Cisco 4506-E Software Guide

Cisco 4506-E - Catalyst Switch Manual

Cisco 4506-E manual content summary:

  • Cisco 4506-E | Software Guide - Page 1
    4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide Software Release 8.1 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Customer Order Number
  • Cisco 4506-E | Software Guide - Page 2
    of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0304R) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide Copyright © 2000-2003, Cisco Systems, Inc. All rights reserved.
  • Cisco 4506-E | Software Guide - Page 3
    xxviii Cisco.com xxviii Technical Assistance Center xxix Obtaining Additional Publications and Information xxx Product Overview 1-1 Catalyst 4000 Series Switches 1-1 Catalyst 2948G Switch 1-2 Catalyst 2980G Switch 1-3 Supervisor Engine Software 1-3 Using the Command-Line Interface 2-1 Switch CLI
  • Cisco 4506-E | Software Guide - Page 4
    Setting Ethernet and Fast Ethernet Port Debounce Timers 4-6 Configuring errdisable State Ethernet and Fast Ethernet Port Timeout Periods 4-7 Checking Ethernet and Fast Ethernet Port Connectivity 4-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 5
    Bundle 6-9 Displaying EtherChannel Configuration Information 6-10 Displaying EtherChannel Traffic Statistics 6-11 Displaying EtherChannel PAgP Statistics 6-12 EtherChannel Configuration Examples 6-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 6
    7-13 Understanding How MST Works 7-14 Rapid Spanning Tree Protocol 7-16 MST-to-SST Interoperability 7-17 Common Spanning Tree 7-18 MST Instances 7-18 MST Configuration 7-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 vi 78-15486-01
  • Cisco 4506-E | Software Guide - Page 7
    7-54 Configuring Spanning Tree BPDU Skewing 7-57 Configuring Spanning Tree PortFast, BPDU Guard, BPDU Filter, UplinkFast, BackboneFast, and Loop Guard 8-1 Understanding How PortFast Works 8-1 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 vii
  • Cisco 4506-E | Software Guide - Page 8
    VTP Version 1 and Version 2 Configuration 9-5 VTP Version 1 and Version 2 Configuration Guidelines 9-6 Configuring VTP Version 1 and Version 2 9-6 Configuring a VTP Server 9-7 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 viii 78-15486-01
  • Cisco 4506-E | Software Guide - Page 9
    Switch Ports to a VLAN 10-10 Mapping 802.1Q VLANs to ISL VLANs 10-11 Clearing 802.1Q-to-ISL VLAN Mappings 10-12 Deleting a VLAN 10-12 Configuring Auxiliary VLANs 10-13 Understanding Auxiliary VLANs 10-13 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 10
    the VMPS Server 12-7 Configuring VMPS Clients 12-8 Monitoring VMPS 12-9 Maintaining VMPS 12-9 Configuring Static Ports 12-10 Troubleshooting VMPS and Dynamic Port VLAN Membership 12-11 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 x 78-15486
  • Cisco 4506-E | Software Guide - Page 11
    Ingress Port 14-3 Understanding Scheduling 14-3 Software Requirements 14-4 QoS Default Configuration 14-4 Configuring QoS on the Switch 14-4 Enabling QoS Globally 14-5 Configuring the Default CoS Value for the Switch 14-5 Reverting to the Default Switch CoS Value 14-5 Mapping CoS Values to Transmit
  • Cisco 4506-E | Software Guide - Page 12
    GMRP 15-15 Configuring Multicast Router Ports and Group Entries 15-15 Specifying Multicast Router Ports 15-16 Configuring Multicast Groups 15-16 Disabling Multicast Router Ports 15-17 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xii 78
  • Cisco 4506-E | Software Guide - Page 13
    Unicast Flood Blocking 17-3 Displaying Unicast Flood Blocking 17-3 Configuring the IP Permit List 18-1 Understanding How the IP Permit List Works 18-1 IP Permit List Default Configuration 18-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xiii
  • Cisco 4506-E | Software Guide - Page 14
    IP Traceroute 20-12 Configuring CDP 21-1 Understanding How CDP Works 21-1 Default CDP Configuration 21-2 Configuring CDP on the Switch 21-2 Setting the CDP Global Enable State 21-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xiv 78-15486
  • Cisco 4506-E | Software Guide - Page 15
    from the CLI 24-6 SNMPv1 and SNMPv2c Enhancements in Software Release 7.5(1) 24-8 Understanding SNMPv3 24-11 Benefits of SNMPv3 24-11 SNMP Entity 24-11 Configuring SNMPv3 from an NMS 24-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xv
  • Cisco 4506-E | Software Guide - Page 16
    Name and System Prompt 27-1 Configuring the System Name and Prompt 27-2 Setting the System Contact and Location 27-3 Setting the System Clock 27-4 Creating a Login Banner 27-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xvi 78-15486-01
  • Cisco 4506-E | Software Guide - Page 17
    Consumption for Modules 28-9 Migrating a Supervisor Engine II from a Catalyst 4006 Switch to a Catalyst 4500 Series Switch 28-10 Understanding How Inline Power Works 28-11 Inline Power Management Modes 28-12 Power Requirements 28-12 Phone Detection Summary 28-14 Configuring Power Management 28-14
  • Cisco 4506-E | Software Guide - Page 18
    Allocation for a Port 28-19 Displaying the Power Status for Modules and Individual Ports 28-19 Configuring VoIP 29-1 Hardware and Software Requirements 29-1 Overview of IP Phones 29-2 Configuring VoIP on a Switch 29-3 Configuring Switch Access Using AAA 30-1 Understanding How Authentication Works
  • Cisco 4506-E | Software Guide - Page 19
    -to-Host Frame-Retransmission Number 31-14 Setting the Back-End Authenticator-to-Host Frame-Retransmission Number 31-14 Resetting the 802.1x Configuration Parameters to the Default Values 31-15 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xix
  • Cisco 4506-E | Software Guide - Page 20
    How rcp Software Image Downloads Work 33-6 Preparing to Download an Image Using rcp 33-6 Downloading Supervisor Engine Images Using rcp 33-6 Sample rcp Download Procedures 33-7 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xx 78-15486-01
  • Cisco 4506-E | Software Guide - Page 21
    Displaying Switch Acceleration Information 36-3 Backplane Channel Module 36-3 Configuring System Message Logging 37-1 Understanding How System Message Logging Works 37-1 System Log Message Format 37-3 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 22
    39-5 Disabling the Daylight Saving Time Adjustment 39-7 Clearing the Time Zone 39-7 Clearing NTP Servers 39-7 Disabling NTP 39-8 A A P P E N D I X INDEX Acronyms A-1 xxii Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 23
    of the Catalyst enterprise LAN switches. Using the Command-Line Interface Describes how to use the different command-line interfaces (CLIs). Configuring the Switch IP Address and Default Gateway Describes how to perform a baseline configuration of the switch. Configuring Ethernet and Fast
  • Cisco 4506-E | Software Guide - Page 24
    ports on the switch. Configuring GVRP Describes how to configure GARP VLAN Registration Protocol (GVRP) on the switch. Configuring QoS Describes how to configure quality of service (QoS). Configuring Multicast Services Describes how to configure Cisco Group Management Protocol (CGMP), Internet
  • Cisco 4506-E | Software Guide - Page 25
    , and perform other administrative tasks on the switch. Power Management Describes power management on the Catalyst 4000 series switches and the Catalyst 4500 series switches, and explains how to configure inline power. Configuring VoIP Describes how to configure your Voice-over-IP (VoIP)network
  • Cisco 4506-E | Software Guide - Page 26
    the quotation marks. Instructions and screen examples Arguments for which you supply values are in Nonprinting characters, such as passwords are in angle brackets. a line of code indicates a comment line. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 27
    Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Networking Products MarketPlace: http://www.cisco.com/en/US/partner/ordering/index.shtml 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 28
    , troubleshooting tips, and sample configurations from the Cisco TAC website. Cisco.com registered users have complete access to the technical support resources on the Cisco TAC website, including TAC tools and utilities. Cisco.com Cisco.com offers a suite of interactive, networked services that
  • Cisco 4506-E | Software Guide - Page 29
    , partners, and resellers who have a valid Cisco service contract have complete access to the technical support resources on the Cisco TAC website. Some services on the Cisco TAC website require a Cisco.com login ID and password. If you have a valid service contract but do not have a login ID
  • Cisco 4506-E | Software Guide - Page 30
    world-class networking training. Current offerings in network training are listed at this URL: http://www.cisco.com/en/US/learning/le31/learning_recommended_training_list.html Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xxx 78-15486-01
  • Cisco 4506-E | Software Guide - Page 31
    Catalyst 4003 • Modular 3-slot chassis • Optional redundant power supplies Catalyst 4006 • Modular 6-slot chassis • 30-Gbps backplane • Two power supplies with optional third power supply 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 32
    2980G Installation Guide. Table 1-2 describes the Catalyst 2948G switch. Table 1-2 Catalyst 2948G Switch Product Number WS-C2948G Chassis Description Catalyst 2948G • Fixed-configuration switch • 12-Gbps backplane • Optional redundant power supplies • Two 1000BASE-X (GBIC) Gigabit Ethernet ports
  • Cisco 4506-E | Software Guide - Page 33
    WS-C2980G-A Chassis Description Catalyst 2980G • Fixed-configuration switch • 12-Gbps backplane • Optional redundant power supplies • Two 1000BASE-X (GBIC) Gigabit Ethernet ports • 80 10/100BASE-TX Fast Ethernet ports Supervisor Engine Software The supervisor engine software is factory installed
  • Cisco 4506-E | Software Guide - Page 34
    Supervisor Engine Software Chapter 1 Product Overview Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 1-4 78-15486-01
  • Cisco 4506-E | Software Guide - Page 35
    of all switch and ROM monitor commands, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. For descriptions of the commands used to configure the Route Switch Module (RSM) and Route Switch Feature Card (RSFC), refer to the Cisco IOS software command
  • Cisco 4506-E | Software Guide - Page 36
    CLI Chapter 2 Using the Command-Line Interface The Catalyst enterprise LAN switches are multi-module systems. Commands you enter from the CLI might apply to the entire system or to a specific module, port, or VLAN. You configure the switch using set and clear commands. Enter set commands to change
  • Cisco 4506-E | Software Guide - Page 37
    the system configuration. Note For complete information on configuring passwords and controlling access to the switch, see Chapter 30, "Configuring Switch Access Using AAA." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-3
  • Cisco 4506-E | Software Guide - Page 38
    -line prompt. Enter Password: Console> To disconnect from the switch CLI, enter the exit command. Console> exit Session Disconnected... Cisco Systems Console Fri Aug 27 1999, 16:14:41 Enter password: Many commands (for example, commands that modify the configuration
  • Cisco 4506-E | Software Guide - Page 39
    the cursor forward one word. Delete key or Backspace key Erases characters on the command line. 1. The arrow keys function only on ANSI-compatible terminals, such as VT100s. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-5
  • Cisco 4506-E | Software Guide - Page 40
    is used for any output that has more lines than can be displayed on the terminal screen, including show command output. To view the next line or screen, use the following tasks. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-6 78-15486-01
  • Cisco 4506-E | Software Guide - Page 41
    supervisor engine module is module 1, residing in slot 1. To designate a specific module, use the module number. In most systems, the module number and the slot number are the same. The fixed-configuration switches have two logical modules. The Catalyst 4912G, the Catalyst 2948G, and the Catalyst
  • Cisco 4506-E | Software Guide - Page 42
    that define the IP address or IP alias. For information on using IP aliases, see the "Defining and Using IP Aliases" section on page 27-7. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-8 78-15486-01
  • Cisco 4506-E | Software Guide - Page 43
    on the Catalyst 4912G, the Catalyst 2948G, and the Catalyst 2980G switches are similar. WS-X4012 bootrom version 4.5(1), built on 1999.03.29 21:04:04 H/W Revisions: Meteor: 4 Comet: 8 Board: 2 Supervisor MAC addresses: 00:d0:58:70:a1:00 through 00:d0:58:70:a4:ff (1024 addresses) Installed memory: 32
  • Cisco 4506-E | Software Guide - Page 44
    3: WS-X4306 Port status: (. = Pass, F = Fail, ? = no GBIC) 1: . 2: . 3: . 4: ? 5: ? 6: ? Module 3 Passed Exiting Off-line Diagnostics IP address for Catalyst not configured BOOTP/DHCP will commence after the ports are online Ports are coming online ... Cisco Systems, Inc. Console Enter password
  • Cisco 4506-E | Software Guide - Page 45
    (CDP), and VLAN membership. The out-of-band management interfaces (me1 and sl0) are not connected to the switching fabric and do not participate in any of these functions. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-1
  • Cisco 4506-E | Software Guide - Page 46
    determines whether to broadcast DHCP and RARP requests. For more information about the CONFIG_FILE environment variable, see Chapter 32, "Modifying the Switch Boot Configuration." Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-2 78-15486-01
  • Cisco 4506-E | Software Guide - Page 47
    used if user-configured values are present. The switch broadcasts a DHCPDISCOVER message 1 to 10 seconds after all of the switch ports are online. The switch always requests name 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-3
  • Cisco 4506-E | Software Guide - Page 48
    or power cycle a switch with a DHCP management Ethernet interface on the switch. - SLIP (sl0) interface Configure this interface when setting up a point-to-point SLIP connection between a terminal and the switch. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 49
    gateway configuration. Table 3-2 Switch IP Address and Default Gateway Default Configuration Feature In-band (sc0) interface Management Ethernet (me1 set. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-5
  • Cisco 4506-E | Software Guide - Page 50
    the management Ethernet (me1) interface. The me1 interface is present only on the Catalyst 4500 series, Catalyst 2948G, and Catalyst 2980G switches. You 255.224 broadcast 172.20.52.31 Console> (enable) Configuring Default Gateways The supervisor engine sends IP packets that are destined for other IP
  • Cisco 4506-E | Software Guide - Page 51
    in-band (sc0) and management Ethernet (me1) interfaces are configured when you specify default gateways, then the switch software automatically determines through which sc0 sc0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-7
  • Cisco 4506-E | Software Guide - Page 52
    the SLIP interface configuration. Enable SLIP for the console port. Command telnet {host_name | ip_addr} enable set interface sl0 slip_addr dest_addr show interface slip attach Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-8 78-15486
  • Cisco 4506-E | Software Guide - Page 53
    for module 1 (the supervisor engine). This address is displayed under the MAC-Address(es) heading. (With DHCP, this step is necessary only if using the manual allocation method.) show module 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 54
    . To renew or release a DHCP-assigned IP address on the in-band (sc0) management interface, perform one of these tasks in privileged mode: Task Renew the lease on a dhcp release 3-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 55
    Chapter 3 Configuring the Switch IP Address and Default Gateway Renewing and Releasing a DHCP-Assigned IP Address This with address: 00:90:0c:5a:8f:ff Done Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-11
  • Cisco 4506-E | Software Guide - Page 56
    Renewing and Releasing a DHCP-Assigned IP Address Chapter 3 Configuring the Switch IP Address and Default Gateway 3-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 57
    and Fast Ethernet switch ports on switching modules and fixed-configuration switches, as well as to supervisor engine Fast Ethernet uplink ports. Note For complete information on installing Catalyst 4500 series Fast Ethernet modules, refer to the Catalyst 4500 Series Installation Guide. Note For
  • Cisco 4506-E | Software Guide - Page 58
    Default Ethernet and Fast Ethernet Configurations Chapter 4 Configuring Ethernet and Fast Ethernet Switching The Catalyst enterprise LAN switches solve congestion problems that are caused by high-bandwidth devices and a large number of users by assigning each device (for example, a server) to its
  • Cisco 4506-E | Software Guide - Page 59
    (auto mode) Configuring Ethernet and Fast Ethernet Ports These sections describe how to configure Ethernet and Fast Ethernet switching ports on the Catalyst enterprise LAN switches: • Setting Ethernet and Fast Ethernet Port Names, page 4-3 • Setting Ethernet and Fast Ethernet Port Priority Levels
  • Cisco 4506-E | Software Guide - Page 60
    Fast Ethernet Port Speeds You can configure the port speed on 10/100-Mbps Fast Ethernet modules. Use the auto keyword to have the port autonegotiate speed and duplex mode with the neighboring port. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 61
    Console> (enable) Setting Ethernet and Fast Ethernet Port Duplex Modes You can set the port duplex mode to full or half duplex for Ethernet and Fast Ethernet ports. Note If ) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-5
  • Cisco 4506-E | Software Guide - Page 62
    | mod_num/port_num] This example shows how to enable the debounce timer for module 2 on port 1: Console> (enable) set port debounce 2/1 enable Debounce caution. Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-6 78-15486
  • Cisco 4506-E | Software Guide - Page 63
    is maintained for all the ports. At every t seconds, where t is the user-configurable timeout, a process checks to see if any ports are in errdisable state. If so Console>(enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-7
  • Cisco 4506-E | Software Guide - Page 64
    the ping and traceroute commands to test connectivity out Ethernet or Fast Ethernet ports. To check connectivity out a port, perform .com (10.1.2.3) 3 ms * 2 ms Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-8 78-15486-01
  • Cisco 4506-E | Software Guide - Page 65
    Gigabit Ethernet Switching This chapter describes how to configure Gigabit Ethernet switching on the Catalyst enterprise LAN switches. The configuration procedures in this chapter apply to Gigabit Ethernet switching modules, fixed-configuration switches, and uplink ports on the supervisor engine
  • Cisco 4506-E | Software Guide - Page 66
    5 Configuring Gigabit Ethernet Switching Table 5-1 Send Capability by Switch Type, Module, and Ports Switch Type Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 4000
  • Cisco 4506-E | Software Guide - Page 67
    . The following modules are supported: • WS-X4412-2GB-T This 1000BASE-T 14-port module provides 2 dedicated uplink module ports (GBIC) and 12 oversubscribed ports (possible blocking). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 68
    ports are grouped for module WS-X4424-GB-RJ45. Table 5-7 Oversubscribed Port Groupings for Module WS-X4424-GB-RJ45 1, 2, 3, 4 5, 6, 7, 8 9, 10, 11, 12 13, 14, 15, 16 17, 18, 19, 20 21, 22, 23, 24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 69
    an example of an 18-port server switching module (WS-X4418-GB) connecting multiple network servers and high-end workstations to the Gigabit Ethernet network backbone. These configurations are shown: • Server A, equipped with channel- and trunk-capable network interface cards (NICs), connects to the
  • Cisco 4506-E | Software Guide - Page 70
    Enabled Spanning Tree Protocol Enabled for VLAN 1 Native VLAN VLAN 1 Spanning tree port cost 4 Gigabit EtherChannel Disabled on all Gigabit Ethernet ports (auto mode) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-6 78-15486-01
  • Cisco 4506-E | Software Guide - Page 71
    Ethernet switching ports on the Catalyst enterprise LAN switches. Note For information on configuring Gigabit EtherChannel, see Chapter 6, "Configuring Fast EtherChannel and Gigabit EtherChannel." Assigning Gigabit Ethernet Port Names You can assign names to the ports on Gigabit Ethernet modules
  • Cisco 4506-E | Software Guide - Page 72
    enable) Configuring Flow Control on Gigabit Ethernet Ports To configure flow control on a Gigabit Ethernet port, administration status set to on (port will require far end to send flowcontrol) Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 73
    Gigabit Ethernet Port Timeout Periods For information on configuring a timeout period for ports in errdisable state, see Chapter 4, "Configuring Ethernet and Fast Ethernet Switching." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 74
    Configuring Gigabit Ethernet Ports Chapter 5 Configuring Gigabit Ethernet Switching Checking Gigabit Ethernet Port somehost.company.com (10.1.2.3) 3 ms * 2 ms Console> (enable) 5-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 75
    on switching modules and fixed-configuration switches, as well as to supervisor engine Fast Ethernet and Gigabit Ethernet uplink ports. Note For complete information on installing Catalyst 4500 series Fast Ethernet and Gigabit Ethernet modules, refer to the Catalyst 4500 Series Installation Guide
  • Cisco 4506-E | Software Guide - Page 76
    your hardware, you can form an EtherChannel with up to eight compatibly configured Fast or Gigabit Ethernet ports on the switch. In addition, on the Catalyst 4500 series switches, you can configure an EtherChannel using ports from multiple modules. All ports in an EtherChannel must be the same speed
  • Cisco 4506-E | Software Guide - Page 77
    two protocols on a module. • PAgP and LACP are not compatible; both ends of a channel must use the same protocol. Note Switches can be configured manually, with PAgP on to see if the link is up or down. • LACP does not support half-duplex links. If a port is in active/passive mode and becomes
  • Cisco 4506-E | Software Guide - Page 78
    of service (QoS) configurations. is set differently on the ports. • Cisco Discovery Protocol (CDP) runs on the supervisor engine, all channeling ports are cleared on its channeling configuration Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1
  • Cisco 4506-E | Software Guide - Page 79
    are blocked from returning on any other port of the channel. There are four user-configurable channel modes: on, off, auto, and desirable. PAgP packets are exchanged only so on. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-5
  • Cisco 4506-E | Software Guide - Page 80
    EtherChannel PAgP Statistics, page 6-12 Note Before you configure the EtherChannel, see the "EtherChannel Configuration Guidelines and Restrictions" section on page 6-3. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-6 78-15486-01
  • Cisco 4506-E | Software Guide - Page 81
    modes. To create an EtherChannel port bundle, perform this task in privileged mode: Step 1 Step 2 Step 3 Task If you are unsure which ports you can configure as an EtherChannel, verify the EtherChannel capabilities for the module or switch you are configuring. Create an EtherChannel with the
  • Cisco 4506-E | Software Guide - Page 82
    1/1 notconnect on 768 20 1/2 connected on 768 Admin Port Device-ID Port-ID Platform group 20 1/1 20 1/2 066510644(cat26-lnf(NET25)) 2/1 WS-C6009 Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-8 78-15486-01
  • Cisco 4506-E | Software Guide - Page 83
    default configuration (you set port channel port_list mode auto must perform this task on both sides of the channel). Verify the configuration. show port channel [mod_num[/port_num]] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 84
    (5500) 3/6 WS-C4000 Port Trunk-status Trunk-type Trunk-vlans 3/5 not-trunking negotiate 1-1005 3/6 not-trunking negotiate 1-1005 Port Portvlancost-vlans 3/5 3/6 6-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 85
    3/5 disabled normal normal 3/6 disabled normal normal Port Qos-Tx Qos-Rx Qos-Trust Qos-DefCos 3/5 - - untrusted 0 3/6 - - Lrn-Discrd In-Lost Out-Lost 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-11
  • Cisco 4506-E | Software Guide - Page 86
    This example shows how to configure a four-port Fast EtherChannel link between two switches. Figure 6-1 shows two switches connected through four 100BASE-TX Fast Ethernet ports. 6-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 87
    EtherChannel bundle. Switch_A> (enable) set port channel 1/1-4 desirable Port(s) 1/1-4 channel mode set to desirable. Switch_A> (enable) %PAGP-5-PORTFROMSTP:Port 1/1 left bridge port 1/1 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 88
    example shows how to configure a two-port Gigabit EtherChannel link between two switches. Figure 6-2 shows two switches connected through four 1000BASE-SX Gigabit Ethernet ports. 6-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 89
    configure EtherChannel as on for all ports. If you configure ports on, you must configure the ports on both ends of the EtherChannel bundle on. The switches will not negotiate an EtherChannel port bundle 01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-
  • Cisco 4506-E | Software Guide - Page 90
    exists only when a port group in on mode is connected to another port group in on mode. Mode that prevents the port from channeling. 6-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 91
    a manually configured channel using the on mode. An administrative key is meaningful only in the context of the switch that allocates it; there is no global significance to administrative key values. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration
  • Cisco 4506-E | Software Guide - Page 92
    2,3 Mod 2 is set to LACP protocol. Mod 3 is set to LACP protocol. Console> (enable) Use the show channelprotocol command to display the protocols for all modules. 6-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 93
    assigned a unique administrative key. Across the module, ports must have unique administrative keys. After NVRAM is cleared, the channel mode of the ports is set to "passive." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-19
  • Cisco 4506-E | Software Guide - Page 94
    key value to another automatically assigned value, and it assigns the modules and ports you specified in the command to the administrative key value on | off | active | passive] 6-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 95
    can specify the channel path cost by using a global command that configures both LACP and PAgP. For more information, see the "Setting the 50.50% 0.00% 0.00% Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-21
  • Cisco 4506-E | Software Guide - Page 96
    connected 4 32 disabled 0 Console> Console> show spantree 4/7-8 Port Vlan Port-State Cost Priority Portfast Channel_id 4/7-8 1 blocking 3 32 disabled 770 Console> 6-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 97
    For complete syntax and usage information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-1
  • Cisco 4506-E | Software Guide - Page 98
    by placing redundant switch ports in a backup state; all paths that are not needed to reach the root switch from anywhere in the switched network are placed in STP-blocked mode. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-2 78-15486
  • Cisco 4506-E | Software Guide - Page 99
    switch. However, due to traffic patterns, number of forwarding ports, or line types, Switch A might not be the ideal root switch. You can force a switch to become the root switch . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-3
  • Cisco 4506-E | Software Guide - Page 100
    been specifically configured for port cost. Table 7-1 shows the default port cost values that are assigned by the switch for each type of port when you use the short method to calculate the port cost. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 101
    the port bandwidth. You can also manually assign port costs between 1-200,000,000 an aggregate link (port bundle), the bandwidth of the switch using STP is in one of these states: • Blocking 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 102
    location information for the forwarding database • The expiration of a protocol timer moves the port to the forwarding state, where both learning and forwarding are enabled Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-6 78-15486-01
  • Cisco 4506-E | Software Guide - Page 103
    them to the system module • Does not transmit BPDUs received from the system module • Receives and responds to network management messages Listening State The listening state. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-7
  • Cisco 4506-E | Software Guide - Page 104
    them to the system module • Processes BPDUs received from the system module • Receives and responds to network management messages Learning State A port the learning state. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-8 78-15486-01
  • Cisco 4506-E | Software Guide - Page 105
    to network management messages Forwarding State A port in the forwarding state forwards frames, as shown in Figure 7-6. The port enters the forwarding state from the learning state. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 106
    that forward messages. For more information on PortFast, see Chapter 8, "Configuring Spanning Tree PortFast, BPDU Guard, BPDU Filter, UplinkFast, BackboneFast, and Loop Guard." 7-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 107
    Network management and data frames Filtering database System module Frame forwarding Data frames Port 2 Network management frames MISTP) • MISTP-PVST+ (combination mode) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-11
  • Cisco 4506-E | Software Guide - Page 108
    recovery of connectivity following the failure of a bridge, bridge port, or LAN. MISTP Mode MISTP is an optional STP that runs on Catalyst 4500 series switches time is required.) 7-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 109
    a single MAC address that identifies the switch. For detailed information on the MAC address reduction feature, refer to the Catalyst 6500 Series Software Configuration Guide. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-13
  • Cisco 4506-E | Software Guide - Page 110
    and you use the same configuration in the new Catalyst 4500 series switch, then the switch remains the root switch and the spanning tree topology does not change. For more information on migrating your supervisor engine from a Catalyst 4006 switch to a Catalyst 4500 series switch, see the "Migrating
  • Cisco 4506-E | Software Guide - Page 111
    interoperability with PVST+ by generating PVST+ BPDUs for the non-CST VLANs. • MST supports some of the PVST+ extensions in MSTP as follows: - UplinkFast and BackboneFast are not -15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-15
  • Cisco 4506-E | Software Guide - Page 112
    designated port role includes the port in the active topology. • An alternate port or backup port role excludes the port from the active topology. 7-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 113
    r B F B B B F r SST Region b r r F F/f = Forwarding B/b = Blocking R = Root Bridge r = Root port F F F FR F F MST Region FF F r F r r b SST Region B 68285 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-17
  • Cisco 4506-E | Software Guide - Page 114
    a change is made to the configuration. Note You must set and update the revision number manually, because it does not auto-increment each time you commit the MST configuration. 7-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 115
    set to zero. You must configure each byte manually. You can use SNMP or the CLI to perform the configuration. MST BPDUs contain the MST configuration ID and the checksum. An . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-19
  • Cisco 4506-E | Software Guide - Page 116
    , cabling in most networks meets this requirement, and you can avoid explicit configuration by treating all full-duplex links as point-to-point links. Enter the set spantree mst link-type command to configure point-to-point links. 7-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches
  • Cisco 4506-E | Software Guide - Page 117
    or some of the VLANs on its designated ports, root guard sets the port to the blocking state. Do not designate switches with a slower CPU running PVST+ as a switch running MST. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-21
  • Cisco 4506-E | Software Guide - Page 118
    every 60 seconds Using PVST+ PVST+ is the default spanning tree mode for Catalyst 4500 series switches. The following sections describe how to configure PVST+ on Ethernet VLANs. 7-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 119
    Ethernet: 4 • Fast Ethernet: 10 • FDDI/CDDI: 10 • Ethernet: 100 Short (802.1D) Same as port priority but configurable on a per-VLAN basis in PVST+ Same as port cost but configurable -15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-23
  • Cisco 4506-E | Software Guide - Page 120
    Channel_id 1/1 1 not-connected 4 32 disabled 0 1/2 1 not-connected 4 32 disabled 0 2/1 1 not-connected 100 32 disabled 0 2/2 1 not-connected 100 32 disabled 0 7-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 121
    how to configure the port priority for a port: Console> (enable) set spantree portpri 2/3 16 Bridge port 2/3 port priority set to 16. Console> (enable) show spantree 2/3 VLAN 1 . . . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 122
    cost is incremented by 10,000,000. - EtherChannel computes the cost of a bundle using the formula, AVERAGE_COST/NUM_PORT. The default port cost mode in PVST+ is short 1- 65535. 7-26 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 123
    the switch is in PVST+ mode, you can set the port priority for a trunking port in a VLAN. The port with the lowest priority value for a specific VLAN forwards cost 20000 1-5,12 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-27
  • Cisco 4506-E | Software Guide - Page 124
    misconfigurations and cabling errors. Do configuration. Command set spantree mode rapid-pvst+ set spantree link-type mod/port point-to-point clear spantree detected-protocols mod/port show spantree vlan 7-28 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 125
    ) This example show how to verify the Rapid PVST+ configuration for VLAN 1. Notice that the first line in the output displays the spanning tree mode: Console> show Console> 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-29
  • Cisco 4506-E | Software Guide - Page 126
    Ethernet: 10 • FDDI/CDDI: 10 • Ethernet: 100 Short (802.1D) Same as port priority but configurable on a per-VLAN basis in PVST+ Same as port cost but configurable on a per-VLAN basis in PVST+ 20 sec 7-30 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 127
    your network. Caution If you have more than 4500 VLAN ports that are configured on your switch, your network could crash if you change from MISTP to either PVST+ or [config] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-31
  • Cisco 4506-E | Software Guide - Page 128
    Priority Designated Root Cost Designated Root Port VLANs mapped: 00-05-31-40-64-00 32769 (root priority:32768, sys ID ext:1) 20000 1/1 1,74 7-32 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 129
    Root Max Age 20 sec Hello Time 2 sec Forward Delay 15 sec Bridge ID MAC ADDR 00-d0-02-27-9c-00 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-33
  • Cisco 4506-E | Software Guide - Page 130
    sec Bridge ID MAC ADDR Bridge ID Priority VLANs mapped: 00-d0-02-27-9c-00 32769 (bridge priority:32768, sys ID ext:1) 1,74 7-34 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 131
    priority value for a specific MISTP instance forwards frames Configure the port instance priority on an MISTP instance. Command set spantree portinstancepri {mod/port} priority [instances] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 132
    map at least one VLAN to an MISTP instance in order for MISTP-PVST+ or MISTP to be active. Note See Chapter 10, "Configuring VLANs" for details on using and configuring VLANs. 7-36 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 133
    is in conflict. To clear up the conflict, you must manually remove the incorrect mapping(s) from the root switch. The remaining entry on the list becomes the official mapping. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-37
  • Cisco 4506-E | Software Guide - Page 134
    64-00 inactive 19 Console> (enable) This example is from the switch in conflict (note that the switch is inactive): Console> (enable) show spantree conflicts 6 Inst MAC ) 7-38 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 135
    the set spantree root command to lower the bridge priority (the value that is associated with the switch) below the default (32,768); the switch can then become the root switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-39
  • Cisco 4506-E | Software Guide - Page 136
    become the root switch if the primary root switch fails. You can run this command on more than one switch to create multiple backup switches in case the primary root switch fails. 7-40 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 137
    occurs in a bridged network, network reconfiguration is not immediate. Reconfiguration requires 50 seconds, with the default parameters (specified by IEEE 802.1D) of end stations. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-
  • Cisco 4506-E | Software Guide - Page 138
    delay set to 21 seconds. Console> (enable) Console> (enable) set spantree maxage 6 100 Spantree 100 max aging time set to 36 seconds. Console> (enable) 7-42 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 139
    example shows how to clear spanning tree BPDU statistics: Console> (enable) clear spantree statistics bpdu Spanning tree BPDU statistics cleared on the switch. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-43
  • Cisco 4506-E | Software Guide - Page 140
    the spantree Hello time for an instance to 3 seconds: Console> (enable) set spantree hello 3 mistp-instance 1 Spantree 1 hello time set to 3 seconds. Console> (enable) 7-44 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 141
    instance 1 Instance 1 forward delay set to 16 seconds. Console> (enable) Configuring the Maximum Aging Time Enter the set spantree maxage command to change the > (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-45
  • Cisco 4506-E | Software Guide - Page 142
    MST configuration. show spantree mst config Verify your MST instance configuration. show spantree mst instance Verify your MST module and port configuration. show > (enable) 7-46 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-
  • Cisco 4506-E | Software Guide - Page 143
    10 - 11 - 12 - 13 - 14 - 15 - NEW MST Region Configuration (Not committed yet) Configuration Name:cisco Revision:1 Instance VLANs IST 1-4094 1 - 2 - 3 - 4 - 5 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-47
  • Cisco 4506-E | Software Guide - Page 144
    ) MST Region Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 2-20 2 21-30 3 31-40 4 41-50 5 - 6 - 7 - 8 - 9 - 10 - 11 - 7-48 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 145
    ext: Port State Role Cost Prio Type 6/1 forwarding BDRY 20000 32 P2P, Boundary(PVST) 6/2 blocking BDRY 20000 32 P2P, Boundary(PVST) Console> (enable) Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-49
  • Cisco 4506-E | Software Guide - Page 146
    shows how to configure the bridge ID priority for an MST instance: Console> (enable) set spantree priority 8192 mst 3 MST Spantree 3 bridge priority set to 8192. Console> (enable) 7-50 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 147
    32 2-20 2 forwarding BDRY 10000 32 21-30 3 forwarding BDRY 10000 32 31-40 4 forwarding BDRY 10000 32 41-50 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-51
  • Cisco 4506-E | Software Guide - Page 148
    (enable) set spantree portinstancecost 6/1 cost 5000 mst 4 Port 6/1 MST Instances 0-3,5-15 have path cost 10000. Port 6/1 MST Instances 4 have path cost 5000. Console> (enable) 7-52 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 149
    priority for an instance of MST. The port with the lowest priority for a specific MST instance forwards frames for that instance. The port instance range is from Root Port 1/0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-53
  • Cisco 4506-E | Software Guide - Page 150
    You can only map Ethernet VLANs to MST Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 2-20 2 21-30 3 31-40 4 41-50 5 - 6 - 7 - 8 - 9 - 7-54 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 151
    . Console> (enable) show spantree mst config Current (NVRAM) MST Region Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 2-20 2 21-30 3 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-55
  • Cisco 4506-E | Software Guide - Page 152
    ) MST Region Configuration: Configuration Name:cisco Revision:2 Instance VLANs IST 1,51-998,1000-4094 1 2-20 2 21-30 3 31-40 4 41-50 5 - 6 - 7 - 8 - 9 - 10 - 11 - 7-56 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 153
    Verify the configuration. Command set spantree bpdu-skewing [enable | disable] show spantree bpdu-skewing vlan [mod/port] show spantree bpdu-skewing mistp-instance [instance] [mod/port] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 154
    2000, 06:26:05 Console> (enable) This example shows how to configure BPDU skewing for VLAN 1 on module 8, port 4 and view the skewing statistics: Console> (enable) show 2 0 12 7-58 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-
  • Cisco 4506-E | Software Guide - Page 155
    Chapter 7 Configuring Spanning Tree Configuring Spanning Tree BPDU Skewing Blocking Listening Learning Forwarding STP Active Total 6 4 2 0 12 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-59
  • Cisco 4506-E | Software Guide - Page 156
    Configuring Spanning Tree BPDU Skewing Chapter 7 Configuring Spanning Tree 7-60 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 157
    8-18 Understanding How PortFast Works PortFast causes a switch or trunk port to enter the spanning tree forwarding state immediately, bypassing the listening and learning states. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-1
  • Cisco 4506-E | Software Guide - Page 158
    ports regardless of whether PortFast is enabled. BDPU filtering is on a per-switch basis; after you enable BPDU filtering, it applies to all PortFast-enabled ports on the switch. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-2 78-15486-01
  • Cisco 4506-E | Software Guide - Page 159
    forwarding at any given time. Specifically, an uplink group consists of Switch A (Root) Switch B L1 L2 Link failure Switch C L3 UplinkFast transitions port directly to forwarding state 11242 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 160
    A, the root switch, connects directly to Switch B over link L1 and to Switch C over link L2. The port on Switch C that connects directly to Switch B over link L3 is in the blocking state. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-4 78
  • Cisco 4506-E | Software Guide - Page 161
    that it is the root switch. However, the other switches ignore these inferior BPDUs and the new switch learns that Switch B is the designated bridge to Switch A, the root switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-5
  • Cisco 4506-E | Software Guide - Page 162
    becomes unidirectional, loop guard blocks the entire channel until the affected port is removed from the channel. Figure 8-6 shows loop guard in a triangle switch configuration. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-6 78-15486-01
  • Cisco 4506-E | Software Guide - Page 163
    and PortFast cannot be configured on the same port. Assigning dynamic VLAN membership for the port requires that the port is PortFast enabled. Do not configure a loop guard-enabled ports and Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-7
  • Cisco 4506-E | Software Guide - Page 164
    workstation, switch, or server. Verify the PortFast setting on a switch port. Command set spantree portfast mod_num/port_num enable | disable show spantree [mod_num/port_num] [vlan] Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-8 78
  • Cisco 4506-E | Software Guide - Page 165
    on port 1 of module 4 of a trunk port, bring the trunk port to a forwarding state, and verify the configuration (the PortFast status is 0 4/1 1003 not-connected 4 32 enabled 0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-9
  • Cisco 4506-E | Software Guide - Page 166
    /port_num This example shows how to disable PortFast on port 1 of module 4: Console> (enable) set spantree portfast 4/1 default Spantree port is disabled. Console> (enable) 8-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 167
    how to reset PortFast to its default settings on port 1 of module 4: Console> (enable) set spantree portfast 4/1 default Spantree port 4/1 Chapter 7, "Configuring Spanning Tree." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-
  • Cisco 4506-E | Software Guide - Page 168
    Loop This example shows how to enable PortFast BPDU guard on module 6 port 1, and verify the configuration in the Per VLAN Spanning Tree + (PVST+) mode: 4 2 0 0 0 4 4 8-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 169
    bpdu-filter enabled for bridge. Uplinkfast disabled for bridge. Backbonefast disabled for bridge. Vlan Blocking Listening Learning Forwarding STP Active 1 0 0 0 4 4 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-13
  • Cisco 4506-E | Software Guide - Page 170
    0 4 4 . . . 999 0 0 0 4 4 1003 0 0 0 0 0 1005 0 0 0 0 0 Blocking Listening Learning Forwarding STP Active Total 0 0 0 85 85 Console> (enable) 8-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 171
    keywords. Note When you enable UplinkFast, it affects all VLANs on the switch. You cannot configure UplinkFast on a per-VLAN basis. To enable UplinkFast, perform this list 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-15
  • Cisco 4506-E | Software Guide - Page 172
    on the switch without affecting the bridge priority, port cost, and port-VLAN cost values. set spantree uplinkfast disable Verify that UplinkFast is enabled. show spantree uplinkfast 8-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 173
    switches in the network. BackboneFast is not supported on Token Ring VLANs. This feature is supported for use with third-party switches. To enable BackboneFast on the switch, 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-17
  • Cisco 4506-E | Software Guide - Page 174
    command to enable the spanning tree loop guard feature on a per-port basis. To set all the ports on the switch, use the set spantree mst global-defaults loop-guard command. 8-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 175
    disable loop guard on all the ports on a switch: Console> (enable) set spantree mst global-defaults loop-guard disable Spantree global loop-guard state disabled on this switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-19
  • Cisco 4506-E | Software Guide - Page 176
    Configuring Loop Guard Chapter 8 Configuring Spanning Tree PortFast, BPDU Guard, BPDU Filter, UplinkFast, BackboneFast, and Loop 8-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 177
    VLAN names, incorrect VLAN-type specifications, and security violations. You can use VTP to manage VLANs 1-1005 in your network. (VTP version 1 and VTP version 2 do not support VLANs 1025-4094.) With VTP, you can make configuration changes centrally on one switch and have those changes automatically
  • Cisco 4506-E | Software Guide - Page 178
    share the same VTP domain name. A switch can be configured to be in one and only one VTP domain. You make global VLAN configuration changes for the domain using either the command-line interface (CLI) or Simple Network Management Protocol (SNMP). By default, the switch is in VTP server mode and is
  • Cisco 4506-E | Software Guide - Page 179
    switch inspects VTP messages for the domain name and version and forwards a message only if the version and domain name match. Since only one domain is supported in the supervisor 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-3
  • Cisco 4506-E | Software Guide - Page 180
    traffic from Switch 1 is not forwarded to Switches 3, 5, and 6 because traffic for the Red VLAN has been pruned on the links indicated (port 5 on Switch 2 and port 4 on Switch 4). Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-4 78
  • Cisco 4506-E | Software Guide - Page 181
    Default Configuration Feature VTP domain name VTP mode VTP version 2 enable state VTP password VTP pruning Default Value Null Server Version 1 is enabled (version 2 is disabled) None Disabled 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 182
    same VTP version. • You must configure a password on each switch in the management domain when in secure mode. Caution If you configure VTP in secure mode, the management domain will not function properly if you do not assign a management domain password to each switch in the domain. • A VTP version
  • Cisco 4506-E | Software Guide - Page 183
    Step 2 Step 3 Task Define the VTP domain name. Place the switch in VTP client mode. Verify the VTP configuration. Command set vtp domain name set vtp mode client show vtp domain 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-7
  • Cisco 4506-E | Software Guide - Page 184
    Notifications: disabled Password : configured (hidden) Updater ID: 172.20.52.19 Feature Mode Revision VLAN Transparent 0 Pruning : disabled VLANs prune eligible: 2-1000 Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 185
    ) Domain Name : Lab_Network Notifications: disabled Password : configured (hidden) Updater ID: 172.20.52 switch. Verify that VTP version 2 is enabled. Command set vtp version 2 show vtp domain 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 186
    Password : configured (hidden) Notifications: disabled Updater ID: 172.20.52.19 Feature Mode Revision VLAN Off 0 Pruning : disabled VLANs prune eligible: 2-1000 Console> (enable) 9-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 187
    on the port Port Mode Encapsulation Status 16/1 nonegotiate isl trunking Native vlan ----------1 Port Vlans allowed on trunk 16/1 1-1005,1025-4094 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-11
  • Cisco 4506-E | Software Guide - Page 188
    mode: Step 1 Step 2 Task Command Disable VTP pruning in the management domain. set vtp pruning disable Verify that VTP pruning is disabled. show Console> (enable) 9-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 189
    server and configure the domain with no restriction. - The password appears in the configuration. This is equivalent to the existing VTP version 1 and VTP version 2 levels of security. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 190
    client, and transparent modes are specific to a VTP instance. For example, it is possible for a switch to be a primary server for one instance and a client for another instance. 9-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 191
    do not exchange database information even though they are part of the same domain. If server X changes the VTP configuration, only the left partition of the network accepts it. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-15
  • Cisco 4506-E | Software Guide - Page 192
    determine which primary server has the final, desired configuration. Figure 9-5 shows a VTP domain that has been divided into four partitions for one specific VTP instance. 9-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 193
    ). In both cases, you can correct the problem by issuing additional takeover messages. For more information on takeovers, see the "Configuring a VTP Version 3 Takeover" section on page 9-28. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-17
  • Cisco 4506-E | Software Guide - Page 194
    . • If they have a password configured (whether hidden or not hidden configuration that is propagated over the network. • Similar to a client, a VTP secondary server cannot modify the VTP configuration. 9-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 195
    active and redundant supervisor engines. • A takeover from another server. • A change in the mode configuration. • Any VTP domain configuration change (such as version, domain name, or domain password). Transparent and VTP Off Modes In VTP version 3, the transparent mode is specific to the instance
  • Cisco 4506-E | Software Guide - Page 196
    of the current configuration known to the device, the device's configuration is unaffected, but the device indicates to the database manager that a configuration error condition has occurred. 9-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 197
    that you set all switches in the VTP version 1 and VTP version 2 region to client and reset their revision number (do a reload or change the domain name back and forth). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-21
  • Cisco 4506-E | Software Guide - Page 198
    3 Modes, page 9-23 • Configuring VTP Version 3 Passwords, page 9-27 • Configuring a VTP Version 3 Takeover, page switch. Verify that VTP version 3 is enabled. Command set vtp version 3 show vtp domain 9-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 199
    Domain Name : ENG Password : not configured Notifications: disabled Switch ID : 00d0.004c. supported database propagation is for the VLAN database; therefore, there are no "unknown" databases. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 200
    : ENG Notifications: disabled Password : not configured Switch ID : 00d0.004c. switch in VTP client mode. Verify the VTP configuration. Command set vtp domain name set vtp mode client show vtp domain 9-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 201
    running VTP3 Domain Name : server Notifications: disabled Password : not configured Switch ID : 00d0.004c.1800 Feature Mode Revision Primary configuration as using the vlan keyword. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-
  • Cisco 4506-E | Software Guide - Page 202
    Password : not configured Switch ID : 00d0.004c.1800 Feature Mode Revision Primary ID Primary Description VLAN Off UNKNOWN Off Pruning : disabled VLANs prune eligible: 2-1000 Console> (enable) 9-26 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration
  • Cisco 4506-E | Software Guide - Page 203
    a way of hiding the VTP password from the configuration. This is achieved by adding the hidden keyword to the password configuration. When you use the hidden Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-27
  • Cisco 4506-E | Software Guide - Page 204
    password configured and verify the configuration: Console> (enable) set vtp primary This switch is becoming primary server for feature vlan. Enter VTP password: No conflicting VTP 3 devices found. 9-28 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 205
    . Switches in transparent or off mode are not part of the VTP domain and do not respond to requests. In addition, clients or servers that do not have a valid database do not respond to requests. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 206
    Configuring VTP Version 3 Chapter 9 Configuring VTP 9-30 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 207
    complete information on VMPS, see Chapter 12, "Configuring Dynamic VLAN Membership with VMPS." Figure 10-1 shows an example of VLANs segmented into logically defined networks. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-1
  • Cisco 4506-E | Software Guide - Page 208
    10 Configuring VLANs Figure 10-1 VLANs as Logically Defined Networks Cisco router Catalyst 4000 Engineering VLAN Marketing VLAN Fast Ethernet Catalyst 4000 Catalyst 4000 Accounting VLAN Floor 3 Floor 2 43990 Floor 1 VLANs are often associated with IP subnetworks. For example, all the end
  • Cisco 4506-E | Software Guide - Page 209
    You can configure these VLANs as normal-range VLANs by setting the VLAN type to Ethernet using the set vlan type ethernet vlan_name command. 2. With VTP version 3, extended-range VLANs are propagated. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 210
    1005 only); requires a different VLAN number for each media type • Remote Switched Port Analyzer (RSPAN) Note Ethernet VLANs 1 and 1025-4094 can use the defaults only. VLAN Default Configuration Table 10-2 shows the default VLAN configuration. Table 10-2 VLAN Default Configuration Feature Native
  • Cisco 4506-E | Software Guide - Page 211
    -to-isl mappings. • You can configure private VLAN parameters and RSPAN for extended-range VLANs; however, all other parameters for extended-range VLANs use the system defaults only. Note The Catalyst 4500 series switch 10/100 Ethernet switching modules support auxiliary VLANs in software release
  • Cisco 4506-E | Software Guide - Page 212
    name] [said said] [mtu mtu] [translation vlan_num] show vlan [vlan_num] Note The default VLAN type is Ethernet; if you do not specify the type, the VLAN is an Ethernet VLAN. 10-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 213
    Step 2 Task Command Create a normal-range Ethernet VLAN. set vlan vlan [name name] [said said] [mtu mtu] [translation vlan] Verify the VLAN configuration. show vlan [vlan] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-7
  • Cisco 4506-E | Software Guide - Page 214
    of an Ethernet VLAN and verify the configuration: Console> (enable) set vlan 500 state suspend Vlan 500 configuration successful Console> Backup CRF Console> (enable) 10-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 215
    extended-range VLAN. Verify the VLAN configuration. Command set vlan vlan [name name] [state {active | suspend}] [said said] [mtu mtu] [translation vlan] show vlan [vlan] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-9
  • Cisco 4506-E | Software Guide - Page 216
    (enable) Assigning Switch Ports to a VLAN A VLAN that is created in a management domain remains unused until you assign one or more switch ports to the STEHops Backup CRF 10-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 217
    Your network might have non-Cisco devices that are connected to the Catalyst 6500 series switches through 802.1Q trunks or traffic from a non-Cisco switch that has VLANs in the Catalyst 6500 series reserved range, 1002-1024. The valid range of user-configured Inter-Switch Link (ISL) VLANs is 1-1000
  • Cisco 4506-E | Software Guide - Page 218
    . When you delete a VLAN in VTP transparent mode, the VLAN is deleted only on the current switch. When you are on a VTP client, you can only delete a VLAN on the local switch. 10-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 219
    interface that carries the phone traffic. • Port 3 connects to a PC or other device. Figure 10-2 shows how you can connect a Cisco IP Phone to a Catalyst 4500 series switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-13
  • Cisco 4506-E | Software Guide - Page 220
    VLANs Chapter 10 Configuring VLANs Figure 10-2 Switch-to-Phone Connections Cisco IP Phone 7960 Catalyst switch 10/100 module Phone ASIC P2 P1 3-port P3 switch Access port Workstation/PC 38204 When the IP phone connects to a 10/100 port on the Catalyst 4500 series switch, the access port
  • Cisco 4506-E | Software Guide - Page 221
    Cisco IP Phone always sets Layer 3 IP precedence to 5 in voice traffic. Auxiliary VLAN Configuration Guidelines This section describes the guidelines for configuring > (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-15
  • Cisco 4506-E | Software Guide - Page 222
    set of supporting VLANs that are used to create the private VLAN structure. You can configure private VLANs and normal VLANs from the same Catalyst 4500 series switch. The . 10-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 223
    , isolated, and any community VLANs to other switches that support private VLANs. In an Ethernet-switched environment, you can assign an individual VLAN and associated IP subnet to each individual or common group of stations. The servers only require the ability to communicate with a default gateway
  • Cisco 4506-E | Software Guide - Page 224
    spanning tree topologies match. You should manually double-check the STP configuration to ensure that the primary, isolated, and community VLANs spanning tree topologies match. 10-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 225
    , or promiscuous ports (typically, access switches with no private ports), the private VLANs do not need to be created and can be pruned from the trunks for security reasons. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-19
  • Cisco 4506-E | Software Guide - Page 226
    as the community VLANs. VLAN 901 uses module 4, port 3. VLAN 902 uses module 4, ports 4 through 6. VLAN 903 uses module 4, ports 7 through 9. The router is Console> (enable) 10-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 227
    7 902 Isolated 4/4-6 Console> (enable) show pvlan Primary Secondary Secondary-Type Ports 7 901 isolated 4/3 7 902 community 4/4-6 7 903 community 4/7-9 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-21
  • Cisco 4506-E | Software Guide - Page 228
    . These examples show the port capability for several ports in the following configuration: Console> (enable) set pvlan 10 20 Console> (enable) set deleted Console> (enable) 10-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 229
    , previously set on ports 3/2 through 3/5: Console> (enable) clear pvlan mapping 901 902 3/2-5 Successfully cleared mapping between 901 and 902 on 3/2-5 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-23
  • Cisco 4506-E | Software Guide - Page 230
    Configuring Private VLANs Chapter 10 Configuring VLANs 10-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 231
    extend VLANs across an entire network. The Catalyst 4500 series, 2948G, and 2980G switches support IEEE 802.1Q-802.1Q trunking encapsulation. You can configure a trunk on a single Fast or Gigabit Ethernet port or on a Fast or Gigabit EtherChannel bundle. For more information about Fast and Gigabit
  • Cisco 4506-E | Software Guide - Page 232
    VTP domains, see Chapter 9, "Configuring VTP." Trunk negotiation is managed by the Dynamic Trunking Protocol (DTP). DTP supports autonegotiation of both ISL and 802.1Q trunks. Note Trunking capabilities are hardware dependent. For example, the Catalyst 4500 series switch modules support only 802.1Q
  • Cisco 4506-E | Software Guide - Page 233
    a specific piece of hardware supports trunking, and to determine which trunking encapsulations are supported, see your hardware documentation or use the show port capabilities command. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 234
    to the non-Cisco 802.1Q cloud through 802.1Q trunks. • Make sure that the native VLAN is the same on all of the 802.1Q trunks connecting the Cisco switches to the non-Cisco 802.1Q cloud. 11-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 235
    VLAN Trunks on Fast Ethernet and Gigabit Ethernet Ports Default Trunk Configuration • If you are connecting multiple Cisco switches to a non-Cisco 802.1Q cloud, all of the connections must be through 802.1Q trunks. You cannot connect Cisco switches to a non-Cisco 802.1Q cloud through ISL
  • Cisco 4506-E | Software Guide - Page 236
    list for that trunk. However, you can remove VLANs from the allowed list to prevent traffic for those VLANs from passing over the trunk. 11-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 237
    Ethernet and Gigabit Ethernet Ports Configuring a Trunk Link Note When you first configure specific management configuration. Command set trunk mod_num/port_num off show trunk [mod_num/port_num] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 238
    on trunk 4/1 2-999, 1025-4094 Port Vlans allowed and active in management domain 4/1 2-6,10,20,50,100,152,200,300,400,500,521,524,570,776,801-802,850,917,999 11-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 239
    The following sections contains examples of a VLAN trunk configurations: Note For examples of configuring trunk links between switches and routers, refer to the Layer 3 Switching Software Configuration Guide-Catalyst 5000 Family, 4000 Family, 2926G Series, 2926 Series, 2948G, and 2980G
  • Cisco 4506-E | Software Guide - Page 240
    2/3 2/4 2/5 2/6 Vlans allowed on trunk 1-1005, 1025-4094 1-1005, 1025-4094 1-1005, 1025-4094 1-1005, 1025-4094 Port Vlans allowed and active in management domain 11-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 241
    Vlans allowed and active in management domain 1-1005, 1025- Switch B are in EtherChannel auto mode. The system logging messages provide information about the formation of the EtherChannel bundle. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 242
    auto channel WS-C4003 JAB023806(Sw 2/4 3/5 connected auto channel WS-C4003 JAB023806(Sw 2/5 3/6 connected auto channel WS-C4003 JAB023806(Sw 2/6 Switch_B> (enable) 11-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 243
    Ethernet uplink ports on the supervisor engine. Figure 11-2 Parallel Trunk Configuration Before Configuring VLAN-Traffic Load Sharing Trunk 2 VLANs 10, 20, and 30: port-VLAN priority 32 (blocking) VLANs 40, 50, and 60: port-VLAN priority 1 (forwarding) Catalyst 4000 Switch 1 Catalyst 4000 Switch
  • Cisco 4506-E | Software Guide - Page 244
    trnet-default active . . . Switch_1> (enable) Configure the supervisor engine uplinks on Switch 1 as 802.1Q trunk ports by entering the Status Native vlan ----------- 11-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 245
    ---------- disabled disabled disabled disabled disabled disabled disabled disabled disabled Fast-Start ---------- disabled disabled disabled Group-method Group-method 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-15
  • Cisco 4506-E | Software Guide - Page 246
    Example VLAN Trunk Configurations Chapter 11 Configuring VLAN Trunks on Fast Ethernet and Gigabit Ethernet Ports 1/2 30 blocking 19 1/2 40 -19,21-1004 using portpri 32. 11-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 247
    VLAN Trunks on Fast Ethernet and Gigabit Ethernet Ports Example VLAN Trunk Configurations Port 1/1 vlans 10,20 using portpri 1. Port 1/1 vlans 1005 configure VLAN traffic load sharing. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-
  • Cisco 4506-E | Software Guide - Page 248
    Trunks on Fast Ethernet and Gigabit Ethernet Ports Figure 11-3 Parallel Trunk Configuration after Configuring VLAN Traffic Load-Sharing Trunk 2 VLANs 10, 20, 30, 40, 50, and 60: port-VLAN priority 32 (blocking) Catalyst 4000 Switch 1 Catalyst 4000 Switch 2 1/1 1/2 1/1 1/2 43992 Trunk 1 VLANs
  • Cisco 4506-E | Software Guide - Page 249
    VLAN Trunks on Fast Ethernet and Gigabit Ethernet Ports Example VLAN Trunk Configurations 802.1Q Nonegotiate Trunk Configuration Example This sample configuration shows how to configure an 802.1Q Fast Ethernet trunk between two Catalyst 4500 series switches with 802.1Q-capable hardware. (Use
  • Cisco 4506-E | Software Guide - Page 250
    VLAN Trunks on Fast Ethernet and Gigabit Ethernet Ports Step 2 Display the problem on Switch 2 by entering the the show spantree and show spantree statistics commands. The configuration mismatch exists until the port on Switch 2 is properly configured. Switch 2> (enable) show spantree 1 VLAN
  • Cisco 4506-E | Software Guide - Page 251
    trunk and show spantree commands: Switch 2> (enable) show trunk 4/1 Port Mode Encapsulation 4/1 nonegotiate dot1q Status -----------trunking Native vlan ----------1 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-21
  • Cisco 4506-E | Software Guide - Page 252
    ," and that the port-state is "forwarding." Verify connectivity across the trunk using the ping command: Switch 1> (enable) ping switch_2 switch_2 is alive Switch 1> (enable) 11-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 253
    to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter consists of these sections: • Understanding How VMPS Works, page 12-1 • VMPS and Dynamic Port Hardware and Software Requirements, page 12-2 • Default VMPS and Dynamic Port Configuration, page 12
  • Cisco 4506-E | Software Guide - Page 254
    dynamic port VLAN membership, refer to your hardware documentation or use the show port capabilities command. Dynamic port membership is not supported on Gigabit Ethernet ports. 12-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 255
    VMPS Server VMPS enable state VMPS management domain VMPS TFTP server VMPS database configuration filename VMPS fallback VLAN VMPS specific host on the dynamic port after a specified period. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-
  • Cisco 4506-E | Software Guide - Page 256
    types of configuration files from incorrectly being read by the VMPS server. • Define the VMPS domain. The VMPS domain should correspond to the VTP domain name configured on the switch. 12-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 257
    port is identified by the IP address of the switch and the module/port number of the port in the form mod_num configure a restricted access using MAC addresses and the port groups or VLAN groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 258
    198.4.254.222 port 1/3 device 198.4.254.223 all-ports ! !Section 4: VLAN GROUPS !VLAN groups ! !vmps-vlan-group ! vlan-name ! 12-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 259
    set to 172.20.22.7 VMPS configuration filename set to Bldg-G.db Console> (enable) set vmps state enable Vlan Membership Policy Server enable is in progress. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-7
  • Cisco 4506-E | Software Guide - Page 260
    specification. show vmps server Configure ports on the switch module 3 to dynamic mode, disable trunking port 1 on module 2 to make it a dynamic port, and verify the port configuration Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 261
    Dynamic VLAN Membership with VMPS Configuring VMPS 3/2 connect dyn-5 normal half 10 3/3 connect dyn-5 normal half 10 . . entry. Command clear vmps server ip_addr 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-9
  • Cisco 4506-E | Software Guide - Page 262
    to see reconfirm status Console> (enable) To download the VMPS database manually and refresh the existing VMPS database, perform this task in privileged mode 1 on module 3 to static mode: 12-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1
  • Cisco 4506-E | Software Guide - Page 263
    lines parsed and the number of parsing errors. To obtain more information on VMPS parsing errors, set the syslog level for VMPS to 3 using the set logging level vmps command. Troubleshooting Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-11
  • Cisco 4506-E | Software Guide - Page 264
    stations are connected to these clients: - Switch 2 - Switch 9 • The database configuration file is called Bldg-G.db and is stored on a TFTP server with IP address 172.20.22.7. 12-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 265
    the ASCII file resides: Console> (enable) set vmps tftpserver 172.20.22.7 Bldg-G.db b. Enable VMPS: Console> (enable) set vmps state enable 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-13
  • Cisco 4506-E | Software Guide - Page 266
    belong to one VLAN. You could not enable the dynamic port VLAN feature on ports that carried a native VLAN and an auxiliary VLAN. 12-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 267
    access port of the IP phone. Configuration of the auxiliary VLAN ID is not dynamic, you need to configure it manually. As you manually configure the auxiliary VLAN ID, the VMPS 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-15
  • Cisco 4506-E | Software Guide - Page 268
    VLANs Chapter 12 Configuring Dynamic VLAN Membership with VMPS Console> (enable) set port auxiliaryvlan 5/10 223 Auxiliary vlan cannot be set to 223 as PVID=223. Console> (enable) 12-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 269
    Supervisor engine software release 5.1 or later releases • IEEE 802.1Q-capable switching modules (refer to the documentation for your hardware, or use the show port capabilities command) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 270
    dynamic VLAN creation globally on the switch as well. For information on enabling dynamic VLAN creation, see the "Enabling GVRP Dynamic VLAN Creation" section on page 13-4. 13-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 271
    mode: Step 1 Step 2 Task Command Enable GVRP on an individual 802.1Q-capable port. set port gvrp enable mod_num/port_num Verify the configuration. show gvrp configuration 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 13-3
  • Cisco 4506-E | Software Guide - Page 272
    VLAN creation supports all VLAN types. If you enable dynamic VLAN creation, these configuration restrictions are imposed: • You cannot change the switch to VTP server default. 13-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-
  • Cisco 4506-E | Software Guide - Page 273
    to configure forbidden registration on an 802.1Q trunk port: Console> (enable) set gvrp registration forbidden 1/1 Registrar Administrative Control set to forbidden on port 1/1. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 274
    to 600 ms and you attempt to configure the join timer to 350 ms, an error message is displayed. Set the leave timer to at least 1050 ms, and then set the join timer to 350 ms. 13-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 275
    : 156 Join In Transmitted: 0 Empty Transmitted: 0 Leave In Transmitted: 0 Leave Empty Transmitted: 0 Leave All Transmitted: 41 VTP Message Received: 0 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 13-7
  • Cisco 4506-E | Software Guide - Page 276
    GVRP on the switch. Command set gvrp disable This example shows how to disable GVRP globally on the switch: Console> (enable) set gvrp disable GVRP disabled Console> (enable) 13-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 277
    , refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter consists of these sections: • Understanding How QoS Works, page 14-1 • Software Requirements, page 14-4 • QoS Default Configuration, page 14-4 • Configuring QoS on the Switch, page 14
  • Cisco 4506-E | Software Guide - Page 278
    (the User Priority bits). Other frame types cannot carry CoS values. CoS values range between 0 (low priority) and 7 (high priority). • Classification is the selection of traffic to be marked. 14-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 279
    the switch through a supported ingress port, QoS accepts the User Priority bits as the CoS value. QoS classifies and marks all other frame types that enter the switch with the default CoS value configured for the entire switch. You cannot mark traffic on a per-port basis. Note The Catalyst 4500
  • Cisco 4506-E | Software Guide - Page 280
    Chapter 14 Configuring QoS Software Requirements QoS requires supervisor engine software release 5.2 or later releases. Use the show port capabilities command to determine the specific QoS support for a module. QoS Default Configuration Table 14-1 shows the QoS default configuration. Table 14
  • Cisco 4506-E | Software Guide - Page 281
    shows how to revert to the default CoS value for port 8/1 and verify the configuration: Console> (enable) clear qos defaultcos qos defaultcos setting cleared. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 14-5
  • Cisco 4506-E | Software Guide - Page 282
    the number of drop thresholds that are supported on the port. For example, the 2q1t port type supports two transmit queues and one drop threshold. qos map 2q1t Qos map setting cleared. Console> (enable) 14-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 283
    to defaults disables QoS, because QoS is disabled by default. Disabling QoS To disable QoS, perform this task in privileged mode: Tas Disable QoS on the switch. Command set qos disable 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 284
    Configuring QoS on the Switch This example shows how to disable QoS: Console> (enable) set qos disable QoS is disabled. Console> (enable) Chapter 14 Configuring QoS 14-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 285
    This chapter describes how to configure multicast services, including Cisco Group Management Protocol (CGMP), Internet Group Management Protocol (IGMP) snooping, and GARP Multicast Registration Protocol (GMRP) on the Catalyst enterprise LAN switches. Note For complete syntax and usage information
  • Cisco 4506-E | Software Guide - Page 286
    switches listen. When a switch receives the packet, the supervisor engine module interprets the packet and modifies the forwarding table automatically. You can statically configure user Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 287
    15 Configuring Multicast Services Understanding How Multicasting Works CGMP leave-processing allows the switch to detect IGMP version 2 leave messages that were sent to the all-routers multicast address by hosts on any of the supervisor engine module ports. When the supervisor engine module
  • Cisco 4506-E | Software Guide - Page 288
    igmp leaves received valid igmp queries received igmp gs queries transmitted igmp leaves transmitted failures to add GDA to EARL 211915 0 211729 186 0 3122 0 0 0 15-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 289
    enable CGMP fastleave processing enabled. Console> (enable) Console> (enable) show cgmp leave CGMP: enabled CGMP leave: enabled CGMP FastLeave: enabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-5
  • Cisco 4506-E | Software Guide - Page 290
    Configuring Multicast Services Displaying Multicast Router Information When you enable CGMP, the switch on port 3/1 indicates that the entry was configured manually): Console> (enable) show multicast router Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 291
    Chapter 15 Configuring Multicast Services Configuring CGMP Task Display the total number of multicast addresses (groups) (enable) 211915 0 211729 186 0 3122 0 0 0 80 2032227 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-7
  • Cisco 4506-E | Software Guide - Page 292
    15 Configuring Multicast Services Disabling CGMP Leave Processing To disable CGMP leave processing on the switch, perform support for IP multicast disabled. Console> (enable) Command set cgmp disable 15-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 293
    (enable) show gmrp configuration Global GMRP Configuration: GMRP Feature is currently enabled on this switch. GMRP Timers (milliseconds): Join = 200 Leave = 600 LeaveAll = 10000 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-9
  • Cisco 4506-E | Software Guide - Page 294
    privileged mode: Step 1 Step 2 Task Disable GMRP on individual switch ports. Verify the configuration. Command set port gmrp disable mod_num/port_num show gmrp configuration 15-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 295
    GMRP forward-all option on port 1/1: Console> (enable) set gmrp fwdall disable 1/1 GMRP Forward All groups option disabled on port 1/1. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-11
  • Cisco 4506-E | Software Guide - Page 296
    currently enabled on this switch. GMRP Timers (milliseconds): Join = 200 Leave = 600 LeaveAll = 10000 Port based GMRP Configuration: GMRP-Status Registration ForwardAll Port(s 15-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 297
    behavior of all GARP applications running on the switch, not just GMRP. (For example, GVRP uses the same timers.) You can modify the default GARP timer values on the switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-13
  • Cisco 4506-E | Software Guide - Page 298
    GMRP Chapter 15 Configuring Multicast Services When you set the timer values, the value for leave must be equal to GMRP Packets Received:500 Join Empties:200 Join INs:250 15-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 299
    > (enable) Configuring Multicast Router Ports and Group Entries The following sections describe how to manually specify multicast router ports and configure multicast group entries. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 300
    01-33-44-55-66-77 2/6-12 Static multicast entry added to CAM table. Console> (enable) show multicast group CGMP enabled IGMP disabled 15-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 301
    monitoring action. These actions apply to IGMP packets, are configured on a per-switch-port basis, and are available to all VLANs that are associated with the physical port. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-17
  • Cisco 4506-E | Software Guide - Page 302
    IP multicast traffic forwarding. The following sections describe IGMP traffic filtering usage, requirements, and configurations. Using IGMP Traffic Filtering You can use IGMP filters in video service deployment of Ethernet to the Home (ETTH). IGMP transmits video channels as IP multicast traffic
  • Cisco 4506-E | Software Guide - Page 303
    ) This example shows how to verify the disable configuration status of IGMP multicast filtering: Console> (enable) show igmp filter igmp filter is disabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-19
  • Cisco 4506-E | Software Guide - Page 304
    IP address or range of IP addresses. set igmp filter profile profile_id match-action permit Verify the permit configuration. show igmp filter profile profile_id match-action 15-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 305
    Chapter 15 Configuring Multicast Services Filtering IGMP Traffic This example shows how to permit an IP (enable) clear igmp filter profile 1 226.1.1.1 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-21
  • Cisco 4506-E | Software Guide - Page 306
    IGMP Traffic Chapter 15 Configuring Multicast Services This example shows how to module 2/port 1 to IGMP multicast filter profile 1: Console> (enable) set igmp filter map 1 2/1 Console> (enable) 15-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 307
    15 Configuring Multicast Services Filtering IGMP Traffic This example shows how to display the association of IGMP multicast filter profiles with module 2/port (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-23
  • Cisco 4506-E | Software Guide - Page 308
    Filtering IGMP Traffic Chapter 15 Configuring Multicast Services 15-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 309
    one port, 101 (1 + 100) on another port, 25 (1 + 24) on a third port, and 1 address on each of the rest of the ports 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-1
  • Cisco 4506-E | Software Guide - Page 310
    were manually configured or Management Protocol (SNMP) manager. An SNMP trap is not sent if you configure the port for restrictive violation mode. A trap is sent only if you configure Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-
  • Cisco 4506-E | Software Guide - Page 311
    Configuring Port Security on the Switch The following sections describe how to configure port security. Enabling Port Security Port security is either autoconfigured or enabled manually -01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-3
  • Cisco 4506-E | Software Guide - Page 312
    1998, 17:53:38 This example shows how to enable port security on a port and manually specify the secure MAC address: Console> (enable) set port security 2/1 enable 00-90 enable) 16-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 313
    security 4/7 00-11-22-33-44-55 00-11-22-33-44-55 cleared from secure address list for port 4/7 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-5
  • Cisco 4506-E | Software Guide - Page 314
    unicast flood blocking. The output can show unicast flooding as either enabled or disabled depending upon if the port has exceeded its address limitation. 16-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 315
    address notification, perform this task in privileged mode: Task Set the SNMP traps on the system. Command set snmp trap enable macnotification 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-7
  • Cisco 4506-E | Software Guide - Page 316
    Port Security on the Switch Chapter 16 Configuring Port Security This example shows how to enable MAC address notification you attempt to connect the host to the port again. 16-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 317
    Num-Addr Secure-Src-Addr Age-Left Last-Src-Addr Shutdown/Time-Left 3/24 1 00-e0-4f-ac-b4-00 - - - - Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-9
  • Cisco 4506-E | Software Guide - Page 318
    that is destined to or originating from a specific MAC address. Clear the filter. Verify the configuration. Command set cam {static | permanent} filter to port security 16-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 319
    1: Total ports: 2 Total MAC address(es): 2 Total global address space used (out of 1024): 0 Status: installed Module 3: Module does not support port security feature Module 6: 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-11
  • Cisco 4506-E | Software Guide - Page 320
    Security Total ports: 48 Total MAC address(es): 48 Total global address space used (out of 1024): 0 Status: installed Console> (enable) Chapter 16 Configuring Port Security 16-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 321
    CAM entry exists by entering the show cam static command. Note If you are configuring unicast flood blocking on a secure port; see Chapter 16, "Configuring Port Security." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 17-1
  • Cisco 4506-E | Software Guide - Page 322
    this task in privileged mode: Task Enable unicast flood blocking on the desired Ethernet ports to disable unicast flooding. Command set port unicast-flood mod/port disable 17-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 323
    unicast flood block information for port 1 on module 4: Console> (enable) show port unicast-flood 4/1 Port Unicast Flooding ---- 4/1 Disabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 17-3
  • Cisco 4506-E | Software Guide - Page 324
    Configuring Unicast Flood Blocking on the Switch Chapter 17 Configuring Unicast Flood Blocking 17-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 325
    the type of permit list for the IP address, the IP address is added to both the SNMP and Telnet permit lists. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 18-1
  • Cisco 4506-E | Software Guide - Page 326
    172.20.52.31 with mask 255.255.255.224 added to Ssh permit list. Console> (enable) show ip permit Telnet permit list disabled. 18-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 327
    management system to the permit list, especially when configuring through SNMP. Failure to do so could result in your connection being dropped by the switch that you are configuring -15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 18-3
  • Cisco 4506-E | Software Guide - Page 328
    Console> (enable) show snmp RMON: Disabled Extended RMON Netflow: Disabled Traps Enabled: ippermit Port Traps Enabled: None switch you are configuring in case you clear your current IP address. 18-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 329
    telnet 172.100.101.102 cleared from telnet permit list. Console> (enable) clear ip permit all IP permit list cleared. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 18-5
  • Cisco 4506-E | Software Guide - Page 330
    Configuring the IP Permit List on the Switch Chapter 18 Configuring the IP Permit List 18-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 331
    on Ethernet, Fast Ethernet, and Gigabit Ethernet ports on the Catalyst enterprise LAN switches. The configuration procedures in this chapter apply to Ethernet, Fast Ethernet, and Gigabit Ethernet switch ports on switching modules and fixed-configuration switches, in addition to supervisor engine
  • Cisco 4506-E | Software Guide - Page 332
    of the desired ports. set port protocol mod_num/port_num {ip | ipx | group} {on | off | auto} Verify the port filtering configuration. show port protocol [mod_num[/port_num]] 19-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 333
    disable This example shows how to disable protocol filtering: Console> (enable) set protocolfilter disable Protocol filtering disabled on this switch. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 19-3
  • Cisco 4506-E | Software Guide - Page 334
    Configuring Protocol Filtering on the Switch Chapter 19 Configuring Protocol Filtering 19-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 335
    . You must apply configuration commands to the appropriate module. For example, on a Catalyst 2948G series switch, the 24 Fast Ethernet ports belong logically to module 2. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-1
  • Cisco 4506-E | Software Guide - Page 336
    check module status on a Catalyst 2948G switch: Console> (enable) show module Mod Slot Ports Module-Type Model Status 11 0 Switching Supervisor WS-X2948 ok 2 1 50 10/100/1000 Ethernet WS-X2948G ok Mod Module-Name Serial-Num 1 Supervisor JAB023807H1 2 Switch Ports JAB023807H1
  • Cisco 4506-E | Software Guide - Page 337
    Admin Oper Detected mWatt mA @51V 2/1 none none - - - - - Port Security Violation Shutdown-Time Age-Time Max-Addr Trap IfIndex 2/1 disabled shutdown 0 0 1 disabled 15 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-3
  • Cisco 4506-E | Software Guide - Page 338
    the MAC address range for a module using the show module command, you can display the MAC address of a specific port in the switch using the show port mac-address -54-bf-59-93 20-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 339
    3/5 Model WS-X4148 Port 3/5 Type 10/100BaseTX Speed auto,10,100 Duplex half,full Trunk encap type 802.1Q Trunk mode on,off,desirable,auto,nonegotiate Channel 3/1-48 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 340
    Flow control Security Membership Fast start QOS scheduling CoS rewrite ToS rewrite Rewrite UDLD Inline power AuxiliaryVlan SPAN Console> (enable) no disconnected automatically). 20-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-
  • Cisco 4506-E | Software Guide - Page 341
    only. Telnet sessions that are initiated from the switch cannot be encrypted. To use this feature, you must install the application on the client accessing the switch and you must configure SSH the switch. The current implementation of SSH supports version 1, both the data encryption standard (DES
  • Cisco 4506-E | Software Guide - Page 342
    disconnect an active console port session and an active Telnet session: Console> (enable) show users Session User Location console sam telnet jake jake-mac.bigcorp.com 20-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 343
    from tim-nt.bigcorp.com disconnected. (1) Console> (enable) show users Session User Location telnet jake jake-mac.bigcorp.com * telnet suzy suzy-pc , press Ctrl-C. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-9
  • Cisco 4506-E | Software Guide - Page 344
    Connectivity Executing Ping To ping another device on the network from the switch, perform one of these tasks in normal or privileged mode: Task max = 1/1/1 Console> (enable) 20-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 345
    address, in port name, in port speed, in port duplex mode, out port name, out port speed, and out port duplex mode. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-11
  • Cisco 4506-E | Software Guide - Page 346
    IP header to cause routers and servers to generate specific return messages. Traceroute starts by sending a User Datagram Protocol (UDP) datagram to the destination host data_size] 20-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 347
    byte packets 1 10.1.1.1 (10.1.1.1) 2 ms 2 ms 2 ms 1 ms 2 ms 2 ms 2 10.1.1.100 (10.1.1.100) 2 ms 4 ms 3 ms 3 ms 3 ms 3 ms Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-13
  • Cisco 4506-E | Software Guide - Page 348
    Using IP Traceroute Chapter 20 Checking Status and Connectivity 20-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 349
    support Subnetwork Access Protocol (SNAP). CDP runs over the data link layer only. Cisco devices do not forward CDP packets. When new CDP information is received, old information is discarded. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 350
    Setting the CDP Enable State on a Port You can enable or disable CDP on a per-port basis. You must enable CDP globally before the switch can transmit CDP messages on any ports. 21-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 351
    enabled 3/3 disabled 3/4 disabled 3/5 disabled 3/6 disabled 3/7 enabled 3/8 enabled 3/9 enabled 3/10 enabled 3/11 enabled 3/12 enabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 21-3
  • Cisco 4506-E | Software Guide - Page 352
    Switch Chapter 21 Configuring CDP Setting the CDP Message Interval The CDP message interval specifies how often the switch will transmit CDP messages to directly connected Cisco 21-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-
  • Cisco 4506-E | Software Guide - Page 353
    .52.36 Holdtime: 132 sec Capabilities: TRANSPARENT_BRIDGE SWITCH Version: WS-C2948 Software, Version McpSW: 5.1(57) NmpSW: 5.1(1) Copyright (c) 1995-1999 by Cisco Systems, Inc. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 21-5
  • Cisco 4506-E | Software Guide - Page 354
    on the Switch Platform: WS-C2948 Port-ID (Port on Neighbors's Device): 2/2 VTP Management Domain: Lab_Network Native VLAN: 522 Duplex: full Console> (enable) Chapter 21 Configuring CDP 21-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 355
    data from the earlier data, and stores the difference. The switch sorts data for each port using a user-specified metric that is selected from the types listed in Table 22-1. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 22-1
  • Cisco 4506-E | Software Guide - Page 356
    Pressing Ctrl-C does not terminate the process. Completed Switch TopN reports remain available for viewing until you remove them using the clear top {all | report_num} command. 22-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 357
    example shows how to run the Switch TopN Reports utility in the foreground: Console> (enable) show top 5 pkts Start Time: 06/16/1998,17:26:38 End Time: 06/16/1998,17:27:09 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 22-3
  • Cisco 4506-E | Software Guide - Page 358
    Status Owner (type/machine/user) 1 06/16/1998, Switch TopN reports. Note The clear top all command does not clear pending Switch TopN reports. Only the reports that have completed are cleared. 22-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 359
    TopN Reports This example shows how to remove a specific Switch TopN report and how to remove all stored reports: Console> (enable 5 killed by Console//. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 22-5
  • Cisco 4506-E | Software Guide - Page 360
    Running and Viewing Switch TopN Reports Chapter 22 Using Switch TopN Reports 22-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 361
    and Hardware Requirements, page 23-2 • Default UDLD Configuration, page 23-2 • Configuring UDLD on the Switch, page 23-3 Understanding How UDLD Works The UDLD protocol allows devices that are connected through fiber-optic or copper Ethernet cables (for example, Category 5 cabling) to monitor
  • Cisco 4506-E | Software Guide - Page 362
    links: - Software release 5.2 or later releases - Ethernet or Fast Ethernet copper switching modules Default UDLD Configuration Table 23-1 shows the default UDLD configuration. 23-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 363
    to enable UDLD globally and verify the configuration: Console> (enable) set udld enable UDLD enabled globally Console> (enable) show udld UDLD : enabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 23-3
  • Cisco 4506-E | Software Guide - Page 364
    . Verify the configuration. Command set udld disable show udld This example shows how to disable UDLD globally: Console> (enable) set udld disable UDLD disabled globally Console> (enable) 23-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 365
    support UDLD aggressive mode. UDLD aggressive mode is disabled by default and its use is recommended only for point-to-point links between Cisco switches 4/1. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 23-5
  • Cisco 4506-E | Software Guide - Page 366
    To display UDLD configuration for a module or port, perform this task in privileged mode: Task Command Display the UDLD configuration for a module or port. show in seconds. 23-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 367
    Configuring UDLD Configuring UDLD on the Switch Table 23-2 show udld Command Output Fields (continued) Field Port Admin Status Aggressive Mode Link State Description Module 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 23-7
  • Cisco 4506-E | Software Guide - Page 368
    Configuring UDLD on the Switch Chapter 23 Configuring UDLD 23-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 369
    describes how to configure Simple Network Management Protocol (SNMP) on Catalyst enterprise LAN switches. Note For complete syntax and usage information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This
  • Cisco 4506-E | Software Guide - Page 370
    SNMP engine's engine ID and user passwords. When an SNMP message expects Management network devices, and to manage configurations, statistics collection, performance, Protocol (SNMP) and security. 24-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 371
    , SNMPv3 has significant enhancements to administration and security. See the "Understanding SNMPv3" section on page 24-11 for more information on SNMPv3. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-3
  • Cisco 4506-E | Software Guide - Page 372
    insertion of the same type of module For Fast EtherChannel and Gigabit EtherChannel interfaces, the ifIndex value is only retained and used after a high-availability switchover. 24-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 373
    definitions on the switch. Catalyst enterprise LAN switches are managed devices that support SNMP network management with the following features: • SNMP traps (see the "Configuring SNMPv1 and SNMPv2c from the CLI" section on page 24-6) • RMON in the supervisor engine module software (see Chapter
  • Cisco 4506-E | Software Guide - Page 374
    Note This section provides basic SNMPv1 and SNMPv2c configuration information. For detailed information on the SNMP commands supported by the Catalyst enterprise LAN switches, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. Note For enhanced SNMP
  • Cisco 4506-E | Software Guide - Page 375
    from the CLI To configure SNMPv1 and SNMPv2c from the command-line interface (CLI), perform RMON: Extended RMON module is not present Traps Enabled: Port,Module,Chassis,Bridge,Repeater,Vtp Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-7
  • Cisco 4506-E | Software Guide - Page 376
    example shows how to display the SNMP configuration: Console> (enable) show snmp SNMP:Enabled RMON:Disabled Extended RMON Netflow Enabled :None. Memory usage limit for secret 24-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 377
    that are associated with one or more hosts to limit which hosts can use a specific community string to access the system. You can specify more than one IP address mask 255.0.0.0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-9
  • Cisco 4506-E | Software Guide - Page 378
    privileged mode: Step 1 Step 2 Task Specify an interface alias. Display the interface alias. Command set snmp ifalias {ifIndex} [ifAlias] show snmp ifalias [ifIndex] 24-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 379
    unauthorized source Benefits of SNMPv3 SNMPv3 provides the following benefits for managing your network: • SNMP devices can collect data securely without Control Subsystem 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-11
  • Cisco 4506-E | Software Guide - Page 380
    Applications Dispatcher The Dispatcher is a simple traffic manager that sends and receives messages. After receiving number of modules, each supporting a different version of SNMP. 58568 24-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1
  • Cisco 4506-E | Software Guide - Page 381
    With VACM, you can control which users and which operations can have access to which managed objects. Applications SNMPv3 applications refer to internal SNMP entities. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-13
  • Cisco 4506-E | Software Guide - Page 382
    For detailed information on the SNMP commands that are supported by the Catalyst enterprise LAN switches, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. To configure SNMPv3 from the command-line interface (CLI), perform this task in privileged mode
  • Cisco 4506-E | Software Guide - Page 383
    sha guestuser2password Snmp user was set to guestuser2 authProt sha authPasswd guestuser2password privProt no-priv with engineid 00:00:00:09:00:10:7b:f2:82:00:00:00 nonvolatile. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24
  • Cisco 4506-E | Software Guide - Page 384
    10.6.4.201 guestuser1 ifDescr.1 Enter Authentication password :guestuser1password Enter Privacy password :privacypasswd1 Error code set in packet - AUTHORIZATION_ERROR:1. 24-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 385
    manage, and troubleshoot a switched internetwork. For more information, refer to the following publications: • Getting Started with Resource Manager Essentials • Getting Started with CWSI Campus 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 386
    Using CiscoWorks2000 Chapter 24 Configuring SNMP 24-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 387
    allows the switch to monitor network traffic from all ports simultaneously at the data-link layer of the OSI model without requiring a dedicated monitoring probe or network analyzer. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 388
    2948G, and Catalyst 2980G Switches Command Reference). Supported RMON and RMON2 MIB Objects Table 25-1 lists the RMON and RMON2 MIB objects that are supported by the supervisor engine software. 25-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 389
    Chapter 25 Configuring RMON Table 25-1 Supervisor Engine RMON and RMON2 Support Module Object Identifier (OID) Supervisor ...mib-2(1).rmon(16).statistics(1).etherStatsTable(1) engine Supervisor ...mib-2(1).rmon(16).history(2).historyControlTable(1) engine ...mib-2(1).rmon(16).history(2).
  • Cisco 4506-E | Software Guide - Page 390
    Supported RMON and RMON2 MIB Objects Chapter 25 Configuring RMON 25-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 391
    and Catalyst 2980G Switches Command Reference. This chapter consists of these sections: • Understanding How SPAN and RSPAN Work, page 26-1 • SPAN and RSPAN Session Limits, page 26-4 • Configuring SPAN, page 26-4 • Configuring RSPAN, page 26-8 Note To configure SPAN or RSPAN from a Network Management
  • Cisco 4506-E | Software Guide - Page 392
    ports; however, the trunk settings of the destination port during the SPAN session configuration determine the encapsulation of the packets forwarded by the destination port. 26-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 393
    Gigabit uplink ports on the WS-4013 Supervisor II • Gigabit uplink ports on the 2980G-A • Gigabit ports on the WS-4232-L3 module The SPAN line in the output of the is empty. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-3
  • Cisco 4506-E | Software Guide - Page 394
    source port) is mirrored to Ethernet port 10. A network analyzer on Ethernet port 10 receives all network traffic from Ethernet port 5 without being physically attached to it. 26-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 395
    You can span local traffic that passes through the switch. • You can have up to five SPAN sessions running at the same time with any combination of ingress and egress sessions. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-5
  • Cisco 4506-E | Software Guide - Page 396
    : Port 2/1-2 Direction : transmit/receive Incoming Packets: disabled Learning : enabled Filter : - Status : active Total local span sessions: 1 Console> (enable) 26-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 397
    3/5 both filter 50,850 Overwrote Port 3/5 to monitor transmit/receive traffic of Port 3/4 Incoming Packets disabled. Learning enabled. Console> (enable) show span Destination : Port 3/5 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-7
  • Cisco 4506-E | Software Guide - Page 398
    engine requirements are as follows: • For source switches-Any Catalyst 4500 series switch supervisor engine • For destination or intermediate switches-Any Catalyst 4500 series or Catalyst 6500 series switch supervisor engine You cannot place any third-party or other Cisco switches in the end-to-end
  • Cisco 4506-E | Software Guide - Page 399
    ports and the destination port across multiple switches. • A port cannot serve as an RSPAN source port or RSPAN destination port while designated as an RSPAN reflector port. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-9
  • Cisco 4506-E | Software Guide - Page 400
    -Switch Link (ISL) to map dot1q. However, ensure that the special properties of RSPAN VLANs are supported in all the switches configure the source and destination switches using the set rspan command. 26-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 401
    and to filter VLANs 50 and 850: Console> (enable) set rspan source 2/3 500 reflector 2/34 filter 50,850 Rspan Type : Source Destination : - 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-11
  • Cisco 4506-E | Software Guide - Page 402
    how to specify port 3/1 as the RSPAN destination port in VLAN 500: Console> (enable) set rspan destination 3/1 500 Rspan Type : Destination Destination : Port 3/1 26-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 403
    y Disabled monitoring of all source(s) on the switch for remote span. Console> (enable) This Configuration Examples The following sections provide examples that show how to configure RSPAN. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 404
    session. Table 26-2 Making Modifications to an Active RSPAN Session Switch A (source) Action Disable the RSPAN session. RSPAN CLI Commands set rspan disable source 901 26-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 405
    26-4 for the necessary configuration commands to configure this RSPAN session. This is a typical scenario where the monitoring probes would be placed in the data center and 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-15
  • Cisco 4506-E | Software Guide - Page 406
    , in Figure 26-6, you can add probe 3 in Switch B to monitor RSPAN VLAN 901 using the set rspan destination 1/2 901 command. Similarly, you could add source ports to Switch C. 26-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 407
    command needed set rspan disable destination all set rspan disable destination all set rspan disable source all No RSPAN CLI command needed 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-17
  • Cisco 4506-E | Software Guide - Page 408
    Configuring RSPAN Chapter 26 Configuring SPAN and RSPAN 26-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 409
    Reports for Tech Support, page 27-12 Setting the System Name and System Prompt The system name on the switch is a user-configurable string that identifies the device. The default configuration has no system name configured. If you do not manually configure a system name, the switch obtains the
  • Cisco 4506-E | Software Guide - Page 410
    the system name whenever one of the following occurs: • When the switch is initialized (power on or reset) • When you configure the IP address on the sc0 interface using the CLI or Simple Network Management Protocol (SNMP) • When you configure a route using the set ip route command • When you clear
  • Cisco 4506-E | Software Guide - Page 411
    Sys-Status Uptime d,h:m:s Logout ok off ok 0,18:24:41 none PS1-Type PS2-Type PS3-Type WS-X4008-DC-650W WS-X4008 WS-X4008 Modem Baud Traffic Peak Peak-Time 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27-3
  • Cisco 4506-E | Software Guide - Page 412
    15:46:01 Power Capacity of the Chassis:2 supplies WARNING:Power supplies of different values have been inserted System Name System Location System Contact CC Sunnyvale CA [email protected] 4006 Console> (enable) Setting the System Clock Note You can configure the switch to obtain the
  • Cisco 4506-E | Software Guide - Page 413
    to disable the Cisco Systems Console Telnet login banner: Console> (enable) set banner telnet disable Cisco Systems Console banner will not be printed at telnet. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27
  • Cisco 4506-E | Software Guide - Page 414
    line: Console> (enable) sm3 Mod Slot Ports Module-Type Model Sub Status 33 6 1000BaseX Ethernet WS-X4306 no ok Mod Module-Name Serial-Num 3 JAB024000YY Mod MAC-Address(es) Hw Fw Sw 27-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration
  • Cisco 4506-E | Software Guide - Page 415
    task in privileged mode: Step 1 Step 2 Task Define an IP alias on the switch. Verify the currently defined IP aliases. Command set ip alias name ip_addr show ip alias [name] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27-7
  • Cisco 4506-E | Software Guide - Page 416
    you configure a permanent ARP by using the set arp permanent command, the ARP entry is retained even after a system reset. Because most hosts support dynamic (enable) 27-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 417
    to determine which gateway to use to forward IP traffic. In releases prior to software release 5.1, the switch always uses the classful subnet mask for IP routing table entries. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27-9
  • Cisco 4506-E | Software Guide - Page 418
    system will reset in 30 minutes and return to the previous configuration. Scheduling a Reset at a Specific Time You can specify an absolute time and date at which day. 27-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 419
    40 minutes). Console> (enable) This example shows how to schedule a reset at a specific time and include a reason for the reset: Console> (enable) reset at 23:00 redundant supervisor engine. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-
  • Cisco 4506-E | Software Guide - Page 420
    > (enable) write tech-support 172.20.32.10 techsupport.txt Upload tech-report to techsupport.txt on 172.20.32.10 (y/n) [n]? y / Finished network upload. (67784 bytes) Console> (enable) 27-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 421
    How Power Management Works on the Catalyst 4006 Switch, page 28-6 • Power Consumption for Modules, page 28-9 • Migrating a Supervisor Engine II from a Catalyst 4006 Switch to a Catalyst 4500 Series Switch, page 28-10 • Understanding How Inline Power Works, page 28-11 • Configuring Power Management
  • Cisco 4506-E | Software Guide - Page 422
    , the power supplies in the Catalyst 4500 series switch are set to redundant mode. • Combined mode-Uses the power from all installed power supplies to support the power requirements of the switch configuration. Combined mode has no power redundancy; if a power supply fails, one or more modules might
  • Cisco 4506-E | Software Guide - Page 423
    supplies, choose a power supply that can support the switch configuration. • When using variable power supplies, choose a power supply that supplies enough power so that the chassis and inline power requirements are less than the maximum available power for the chassis and inline power for the power
  • Cisco 4506-E | Software Guide - Page 424
    section describes the power-management limitations for the Catalyst 4500 series switches. Note To compute the power requirements and verify that your system has enough power, add the power that is consumed by the supervisor engine(s), the fan trays, and the installed modules (including the inline
  • Cisco 4506-E | Software Guide - Page 425
    the power requirements for the installed modules exceed the power that is provided by the power supplies, the switch displays this message: Insufficient power available for the current chassis configuration. • If you try to insert additional modules that exceed the power of the power supplies into
  • Cisco 4506-E | Software Guide - Page 426
    W and the fan tray uses 25 W. The total load for the modules, the supervisor engine, and the fan cannot total more than the power that is supplied by the power supply. The 1+1 redundancy mode might not support a fully loaded chassis. You may need to leave one slot of the chassis empty. An attempt
  • Cisco 4506-E | Software Guide - Page 427
    the 1+1 redundancy mode in the Catalyst 4006 switch: • To compute the power requirements and verify that your system has enough power, add up the power that is consumed by the supervisor engine, the fan tray, and the installed modules. See the "Power Consumption for Modules" section on page 28-9 for
  • Cisco 4506-E | Software Guide - Page 428
    mode for either a 400 W or 650 W power supply. • WS-X4013 supervisor engine-110 W • Five 48-port 100BASE-FX modules in slots 2 through 6-120 W each (600 W total) • Fan tray-25 W 28-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 429
    and 4000 Series Components Module Supervisor Engine II Catalyst 4003 and 4006 fan tray Catalyst 4503 fan tray Catalyst 4506 fan tray Catalyst 4003 and 4006 switch backplane Catalyst 4503 switch backplane Catalyst 4506 switch backplane 6-port 1000BASE-X (GBIC) Gigabit Ethernet WS-X4306-GB 32-port
  • Cisco 4506-E | Software Guide - Page 430
    Migrating a Supervisor Engine II from a Catalyst 4006 Switch to a Catalyst 4500 Series Switch Chapter 28 Power Management Table 28-2 Power Consumption for Catalyst 4500 Series and 4000 Series Components (continued) Module 48-port 1000BASE-X Gigabit Ethernet WS-X4448-GB-LX 48-port Telco 10/100BASE
  • Cisco 4506-E | Software Guide - Page 431
    Switch Components Supporting Inline Power Switch Chassis Catalyst 4006 Catalyst 4503 Catalyst 4506 Modules WS-X4148-RJ45V WS-X4148-RJ45V Power Supplies Catalyst 4000 Series Power Entry Module (PEM) 1300 W AC 2800 W AC 1400 W DC You can configure the switch to stop supplying power to the powered
  • Cisco 4506-E | Software Guide - Page 432
    with the actual power requirement to the supervisor engine. The supervisor engine then decreases the allocated power to the required amount if the port is set to Auto mode. 28-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 433
    Cisco high-power powered device Cisco Aironet 1200 Access Point with 802.11a and 802.11b radio installed Required Power (W) 6.3 7 15.4 11 Wall-Powered Phones When a wall-powered phone is present on a switching module port, the switching module cannot detect its presence. The supervisor engine
  • Cisco 4506-E | Software Guide - Page 434
    Configuring Power Management Chapter 28 Power Management Phone Detection Summary Figure 28-1 shows how the system detects a phone that is connected to a Catalyst 4006 switch or a Catalyst 4500 series switch port. Figure 28-1 Power Detection Summary Catalyst Switch Inline power switching module
  • Cisco 4506-E | Software Guide - Page 435
    15.400 Watts (0.30 Amps @50V) Module Total Allocated Max H/W Supported Max H/W Supported To Module (Watts) Per Module (Watts) Per Port (Watts 2 31.00 836.00 15.400 3 31.00 836.00 15.400 DC Power supplies are configured for 2500Watts DC input Power Budget is : 1 supply Power Available to the System
  • Cisco 4506-E | Software Guide - Page 436
    2 Task Set the power budget for the Catalyst 4006 switch. Verify the power budget and the current power usage for the switch. Command set power budget {1 | 2} show environment power 28-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 437
    Type PS2-Type PWR-C45-2800AC PWR-C45-1000AC Modem Baud Traffic Peak Peak-Time disable 9600 0% 0% Fri May 31 2002, 10:24:04 Power Capacity of the Chassis: 1 supply 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-17
  • Cisco 4506-E | Software Guide - Page 438
    Configuring Inline Power Chapter 28 Power Management System Name System Location System Contact CC Switch# Migrating a Supervisor Engine II from a Catalyst 4006 Switch to a Catalyst 4500 Series Switch To migrate your supervisor engine from a Catalyst 4006 switch to a Catalyst 4503 or
  • Cisco 4506-E | Software Guide - Page 439
    the power status for modules and individual ports, perform this task in normal mode: Task Display the power status for individual ports. Command show port inlinepower [mod[/port]] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 440
    Cisco None cisco Port Maximum Power mWatt mA @42V 6/1 5200 123 Console> (enable) Actual Consumption mWatt mA @42V 5000 119 absentCounter ------------0 OverCurrent ----------0 28-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 441
    any 10/100 or 10/100/1000 switching module. Table 29-1 Catalyst 4500 Series Components Supporting Inline Power Switch Chassis Catalyst 4006 Catalyst 4503 Catalyst 4506 Modules WS-X4148-RJ45V1 WS-X4148-RJ45V Power Supplies Catalyst 4000 Family Power Entry Module (PEM) 1300 W AC 2800 W AC 1400
  • Cisco 4506-E | Software Guide - Page 442
    IP Phones Chapter 29 Configuring VoIP Overview of IP Phones Catalyst 4000, 4500, 2926G, or 2926 series switches can connect to an IP Phone and carry IP voice traffic. If necessary, the switch can supply electrical power to the circuit connecting it to an IP Phone. Cisco classifies three types of
  • Cisco 4506-E | Software Guide - Page 443
    VLANs" section on page 10-13. • Configure inline power if necessary. The Catalyst 4500 series switch can sense if it is connected to a Cisco IP Phone. The Catalyst 4006 or Catalyst 4500 series switch can supply inline power to an IP Phone if there is no power on the circuit. An IP Phone can also
  • Cisco 4506-E | Software Guide - Page 444
    Configuring VoIP on a Switch Chapter 29 Configuring VoIP 29-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 445
    the command-line interface (CLI) on the Catalyst enterprise LAN switches. Note For complete syntax and usage information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. Note For information on configuring 802.1x
  • Cisco 4506-E | Software Guide - Page 446
    . The user is allowed only a specific number of attempts to successfully log in to the switch. If the user fails to authorize the password, the system delays any subsequent accesses and captures the user ID and the IP address of the station in the syslog and in the SNMP trap. You can configure the
  • Cisco 4506-E | Software Guide - Page 447
    When you send a service request that requires privileged access When you request privileged or restricted services, TACACS+ encrypts your user password information using the MD5 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-3
  • Cisco 4506-E | Software Guide - Page 448
    that is used to encrypt RADIUS packets • Specify the RADIUS server timeout interval • Specify the RADIUS retransmit count • Specify the RADIUS server deadtime interval 30-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 449
    services. A credential for a network service. When issued from the KDC, this credential is encrypted with the password that is shared by the network service and the KDC and with the user's TGT. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 450
    the switch. This ensures that the user does not need to get another TGT in order to use another network service from the switch. Figure 30-1 illustrates the Kerberos Telnet connection process. 30-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 451
    behalf of the login client. However, the user password transfers, in clear text, from the login client to the switch. Note You can launch a non-Kerberized login through a modem or terminal server through the inband management port. Telnet does not support non-Kerberized login. When you launch a non
  • Cisco 4506-E | Software Guide - Page 452
    Enabled Disabled Disabled Disabled None specified 3 times 5 sec Disabled Disabled Disabled None specified Port 1812 None specified 5 sec 0 (servers not marked dead) 2 times 30-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 453
    . Local user accounts must contain at least one alphabetic character. Configuring Login Authentication The next two sections describe how to configure login authentication on the switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 454
    enabled(primary) enabled(primary) attempt limit 3 3 lockout timeout (sec) disabled disabled Console> (enable) Http Session disabled disabled disabled enabled(primary) - 30-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 455
    local enabled(primary) enabled(primary) attempt limit 5 5 lockout timeout (sec) 50 50 Console> (enable) Http Session disabled disabled disabled enabled(primary) - 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-11
  • Cisco 4506-E | Software Guide - Page 456
    Session Telnet Session tacacs disabled disabled radius disabled disabled kerberos disabled disabled local enabled(primary) enabled(primary) Console> (enable) 30-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 457
    password on the switch: Console> (enable) set enablepass Enter old password: Enter new password: Retype new password: Password changed. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 458
    Steps 3 through Step 7 within 30 seconds of a power cycle or the recovery will fail. If you have lost both the login and enable passwords, repeat the process for each password. 30-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 459
    password captain privilege 15 Added local user picard. Console> (enable) show localusers Local User Authentication: disabled Username Privilege Level --------- picard 15 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration
  • Cisco 4506-E | Software Guide - Page 460
    user account, enable local user authentication, and verify the configuration: Console> (enable) set localuser authentication enable Local User disabled enabled(primary) - 30-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 461
    how to disable local user authentication for the switch and how to verify the configuration: Console> (enable) clear [primary] Verify the TACACS+ configuration. show tacacs 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-17
  • Cisco 4506-E | Software Guide - Page 462
    used only on console or Telnet connections. If you are using both RADIUS and TACACS+, you can enter the primary keyword to force the switch to try TACACS+ authentication first. 30-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 463
    the TACACS+ key and verify the configuration: Console> (enable) set tacacs key Secret_TACACS_key The tacacs key has been set to Secret_TACACS_key. Console> (enable) show tacacs 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-19
  • Cisco 4506-E | Software Guide - Page 464
    how to set the number of login attempts and verify the configuration: Console> (enable) set tacacs attempts 5 Tacacs number of attempts set to 5. Console> (enable) show tacacs 30-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 465
    example shows how to disable TACACS+ directed request: Console> (enable) set tacacs directedrequest disable Tacacs direct request has been disabled. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-21
  • Cisco 4506-E | Software Guide - Page 466
    servers from the configuration. Verify the TACACS+ server configuration. show tacacs This example shows how to clear a specific TACACS+ server from the configuration: Console> ( . 30-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 467
    specify the destination UDP port to use on the server. Verify the RADIUS server configuration. Command set radius server ip_addr [auth-port port_number] [primary] show radius 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-23
  • Cisco 4506-E | Software Guide - Page 468
    RADIUS server, See the Note on Table 30-2 on page 30-25 for and assign a password to that user. additional information. Verify the RADIUS configuration. show authentication 30-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 469
    log in to the Catalyst 4500 series switch with your assigned username and password (john/hello), you can enter enable mode using the password that is assigned to the $enab15$ user. If your RADIUS server does not support the $enab15$ username, you can set the service-type attribute (attribute 6) to
  • Cisco 4506-E | Software Guide - Page 470
    Key: Radius Retransmit: Radius Timeout: 0 minutes Secret_RADIUS_key 2 10 seconds Radius-Server Status 172.20.52.3 primary Console> (enable) Auth-port -----------1812 30-26 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 471
    server. If you configure only one RADIUS server, or if all of the configured servers are marked dead, the dead time is ignored because there are no alternate servers available. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-27
  • Cisco 4506-E | Software Guide - Page 472
    by default. Note Software release 7.5(1) supports only the framed-IP address (Attribute configuration. Command set radius attribute [number | name] include-in-access-req [enable | disable] show radius 30-28 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 473
    To clear the RADIUS key, perform this task in privileged mode: Step 1 Step 2 Task Clear the RADIUS key. Verify the RADIUS configuration. Command clear radius key show radius 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-29
  • Cisco 4506-E | Software Guide - Page 474
    (enable) show authentication Login Authentication tacacs radius local Console Session disabled disabled enabled(primary) Telnet Session disabled disabled enabled(primary) 30-30 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 475
    Enable Kerberos authentication. Step 2 Verify the configuration. Command set authentication login kerberos enable [all | console | http | telnet] [primary] show authentication 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-31
  • Cisco 4506-E | Software Guide - Page 476
    to the KDC in a specified Kerberos realm, perform this task in privileged mode: Task Define the default realm for the switch. Command set kerberos local-realm kerberos-realm 30-32 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 477
    - 750 Console> (enable) Console> (enable) clear kerberos server CISCO.COM 187.0.2.1 750 Kerberos Realm-Server-Port entry CISCO.COM-187.0.2.1-750 deleted Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-33
  • Cisco 4506-E | Software Guide - Page 478
    can enter the SRVTAB directly into the switch. set kerberos srvtab entry kerberos-principal principal-type timestamp key-version number key-type key-length encrypted-keytab 30-34 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 479
    enable credentials forwarding, configure the switch to forward user TGTs when they authenticate from the switch to Kerberized remote hosts on the network using Kerberized Telnet. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30
  • Cisco 4506-E | Software Guide - Page 480
    SRVTAB Entries Srvtab Entry 1:host/[email protected] 0 933974942 1 1 8 00?91:107:423=:;9 Console> (enable) This example shows how to configure the switch so that Kerberos clients are mandatory for users to authenticate to other network services: Console> (enable) set kerberos clients
  • Cisco 4506-E | Software Guide - Page 481
    that the switch shares with the KDC so that when the show kerberos command is executed, the secret key is not displayed in clear text. The key length should be eight characters or less. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 482
    Kerberos SRVTAB Entries Srvtab Entry 1:host/[email protected] 0 933974942 1 1 8 12151>
  • Cisco 4506-E | Software Guide - Page 483
    Entries Srvtab Entry 1:host/[email protected] 0 932423923 1 1 8 03;;5>00>50;0=0=0 Srvtab Entry 2:host/[email protected] 0 933974942 1 1 8 kerberos creds 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-39
  • Cisco 4506-E | Software Guide - Page 484
    the switch for all Telnet connections. When Workstation A attempts to connect to the switch, the user is challenged for a TACACS+ username and password. Only telnet session. 30-40 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 485
    the authorization feature is enabled for commands, the user must supply a valid username and password pair to execute certain commands. You can require authorization for all commands or for configuration (enable mode) commands only. When a user enters a command, the authorization server receives the
  • Cisco 4506-E | Software Guide - Page 486
    if authentication succeeds. If you have Administrative/Shell (6) Service-Type access, the NAS authenticates you and logs you in to privileged mode if authentication succeeds. 30-42 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 487
    on page 30-25 for more information on the key setup. Configuring TACACS+ Authorization The next two sections describe how to configure TACACS+ authorization on the switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-43
  • Cisco 4506-E | Software Guide - Page 488
    shows how to verify the configuration: Console> (enable) show authorization Telnet: ------- Primary Fallback exec: tacacs+ deny enable: tacacs+ deny commands: 30-44 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 489
    Telnet connections and how to verify the configuration: Console> (enable) set authorization enable disable both Successfully disabled enable authorization. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-45
  • Cisco 4506-E | Software Guide - Page 490
    request with the TACACS+ daemon. The TACACS+ daemon determines if the user is authorized to use the feature and sends a response either executing the command or denying access. 30-46 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 491
    : config: tacacs+ all: - Console> (enable) Fallback -------- deny deny deny - Understanding How Accounting Works The following sections describe how accounting works. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-47
  • Cisco 4506-E | Software Guide - Page 492
    , type of service, and traffic statistics). • Stop records-Include complete information of the event (when the event started, its duration, type of service, and traffic statistics). 30-48 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 493
    zero duration, so only stop records are generated for command accounting. No users are associated with system events; therefore, the start-stop option in -port -----------1812 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-49
  • Cisco 4506-E | Software Guide - Page 494
    Suppressing Accounting You can configure the system to suppress accounting when an unknown user with no username accesses the switch by using the set accounting the key setup. 30-50 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 495
    suppress accounting of unknown users: Console> (enable) set accounting suppress null-username enable Accounting will be suppressed for user with no username. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-51
  • Cisco 4506-E | Software Guide - Page 496
    accounting of configuration commands. Disable suppression of information for unknown users. Verify the accounting configuration. Command set for exec events. Console> (enable) 30-52 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 497
    event. Accounting information is gathered at the conclusion of the event. Accounting is suspended for unknown users and the system is updated periodically every 120 minutes. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-53
  • Cisco 4506-E | Software Guide - Page 498
    actions on tty288091924, User (null) Priv 0 Overall Accounting Traffic: Starts Stops Active Exec 0 0 0 Connect 0 0 0 Command 0 0 0 System 1 0 0 Console> (enable) 30-54 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 499
    access to the command-line interface (CLI) on the Catalyst 4000 family switches, see Chapter 30, "Configuring the Switch Access Using AAA." 802.1x authenticates each user device that is connected to a switch port before making available any services that are offered by the switch or the LAN. Until
  • Cisco 4506-E | Software Guide - Page 500
    When the switch receives frames from the authentication server, the server's frame header is removed, leaving the EAP frame, which is then encapsulated for Ethernet and sent to the host. 31-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 501
    /OTP EAP-Success RADIUS Access-Request RADIUS Access-Challenge RADIUS Access-Request RADIUS Access-Accept Port Authorized EAPOL-Logoff Port Unauthorized 79598 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-3
  • Cisco 4506-E | Software Guide - Page 502
    not support 802.1x is connected to an unauthorized 802.1x port, the switch requests any authentication exchange required. The port The switch cannot provide authentication services to Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 503
    RADIUS for authentication, particularly when the authentication server is located remotely, because RADIUS has extensions that support encapsulation of EAP frames built into it. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-5
  • Cisco 4506-E | Software Guide - Page 504
    RADIUS-supplied VLAN received by the first authenticated user. • When an 802.1x-configured module goes down, the server clears all Enhanced Address Recognition Logic (EARL) entries for 802.1x ports. 31-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 505
    shutdown timout period Default Value Force-Authorized Disabled Enable 60 sec 30 sec 30 sec 30 sec 2 frames 3600 sec Disabled 0 seconds 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-7
  • Cisco 4506-E | Software Guide - Page 506
    authentication, you can configure individual ports for 802.1x authentication if they meet the specific requirements that are required by 802.1x that were previously configured for it. 31-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 507
    4/1 Port Auth-State BEnd-State Port-Control Port-Status 4/1 connecting finished auto unauthorized Port Multiple-Host Re-authentication 4/1 disabled disabled 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-9
  • Cisco 4506-E | Software Guide - Page 508
    to port 1 on module 4: Console> (enable) set port dot1x 4/1 re-authenticate Port 4/1 re-authenticating... dot1x re-authentication successful... dot1x port 4/1 authorized. 31-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 509
    to set the quiet period to 45 seconds: Console> (enable) set dot1x quiet-period 45 dot1x quiet-period set to 45 seconds. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-11
  • Cisco 4506-E | Software Guide - Page 510
    to set the back-end authenticator-to-host retransmission time for the EAP-request frame to 15 seconds: Console> (enable) set dot1x supp-timeout 15 dot1x supp-timeout set to 15 seconds. 31-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 511
    If a port is shut down because of a security violation, you must either manually reenable it or configure the shutdown timeout period after which the port can be enabled again. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-13
  • Cisco 4506-E | Software Guide - Page 512
    the back-end authenticator to the host, perform this task in privileged mode: Task Set the back-end authenticator-to-host frame retransmission number. Command set dot1x max-req count 31-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 513
    > (enable) set trace dot1x 5 DOT1X tracing set to 5 Warning!! Turning on trace may affect the operation of the system. Use with caution. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-15
  • Cisco 4506-E | Software Guide - Page 514
    the different types of EAP frames that are transmitted and received by the authenticator on a specific port on a specific module. Command show port dot1x statistics mod/port 31-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 515
    max-req 2 quiet-period 60 seconds re-authperiod 3600 seconds server-timeout 30 seconds supp-timeout 30 seconds tx-period 30 seconds 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-17
  • Cisco 4506-E | Software Guide - Page 516
    Configuring 802.1x Authentication on the Switch Chapter 31 Configuring 802.1x Authentication 31-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 517
    sections describe how the boot configuration works on the Catalyst 4500 series, 2948G, and 2980G switches. Understanding the Boot Process The boot process involves two software images: ROM monitor and supervisor engine system code. When you power up or reset the switch, the ROM-monitor code is
  • Cisco 4506-E | Software Guide - Page 518
    upon switch power-up, reset, or when a fatal exception occurs. The system enters ROM-monitor mode if the switch does not find a valid system image, if the NVRAM configuration is corrupted, or if the configuration register is set to enter ROM-monitor mode. From ROM-monitor mode, you can manually load
  • Cisco 4506-E | Software Guide - Page 519
    to configure the switch. If multiple valid configuration files are specified, each configuration file is executed in the order in which it appears in the CONFIG_FILE environment variable. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 520
    environment variable (the default). Note We recommend that you use only the rommon and system options to the set boot config-register boot command. 32-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 521
    config-register auto-config recurring Configuration register is 0x1820 ignore-config: disabled auto-config: recurring console baud: 9600 boot: the ROM monitor Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 32-5
  • Cisco 4506-E | Software Guide - Page 522
    system flash bootflash:cat4000.6-1-1.bin prepend BOOT variable = bootflash:cat4000.6-1-1.bin,1;bootflash:cat4000.5-1-1.bin,1; bootflash:cat4000.4-5-2.bin,1; Console> (enable) 32-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 523
    supervisor engine and switch type): Task Set the list of configuration files to add to the CONFIG_FILE environment variable. Command set boot auto-config device:filename[;device:filename...] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 524
    :4003_1_noc.cfg Configuration register is 0x12f ignore-config: disabled auto-config: recurring console baud: 9600 boot: image specified by the boot system commands Console> (enable) 32-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 525
    Software Images to the Switch Using TFTP The following sections describe how to download system software images to the switch supervisor engine and to intelligent modules. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-1
  • Cisco 4506-E | Software Guide - Page 526
    a power interruption (or other problem) switch downloads the image file from the TFTP server, and the image is copied to the bootflash. Note The switch remains operational while the image downloads. 33-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 527
    supervisor engine software image: Console> (enable) show version 1 Mod Port Model Serial # Versions 1 0 WS Version 3.1(2) Copyright (c) 1994-1997 by cisco Systems, Inc. Presto processor with 32768 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 528
    images from a switch to a TFTP server. For more information on working with system software image files on the Flash file system, see Chapter 34, "Working With the Flash File System." 33-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 529
    Images to the Switch Using rcp The following sections describe how to download system software images to the switch supervisor engine and to intelligent modules using rcp. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33
  • Cisco 4506-E | Software Guide - Page 530
    Flash device (bootflash). The switch downloads the image file from the rcp server and copies the image to bootflash. Note The switch remains operational while the image downloads. 33-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 531
    executing command: "boot bootflash:cat4000.6-1-1.bin" CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCCCCCCCCCCCCCCC Uncompressing file 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-7
  • Cisco 4506-E | Software Guide - Page 532
    images from a switch to an rcp server. For more information on working with system software image files on the Flash file system, see Chapter 34, "Working With the Flash File System." 33-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 533
    to have access to the console serial port. If done improperly, the system can be rendered unbootable. It will then have to be returned to Cisco for repair. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-9
  • Cisco 4506-E | Software Guide - Page 534
    specified by the boot system commands." If the last line in the output of the show boot command does not say "boot:image specified by the boot system commands," go to Step 6. 33-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 535
    the boot process by performing a reset, power cycle, OIR of the supervisor engine,and so on, for at least 5 minutes. If the process is not allowed to complete, you might damage the switch and have to return it to Cisco for repair. Upgrading the ROMMON may require up to 5 minutes because the
  • Cisco 4506-E | Software Guide - Page 536
    , the following system is running ROMMON version 6.1(4): Console> (enable) show version WS-C4003 Software, Version NmpSW:5.5(8) Copyright (c) 1995-2001 by Cisco Systems, Inc. 33-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 537
    compiled on May 24 2001, 18:39:50 System Bootstrap Version:6.1(4) Hardware Version:1.0 Model:WS-C4003 Serial #:xxxxxxxxx . . . Console > (enable) Step 10 Enter the clear . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-13
  • Cisco 4506-E | Software Guide - Page 538
    Upgrading the ROM Monitor Chapter 33 Working with System Software Images 33-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 539
    used in this chapter, see Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. The Flash file system provides a number of useful commands to help you manage system image and configuration files. The Catalyst 4500 series, 2948G, and 2980G switches have one Flash device
  • Cisco 4506-E | Software Guide - Page 540
    mode. Because the text configuration file in most cases requires less space, NVRAM is a good place to store the file. If the text file exceeds NVRAM space, it can also be stored to Flash memory. When the switch is operating in text file configuration mode, most user settings are not immediately
  • Cisco 4506-E | Software Guide - Page 541
    With the Flash File System Working With the Flash File System on the Switch Task Display a list of all files on a Flash device, including domain corp.com end Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 34-3
  • Cisco 4506-E | Software Guide - Page 542
    [bootflash]? Name of file to copy to [dns-config.cfg]? 9932056 bytes available on device slot0, proceed (y/n) [n]? y / File has been copied successfully. Console> (enable) 34-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 543
    the squeeze command on a Flash device, you cannot restore files that you deleted from that device before you entered the squeeze command. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 34-5
  • Cisco 4506-E | Software Guide - Page 544
    Working With the Flash File System on the Switch Chapter 34 Working With the Flash File System To delete files from bytes available (3231989 bytes used) Console> (enable) 34-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 545
    cat4000.4-4-1.bin CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCCCCCCCCCCC File bootflash:cat4000.4-4-1.bin verified OK Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 34-7
  • Cisco 4506-E | Software Guide - Page 546
    Working With the Flash File System on the Switch Chapter 34 Working With the Flash File System 34-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 547
    the set password and set enablepass commands. Enter a blank line after the set password and set enablepass commands. The passwords are saved in the configuration file as clear text. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 548
    corp.com end Configuring the Switch Using a File in Flash Memory You can configure the switch using a file stored in Flash memory. The procedure varies depending on your switch platform. 35-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 549
    Downloading Configuration Files from a TFTP Server The following sections describe how to download a configuration file on a TFTP server to the running configuration or to a Flash device. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 550
    ) Uploading Configuration Files to a TFTP Server The next two sections describe how to upload the running configuration or a configuration file stored on a Flash device to a TFTP server. 35-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 551
    files using rcp, you do not need to create a server for file distribution, as you do with TFTP. You need only to 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 35-5
  • Cisco 4506-E | Software Guide - Page 552
    The configuration file downloads and the commands are executed as the file is parsed line-by-line. This example shows how to configure a switch using a configuration file enable 35-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 553
    copy to []? cat4000_config.cfg Upload configuration to rcp:cat4000_config.cfg, (y/n) [n]? y Configuration has been copied successfully. Console> (enable) Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 35-7
  • Cisco 4506-E | Software Guide - Page 554
    on a specific module: Console> (enable) clear config 2 This command will clear module 2 configuration. Do you want to continue (y/n) [n]? y Module 2 configuration cleared. Console> (enable) 35-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 555
    describes the Backplane Channel Module and the switch acceleration feature that are supported on the Catalyst 4000 family supervisor engine. This chapter consists of these sections: • Understanding How Switch Acceleration Works, page 36-1 • Configuring Switch Acceleration on the Switch, page 36
  • Cisco 4506-E | Software Guide - Page 556
    all SEs; there are no Gigabit Ethernet uplink port connections. This mode requires that the Backplane Channel Module is installed and that switch acceleration is configured on the supervisor engine. Configuring Switch Acceleration on the Switch By default, switch acceleration is disabled on the
  • Cisco 4506-E | Software Guide - Page 557
    by providing multilink load balancing between the switch engines. The Backplane Channel Module also allows you to retain the Gigabit Ethernet uplinks on the supervisor engine. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 36-3
  • Cisco 4506-E | Software Guide - Page 558
    disruption, disable the Backplane Channel Module for a short time, and then remove it. You do not need to configure the Backplane Channel Module because it is enabled by default. 36-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 559
    When the switch first initializes, the network is not connected until the initialization completes. Messages that are redirected to a syslog server are delayed up to 90 seconds. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37
  • Cisco 4506-E | Software Guide - Page 560
    pruning Quality of Service RADIUS authentication Remote Monitoring Port security Simple Network Management Protocol Spanning-Tree Policy Server VLAN Trunking Protocol 37-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 561
    :42 %SYS-5-MOD_OK:Module 6 is online 1999 Apr 16 10:02:27 %PAGP-5-PORTTOSTP:Port 3/1 joined bridge port 3/1 1999 Apr 16 10:02:28 %PAGP-5-PORTTOSTP:Port 3/2 joined bridge port 3/2 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37
  • Cisco 4506-E | Software Guide - Page 562
    01:42 %SYS-5-MOD_OK:Module 6 is online 1999 Apr 16 10:02:27 %PAGP-5-PORTTOSTP:Port 3/1 joined bridge port 3/1 1999 Apr 16 10:02:28 %PAGP-5-PORTTOSTP:Port 3/2 joined bridge port 3/2 37-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 563
    1 Step 2 Task Change the logging enable state for a Telnet session. Verify the logging configuration. Command set logging session {enable | disable} show logging [noalias] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-5
  • Cisco 4506-E | Software Guide - Page 564
    enable the time stamp display on system logging messages: Console> (enable) set logging timestamp enable System logging messages timestamp will be enabled. Console> (enable) 37-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 565
    management user.debug /var/log/myfile.log Note There must be five tab characters between user.debug and /var/log/myfile.log. Refer to entries in the /etc/syslog.conf file for further examples. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 566
    5 System logging server severity set to Console> (enable) set logging server enable System logging messages will be sent to the configured syslog servers. Console> (enable) 37-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 567
    facility: LOCAL5 server severity: notifications(5) Facility Default Severity Current Session Severity cdp 3 3 drip 2 5 dtp 5 5 dvlan 2 5 earl 2 5 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-9
  • Cisco 4506-E | Software Guide - Page 568
    :14 %SYS-5-MOD_OK:Module 2 is online 1999 Apr 16 08:41:15 %PAGP-5-PORTTOSTP:Port 2/1 joined bridge port 2/1 1999 Apr 16 08:41:15 %PAGP-5-PORTTOSTP:Port 2/2 joined bridge port 2/2 37-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 569
    ) %PAGP-5-PORTFROMSTP:Port 3/2 left bridge port 3/2 %PAGP-5-PORTTOSTP:Port 3/1 joined bridge port 3/1-2 %PAGP-5-PORTTOSTP:Port 3/2 joined bridge port 3/1-2 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-11
  • Cisco 4506-E | Software Guide - Page 570
    Configuring System Message Logging on the Switch Chapter 37 Configuring System Message Logging 37-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 571
    are queried. Default DNS Configuration Table 38-1 shows the default DNS configuration. Table 38-1 Default DNS Configuration Feature DNS enable state Default Value Disabled 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 38-1
  • Cisco 4506-E | Software Guide - Page 572
    ip dns DNS is currently enabled. The default DNS domain name is: corp.com DNS name server dns_serv2 dns_serv1 dns_serv3 Console> (enable) status ------- primary 38-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 573
    DNS configuration. Command set ip dns disable show ip dns [noalias] This example shows how to disable DNS on the switch: Console> (enable) set ip dns disable DNS is disabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 574
    Configuring DNS on the Switch Chapter 38 Configuring DNS 38-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 575
    and the time that other time-specific events occur. An NTP server must be accessible by the client switch. NTP uses the User Datagram Protocol (UDP) as its stratum is lower. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-1
  • Cisco 4506-E | Software Guide - Page 576
    Cisco's implementation of NTP does not support stratum 1 service; it is not possible to connect to a radio or atomic clock. We recommend that you obtain the time service the switch). 39-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486
  • Cisco 4506-E | Software Guide - Page 577
    3 Task Specify the IP address of the NTP server. Enable NTP client mode. Verify the NTP configuration. Command set ntp server ip_addr set ntp client enable show ntp [noalias] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-3
  • Cisco 4506-E | Software Guide - Page 578
    client and authentication modes on the switch, and verify the configuration: Console> (enable) set ntp server 172.20.52.65 key 879 NTP server 172.20.52.65 with key 879 added. 39-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 579
    clock back one hour at 2:00 a.m. on the last Sunday in October. You can also explicitly specify start and end dates and times and whether the time adjustment recurs every year. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-5
  • Cisco 4506-E | Software Guide - Page 580
    ending 14:00pm Saturday of the fourth week of August. Console> (enable) To enable the daylight saving time clock adjustment to a nonrecurring specific End : Mon Jan 21 2002, 05:30:00 39-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-
  • Cisco 4506-E | Software Guide - Page 581
    the NTP server table: Console> (enable) clear ntp server 172.16.64.10 NTP server 172.16.64.10 removed. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-7
  • Cisco 4506-E | Software Guide - Page 582
    disable show ntp [noalias] This example shows how to disable NTP client mode on the switch: Console> (enable) set ntp client disable NTP Client mode disabled Console> (enable) 39-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 583
    ATM switch processor Asynchronous Transfer Mode bridge protocol data unit Bridge Relay Function broadcast and unknown server content-addressable memory column address strobe constant bit rate 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 584
    Cisco Group Management Protocol command-line interface Common Open Policy Service class of service Cyclic Redundancy Check Concentrator Relay Function Data Country Code Digital Equipment Corporation domain-specific part format identifier Dynamic Host Configuration Protocol dynamic inter-switch
  • Cisco 4506-E | Software Guide - Page 585
    duplex International Code Designator Internet Control Message Protocol Initial Domain Part Internet Group Management Protocol Integrated Local Management Interface initial microprogram load Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-3
  • Cisco 4506-E | Software Guide - Page 586
    MBS MCP MIB MII Media Access Control Manufacturing Automation Protocol maximum burst size Master Communication Processor Management Information Base media-independent interface Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-4 78-15486-01
  • Cisco 4506-E | Software Guide - Page 587
    Hop Resolution Protocol Next Hop Server Network Management Processor Network-Network Interface network service access point Network Time Protocol nonvolatile random-access memory 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-5
  • Cisco 4506-E | Software Guide - Page 588
    module Point-to-Point Protocol permanent virtual circuit (or permanent virtual connection in ATM terminology) quality of service Remote Authentication Dial-In User Service row address strobe RAS-to-CAS delay Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 589
    Access Protocol Simple Network Management Protocol Switched Port Analyzer source-route bridging source-route transparent bridging Service-Specific Connection Oriented Protocol 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-7
  • Cisco 4506-E | Software Guide - Page 590
    Industry Association type-length value type of service Token Ring Bridge Relay Function Token Ring Concentrator User Datagram Protocol User-Network Interface Coordinated Universal Time Appendix A Acronyms Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 591
    Virtual Configuration Register virtual LAN VLAN Membership Policy Server virtual path identifier VLAN Query Protocol VLAN Trunking Protocol weighted random early detect Weighted Round Robin 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 592
    Appendix A Acronyms 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-10
  • Cisco 4506-E | Software Guide - Page 593
    duplex 4-5 speed 4-5 trunks 11-2 auxiliary VLANs configuring 10-13 dynamic VLAN membership 12-14 software support 10-5 B BackboneFast adding a switch (figure) 8-7 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-1
  • Cisco 4506-E | Software Guide - Page 594
    static routes and 27-9 Cisco Discovery Protocol See CDP Cisco Group Management Protocol See CGMP Cisco IP Phones sound quality 29-2 CiscoWorks2000 24-17 CIST 7-15 classification IN-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 595
    37-5 conventions, document xxvi CoS configuring default switch values 14-5 drop thresholds mapping 14-6 transmitting 14-3 Layer 2 CoS values 14-2 reverting to default 14-5 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-3
  • Cisco 4506-E | Software Guide - Page 596
    14-3 DTP non-Cisco devices and 11-3 overview 11-2 duplex mode Fast Ethernet 4-5 Dynamic Host Configuration Protocol See DHCP dynamic ports troubleshooting 12-11 dynamic port VLAN membership See VMPS Dynamic Trunking Protocol See DTP E enable mode, switch CLI 2-3 enable password recovering lost 30
  • Cisco 4506-E | Software Guide - Page 597
    configuration modes 34-2 setting default devices 34-1 verifying checksum 34-7 verifying file checksum 34-7 flow control configuring 5-8 overview 5-1 forward delay timer 7-44 frame classification 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
  • Cisco 4506-E | Software Guide - Page 598
    Gigabit Ethernet checking connectivity 5-10 configuring flow control 5-8 configuring port negotiation 5-9 default configuration 5-6 software requirements 15-18 IGMP filter match-action IN-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 599
    IP traceroutes executing 20-12 overview 20-12 ISL mapping 802.1Q VLANs 10-11 overview 11-1 supported switches (table) 11-3 isolated ports definition 10-16 IST MST regions 7-15 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-7
  • Cisco 4506-E | Software Guide - Page 600
    configuration guidelines 30-9 default configuration 30-8, 30-50 disabling 30-14 enabling 30-12 overview 30-2 password recovery 30-14 setting enable password 30-13 local user 2-8 IN-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78
  • Cisco 4506-E | Software Guide - Page 601
    20-1 configuring Ethernet 4-1, 19-1 configuring Fast Ethernet 4-1, 6-1, 19-1 configuring Gigabit Ethernet 5-1 configuring supervisor engine 3-1 designating on command line 2-7 Ethernet configuring 6-1 Fast Ethernet configuring 6-1 Gigabit Ethernet configuring 6-1 modules, switch fabric accelerator
  • Cisco 4506-E | Software Guide - Page 602
    39-7 specifying 39-3 NVRAM ignoring content at boot 32-6 setting configuration modes 34-2 O organization, document xxiii out-of-band management interface See me1 interface IN-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 603
    16 reconfirming VMPS 12-10 setting the debounce timer 4-6 speed 10/100 Fast Ethernet 4-4 port security configuring 16-1 to 16-12 clearing MAC addresses 16-5 guidelines for 16-3 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-11
  • Cisco 4506-E | Software Guide - Page 604
    setting EtherChannel 6-9 port VLAN priority configuring 7-27 power, inline 28-11, 29-3 power budget setting 28-16 power management Catalyst 4500 series 28-1, 28-6 Catalyst 4500 series power supplies 28-4 combined mode 28-2 configuring combined mode 28-3 configuring redundant mode 28-3 redundancy 28
  • Cisco 4506-E | Software Guide - Page 605
    flow (figure) 14-2 transmit queue overview 14-3 quality of service See QoS R RADIUS configuration guidelines 30-50 overview 30-48, 30-50 RADIUS accounting 25-1 supported MIB objects 25-2 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 606
    24-6 defining community strings 24-7 ifindex persistence feature 24-4 overview 24-5 setting access numbers for hosts 24-9 setting multiple SNMP community strings 24-8 IN-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 607
    -5, 33-9 switch acceleration 36-1 configuring 36-1, 36-2 switch CLI accessing 2-2 command aliases 2-7 designating IP addresses 2-8 designating IP aliases 2-8 designating MAC addresses 2-8 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release
  • Cisco 4506-E | Software Guide - Page 608
    reset scheduling 27-10 system status report generating 27-12 T TACACS+ accounting accounting events 30-48 configuration guidelines 30-50 creating accounting records 30-48 IN-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • Cisco 4506-E | Software Guide - Page 609
    -7 disabling VLAN 1 11-8 encapsulation types descriptions (table) 11-2 switch support matrix (table) 11-3 modes (table) 11-2 overview 11-1 possible configurations (table) 11-3 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-17
  • Cisco 4506-E | Software Guide - Page 610
    VLAN Membership Policy Server See VMPS VLANs allowed on trunk 11-6 assigning switch ports to 10-10 auxiliary 10-13 configuration guidelines 10-5 default configuration 10-4 deleting 10-12 designating on command line 2-7 Ethernet 10-6, 10-7 extended range 10-3, 10-5 in-band (sc0) interface assignment
  • Cisco 4506-E | Software Guide - Page 611
    9-2 modes client 9-2 off 9-3 server 9-2 transparent 9-3 monitoring 9-12 overview 9-1 pruning configuring 9-11 disabling 9-12 figure 9-4 overview 9-4 server, configuring 9-7 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-19
  • Cisco 4506-E | Software Guide - Page 612
    of extended range VLANs 10-3, 10-6 understanding 9-13 with private VLANs 10-18 VTP pruning configuring 9-11 disabling 9-12 overview 9-4 W write tech support command 27-12 IN-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435
  • 436
  • 437
  • 438
  • 439
  • 440
  • 441
  • 442
  • 443
  • 444
  • 445
  • 446
  • 447
  • 448
  • 449
  • 450
  • 451
  • 452
  • 453
  • 454
  • 455
  • 456
  • 457
  • 458
  • 459
  • 460
  • 461
  • 462
  • 463
  • 464
  • 465
  • 466
  • 467
  • 468
  • 469
  • 470
  • 471
  • 472
  • 473
  • 474
  • 475
  • 476
  • 477
  • 478
  • 479
  • 480
  • 481
  • 482
  • 483
  • 484
  • 485
  • 486
  • 487
  • 488
  • 489
  • 490
  • 491
  • 492
  • 493
  • 494
  • 495
  • 496
  • 497
  • 498
  • 499
  • 500
  • 501
  • 502
  • 503
  • 504
  • 505
  • 506
  • 507
  • 508
  • 509
  • 510
  • 511
  • 512
  • 513
  • 514
  • 515
  • 516
  • 517
  • 518
  • 519
  • 520
  • 521
  • 522
  • 523
  • 524
  • 525
  • 526
  • 527
  • 528
  • 529
  • 530
  • 531
  • 532
  • 533
  • 534
  • 535
  • 536
  • 537
  • 538
  • 539
  • 540
  • 541
  • 542
  • 543
  • 544
  • 545
  • 546
  • 547
  • 548
  • 549
  • 550
  • 551
  • 552
  • 553
  • 554
  • 555
  • 556
  • 557
  • 558
  • 559
  • 560
  • 561
  • 562
  • 563
  • 564
  • 565
  • 566
  • 567
  • 568
  • 569
  • 570
  • 571
  • 572
  • 573
  • 574
  • 575
  • 576
  • 577
  • 578
  • 579
  • 580
  • 581
  • 582
  • 583
  • 584
  • 585
  • 586
  • 587
  • 588
  • 589
  • 590
  • 591
  • 592
  • 593
  • 594
  • 595
  • 596
  • 597
  • 598
  • 599
  • 600
  • 601
  • 602
  • 603
  • 604
  • 605
  • 606
  • 607
  • 608
  • 609
  • 610
  • 611
  • 612

Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
Catalyst 4500 Series, Catalyst 2948G,
Catalyst 2980G Switches Software
Configuration Guide
Software Release 8.1
Customer Order Number: DOC-7815486=
Text Part Number: 78-15486-01