen tication on the swi tch an d gene rates an RSA k e y pair .
12-42 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication How to Co nfig ure Swit ch -Ba sed A uth entic at ion Configuring S ecure HT TP .
12-43 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication How to Conf igure Sw itch-Base d Authent ication Command Purpose Step 1 show i.
12-44 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Monito ring and Mai ntainin g Switch-Ba sed Au thent ication Configuring the Secure HTTP Cl ient Befo re Yo u Begin The st andard H TTP clie nt and secure HT TP client are al ways ena bled.
12-45 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Configuration Examples for Configuring Switch-Based Authenticat ion Configurat.
12-46 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Configur ation Examp les for Confi guring Switc h-Based A uthenticat ion Definin.
12-47 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 2 Configuring Switch-B ased Authe ntication Additional References <output truncated> crypto pki trustpoint TP-self-s.
12-48 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 12 Configuring Switch-Based Authentication Addition al Referenc es Standa rds MIBs RFCs Technica l Assista nce Password pro.
CH A P T E R 13-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 13 Configuring IEEE 802.1x Port-Based Authentic ation Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
13-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.
13-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Authentic ation Pro cess When 802 .1x p ort- based a uthent icati on is e nable d and t he cl ient sup port s 802.
13-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.
13-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Note If 802.1x au thentic ation is not enab led or suppor ted on the networ k access device, any EAPO L frames from the cli ent are dropped .
13-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.
13-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Per-User ACLs and Filter-Ids In release s earlier than Cisco IOS Release 12.
13-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion Note Y o u can only se t any as the source in the A CL.
13-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Ports in Au thorized and Un authorized S tates Durin g 802.
13-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion In mu ltiple-h osts m ode, y ou ca n att ach mult iple host s to a sin gle 80 2.
13-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication • A voice device M AC address that is bi nding o n th e dat a VLAN is not cou nted towards the por t security MA C address limit.
13-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion For more info rmat ion abo ut co nfiguring mu ltiaut h mode on a port, se e the “Conf iguring the Hos t Mode” section on page 13-38 .
13-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication If a port is in open authent ication mode, an y new MA C address is immediately ad ded to the MA C address table.
13-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion Y ou ca n view the A V pa irs that ar e being sen t by the switch by entering the debug radius accounting pri vileged EXEC comman d.
13-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication 802.1x Authentication with VLA N Ass ignme nt The RADIUS s erv er sends the VLAN assi gnment to conf igure the switch po rt.
13-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.
13-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.
13-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.
13-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.
13-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.
13-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Any number of 802.1x-in capable client s are allowed acc ess when the switch port i s moved to the guest VLAN.
13-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion Restricte d VLAN s are supporte d only on 802.
13-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.
13-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.
13-25 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.
13-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion • Netw ork adm issio n cont rol (N AC) Laye r 2 I P v alidation—T his feat ure takes ef fect aft er an 802.
13-27 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication Network Admission Control Lay er 2 802.1x Va lidation The switc h supports t he Network Admi ssion Cont rol (NA C) Laye r 2 802.
13-28 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion Open1x Authentication Open1x a uthent icati on allows a device acce ss to a port befor e that device is authent icate d.
13-29 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.
13-30 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.1x Port-B ased Aut henticat ion An IEEE 802.1x port in sing le-host mo de uses A CLs fro m the ACS to provide different levels of service to an IEEE 802.
13-31 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication 802.1x Ac counting Enabl ing A AA system accou nting with 8 02.
13-32 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Informat ion About Configurin g IEEE 80 2.
13-33 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Information About Configuring IEEE 802.1x Port-Based Authentication VLAN Assign ment, Gues t VLAN, Re stricted VLAN, a nd In access ible Authentication By pass Guidelines • When 802.
13-34 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation • If the p ort is in the auth orized sta te, t he port re mains in this state until reau thorization occurs.
13-35 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Beginning i n privileged E XEC mo de, follow these steps to c onfigure 8 02.
13-36 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.
13-37 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Enabling V oice Aware 8 02.1x Sec urity Configuring 802.1x Violation Mo des Y ou ca n configure an 802.
13-38 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configuring the Host Mode This task describes ho w to configure a single host (client) or multiple hosts on an 802.
13-39 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Configuring Periodic Reauthentica tio n Y ou can enable peri odic 802.
13-40 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configuring Optional 802.1x Authentication Features Step 7 show a uthe ntica tion i nterf ace inte rf ace -i d V erifies your en tries.
13-41 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.
13-42 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configuring 802. 1x Accounting Befo re Yo u Begin AAA must be enabled on you r switch.
13-43 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Configuring a Restricted VLAN When yo u conf igure a restric ted VLAN on a switc h, clients that are 802.
13-44 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configurin g Inacces sible Au thentica tion By pass Step 7 end Returns to pri vileged EXE C mode.
13-45 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.
13-46 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.
13-47 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.
13-48 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.1x Port -Base d Authentic ation Configuring 8 02.1x Auth enticatio n with Dow nloadable ACLs and Redirec t URLs In additio n to configuri ng 802.
13-49 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication How to Configure IEEE 802.1x Port-Based Authentication Configuring a Downloadable Policy Step 6 inte rface interfa ce-id Specif ies the port to be configur ed, and enters interfac e configurati on mode.
13-50 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on How to Conf igure IEEE 8 02.
13-51 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Monitoring and Maintaining IEEE 802.1x Port-Based Authentication Resetting the 802.1x Auth entication Config uration to the Default Values Monitoring and Maintaining IEEE 802.
13-52 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Configur ation Examp les for Conf iguring IEEE 802. 1x Port-Bas ed Authen ticatio n Enabling 8 02.1x Auth entication : Example This e xample sho ws how to enable 802.
13-53 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Configuration Examples for Configuring IEEE 802.1x Port-Based Authentication Enabling a n 802.1x G uest VLAN: Ex ample This example shows ho w to enable VL AN 2 as an 802.
13-54 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Configur ation Examp les for Conf iguring IEEE 802.
13-55 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Configuration Examples for Configuring IEEE 802.
13-56 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Addition al Referenc es Additional Ref erences The foll o wing sec.
13-57 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 3 Configuring IEEE 80 2.1x Port-B ased Authe ntication Additional References Technica l Assista nce Description Link The C.
13-58 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 13 Configuri ng IEEE 802. 1x Port-Ba sed Authenticati on Addition al Referenc es.
CH A P T E R 14-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 14 Configuring Web-Based Authentication Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
14-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Informat ion About Conf iguring Web-Based Authenti cation • W eb- based a uthenti cation and Network E dge Ac cess T opology (NEA T) are mutua lly exclu sive.
14-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Information About Configuring Web-Based Authentication • Switch—C ontrol s the physi cal acces s to th e netw ork based o n the authenti cation status of the client.
14-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Informat ion About Conf iguring Web-Based Authenti cation If the server re sponse t o the NRH request is acces s rejected , the HTTP i ntercept A CL is acti vated , and the session waits for HT TP traff ic from the host.
14-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Information About Configuring Web-Based Authentication Figur e 14-2 A uthentication Successful Banner Y ou can also cust omize the ba nner , as sho wn in Figure 14-3 .
14-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Informat ion About Conf iguring Web-Based Authenti cation Figur e 14-4 Login Scr .
14-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Information About Configuring Web-Based Authentication • If you configure web p.
14-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Informat ion About Conf iguring Web-Based Authenti cation Figur e 14-5 Cust omiz .
14-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Information About Configuring Web-Based Authentication If the web- b ased authen tication idle tim er ex pires, the N AC polic y is remov ed.
14-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Informat ion About Conf iguring Web-Based Authenti cation Default Web-Based Au t.
14-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on How to Configure Web-Based Authentication How to Configure Web-Based Aut hentica.
14-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on How to Conf igure Web-Bas ed Authen tication Configuring Switch-to-RAD IUS-Serve.
14-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on How to Configure Web-Based Authentication Customizing the Authentication Proxy W.
14-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Monito ring and M aint aining Web -Based A uthentic ation Configuring a Web Au thentication L ocal Banne r Removin g Web-Ba sed Authen tication C ache Entries Enter a spec ific IP address to d elete th e entry for a single host.
14-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Configuration Examples for Configuring Web-Based Authentication This exampl e sh.
14-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Configur ation E xamples for Conf iguring Web-B ased A uthenti cation Authentica.
14-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 4 Configuring Web-Base d Authe nticati on Additional References Additional Ref erences The foll o wing sectio ns prov ide .
14-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 14 Configur ing Web-Ba sed Authenticati on Addition al Referenc es RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature.
CH A P T E R 15-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 15 Configuring Interface Cha r acteristics Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
15-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Informatio n About Conf iguring Interface Chara cteristics Port-Based VLANs A VLAN is a switched netwo rk that is logically segmente d by functi on, team, or application , without reg ar d to the physic al location of the users.
15-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Inform ation Abo u t Confi guring Interf ace Char acteristics Routed P orts Note The LAN base image supports static routin g.
15-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Informatio n About Conf iguring Interface Chara cteristics Trunk Ports A trunk port carries th e traf f ic o f multiple VLANs and b y default is a member of all VLANs in the VLAN database.
15-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Inform ation Abo u t Confi guring Interf ace Char acteristics By defa ult, th e switch dynam ically sel ects the interf ace type th at f irst links up.
15-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Informatio n About Conf iguring Interface Chara cteristics Figur e 15-1 Connect ing VLANs w ith a Lay er 3 Swit ch Basic rou ting (static routing and RIP) is supporte d on the LAN ba se image .
15-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Inform ation Abo u t Confi guring Interf ace Char acteristics • Port numb er—Th e physica l inte rface num ber on the switc h.
15-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Informatio n About Conf iguring Interface Chara cteristics Default Ethernet Interface Settings For more details on the VLAN paramet ers listed in the table, see Chapter 17, “ Configuring VLAN s.
15-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Inform ation Abo u t Confi guring Interf ace Char acteristics Interface Speed and.
15-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Informatio n About Conf iguring Interface Chara cteristics Note Ports on the switc h can recei ve, b ut not send, pau se frames.
15-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics How to Configure Inter face Charact eristics Note Y ou cannot co nf igure a routi ng MTU siz e that exce eds the s ystem MTU size.
15-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics How to Conf igure Interface Ch aracteris tics When configur ing SVIs, you can also configur e SVI autos tate exclud e on a port in the SVI to exc lude that po rt from being i ncluded in dete rmining SVI line- state stat us.
15-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics How to Configure Inter face Charact eristics Configuring Interfaces These ge neral instr uctions app ly to all interf ace conf iguration p rocesses.
15-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics How to Conf igure Interface Ch aracteris tics • All inter faces defined as in a .
15-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Config uring Etherne t Interfaces Configuring Eth ernet Interfaces Setting th e .
15-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Configur ing Ethern et Interface s Setting th e Interface Speed an d Duplex Para meters Configuring IEEE 802.3x Flow Control Command Purp ose Step 1 conf igur e terminal Enters gl obal configurat ion mode.
15-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Config uring Etherne t Interfaces Configuring Auto-MDI X on an Interface Adding a De scription fo r an Interface Configurin g SVI Auto state E xclude Command Purpose Step 1 conf igur e terminal Enters global con figuration mo de.
15-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Monito ring and Mai ntaining In terface Cha racteris tics Configuring th e System .
15-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Monitoring and Maintaining Interface Characteristics Clearing and Resetting In t.
15-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Configur ation E xamples for Conf iguring Interf ace Ch aracteri stics Configurati.
15-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Config uration Examp les for C onfiguring Interfac e Characteri stics This examp.
15-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Addition al Referenc es Configurin g SVI Auto state E xclude : Example This exam p.
15-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 5 Configuring Interfac e Charact eristics Additional References RFCs RFCs T itle No new or m odified R FCs are suppo rted by thi s featur e, and suppor t for existing RFCs has not bee n modif ied b y this feature.
15-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 15 Configuring Interface Characteristics Addition al Referenc es.
CH A P T E R 16-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 16 Configuring Smartports Macros Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
16-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 16 C onfigur ing Smartport s Macros How to Configu re Smartport s Macros Smartports Config uration Guidelin es • When a macro is applied globally to a switch or to a switch interf ace, all of the existin g conf igurations on the int erface are reta ined.
16-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 6 Configuring Smartpor ts Macros How to Configure Smartports Macros • When yo u apply a ma cro to a switc h or a switch in terfa ce, the macr o name is autom atically added to the switch or int erface.
16-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 16 C onfigur ing Smartport s Macros Monito ring and Maint aining Smart ports Mac ros Monitoring and Main taining Smart ports.
16-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 6 Configuring Smartpor ts Macros Additional References Macro type : default interface #macro name cisco-ethernetip #macro keywords ACCESS_VLAN #macro description cisco-ethernetip switchport host switchport access vlan ACCESS-VLAN storm-control broadcast level 3.
16-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 16 C onfigur ing Smartport s Macros Addition al Referenc es RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature.
CH A P T E R 17-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 17 Configuring VLANs Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
17-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs Figur e 17 -1 VLANs as Logica lly Defined Netw or ks VLANs are of ten associated with IP subnetw orks. For e xample, all the en d stations in a particula r IP subnet belong to the same V LAN.
17-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Although the switc h supports a total of 100 5 (normal range and extended range ) VLANs, the numbe r of routed ports, SVIs, and other c onfigured feat ures affects the use of the swi tch hard ware.
17-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs For more de tailed definitions of acce ss and tru nk mo des and their f unctions, see Ta b l e 17 -3 on page 17-10 . When a port belongs to a VLAN , the switch l earns and ma nages the add resses associated wi th the port on a pe r-VLAN basis.
17-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Y ou ca n set the se parame ters when you cr eat e a new normal-ra nge VLA N or modif y an existi.
17-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs • T oken Ring T rCRF VLANs Fo r more i nfor m ati on on co nf iguring T oke n Ring V LANs , see the Catalyst 6500 Se ries Softwa r e Config uratio n Guide .
17-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Ethernet VLANs Each E therne t VLA N in the VLAN d ataba se has a uni que, 4- digit I D tha t ca n be a nu mber fr om 1 to 1001. V LAN IDs 1002 to 1005 are re served for T oken Ring a nd FD DI VL ANs.
17-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs If you ar e assig ning a po rt on a clust er me mber switch to a VLAN , first use the rcommand pr ivileged EXEC co mmand to log in to the cluste r member switch.
17-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs • Each rou ted port on the sw itch create s an interna l VLAN for its use. These int ernal VLANs us e extended -rang e V LAN n umb ers, and t he inter nal V LAN I D c annot be us ed fo r an extend ed-r ange VLAN.
17-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs IEEE 802.1Q Configuration Guidelines The IE EE 8 02.1Q t runks i mpose these restric tions on the t runking strategy f or a network : • In a ne twork o f Cisco switch es conne cted through IEE E 802.
17-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Default Layer 2 Ethernet Inter face VLAN Settings Ethernet Interfac e as a Trunk Port Because t .
17-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs Allowed VLANs on a Trunk By default, a trunk port sends traf fic to and recei ves traf fic from all VLANs. All VLAN IDs, 1 to 4096, are al lowed o n each trun k.
17-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Load Sharing Using STP Port Priorities When two ports on the same switch form a l oop, the switc h uses the STP port prio rity to decide which port is e nabled a nd whi ch port is in a blocking state.
17-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs Figur e 17 -3 Load-Shar ing T run ks with T ra f fic Distr ibuted by P ath Cost See the “Configuri ng Lo ad Sharin g Using STP Path Co st” sect ion on page 17-21 .
17-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs VLANs Dynamic-Access Port VLAN M embership A dynamic -access port can belo ng to only one VL AN with an ID from 1 to 4096.
17-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs VLANs • T r unk ports ca nnot be dyn amic- access port s, but you can enter the switchport access vlan dynamic interf ace configu ration co mmand fo r a trun k port.
17-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs How to Con figure VLANs How to Configure VLANs Creating or Modifyin g an Et hernet VLAN Deleting a VLAN Assigning S tatic-Ac cess Ports to a VLAN Command Purpose Step 1 conf igur e terminal Ent ers glob al configura tion mo de.
17-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs How to Conf igure VLANs Creating an E xtended-Ra nge VL AN Creating an E xtended-Ra nge VLAN w ith an Internal V LAN ID Command Purpose Step 1 conf igur e terminal Enter s glo bal configurat ion mode.
17-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs How to Con figure VLANs Configuring a n Ethern et Interface as a Trunk P ort Defining the Allowed VLANs on a Trunk Changing the Pruning-Elig ible List Command Purpose Step 1 conf igur e terminal Enter s globa l co nfiguration mode .
17-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs How to Conf igure VLANs Configuring the Native VLAN for Untagged Traff ic Step 3 switchport trunk pruning vlan { add | except | none | remo ve } vlan- list [ ,vlan [ ,vl an [ ,, , ]] Configures the list o f VL ANs a llowed to be pruned from the tru nk.
17-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs How to Con figure VLANs Load Sharing Using STP Port Priorities Configuring Load Sharing Using STP Pa th Cost Command Purpose Step 1 conf igur e terminal Enters gl obal configur ation mode o n Swi tch A.
17-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs How to Conf igure VLANs Configuring the VMPS Client Y ou conf igure dyna mic VLANs by us ing the V MPS (VLAN Mem bership Polic y Serv er). The swi tch can be a VMPS client ; it c annot be a VMPS serv er .
17-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs Monitoring and Maintaining VLANs Configuring Dynamic-Access Ports on VMPS Clients Befo re Yo u Begin I.
17-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs Configurati on Examp les for Configuri ng VLANs Configuration E xamples for Configuring VLANs VMPS Netwo rk: Ex ample Figure 17-4 shows a netw ork with a VMPS server switch and V MPS client switches with dynamic -acce ss port s.
17-25 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 7 Configuring VLANs Configuration Examples for Configuring VLANs Configuring a VLAN: Example This exampl e shows h ow to c.
17-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 17 Configuring VLANs Addition al Referenc es Reconfirm Interval: 60 min Server Retry Count: 3 VMPS domain server: 172.
CH A P T E R 18-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 18 Configuring VTP Finding VTP Feature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
18-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Informatio n About Conf iguring VTP Information About Configuring VTP VTP A VLAN T r unking Pro tocol (V .
18-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP Information About Configuring VTP If yo u conf igure a swi tch for VT P transparent m ode, you c an create and m odify VLANs, but th e chan ges are not se nt to other swi tches in the domain, and they affect only the i ndividual switc h.
18-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Informatio n About Conf iguring VTP Note For VTP version 1 and 2, befo re you c reate extend ed-rang e VLANs ( VLAN IDs 1006 to 4096), you must set VTP mode t o transparent b y using the vtp mode transparent global c onfiguration command.
18-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP Information About Configuring VTP • VLAN type • VLAN state • Additional VLA N config uration inform.
18-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Informatio n About Conf iguring VTP • VTP prim ary s erver and VTP sec ondary servers. A VTP p rimary server upd ates th e da tabase inform ation and sends upd ates t hat are hon ored by all devices i n the syste m.
18-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP Information About Configuring VTP • When a VTP version 3 device detec ts a VTP version 2 device on a tr.
18-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Informatio n About Conf iguring VTP Figur e 18-1 Flooding T r affic w ithout VTP Pr uning Figure 18-2 shows a switched ne twork with VTP pruni ng enabled.
18-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP Information About Configuring VTP VTP pruning is not designed to func tion in VTP transparent mode . If one or more switches in the netwo rk are in VTP transpar ent mode , you should do one of the se: • T urn off VTP prun ing in the en tire network .
18-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Informatio n About Conf iguring VTP • If the VT P mode or the dom ain na me in th e start up co nfigur.
18-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP How to Configure VTP How to Configure VTP Configuring VTP Doma in and Parameters Befo re Yo u Begin Y ou shou ld configure the VTP domai n before co nfiguring other VT P parameters.
18-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP How to Configu re VTP Configuring a VTP Version 3 Password Enabling th e VTP V ersion Step 3 show vtp stat us V erif ies your entries in the VTP Operating Mode and the VTP Domain Name fields of the display .
18-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP How to Configure VTP Enabling V TP Prunin g Configur ing VTP on a Per-P ort Basi s Adding a VT P Client .
18-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Monito ring and Mai ntaining VTP Monitoring and Ma intaining VTP Configuration E xamples for Configuring.
18-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 8 Configuring VTP Additional References for Configuring VTP Switch(config)# vtp password mypassword Setting device VLAN database password to mypassword.
18-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 18 Configuring VTP Addition al Referenc es for Configur ing VTP MIBs RFCs MIB s MIBs Link — T o locate a nd download M IB.
CH A P T E R 19-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 19 Configuring Voic e VLAN Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
19-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 19 Configuring Voice VLAN Informatio n About Conf iguring Voice VLAN Figur e 19-1 Cisco 7960 IP Ph one Conne ct ed t o a S w.
19-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 9 Configuring Voice VLA N Information About Configuring Voice VLAN Cisco IP Phone Data Traffic The swi tch can also pro cess ta gged dat a traffic (traff ic in IEE E 802.1Q or IE EE 802.
19-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 19 Configuring Voice VLAN Informatio n About Conf iguring Voice VLAN – They both use IEEE 802.1p or un tagged frame s. – The Cisc o IP phone uses IEEE 802.1p frames, a nd the device uses unt agged fra mes.
19-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 9 Configuring Voice VLA N How to Configure VTP How to Configure VTP Configuring Cisco IP Phone for Voice Traffic Configuring the Priori ty of Incoming Data Frames Command Purpose Step 1 co nfi gure termi nal Ente rs global con figuration mode.
19-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 19 Configuring Voice VLAN Monito ring and Mai ntaining Voi ce VLAN Monitoring and Mainta ining Voice VLAN Configuration E xa.
19-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 1 9 Configuring Voice VLA N Additional References for Configuring Voice VLAN Standa rds MIBs RFCs Protect ed port configur at.
19-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 19 Configuring Voice VLAN Addition al Referenc es for Configur ing Voice VL AN.
CH A P T E R 20-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 20 Configuring STP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
20-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP STP STP is a Layer 2 link mana gement pr otocol that provide s path re dundancy w hile preventing loop s in the network.
20-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP When the switc hes in a netw ork are p ow ered up, eac h functions a s the root swi tch. Eac h switch sends a configurati on BPDU thr ough all of its por ts.
20-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP The swi tch sup ports t he IEEE 802.1t spanni ng-tre e extension s, and some of t he bits pr eviously used for the switch prior ity are no w used as the VLAN ident ifie r .
20-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP Figure 20-1 illustrates ho w an interfa ce mov es through the states .
20-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP Listening State The li stenin g stat e is th e f irst state a Lay er 2 i nterf ace e nters af ter the blo cking s tate.
20-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP How a Sw itch or Port Beco mes th e Root S witch o r Root Port If all switches in a netw ork are enabled with default spann ing-tree setti ngs, the switch with the lo west MA C addre ss becomes the root switch.
20-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP Figur e 20-3 Spanning T r ee and Redundant Connectivity Y ou can al so create redund ant links be tween swit ches by using Ethe rChann el groups.
20-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP Span ning- Tree Modes a nd Pro tocols The switc h supports t hese spanni ng-tr ee modes an d protocols: • PVST+—Th is spann ing-tr ee mod e is ba sed on the IEEE 8 02.
20-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP Spanning-Tree Interoperability and Backward Compatibility Ta b l e 20- 2 lists the inter operability and compatibility among the s upported s panning-tree mo des in a network.
20-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP Default Spanni ng-Tree Settings Disabling Sp anning Tree Spanning tree.
20-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Informatio n About Conf iguring STP If an y root switch for the specifi ed VLAN has a switch priority lo wer than 24576, the switch sets its o wn priority for the spe cifi ed VLAN to 4096 less than the low est switch priority .
20-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Information About Configuring STP Path Cost The spanni ng-tr ee path c ost defau lt value is derived from the med ia speed of an interfac e. If a loop occurs , spann ing tree u ses cost wh en sele cting an in terfac e to put in th e forw ardin g state.
20-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP How to Configu re STP Y ou can pre vent thi s possibility by sett in g up allo wed lists on the trunk ports of switches that hav e used up their allo cation of spannin g-tree instances.
20-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP How to Configure STP Configuring th e Root Switch Step 5 end Returns to privileged EXEC mode.
20-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP How to Configu re STP Configur ing a Secondar y Root Switch Configuring Port Priority Configuring Path Cost Command Purpose Step 1 conf igur e terminal Enters globa l configura tion m ode.
20-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 0 Configuring STP Monitoring and Maintaining STP Configuring Optiona l STP Parameters Befo re Yo u Begin Ex ercise ca re when co nfi g uring the priorit y , and hello time fo r STP .
20-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 20 Configuring STP Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to switch administrat io n: Related Do cuments Standa rds MIBs RFCs show spanning-tree vlan vlan-id Disp lays spannin g-tree VL AN entries .
CH A P T E R 21-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 21 Configuring MSTP Finding Feature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
21-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP MSTP MSTP , which us es RSTP for rapi d con vergence, enab les VLA .
21-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP • A com mon and inte rnal sp anning tree ( CIST), which is a collect ion of the I STs i n eac h MST region, and the common span ning tree (CST ) that inte rconn ects th e MST regions a nd single spa nnin g trees.
21-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP Figur e 21 -1 MST Regions, CIS T Masters, and CS T Root Only the CS.
21-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP • The CIST r egi onal root was call ed the IST master in the prestandard im plementa tion. If th e CIST root is in t he regio n, the CIST regional r oot i s the C IST ro ot.
21-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP An MST region incl udes both switche s and LANs. A segment b elongs to the r egion of its designa ted port. Ther efore , a port in a different region than the designate d port fo r a segment is a bou ndary port .
21-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP the alt ernate b efore sendin g out a sing le pres tand ard BPDU , A Y c annot d etect t hat a pre standa rd swit ch is conn ecte d to Y a nd c ontinues to send standa rd BPDU s.
21-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP Interoperability with IEEE 802.1D STP A switch r unning M STP supp orts a built-in pr otocol migrat ion mecha nism that enable s it to i nteroper ate with legacy IEEE 802.
21-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP In a st able to pology with co nsisten t po rt roles througho ut t.
21-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP When S witc h C is co nnecte d to Swi tch B , a simil ar set of hands haki ng mes sag es are exch an ged.
21-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP After en suring th at all of the por ts are sync hronized, the switc h sends an agreeme nt message to the designat ed switc h corre spondin g to its roo t port.
21-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP The sending switch sets the proposal flag in the RSTP BPDU to propose itself as the d esignated switch on that LAN. The p ort role in the proposa l message is alway s set to the designated port.
21-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP • Propagat ion—W hen an RSTP switch re ceives a TC messa ge f.
21-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Informat ion About Conf iguring MSTP • VTP propa gation of the MST co nfiguration i s not suppo rted.
21-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Inform ation Abo ut Configuri ng MSTP Seconda ry Ro ot Switch When you con figure a swit ch wit h the extended system ID supp ort as the seconda ry root , the switc h priorit y is mo dified from t he default value (3276 8) to 2867 2.
21-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP How to Configu re MSTP Restarting the Protocol Mi gration Proce ss A switch r unning M STP supp orts a built-in pr otocol migrat ion mecha nism that enable s it to i nteroper ate with legacy IEEE 802.
21-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP How to Configure MSTP Configuring th e Root Switch Befo re Yo u Begin After conf iguring the switch as .
21-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP How to Configu re MSTP Configuring the Opti onal MSTP Parame ters Befo re Yo u Begin Ex ercise care whe n conf iguring the switch priority .
21-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP How to Configure MSTP Step 4 spanning-tree mst forward-tim e second s Config ures the forward time for all MST instances.
21-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Monito ring and Mai ntaining MST P Monitoring and Maintaining MSTP Configuration E xamples for Configur.
21-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 1 Configuring MSTP Additional References Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted to.
21-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 21 Configuring MSTP Addition al Referenc es.
CH A P T E R 22-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 22 Configuring Optional S pannin g-Tree Features Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
22-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Informat ion About Conf iguring the Optional Spanning-T ree Feat ures Interface s con nected to a si ngle workstat ion or server sho uld not re ceive bridge pr otocol data u nits (BPDUs).
22-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 2 Configuring Op tional Spa nning-Tree Features Information About Configuring the Optional Spanning-Tree Features BPDU Filt.
22-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Informat ion About Conf iguring the Optional Spanning-T ree Feat ures If a switch loses co nnectivity , it begins using t he alterna te paths as soon as the span ning tree selec ts a new root port .
22-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 2 Configuring Op tional Spa nning-Tree Features Information About Configuring the Optional Spanning-Tree Features Figur e 22-4 UplinkF ast E xample A ft er Dir ect L ink F ailur e Backbone Fast Backbo neFas t detects indirec t failur es in the core of the back bone.
22-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Informat ion About Conf iguring the Optional Spanning-T ree Feat ures Figur e.
22-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 2 Configuring Op tional Spa nning-Tree Features Information About Configuring the Optional Spanning-Tree Features Figur e 2.
22-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Informat ion About Conf iguring the Optional Spanning-T ree Feat ures Root guard ena bled on an interf ace applies to all the VLANs to which the in terf ace belongs.
22-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 2 Configuring Op tional Spa nning-Tree Features How to Conf igure th e Optional Spanni ng-Tree Features Default Optional Sp.
22-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Mainta ining and M onitorin g Optiona l Spanni ng-Tre e Features Maintaining an d Monitoring Optional Spanni ng-Tree Features Step 4 spanning-tree port fast bpduguard default Enables BPDU guard .
22-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 2 Configuring Op tional Spa nning-Tree Features Additional References Additional Ref erences The foll o wing sectio ns pro.
22-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 22 Configuring Optional Spanning-Tree Features Addition al Referenc es RFCs RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature.
CH A P T E R 23-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 23 Configuring Resilient Ethernet Protocol Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
23-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Informatio n About Conf iguring REP One REP segment is a chain of p orts co nnected to each other and conf igured with a se gmen t ID.
23-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l Information About Configuring REP REP segm ents ha ve th ese charac teristic s: • If all po rts in the se gment are operati onal, one port (r eferre d to as the alternate port) is in the blocked state fo r each V LAN.
23-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Informatio n About Conf iguring REP Link Integrity REP does not use an en d-to -end polling me chani sm betwee n edge port s to verify link int egrity .
23-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l Information About Configuring REP • By enter ing the ne ighbor offset num ber of a port in the segment, which iden tifies the downstrea m neighb or port of an ed ge port.
23-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Informatio n About Conf iguring REP When VLAN load balan cing is triggered , the primary edge por t sends out a message to alert all inter faces in the se gment about the preemptio n.
23-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l REP Seg men ts REP Segments A segment is a coll ection of po rts con necte d one to the oth er i n a ch ain and configured wit h a s egment ID.
23-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol REP Segmen ts • REP ports follo w these rules: – There is no limit to the number of REP p orts on a switch ; how ever , only two ports on a switch can be long to the sa me R EP segment .
23-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l How to Configure REP • If you do not co nfigure an admin istrative VLAN , the defaul t is V LAN 1. • There can be onl y one admi nistrat i ve VLAN on a switch and on a segme nt.
23-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol How to Configu re REP Step 4 rep s eg m e n t se gment-id [ edge [ no-neighbor ] [ primary ]] [ p referred ] Enables REP on the in terfa ce, and identif ies a segm ent number .
23-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l How to Configure REP Step 6 rep block port { id port-id | n eighbor_o ffset |.
23-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Monito ring and Mai ntaining REP Setting M anua l Preemption for VLA N Load .
23-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l Configuration Examples for Configuring REP Configuration E xamples for Config.
23-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Addition al Referenc es Switch (conf-if)# rep preempt delay 60 Switch (conf-.
23-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 3 Configuring Resil ient Ether net Protoco l Additional References MIBs RFCs MIB s MIB s Link — T o loc ate and download.
23-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 23 Config uring Resili ent Ethe rnet Protocol Addition al Referenc es.
CH A P T E R 24-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 24 Configuring FlexLinks and the MAC Address-Table Move Update Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
24-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate Informat ion About Conf iguring the FlexL inks and th e MAC Addre ss-Tabl e Move Upd ate of the i n terfac es is in th e linkup stat e and forwarding traf fic.
24-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e Information About Configuring the FlexLinks and the MAC .
24-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate Informat ion About Conf iguring the FlexL inks and th e MA.
24-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e Information About Configuring the FlexLinks and the MAC .
24-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate How to Conf igure the F lexLinks and MAC Ad dress-Tab le M.
24-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e How to Confi gure the Fle xLinks and MAC A ddress-Tab le.
24-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate How to Conf igure the F lexLinks and MAC Ad dress-Tab le M.
24-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e Mainta ining an d Monitor ing the Fle xLinks an d MAC Ad.
24-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate Configur ation Exam ples f or the Flex Links and MAC Addr.
24-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e Configu ration Examples for the Fle xLinks an d MAC Address- Table Move Upd ate 1 228.1.5.1 igmp v2 Gi1/1, Gi1/2, Gi1/1 1 228.
24-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate Configur ation Exam ples f or the Flex Links and MAC Addr.
24-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 4 Configuring Fl exLinks and the MAC A ddress-T able Mo ve Updat e Additional References Configuring M AC A ddress-Table M.
24-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 24 Configuring FlexLink s and the MAC Address-Ta ble Move Upd ate Addition al Referenc es MIBs RFCs MIB s MIBs Link — T o.
CH A P T E R 25-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 25 Configuring DHCP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
25-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Informat ion About Conf iguring DHCP DHCP Relay Agent A DHCP relay agent is a Layer 3 device th at forw ards DHCP pack ets between clien ts and serv ers.
25-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP Information About Configuring DHCP If the switc h is an aggr egation swit ch s upporting DHC P snoop ing.
25-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Informat ion About Conf iguring DHCP When you ena ble the DHCP snoo ping info rmati on option -82 on the sw itch, this seq uence of eve n t s occu rs: • The host (DHCP client) genera tes a DHCP request and broadcasts it on the netw ork.
25-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP Information About Configuring DHCP Figur e 25-2 Suboption P ack et For mats Figure 25-3 shows the packet.
25-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Informat ion About Conf iguring DHCP Figur e 25-3 User -Configur ed Suboption P ack et For mats Cisco I.
25-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP Information About Configuring DHCP When a swit ch learns of ne w bindings or w h en it lo ses bindings, the switc h immediately updates th e entries in the d atabase.
25-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Informat ion About Conf iguring DHCP DHCP Snooping Config uration Guidelines • Y ou must globa lly en able DHCP snoo ping on the swit ch. • DHCP snooping is not acti ve until DHCP snooping is enabled on a VLAN.
25-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP Information About Configuring DHCP • Y ou can di splay DHCP snoo ping stati stics by entering th e sho.
25-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP How to Co nf igur e DHC P option are id entified by the cl ient h ardware ad dress.
25-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP How to Configure DHCP Enabling DHC P Snoo ping and Op tion 82 Step 6 inte rface range port-range or interface interfa ce-id Configures mu ltiple physica l ports that are conne cted to the DHCP clients, and en ters i nterfac e range configuratio n mode.
25-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP How to Co nf igur e DHC P Enabling th e DHCP Sn ooping Bind ing Data base Agen t Step 7 interface interface-id S p ecif ies the interfa ce to be conf igured, and e nters in terf ace configurati on mode.
25-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP How to Configure DHCP Enabling DHC P Server P ort-Based Addre ss Allocation Preassignin g an IP Addre s.
25-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Monito ring and Mai ntainin g DHCP Monitoring and Maintaining DHCP Step 3 net work network-number [ ma sk | /p refix-le ng th ] Spe cifies the subne t network nu mber and mask of the DHCP address pool.
25-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 5 Configuring DHCP Configuration Examples for Configuring DHCP Configuration E xamples for Configuring DHCP Enabling DHC P.
25-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 25 Confi guring DHCP Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted.
CH A P T E R 26-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 26 Configuring Dynamic ARP Insp ection Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
26-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction Informatio n About D ynamic ARP Ins pection becau se ARP allo ws a gratuito us reply from a host e ven if an ARP request was not rece ived , an ARP spoofing attack an d the poiso ning of ARP cach es can occur .
26-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n Information About Dynamic ARP Inspection Interface Trust State s and Netw ork Security D AI associa tes a trust state with ea ch interf ace on the switc h.
26-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction Informatio n About D ynamic ARP Ins pection Note Dep ending o n the set up of th e DHCP se rver and the ne twork, it might not be possi ble to validate a given ARP packet on all switc hes in the VLAN.
26-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n Information About Dynamic ARP Inspection If the log b uffer o verf lows, it means that a log e vent does not fit into the lo g buf fer , and the display for the show ip arp inspection log pr i vile ged EX EC comm and is af fected.
26-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction How to Conf igure Dynami c ARP Inspec tion Note Do n ot enable D AI on RSP AN VLANs. If D AI is enabled on RS P AN VLANs, D AI packets m ig ht not reach t he RSP AN destin ation port.
26-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n How to Conf igure Dyna mic ARP Insp ection Configuring ARP ACLs for Non-DHCP Environments This pr oced ure shows how to co nfigure DAI when Switch B shown in Figure 2 6-2 on page 26- 3 does not support D AI or DHCP snoop ing.
26-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction How to Conf igure Dynami c ARP Inspec tion Step 3 permi t ip host sender-ip mac host sende r-mac [ log ] Permits ARP pac kets from t he s pecified host (Host 2).
26-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n How to Conf igure Dyna mic ARP Insp ection Limiting the Rate of Incoming AR P Packets Command Purpose Step 1 co nfi g ure terminal E nters g lobal c onfiguration mode.
26-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction How to Conf igure Dynami c ARP Inspec tion Perfor ming Validation Ch ecks Command Purpos e Step 1 co nfi g ure terminal Enters global co nfigurati on mode.
26-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n How to Conf igure Dyna mic ARP Insp ection Configuring the Log Buffer Command Purpose Step 1 co nfi g ure terminal Enters global con figuration mode.
26-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction Monito ring and Mai ntainin g Dynam ic ARP Insp ection Monitoring and Maintainin g D.
26-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 6 Configuring Dy namic ARP In spectio n Additional References Additional Ref erences The foll o wing sectio ns prov ide re.
26-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 26 Configuring Dynamic ARP Inspe ction Addition al Referenc es.
CH A P T E R 27-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 27 Configuring IP Source Guard Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
27-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd Informatio n About IP So urce Guard Y ou can enable IPSG whe n DHCP snoo ping is ena bled on an untru sted in terface.
27-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 7 Configuring IP Source G uard Information About IP Source Guard IPSG for static h osts al so support s dyn amic hosts.
27-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd How to Conf igure IP Sourc e Guard • Y ou can enabl e this featur e when 802.
27-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 7 Configuring IP Source G uard How to Conf igur e IP So urce Guard Configuring IP Source Guard for Static Hosts on a Private VLAN Host Port Step 6 ip veri fy source tracking port-security Enables IPS G for static hosts with MA C address filt er ing.
27-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd How to Conf igure IP Sourc e Guard Step 6 pri vat e-vl an isolated Specif ies an iso lated VL AN on a pri v ate VLAN port. Step 7 exit Exits V LAN configurat ion m ode.
27-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 7 Configuring IP Source G uard Monitoring and Maintaining IP Source Guard Monitoring and Main taining IP Source Guard Confi.
27-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd Configur ation Examp les for IP Source Guard Switch(config-if)# switchport access vlan 10 .
27-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 7 Configuring IP Source G uard Configuration Examples for IP Source Guard 200.1.1.4 0001.0600.0000 9 GigabitEthernet0/2 ACTIVE 200.1.1.4 0001.0600.0000 8 GigabitEthernet0/1 INACTIVE 200.
27-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd Addition al Referenc es Switch(config-vlan)# exit Switch(config)# vlan 200 Switch(config-.
27-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 7 Configuring IP Source G uard Additional References Standa rds MIBs RFCs Stan dard s T itle No new or m odified standa rds are supp orted by th is featur e, and su pport for exist ing stand ards has n ot been modif ied b y this feature.
27-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 27 Configuri ng IP Source Gua rd Addition al Referenc es.
CH A P T E R 28-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 28 Configuring IGMP Sno oping and MVR Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
28-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR IGMP Snooping Layer 2 switches can use IG.
28-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR An IGMPv 3 switc h suppo rts Basic IGMPv 3 Sn.
28-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR Router A sends a genera l quer y to th e switch , which forwar ds the qu ery to ports 2 t hroug h 5, whi ch are all members of the same VLAN.
28-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR Leaving a Multicast Group The router sends periodic multicast general querie s, and the switch forw ards these queries throug h all ports in the VLAN.
28-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR IGMP Report Su ppression Note IGMP report suppression is supported only when t he multicast query has IGMPv 1 and IGMPv2 reports.
28-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR Y ou can configure the swit ch eith er to sno op on I GMP que ries an d PIM/DVMRP packets or t o listen to CGMP se lf-join or prox y-join packets.
28-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR is no SVI IP address , the swit ch uses th e f irst av ailable IP ad dress co nf igured on the switc h.
28-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR Y ou can set the switc h for compa tibl e or .
28-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR Figur e 28-3 Multicast VLAN Registr atio.
28-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR These messa ges dynamic ally re g ister f or streams of multic ast traf fic in the m ulticast VL AN on the Layer 3 device.
28-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Informat ion About IGM P Snoopin g and MVR IGMP Filtering and Throttling In some en.
28-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Information About IGMP Snooping and MVR IGMP Profiles T o conf igure an IGMP pro fil.
28-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR How to Conf igure IGMP Snoo ping and MVR How to Configure IGMP Sn ooping and MVR Configuring IGMP Snooping Enabling or Disabling IGMP Snoop ing By default, IGM P snoopin g is global ly enab led on the swi tch.
28-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR How to Co nfigure IGMP S noopi ng and MVR Configuring TCN Step 4 ip igmp snooping vl.
28-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR How to Conf igure IGMP Snoo ping and MVR Configuring the IGMP Snoopin g Querier Disabling IGMP Re port Suppression Befo re Yo u Begin IGMP report suppression is supported only when the multicast query has IGMPv1 a nd IGMPv2 reports.
28-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR How to Co nfigure IGMP S noopi ng and MVR Configuring MVR Int erfaces Command Purpose Step 1 conf igur e terminal En ters g lobal configurati on m ode.
28-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR How to Conf igure IGMP Snoo ping and MVR Configuring IGMP Configuring IGMP Profi le.
28-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Monito ring and Maint aining IGMP Snooping an d MVR Monitoring and Main taining IGMP Snooping and MVR Step 3 ip igmp f ilter pr ofil e number Applie s the specif ied IGM P prof ile to the in terface.
28-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Monito ring and Mai ntaining IGMP Snooping and MVR show ip igmp snooping mrouter [ vlan v lan-id ] Displays i nform ation on dy namicall y learned a nd manuall y configured multicast rou ter interf aces.
28-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Configuration Examples for IGMP Snooping Configuration E xamples for IGMP Snooping C.
28-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Configur ation Examp les for IGMP Snooping Switch(config)# ip igmp snooping querier.
28-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 8 Configuring IGMP Sno oping and M VR Additional References Applying an IGMP Profile: Example This exam ple sh ows how to .
28-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapte r 28 Configu ring IGMP Snoop ing and MVR Addition al Referenc es RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature.
CH A P T E R 29-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 29 Configuring Port-Base d Traffic Control Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
29-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Informat ion About Port -Based Tr affic Control W i th eac h metho d, the po rt bloc ks tr aff ic when the risi ng thre shold is r eache d.
29-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control Inform ation Abo ut Por t-Based Tr affic C ontrol Storm Control and Threshold Levels Y ou co nfigure storm contr ol on a port an d enter t he threshol d lev el that you want t o be used for a particula r type o f traf fic.
29-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Informat ion About Port -Based Tr affic Control Do not co nf igure a pri vate-V LAN port as a protecte d port. Do not conf igure a pr otecte d port as a priv a te-VLA N p ort.
29-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control Inform ation Abo ut Por t-Based Tr affic C ontrol Y ou ca n configure a n interf.
29-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Informat ion About Port -Based Tr affic Control • shutdown vlan—U se to se t the sec urity violatio n mode per-VLAN.
29-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control Inform ation Abo ut Por t-Based Tr affic C ontrol VLAN, but is not l earne d on the a ccess VL AN. If y ou co nnect a sing le PC to the Ci sco IP phone , no addi tional MA C addre sses are require d.
29-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Informat ion About Port -Based Tr affic Control Port Securi ty Aging Y ou can use port secur ity aging t o set the ag ing time fo r all secure addre sses on a port.
29-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control How to Conf igure P ort-Bas ed Traff ic Control Protoco l storm prot ection is disable d by default. Whe n it is enable d, auto -recovery of t he virtua l port is disabled by defau lt.
29-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control How to Conf igure Port-Bas ed Traffic Con trol Configuring Small-Frame Arri val .
29-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control How to Conf igure P ort-Bas ed Traff ic Control Configuring P ort Blockin g Blocking Flooded Traffic on an Interf ace Note Th e inter face can be a physica l interfac e or an Ether Chann el group.
29-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control How to Conf igure Port-Bas ed Traffic Con trol Step 6 switchport port-security [.
29-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control How to Conf igure P ort-Bas ed Traff ic Control Step 7 swit chpor t port -sec u.
29-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control How to Conf igure Port-Bas ed Traffic Con trol Step 8 switchport port-security [ mac-addre ss mac-address [ vlan { vlan-id | { access | voice }}] (Optional) Ent ers a secure MA C address for the interf ace.
29-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control How to Conf igure P ort-Bas ed Traff ic Control Enabling and Configuring Por t .
29-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Monito ring and Mai ntaining Port -Based Tr affic Control Monitoring and Main ta.
29-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control Config uration Examp les for P ort-Bas ed Traffic Cont rol Enabling Bro adcast .
29-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Configur ation Examp les for Port-B ased Traff ic Control This exam ple sh ows h.
29-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 2 9 Configuring Port-B ased Traff ic Control Additional References Additional Ref erences The foll o wing sectio ns prov ide.
29-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 29 Configuring Po rt-Based Traffic Control Addition al Referenc es.
CH A P T E R 30-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 30 Configuring SPAN and RSPAN Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
30-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Information A bout SPAN and RSPAN SP AN copi es (o r mir rors) t raff ic re ceived or sen t (or b oth) on so urce po rts or source VLA Ns to a destinat ion po rt fo r anal ysis.
30-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Infor matio n Ab out SP AN an d RSP AN Figur e 30-2 Example o f RSP AN Configur ation SPAN Sess.
30-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Information A bout SPAN and RSPAN There can be more than one so urce sess ion and more than one destin ation se ssion act iv e in the same RSP AN VLAN.
30-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Infor matio n Ab out SP AN an d RSP AN Feature s that can caus e a packe t to be droppe d during tra nsmit pro cessing also af fect the duplicat ed copy for SP AN.
30-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Information A bout SPAN and RSPAN • Source por ts can be in the same or differen t VLANs. • Y ou can monit or multiple source ports in a single session.
30-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Infor matio n Ab out SP AN an d RSP AN A destinati o n port has th ese charact eristics: • For a local SP AN sessi on, the d estinatio n port must reside on t he same swi tch as the s ource por t.
30-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Information A bout SPAN and RSPAN • An RSP AN VLAN cannot be a pri vate-VL AN primary or seco ndary VLAN .
30-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Infor matio n Ab out SP AN an d RSP AN • A secu re port ca nnot be a SP A N dest inatio n port. For SP AN se ssions, do not enable port security o n ports with mo nitored egress when ingress forwarding is enable d on t he desti nation p ort.
30-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN How to Configure SPA N and RSPAN • The RSP AN VL AN is configured onl y on trunk por ts and not on acc ess ports.
30-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN How to Conf igure SPAN and RSPAN Step 3 monitor s ession session_numbe r source { interface in terface-id | vl an vl an-id } [ , | - ] [ both | rx | tx ] Specifies the SP AN sessi on and the so urce po rt (mo nitored port).
30-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN How to Configure SPA N and RSPAN Creating a Local SPAN Session and Configuring Incoming Traf.
30-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN How to Conf igure SPAN and RSPAN Specifying VLANs to Filter Step 4 monitor s ession session_nu.
30-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN How to Configure SPA N and RSPAN Configuring a VLAN as an RSPAN VL AN Step 4 monitor session sessio n_numbe r filter vlan vlan -id [ , | - ] Limits the SP AN source traff ic to specif ic VLANs.
30-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN How to Conf igure SPAN and RSPAN Creating an R SPAN Sou rce Sessio n Command Purpose Step 1 conf igur e terminal Ente rs global configurati on mode .
30-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN How to Configure SPA N and RSPAN Creating an R SPAN Des tination Sess ion Creating an RSPAN Destination S ess ion and Configuri ng Incoming Traffic Command Purpose Step 1 conf igur e terminal Ente rs global configurat ion mode.
30-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN How to Conf igure SPAN and RSPAN Specifying VLANs to Filter Step 3 monitor s ession session_numbe r source re mote v lan vlan-id Specif ies the RSP AN session and the so urce RSP AN VLAN.
30-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Monitorin g and Maintainin g SPAN and RSPAN Monitoring and Main taining SPAN and RSPAN Confi.
30-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Confi guratio n Examples fo r SPAN and RSPAN Switch(config)# end This exampl e shows ho w to d.
30-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Addition al Referenc es Configuring a VLAN for a SPAN S ession: Ex ample This example shows .
30-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN and RSPAN Additional References Standa rds MIBs RFCs Stan dard s T itle No new or m odified standa rds are supp orted by th is featur e, and su pport for exist ing stand ards has n ot been modif ied b y this feature.
30-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 30 Configuring SPAN an d RSPAN Addition al Referenc es.
CH A P T E R 31-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 31 Configuring LLDP, LL DP-MED, and Wired Location Service Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
31-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service Informat ion About LLDP, LLDP-MED , and Wire d Locatio n Service LLDP sup ports a set of att ributes tha t it uses to discover neighbo r devices.
31-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 1 Configuring LLDP, LLDP-M ED, and Wired Location Serv ice Information About LLDP, LLDP-MED, and Wired Location Service •.
31-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service Informat ion About LLDP, LLDP-MED , and Wire d Locatio n Service • Slot and port t hat was disconne cted • MA C addr ess • IP addre ss • 802.
31-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 1 Configuring LLDP, LLDP-M ED, and Wired Location Serv ice How to Configure LLDP, LLDP-MED, and Wired Location Service • For wired location to funct ion, you must f irst enter the ip de vice tracking globa l configuratio n comm and.
31-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service How to Conf igure LLDP , LLDP- MED, and Wire d Locatio n Service C.
31-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 1 Configuring LLDP, LLDP-M ED, and Wired Location Serv ice How to Configure LLDP, LLDP-MED, and Wired Location Service Conf.
31-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service Monito ring and Mai ntainin g LLDP, LLDP-MED , and Wired Lo catio .
31-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 1 Configuring LLDP, LLDP-M ED, and Wired Location Serv ice Configuration Examples for Configuring LLDP, LLDP-MED, and Wired.
31-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service Configur ation Examp les for Confi guring LLDP, LLDP -MED, an d W.
31-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 1 Configuring LLDP, LLDP-M ED, and Wired Location Serv ice Additional References Additional Ref erences The foll o wing se.
31-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 31 Configuring LLDP, LLDP-MED, and Wired Location Service Addition al Referenc es.
CH A P T E R 32-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 32 Configuring CDP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
32-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 32 Configur ing CDP How to Configure CD P For a switch and co nnect ed endpo int devices runni ng Cisco Me dianet , these events occur: • CDP ident ifies connec ted e ndpoints that c ommu nicate di rectly with the sw itch.
32-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 2 Configuring CDP Monitoring and Maintaining CDP Disabling CDP CDP is enab led by default. Note Switc h clus ters a nd othe r Cisco devices (s uch as Cisco IP Phones ) regular ly exchange CDP messages.
32-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 32 Configur ing CDP Conf igurat ion Exa mples fo r CD P Configuration E xamples for CDP Configuring C DP Pa ramete rs: Ex am.
32-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 2 Configuring CDP Additional References Standa rds MIBs RFCs Stan dard s T itle No new or m odified standa rds are supp orted by th is featur e, and su pport for exist ing stand ards has n ot been modif ied b y this feature.
32-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 32 Configur ing CDP Addition al Referenc es.
CH A P T E R 33-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 33 Configuring UDLD Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
33-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 33 Configuring UDLD Informat ion About U DLD Modes o f Operation UDLD su pport s two mo des of o perat ion: n ormal (the d efault) a nd a ggressive. In norm al mode, U DLD can dete ct un idirec tional li nks due to miscon necte d port s on fiber-optic con nections .
33-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 3 Configuring UD LD Information About UDLD When the switch rec e iv es a hello message, i t caches the infor mation until th e age time (hold time or time- to-li ve) e xpires.
33-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 33 Configuring UDLD How to Co nf igur e UDL D Default UDLD Settings How to Configure UDLD Enabling UDL D Globally Foll ow th.
33-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 3 Configuring UD LD How to Configu re UDLD Enabling UDL D on an Inte rface Setting and Resettin g UDLD Parameters Command Purpose Step 1 conf igur e terminal Enters g lobal c onfiguratio n mode .
33-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 33 Configuring UDLD Main ta ining and M oni tor ing UD LD Maintaining an d Monitoring UDLD Additional Ref erences The foll o.
33-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 3 Configuring UD LD Additional References Technica l Assista nce Description Link The Cisco T echnical Supp ort webs ite co.
33-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 33 Configuring UDLD Addition al Referenc es.
CH A P T E R 34-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 34 Configuring RMON Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
34-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 34 Configuring RM ON Informat ion About RMO N Figur e 34-1 Remot e Monit ori ng Example The switc h supports these RM ON gro.
34-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 34 Configur ing RMON How to Configu re RMON How to Configure RMON Configuring R MON Alarms a nd Events Y ou can co nfigure your s witch f or RM ON by usi ng th e com mand -line interfac e ( CLI) or an SNM P-com pati ble networ k manage ment st ati on.
34-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 34 Configuring RM ON How to Co nfig ure RM ON Collectin g Group Hist ory St atistics on an Interface Y ou must first c onfigure RMO N alar ms an d events to displ ay co llectio n info rmatio n.
34-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 34 Configur ing RMON Monitoring and Maintaining RMON Monitoring and Maintaining RMON Configuration E xamples for RMON Configur ing an RMON Alarm Nu mber: Exampl e The following exam ple sh ows how to configure an RMON alar m num ber: Switch(config)# rmon alarm 10 ifEntry.
34-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 34 Configuring RM ON Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen ces rela ted .
34-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 34 Configur ing RMON Additional References Technica l Assista nce Description Link The Cisco T echnical Supp ort webs ite con.
34-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 34 Configuring RM ON Addition al Referenc es.
CH A P T E R 35-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 35 Configuring System Message Logg ing Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
35-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging Informat ion About System Me ssage Loggi ng Y ou can access logged sy stem messag es by using the switc h command-line in terfa ce (CLI) or by sa ving them to a properly configured syslog server .
35-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging Informat ion Abo ut System Mess age Logging When synch ronous loggi ng of unsolic it.
35-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging Informat ion About System Me ssage Loggi ng Logging Messages to a UNIX Syslog Daemo n Before yo u can send system log messages to a UNIX syslog server , you must con figure the syslog daemon on a UNIX ser ver .
35-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging How to Conf igure System Message Logging Default Syste m Mess age Lo gging Con figuration How to Configure System Messag e Logging Disabling M essag e Logging Message logging is enab led by defau lt.
35-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging How to Co nfigure Syst em Mess age Lo gging Setting th e Mes sage Disp lay Destination Device If message logging is enabled , you can send messages to specific locations in addition to the conso le.
35-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging How to Conf igure System Message Logging Synchronizing Log M essages Command Purpose Step 1 conf igur e terminal Enters gl obal con figuration mo de.
35-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging How to Co nfigure Syst em Mess age Lo gging Enabling a nd Disab ling Time S tamps o.
35-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging How to Conf igure System Message Logging Limiting Syslog Messages Sent to the Histor.
35-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging Monito ring and Mai ntainin g the Syste m Message Log Configuring the UNIX System .
35-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging Confi gura tion Exa mples for t he System M essa ge Lo g Logging Dis play: Examp le.
35-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide .
35-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 5 Configuring Syste m Message L ogging Additional References Technica l Assista nce Description Link The Cisco T echnical .
35-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 3 5 Config uring Syst em Message Logging Addition al Referenc es.
CH A P T E R 36-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 36 Configuring SNMP Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
36-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P Informat ion About SNM P • Changing t he value of the SNMP eng ine ID has im portant im plicat ions.
36-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP Information About SNMP – Encryp tion—Mi xes t he contents of a package to prev ent it from being read by an un authoriz ed source. Note T o select encryption , enter the pri v keyword.
36-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P Informat ion About SNM P SNMP Man ager Functio ns The SN MP ma nager uses inf orma tion in the M IB t o perfo rm th e ope rations des cribed i n Ta b l e 36- 2 .
36-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP Information About SNMP Using SN MP to Acces s MIB Va riables An examp le of an NM S is th e Cisc oW orks network manag ement sof tware.
36-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P Informat ion About SNM P SNMP ifIndex MIB Object Values In an NMS, the IF-MIB g ener ates and a ssigns an inte rface index (if Index) obje ct value th at is a unique number gre ater than zero to ident ify a physica l or a logica l interfac e.
36-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP Information About SNMP This t able descri bes the suppo rted sw itc h trap s (noti fication ty pes ). Y ou can enab le any or al l of the se traps and c onfigure a trap ma nager to rece iv e them .
36-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P How to Co nf igur e SN MP Note Th ough visi ble in the c ommand- line hel p strings, the fru-ctrl, inse rtion , and remo val ke ywords are no t supported.
36-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP How to Configure SNMP Configuring Community Strings Note T o disabl e acce ss for an SNMP commun ity , set the community string for that co mmuni ty to t h e nu ll string (do not enter a value for th e communi ty string ).
36-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P How to Co nf igur e SN MP Configur ing SNMP Groups and Us ers Y ou can spe cify an ide ntification name (engi ne ID) for the local or remote SNM P server engine on th e switch .
36-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP How to Configure SNMP Step 3 sn mp- server grou p gr o upnam e { v1 | v2c | v3 { auth | noauth | priv }} [ rea d re a d v i e w ] [ write writevi ew ] [ notify notifyvie w ] [ ac cess access -list ] Configures a new SNMP group on the remote device.
36-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P How to Co nf igur e SN MP Configuring SNMP Notifications Step 4 sn mp- server user us ername gr oupnam.
36-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP How to Configure SNMP Step 3 snmp-serv er user username gr o upname { remo te host [ udp-port port ]} {.
36-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P How to Co nf igur e SN MP Setting the CPU Th reshold Notification Types and Values Setting th e Agent .
36-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP Monit oring and Maint ainin g SNMP Limiting TFTP Server s Used Thr ough SNM P Monitoring and Maintaining SNMP Command Purpose Step 1 configur e terminal E nters globa l configuration mod e.
36-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P Conf igurat ion Exa mples fo r SNMP Configuration E xamples for SNMP Enabling S NMP Vers ions: Example This example shows ho w to ena ble all versions of SN MP .
36-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 6 Configuring SNMP Additional References Associatin g a User with a Remote Hos t: Exa mple This example shows ho w to asso.
36-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 36 Configuring SNM P Addition al Referenc es MIBs RFCs Technica l Assista nce MIB s MIBs Link — T o locate a nd download .
CH A P T E R 37-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 37 Configuring Network Security with ACLs Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
37-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Informat ion About Ne twork Secu rity with A CLs switch rejects th e packet. I f there are no restricti ons, the switch for wards the pac ket; otherwise , the switch drops the pa cket.
37-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Information About Network Security with ACLs The switch examines A C Ls asso cia.
37-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Informat ion About Ne twork Secu rity with A CLs Some ACEs do not chec k Layer 4 info rmati on and th eref ore can be appl ied to al l packet f ragment s.
37-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Information About Network Security with ACLs Standard and Extended IPv4 ACLs This sec tion describ es IP ACLs. An A CL is a se quentia l co llection of pe rmit an d deny co nditi ons.
37-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Informat ion About Ne twork Secu rity with A CLs Note In addit ion to n umbered standard and extended A CLs, you c an also create s tandar d and e xtended nam ed IP A CLs by u sing th e sup ported numbers.
37-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Information About Network Security with ACLs • User D atagr am Prot ocol ( udp ) Note IC MP echo-reply canno t be fi ltered. All other ICMP codes or types can be filte r ed.
37-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Informat ion About Ne twork Secu rity with A CLs When you ar e creat ing standa rd.
37-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Information About Network Security with ACLs IPv4 ACL to a Terminal Line Y ou ca n use number ed ACLs to control acc ess to one or mor e termin al line s.
37-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Informat ion About Ne twork Secu rity with A CLs When you apply an u ndefined ACL to an i nterface, t he swit ch ac ts as i f the A CL has not be en appl ied to the interfac e and perm its all packet s.
37-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs How to Configure Network Security with ACLs T o determine the specia lized hardwa r e resources, en ter the show platform layer4 acl map pri v ileged EXEC co mmand.
37-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs How to Conf igure Networ k Security with ACLs Command Purpose Step 1 co nfi g ure terminal Enter s globa l configura tion m ode.
37-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs How to Configure Network Security with ACLs Creating a Numbered Exte nded ACL Command Purpos e Step 1 co nfi g ure terminal Enter s global configurat ion mode .
37-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs How to Conf igure Networ k Security with ACLs or access-list access- list-num ber.
37-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs How to Configure Network Security with ACLs Creating Named Standard and Extende.
37-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs How to Conf igure Networ k Security with ACLs Using Time Ranges with ACLs Repeat the steps if you ha ve multiple items tha t you want in ef fect at dif ferent times.
37-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs How to Configure Network Security with ACLs Applying an IPv4 ACL to a Termin al.
37-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs How to Conf igure Networ k Security with ACLs Applying a MAC ACL to a Layer 2 Int.
37-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Monitoring and Maintaining Network Security with ACLs Monitoring and Maintainin.
37-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Configur ation Examp les for Ne twork Secu rity with ACL s Switch(config)# end Switch# show access-lists Extended IP access list 102 10 deny tcp 171.
37-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Configuration Examples for Network Security with ACLs Including C omments in A .
37-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Configur ation Examp les for Ne twork Secu rity with ACL s Router A CLs function .
37-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Configuration Examples for Network Security with ACLs Switch# show access-lists Standard IP access list 6 permit 172.20.128.64, wildcard bits 0.
37-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Configur ation Examp les for Ne twork Secu rity with ACL s In this example , the network i s a Class B networ k with the a ddress 128.
37-25 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Configuration Examples for Network Security with ACLs Switch(config-if)# ip acc.
37-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Configur ation Examp les for Ne twork Secu rity with ACL s <output truncated> 00:09:34:%SEC-6-IPACCESSLOGS:list stan1 permitted 0.
37-27 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 7 Configuring Netw ork Securit y with ACLs Additional References Additional Ref erences The foll o wing sectio ns prov ide.
37-28 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 37 Configuring Network Security with ACLs Addition al Referenc es Technica l Assista nce Description Link The Ci sco T echn.
CH A P T E R 38-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 38 Configuring Standard QoS Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
38-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Information About Standard QoS This chapte r describes ho w to conf igure quality of service (QoS) b y using automat ic QoS (auto-QoS) comman ds or by using st andard Q oS comma nds on th e switch.
38-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Note IPv6 port-based trust with the dual IPv4 and IPv6 Switch Database Man agement (SDM) tem plates is supported on this switch.
38-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Standard QoS Mo del T o im plement QoS, the switch must d.
38-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Figur e 38-2 Standar d QoS Model Standard QoS Co nfig uration Gu.
38-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS – In a hi erarc hical p olicy ma p attac hed to an SVI .
38-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Default Ingress Queue Setting s Ta b l e 38- 1 shows the def ault ingress queue sett ings when QoS is enabled. Ta b l e 38- 2 shows the def ault CoS input queue threshold map when QoS is enable d.
38-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Ta b l e 38- 5 shows the default CoS o utput queue thr eshold map w hen QoS is ena bled. Ta b l e 38- 6 shows the default D SCP outpu t qu eue thresho ld map when QoS is enab led.
38-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Ta b l e 38- 8 sho ws the IP-pr ecedence- to-DSCP map to map IP preced ence v alues in incoming pa ckets to a DSCP v alue that Q oS uses inte r nally to represen t the p riority of the traf fic .
38-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS The default DSCP-to-D SCP-muta tion map is a null map, whic h maps an inc oming DSC P value to the same DSCP value.
38-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS • Perform t he cl assification ba sed on a c onfigured IP st andard or an exten ded ACL, which exami nes various fields in the IP head er .
38-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Figur e 38-3 Classification Flo wc hart 868 3 4 Gener a te the D S CP b as ed on IP precedence in p a ck et.
38-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Classification Based on QoS ACLs Y ou ca n use IP standa rd, IP extende d, or La yer 2 M A C A CLs to define a group of packets with the sa me char act eris tics ( class ).
38-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS The po licy map can cont ain the police and polic e aggr.
38-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Policing on Physical Ports In policy m aps o n physic al por ts.
38-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Figur e 38-4 P olicing and Mar king Fl ow chart o n Phys.
38-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS When co nf iguring polic ing on an SVI, yo u can cr eate and co.
38-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Mapping T ables During Qo S processing, the switc h repr.
38-19 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Queuein g and S chedulin g Overview The swi tch has queue s at specif ic points to help pre vent con g estion as sho wn in Figure 38-6 .
38-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Figur e 38-7 WTD and Queue Opera tion For more infor mat.
38-21 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Queueing and Scheduling on Ingre ss Queues Figure 38-8 shows the queuei ng and sched uling flowchart for i ngres s ports.
38-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Y ou assi gn each packet tha t flows throug h the sw itch to a queu e and t o a thre shold. Spec ifically , you m ap DSCP or CoS values to an ingress que ue and map DSCP or CoS values to a threshol d ID.
38-23 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Figur e 38-9 Queuein g and Schedulin g Flo wc hart f or Egr ess P orts Each p ort supp orts four egress qu eues, o ne o f wh ich (qu eue 1) can be th e egress expe dite qu eue.
38-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS b uf fers) or not empty (free b uffer s). If the queu e is not o ver- limit, the switc h can allocate bu f fer space from t he r eserved poo l or f rom th e co mmon pool (if it is n ot emp ty).
38-25 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS modify it . Y ou m ap a port to queue-set by using the queue-set qset-id interf ace conf iguration command. Modify the queu e-set conf iguration to change the WTD threshol d percentages.
38-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Classification Using Port Trust States Trust State on Ports within the Qo S Domain Pa ckets en tering a QoS do main are cla ssif ied at the edge of the QoS domain .
38-27 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS For most Cisco IP phon e configurat ions, th e traffi c sent fr.
38-28 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS Figur e 38-12 DSCP -T r usted Stat e on a P ort Bor der .
38-29 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS • Y ou ca n configur e a separat e second -level policy map for ea ch cl ass defined fo r the port . The second -lev el policy map specifi es the p olice action to tak e for each traff ic class.
38-30 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Informatio n About Sta ndard QoS • When VLAN -based QoS is enabled, t he switch suppo rts VLA N-based fe ature s, such as the VL AN map. • Y ou ca n configure a hie rarch ical pol icy map only on the primary VLAN of a pri vate VLAN.
38-31 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Information About Standard QoS Egress Qu eue Ch aracter istics Depend ing on the co mplexity of yo ur networ k and your Qo S solution, you mig ht need to pe rform al l of the tasks in the ne xt sections.
38-32 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS How to Configure Stan dard QoS Enabling Qo S Globally Enabling V LAN-Based QoS on Physic al Ports By default, VLAN-base d QoS is di sabled o n all physic al switch ports.
38-33 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Configuring the Trust State on Po rts Within the QoS Domai n C.
38-34 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Configuring a Truste d Boundary to Ensure Port Securit y .
38-35 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS If you disab le QoS by usi ng th e no mls qos global con figuration co mmand , the CoS and DSCP values are not c hanged (the default Q oS setting) .
38-36 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Configuring a QoS Policy Conf iguring a QoS polic y typically requi res classifying traf fic into cla sses, conf iguring policie s applied to those traf fic classes, and attaching policies to ports.
38-37 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Creating IP Exte nded ACLs Creating a Layer 2 MAC ACL for Non-IP Traffic Command Purpose Step 1 conf igur e terminal Ent ers g lobal c onfiguration mode.
38-38 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Creating Class Map s Y ou use the class- map global con figurat ion comm and to name an d to isola te a specifi c traf fic flo w (or class) f rom all o ther traf fic.
38-39 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Command Purpose Step 1 conf igur e terminal Ent ers g lobal c onfiguration mode.
38-40 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Creating Nonhiera rchical Policy Maps Command Purpose Step 1 conf igur e terminal Ent ers g lobal c onfiguration mode.
38-41 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Step 5 trust [ cos | dscp | ip-pr ecedence ] Configures the trust state, whi ch QoS uses to gene rate a CoS-ba sed or DSCP-based QoS lab el.
38-42 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Creating Hi erarchical Polic y Maps Step 8 end Return s to global co nfiguration mo de.
38-43 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Step 5 class-map [ match-all | mat ch-any ] class-m ap-name Crea tes a n inte rface-l evel class ma p, and en ters class -ma p configuration mode.
38-44 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Step 10 police rate-bps burst-byte [ exce ed-action { drop | policed-dscp- transmit }] Def ines an indi vidual police r for th e cla ssif ied traf fic.
38-45 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Step 14 tr ust [ co s | dscp | ip-pr ecedence ] Confi g ures the t rust state, whi ch QoS uses to gener ate a CoS-based or DSCP-based QoS lab el.
38-46 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Creating Agg regate Policers By using an aggre gate poli cer , you can create a police r that is shared by multip le traf fic classes within the sa me pol icy map.
38-47 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Configuring DSCP Maps These sec tions co ntain this co nfigura.
38-48 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Configuring the IP-Pr ecedence-to-DSCP Map Configuring the Policed- DSCP Map Configuring the DSCP-to- CoS Map Command Purpose Step 1 conf igur e terminal Enters glob al con figuration mo de.
38-49 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Configuring the DSCP-to- DSCP-Muta tion Map Configuring In gre.
38-50 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Allocating Buffer Space Betw een the Ingress Queues Y ou d efine the ratio (alloc ate the amount of space) w ith w hich to divide the ingress buf fers be twee n the two queue s.
38-51 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Allocating Bandwidth Between the Ingress Que ues Y ou need t o specify how much of the av ai lable ban dwidt h is allocat ed betw een the ingr ess queue s.
38-52 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Configuring E gress Queu e Characteristic s These sec tio.
38-53 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Mapping DSCP or CoS Values to an Egress Queue and to a Thresho.
38-54 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S How to Configu re Standard Q oS Configuring SRR Sh aped Weights on Egress Queues Y ou can spe cify how much of the av ai lable ba ndwidt h is alloc ated to each queue.
38-55 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS How to Co nfigure Standa rd QoS Configuring SRR Sh ared Weights on Egress Queues In shar ed mod e, the queues share th e band width am ong th em ac cordi ng to the configured weight s.
38-56 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Monito ring and Maint aining Sta ndard QoS Configuring the Egress Expedite Que ue Y ou can ensur e that c ertain p ackets have priority over all othe rs by queu ing them in the egress expedite queue.
38-57 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Confi gurat ion Exam ples for Standard QoS Configuration E xamples for Standard QoS Configuring th e SRR S chedu ler: Example This example shows ho w to configur e the wei ght rati o of the SRR sched ule r running o n an egress por t.
38-58 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Configur ation Examp les for Standa rd QoS Configuring DS CP-Truste d State on a Port: Ex.
38-59 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Confi gurat ion Exam ples for Standard QoS This example shows how to creat e a clas s map ca l.
38-60 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Configur ation Examp les for Standa rd QoS Creating an Ag gregate Polic er: Exampl e This exa m ple sho ws how to create an aggre gate policer and attach it to multiple cla sses within a polic y map.
38-61 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Confi gurat ion Exam ples for Standard QoS Configur ing DSCP Maps : Examp les This exam ple sh.
38-62 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Configur ation Examp les for Standa rd QoS This e xample shows h ow to define the DSCP-to-D SCP mutation map.
38-63 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Confi gurat ion Exam ples for Standard QoS This e xample shows h ow to assign the ingress bandwidths to the queues. Queue 1 is the priority queue with 10 percen t of the bandwidth al located to it.
38-64 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Addition al Referenc es Switch(config-ext-macl)# permit 0001.0000.0001 0.0.0 0002.0000.0001 0.0.0 Switch(config-ext-macl)# permit 0001.0000.
38-65 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 8 Configuring Standar d QoS Additional References Technica l Assista nce Description Link The Cisco T echnical Supp ort we.
38-66 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 38 Conf igur ing S tanda rd Qo S Addition al Referenc es.
CH A P T E R 39-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 39 Configuring Auto-QoS Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
39-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS Informat ion About A uto-QoS • Auto-Qo S configure s the sw itch f or V oIP with C isco IP phone s on n onrouted and r outed ports . Auto-QoS al so conf igures the switch for V oIP with dev ices running the Cisco SoftPh one application .
39-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 9 Configuring Au to-QoS Information About Auto-QoS • Configures egress queues Generated Auto-QoS Configuration By def ault, auto -QoS is di sabled on all ports.
39-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS Informat ion About A uto-QoS When you en able the auto -QoS fea ture on the f irst port, the se a.
39-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 9 Configuring Au to-QoS Information About Auto-QoS The switch automatica lly maps CoS v alues to an eg ress queue and to a threshold ID.
39-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS Informat ion About A uto-QoS The switch automat ically sets up the ingress queu es, with que ue 2 as the p riori ty qu eue and queue 1 in sh ared mod e.
39-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 9 Configuring Au to-QoS Information About Auto-QoS Effects of Auto-QoS on the Configuration When auto- QoS is enabled, th e au to q os v oip interface co nfiguration c omman d and the ge nerate d configurati on are add ed to the ru nning configuratio n.
39-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS How to Conf igure Auto-QoS comman ds ar e suc cessful ly app lied, a ny user-enter ed configu ration t hat was not ove rridd en rem ains in the ru nning c onfigurat ion.
39-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 9 Configuring Au to-QoS Monitoring and Maintaining Auto-QoS Configuring QoS to Prioritize VoIP Traffic This task e x plains.
39-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS Configur ation Examp les for Auto -QoS Configuration E xamples for Auto-QoS Auto-QoS Ne twork: E.
39-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 3 9 Configuring Au to-QoS Additional References Enabling Au to-QoS VOIP Trust: Example This e xample sho ws ho w to enable a.
39-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 39 C onfigur ing Auto-Q oS Technica l Assista nce Description Link The Ci sco T echni cal Support websit e conta ins thousa nds of pag es of search ab le technic al cont ent, includ ing links to produ cts, te chnolog ies, so lutions, technica l tips, a nd tools .
CH A P T E R 40-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 40 Configuring EtherChannels Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
40-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Informat ion About Conf iguring EtherChanne ls EtherChann els An EtherCh annel c onsists of individual Fast Ethernet or Giga bit Ether net links bundled int o a single logical lin k as shown in Figure 40 -1 .
40-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Infor m ation About Configuri ng EtherChann els Port-Chan nel Interfaces When you cre ate an E.
40-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Informat ion About Conf iguring EtherChanne ls Port Aggreg ation Pro tocol The Port Aggr eg.
40-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Infor m ation About Configuri ng EtherChann els PAgP Learn Method and Priority Network devices are classi fied as P AgP physical lea rners o r agg regate-por t lear ners.
40-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Informat ion About Conf iguring EtherChanne ls PAgP Interaction with Other Features The Dyna mic Trunking Protocol (DT P) and the Ci sco Discovery Protoco l (CDP) send and receive packets over the physica l ports in the Et herChann el.
40-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Infor m ation About Configuri ng EtherChann els LACP Hot-Stand by Ports When enabled , LA CP tries to conf igure the maximum number of LA CP- compatible ports in a channe l, up to a maxi mum of 16 ports.
40-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Informat ion About Conf iguring EtherChanne ls EtherChann el On Mode EtherC hannel on mode can be used to manu ally c onf igure an Ethe rCha nnel.
40-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Infor m ation About Configuri ng EtherChann els W i th sourc e-and-de stination IP a ddress-ba.
40-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Informat ion About Conf iguring EtherChanne ls Default EtherChannel Settings EtherChann el.
40-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels How to Conf igure EtherCh annels • Do not configure a Swit ched Po rt Ana lyzer (SP AN ) destin ation port as par t of a n Ethe rCha nnel. • Do not co nf igure a secure po rt as part of an Ether Channel or the re vers e.
40-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels How to Conf igure Ether Channels This requir ed task ex plains ho w to config ure a Layer 2 Ethernet p ort to a L ayer 2 EtherCha nnel. Command Purpose Step 1 conf igur e terminal Ent ers glob al configurat ion mode .
40-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels How to Conf igure EtherCh annels Step 4 channel- group c hann el-gr oup- number mo de { auto .
40-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels How to Conf igure Ether Channels Configurin g EtherChan nel Lo ad Balan cing This task is optional. Configuring the PAgP Le arn Meth od and Priority This task is optional.
40-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Monitor ing and Ma intainin g EtherChannels on the IE 2000 Sw itch Configuring the LACP Hot-Standb y Ports This task is optional.
40-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Configur ation Examp les for Confi guring Ethe rChannels Configuration E xamples for Confi.
40-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 0 Configuring EtherCh annels Additional References MIBs RFCs Technica l Assista nce MIB s MIB s Link — T o loc ate and d.
40-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 40 Confi gur ing Ethe rChannels Addition al Referenc es.
CH A P T E R 41-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 41 Configuring Static IP Unicas t Routing This chap ter describ es ho w to conf igure IP V ersion 4 (IPv4) stat ic IP unicast routing on the swit ch. Static routing i s suppor ted only o n switche d virtua l interface s (SVIs) a nd not on p hysical i nterfaces.
41-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 41 Configuring Static IP Unicast Routing IP Routing IP Routing In some network en vi ronmen ts, VLAN s are assoc iated wit h individual netwo rks or subnet works. In an IP network, each subnetwork is mapped to an individua l VLAN.
41-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 41 Configur ing Static IP Unic ast Routing How to Configure Static IP Unicast Routing How to Configure Static IP Unicast Rout.
41-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 41 Configuring Static IP Unicast Routing Configur ing Static Un icast Routes This t ask explai ns how to assi gn an IP addr .
41-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 41 Configur ing Static IP Unic ast Routing Additional References for Configuring IP Unicast Routing Additional Ref erences fo.
41-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 41 Configuring Static IP Unicast Routing Addition al Referenc es for Configur ing IP Uni cast Routing RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature.
CH A P T E R 42-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 42 Configuring IPv6 Host Functions Note T o use IPv6 host fun ctions, the switch mus t be runn ing the LAN Base imag e. This c hapter d escrib es how to configure IPv6 host fun ction s on the switc h.
42-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Informat ion About Configuri ng IPv6 Host Fu nctions For informat ion about IPv6 and othe r featu res in this cha pter • See the Cisco IO S IPv6 Con figuration Library at th is UR L: http://www .
42-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions Information About Configuring IPv6 Host Functions • SNMP and Sysl og Over IPv6, page 4.
42-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Informat ion About Configuri ng IPv6 Host Fu nctions Neighbor disco very throttling e.
42-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions Information About Configuring IPv6 Host Functions Figure 42-1 sh ows a router fo rwardin g bot h IPv4 and IPv6 t raff ic th rough th e sam e inter face, base d on the I P pack et and desti n ation addresses.
42-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Informat ion About Configuri ng IPv6 Host Fu nctions • Configuration of IPv 6 hosts as trap receiv ers For support over IPv6, SNMP modi f ies the existing IP transport ma pping to simu ltaneous ly support IPv4 and IPv6 .
42-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions How to Configure IPv6 Hosting How to Configure IPv6 Hosting Configurin g IPv6 Add ressin.
42-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions How to Co nfig ure I Pv6 Host ing Configuring Default Router Preferenc e Rout er adv .
42-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions Monitoring and Maintaining IPv6 Host Information Configuring IPv6 IC MP Rate Limiting IC.
42-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Configur ation Examp les for IPv6 Host Functi ons Configuration E xamples for IPv6 H.
42-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions Configuration Examples for IPv6 Host Functions Displaying Show Co mmand Outp ut: Exampl.
42-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Configur ation Examp les for IPv6 Host Functi ons 0 unknown protocol, 0 not a router.
42-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 2 Configuring IPv6 Hos t Functions Additional References Additional Ref erences The foll o wing sectio ns prov ide referen.
42-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapt er 42 Config uring IP v6 Host Func tions Addition al Referenc es RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s feature, and support for ex isting RFCs has not been modif ied b y this feature.
CH A P T E R 43-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 43 Configuring Link State Tracking Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
43-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 43 Configur ing Link State Tr acking Link State Tr acking Figure 43-1 on page 43-3 sho ws a netwo rk conf igured with link s tate tracking .
43-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 3 Configuring Li nk State Trac king Link St ate Tr acking do wnstream por ts change s to the link -do wn state. Conne cti vit y to serv er 1 and ser ver 2 is then chan ged from lin k state group1 to link state group 2.
43-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 43 Configur ing Link State Tr acking How to Conf igure Link State Tr acking How to Configure Link State Track ing Configurin.
43-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 3 Configuring Li nk State Trac king Additional References Link State Group: 1 Status: Enabled, Down Upstream Interfaces : F.
43-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 43 Configur ing Link State Tr acking Addition al Referenc es MIBs RFCs Technica l Assista nce MIB s MIBs Link — T o locate.
CH A P T E R 44-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 44 Configuring IPv6 MLD Snooping Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter . For the latest feature informa tion an d ca veats, s ee th e release not es for your platform a nd soft ware release.
44-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping Informat ion About Conf iguring IPv6 MLD Snooping MLD is a protoco l used b y IPv6 multica .
44-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping Information About Configuring IPv6 MLD Snooping Note When the IPv6 multicast router is a C.
44-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping Informat ion About Conf iguring IPv6 MLD Snooping When MLD snoop ing is enabl ed, MLD rep ort suppressi on, called liste ner messa ge suppressi on, is automatically enabled.
44-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping Information About Configuring IPv6 MLD Snooping Default MLD Snooping Configuration MLD Sno.
44-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping How to Conf igure IP v6 MLD Sn ooping Enabling or Disabling MLD Sn ooping By default, IPv6 M LD sno oping i s globa lly d isabled on the switch and e nabled on al l VLAN s.
44-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping How to Configure IPv6 MLD Snooping Configuring a Sta tic Multicast Group Configuring a Multi cast Router Port Note Static connections to multicast router s are supported only on switch ports.
44-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping How to Conf igure IP v6 MLD Sn ooping Enabling M LD Immediate Le ave Configur ing MLD Snoopi ng Querie s Command Purpose Step 1 conf igur e terminal Ent ers glob al con figuration mo de.
44-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping Monitoring and Maintaining IPv6 MLD Snooping Disabling M LD Listener M essage S uppression.
44-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping Configur ation Examp les for Confi guring IPv6 MLD Snoop ing Configuration E xamples for C.
44-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping Confi guratio n Examples for Conf iguring IPv 6 MLD Snoop ing Switch(config)# ipv6 mld sn.
44-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping Addition al Referenc es Additional Ref erences The foll o wing sectio ns prov ide referen .
44-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 4 Configuring IPv6 M LD Snooping Additional References.
44-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 44 Configuring IPv6 MLD Snooping Addition al Referenc es.
CH A P T E R 45-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 45 Configuring Cisco IOS IP SLAs Operations Finding F eature Information Y our softw ar e release may not support a ll the f eatures d ocumented in this chap ter .
45-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations Informatio n About Conf iguring Cisco IOS IP SLAs Oper ations Cisco IOS IP S LAs Cisco IOS IP SLAs sends data across the network to measure per formance between multiple network locations or across multi ple network pa ths.
45-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s Information About Configuring Cisco IOS IP SLAs Operations Cisco IOS IP S LAs .
45-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations Informatio n About Conf iguring Cisco IOS IP SLAs Oper ations the responde r acce pts the reque sts and respo nds to them . It disab les the po rt after it re sponds to the IP SLAs pack et, or wh en the speci fied time ex pire s.
45-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s Information About Configuring Cisco IOS IP SLAs Operations The pe nding op tion i s an interna l state of th e opera tion that is visible throug h SNMP .
45-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations How to Conf igure Cisco IOS IP SLAs Op erations • Round-tr ip delay (average r.
45-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s How to Configure Cisco IOS IP SLAs Operations Configurin g the IP SLAs Respond.
45-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations How to Conf igure Cisco IOS IP SLAs Op erations Step 3 udp-jitter { destination-.
45-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s How to Configure Cisco IOS IP SLAs Operations Analyzing IP Service Levels by Us ing the ICMP Echo Op eration Note Th is oper ation does not requ ire the IP SLAs respo nder to be e nabled .
45-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations Monito ring and Mai ntaining Cisco IP SLAs Ope rations Monitoring and Maintaining Cisco IP SLAs Operation s Step 5 exit Exits UDP jitter configuratio n mode, and re turns to global c onfi guration mod e.
45-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s Configuration Examples for Configuring Cisco IP SLAs Operations Configuration.
45-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations Configur ation Examp les for Confi guring Cisc o IP SLAs Oper ations Number of .
45-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 45 Configur ing Cisco IOS IP SLA s Operation s Additional References Switch(config)# ip sla schedule 5 start-time now life forever Switch(config)# end Switch# show ip sla configuration 10 IP SLAs, Infrastructure Engine-II.
45-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 45 Configuring Cisco IOS IP SLAs Operations Addition al Referenc es MIBs RFCs Technica l Assista nce MIB s MIBs Link — T .
CH A P T E R 46-1 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 46 Troubleshooting This chapter descr ibes ho w to identify and resolv e software probl ems related to the Cisco IOS software on the swi tch.
46-2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Informat ion for Trou bleshoot ing Note If a remot e device do es not au tonegoti ate, configure t he dupl ex settings o n the t wo ports t o matc h. The speed parame ter can adjust itself e ven if the connec ted port does not aut onegotia te.
46-3 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng Information for Troubleshooting Layer 2 Tracerou te The Lay er 2 tra cerou te feat ure al lows the swit ch to id entif y the physic al pat h that a packet takes fr om a source device to a destin ation device.
46-4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Informat ion for Trou bleshoot ing • When multipl e dev ices are at tached to one port t h rough hubs ( for e xample, multiple CDP neighbors are de tecte d on a por t), t he Lay er 2 tracero ute fe ature is not supp orted.
46-5 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng Information for Troubleshooting Use TDR to di agnose and resolve cabling pr oblems i n these situa tions.
46-6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Informat ion for Trou bleshoot ing Y ou ca n configure th e switch t o not crea te the extend ed cre ashinfo file by using the no exception crashinfo gl obal conf iguration co mmand .
46-7 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng How t o Troub leshoot • For complete in formation about CPU utilization and ho w to troublesh oot utiliz ation prob lems, see the T r oubleshooting Hig h CPU Utiliza tion docu ment on Cisco .
46-8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting How to Trouble shoot switch% ls -l image_filename.bin -rwxr-xr-x 1 bschuett eng 6365325 May 19 13:03 <insert path for lan base image> -rw-r--r-- 1 boba 3970586 Apr 21 12:00 image_name.
46-9 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng How t o Troub leshoot • Y ou ha ve ph ysical ac cess to the switc h.
46-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting How to Trouble shoot Beginning in privileged EXEC mode , use this co mman d to ping a nother device on .
46-11 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng How t o Troub leshoot Note Other p rot ocol keyw ords ar e a v ailable w ith the traceroute pri vile ged EXE C command, but t h e y are n ot supported i n this releas e.
46-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting How to Trouble shoot Enabling Debugging on a Specific Feature Cautio n Beca use de bu gging outpu t is as signed high prio rity in the CPU pr ocess , it can re nder the sys tem unusab le.
46-13 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng Monitoring Information Redirecting De bug a nd Erro r Mes sage Outp ut By default, the net work server sen ds the out put from debug command s and system error me ssages to the console .
46-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Troubles hooting Examp les Troubleshooting Examples show pla tform forward Command The output from the .
46-15 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng Troubl eshootin g Exampl es This is an exam ple of the output whe n the packet coming in on port 1 in VLA N 5 is sent to an add ress already learne d on the VL AN on ano ther por t.
46-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Addition al Referenc es Output Packets: ------------------------------------------ Packet 1 Lookup Key-Used Index-Hit A-Data OutptACL 50_10010A05_0A010505-00_40000014_000A0000 01FFE 03000000 Port Vlan SrcMac DstMac Cos Dscpv Gi1/2 0007 XXXX.
46-17 Cisco IE 2000 Switch Software Configuration Guide OL-25866-01 Chapter 4 6 Troubleshooti ng Additional References RFCs Technica l Assista nce RFCs T itle No new or m odified R FCs are suppo rted by thi s featur e, and suppor t for existing RFCs has not bee n modif ied b y this feature.
46-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Chapter 46 Trouble shooting Addition al Referenc es.
A- 1 Cisco IE 2000 Switch S oftware Conf iguration Gui d e OL-25866-01 APPENDIX A Working with the Cisco IOS File System, Configuration Files, an d Software Images This ap pendix descri bes how to manip ulate the switch flash file syst em, how to copy c onfiguration files, and how to archive (upload an d download) softwar e image s to a switch.
A- 2 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith the Flash F ile System *.
A-3 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with the Flash File Syste.
A- 4 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith the Flash F ile System Y.
A-5 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with the Flash File Syste.
A- 6 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith the Flash F ile System Copying Files T o c opy a file f rom a source to a dest inatio n, use the co py source-url destination- url p rivileged EXEC comm and.
A-7 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with the Flash File Syste.
A- 8 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith the Flash F ile System • For the TFTP , the syntax is tftp: [[ // lo cation ] / dir ectory ] / tar - file name .
A-9 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files .
A-10 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files Use.
A-11 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files Step 4 Copy the c onfiguratio n file to the app ropria te ser ver locatio n.
A-12 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files Ste.
A-13 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files Copying C onfiguratio n Files By Using FTP Y ou can co py configuration files to or from an FTP server .
A-14 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files Dow.
A-15 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files %SYS-5-CONFIG_NV:Non-volatile store configured from host2-config by ftp from 172.
A-16 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files Cop.
A-17 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files ip rcmd remote-username User0 If the switch IP address tr anslates to Swit ch1.
A-18 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files Address of remote host [255.255.255.255]? 172.16.101.101 Name of configuration file[rtr2-confg]? host2-confg Configure using host2-confg from 172.
A-19 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files Clearing Con figuration Informatio n Y ou ca n clea r the configurati on inf ormati on fr om the startup configurat ion.
A-20 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working w ith Configurati on Files The.
A-21 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files.
A-22 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images Working .
A-23 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Not.
A-24 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images stacking_number: x info_end: version_suffix: xxxx version_directory:image-name image_system_type_id:0x00000000 image_name:image-nameB.
A-25 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Pre.
A-26 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images The do w.
A-27 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Uploading an Image File By Using TFTP Y ou can up load an image from the switc h to a T FTP serv er .
A-28 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images Preparing to Download or Uploa d an Image File By Using FTP Y ou can co py images files to or from an FTP server .
A-29 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Downloading an Image File By Using FTP Y ou can d ownload a ne w image f ile and o verwrite the cu rrent image or keep the curren t image.
A-30 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images The do w.
A-31 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Beg.
A-32 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images Note Ins.
A-33 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images •.
A-34 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images The do w.
A-35 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Append ix A Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Beg.
A-36 Cisco IE 2000 Swi tch Software Configuration Guide OL-25866-01 Appendix A W orking with the Cisco IOS File System, Configuration Files, an d Software Images Working wi th Software Images.
IN-1 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 INDEX Numerics 802.1 x Acco unting Overvi ew 13-31 A AAA dow n po licy, N AC La yer 2 I P val idatio n 1-9 abbrev iati ng comm and.
Index IN-2 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 matc hing 37-5, 37-9 named, IPv4 37-7 number pe r QoS class map 38-5 port 37-2 QoS 38-13, 38-36 resequenc ing entr ies 37-7 .
Inde x IN-3 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 authenti cation co mpatibility with Catal yst 6500 switch es 13-7 authenti cation failed V L AN See rest ricted VLAN authe .
Index IN-4 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 BPDU filtering describe d 22-3 support fo r 1-6 BPDU guard describe d 22-2 support fo r 1-6 bridge protoc ol data unit See B.
Inde x IN-5 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 keystroke ed iting 2-7 wrapped l ines 2-9 erro r messag es 2-5 filtering c ommand output 2-10 getting help 2-3 history chan.
Index IN-6 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 configur able lea v e timer , IGMP 28-5 configuratio n, initial default s 1-11 Express Setup 1-2 config urati on chan ges, l.
Inde x IN-7 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 enabling all system diagn ostics 46-12 enab ling for a sp eci fic fe at ure 46-12 redirec ting err or messa ge out put 46-13 default comma nds 2-4 default confi guration 802.
Index IN-8 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 relationship to BOOTP 4-5 rela y suppo rt 1-4 support fo r 1-4 DHCP bind ing database See DHCP snooping binding da tabase DH.
Inde x IN-9 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 deleting old i mage A- 26 prep aring A-25, A-28, A-32 reasons for A-2 3 using FTP A-29 using HTTP A- 23 using RC P A-33 usi.
Index IN- 10 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 E editing featu res ena bling and disab lin g 2-7 keystro kes us ed 2-7 wrapped l ines 2-9 ELIN l ocation 31-3 enab le pa .
Inde x IN- 11 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 connect ing interfaces with 15-6 VLAN-brid ge STP 20-10 Fast Converge nce 24-3 FCS bi t error ra te ala rm config uring 3.
Index IN- 12 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 global stat us moni toring alar ms 3-2 guest VLAN a nd 802.1x 13-20 GUIs See dev ice m anag er and Networ k As sistant H h.
Inde x IN- 13 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 IGMP f ilte ring config uring 28-13 default confi guration 28-12 describe d 28-12 support fo r 1-2 IGMP gr oups configuri.
Index IN- 14 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 clust er access 6-3 comm and sw itc h 6-1, 6-11 discoveri ng 7-8 for IP rout ing 41-3 IPv6 42-2 standby comma nd switc h 6.
Inde x IN- 15 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 steps to config ure 41-3 subnet ma sk 41-3 with SVIs 41-3 IPv4 A CLs applyi ng to inter faces 37-9, 37-17 exten ded , cre.
Index IN- 16 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 Leaking IG MP Repo rts 24-4 LEDs , swit ch See hardw are instal lation gu ide ligh tweight d irect ory acc ess protoc ol S.
Inde x IN- 17 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 crea ting 37-11 defined 37-11 for QoS clas sificat ion 38-10 magic p acket 13-24 managea bility feat ures 1-4 manage ment.
Index IN- 18 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 describe d 21-5 BPDU filtering describe d 22-3 BPDU guard describe d 22-2 CIST, descri bed 21-3 CIST reg ional r oot 21-3 .
Inde x IN- 19 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 multicast t elevision application 28-9 multicas t VLAN 28-8 Multicast VLAN Regi stration See MVR multidomain authentica t.
Index IN- 20 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 stratum 7-2 support fo r 1-4 time services 7-2 synchroniz ing 7-2 O off mode , VTP 18-3 open1x config uring 13-50 open1x a.
Inde x IN- 21 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 describe d 38-15 port ACL s defined 37-2 types of 37-2 Port Aggreg ation Pro tocol See E therCha nnel port-base d auth en.
Index IN- 22 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 voice VL AN describe d 13-23 PVID 13-23 VVID 13-23 wake-on- LAN, de scribe d 13-24 with ACLs and RADIUS Filter-Id attr ibu.
Inde x IN- 23 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 proxy repo rts 24-3 prun ing, V TP enab lin g in VTP domain 18-13 on a port 17-19 exam ples 18-8 overvi ew 18-7 pruning-e.
Index IN- 24 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 WTD , des cri bed 38-24 enab ling g loba lly 38-32 flowchar ts classification 38-12 egress q ueuein g an d schedu ling 38-.
Inde x IN- 25 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 vendor-s peci fic 12-16 config uring accoun ting 12-16, 12-37 authenti cation 12-15, 12-36 author izat ion 12-16, 12-37 c.
Index IN- 26 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 segments 23-2 char act eris tics 23-3 SNMP traps, conf igurin g 23-12 supported i nterfaces 23-2 trigger ing VLAN load bal.
Inde x IN- 27 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 describe d 21-8 restar ting migr ation pr ocess 21-16 topolo gy chan ges 21-12 overvi ew 21-8 port roles describe d 21-8 .
Index IN- 28 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 applyi ng glo bal pa ramet er valu es 16-3 config urati on guideli nes 16-2 default confi guration 16-1 tracing 16-2 SNAP .
Inde x IN- 29 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 source ports 30-5 transmitted tra ffic 30-4 VLAN-based 30-6 spannin g tree and native VLAN s 17-10 Spanning T ree Pro toc.
Index IN- 30 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 switch p riority 20-17 default confi guration 20-11 defau lt option al featur e config urat ion 22-9 designat ed port , de.
Inde x IN- 31 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 switch ed ports 15-2 switch info rmation as signm ent 4-4 swi tchpor t backup inte rface 24-4, 24-10 switchpor t block mu.
Index IN- 32 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 TFTP config urati on files dow nloa ding A-1 1 prep aring the server A-11 uploadin g A-12 config uration fi les in base di.
Inde x IN- 33 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 trunk p orts defined 15-4, 17-3 trunks allowed-V LAN list 17-12, 17-19 load sharing setting STP path costs 17-13 using ST.
Index IN- 34 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 VLAN 1, di sablin g on a trunk port 17-12 VLAN 1 minimiz a tion 17-12 vlan-assignm ent resp onse, VMPS 17-14 VLAN bloc kin.
Inde x IN- 35 Cisco IE 2000 Switch S oftware Configur ation Gui de OL-25866-01 Cisco 7 960 ph one, po rt con necti ons 19-1 config urati on guideli nes 19-3 config uring I P ph ones for data traff ic override CoS of incom ing fr ame 19-4 trust CoS pr iority of i n coming frame 19-4 configurin g ports for voice traffic in 802.
Index IN- 36 Cisco IE 2000 Switch S oftwa re Configura tion Guide OL-25866-01 setting thresholds egress queue -sets 38-31, 38-52 ingress qu eues 38-49 support fo r 1-10, 1-11 X Xmodem prot ocol 46-7.
An important point after buying a device Cisco Systems IE 2000 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Cisco Systems IE 2000 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Cisco Systems IE 2000 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Cisco Systems IE 2000 you will learn all the available features of the product, as well as information on its operation. The information that you get Cisco Systems IE 2000 will certainly help you make a decision on the purchase.
If you already are a holder of Cisco Systems IE 2000, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Cisco Systems IE 2000.
However, one of the most important roles played by the user manual is to help in solving problems with Cisco Systems IE 2000. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Cisco Systems IE 2000 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center