Cisco WS-C2950ST-24-LRE Software Guide
Cisco WS-C2950ST-24-LRE - Syst. 24PORT 2950-BASED LONG REACH Manual
 |
UPC - 746320751870
View all Cisco WS-C2950ST-24-LRE manuals
Add to My Manuals
Save this manual to your list of manuals |
Cisco WS-C2950ST-24-LRE manual content summary:
- Cisco WS-C2950ST-24-LRE | Software Guide - Page 1
4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide Software Release 8.1 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Customer Order Number - Cisco WS-C2950ST-24-LRE | Software Guide - Page 2
of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0304R) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide Copyright © 2000-2003, Cisco Systems, Inc. All rights reserved. - Cisco WS-C2950ST-24-LRE | Software Guide - Page 3
xxviii Obtaining Technical Assistance xxviii Cisco.com xxviii Technical Assistance Center xxix Obtaining Additional Publications and Information xxx Product Overview 1-1 Catalyst 4000 Series Switches 1-1 Catalyst 2948G Switch 1-2 Catalyst 2980G Switch 1-3 Supervisor Engine Software 1-3 Using the - Cisco WS-C2950ST-24-LRE | Software Guide - Page 4
Fast Ethernet Port Debounce Timers 4-6 Configuring errdisable State Ethernet and Fast Ethernet Port Timeout Periods 4-7 Checking Ethernet and Fast Ethernet Port Connectivity 4-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 iv 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 5
6-1 EtherChannel Overview 6-2 Understanding Frame Distribution 6-2 Hardware Support for EtherChannel 6-2 PAgP and LACP 6-2 EtherChannel Configuration EtherChannel Configuration Examples 6-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 v - Cisco WS-C2950ST-24-LRE | Software Guide - Page 6
Understanding How MST Works 7-14 Rapid Spanning Tree Protocol 7-16 MST-to-SST Interoperability 7-17 Common Spanning Tree 7-18 MST Instances 7-18 MST Configuration 7-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 vi 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 7
7-54 Configuring Spanning Tree BPDU Skewing 7-57 Configuring Spanning Tree PortFast, BPDU Guard, BPDU Filter, UplinkFast, BackboneFast, and Loop Guard 8-1 Understanding How PortFast Works 8-1 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 vii - Cisco WS-C2950ST-24-LRE | Software Guide - Page 8
VTP Version 1 and Version 2 Configuration 9-5 VTP Version 1 and Version 2 Configuration Guidelines 9-6 Configuring VTP Version 1 and Version 2 9-6 Configuring a VTP Server 9-7 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 viii 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 9
a Normal-Range Ethernet VLAN 10-7 Creating or Modifying an Extended-Range VLAN 10-9 Assigning Switch Ports to a VLAN 10-10 Mapping 802.1Q VLANs to ISL VLANs 10-11 Clearing Auxiliary VLANs 10-13 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 ix - Cisco WS-C2950ST-24-LRE | Software Guide - Page 10
Overview 11-1 Trunking Modes and Encapsulation Types 11-2 Trunking Support 11-3 802.1Q Trunk Restrictions 11-4 Default Trunk Configuration 11 Troubleshooting VMPS and Dynamic Port VLAN Membership 12-11 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 11
Troubleshooting VMPS 12-11 Troubleshooting Switch CoS Value 14-5 Mapping CoS Values to Transmit Queues and Drop Thresholds 14-6 Reverting to the Default CoS-to-Transmit Queue and Drop Threshold Mapping 14-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 12
QoS 14-7 Configuring Multicast Services 15-1 Understanding How Multicasting Works 15-1 Understanding Multicasting and Multicast Services Operation 15-1 Joining a Router Ports 15-17 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xii 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 13
16-3 Port Security Configuration Guidelines 16-3 Configuring Port Security on the Switch 16-3 Enabling Port Security 16-3 Setting the Maximum Number of Secure List Default Configuration 18-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xiii - Cisco WS-C2950ST-24-LRE | Software Guide - Page 14
Traceroute 20-12 Configuring CDP 21-1 Understanding How CDP Works 21-1 Default CDP Configuration 21-2 Configuring CDP on the Switch 21-2 Setting the CDP Global Enable State 21-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xiv 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 15
and Hardware Requirements 23-2 Default UDLD Configuration 23-2 Configuring UDLD on the Switch 23-3 Enabling UDLD Globally 23-3 Enabling UDLD on Individual Ports 23-4 SNMPv3 from an NMS 24-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xv - Cisco WS-C2950ST-24-LRE | Software Guide - Page 16
Configuring RMON 25-1 Understanding How RMON Works 25-1 Enabling RMON 25-2 Viewing RMON Data 25-2 Supported RMON and RMON2 MIB Objects 25-2 26 C H A P T E R Configuring Banner 27-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xvi 78-15486 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 17
Status Reports for Tech Support 27-12 Power Management 28-1 Understanding How Power Management Works on the Catalyst 4500 Series Switches 28-1 Power Management Overview 28-2 Understanding Power Management Modes 28-2 Available Power for Power Supplies 28-4 Power Management Limitations 28-4 1400 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 18
Power Status for Modules and Individual Ports 28-19 Configuring VoIP 29-1 Hardware and Software Requirements 29-1 Overview of IP Phones 29-2 Configuring VoIP on a Switch 29-3 Configuring Switch xviii Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 19
Ports 31-9 Setting and Enabling Automatic Reauthentication of the Host 31-10 Manually Reauthenticating the Host 31-10 Enabling Multiple Hosts 31-11 Disabling Multiple Hosts Default Values 31-15 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xix - Cisco WS-C2950ST-24-LRE | Software Guide - Page 20
Images to a TFTP Server 33-5 Downloading System Software Images to the Switch Using rcp 33-5 Understanding How rcp Software Image Downloads Work 33-6 Download Procedures 33-7 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xx 78-15486- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 21
Displaying Switch Acceleration Information 36-3 Backplane Channel Module 36-3 Configuring System Message Logging 37-1 Understanding How System Message Logging Works 37-1 System Log Message Format 37-3 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 22
How NTP Works 39-1 Default NTP Configuration 39-2 Configuring NTP on the Switch 39-2 Enabling NTP in Broadcast-Client Mode 39-2 Configuring NTP in D I X INDEX Acronyms A-1 xxii Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 23
Describes how to configure the spanning tree PortFast, BPDU Guard, BPDU PortFast, UplinkFast, and BackboneFast features. Filter, UplinkFast, BackboneFast, and Loop Guard 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xxiii - Cisco WS-C2950ST-24-LRE | Software Guide - Page 24
Remote Monitoring (RMON) on the switch. Configuring SPAN and RSPAN Describes how to configure the Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) on the switch. xxiv Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 25
following publications are available for the Catalyst enterprise LAN switches: • Catalyst 4000 Series Switch Installation Guide • Catalyst 4500 Series Switch Installation Guide • Catalyst 4912G Installation Guide • Catalyst 2948G and 2980G Installation Guide • Catalyst 4000 Family, 2948G, and 2980G - Cisco WS-C2950ST-24-LRE | Software Guide - Page 26
Catalyst 4912G switches. The Catalyst 4500 series includes the Catalyst 4503 and Catalyst 4506 switches. Command descriptions use these conventions: boldface font italic font [] {x | y | z} [x | y | z] string Commands, command options, and keywords are in boldface. Arguments for which you supply - Cisco WS-C2950ST-24-LRE | Software Guide - Page 27
Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Networking Products MarketPlace: http://www.cisco.com/en/US/partner/ordering/index.shtml 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 28
, and certification programs To obtain customized information and service, you can self-register on Cisco.com at this URL: http://tools.cisco.com/RPF/register/register.do xxviii Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 29
to help troubleshoot and resolve technical issues with Cisco products and technologies. To access the Cisco TAC website, go to this URL: http://www.cisco.com/tac All customers, partners, and resellers who have a valid Cisco service contract have complete access to the technical support resources on - Cisco WS-C2950ST-24-LRE | Software Guide - Page 30
the Cisco support services to which your company is entitled: for example, SMARTnet, SMARTnet Onsite, or Network Supported Accounts cisco.com/en/US/learning/le31/learning_recommended_training_list.html Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 31
Installation Guide. Table 1-1 describes the Catalyst 4000 series switches. Table 1-1 Catalyst 4000 Series and Catalyst 4500 Series Switches Product Number Catalyst 4000 Series WS-C4003 WS-C4006 Chassis Description Catalyst 4003 • Modular 3-slot chassis • Optional redundant power supplies Catalyst - Cisco WS-C2950ST-24-LRE | Software Guide - Page 32
power supplies Catalyst 2948G Switch Note For installation information and a complete description of the Catalyst 2948G switch hardware, refer to the Catalyst 2948G and 2980G Installation Guide. Table 1-2 describes the Catalyst 2948G switch. Table 1-2 Catalyst 2948G Switch Product Number WS - Cisco WS-C2950ST-24-LRE | Software Guide - Page 33
to the Catalyst 2948G and 2980G Installation Guide. Table 1-3 describes the Catalyst 2980G switch. Table 1-3 Catalyst 2980G Switch Product Number WS-C2980G-A Chassis Description Catalyst 2980G • Fixed-configuration switch • 12-Gbps backplane • Optional redundant power supplies • Two 1000BASE - Cisco WS-C2950ST-24-LRE | Software Guide - Page 34
Supervisor Engine Software Chapter 1 Product Overview Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 1-4 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 35
monitor commands, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. For descriptions of the commands used to configure the Route Switch Module (RSM) and Route Switch Feature Card (RSFC), refer to the Cisco IOS software command reference publications - Cisco WS-C2950ST-24-LRE | Software Guide - Page 36
on a UNIX system). If the switch is not on, power up the switch. The bootup display should appear on the screen (see the "Example of a Catalyst 4003 Bootup Display" section on page 2-9). If the switch is already booted, press Enter to see this display: Cisco Systems, Inc. Console Enter password - Cisco WS-C2950ST-24-LRE | Software Guide - Page 37
the system configuration. Note For complete information on configuring passwords and controlling access to the switch, see Chapter 30, "Configuring Switch Access Using AAA." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 38
> Console> To disconnect from the switch CLI, enter the exit command. Console> exit Session Disconnected... Cisco Systems Console Fri Aug 27 1999, IP HTTP server information Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-4 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 39
to display a list of commands that begin with a specific set of characters. Do not insert a space between the (?). Command-Line Editing The switch CLI supports a number of command-line Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 40
more lines than can be displayed on the terminal screen, including show command output. To view the next line or screen, use the following tasks. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-6 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 41
port is always port 1. To designate a specific port on a specific module, the command syntax is mod_num/port_num. For example, 3/1 specifies module 3, port 1. On the Catalyst 4912G, the Catalyst 2948G, and the Catalyst 2980G switches, the left-most switch port is numbered 2/1 instead of 1/1 because - Cisco WS-C2950ST-24-LRE | Software Guide - Page 42
in the following example: 172.16.10.1 If DNS is configured properly on the switch, you can use IP host names instead of IP addresses. For information on configuring on page 27-7. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-8 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 43
. switch port 3: . switch port 5: . switch port 6: . switch port 8: . switch port 9: . switch port 11: . switch bandwidth: . temperature sensor: . switch sram: . switch port 1: . switch port 4: . switch port 7: . switch port 10: . Module 1 Passed Power-on-self-test for Module 2: WS-X4148 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 44
interface IP address is set to 0.0.0.0. For more information, see the "Using DHCP or RARP to Obtain an IP Address Configuration" section on page 3-9. 2-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 45
as spanning tree, Cisco Discovery Protocol (CDP), and VLAN membership. The out-of-band management interfaces (me1 and sl0) are not connected to the switching fabric and do not participate in any of these functions. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software - Cisco WS-C2950ST-24-LRE | Software Guide - Page 46
determines whether to broadcast DHCP and RARP requests. For more information about the CONFIG_FILE environment variable, see Chapter 32, "Modifying the Switch Boot Configuration." Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-2 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 47
DHCP server: • Manual allocation-The network administrator maps the switch MAC address to an IP address at the DHCP server. • Automatic allocation-The switch obtains an IP address 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 48
well). If you reset or power cycle a switch with a RARP-obtained IP switch. - SLIP (sl0) interface Configure this interface when setting up a point-to-point SLIP connection between a terminal and the switch. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 49
.20.52.124/29 Interface sc0 IP address and netmask set. Console> (enable) set interface sc0 5 Interface sc0 vlan set. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 50
as the switch IP address). The switch does not use the IP routing table to forward traffic from connected devices, only IP traffic generated by the switch itself (for example, Telnet, TFTP, and ping). Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 51
primary gateway: 10.1.1.1 Destination Gateway default 10.1.1.1 default 10.1.1.20 RouteMask ---------0x0 0x0 Flags ----UG G Use -------6 0 Interface --------- sc0 sc0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 52
the SLIP interface configuration. Enable SLIP for the console port. Command telnet {host_name | ip_addr} enable set interface sl0 slip_addr dest_addr show interface slip attach Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-8 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 53
38 ... Connected to 172.20.52.38. Escape character is '^]'. Cisco Systems, Inc. Console Enter password: Console> enable Enter password: Console> the manual allocation method.) show module 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 54
MAC address of the switch to the IP configuration information for the switch. (With DHCP, this step is necessary only with the manual or automatic allocation sc0 dhcp release 3-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 55
Chapter 3 Configuring the Switch IP Address and Default Gateway Renewing and Releasing a DHCP-Assigned IP Address This with address: 00:90:0c:5a:8f:ff Done Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 56
Renewing and Releasing a DHCP-Assigned IP Address Chapter 3 Configuring the Switch IP Address and Default Gateway 3-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 57
Frames Between Segments, page 4-2 • Building the Address Table, page 4-2 Ethernet Overview The Catalyst enterprise LAN switches support simultaneous, parallel conversations between Ethernet segments. Switched connections between Ethernet segments last only for the duration of the packet. New - Cisco WS-C2950ST-24-LRE | Software Guide - Page 58
Fast Ethernet Switching The Catalyst enterprise LAN switches solve congestion problems that are option for each port on the switches (Gigabit Ethernet ports support only full duplex). Normally, Ethernet Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 59
Assign a name to a port. Verify that the port name is configured. Command set port name mod_num/port_num [name_string] show port [mod_num[/port_num]] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 60
speed on 10/100-Mbps Fast Ethernet modules. Use the auto keyword to have the port autonegotiate speed and duplex mode with the neighboring port. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-4 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 61
Chapter 4 Configuring Ethernet and Fast Ethernet Switching Configuring Ethernet and Fast Ethernet Ports Caution Make sure 2/1 half Port 2/1 set to half-duplex. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 62
in loss of data traffic during debouncing period, which might affect the convergence/reconvergence of various Layer 2 and Layer 3 protocols. Use with caution. Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-6 78-15486 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 63
after a selected time interval. With the new timeout enhancement, you can manually prevent a particular port from being enabled by setting the errdisable timeout for >(enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 64
] [packet_count] Trace the hop-by-hop route of packets from the switch traceroute host to a remote host that is located out the port you (10.1.2.3) 3 ms * 2 ms Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-8 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 65
ports can transmit pause frames to other devices. Table 5-1 identifies the Catalyst Gigabit Ethernet switches, modules, and ports that can transmit pause frames to other devices. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 66
Switch Type Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 4000 Catalyst 4500 Catalyst 2948G Catalyst 2980G Module All modules except WS - Cisco WS-C2950ST-24-LRE | Software Guide - Page 67
following modules are supported: • WS-X4412-2GB-T This 1000BASE-T 14-port module provides 2 dedicated uplink module ports (GBIC) and 12 oversubscribed ports (possible blocking). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 68
for module WS-X4424-GB-RJ45. Table 5-7 Oversubscribed Port Groupings for Module WS-X4424-GB-RJ45 1, 2, 3, 4 5, 6, 7, 8 9, 10, 11, 12 13, 14, 15, 16 17, 18, 19, 20 21, 22, 23, 24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-4 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 69
support the Port Aggregation Protocol (PAgP). Oversubscribed Gigabit Ethernet Example Figure 5-1 shows an example of an 18-port server switching module (WS- 2-Gbps bandwidth. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 70
mode Full duplex Flow control • Oversubscribed Gigabit Ethernet ports (ports 3-18 on WS-X4418-GB): Flow control set to desired for receive (Rx) and on for Ethernet ports (auto mode) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-6 78- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 71
level for each port. When two ports simultaneously request access to the switching bus, the switch uses the priority level to determine the order in which the ports get access. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 72
Configuring Gigabit Ethernet Ports Chapter 5 Configuring Gigabit Ethernet Switching To configure the port priority level, perform this task Unsupported opcodes 0 0 0 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-8 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 73
Ethernet Port Timeout Periods For information on configuring a timeout period for ports in errdisable state, see Chapter 4, "Configuring Ethernet and Fast Ethernet Switching." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 74
] to test. Trace the hop-by-hop route of packets from the switch traceroute host to a remote host that is located out the port you com (10.1.2.3) 3 ms * 2 ms Console> (enable) 5-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 75
Works These sections describe how EtherChannel works: • EtherChannel Overview, page 6-2 • Understanding Frame Distribution, page 6-2 • Hardware Support for EtherChannel, page 6-2 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 76
protocol that can be run only on Cisco switches and those switches released by licensed vendors. LACP, which is defined in IEEE 802.3ad, allows Cisco switches to manage Ethernet channeling with devices that conform to the 802.3ad specification. Note MAC address notification settings are ignored - Cisco WS-C2950ST-24-LRE | Software Guide - Page 77
problems. Follow the guidelines below to avoid configuration problems same protocol. Note Switches can be configured manually, with PAgP on one . • LACP does not support half-duplex links. If Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 78
unexpected results. • An EtherChannel supports the same allowed range of and quality of service (QoS) configurations is set differently on the ports. • Cisco Discovery Protocol (CDP) runs on the Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 79
ports to determine if they can form a channel, based on criteria such as port speed, trunking state, native VLAN, and so on. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 80
You can assign an administrative group number manually or let the system software assign stored in NVRAM and remain the same after the switch is reset or power cycled. EtherChannel IDs are not saved in NVRAM Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 81
WS-C4000 3/6 069003103(5500) 3/6 WS-C4000 Console> (enable) Defining an EtherChannel Administrative Group You can define EtherChannel administrative groups manually mode). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 82
1/1 notconnect on 768 20 1/2 connected on 768 Admin Port Device-ID Port-ID Platform group 20 1/1 20 1/2 066510644(cat26-lnf(NET25)) 2/1 WS-C6009 Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-8 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 83
ID Port-ID Platform group 20 1/1 20 1/2 066510644(cat26-lnf(NET25)) 2/1 WS-C6009 Console> (enable) Console> (enable) set channel vlancost 768 12 Channel [/port_num]] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 84
(5500) 3/6 WS-C4000 Port Trunk-status Trunk-type Trunk-vlans 3/5 not-trunking negotiate 1-1005 3/6 not-trunking negotiate 1-1005 Port Portvlancost-vlans 3/5 3/6 6-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 85
0 184171 0 Channel Rcv-Octet Xmit-Octet 835 11283708 14942104 Channel Dely-Exced MTU-Exced In-Discard Lrn-Discrd In-Lost Out-Lost 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 86
This example shows how to configure a four-port Fast EtherChannel link between two switches. Figure 6-1 shows two switches connected through four 100BASE-TX Fast Ethernet ports. 6-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 87
bundle. Switch_A> (enable) set port channel 1/1-4 desirable Port(s) 1/1-4 channel mode set to desirable. Switch_A> (enable) %PAGP-5-PORTFROMSTP:Port 1/1 left bridge port 1/1 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-13 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 88
shows how to configure a two-port Gigabit EtherChannel link between two switches. Figure 6-2 shows two switches connected through four 1000BASE-SX Gigabit Ethernet ports. 6-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 89
left bridge port 3/1 %PAGP-5-PORTFROMSTP:Port 3/2 left bridge port 3/2 %PAGP-5-PORTTOSTP:Port 3/1 joined bridge port 3/1-2 %PAGP-5-PORTTOSTP:Port 3/2 joined bridge port 3/1-2 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 90
exists only when a port group in on mode is connected to another port group in on mode. Mode that prevents the port from channeling. 6-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 91
other ports: - Port physical characteristics, such as data rate, duplex capability, and point-to-point or switch that allocates it; there is no global significance to administrative key values. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 92
set to LACP protocol. Mod 3 is set to LACP protocol. Console> (enable) Use the show channelprotocol command to display the protocols for all modules. 6-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 93
the module, ports must have unique administrative keys. After NVRAM is cleared, the channel mode of the ports is set to "passive." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-19 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 94
mode, perform this task in privileged mode: Task Change the channel mode. Command set port lacp-channel mod/ports mode [on | off | active | passive] 6-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 95
% 816 2/31 0.00% 0.00% 25.25% 50.50% 0.00% 0.00% 816 2/32 0.00% 0.00% 75.75% 50.50% 0.00% 0.00% Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-21 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 96
connected 4 32 disabled 0 Console> Console> show spantree 4/7-8 Port Vlan Port-State Cost Priority Portfast Channel_id 4/7-8 1 blocking 3 32 disabled 770 Console> 6-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 97
For complete syntax and usage information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 98
by placing redundant switch ports in a backup state; all paths that are not needed to reach the root switch from anywhere in the switched network are placed in STP-blocked mode. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-2 78-15486 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 99
is based on default parameters, the path between the source and the destination stations in a switched network might not be ideal. The goal is to make the fastest link the root . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 100
been specifically configured for port cost. Table 7-1 shows the default port cost values that are assigned by the switch for each type of port when you use the short method to calculate the port cost. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 101
. You can also manually assign port costs between data loops. Ports must wait for new topology information to propagate through the switches switch using STP is in one of these states: • Blocking 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 102
spanning tree, every switch in the network goes through the blocking state and the transitory states of listening and learning at power up. If properly and forwarding are enabled Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-6 78-15486 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 103
that the port should participate in frame forwarding. Learning is disabled in the listening state. Figure 7-4 shows a port in the listening state. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 104
1 BPDUs Network management and data frames Filtering database System module Frame forwarding Data frames BPDUs Port 2 Network management shows a port in the learning state. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-8 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 105
1 BPDUs Network management & data frames Filtering database System module Frame forwarding Station addresses Data frames BPDUs Port 2 Network from the learning state. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 106
Forwarding Station addresses Port 1 BPDUs Network management & data frames Filtering database System module Frame forwarding S5695 Station BackboneFast, and Loop Guard." 7-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 107
1 BPDUs Network management and data frames Filtering database System module Frame forwarding Data frames Port 2 Network management (MISTP) • MISTP-PVST+ (combination mode) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 108
another MISTP instance if it has converged. (However, if ports are added at the same time the VLAN is moved, convergence time is required.) 7-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 109
enabled on it, you should also enable MAC address reduction on all your Catalyst 4500 series switches to avoid problems in the spanning tree topology. When MAC address reduction is enabled on Catalyst 4500 series switches, it disables the pool of MAC addresses used for the VLAN spanning tree - Cisco WS-C2950ST-24-LRE | Software Guide - Page 110
the Rapid Spanning Tree Protocol (RSTP), and the Cisco PVST+ architecture. MST allows you to build multiple provides multiple forwarding paths for data traffic and enables load balancing. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 111
interoperability with PVST+ by generating PVST+ BPDUs for the non-CST VLANs. • MST supports some of the PVST+ extensions in MSTP as follows: - UplinkFast and BackboneFast are not -15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 112
for the spanning tree topology. • Designated-A forwarding port elected for every switched LAN segment. • Alternate-An alternate path to the root bridge to that active topology. 7-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 113
r B F B B B F r SST Region b r r F F/f = Forwarding B/b = Blocking R = Root Bridge r = Root port F F F FR F F MST Region FF F r F r r b SST Region B 68285 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-17 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 114
in the message age is in the order of seconds. • Data traffic from one port of a pseudobridge (a port at the edge manually, because it does not auto-increment each time you commit the MST configuration. 7-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 115
to VLAN 4095 are unused and always set to zero. You must configure each byte manually. You can use SNMP or the CLI to perform the configuration. MST BPDUs contain the port role. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-19 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 116
path to the root, you can set a slightly lower bridge priority to make a specific bridge IST master. The root path cost and message age inside a region stays constant, links. 7-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 117
or some of the VLANs on its designated ports, root guard sets the port to the blocking state. Do not designate switches with a slower CPU running PVST+ as a switch running MST. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-21 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 118
every 60 seconds Using PVST+ PVST+ is the default spanning tree mode for Catalyst 4500 series switches. The following sections describe how to configure PVST+ on Ethernet VLANs. 7-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 119
value between 0-65,535. The VLAN bridge ID priority becomes that value. When the switch is in PVST+ mode with MAC address reduction enabled, you can enter one of 16 active] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-23 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 120
Channel_id 1/1 1 not-connected 4 32 disabled 0 1/2 1 not-connected 4 32 disabled 0 2/1 1 not-connected 100 32 disabled 0 2/2 1 not-connected 100 32 disabled 0 7-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 121
privileged mode: Step 1 Step 2 Task Configure the port cost for a switch port. Verify the port cost setting. Command set spantree portcost {mod/port} 2/3 VLAN 1 . . . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-25 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 122
1 not-connected 100 32 disabled 0 Configuring the PVST+ Default Port Cost Mode If any switch in your network is using a port speed of 10 Gb or over and the network is 1- 65535. 7-26 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 123
the switch is in PVST+ mode, you can set the port priority for a trunking port in a VLAN. The port with the lowest priority value for a specific VLAN 2/3 cost 20000 1-5,12 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-27 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 124
. Command set spantree mode rapid-pvst+ set spantree link-type mod/port point-to-point clear spantree detected-protocols mod/port show spantree vlan 7-28 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 125
32 Type ----P2P P2P P2P P2P P2P P2P P2P P2P P2P P2P P2P P2P P2P P2P P2P P2P P2P P2P P2P Console> 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-29 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 126
if you wish to use MISTP mode, you should configure all of your Catalyst 4500 series switches to run MISTP. To use MISTP mode, you first enable an MISTP instance PVST+ 20 sec 7-30 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 127
switch console. Do not use a Telnet connection through the data port or you will lose the connection to the switch. Once you map a VLAN to an MISTP instance, you can Telnet to the switch -01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-31 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 128
Priority Designated Root Cost Designated Root Port VLANs mapped: 00-05-31-40-64-00 32769 (root priority:32768, sys ID ext:1) 20000 1/1 1,74 7-32 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 129
Configuring the MISTP Port Cost You can configure the port cost of switch ports. When forwarding frames, the switch is more likely to use ports with lower port costs. Assign -00 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-33 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 130
(enable) Configuring the MISTP Port Priority You can configure the port priority of switch ports. The port with the lowest priority value forwards frames for all VLANs. :1) 1,74 7-34 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 131
for an instance of MISTP. The port with the lowest priority value for a specific MISTP instance forwards frames for that instance. The possible port instance range is instances] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-35 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 132
VLANs to an MISTP Instance When you are using MISTP-PVST+ or MISTP on a switch, you must map at least one VLAN to an MISTP instance in order for MISTP- and configuring VLANs. 7-36 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 133
is in conflict. To clear up the conflict, you must manually remove the incorrect mapping(s) from the root switch. The remaining entry on the list becomes the official mapping. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-37 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 134
64-00 inactive 19 Console> (enable) This example is from the switch in conflict (note that the switch is inactive): Console> (enable) show spantree conflicts 6 Inst MAC ) 7-38 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 135
the set spantree root command to lower the bridge priority (the value that is associated with the switch) below the default (32,768); the switch can then become the root switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-39 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 136
become the root switch if the primary root switch fails. You can run this command on more than one switch to create multiple backup switches in case the primary root switch fails. 7-40 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 137
delay depends on the network diameter, which is the maximum number of bridges between any two points of attachment of end stations. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-41 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 138
delay set to 21 seconds. Console> (enable) Console> (enable) set spantree maxage 6 100 Spantree 100 max aging time set to 36 seconds. Console> (enable) 7-42 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 139
example shows how to clear spanning tree BPDU statistics: Console> (enable) clear spantree statistics bpdu Spanning tree BPDU statistics cleared on the switch. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-43 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 140
. 15 sec The timeout value is the forward delay parameter of the switches. Configuring the Hello Time Enter the set spantree hello command to change seconds. Console> (enable) 7-44 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 141
instance to 25 seconds: Console> (enable) set spantree maxage 25 mistp-instance 1 Instance 1 max aging time set to 25 seconds. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-45 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 142
Delay 15 sec Port Vlan Port-State Cost Prio Portfast Channel_id ---------- 6/1 1 forwarding 4 32 disabled 0 6/2 1 blocking 4 32 disabled 0 Console> (enable) 7-46 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 143
MST 78-15486-01 Console> (enable) set spantree mst config name cisco revision 1 Edit Buffer modified. Use 'set spantree mst config commit' ' to apply the changes. Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-47 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 144
Region Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 2-20 2 21-30 3 31-40 4 41-50 5 - 6 - 7 - 8 - 9 - 10 - 11 - 7-48 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 145
ext: Port State Role Cost Prio Type 6/1 forwarding BDRY 20000 32 P2P, Boundary(PVST) 6/2 blocking BDRY 20000 32 P2P, Boundary(PVST) Console> (enable) Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-49 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 146
(enable) show spantree mst config Current (NVRAM) MST Region Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 2-20 2 21-30 3 31- 7-50 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 147
) Configuring the MST Port Cost You can configure the port cost of switch ports.The switch uses ports with lower port costs to forward frames. Assign lower numbers to > (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-51 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 148
(enable) set spantree portinstancecost 6/1 cost 5000 mst 4 Port 6/1 MST Instances 0-3,5-15 have path cost 10000. Port 6/1 MST Instances 4 have path cost 5000. Console> (enable) 7-52 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 149
port priority for an instance of MST. The port with the lowest priority for a specific MST instance forwards frames for that instance. The port instance range is from 0-63 1/0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-53 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 150
(NVRAM) MST Region Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 2-20 2 21-30 3 31-40 4 41-50 5 - 6 - 7 - 8 - 9 - 7-54 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 151
Console> (enable) show spantree mst config Current (NVRAM) MST Region Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 2-20 2 21-30 3 31-40 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-55 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 152
Configuration: Configuration Name:cisco Revision:2 Instance VLANs IST 1,51-998,1000-4094 1 2-20 2 21-30 3 31-40 4 41-50 5 - 6 - 7 - 8 - 9 - 10 - 11 - 7-56 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 153
(PVST) Console> (enable) Configuring Spanning Tree BPDU Skewing Commands that support the spanning tree BPDU skewing feature perform these functions: • Allow you ] [mod/port] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-57 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 154
for bridge. Backbonefast disabled for bridge. Summary of connected spanning tree ports by vlan VLAN Blocking Listening Learning Forwarding STP Active 1 6 4 2 0 12 7-58 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 155
Chapter 7 Configuring Spanning Tree Configuring Spanning Tree BPDU Skewing Blocking Listening Learning Forwarding STP Active Total 6 4 2 0 12 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-59 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 156
Configuring Spanning Tree BPDU Skewing Chapter 7 Configuring Spanning Tree 7-60 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 157
8-18 Understanding How PortFast Works PortFast causes a switch or trunk port to enter the spanning tree forwarding state immediately, bypassing the listening and learning states. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 158
mode is supported only on manually put the interface back in service. Note When enabled on the switch switch basis; after you enable BPDU filtering, it applies to all PortFast-enabled ports on the switch. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 159
forwarding at any given time. Specifically, an uplink group consists of Switch A (Root) Switch B L1 L2 Link failure Switch C L3 UplinkFast transitions port directly to forwarding state 11242 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 160
A, the root switch, connects directly to Switch B over link L1 and to Switch C over link L2. The port on Switch C that connects directly to Switch B over link L3 is in the blocking state. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-4 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 161
that it is the root switch. However, the other switches ignore these inferior BPDUs and the new switch learns that Switch B is the designated bridge to Switch A, the root switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 162
becomes unidirectional, loop guard blocks the entire channel until the affected port is removed from the channel. Figure 8-6 shows loop guard in a triangle switch configuration. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-6 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 163
that you enable loop guard on root ports and alternate root ports on access switches. Loop guard interacts with other features as follows: • Loop guard does not -inconsistent ports and Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 164
workstation, switch, or server. Verify the PortFast setting on a switch port. Command set spantree portfast mod_num/port_num enable | disable show spantree [mod_num/port_num] [vlan] Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-8 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 165
4/1 1 blocking 4 32 enabled 0 4/1 100 forwarding 4 32 enabled 0 4/1 521 blocking 4 32 enabled 0 4/1 524 blocking 4 32 enabled 0 4/1 1003 not-connected 4 32 enabled 0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 166
4/1 fast start set to default. Console> (enable) show spantree portfast 4/1 Portfast:default Portfast BPDU guard is disabled. Portfast BPDU filter is disabled. Console> (enable) 8-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 167
[disable | enable | default] Verify the PortFast BPDU guard setting. show spantree summary Note For additional PVST+ information, see Chapter 7, "Configuring Spanning Tree." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 168
for bridge. Uplinkfast disabled for bridge. Backbonefast disabled for bridge. Vlan Blocking Listening Learning Forwarding STP Active 1 0 0 0 4 4 2 0 0 0 4 4 8-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 169
bpdu-filter enabled for bridge. Uplinkfast disabled for bridge. Backbonefast disabled for bridge. Vlan Blocking Listening Learning Forwarding STP Active 1 0 0 0 4 4 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-13 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 170
0 4 4 . . . 999 0 0 0 4 4 1003 0 0 0 0 0 1005 0 0 0 0 0 Blocking Listening Learning Forwarding STP Active Total 0 0 0 85 85 Console> (enable) 8-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 171
on keywords. Note When you enable UplinkFast, it affects all VLANs on the switch. You cannot configure UplinkFast on a per-VLAN basis. To enable UplinkFast, perform list 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 172
on the switch without affecting the bridge priority, port cost, and port-VLAN cost values. set spantree uplinkfast disable Verify that UplinkFast is enabled. show spantree uplinkfast 8-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 173
switches in the network. BackboneFast is not supported on Token Ring VLANs. This feature is supported for use with third-party switches. To enable BackboneFast on the switch, 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-17 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 174
command to enable the spanning tree loop guard feature on a per-port basis. To set all the ports on the switch, use the set spantree mst global-defaults loop-guard command. 8-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 175
disable loop guard on all the ports on a switch: Console> (enable) set spantree mst global-defaults loop-guard disable Spantree global loop-guard state disabled on this switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-19 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 176
Configuring Loop Guard Chapter 8 Configuring Spanning Tree PortFast, BPDU Guard, BPDU Filter, UplinkFast, BackboneFast, and Loop 8-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 177
of problems, such as duplicate VLAN names, incorrect VLAN-type specifications, and security violations. You can use VTP to manage VLANs 1-1005 in your network. (VTP version 1 and VTP version 2 do not support VLANs 1025-4094.) With VTP, you can make configuration changes centrally on one switch and - Cisco WS-C2950ST-24-LRE | Software Guide - Page 178
is the default mode. • Client-VTP clients behave the same way as VTP servers, but you cannot create, change, or delete VLANs on a VTP client. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-2 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 179
9-13). VTP version 2 supports the following features that are not supported in version 1: • Unrecognized Type-Length-Value (TLV) Support-A VTP server or client propagates checks. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 180
traffic from Switch 1 is not forwarded to Switches 3, 5, and 6 because traffic for the Red VLAN has been pruned on the links indicated (port 5 on Switch 2 and port 4 on Switch 4). Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-4 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 181
VTP mode VTP version 2 enable state VTP password VTP pruning Default Value Null Server Version 1 is enabled (version 2 is disabled) None Disabled 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 182
• Enabling VTP Version 2, page 9-9 • Disabling VTP Version 2, page 9-10 • Enabling VTP Pruning, page 9-11 • Disabling VTP Pruning, page 9-12 • Displaying VTP Statistics, page 9-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-6 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 183
Step 2 Step 3 Task Define the VTP domain name. Place the switch in VTP client mode. Verify the VTP configuration. Command set vtp domain name set vtp mode client show vtp domain 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 184
Password : configured (hidden) Updater ID: 172.20.52.19 Feature Mode Revision VLAN Transparent 0 Pruning : disabled VLANs prune eligible: 2-1000 Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-8 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 185
supports version 2. To enable VTP version 2, perform this task in privileged mode: Step 1 Step 2 Task Enable VTP version 2 on the switch. Verify that VTP version 2 is enabled. Command set vtp version 2 show vtp domain 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches - Cisco WS-C2950ST-24-LRE | Software Guide - Page 186
(hidden) Notifications: disabled Updater ID: 172.20.52.19 Feature Mode Revision VLAN Off 0 Pruning : disabled VLANs prune eligible: 2-1000 Console> (enable) 9-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 187
are pruning eligible.) clear vtp pruneeligible vlan_range (Optional) Make specific VLANs pruning eligible set vtp pruneeligible vlan_range on the device. Verify ,1025-4094 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 188
VTP pruning statistics: Trunk Join Transmitted Join Received Summary advts received from GVRP PDU non-pruning-capable device Received 16/1 75 0 0 0 Console> (enable) 9-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 189
instances of the protocol. Note In software release 8.1(1), the only supported database propagation is for the VLAN database. These sections describe VTP levels of security. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-13 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 190
client, and transparent modes are specific to a VTP instance. For example, it is possible for a switch to be a primary server for one instance and a client for another instance. 9-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 191
In Figure 9-4, the Cisco VTP domain is partitioned between switches accepting server X or server Y as a primary server. The switches that are from different network accepts it. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 192
VTP Domain Domain Cisco Primary Server X Domain Cisco Primary Server Y switch. If a new switch is added to a domain, it will not propagate its configuration until you manually specific VTP instance. 9-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 193
for this specific instance. All switches in the domain problem by issuing additional takeover messages. For more information on takeovers, see the "Configuring a VTP Version 3 Takeover" section on page 9-28. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 194
version 1 and VTP version 2 is not available in VTP version 3. Switches running VTP version 3 have the following common characteristics: • They only accept VTP configuration. 9-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 195
version 3, the transparent mode is specific to the instance. The off mode in VTP version . Note In software release 8.1(1), the only supported database propagation is for the VLAN database. -01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 196
configuration known to the device, the device's configuration is unaffected, but the device indicates to the database manager that a configuration error condition has occurred. 9-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 197
switch switches as follows: Note You should configure VTP version 1 and VTP version 2 switches switch is able to detect VTP version 1 and VTP version 2 switches switches to keep advertising their presence on the link. If a VTP version 3 switch switch can 3 switch never accepts set all switches in the - Cisco WS-C2950ST-24-LRE | Software Guide - Page 198
perform this task in privileged mode: Step 1 Step 2 Task Enable VTP version 3 on the switch. Verify that VTP version 3 is enabled. Command set vtp version 3 show vtp domain 9-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 199
when VTP versions are changed. Note In software release 8.1(1), the only supported database propagation is for the VLAN database; therefore, there are no "unknown" databases. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-23 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 200
2 Step 3 Task Define the VTP domain name. Place the switch in VTP client mode. Verify the VTP configuration. Command set vtp domain name set vtp mode client show vtp domain 9-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 201
database in release 8.1(1), using the above example without specifying the vlan keyword results in the same configuration as using the vlan keyword. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-25 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 202
ID : 00d0.004c.1800 Feature Mode Revision Primary ID Primary Description VLAN Off UNKNOWN Off Pruning : disabled VLANs prune eligible: 2-1000 Console> (enable) 9-26 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 203
vtp passwd 9fbdf74b43a2815037c1b33aa00445e2 secret . . . Console> (enable) set vtp passwd toto secret VTP secret has to be 32 characters in length Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-27 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 204
and verify the configuration: Console> (enable) set vtp primary This switch is becoming primary server for feature vlan. Enter VTP password: No conflicting VTP 3 devices found. 9-28 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 205
. Switches in transparent or off mode are not part of the VTP domain and do not respond to requests. In addition, clients or servers that do not have a valid database do not respond to requests. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 206
Configuring VTP Version 3 Chapter 9 Configuring VTP 9-30 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 207
VMPS, see Chapter 12, "Configuring Dynamic VLAN Membership with VMPS." Figure 10-1 shows an example of VLANs segmented into logically defined networks. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 208
Cisco router Catalyst 4000 Engineering VLAN Marketing VLAN Fast Ethernet Catalyst 4000 Catalyst switch is assigned manually on a port-by-port basis. When you assign switch ports Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 209
Cisco defaults for FDDI and Token Ring. Not N/A supported on the Catalyst 4500 series switches. You cannot delete these VLANs. 1006-1009 Reserved range Cisco defaults are propagated. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 210
1-1005 only); requires a different VLAN number for each media type • Remote Switched Port Analyzer (RSPAN) Note Ethernet VLANs 1 and 1025-4094 can use the 1 Enabled 1500 bytes 10-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 211
The Catalyst 4500 series switch 10/100 Ethernet switching modules support auxiliary VLANs in software release 5.5(1) and later releases. You can plug an externally powered IP . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 212
Chapter 10 Configuring VLANs Configuring VLANs on the Switch VLANs are either normal range or extended range. VLANs in the not specify the type, the VLAN is an Ethernet VLAN. 10-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 213
Chapter 10 Configuring VLANs Configuring VLANs on the Switch This example shows how to create an Ethernet VLAN vlan] Verify the VLAN configuration. show vlan [vlan] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 214
344 VLAN Type SAID MTU Parent RingNo BrdgNo Stp BrdgMode Trans1 Trans2 500 enet 100500 1500 - - - - - 0 0 VLAN AREHops STEHops Backup CRF Console> (enable) 10-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 215
Chapter 10 Configuring VLANs Configuring VLANs on the Switch Creating or Modifying an Extended-Range VLAN Note With [said said] [mtu mtu] [translation vlan] show vlan [vlan] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 216
vlan_num] show port [mod_num[/port_num]] This example shows how to assign switch ports to a VLAN and verify the assignment: Console> (enable) set AREHops STEHops Backup CRF 10-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 217
) Mapping 802.1Q VLANs to ISL VLANs Your network might have non-Cisco devices that are connected to the Catalyst 6500 series switches through 802.1Q trunks or traffic from a non-Cisco switch that has VLANs in the Catalyst 6500 series reserved range, 1002-1024. The valid range of user-configured - Cisco WS-C2950ST-24-LRE | Software Guide - Page 218
. When you delete a VLAN in VTP transparent mode, the VLAN is deleted only on the current switch. When you are on a VTP client, you can only delete a VLAN on the local switch. 10-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 219
interface that carries the phone traffic. • Port 3 connects to a PC or other device. Figure 10-2 shows how you can connect a Cisco IP Phone to a Catalyst 4500 series switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-13 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 220
Data traffic present on the VLAN supporting switch ports to send Cisco Discovery Protocol (CDP) packets that instruct an attached Cisco IP Phone to transmit voice traffic to the switch Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 221
value (enter the set port auxiliaryvlan mod[/port] untagged command) Note The Cisco IP Phone always sets Layer 3 IP precedence to 5 in voice traffic. . Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 222
set of supporting VLANs that are used to create the private VLAN structure. You can configure private VLANs and normal VLANs from the same Catalyst 4500 series switch. The . 10-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 223
VLAN, and a series of community VLANs. You must define each supporting VLAN within a private VLAN structure before configuring the private VLAN as follows each community. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-17 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 224
mode, because VTP does not support private VLAN types or mapping manually double-check the STP configuration to ensure that the primary, isolated, and community VLANs spanning tree topologies match. 10-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 225
and multicast shortcuts are not supported in private VLANs. • switches with no private ports), the private VLANs do not need to be created and can be pruned from the trunks for security reasons. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 226
assign ports 4/4 through 4/6 as the community port: Console> (enable) set pvlan 7 902 4/4-6 Successfully set the following ports to Private Vlan 7,902:4/4-6 Console> (enable) 10-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 227
7 902 Isolated 4/4-6 Console> (enable) show pvlan Primary Secondary Secondary-Type Ports 7 901 isolated 4/3 7 902 community 4/4-6 7 903 community 4/7-9 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-21 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 228
VLAN 7: Console> (enable) clear vlan 7 This command will de-activate all ports on vlan 7 Do you want to continue (y/n) [n]?y Vlan 7 deleted Console> (enable) 10-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 229
on the promiscuous port(s) are deleted. To delete a VLAN on the switch, perform this task in privileged mode: Task Delete an isolated or and 902 on 3/2-5 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-23 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 230
Configuring Private VLANs Chapter 10 Configuring VLANs 10-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 231
allow you to extend VLANs across an entire network. The Catalyst 4500 series, 2948G, and 2980G switches support IEEE 802.1Q-802.1Q trunking encapsulation. You can configure ." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 232
the neighboring port manually as a trunk supported in the Catalyst 4500 series switch with 802.1Q-capable hardware. Automatic negotiation of 802.1Q trunks is supported in software release 4.2 and later. 11-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 233
a specific piece of hardware supports trunking, and to determine which trunking encapsulations are supported, see your hardware documentation or use the show port capabilities command. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 234
to the non-Cisco 802.1Q cloud through 802.1Q trunks. • Make sure that the native VLAN is the same on all of the 802.1Q trunks connecting the Cisco switches to the non-Cisco 802.1Q cloud. 11-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 235
Cisco switches to a non-Cisco 802.1Q cloud through ISL trunks or through access ports. Doing so will cause the switch auto dot1q (on hardware supporting 802.1Q only) normal-range Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 236
list for that trunk. However, you can remove VLANs from the allowed list to prevent traffic for those VLANs from passing over the trunk. 11-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 237
in privileged mode: Step 1 Step 2 Step 3 Task Command (Optional) Add specific VLANs to the allowed VLANs list set trunk mod_num/port_num vlans for a trunk. /port_num] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 238
will continue to transmit and receive packets from control protocols such as Cisco Discovery Protocol (CDP), VLAN Trunking Protocol (VTP), Port Aggregation Protocol ,850,917,999 11-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 239
The following sections contains examples of a VLAN trunk configurations: Note For examples of configuring trunk links between switches and routers, refer to the Layer 3 Switching Software Configuration Guide-Catalyst 5000 Family, 4000 Family, 2926G Series, 2926 Series, 2948G, and 2980G - Cisco WS-C2950ST-24-LRE | Software Guide - Page 240
ports in the bundle. This example assumes that the neighboring ports on Switch B are configured to use dot1q or negotiate encapsulation and are in auto in management domain 11-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 241
assumes that the neighboring ports on Switch B are in EtherChannel auto mode. The system logging messages provide information about the formation of the EtherChannel bundle. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 242
auto channel WS-C4003 JAB023806(Sw 2/4 3/5 connected auto channel WS-C4003 JAB023806(Sw 2/5 3/6 connected auto channel WS-C4003 JAB023806(Sw 2/6 Switch_B> (enable) 11-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 243
> (enable) set vlan 20 Vlan 20 configuration successful Switch_1> (enable) set vlan 30 Vlan 30 configuration successful Switch_1> (enable) set vlan 40 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-13 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 244
are up by entering the show trunk command: Switch_1> (enable) show trunk 1 * - indicates vtp domain mismatch Port Mode Encapsulation Status Native vlan ----------- 11-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 245
---------- disabled disabled disabled disabled disabled disabled disabled disabled disabled Fast-Start ---------- disabled disabled disabled Group-method Group-method 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 246
and VLANs 40, 50, and 60 (Group 2) are forwarded over Trunk 2. On Switch 1, enter the set spantree portvlanpri command to change the port-VLAN priority for the Group portpri 32. 11-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 247
tree converges to use the new configuration. Check the spanning tree port states on Switch 1 by entering the show spantree command. The Group 1 VLANs should be forwarding on 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 248
> (enable) Priority -------- 32 32 32 32 1 1 1 32 4 Fast-Start ---------- disabled disabled disabled disabled disabled disabled disabled disabled disabled Group-method 11-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 249
43994 Port 1/1 Trunk Type: 802.1Q Trunk Mode: nonegotiate Port 4/1 Trunk Type: 802.IQ Trunk Mode: auto Blocking 4000 X 4000 Switch 1 Port-type Switch 2 inconsistency 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-19 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 250
problem on Switch 2 by entering the the show spantree and show spantree statistics commands. The configuration mismatch exists until the port on Switch 2 is properly configured. Switch Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 251
trunk and show spantree commands: Switch 2> (enable) show trunk 4/1 Port Mode Encapsulation 4/1 nonegotiate dot1q Status -----------trunking Native vlan ----------1 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-21 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 252
," and that the port-state is "forwarding." Verify connectivity across the trunk using the ping command: Switch 1> (enable) ping switch_2 switch_2 is alive Switch 1> (enable) 11-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 253
12-3 • Configuring VMPS, page 12-4 • Troubleshooting VMPS and Dynamic Port VLAN Membership, page enabled, regardless whether you reset or power cycle the switch. The VMPS opens a User Datagram Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 254
port is shut down and you must manually bring the port back up with the specific hardware): • Software release 5.1 or later releases-The Catalyst 4000 series switches support only VMPS clients. • Software release 7.2 or later releases-The Catalyst 4000 series and Catalyst 4500 series switches support - Cisco WS-C2950ST-24-LRE | Software Guide - Page 255
the VMPS database. You must enable VMPS on each server, and manually update each VMPS server when you update the VMPS database. • You specific host on the dynamic port after a specified period. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 256
Move the ASCII text file to a TFTP server so it can be downloaded to the switch. On the VMPS primary and backup servers, do the following: a. Specify the location on the switch. 12-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 257
You can enter a maximum of 256 VLANs in a VMPS database file for the Catalyst 2948G switch. The example at the end of this section has the VLAN group Engineering, which groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 258
198.4.254.222 port 1/3 device 198.4.254.223 all-ports ! !Section 4: VLAN GROUPS !VLAN groups ! !vmps-vlan-group ! vlan-name ! 12-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 259
each other about the VMPS database. You must enable VMPS on each server and manually update each VMPS server when you update the VMPS database. To configure a VMPS > (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 260
set vmps server ip_addr Verify the VMPS server specification. show vmps server Configure ports on the switch to dynamic mode. set port membership mod_num/ MMF ATM 10 BASE-T 12-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 261
server entry from the VMPS client, perform this task in privileged mode: Task Clear a VMPS server entry. Command clear vmps server ip_addr 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 262
' to see reconfirm status Console> (enable) To download the VMPS database manually and refresh the existing VMPS database, perform this task in privileged mode. to static mode: 12-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 263
the syslog level for VMPS to 3 using the set logging level vmps command. Troubleshooting Dynamic Ports A dynamic port might shut down under these circumstances: • VMPS . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 264
stations are connected to these clients: - Switch 2 - Switch 9 • The database configuration file is called Bldg-G.db and is stored on a TFTP server with IP address 172.20.22.7. 12-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 265
the ASCII file resides: Console> (enable) set vmps tftpserver 172.20.22.7 Bldg-G.db b. Enable VMPS: Console> (enable) set vmps state enable 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-13 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 266
: • Auxiliary VLAN-Separate VLAN for IP phones • Native VLAN-Traditional VLAN for data • Auxiliary VLAN ID-VLAN ID of an auxiliary VLAN • Native VLAN ID-VLAN auxiliary VLAN. 12-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 267
VLAN) • Data traffic to and from the PC that is connected to the switch through the not dynamic, you need to configure it manually. As you manually configure the auxiliary VLAN ID, the VMPS Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 268
VLAN Membership with VMPS Console> (enable) set port auxiliaryvlan 5/10 223 Auxiliary vlan cannot be set to 223 as PVID=223. Console> (enable) 12-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 269
engine software release 5.1 or later releases • IEEE 802.1Q-capable switching modules (refer to the documentation for your hardware, or use the show port capabilities command) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 13-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 270
dynamic VLAN creation globally on the switch as well. For information on enabling dynamic VLAN creation, see the "Enabling GVRP Dynamic VLAN Creation" section on page 13-4. 13-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 271
GVRP participants) You can configure the static GVRP port-state on any 802.1Q-capable switch ports, regardless of the global GVRP enable state or whether the port is an 802 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 13-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 272
VLAN creation supports all VLAN types. If you enable dynamic VLAN creation, these configuration restrictions are imposed: • You cannot change the switch to VTP server default. 13-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 273
Registration Configuring an 802.1Q trunk port in fixed registration mode allows manual creation and registration of VLANs, prevents VLAN deregistration, and registers (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 13-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 274
ms, an error message is displayed. Set the leave timer to at least 1050 ms, and then set the join timer to 350 ms. 13-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 275
: 156 Join In Transmitted: 0 Empty Transmitted: 0 Leave In Transmitted: 0 Leave Empty Transmitted: 0 Leave All Transmitted: 41 VTP Message Received: 0 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 13-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 276
GVRP on the switch. Command set gvrp disable This example shows how to disable GVRP globally on the switch: Console> (enable) set gvrp disable GVRP disabled Console> (enable) 13-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 277
describes how to configure quality of service (QoS) on Catalyst enterprise LAN switches. Note For complete syntax and usage information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter consists of - Cisco WS-C2950ST-24-LRE | Software Guide - Page 278
frame types cannot carry CoS values. CoS values range between 0 (low priority) and 7 (high priority). • Classification is the selection of traffic to be marked. 14-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 279
switch with the default CoS value configured for the entire switch. You cannot mark traffic on a per-port basis. Note The Catalyst 4500 series, 2948G, and 2980G switches support 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 14-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 280
releases. Use the show port capabilities command to determine the specific QoS support for a module. QoS Default Configuration Table 14-1 shows commands only when necessary. 14-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 281
a port. The default CoS value is zero. To set the default CoS value on the switch, perform this task in privileged mode: Step 1 Step 2 Task Set the CoS value. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 14-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 282
queues and the number of drop thresholds that are supported on the port. For example, the 2q1t port type supports two transmit queues and one drop threshold. The > (enable) 14-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 283
disables QoS, because QoS is disabled by default. Disabling QoS To disable QoS, perform this task in privileged mode: Tas Disable QoS on the switch. Command set qos disable 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 14-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 284
Configuring QoS on the Switch This example shows how to disable QoS: Console> (enable) set qos disable QoS is disabled. Console> (enable) Chapter 14 Configuring QoS 14-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 285
on the Cisco router and the switch. A CGMP/IGMP-capable IP multicast router sees all IGMP packets and can inform the switch when specific hosts join or leave IP multicast groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 286
tables. The router does not remove a multicast group from the forwarding tables until all the hosts in the group ask to leave the group. 15-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 287
Layer 2-connected network. GMRP is Layer 3-protocol independent, which allows it to support the multicast traffic of any Layer 3 protocol (such as IP, IPX, and so forth). GMRP software components run on both the switch and on the host (Cisco is not a source for GMRP host software). On the host, GMRP - Cisco WS-C2950ST-24-LRE | Software Guide - Page 288
Configuring Multicast Services Configuring CGMP verify the configuration: Console> (enable) set cgmp enable CGMP support for IP multicast enabled. Console> (enable) show cgmp 0 15-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 289
Services Configuring CGMP topology notifications received 80 number of CGMP packets dropped 2032227 Console> (enable) Enabling CGMP Leave Processing To enable CGMP leave processing on the switch -01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 290
Services Displaying Multicast Router Information When you enable CGMP, the switch router on port 3/1 indicates that the entry was configured manually): Console> (enable) show multicast router CGMP enabled IGMP Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 291
Chapter 15 Configuring Multicast Services Configuring CGMP Task Display the total number of multicast addresses (groups) (enable) 211915 0 211729 186 0 3122 0 0 0 80 2032227 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 292
Configuring Multicast Services Disabling CGMP Leave Processing To disable CGMP leave processing on the switch, perform this support for IP multicast disabled. Console> (enable) Command set cgmp disable 15-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 293
Chapter 15 Configuring Multicast Services Configuring GMRP Configuring GMRP The following sections describe how switch. GMRP Timers (milliseconds): Join = 200 Leave = 600 LeaveAll = 10000 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 294
privileged mode: Step 1 Step 2 Task Disable GMRP on individual switch ports. Verify the configuration. Command set port gmrp disable mod_num/port_num show gmrp configuration 15-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 295
Chapter 15 Configuring Multicast Services Configuring GMRP This example shows how to disable GMRP on ports Forward All groups option disabled on port 1/1. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 296
multicast groups that are specific to the port. switch. GMRP Timers (milliseconds): Join = 200 Leave = 600 LeaveAll = 10000 Port based GMRP Configuration: GMRP-Status Registration ForwardAll Port(s 15-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 297
Chapter 15 Configuring Multicast Services Configuring GMRP Enabled switch, not just GMRP. (For example, GVRP uses the same timers.) You can modify the default GARP timer values on the switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 298
23: Console> show gmrp statistics 23 GMRP Statistics for vlan : Total valid GMRP Packets Received:500 Join Empties:200 Join INs:250 15-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 299
Chapter 15 Configuring Multicast Services Configuring Multicast Router Ports and Group Entries Leaves:10 Leave manually specify multicast router ports and configure multicast group entries. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 300
Services Specifying Multicast Router Ports When you enable CGMP or GMRP, the switch automatically learns to which ports a multicast router is connected. However, you can manually -16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 301
Multicast Services Filtering specific manually configured multicast router port. Disable all manually switch-port basis, and are available to all VLANs that are associated with the physical port. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 302
. Using IGMP Traffic Filtering You can use IGMP filters in video service deployment of Ethernet to the Home (ETTH). IGMP transmits video channels None Disabled Deny 15-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 303
how to verify the disable configuration status of IGMP multicast filtering: Console> (enable) show igmp filter igmp filter is disabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-19 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 304
range of IP addresses. set igmp filter profile profile_id match-action permit Verify the permit configuration. show igmp filter profile profile_id match-action 15-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 305
Chapter 15 Configuring Multicast Services Filtering IGMP Traffic This example shows how to permit an IP (enable) clear igmp filter profile 1 226.1.1.1 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-21 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 306
Filtering IGMP Traffic Chapter 15 Configuring Multicast Services This example shows how to verify that an IGMP multicast enable) set igmp filter map 1 2/1 Console> (enable) 15-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 307
Chapter 15 Configuring Multicast Services Filtering IGMP Traffic This example shows how to display the association of > (enable) clear igmp filter map all Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-23 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 308
Filtering IGMP Traffic Chapter 15 Configuring Multicast Services 15-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 309
use port security to filter traffic that is destined to or received from a specific host that is based on the host MAC address. Allowing Traffic Based on of the rest of the ports 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 310
to the list of secure source addresses that were manually configured or autoconfigured (learned) on the port. , so that packets tagged with a specific source MAC address are discarded. When you Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 311
the Switch The following sections describe how to configure port security. Enabling Port Security Port security is either autoconfigured or enabled manually by Security Mode 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 312
1998, 17:53:38 This example shows how to enable port security on a port and manually specify the secure MAC address: Console> (enable) set port security 2/1 enable 00-90 enable) 16-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 313
Chapter 16 Configuring Port Security Configuring Port Security on the Switch This example shows how to reduce the number of MAC address list for port 4/7 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 314
show port unicast-flood mod/port This example shows how to configure the switch to disable unicast flood packets on a port and how to verify its configuration limitation. 16-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 315
• When the MAC address receives no packets during the time-out period • When the switch invalidates a CAM table entry and replaces the entry with a new one • When the 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 316
Configuring Port Security on the Switch Chapter 16 Configuring Port Security This example shows how to enable MAC before you attempt to connect the host to the port again. 16-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 317
Chapter 16 Configuring Port Security Configuring Port Security on the Switch Setting the Shutdown Time You can specify how long a -4f-ac-b4-00 - - - - Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 318
cam {static | permanent} This example shows how to create a filter for a specific MAC address: Console> (enable) set cam static filter 00-02-03-04- • Statistics data related to port security 16-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 319
1: Total ports: 2 Total MAC address(es): 2 Total global address space used (out of 1024): 0 Status: installed Module 3: Module does not support port security feature Module 6: 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 320
: 48 Total MAC address(es): 48 Total global address space used (out of 1024): 0 Status: installed Console> (enable) Chapter 16 Configuring Port Security 16-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 321
the show cam static command. Note If you are configuring unicast flood blocking on a secure port; see Chapter 16, "Configuring Port Security." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 17-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 322
traffic. • If the Ethernet port is part of an IPX network, you must manually enter a static CAM entry in the CAM table before you disable unicast flood on the mod/port disable 17-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 323
4/1. Console> (enable) Disabling Unicast Flood Blocking To configure the switch to receive unicast flood packets on a port, you must enable unicast Disabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 17-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 324
Configuring Unicast Flood Blocking on the Switch Chapter 17 Configuring Unicast Flood Blocking 17-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 325
. Outbound Telnet, Trivial File Transfer Protocol (TFTP), and other IP-based services are unaffected by the IP permit list. Telnet attempts from unauthorized source IP lists. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 18-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 326
Value Disabled None configured 2 Disabled Configuring the IP Permit List on the Switch The following sections describe how to configure IP permit list. Adding IP disabled. 18-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 327
before clearing IP permit entries or host addresses. To enable the IP permit list on the switch, perform this task in privileged mode: Step 1 Step 2 Step 3 Step 4 Task snmp 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 18-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 328
Disabling the IP Permit List To disable the IP permit list on the switch, perform this task in privileged mode: Step 1 Step 2 Task switch you are configuring in case you clear your current IP address. 18-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 329
Configuring the IP Permit List Configuring the IP Permit List on the Switch To clear an IP permit list entry, perform this task in permit list cleared. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 18-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 330
Configuring the IP Permit List on the Switch Chapter 18 Configuring the IP Permit List 18-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 331
as Spanning Tree Protocol (STP) and Cisco Discovery Protocol (CDP), are not affected by the port transmits packets of the specific protocol group. The switch detects the traffic, adds the port Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 19-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 332
example, if a host that supports both IP and Internetwork Packet Exchange (IPX) is connected to a switch port that is configured as . show port protocol [mod_num[/port_num]] 19-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 333
: Console> (enable) set protocolfilter enable Protocol filtering enabled on this switch. Console> (enable) set port protocol 3/1-4 ip on IP protocol set switch. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 334
Configuring Protocol Filtering on the Switch Chapter 19 Configuring Protocol Filtering 19-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 335
. You must apply configuration commands to the appropriate module. For example, on a Catalyst 2948G series switch, the 24 Fast Ethernet ports belong logically to module 2. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 336
This example shows how to check module status on a Catalyst 2948G switch: Console> (enable) show module Mod Slot Ports Module-Type Model Status 11 0 Switching Supervisor WS-X2948 ok 2 1 50 10/100/1000 Ethernet WS-X2948G ok Mod Module-Name Serial-Num 1 Supervisor JAB023807H1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 337
Admin Oper Detected mWatt mA @51V 2/1 none none - - - - - Port Security Violation Shutdown-Time Age-Time Max-Addr Trap IfIndex 2/1 disabled shutdown 0 0 1 disabled 15 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 338
mod[/port]] This example shows you how to display the MAC address of a specific port: Console> show port mac-address 4/1 Port Mac address 4/1 00-50- -92 4/48 00-50-54-bf-59-93 20-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 339
Inline power no WS-X4148 Port 3/5 Type 10/100BaseTX Speed auto,10,100 Duplex half,full Trunk encap type 802.1Q Trunk mode on,off,desirable,auto,nonegotiate Channel 3/1-48 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 340
Fast start QOS scheduling CoS rewrite ToS rewrite Rewrite UDLD Inline power AuxiliaryVlan SPAN Console> (enable) no yes static,dynamic yes rx disconnected automatically). 20-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 341
the client accessing the switch and you must configure SSH the switch. The current implementation of SSH supports version 1, both the data encryption standard (DES) generate. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 342
in privileged mode: Task Command Disconnect an active user session on the switch. disconnect {console | ip_addr} This example shows how to disconnect an mac.bigcorp.com 20-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 343
executive and privileged executive mode. In normal executive mode, the ping command supports the -s parameter, which allows you to specify the packet size and , press Ctrl-C. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 344
the -s option: Console> ping -s 12.20.5.3 800 10 PING 12.20.2.3: 800 data bytes 808 bytes from 12.20.2.3: icmp_seq=0. time=2 ms 808 bytes from 12.20.2.3: Console> (enable) 20-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 345
address, in port name, in port speed, in port duplex mode, out port name, out port speed, and out port duplex mode. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 346
TTL) field in the IP header to cause routers and servers to generate specific return messages. Traceroute starts by sending a User Datagram Protocol (UDP) tos] host [data_size] 20-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 347
byte packets 1 10.1.1.1 (10.1.1.1) 2 ms 2 ms 2 ms 1 ms 2 ms 2 ms 2 10.1.1.100 (10.1.1.100) 2 ms 4 ms 3 ms 3 ms 3 ms 3 ms Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-13 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 348
Using IP Traceroute Chapter 20 Checking Status and Connectivity 20-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 349
support Subnetwork Access Protocol (SNAP). CDP runs over the data link layer only. Cisco devices do not forward CDP packets. When new CDP information is received, old information is discarded. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 350
Setting the CDP Enable State on a Port You can enable or disable CDP on a per-port basis. You must enable CDP globally before the switch can transmit CDP messages on any ports. 21-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 351
enabled 3/3 disabled 3/4 disabled 3/5 disabled 3/6 disabled 3/7 enabled 3/8 enabled 3/9 enabled 3/10 enabled 3/11 enabled 3/12 enabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 21-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 352
CDP message interval specifies how often the switch will transmit CDP messages to directly connected Cisco devices. To set the default CDP message Time : 225 Console> (enable) 21-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 353
.52.36 Holdtime: 132 sec Capabilities: TRANSPARENT_BRIDGE SWITCH Version: WS-C2948 Software, Version McpSW: 5.1(57) NmpSW: 5.1(1) Copyright (c) 1995-1999 by Cisco Systems, Inc. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 21-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 354
on the Switch Platform: WS-C2948 Port-ID (Port on Neighbors's Device): 2/2 VTP Management Domain: Lab_Network Native VLAN: 522 Duplex: full Console> (enable) Chapter 21 Configuring CDP 21-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 355
the current data from the earlier data, and stores the difference. The switch sorts data for each port using a user-specified metric that is selected from the types listed in Table 22-1. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 356
Pressing Ctrl-C does not terminate the process. Completed Switch TopN reports remain available for viewing until you remove them using the clear top {all | report_num} command. 22-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 357
example shows how to run the Switch TopN Reports utility in the foreground: Console> (enable) show top 5 pkts Start Time: 06/16/1998,17:26:38 End Time: 06/16/1998,17:27:09 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 22-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 358
} to remove all completed Switch TopN reports. Note The clear top all command does not clear pending Switch TopN reports. Only the reports that have completed are cleared. 22-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 359
TopN Reports This example shows how to remove a specific Switch TopN report and how to remove all stored reports: Console> (enable 5 killed by Console//. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 22-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 360
Running and Viewing Switch TopN Reports Chapter 22 Using Switch TopN Reports 22-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 361
affected port and alerts the user. Unidirectional links can cause a variety of problems, including spanning-tree topology loops. UDLD is a Layer 2 protocol that Layer 1 feature. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 23-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 362
links: - Software release 5.2 or later releases - Ethernet or Fast Ethernet copper switching modules Default UDLD Configuration Table 23-1 shows the default UDLD configuration. 23-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 363
globally before any port can use UDLD. To enable UDLD globally on the switch, perform this task in privileged mode: Step 1 Step 2 Task Enable UDLD : enabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 23-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 364
in privileged mode: Step 1 Step 2 Task Disable UDLD on a specific port. Verify the configuration. Command set udld disable mod_num/port_num show udld Console> (enable) 23-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 365
support UDLD aggressive mode. UDLD aggressive mode is disabled by default and its use is recommended only for point-to-point links between Cisco switches 4/1. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 23-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 366
Configuring UDLD on the Switch Chapter 23 Configuring UDLD This example shows how to verify that UDLD aggressive UDLD is enabled or disabled. Message interval, in seconds. 23-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 367
Chapter 23 Configuring UDLD Configuring UDLD on the Switch Table 23-2 show udld Command Output Fields (continued) Field Port link has been detected and the port is disabled). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 23-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 368
Configuring UDLD on the Switch Chapter 23 Configuring UDLD 23-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 369
from the CLI, page 24-14 • Using CiscoWorks2000, page 24-17 SNMP Terminology Table 24-1 lists the terms used in SNMP technology. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 370
or security level. encryption A method of hiding data from an unauthorized user by scrambling the contents of by the SNMP agent. Currently, software supports three security models: SNMPv1, SNMPv2c, and Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 371
of SNMP supports centralized and distributed find and solve network problems, and plan for RFC 1902, has additions and enhancements to data types, counter size, and protocol operations. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 372
and VLAN is always retained and used after the following occurrences: • Switch reboot • High-availability switchover • Software upgrade • Module reset • Module switchover. 24-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 373
there are authentication failures - When power supply errors occur • SNMP community strings on the switch. Catalyst enterprise LAN switches are managed devices that support SNMP network Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 374
SNMP Note For information about MIBs, refer to this URL: http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml. SNMPv1 and SNMPv2c Default SNMP commands supported by the Catalyst enterprise LAN switches, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command - Cisco WS-C2950ST-24-LRE | Software Guide - Page 375
an SNMP community, set the community string for that community to the null string (do not enter a value for the community string). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 376
entries:85 percent Traps Enabled:None Port Traps Enabled:None Community-Access Community-String read-only public read-write private read-write-all secret 24-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 377
that are associated with one or more hosts to limit which hosts can use a specific community string to access the system. You can specify more than one IP address mask 255.0.0.0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 378
privileged mode: Step 1 Step 2 Task Specify an interface alias. Display the interface alias. Command set snmp ifalias {ifIndex} [ifAlias] show snmp ifalias [ifIndex] 24-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 379
following benefits for managing your network: • SNMP devices can collect data securely without being tampered with or corrupted. • You can encrypt • Access Control Subsystem 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 380
Model. The Dispatcher is also responsible for dispatching protocol data units (PDUs) to applications and for selecting the modules, each supporting a different version of SNMP. 58568 24-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 381
. Depending on the services required, the Security of the Security Subsystem may support one or more distinct security set management data. • Command responders-Provide access to management data. For example Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 382
are supported by the Catalyst enterprise LAN switches, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command read-write | read-write-all) 24-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 383
authProt sha authPasswd guestuser2password privProt no-priv with engineid 00:00:00:09:00:10:7b:f2:82:00:00:00 nonvolatile. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 384
10.6.4.201 guestuser1 ifDescr.1 Enter Authentication password :guestuser1password Enter Privacy password :privacypasswd1 Error code set in packet - AUTHORIZATION_ERROR:1. 24-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 385
and troubleshoot a switched internetwork. For more information, refer to the following publications: • Getting Started with Resource Manager Essentials • Getting Started with CWSI Campus 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 386
Using CiscoWorks2000 Chapter 24 Configuring SNMP 24-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 387
in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter consists of these sections: • Understanding How RMON Works, page 25-1 • Enabling RMON, page 25-2 • Viewing RMON Data, page 25-2 • Supported RMON and RMON2 MIB Objects, page - Cisco WS-C2950ST-24-LRE | Software Guide - Page 388
" section on page 24-17). You cannot access RMON data through the switch CLI; however, CLI show commands provide similar information (refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference). Supported RMON and RMON2 MIB Objects Table 25-1 lists the RMON - Cisco WS-C2950ST-24-LRE | Software Guide - Page 389
(18) engine Supervisor ...mib-2(1).rmon(16).probeConfig(19) engine Supported RMON and RMON2 MIB Objects Definition Source Counters for packets, configurations. RFC 2021 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 25-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 390
Supported RMON and RMON2 MIB Objects Chapter 25 Configuring RMON 25-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 391
is operational. An RSPAN source session remains inactive until any of the source ports are operational or the RSPAN VLAN becomes active. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 392
network to the switching bus), unless you specifically enable the port. If incoming traffic is enabled for the destination port, it is switched in the native destination port. 26-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 393
ports: • Gigabit uplink ports on the WS-4013 Supervisor II • Gigabit uplink ports on the 2980G-A • Gigabit ports on the WS-4232-L3 module The SPAN line in the is empty. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 394
including multicast and bridge protocol data unit (BPDU) packets, can be monitored using SPAN (RSPAN does not support monitoring of BPDU packets). SPAN and RSPAN Session Limits You can configure (and store in NVRAM) up to five SPAN sessions in a Catalyst 4500 series switch. The five sessions can be - Cisco WS-C2950ST-24-LRE | Software Guide - Page 395
You can span local traffic that passes through the switch. • You can have up to five SPAN sessions running at the same time with any combination of ingress and egress sessions. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 396
: Port 2/1-2 Direction : transmit/receive Incoming Packets: disabled Learning : enabled Filter : - Status : active Total local span sessions: 1 Console> (enable) 26-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 397
3/5 both filter 50,850 Overwrote Port 3/5 to monitor transmit/receive traffic of Port 3/4 Incoming Packets disabled. Learning enabled. Console> (enable) show span Destination : Port 3/5 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 398
requirements are as follows: • For source switches-Any Catalyst 4500 series switch supervisor engine • For destination or intermediate switches-Any Catalyst 4500 series or Catalyst 6500 series switch supervisor engine You cannot place any third-party or other Cisco switches in the end-to-end path - Cisco WS-C2950ST-24-LRE | Software Guide - Page 399
ports and the destination port across multiple switches. • A port cannot serve as an RSPAN source port or RSPAN destination port while designated as an RSPAN reflector port. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 400
Inter-Switch Link (ISL) to map dot1q. However, ensure that the special properties of RSPAN VLANs are supported in all the switches to and destination switches using the set rspan command. 26-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 401
Task Configure RSPAN source ports. Use this command on each of the source switches participating in RSPAN. Verify the RSPAN configuration. Command set rspan source {mod/ : - 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 402
destination ports. Use this command on each of the destination switches participating in RSPAN. Verify the RSPAN configuration. Command set rspan Destination : Port 3/1 26-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 403
you want to continue (y/n) [n]? y Disabled monitoring of all source(s) on the switch for remote span. Console> (enable) This example shows how to disable one configure RSPAN. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-13 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 404
session. Table 26-2 Making Modifications to an Active RSPAN Session Switch A (source) Action Disable the RSPAN session. RSPAN CLI Commands set rspan disable source 901 26-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 405
26-4 for the necessary configuration commands to configure this RSPAN session. This is a typical scenario where the monitoring probes would be placed in the data center and 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 406
, in Figure 26-6, you can add probe 3 in Switch B to monitor RSPAN VLAN 901 using the set rspan destination 1/2 901 command. Similarly, you could add source ports to Switch C. 26-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 407
command needed set rspan disable destination all set rspan disable destination all set rspan disable source all No RSPAN CLI command needed 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-17 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 408
Configuring RSPAN Chapter 26 Configuring SPAN and RSPAN 26-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 409
on the switch If the DNS lookup is successful, the DNS host name of the switch is configured as the system name of the switch and is saved in NVRAM (the domain name is removed). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 410
updated whenever the system name changes, unless you have manually configured the prompt using the set prompt command. The switch performs a DNS lookup for the system name whenever one of the following occurs: • When the switch is initialized (power on or reset) • When you configure the IP address - Cisco WS-C2950ST-24-LRE | Software Guide - Page 411
system PS1-Status PS2-Status PS3-Status PEM Installed PEM Powered ok ok ok yes no Fan-Status Temp-Alarm Sys- WS-X4008-DC-650W WS-X4008 WS-X4008 Modem Baud Traffic Peak Peak-Time 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 412
Switch disable 9600 0% 0% Wed Apr 24 2002, 15:46:01 Power Capacity of the Chassis:2 supplies WARNING:Power supplies in to the switch. Command set banner motd c message_of_the_day c - 27-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 413
to disable the Cisco Systems Console Telnet login banner: Console> (enable) set banner telnet disable Cisco Systems Console banner will not be printed at telnet. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 414
Mod Slot Ports Module-Type Model Sub Status 33 6 1000BaseX Ethernet WS-X4306 no ok Mod Module-Name Serial-Num 3 JAB024000YY Mod MAC-Address(es) Hw Fw Sw 27-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 415
task in privileged mode: Step 1 Step 2 Task Define an IP alias on the switch. Verify the currently defined IP aliases. Command set ip alias name ip_addr show ip alias [name] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 416
the ARP entry is retained even after a system reset. Because most hosts support dynamic resolution, you usually do not need to specify static or permanent ARP cache > (enable) 27-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 417
to determine which gateway to use to forward IP traffic. In releases prior to software release 5.1, the switch always uses the classful subnet mask for IP routing table entries. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 418
reset in 30 minutes and return to the previous configuration. Scheduling a Reset at a Specific Time You can specify an absolute time and date at which the reset will take day. 27-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 419
specific amount of time. reset [mindown] in [hh] {mm} [reason] Verify that the scheduled reset time is correct. show reset Note The minimum downtime argument is valid only if the system has a redundant supervisor engine. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches - Cisco WS-C2950ST-24-LRE | Software Guide - Page 420
(Refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference for these commands.) You can upload the report to a TFTP server and send it to the Cisco Technical Assistance Center (TAC). You can use keywords to limit the report, such as for specific modules, VLANs - Cisco WS-C2950ST-24-LRE | Software Guide - Page 421
. Note For information on power management for the Catalyst 4006 switch, see the "Understanding How Power Management Works on the Catalyst 4006 Switch" section on page 28-6. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 422
power supplies with different types or wattages in your switch, the switch uses the power supply in power supply bay 1 (PS1) and ignores the power supply in power supply bay (PS2). Your switch will not have power redundancy. Understanding Power Management Modes Catalyst 4500 series switches support - Cisco WS-C2950ST-24-LRE | Software Guide - Page 423
mode in the Catalyst 4500 series switches: • The two power supplies must be the same type. • If you use power supplies with different types or wattages, the switch uses only one power supply. Your switch will have no power redundancy. • The 1400 W DC power supply does not support combined mode. If - Cisco WS-C2950ST-24-LRE | Software Guide - Page 424
the power supplies. • If you insert a single power supply into the switch and then set combined mode, the switch displays this message: Insufficient power supplies present for specified configuration. 28-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 425
status of the inline power switch can be reported to software. If the power supply fan fails, the display shows the power as faulty, even if the main power is working properly. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 426
a reduced number of power supplies. The Catalyst 4000 series switch chassis supports only the 400 W AC, 400 W DC, and 650 W DC power supplies and allows you to use AC-input and DC-input power supplies in the same chassis. In systems with redundant power supplies, both power supplies should have the - Cisco WS-C2950ST-24-LRE | Software Guide - Page 427
Chapter 28 Power Management Understanding How Power Management Works on the Catalyst 4006 Switch If you choose to use the 1+1 redundancy mode, the type and number of modules that are supported are limited by the power that is available from a single power supply. To determine the power consumption - Cisco WS-C2950ST-24-LRE | Software Guide - Page 428
mode for either a 400 W or 650 W power supply. • WS-X4013 supervisor engine-110 W • Five 48-port 100BASE-FX modules in slots 2 through 6-120 W each (600 W total) • Fan tray-25 W 28-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 429
100BASE-FX Fast Ethernet switching module WS-4148-FX-MT 18-port server switching 1000BASE-X (GBIC) Gigabit Ethernet WS-4418-GB Catalyst 4006 Backplane Channel Module WS-X4019 48-port 10/100 Fast Ethernet RJ-45 WS-X4148-RJ Catalyst 4003 and 4006 Layer 3 Services Module WS-X4232-L3 12-port 1000BASE - Cisco WS-C2950ST-24-LRE | Software Guide - Page 430
Migrating a Supervisor Engine II from a Catalyst 4006 Switch to a Catalyst 4500 Series Switch Chapter 28 Power Management Table 28-2 Power Consumption for Catalyst 4500 Series and 4000 Series Components (continued) Module 48-port 1000BASE-X Gigabit Ethernet WS-X4448-GB-LX 48-port Telco 10/100BASE - Cisco WS-C2950ST-24-LRE | Software Guide - Page 431
type. Table 28-3 lists the switch components that support inline power. Table 28-3 Switch Components Supporting Inline Power Switch Chassis Catalyst 4006 Catalyst 4503 Catalyst 4506 Modules WS-X4148-RJ45V WS-X4148-RJ45V Power Supplies Catalyst 4000 Series Power Entry Module (PEM) 1300 W AC - Cisco WS-C2950ST-24-LRE | Software Guide - Page 432
with the actual power requirement to the supervisor engine. The supervisor engine then decreases the allocated power to the required amount if the port is set to Auto mode. 28-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 433
and applies the preallocated inline power to the phone. Powering Off the Phone The supervisor engine can turn off power to a specific port by sending a message to the switching module. The power for a port in Auto mode is then added back to the available system power. Power for ports in Static mode - Cisco WS-C2950ST-24-LRE | Software Guide - Page 434
28-1 Power Detection Summary Catalyst Switch Inline power switching module Cisco legacy powered device Switching module discovers the powered device using proprietary discovery mechanism Inline power switching module Inline power switching module Third party powered device Wall-power Switching - Cisco WS-C2950ST-24-LRE | Software Guide - Page 435
Amps @12V) Power Drawn from the System (excluding voice power): 516 Watts (43.00 Amps @12V) Remaining Power (excluding voice power): 1150 Watts (95.83 Amps @12V) Console>(enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 436
2 Task Set the power budget for the Catalyst 4006 switch. Verify the power budget and the current power usage for the switch. Command set power budget {1 | 2} show environment power 28-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 437
Type PS2-Type PWR-C45-2800AC PWR-C45-1000AC Modem Baud Traffic Peak Peak-Time disable 9600 0% 0% Fri May 31 2002, 10:24:04 Power Capacity of the Chassis: 1 supply 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-17 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 438
only one power supply in your set power budget 1 Catalyst 4506 switch, set the power budget to 1. If you have two power supplies, set the power budget to 2. Configuring Inline Power These sections show how to configure inline power for the Catalyst 4500 series switches and the Catalyst 4006 switch - Cisco WS-C2950ST-24-LRE | Software Guide - Page 439
the power status for modules and individual ports, perform this task in normal mode: Task Display the power status for individual ports. Command show port inlinepower [mod[/port]] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 440
Cisco None cisco Port Maximum Power mWatt mA @42V 6/1 5200 123 Console> (enable) Actual Consumption mWatt mA @42V 5000 119 absentCounter ------------0 OverCurrent ----------0 28-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 441
into any 10/100 or 10/100/1000 switching module. Table 29-1 Catalyst 4500 Series Components Supporting Inline Power Switch Chassis Catalyst 4006 Catalyst 4503 Catalyst 4506 Modules WS-X4148-RJ45V1 WS-X4148-RJ45V Power Supplies Catalyst 4000 Family Power Entry Module (PEM) 1300 W AC 2800 W AC - Cisco WS-C2950ST-24-LRE | Software Guide - Page 442
Catalyst 4000, 4500, 2926G, or 2926 series switches can connect to an IP Phone and carry IP voice traffic. If necessary, the switch can supply electrical power to the circuit connecting it to an IP Phone. Cisco the same port. • The data traffic on the VLAN that supports the phones might reduce the - Cisco WS-C2950ST-24-LRE | Software Guide - Page 443
VLANs" section on page 10-13. • Configure inline power if necessary. The Catalyst 4500 series switch can sense if it is connected to a Cisco IP Phone. The Catalyst 4006 or Catalyst 4500 series switch can supply inline power to an IP Phone if there is no power on the circuit. An IP Phone can also be - Cisco WS-C2950ST-24-LRE | Software Guide - Page 444
Configuring VoIP on a Switch Chapter 29 Configuring VoIP 29-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 445
How Authentication Works You can configure any combination of these authentication methods to control access to the switch: • Login authentication • Local authentication 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 446
allowed only a specific number of attempts to successfully log in to the switch. If the user methods (RADIUS, TACACS+, Kerberos, or local) are supported. The lockout (delay) time is also configurable Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 447
, so that a given TACACS+ configuration can use any or all of the three services. When the TACACS+ server receives the packet, it does the following: • Authenticates or fails. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 448
the RADIUS protocol, refer to RFC 2138, "Remote Authentication Dial In User Service (RADIUS)." With RADIUS, you can do the following: • Enable or RADIUS server deadtime interval 30-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 449
services. A credential for a network service. When issued from the KDC, this credential is encrypted with the password that is shared by the network service and the KDC and with the user's TGT. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 450
instructed to do so, it forwards the TGT to the switch. This ensures that the user does not need to get another TGT in order to use another network service from the switch. Figure 30-1 illustrates the Kerberos Telnet connection process. 30-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G - Cisco WS-C2950ST-24-LRE | Software Guide - Page 451
If the decryption is successful, you are authenticated to the switch. 5. If you want to access other network services, you must contact the KDC directly for authentication. To . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 452
Enabled Disabled Disabled Disabled None specified 3 times 5 sec Disabled Disabled Disabled None specified Port 1812 None specified 5 sec 0 (servers not marked dead) 2 times 30-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 453
particular server as primary by using the primary keyword. • RADIUS and TACACS+ support one privileged mode only (level 1). • Kerberos authentication does not work if on the switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 454
enabled(primary) enabled(primary) attempt limit 3 3 lockout timeout (sec) disabled disabled Console> (enable) Http Session disabled disabled disabled enabled(primary) - 30-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 455
local enabled(primary) enabled(primary) attempt limit 5 5 lockout timeout (sec) 50 50 Console> (enable) Http Session disabled disabled disabled enabled(primary) - 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 456
Session Telnet Session tacacs disabled disabled radius disabled disabled kerberos disabled disabled local enabled(primary) enabled(primary) Console> (enable) 30-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 457
on the switch: Console> (enable) set enablepass Enter old password: Enter new password: Retype new password: Password changed. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 458
Steps 3 through Step 7 within 30 seconds of a power cycle or the recovery will fail. If you have lost both the login and enable passwords, repeat the process for each password. 30-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 459
15 Added local user picard. Console> (enable) show localusers Local User Authentication: disabled Username Privilege Level --------- picard 15 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 460
disabled disabled kerberos disabled disabled local * enabled(primary) enabled(primary) attempt limit 3 3 Http Session disabled disabled disabled enabled(primary) - 30-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 461
) - Deleting a Local User Account To delete a local user account on the switch, perform this task in privileged mode: Step 1 Step 2 Task Delete a local . show tacacs 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-17 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 462
used only on console or Telnet connections. If you are using both RADIUS and TACACS+, you can enter the primary keyword to force the switch to try TACACS+ authentication first. 30-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 463
Chapter 30 Configuring Switch Access Using AAA Configuring Authentication To enable TACACS+ authentication, perform this to Secret_TACACS_key. Console> (enable) show tacacs 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-19 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 464
Configuring Authentication Chapter 30 Configuring Switch Access Using AAA Tacacs key: Secret_TACACS_key Tacacs login attempts: set to 5. Console> (enable) show tacacs 30-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 465
1 Step 2 Task Command Enable TACACS+ directed request on the switch. set tacacs directedrequest enable Verify the TACACS+ configuration. show tacacs . Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-21 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 466
the TACACS+ server configuration. show tacacs This example shows how to clear a specific TACACS+ server from the configuration: Console> (enable) clear tacacs server 172 automatically. 30-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 467
The following sections describe how to configure RADIUS authentication on the switch. Specifying RADIUS Servers To specify one or more RADIUS servers, primary] show radius 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-23 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 468
-23. You can enable RADIUS authentication for login and enable access to the switch. If desired, you can use the console and telnet keywords to specify that show authentication 30-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 469
): Console> (enable) set radius key Secret_RADIUS_key Radius key set to Secret_RADIUS_key Console> (enable) show radius Login Authentication: Console Session Telnet Session 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-25 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 470
Key: Radius Retransmit: Radius Timeout: 0 minutes Secret_RADIUS_key 2 10 seconds Radius-Server Status 172.20.52.3 primary Console> (enable) Auth-port -----------1812 30-26 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 471
the dead time interval (such as other users attempting to log in to the switch) are not sent to a RADIUS server that is marked dead. Configuring a dead servers available. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-27 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 472
of the attributes is disabled by default. Note Software release 7.5(1) supports only the framed-IP address (Attribute 8). To specify optional attributes | disable] show radius 30-28 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 473
Chapter 30 Configuring Switch Access Using AAA Configuring Authentication This example shows how to specify and the RADIUS configuration. Command clear radius key show radius 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-29 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 474
(enable) show authentication Login Authentication tacacs radius local Console Session disabled disabled enabled(primary) Telnet Session disabled disabled enabled(primary) 30-30 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 475
Enable Kerberos authentication. Step 2 Verify the configuration. Command set authentication login kerberos enable [all | console | http | telnet] [primary] show authentication 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-31 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 476
and network services that are registered to a Kerberos server. To authenticate a user defined in the Kerberos database, the switch must know the switch. Command set kerberos local-realm kerberos-realm 30-32 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 477
- 750 Console> (enable) Console> (enable) clear kerberos server CISCO.COM 187.0.2.1 750 Kerberos Realm-Server-Port entry CISCO.COM-187.0.2.1-750 deleted Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-33 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 478
can enter the SRVTAB directly into the switch. set kerberos srvtab entry kerberos-principal principal-type timestamp key-version number key-type key-length encrypted-keytab 30-34 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 479
credentials forwarding, configure the switch to forward user TGTs when they authenticate from the switch to Kerberized remote hosts on the network using Kerberized Telnet. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-35 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 480
credentials forwarding configuration, perform this task in privileged mode: Task Command Disable the credentials forwarding configuration. clear kerberos credentials forward 30-36 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 481
that the switch shares with the KDC so that when the show kerberos command is executed, the secret key is not displayed in clear text. The key length should be eight characters or less. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 482
Kerberos config key:abcd Kerberos SRVTAB Entries Srvtab Entry 1:host/[email protected] 0 933974942 1 1 8 12151>>3>11 Console> (enable) kerberos] host 30-38 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 483
Entries Srvtab Entry 1:host/[email protected] 0 932423923 1 1 8 03;;5>00>50;0=0=0 Srvtab Entry 2:host/[email protected] 0 933974942 1 1 8 kerberos creds 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-39 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 484
set to enable for telnet session. Console> (enable) set authentication login local disable telnet local login authentication set to disable for telnet session. 30-40 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 485
Catalyst 4500 series switch supports TACACS+ and RADIUS authorization to control access to the switch enabled for EXEC mode, the user must supply a valid username and password pair to access Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-41 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 486
if authentication succeeds. If you have Administrative/Shell (6) Service-Type access, the NAS authenticates you and logs you in to privileged mode if authentication succeeds. 30-42 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 487
section describes the guidelines for configuring authorization on the switch: • TACACS+ authorization is disabled by default. • configure TACACS+ authorization on the switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-43 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 488
shows how to verify the configuration: Console> (enable) show authorization Telnet: ------- Primary Fallback exec: tacacs+ deny enable: tacacs+ deny commands: 30-44 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 489
Telnet connections and how to verify the configuration: Console> (enable) set authorization enable disable both Successfully disabled enable authorization. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-45 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 490
. The TACACS+ daemon determines if the user is authorized to use the feature and sends a response either executing the command or denying access. 30-46 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 491
: config: tacacs+ all: - Console> (enable) Fallback -------- deny deny deny - Understanding How Accounting Works The following sections describe how accounting works. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-47 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 492
, type of service, and traffic statistics). • Stop records-Include complete information of the event (when the event started, its duration, type of service, and traffic statistics). 30-48 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 493
Deadtime: Radius Key: Radius Retransmit: Radius Timeout: 0 minutes 2 5 seconds Radius-Server Status 172.20.52.3 primary Console> (enable) Auth-port -----------1812 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-49 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 494
to suppress accounting when an unknown user with no username accesses the switch by using the set accounting suppress null-username enable command. Note RADIUS key setup. 30-50 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 495
of unknown users: Console> (enable) set accounting suppress null-username enable Accounting will be suppressed for user with no username. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-51 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 496
System 1 0 0 Console> (enable) Disabling Accounting To disable accounting on the switch, perform this task in privileged mode: Step 1 Step 2 Step 3 Step Console> (enable) 30-52 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 497
gathered at the conclusion of the event. Accounting is suspended for unknown users and the system is updated periodically every 120 minutes. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-53 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 498
on tty288091924, User (null) Priv 0 Overall Accounting Traffic: Starts Stops Active Exec 0 0 0 Connect 0 0 0 Command 0 0 0 System 1 0 0 Console> (enable) 30-54 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 499
each user device that is connected to a switch port before making available any services that are offered by the switch or the LAN. Until the device is port, which is 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 500
devices in the network have specific roles. (See Figure 31-1.) Figure 31-1 802.1x Device Roles Workstations (supplicants) Catalyst switch Authentication server (RADIUS) 79599 • Host-Requests access to the LAN and switch services and responds to requests from the switch. The workstation must be - Cisco WS-C2950ST-24-LRE | Software Guide - Page 501
-4. The specific exchange of EAP frames depends on the authentication method that is being used. Figure 31-2 shows a message exchange that is initiated by the host using the One-Time-Password (OTP) authentication method with a RADIUS server. Figure 31-2 Message Exchange Supplicant Catalyst switch - Cisco WS-C2950ST-24-LRE | Software Guide - Page 502
that does not support 802.1x is connected to an unauthorized 802.1x port, the switch requests the host to authenticate. The switch cannot provide authentication services to the host Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 503
bridge ports). Protocol object that is associated with a specific system port. PDU Protocol data unit. RADIUS Remote Access Dial In User Service. PAE (Referred to as the "host") entity that requests access to the LAN/switch services and responds to information requests from the authenticator - Cisco WS-C2950ST-24-LRE | Software Guide - Page 504
specific supplied VLAN received by the first authenticated user. • When an 802.1x-configured module goes down, the server clears all Enhanced Address Recognition Logic (EARL) entries for 802.1x ports. 31-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 505
RADIUS server must return the following three RFC 2868 attributes back to the authenticator (the Cisco switch to which the host attaches): • [64] Tunnel-Type = VLAN • [65] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 506
the switch: • 802.1x will work with other protocols, but we recommend that you use RADIUS with a remotely located authentication server. • 802.1x is supported only for it. 31-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 507
.1x authentication for access to the switch, perform this task in privileged mode: Step 1 Step 2 Step 3 Task Enable 802.1x control on a specific port. Initialize 802.1x on the 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 508
are connected to a specific port. To manually reauthenticate the host that is connected to a specific port, see the "Manually Reauthenticating the Host" port 4/1 authorized. 31-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 509
To enable multiple-user access on a specific port, perform this task in privileged mode: Task Enable multiple hosts on a specific port. Command set port dot1x mod/port . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 510
Configuring 802.1x Authentication on the Switch Chapter 31 Configuring 802.1x Authentication Setting the Authenticator-to supp-timeout 15 dot1x supp-timeout set to 15 seconds. 31-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 511
end authenticator each time that it receives a specific number of frames. When the back-end manually reenable it or configure the shutdown timeout period after which the port can be enabled again. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 512
server notifies the back-end authenticator each time that it receives a specific number of frames. When the back-end authenticator does not receive this set dot1x max-req count 31-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 513
Configuring 802.1x Authentication Configuring 802.1x Authentication on the Switch This example shows how to set the number of retransmitted of the system. Use with caution. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-15 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 514
the different types of EAP frames that are transmitted and received by the authenticator on a specific port on a specific module. Command show port dot1x statistics mod/port 31-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 515
Configuring 802.1x Authentication Configuring 802.1x Authentication on the Switch This example shows how to display the statistics for the 30 seconds tx-period 30 seconds 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-17 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 516
Configuring 802.1x Authentication on the Switch Chapter 31 Configuring 802.1x Authentication 31-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 517
how the boot configuration works on the Catalyst 4500 series, 2948G, and 2980G switches. Understanding the Boot Process The boot process involves two software images: ROM monitor and supervisor engine system code. When you power up or reset the switch, the ROM-monitor code is executed. Depending - Cisco WS-C2950ST-24-LRE | Software Guide - Page 518
-monitor mode, you can manually load a system image from Flash memory, from a network server file, or from bootflash. Note For complete syntax and usage information for the ROM monitor commands, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. You can - Cisco WS-C2950ST-24-LRE | Software Guide - Page 519
to configure the switch. If multiple valid configuration files are specified, each configuration file is executed in the order in which it appears in the CONFIG_FILE environment variable. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 520
are supported: • ROM monitor-Use the rommon keyword to keep the switch in ROM-monitor mode at startup. • Bootflash-Use the bootflash keyword to cause the switch to boot command. 32-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 521
rommon | bootflash | system} [mod_num] This example shows how to force the switch to enter ROM-monitor mode at the next startup: Console> (enable) set monitor Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 32-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 522
system flash bootflash:cat4000.6-1-1.bin prepend BOOT variable = bootflash:cat4000.6-1-1.bin,1;bootflash:cat4000.5-1-1.bin,1; bootflash:cat4000.4-5-2.bin,1; Console> (enable) 32-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 523
clear a specific entry switch type): Task Set the list of configuration files to add to the CONFIG_FILE environment variable. Command set boot auto-config device:filename[;device:filename...] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 524
-config CONFIG_FILE variable = Console> (enable) Displaying the Switch Boot Configuration To display the current configuration register, BOOT system commands Console> (enable) 32-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 525
Software Images to the Switch Using TFTP The following sections describe how to download system software images to the switch supervisor engine and to intelligent modules. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 526
the file should be at least read for the specific username. If you are not using a Telnet session with a valid username, you can use the set rcp username command to specify a valid username. • Ensure that a power interruption (or other problem) does not occur during the download procedure; this can - Cisco WS-C2950ST-24-LRE | Software Guide - Page 527
1 Mod Port Model Serial # Versions 1 0 WS-X4012 JAB03130104 Hw : 1.5 Gsp: 6.1(1.4) Nmp: Bootstrap, Version 3.1(2) Copyright (c) 1994-1997 by cisco Systems, Inc. Presto processor with 32768 Kbytes Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 528
images from a switch to a TFTP server. For more information on working with system software image files on the Flash file system, see Chapter 34, "Working With the Flash File System." 33-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 529
Images to the Switch Using rcp The following sections describe how to download system software images to the switch supervisor engine and to intelligent modules using rcp. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 530
will be used and there is no need to set the rcp username. • A power interruption (or other problem) during the download procedure can corrupt the Flash code. If the Flash code is corrupted, you can connect to the switch through the console port. You can download the Flash code again through an - Cisco WS-C2950ST-24-LRE | Software Guide - Page 531
:39:SYS-5:System reset from Console// System Bootstrap, Version 3.1(2) Copyright (c) 1994-1997 by cisco Systems, Inc. Presto processor with 32768 Kbytes of main memory Autoboot executing command: "boot Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 532
images from a switch to an rcp server. For more information on working with system software image files on the Flash file system, see Chapter 34, "Working With the Flash File System." 33-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 533
are set to write for the specific username. Uploading Software Images to an rcp Server To upload a software image on a switch to an rcp server for storage, Cisco for repair. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 534
is accessible from the switch to be upgraded. The promupgrade programs are available at the same location on cisco.com where you download Catalyst 4000 system images. Step 6. 33-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 535
software image that the switch was originally configured to boot. Note A Telnet session is disconnected when you reset the switch; you will lose connectivity to the switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 536
Upgrading your PROM... DO NOT RESET the system unless instructed or it may NOT be bootable!!! Beginning erase of WS-C4003 Software, Version NmpSW:5.5(8) Copyright (c) 1995-2001 by Cisco Systems, Inc. 33-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 537
compiled on May 24 2001, 18:39:50 System Bootstrap Version:6.1(4) Hardware Version:1.0 Model:WS-C4003 Serial #:xxxxxxxxx . . . Console > (enable) Step 10 Enter the clear . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-13 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 538
Upgrading the ROM Monitor Chapter 33 Working with System Software Images 33-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 539
change the default Flash device to bootflash: and verify the default device: Console> (enable) cd bootflash: Console> (enable) pwd bootflash Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 34-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 540
Display a list of files on a Flash device. Display a list of only deleted files on a Flash device. Command dir [[m/]device:][filename] dir [[m/]device:][filename] deleted 34-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 541
Working With the Flash File System Working With the Flash File System on the Switch Task Display a list of all files on a Flash device, including deleted end Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 34-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 542
[bootflash]? Name of file to copy to [dns-config.cfg]? 9932056 bytes available on device slot0, proceed (y/n) [n]? y / File has been copied successfully. Console> (enable) 34-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 543
the Flash File System Working With the Flash File System on the Switch This example shows how to copy the running configuration to Flash memory: entered the squeeze command. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 34-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 544
Working With the Flash File System on the Switch Chapter 34 Working With the Flash File System To delete files from bytes available (3231989 bytes used) Console> (enable) 34-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 545
cat4000.4-4-1.bin CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCCCCCCCCCCC File bootflash:cat4000.4-4-1.bin verified OK Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 34-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 546
Working With the Flash File System on the Switch Chapter 34 Working With the Flash File System 34-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 547
. Enter a blank line after the set password and set enablepass commands. The passwords are saved in the configuration file as clear text. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 35-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 548
end Configuring the Switch Using a File in Flash Memory You can configure the switch using a file stored in Flash memory. The procedure varies depending on your switch platform. 35-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 549
another switch. In addition, you can store configuration files on Flash devices on hardware that supports the Flash file system, configure the switch using to a Flash device. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 35-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 550
to a TFTP Server The next two sections describe how to upload the running configuration or a configuration file stored on a Flash device to a TFTP server. 35-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 551
rcp to copy files, the server from or to which you will be copying files must support rcp. The rcp copy commands rely on the remote shell (rsh) server (or daemon) on only to 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 35-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 552
that the workstation acting as the rcp server supports the rsh. • Ensure that the switch has a route to the rcp server. The switch and the server must be in the ip dns enable 35-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 553
copy to []? cat4000_config.cfg Upload configuration to rcp:cat4000_config.cfg, (y/n) [n]? y Configuration has been copied successfully. Console> (enable) Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 35-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 554
on a specific module: Console> (enable) clear config 2 This command will clear module 2 configuration. Do you want to continue (y/n) [n]? y Module 2 configuration cleared. Console> (enable) 35-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C2950ST-24-LRE | Software Guide - Page 555
switch engines • Full-mesh connectivity between switch engines • Reduced internal traffic congestion The switch acceleration feature is supported on Catalyst 4006 switches SE3. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 36-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 556
are supported. Figure 36-1 shows the possible configurations. Figure 36-1 Switch switch acceleration, you need to disable the two front-panel Gigabit Ethernet uplink ports on Supervisor Engine II. 36-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 557
by providing multilink load balancing between the switch engines. The Backplane Channel Module also allows you to retain the Gigabit Ethernet uplinks on the supervisor engine. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 36-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 558
SEs. Note If you want to keep the uplink connections, do not enable switch acceleration on the supervisor engine. You can insert or remove a Backplane Channel enabled by default. 36-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 559
When the switch first initializes, the network is not connected until the initialization completes. Messages that are redirected to a syslog server are delayed up to 90 seconds. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 560
the facility types that are supported by the system message logs. Cisco Discovery Protocol Dynamic Trunking Protocol Dual Ring Protocol Dynamic VLAN Enhanced Address Recognition Logic Fiber Distributed Data Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 561
severity levels that are supported by the system message logs MLS-5-MLSENABLED:IP Multilayer switching is enabled 1999 Apr 16 10:01:26 %MLS-5-NDEDISABLED:Netflow Data Export disabled 1999 Apr Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 562
levels that are supported by the system message %MLS-5-MLSENABLED:IP Multilayer switching is enabled 1999 Apr 16 10:01:26 %MLS-5-NDEDISABLED:Netflow Data Export disabled 1999 Apr 16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 563
2 Task Change the logging enable state for a Telnet session. Verify the logging configuration. Command set logging session {enable | disable} show logging [noalias] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 564
enable the time stamp display on system logging messages: Console> (enable) set logging timestamp enable System logging messages timestamp will be enabled. Console> (enable) 37-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 565
37 Configuring System Message Logging Configuring System Message Logging on the Switch Setting the Logging Buffer Size To set the number of .conf file for further examples. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 566
is being logged. You can set UNIX systems to receive all messages from the switch. Create the log file by entering these commands at the UNIX shell prompt: $ Console> (enable) 37-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 567
facility: LOCAL5 server severity: notifications(5) Facility Default Severity Current Session Severity cdp 3 3 drip 2 5 dtp 5 5 dvlan 2 5 earl 2 5 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 568
last 20 messages in the buffer. To display the messages in the switch logging buffer, perform one of these tasks: Task Command Display the :Port 2/2 joined bridge port 2/2 37-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 569
) %PAGP-5-PORTFROMSTP:Port 3/2 left bridge port 3/2 %PAGP-5-PORTTOSTP:Port 3/1 joined bridge port 3/1-2 %PAGP-5-PORTTOSTP:Port 3/2 joined bridge port 3/1-2 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 570
Configuring System Message Logging on the Switch Chapter 37 Configuring System Message Logging 37-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 571
. Default DNS Configuration Table 38-1 shows the default DNS configuration. Table 38-1 Default DNS Configuration Feature DNS enable state Default Value Disabled 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 38-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 572
DNS, page 38-3 Setting Up and Enabling DNS To set up and enable DNS on the switch, perform this task in privileged mode: Step 1 Step 2 Step 3 Step 4 Task Specify primary 38-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 573
. Command set ip dns disable show ip dns [noalias] This example shows how to disable DNS on the switch: Console> (enable) set ip dns disable DNS is disabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 38-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 574
Configuring DNS on the Switch Chapter 38 Configuring DNS 38-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 575
logs were created and the time that other time-specific events occur. An NTP server must be accessible by the client switch. NTP uses the User Datagram Protocol (UDP) is lower. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 576
reduced because the information flow is one-way only. Cisco's implementation of NTP does not support stratum 1 service; it is not possible to connect to a radio by the switch). 39-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 577
NTP server. You can configure up to ten server addresses per client. To configure the switch in NTP client mode, perform this task in privileged mode: Step 1 Step 2 [noalias] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 578
client and authentication modes on the switch, and verify the configuration: Console> (enable) set ntp server 172.20.52.65 key 879 NTP server 172.20.52.65 with key 879 added. 39-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 579
String Console> (enable) Setting the Time Zone You can set a time zone for the switch to display the time in that time zone. You must enable NTP before you set the year. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 580
(enable) To enable the daylight saving time clock adjustment to a nonrecurring specific date, perform this task in privileged mode: Step 1 Step 2 Task 21 2002, 05:30:00 39-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 581
NTP Servers To clear an NTP server address from the NTP servers table on the switch, perform this task in privileged mode: Step 1 Step 2 Task Command Clear Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 582
disable show ntp [noalias] This example shows how to disable NTP client mode on the switch: Console> (enable) set ntp client disable NTP Client mode disabled Console> (enable) 39-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 583
ATM switch processor Asynchronous Transfer Mode bridge protocol data unit Bridge Relay Function broadcast and unknown server content-addressable memory column address strobe constant bit rate 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 584
Cisco Group Management Protocol command-line interface Common Open Policy Service class of service Cyclic Redundancy Check Concentrator Relay Function Data Country Code Digital Equipment Corporation domain-specific part format identifier Dynamic Host Configuration Protocol dynamic inter-switch - Cisco WS-C2950ST-24-LRE | Software Guide - Page 585
local area network end-system identifier frame check sequence Fiber Distributed Data Interface full duplex Fast Simple Server Redundancy Protocol foil twisted-pair initial microprogram load Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 586
MBS MCP MIB MII Media Access Control Manufacturing Automation Protocol maximum burst size Master Communication Processor Management Information Base media-independent interface Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-4 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 587
Hop Resolution Protocol Next Hop Server Network Management Processor Network-Network Interface network service access point Network Time Protocol nonvolatile random-access memory 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 588
Card International Association peak cell rate protocol data unit physical sublayer protocol independent multicast physical service Remote Authentication Dial-In User Service row address strobe RAS-to-CAS delay Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 589
Access Protocol Simple Network Management Protocol Switched Port Analyzer source-route bridging source-route transparent bridging Service-Specific Connection Oriented Protocol 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-7 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 590
ticket Telecommunications Industry Association type-length value type of service Token Ring Bridge Relay Function Token Ring Concentrator Relay Function Time Appendix A Acronyms Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-8 78- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 591
Register virtual LAN VLAN Membership Policy Server virtual path identifier VLAN Query Protocol VLAN Trunking Protocol weighted random early detect Weighted Round Robin 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 592
Appendix A Acronyms 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-10 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 593
1400W DC power supply 28-5 802.1Q example 11-9, 11-19 mapping VLANs to ISL 10-11 overview 11-1 restrictions 11-4 supported switches (table) support 10-5 B BackboneFast adding a switch (figure) 8-7 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 594
static routes and 27-9 Cisco Discovery Protocol See CDP Cisco Group Management Protocol See CGMP Cisco IP Phones sound quality 29-2 CiscoWorks2000 24-17 CIST 7-15 classification IN-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 595
37-5 conventions, document xxvi CoS configuring default switch values 14-5 drop thresholds mapping 14-6 transmitting 14-3 Layer 2 CoS values 14-2 reverting to default 14-5 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-3 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 596
DTP non-Cisco devices and 11-3 overview 11-2 duplex mode Fast Ethernet 4-5 Dynamic Host Configuration Protocol See DHCP dynamic ports troubleshooting 12-11 ) 11-2 encryption IN-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 597
6-11 EtherChannel IDs 6-6 frame distribution 6-2 hardware support 6-2 maximum number of channels supported 6-4 modes 6-5 modes, using LACP 6-16 timer 7-44 frame classification 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-5 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 598
13-5 setting timers 13-6 viewing statistics 13-7 H hello time timer 7-44 history switch CLI 2-6 I I-BPDU 7-15 ICMP IP traceroute 20-12 time-exceeded messages 20- match-action IN-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 599
BPDUs, BackboneFast and 8-4 Inline power modes 28-12 inline power configuring on Cisco IP phones 28-11, 29-3 supported switches (table) 11-3 isolated ports definition 10-16 IST MST regions 7-15 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 600
login banner clearing 27-5 configuring 27-4 displaying or suppressing the "Cisco Systems Console" login banner 27-5 overview 27-4 login passwords recovering 13 designating 2-8 IN-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 601
configuring 3-6 overview 3-1 message-of-the-day See login banner metric values, switch TopN reports (table) 22-2 MIBs Network Analysis Module and 25-2 overview filter profiles 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-9 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 602
SNMP Network Time Protocol See NTP New Software Features in Release 7.7 extended VLAN support with VTP version 3 10-3, 10-4, 10-6, 10-9 NFFC/NFFC II IGMP See me1 interface IN-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 603
state and dot1x port-control command 31-4 authorized and unauthorized 31-4 switch as proxy 31-2 RADIUS client 31-2 port cost EtherChannel 6-8 PVST+ 16-5 guidelines for 16-3 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-11 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 604
power, inline 28-11, 29-3 power budget setting 28-16 power management Catalyst 4500 series 28-1, 28-6 Catalyst 4500 series power supplies 19-2 overview 19-1 protocol support 19-1 pruning, VTP See VTP Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 605
14-7 traffic flow (figure) 14-2 transmit queue overview 14-3 quality of service See QoS R RADIUS configuration guidelines 30-50 overview 30-48, 30-50 25-1 supported MIB objects 25-2 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 606
data 25-2 ROM monitor BOOT environment variables and 32-3 boot process and 32-2 CLI 2-9 configuration register and 32-2 root guard disabling 7-43 enabling 7-43 multiple spanning tree 7-15 root switch 14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide- - Cisco WS-C2950ST-24-LRE | Software Guide - Page 607
supported RMON switch acceleration 36-1 configuring 36-1, 36-2 switch CLI accessing 2-2 command aliases 2-7 designating IP addresses 2-8 designating IP aliases 2-8 designating MAC addresses 2-8 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C2950ST-24-LRE | Software Guide - Page 608
27-3 system images downloading using rcp 33-6 downloading using TFTP 33-2 switch specifying startup 32-1 uploading 33-9 uploading 33-5 system location, setting records 30-48 IN-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 609
-7 disabling VLAN 1 11-8 encapsulation types descriptions (table) 11-2 switch support matrix (table) 11-3 modes (table) 11-2 overview 11-1 possible configurations (table) 11-3 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-17 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 610
VLAN Membership Policy Server See VMPS VLANs allowed on trunk 11-6 assigning switch ports to 10-10 auxiliary 10-13 configuration guidelines 10-5 default configuration 10-3 IN-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 611
dynamic port assignments 12-10 reconfirming membership 12-10 troubleshooting 12-11 troubleshooting dynamic ports 12-11 VMPS clients configuring 12-8 9-4 server, configuring 9-7 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-19 - Cisco WS-C2950ST-24-LRE | Software Guide - Page 612
of extended range VLANs 10-3, 10-6 understanding 9-13 with private VLANs 10-18 VTP pruning configuring 9-11 disabling 9-12 overview 9-4 W write tech support command 27-12 IN-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
-
421
-
422
-
423
-
424
-
425
-
426
-
427
-
428
-
429
-
430
-
431
-
432
-
433
-
434
-
435
-
436
-
437
-
438
-
439
-
440
-
441
-
442
-
443
-
444
-
445
-
446
-
447
-
448
-
449
-
450
-
451
-
452
-
453
-
454
-
455
-
456
-
457
-
458
-
459
-
460
-
461
-
462
-
463
-
464
-
465
-
466
-
467
-
468
-
469
-
470
-
471
-
472
-
473
-
474
-
475
-
476
-
477
-
478
-
479
-
480
-
481
-
482
-
483
-
484
-
485
-
486
-
487
-
488
-
489
-
490
-
491
-
492
-
493
-
494
-
495
-
496
-
497
-
498
-
499
-
500
-
501
-
502
-
503
-
504
-
505
-
506
-
507
-
508
-
509
-
510
-
511
-
512
-
513
-
514
-
515
-
516
-
517
-
518
-
519
-
520
-
521
-
522
-
523
-
524
-
525
-
526
-
527
-
528
-
529
-
530
-
531
-
532
-
533
-
534
-
535
-
536
-
537
-
538
-
539
-
540
-
541
-
542
-
543
-
544
-
545
-
546
-
547
-
548
-
549
-
550
-
551
-
552
-
553
-
554
-
555
-
556
-
557
-
558
-
559
-
560
-
561
-
562
-
563
-
564
-
565
-
566
-
567
-
568
-
569
-
570
-
571
-
572
-
573
-
574
-
575
-
576
-
577
-
578
-
579
-
580
-
581
-
582
-
583
-
584
-
585
-
586
-
587
-
588
-
589
-
590
-
591
-
592
-
593
-
594
-
595
-
596
-
597
-
598
-
599
-
600
-
601
-
602
-
603
-
604
-
605
-
606
-
607
-
608
-
609
-
610
-
611
-
612
 |
 |
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
Catalyst 4500 Series, Catalyst 2948G,
Catalyst 2980G Switches Software
Configuration Guide
Software Release 8.1
Customer Order Number: DOC-7815486=
Text Part Number: 78-15486-01