Cisco WS-C4506-E Software Guide
Cisco WS-C4506-E - Catalyst 4500 E-chassis Manual
 |
UPC - 882658134852
View all Cisco WS-C4506-E manuals
Add to My Manuals
Save this manual to your list of manuals |
Cisco WS-C4506-E manual content summary:
- Cisco WS-C4506-E | Software Guide - Page 1
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide Software Release 8.1 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Customer Order - Cisco WS-C4506-E | Software Guide - Page 2
of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0304R) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide Copyright © 2000-2003, Cisco Systems, Inc. All rights reserved. - Cisco WS-C4506-E | Software Guide - Page 3
xxiii Related Documentation xxv Conventions xxvi Obtaining Documentation xxvii Cisco.com xxvii Documentation CD-ROM xxvii Ordering Documentation xxvii Scrolling Through Command Output 2-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 iii - Cisco WS-C4506-E | Software Guide - Page 4
Fast Ethernet Port Debounce Timers 4-6 Configuring errdisable State Ethernet and Fast Ethernet Port Timeout Periods 4-7 Checking Ethernet and Fast Ethernet Port Connectivity 4-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 iv 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 5
Works 6-1 EtherChannel Overview 6-2 Understanding Frame Distribution 6-2 Hardware Support for EtherChannel 6-2 PAgP and LACP 6-2 EtherChannel Configuration Guidelines Statistics 6-12 EtherChannel Configuration Examples 6-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software - Cisco WS-C4506-E | Software Guide - Page 6
7-13 Understanding How MST Works 7-14 Rapid Spanning Tree Protocol 7-16 MST-to-SST Interoperability 7-17 Common Spanning Tree 7-18 MST Instances 7-18 MST Configuration 7-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 vi 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 7
7-54 Configuring Spanning Tree BPDU Skewing 7-57 Configuring Spanning Tree PortFast, BPDU Guard, BPDU Filter, UplinkFast, BackboneFast, and Loop Guard 8-1 Understanding How PortFast Works 8-1 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 vii - Cisco WS-C4506-E | Software Guide - Page 8
UplinkFast 8-15 Enabling UplinkFast 8-15 Disabling UplinkFast 8-16 Configuring BackboneFast 8-17 Enabling BackboneFast 8-17 Displaying Version 2 9-6 Configuring a VTP Server 9-7 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 viii 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 9
-11 Clearing 802.1Q-to-ISL VLAN Mappings 10-12 Deleting a VLAN 10-12 Configuring Auxiliary VLANs 10-13 Understanding Auxiliary VLANs 10-13 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 ix - Cisco WS-C4506-E | Software Guide - Page 10
R Configuring Private VLANs 10-16 Private VLAN Configuration Guidelines 10-17 Encapsulation Types 11-2 Trunking Support 11-3 802.1Q Trunk Troubleshooting VMPS and Dynamic Port VLAN Membership 12-11 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 11
E R 14 C H A P T E R 78-15486-01 Troubleshooting VMPS 12-11 Troubleshooting Dynamic Ports 12-11 VMPS Example 12-12 Dynamic Port VLAN Membership with Queue and Drop Threshold Mapping 14-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xi - Cisco WS-C4506-E | Software Guide - Page 12
Multicast Services 15-1 Understanding How Multicasting Works 15-1 Understanding Multicasting and Multicast Services Operation 16 Configuring Multicast Groups 15-16 Disabling Multicast Router Ports 15-17 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 13
Unicast Flood Blocking 17-3 Configuring the IP Permit List 18-1 Understanding How the IP Permit List Works 18-1 IP Permit List Default Configuration 18-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xiii - Cisco WS-C4506-E | Software Guide - Page 14
CDP 21-1 Understanding How CDP Works 21-1 Default CDP Configuration 21-2 Configuring CDP on the Switch 21-2 Setting the CDP Global Enable State 21-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xiv 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 15
in Software Release 7.5(1) 24-8 Understanding SNMPv3 24-11 Benefits of SNMPv3 24-11 SNMP Entity 24-11 Configuring SNMPv3 from an NMS 24-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xv - Cisco WS-C4506-E | Software Guide - Page 16
Configuring RMON 25-1 Understanding How RMON Works 25-1 Enabling RMON 25-2 Viewing RMON Data 25-2 Supported RMON and RMON2 MIB Objects 25-2 26 C H A P T E R Configuring SPAN -4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xvi 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 17
the "Cisco Systems Support 27-12 Power Management 28-1 Understanding How Power Management Works on the Catalyst 4500 16 Setting the Power Budget for the Catalyst 4006 Switch 28-16 Displaying System Information 28-17 Migrating a Supervisor Engine II from a Catalyst 4006 Switch to a Catalyst 4500 - Cisco WS-C4506-E | Software Guide - Page 18
Configuration Guidelines 30-43 Configuring TACACS+ Authorization 30-43 Authorization Example 30-46 Understanding How Accounting Works 30-47 Accounting Overview 30-48 xviii Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 19
Ports 31-9 Setting and Enabling Automatic Reauthentication of the Host 31-10 Manually Reauthenticating the Host 31-10 Enabling Multiple Hosts 31-11 Disabling Multiple Hosts Default Values 31-15 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xix - Cisco WS-C4506-E | Software Guide - Page 20
P T E R Setting the Trace Severity 31-15 Using the show Commands 31-16 Modifying the Switch Boot Configuration 32-1 Understanding How the Switch Boot Configuration Works 32-1 33-7 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xx 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 21
Acceleration Information 36-3 Backplane Channel Module 36-3 Configuring System Message Logging 37-1 Understanding How System Message Logging Works 37-1 System Log Message Format 37-3 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xxi - Cisco WS-C4506-E | Software Guide - Page 22
39-5 Disabling the Daylight Saving Time Adjustment 39-7 Clearing the Time Zone 39-7 Clearing NTP Servers 39-7 Disabling NTP 39-8 A A P P E N D I X INDEX Acronyms A-1 xxii Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 23
This preface describes who should read the Software Configuration Guide, how it is organized, and its document conventions. Filter, UplinkFast, BackboneFast, and Loop Guard 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xxiii - Cisco WS-C4506-E | Software Guide - Page 24
Chapter 13 Chapter 14 Chapter 15 Chapter 16 Chapter 17 Chapter 18 Chapter 19 Chapter quality of service (QoS). Configuring Multicast Services Describes how to configure Cisco Group Management Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486 - Cisco WS-C4506-E | Software Guide - Page 25
for the Catalyst enterprise LAN switches: • Catalyst 4000 Series Switch Installation Guide • Catalyst 4500 Series Switch Installation Guide • Catalyst 4912G Installation Guide • Catalyst 2948G and 2980G Installation Guide • Catalyst 4000 Family, 2948G, and 2980G Switches Quick Software Configuration - Cisco WS-C4506-E | Software Guide - Page 26
marks around the string or the string will include the quotation marks. Instructions and screen examples use these conventions: screen font boldface screen font italic . xxvi Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 27
Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Networking Products MarketPlace: http://www.cisco.com/en/US/partner/ordering/index.shtml 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C4506-E | Software Guide - Page 28
, troubleshooting tips, and sample configurations from the Cisco TAC website. Cisco.com registered users have complete access to the technical support resources on the Cisco TAC website, including TAC tools and utilities. Cisco.com Cisco.com offers a suite of interactive, networked services that - Cisco WS-C4506-E | Software Guide - Page 29
to help troubleshoot and resolve technical issues with Cisco products and technologies. To access the Cisco TAC website, go to this URL: http://www.cisco.com/tac All customers, partners, and resellers who have a valid Cisco service contract have complete access to the technical support resources on - Cisco WS-C4506-E | Software Guide - Page 30
users: Internetworking Terms and Acronyms Dictionary, Internetworking Technology Handbook, Internetworking Troubleshooting Guide, and the Internetworking Design Guide. For current Cisco Press titles and other information, go to Cisco Press online at this URL: http://www.ciscopress.com • Packet - Cisco WS-C4506-E | Software Guide - Page 31
of the Catalyst 4000 series switch hardware, refer to the Catalyst 4000 Series Installation Guide, Catalyst 4500 Series Switch Installation Guide, and the Catalyst 4912G Installation Guide. Table 1-1 describes the Catalyst 4000 series switches. Table 1-1 Catalyst 4000 Series and Catalyst - Cisco WS-C4506-E | Software Guide - Page 32
2948G • Fixed-configuration switch • 12-Gbps backplane • Optional redundant power supplies • Two 1000BASE-X (GBIC) Gigabit Ethernet ports • 48 10/100BASE-TX Fast Ethernet ports Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 1-2 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 33
2980G switch hardware, refer to the Catalyst 2948G and 2980G Installation Guide. Table 1-3 describes the Catalyst 2980G switch. Table 1-3 Catalyst the available CLI commands, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. 78-15486-01 Catalyst - Cisco WS-C4506-E | Software Guide - Page 34
Supervisor Engine Software Chapter 1 Product Overview Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 1-4 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 35
ROM monitor commands, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Route Switch Feature Card (RSFC), refer to the Cisco IOS software command reference publications. This chapter consists of 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 36
2-9). If the switch is already booted, press Enter to see this display: Cisco Systems, Inc. Console Enter password: After you successfully connect to the switch through page 2-3. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-2 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 37
name Catalyst_1. unix_host% telnet Catalyst_1 Trying 172.16.10.10... Connected to Catalyst_1. Escape character is '^]'. Cisco Systems Console Enter password: After you successfully connect Using AAA." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 38
enter the exit command. Console> exit Session Disconnected... Cisco Systems Console Fri Aug 27 1999, 16:14:41 Enter password: Many commands (for example HTTP server information Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-4 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 39
command you entered without the question mark (?). Command-Line Editing The switch CLI supports a number of command-line editing keystrokes. Table 2-1 lists the keystrokes you can , such as VT100s. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 40
lines than can be displayed on the terminal screen, including show command output. To view the next line or screen, use the following tasks. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-6 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 41
a hyphen (-) between the port numbers to specify a range of ports. Table 2-4 shows examples of how to designate ports and port ranges. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 42
is 32 bits, written in dotted decimal format, as shown in the following example: 172.16.10.1 If DNS is configured properly on the switch, you can use IP host names on page 27-7. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-8 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 43
, you can load a system image manually from Flash memory or the network interface to the Catalyst 4500 Series, Catalyst : . 31: . 33: . 34: . 35: . 36: . 37: . 38: . 39: . 8: . 16: . 24: . 32: . 40: . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 44
configured BOOTP/DHCP will commence after the ports are online Ports are coming online ... Cisco Systems, Inc. Console Enter password: 1999 Aug 12 14:34:05 %SYS-5-MOD_OK: 3-9. 2-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 45
in all of the functions of a normal switch port, such as spanning tree, Cisco Discovery Protocol (CDP), and VLAN membership. The out-of-band management interfaces (me1 functions. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-1 - Cisco WS-C4506-E | Software Guide - Page 46
determines whether to broadcast DHCP and RARP requests. For more information about the CONFIG_FILE environment variable, see Chapter 32, "Modifying the Switch Boot Configuration." Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-2 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 47
address from the DHCP server: • Manual allocation-The network administrator maps the switch supported options that are contained in the message. Table 3-1 shows the supported ignored. Table 3-1 Supported DHCP Options Code 1 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 48
Ethernet interface on the switch. - SLIP (sl0) interface Configure this interface when setting up a point-to-point SLIP connection between a terminal and the switch. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-4 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 49
.52.124/29 Interface sc0 IP address and netmask set. Console> (enable) set interface sc0 5 Interface sc0 vlan set. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 50
Ethernet (me1) interface. The me1 interface is present only on the Catalyst 4500 series, Catalyst 2948G, and Catalyst 2980G switches. You can specify the subnet and ping). Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-6 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 51
enabled The primary gateway: 10.1.1.1 Destination Gateway default 10.1.1.1 default 10.1.1.20 RouteMask ---------0x0 0x0 Flags ----UG G Use -------6 0 Interface --------- sc0 sc0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 52
the SLIP interface configuration. Enable SLIP for the console port. Command telnet {host_name | ip_addr} enable set interface sl0 slip_addr dest_addr show interface slip attach Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-8 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 53
52.38 ... Connected to 172.20.52.38. Escape character is '^]'. Cisco Systems, Inc. Console Enter password: Console> enable Enter password: Console> ( is necessary only if using the manual allocation method.) show module 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches - Cisco WS-C4506-E | Software Guide - Page 54
step is necessary only with the manual or automatic allocation methods.) Set 16.30.32 added to DNS server table as primary server. 172.16.31.32 added to DNS server table as backup server. 172.16 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 55
dhcp release Releasing IP address... Console> (enable) Sending DHCP packet with address: 00:90:0c:5a:8f:ff Done Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 3-11 - Cisco WS-C4506-E | Software Guide - Page 56
Renewing and Releasing a DHCP-Assigned IP Address Chapter 3 Configuring the Switch IP Address and Default Gateway 3-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 57
complete information on installing Catalyst 4500 series Fast Ethernet modules, refer to the Catalyst 4500 Series Installation Guide. Note For complete syntax 4-2 Ethernet Overview The Catalyst enterprise LAN switches support simultaneous, parallel conversations between Ethernet segments. Switched - Cisco WS-C4506-E | Software Guide - Page 58
switches solve congestion problems that are caused the switches (Gigabit Ethernet ports support only full duplex). Normally, Ethernet The address table can store at least 16,000 address entries without flooding any 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C4506-E | Software Guide - Page 59
a name to a port. Verify that the port name is configured. Command set port name mod_num/port_num [name_string] show port [mod_num[/port_num]] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 60
normal half 100 100BaseTX Last-Time-Cleared Tue Jun 16 1998, 16:25:57 Console> (enable) Setting Ethernet and Fast Ethernet Port the neighboring port. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-4 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 61
the duplex mode to half duplex on port 2/1: Console> (enable) set port duplex 2/1 half Port 2/1 set to half-duplex. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 62
loss of data traffic during debouncing period, which might affect the convergence/reconvergence of various Layer 2 and Layer 3 protocols. Use with caution. Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-6 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 63
automatically after a selected time interval. With the new timeout enhancement, you can manually prevent a particular port from being enabled by setting the errdisable timeout for that Console>(enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 64
2 engineering-2.company.com (173.31.196.204) 2 ms 3 ms 2 ms 3 gateway_a.company.com (173.16.1.201) 6 ms 3 ms 3 ms 4 somehost.company.com (10.1.2.3) 3 ms * 2 ms Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-8 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 65
this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Pause Frames All Catalyst 4500 series Gigabit Ethernet ports can receive and . However, not all Catalyst 4500 series Gigabit Ethernet ports can 4500 Series, Catalyst 2948G, Catalyst 2980G Switches - Cisco WS-C4506-E | Software Guide - Page 66
pause frames, but autonegotiates flow control. You can enter receive desired when a remote port is set to send on, send off, or send desired. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-2 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 67
following modules are supported: • WS-X4412-2GB-T This 1000BASE-T 14-port module provides 2 dedicated uplink module ports (GBIC) and 12 oversubscribed ports (possible blocking). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-3 - Cisco WS-C4506-E | Software Guide - Page 68
module WS-X4424-GB-RJ45. Table 5-7 Oversubscribed Port Groupings for Module WS-X4424-GB-RJ45 1, 2, 3, 4 5, 6, 7, 8 9, 10, 11, 12 13, 14, 15, 16 17, 18, 19, 20 21, 22, 23, 24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-4 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 69
, 34, 35, 36, 41, 42, 43, 44, 7, 8 13, 14, 15, 16 21, 22, 23, 24 29, 30, 31, 32 37, 38, 39, 40 45 11, 13, 15 2, 4, 6, 8, 10, 17, 19, 21, 12, 14, 16 23, 25, 27, 29, 31 18, 20, 22, 24, 26, 28, hosts that support the Port 4500 Series, Catalyst 2948G, Catalyst 2980G Switches - Cisco WS-C4506-E | Software Guide - Page 70
Enabled Spanning Tree Protocol Enabled for VLAN 1 Native VLAN VLAN 1 Spanning tree port cost 4 Gigabit EtherChannel Disabled on all Gigabit Ethernet ports (auto mode) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-6 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 71
access to the switching bus, the switch uses the priority level to determine the order in which the ports get access. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 72
2/1 Port Send FlowControl admin oper 2/1 on on Console> (enable) Receive FlowControl admin oper on on RxPause TxPause Unsupported opcodes 0 0 0 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 5-8 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 73
Timeout Periods For information on configuring a timeout period for ports in errdisable state, see Chapter 4, "Configuring Ethernet and Fast Ethernet Switching." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 74
2 engineering-2.company.com (173.31.196.204) 2 ms 3 ms 2 ms 3 gateway_a.company.com (173.16.1.201) 6 ms 3 ms 3 ms 4 somehost.company.com (10.1.2.3) 3 ms * 2 ms Console> (enable) 5-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 75
4500 series Fast Ethernet and Gigabit Ethernet modules, refer to the Catalyst 4500 Series Installation Guide. page 6-12 • Understanding the LACP, page 6-16 • Configuring EtherChannel Using LACP, page 6-18 • Hardware Support for EtherChannel, page 6-2 78-15486-01 Catalyst 4500 Series, Catalyst - Cisco WS-C4506-E | Software Guide - Page 76
ID handling by the spanning tree feature, the maximum supported number of channels is 126 for a 6-slot chassis. is a Cisco-proprietary protocol that can be run only on Cisco switches and 16. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-2 - Cisco WS-C4506-E | Software Guide - Page 77
problems. Follow the guidelines below to avoid configuration problems same protocol. Note Switches can be configured manually, with PAgP on one side and LACP up or down. • LACP does not support half-duplex links. If a port is 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 78
unexpected results. • An EtherChannel supports the same allowed range of and quality of service (QoS) configurations. is set differently on the ports. • Cisco Discovery Protocol (CDP) runs on the physical 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-4 - Cisco WS-C4506-E | Software Guide - Page 79
If you are using LACP, see the "Understanding the LACP" section on page 6-16. PAgP Modes The Port Aggregation Protocol (PAgP) facilitates the automatic creation of Fast state, native VLAN, and so on. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 80
which the EtherChannel belongs. You can assign an administrative group number manually or let the system software assign the next available administrative group section on page 6-3. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-6 78-15486- - Cisco WS-C4506-E | Software Guide - Page 81
enable) Defining an EtherChannel Administrative Group You can define EtherChannel administrative groups manually to identify groups of ports that are allowed to form an EtherChannel forwarding mode). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 82
on 768 20 1/2 connected on 768 Admin Port Device-ID Port-ID Platform group 20 1/1 20 1/2 066510644(cat26-lnf(NET25)) 2/1 WS-C6009 Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-8 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 83
port_list mode auto must perform this task on both sides of the channel). Verify the configuration. show port channel [mod_num[/port_num]] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 84
3/6 WS-C4000 Port Trunk-status Trunk-type Trunk-vlans 3/5 not-trunking negotiate 1-1005 3/6 not-trunking negotiate 1-1005 Port Portvlancost-vlans 3/5 3/6 6-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 85
0 Channel Rcv-Octet Xmit-Octet 835 11283708 14942104 Channel Dely-Exced MTU-Exced In-Discard Lrn-Discrd In-Lost Out-Lost 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-11 - Cisco WS-C4506-E | Software Guide - Page 86
how to configure a four-port Fast EtherChannel link between two switches. Figure 6-1 shows two switches connected through four 100BASE-TX Fast Ethernet ports. 6-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 87
bundle. Switch_A> (enable) set port channel 1/1-4 desirable Port(s) 1/1-4 channel mode set to desirable. Switch_A> (enable) %PAGP-5-PORTFROMSTP:Port 1/1 left bridge port 1/1 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-13 - Cisco WS-C4506-E | Software Guide - Page 88
how to configure a two-port Gigabit EtherChannel link between two switches. Figure 6-2 shows two switches connected through four 1000BASE-SX Gigabit Ethernet ports. 6-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 89
left bridge port 3/1 %PAGP-5-PORTFROMSTP:Port 3/2 left bridge port 3/2 %PAGP-5-PORTTOSTP:Port 3/1 joined bridge port 3/1-2 %PAGP-5-PORTTOSTP:Port 3/2 joined bridge port 3/1-2 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-15 - Cisco WS-C4506-E | Software Guide - Page 90
see the "Understanding the PAgP" section on page 6-5. LACP Modes You may manually turn on channeling by setting the port channel mode to on, and you may port from channeling. 6-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 91
ports in a channel using LACP active mode and the remaining four ports in a manually configured channel using the on mode. An administrative key is meaningful only in the context 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-17 - Cisco WS-C4506-E | Software Guide - Page 92
to LACP protocol. Mod 3 is set to LACP protocol. Console> (enable) Use the show channelprotocol command to display the protocols for all modules. 6-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 93
module, ports must have unique administrative keys. After NVRAM is cleared, the channel mode of the ports is set to "passive." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-19 - Cisco WS-C4506-E | Software Guide - Page 94
, perform this task in privileged mode: Task Change the channel mode. Command set port lacp-channel mod/ports mode [on | off | active | passive] 6-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 95
lacp-channel traffic ChanId Port Rx-Ucst Tx-Ucst Rx-Mcst Tx-Mcst Rx-Bcst Tx-Bcst 808 2/16 0.00% 0.00% 50.00% 75.75% 0.00% 0.00% 808 2/17 0.00% 0.00 0.00% Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-21 - Cisco WS-C4506-E | Software Guide - Page 96
connected 4 32 disabled 0 Console> Console> show spantree 4/7-8 Port Vlan Port-State Cost Priority Portfast Channel_id 4/7-8 1 blocking 3 32 disabled 770 Console> 6-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 97
IEEE 802.1D bridge Spanning Tree Protocol (STP) and how to use and configure Cisco's proprietary STPs, Per VLAN Spanning Tree + (PVST+), and Multi-Instance Spanning this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 98
describes the specific functions that are common to all spanning tree protocols. The Cisco proprietary spanning tree protocols, PVST+ and MISTP, are based on the IEEE blocked mode. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-2 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 99
scenario by changing the port cost parameter for the UTP port to a lower value than that of the fiber-optic port. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 100
to each port that is based on bandwidth. You can also manually assign port costs between 1-65535. The 16-bit values are only used for ports that have not been port cost. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-4 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 101
to each port using a formula that is based on the port bandwidth. You can also manually assign port costs between 1-200,000,000. The formula for obtaining default 32-bit port costs states: • Blocking 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 102
information for the forwarding database • The expiration of a protocol timer moves the port to the forwarding state, where both learning and forwarding are enabled Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-6 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 103
the port should participate in frame forwarding. Learning is disabled in the listening state. Figure 7-4 shows a port in the listening state. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 104
state prepares to participate in frame forwarding. The port enters the learning state from the listening state. Figure 7-5 shows a port in the learning state. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-8 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 105
A port in the forwarding state forwards frames, as shown in Figure 7-6. The port enters the forwarding state from the learning state. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 106
that forward messages. For more information on PortFast, see Chapter 8, "Configuring Spanning Tree PortFast, BPDU Guard, BPDU Filter, UplinkFast, BackboneFast, and Loop Guard." 7-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 107
management messages Understanding How PVST+ and MISTP Modes Work Catalyst 4500 series switches provide two proprietary spanning tree modes based on the PVST+ (combination mode) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-11 - Cisco WS-C4506-E | Software Guide - Page 108
used on all Ethernet, Fast Ethernet, and Gigabit Ethernet port-based VLANs on Catalyst 4500 series switches. PVST+ runs on each VLAN on the switch, ensuring that each has .) 7-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 109
all your Catalyst 4500 series switches to avoid problems in the spanning tree topology. When MAC address reduction is enabled on Catalyst 4500 series switches, it Catalyst 6500 Series Software Configuration Guide. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches - Cisco WS-C4506-E | Software Guide - Page 110
802.1D STP, 802.1w, the Rapid Spanning Tree Protocol (RSTP), and the Cisco PVST+ architecture. MST allows you to build multiple spanning trees over VLAN trunks. an MST region. 7-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 111
provides interoperability with PVST+ by generating PVST+ BPDUs for the non-CST VLANs. • MST supports some of the PVST+ extensions in MSTP as follows: - UplinkFast and BackboneFast are not 01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-15 - Cisco WS-C4506-E | Software Guide - Page 112
or designated port role includes the port in the active topology. • An alternate port or backup port role excludes the port from the active topology. 7-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 113
r B F B B B F r SST Region b r r F F/f = Forwarding B/b = Blocking R = Root Bridge r = Root port F F F FR F F MST Region FF F r F r r b SST Region B 68285 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-17 - Cisco WS-C4506-E | Software Guide - Page 114
-4500 series switch running MST, IST (instance 0) corresponds to CST. MST Instances This release supports up to 16 manually, because it does not auto-increment each time you commit the MST configuration. 7-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 115
to VLAN 4095 are unused and always set to zero. You must configure each byte manually. You can use SNMP or the CLI to perform the configuration. MST BPDUs contain the port role. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-19 - Cisco WS-C4506-E | Software Guide - Page 116
all full-duplex links as point-to-point links. Enter the set spantree mst link-type command to configure point-to-point links. 7-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 117
guard sets the port to the blocking state. Do not designate switches with a slower CPU running PVST+ as a switch running MST. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-21 - Cisco WS-C4506-E | Software Guide - Page 118
Aging Time" section on page 45) • Rate limited at one for every 60 seconds Using PVST+ PVST+ is the default spanning tree mode for Catalyst 4500 series switches. The following sections describe how to configure PVST+ on Ethernet VLANs. 7-22 Catalyst - Cisco WS-C4506-E | Software Guide - Page 119
PVST+ mode with MAC address reduction enabled, you can enter one of 16 bridge priority values: 0, 4096, 8192, 12,288, 16,384, 20,480, 24,576, 28,672, 32,768, 36,864 ] [active] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-23 - Cisco WS-C4506-E | Software Guide - Page 120
Channel_id 1/1 1 not-connected 4 32 disabled 0 1/2 1 not-connected 4 32 disabled 0 2/1 1 not-connected 100 32 disabled 0 2/2 1 not-connected 100 32 disabled 0 7-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 121
configure the port priority for a port: Console> (enable) set spantree portpri 2/3 16 Bridge port 2/3 port priority set to 16. Console> (enable) show spantree 2/3 VLAN 1 . . . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-25 - Cisco WS-C4506-E | Software Guide - Page 122
100 32 disabled 0 2/2 1 not-connected 100 32 disabled 0 2/3 1 forwarding 19 16 disabled 0 2/4 1 not-connected 100 32 disabled 0 Configuring the PVST+ Default Port . 7-26 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 123
a port: Console> (enable) set spantree portvlanpri 2/3 16 6 Port 2/3 vlans 6 using portpri 16. Port 2/3 vlans 1-5,7-800,802-1004,1006-4094 using 2/3 cost 20000 1-5,12 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-27 - Cisco WS-C4506-E | Software Guide - Page 124
set spantree mode rapid-pvst+ set spantree link-type mod/port point-to-point clear spantree detected-protocols mod/port show spantree vlan 7-28 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 125
tree enabled. . . . Port State Role Cost 6/1 forwarding ROOT 20000 Prio Type 16 Shared, PEER(STP) Console> This example shows how to verify the link type, edge 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-29 - Cisco WS-C4506-E | Software Guide - Page 126
that if you wish to use MISTP mode, you should configure all of your Catalyst 4500 series switches to run MISTP. To use MISTP mode, you first enable an MISTP in PVST+ 20 sec 7-30 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 127
connectivity, reduce the number of configured VLAN ports on your switch to no more than 4500. Caution If you are working from a Telnet connection to your switch, the first ] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-31 - Cisco WS-C4506-E | Software Guide - Page 128
-00 - 14 00-50-3e-78-70-00 - 15 00-50-3e-78-70-00 - 16 00-50-3e-78-70-00 - Configuring the MISTP Bridge ID Priority You can set the bridge 32768, sys ID ext:1) 20000 1/1 1,74 7-32 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 129
0 8/38 1 blocking 200000 32 disabled 0 15/1 1 forwarding 20000 32 enabled 0 16/1 1 forwarding 20000 32 enabled 0 Console> (enable) Configuring the MISTP Port Cost You 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-33 - Cisco WS-C4506-E | Software Guide - Page 130
38 1 blocking 200000 32 disabled 0 15/1 1 forwarding 20000 32 enabled 0 16/1 1 forwarding 20000 32 enabled 0 Console> (enable) Configuring the MISTP Port ext:1) 1,74 7-34 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 131
Console> (enable) set spantree portinstancecost 1/1 cost 110110 2 Port 1/1 instances 1,3-16 have path cost 20000. Port 1/1 instances 2 have path cost 110110. This [instances] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-35 - Cisco WS-C4506-E | Software Guide - Page 132
(enable) set spantree portinstancepri 1/1 16 2 Port 1/1 MISTP Instances 2 using portpri 16. Port 1/1 mistp-instance 1,3-16 using portpri 32. Console> (enable configuring VLANs. 7-36 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 133
two or more entries in the list are associated with different MISTP instances, the VLAN is in conflict. To clear up the conflict, you must manually remove the incorrect mapping(s) from the root switch. The remaining entry on the list becomes the official mapping. 78-15486-01 Catalyst - Cisco WS-C4506-E | Software Guide - Page 134
6 Inst MAC Delay Time left 6 00-05-31-40-64-00 inactive 18 5 00-09-7b-62-b0-80 inactive inactive Console> (enable) 7-38 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 135
(the value that is associated with the switch) below the default (32,768); the switch can then become the root switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-39 - Cisco WS-C4506-E | Software Guide - Page 136
in MISTP mode. The set spantree root secondary command reduces the bridge priority to 16,384, making it the probable candidate to become the root switch if the primary fails. 7-40 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 137
depends on the network diameter, which is the maximum number of bridges between any two points of attachment of end stations. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-41 - Cisco WS-C4506-E | Software Guide - Page 138
2 sec 4 sec 6 sec You can set these parameters on the Catalyst 4500 series switches without modifying the switches. Note You can set switch ports for seconds. Console> (enable) 7-42 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 139
clear spanning tree BPDU statistics: Console> (enable) clear spantree statistics bpdu Spanning tree BPDU statistics cleared on the switch. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-43 - Cisco WS-C4506-E | Software Guide - Page 140
spantree Hello time for an instance to 3 seconds: Console> (enable) set spantree hello 3 mistp-instance 1 Spantree 1 hello time set to 3 seconds. Console> (enable) 7-44 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 141
delay for an instance to 16 seconds: Console> (enable) set spantree fwddelay 16 mistp-instance 1 Instance 1 forward delay set to 16 seconds. Console> (enable) Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-45 - Cisco WS-C4506-E | Software Guide - Page 142
Delay 15 sec Port Vlan Port-State Cost Prio Portfast Channel_id ---------- 6/1 1 forwarding 4 32 disabled 0 6/2 1 blocking 4 32 disabled 0 Console> (enable) 7-46 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 143
MST 78-15486-01 Console> (enable) set spantree mst config name cisco revision 1 Edit Buffer modified. Use 'set spantree mst config commit' to apply the changes. Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-47 - Cisco WS-C4506-E | Software Guide - Page 144
- 14 - 15 - NEW MST Region Configuration (Not committed yet) Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 2-20 2 21-30 3 31-40 Current (NVRAM) MST Region Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 2-20 - Cisco WS-C4506-E | Software Guide - Page 145
: Port State Role Cost Prio Type 6/1 forwarding BDRY 20000 32 P2P, Boundary(PVST) 6/2 blocking BDRY 20000 32 P2P, Boundary(PVST) Console> (enable) Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-49 - Cisco WS-C4506-E | Software Guide - Page 146
Current (NVRAM) MST Region Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 You can set 16 possible bridge priority values: 0, 4096, 8192, 12,288, 16,384, 20 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486 - Cisco WS-C4506-E | Software Guide - Page 147
2-20 2 forwarding BDRY 10000 32 21-30 3 forwarding BDRY 10000 32 31-40 4 forwarding BDRY 10000 32 41-50 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-51 - Cisco WS-C4506-E | Software Guide - Page 148
) set spantree portinstancecost 6/1 cost 5000 mst 4 Port 6/1 MST Instances 0-3,5-15 have path cost 10000. Port 6/1 MST Instances 4 have path cost 5000. Console> (enable) 7-52 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 149
-10-7b-bb-2f-00 32770 (root priority:32768, sys ID ext:2) Designated Root Cost 0 Remaining Hops 20 Designated Root Port 1/0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-53 - Cisco WS-C4506-E | Software Guide - Page 150
(NVRAM) MST Region Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 2-20 2 21-30 3 31-40 4 41-50 5 - 6 - 7 - 8 - 9 - 7-54 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 151
Console> (enable) show spantree mst config Current (NVRAM) MST Region Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST 1,51-4094 1 2-20 2 21-30 3 31-40 4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-55 - Cisco WS-C4506-E | Software Guide - Page 152
Configuration: Configuration Name:cisco Revision:1 Instance VLANs IST NEW MST Region Configuration (Not committed yet) Configuration Name:cisco Revision:2 Instance VLANs IST 1,51-998,1000-4094 1 Region Configuration: Configuration Name:cisco Revision:2 Instance VLANs IST - Cisco WS-C4506-E | Software Guide - Page 153
(PVST) Console> (enable) Configuring Spanning Tree BPDU Skewing Commands that support the spanning tree BPDU skewing feature perform these functions: • Allow you [mod/port] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-57 - Cisco WS-C4506-E | Software Guide - Page 154
21 2000, 06:26:05 8/14 113678 113678 Tue Nov 21 2000, 06:26:05 8/16 4111 113755 Tue Nov 21 2000, 06:26:05 8/18 113833 113833 Tue Nov 21 Active 1 6 4 2 0 12 7-58 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 155
Chapter 7 Configuring Spanning Tree Configuring Spanning Tree BPDU Skewing Blocking Listening Learning Forwarding STP Active Total 6 4 2 0 12 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-59 - Cisco WS-C4506-E | Software Guide - Page 156
Configuring Spanning Tree BPDU Skewing Chapter 7 Configuring Spanning Tree 7-60 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 157
usage information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter consists and learning states. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 158
in a network, the PortFast mode is supported only on nontrunking access ports because these ports because the administrator must manually put the interface back in service. Note When enabled on 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-2 78-15486 - Cisco WS-C4506-E | Software Guide - Page 159
After Direct Link Failure Switch A (Root) Switch B L1 L2 Link failure Switch C L3 UplinkFast transitions port directly to forwarding state 11242 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 160
L1 and to Switch C over link L2. The port on Switch C that connects directly to Switch B over link L3 is in the blocking state. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-4 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 161
switches ignore these inferior BPDUs and the new switch learns that Switch B is the designated bridge to Switch A, the root switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 162
unidirectional, loop guard blocks the entire channel until the affected port is removed from the channel. Figure 8-6 shows loop guard in a triangle switch configuration. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-6 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 163
port transitions out of the inconsistent state after the message age expires. Loop guard ignores the message age expiration on type-inconsistent ports and Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 164
, switch, or server. Verify the PortFast setting on a switch port. Command set spantree portfast mod_num/port_num enable | disable show spantree [mod_num/port_num] [vlan] Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-8 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 165
Channel_id 4/1 1 blocking 4 32 enabled 0 4/1 100 forwarding 4 32 enabled 0 4/1 521 blocking 4 32 enabled 0 4/1 524 blocking 4 32 enabled 0 4/1 1003 not-connected 4 32 enabled 0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 166
start set to default. Console> (enable) show spantree portfast 4/1 Portfast:default Portfast BPDU guard is disabled. Portfast BPDU filter is disabled. Console> (enable) 8-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 167
| enable | default] Verify the PortFast BPDU guard setting. show spantree summary Note For additional PVST+ information, see Chapter 7, "Configuring Spanning Tree." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-11 - Cisco WS-C4506-E | Software Guide - Page 168
for bridge. Uplinkfast disabled for bridge. Backbonefast disabled for bridge. Vlan Blocking Listening Learning Forwarding STP Active 1 0 0 0 4 4 2 0 0 0 4 4 8-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 169
bpdu-filter enabled for bridge. Uplinkfast disabled for bridge. Backbonefast disabled for bridge. Vlan Blocking Listening Learning Forwarding STP Active 1 0 0 0 4 4 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-13 - Cisco WS-C4506-E | Software Guide - Page 170
0 4 4 . . . 999 0 0 0 4 4 1003 0 0 0 0 0 1005 0 0 0 0 0 Blocking Listening Learning Forwarding STP Active Total 0 0 0 85 85 Console> (enable) 8-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 171
) show spantree uplinkfast Station update rate set to 40 packets/100ms. uplinkfast all-protocols field set to off. VLAN port list 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-15 - Cisco WS-C4506-E | Software Guide - Page 172
without affecting the bridge priority, port cost, and port-VLAN cost values. set spantree uplinkfast disable Verify that UplinkFast is enabled. show spantree uplinkfast 8-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 173
on all switches in the network. BackboneFast is not supported on Token Ring VLANs. This feature is supported for use with third-party switches. To enable BackboneFast summary 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-17 - Cisco WS-C4506-E | Software Guide - Page 174
feature on a per-port basis. To set all the ports on the switch, use the set spantree mst global-defaults loop-guard command. 8-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 175
on a switch: Console> (enable) set spantree mst global-defaults loop-guard disable Spantree global loop-guard state disabled on this switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 8-19 - Cisco WS-C4506-E | Software Guide - Page 176
Configuring Loop Guard Chapter 8 Configuring Spanning Tree PortFast, BPDU Guard, BPDU Filter, UplinkFast, BackboneFast, and Loop 8-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 177
this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst that can result in a number of problems, such as duplicate VLAN names, version 1 and VTP version 2 do not support VLANs 1025-4094.) With VTP, you can make 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software - Cisco WS-C4506-E | Software Guide - Page 178
the default mode. • Client-VTP clients behave the same way as VTP servers, but you cannot create, change, or delete VLANs on a VTP client. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-2 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 179
2 supports the following features that are not supported in version 1: • Unrecognized Type-Length-Value (TLV) Support-A domain name match. Since only one domain is supported in the supervisor engine software, VTP version 2 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 180
pruning is disabled. Make sure that all devices in the management domain support VTP pruning before enabling it. Figure 9-1 shows a switched network without port 4 on Switch 4). Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-4 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 181
mode VTP version 2 enable state VTP password VTP pruning Default Value Null Server Version 1 is enabled (version 2 is disabled) None Disabled 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 182
• Enabling VTP Version 2, page 9-9 • Disabling VTP Version 2, page 9-10 • Enabling VTP Pruning, page 9-11 • Disabling VTP Pruning, page 9-12 • Displaying VTP Statistics, page 9-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-6 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 183
switch in VTP client mode. Verify the VTP configuration. Command set vtp domain name set vtp mode client show vtp domain 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 184
Password : configured (hidden) Updater ID: 172.20.52.19 Feature Mode Revision VLAN Transparent 0 Pruning : disabled VLANs prune eligible: 2-1000 Console> (enable) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-8 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 185
same VTP version. Do not enable VTP version 2 unless every switch in the VTP domain supports version 2. To enable VTP version 2, perform this task in privileged mode: Step 1 Step 2 show vtp domain 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 186
(hidden) Notifications: disabled Updater ID: 172.20.52.19 Feature Mode Revision VLAN Off 0 Pruning : disabled VLANs prune eligible: 2-1000 Console> (enable) 9-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 187
enabled on the port Port Mode Encapsulation Status 16/1 nonegotiate isl trunking Native vlan ----------1 Port Vlans allowed on trunk 16/1 1-1005,1025-4094 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-11 - Cisco WS-C4506-E | Software Guide - Page 188
VTP pruning statistics: Trunk Join Transmitted Join Received Summary advts received from GVRP PDU non-pruning-capable device Received 16/1 75 0 0 0 Console> (enable) 9-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 189
instances of the protocol. Note In software release 8.1(1), the only supported database propagation is for the VLAN database. These sections describe VTP version of security. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-13 - Cisco WS-C4506-E | Software Guide - Page 190
Domains, page 9-15 • Reconfiguring a Partitioned VTP Domain, page 9-16 Primary Servers, Secondary Servers, and Clients In previous VTP implementations, the for another instance. 9-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 191
update of their respective primary server (see Figure 9-4). In Figure 9-4, the Cisco VTP domain is partitioned between switches accepting server X or server Y as a accepts it. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-15 - Cisco WS-C4506-E | Software Guide - Page 192
VTP Domain Domain Cisco Primary Server X Domain Cisco Primary Server Y Chapter it will not propagate its configuration until you manually designate it as the new primary server. For . 9-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C4506-E | Software Guide - Page 193
message might be lost on some links (however, the takeover messages are repeated to reduce this risk). In both cases, you can correct the problem by issuing additional takeover messages. For more information on takeovers, see the "Configuring a VTP Version 3 Takeover" section on page 9-28. Catalyst - Cisco WS-C4506-E | Software Guide - Page 194
is to back up the configuration that is propagated over the network. • Similar to a client, a VTP secondary server cannot modify the VTP configuration. 9-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 195
) over a VTP domain. Note In software release 8.1(1), the only supported database propagation is for the VLAN database. VTP version 3 databases are 9-21 • Limitations, page 9-21 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-19 - Cisco WS-C4506-E | Software Guide - Page 196
known to the device, the device's configuration is unaffected, but the device indicates to the database manager that a configuration error condition has occurred. 9-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 197
1 and VTP version 2 region to client and reset their revision number (do a reload or change the domain name back and forth). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-21 - Cisco WS-C4506-E | Software Guide - Page 198
mode: Step 1 Step 2 Task Enable VTP version 3 on the switch. Verify that VTP version 3 is enabled. Command set vtp version 3 show vtp domain 9-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 199
mode is off for all databases. The mode of the VLAN database is preserved when VTP versions are changed. Note In software release 8.1(1), the only supported database propagation is for the VLAN database; therefore, there are no "unknown" databases. 78-15486-01 Catalyst - Cisco WS-C4506-E | Software Guide - Page 200
. Place the switch in VTP client mode. Verify the VTP configuration. Command set vtp domain name set vtp mode client show vtp domain 9-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 201
devices in VTP transparent mode do not send VTP join messages. On Catalyst 4500 series switches with trunk connections to network devices in VTP transparent mode, configure . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-25 - Cisco WS-C4506-E | Software Guide - Page 202
ID : 00d0.004c.1800 Feature Mode Revision Primary ID Primary Description VLAN Off UNKNOWN Off Pruning : disabled VLANs prune eligible: 2-1000 Console> (enable) 9-26 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 203
passwd 9fbdf74b43a2815037c1b33aa00445e2 secret . . . Console> (enable) set vtp passwd toto secret VTP secret has to be 32 characters in length Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-27 - Cisco WS-C4506-E | Software Guide - Page 204
"Reconfiguring a Partitioned VTP Domain" section on page 9-16. Use the set vtp primary [feature] [force] . Note In software release 8.1(1), the only supported database propagation is for the VLAN database. 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C4506-E | Software Guide - Page 205
do not respond to requests. In addition, clients or servers that do not have a valid database do not respond to requests. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 9-29 - Cisco WS-C4506-E | Software Guide - Page 206
Configuring VTP Version 3 Chapter 9 Configuring VTP 9-30 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 207
10-6 • Configuring Auxiliary VLANs, page 10-13 • Configuring Private VLANs, page 10-16 Understanding How VLANs Work A VLAN is a group of end stations with a common set networks. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-1 - Cisco WS-C4506-E | Software Guide - Page 208
as Logically Defined Networks Cisco router Catalyst 4000 Engineering VLAN be routed. Port VLAN membership on the switch is assigned manually on a port-by-port basis. When you assign switch 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 209
range1 Cisco defaults for FDDI and Token Ring. Not N/A supported on the Catalyst 4500 series switches. You cannot delete these VLANs. 1006-1009 Reserved range Cisco defaults propagated. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-3 - Cisco WS-C4506-E | Software Guide - Page 210
Configuration Feature Native (default) VLAN Port VLAN assignments VLAN state MTU size Default Value VLAN 1 All ports assigned to VLAN 1 Enabled 1500 bytes 10-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 211
use the system defaults only. Note The Catalyst 4500 series switch 10/100 Ethernet switching modules support auxiliary VLANs in software release 5.5(1) and later releases 13. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-5 - Cisco WS-C4506-E | Software Guide - Page 212
] show vlan [vlan_num] Note The default VLAN type is Ethernet; if you do not specify the type, the VLAN is an Ethernet VLAN. 10-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 213
-range Ethernet VLAN. set vlan vlan [name name] [said said] [mtu mtu] [translation vlan] Verify the VLAN configuration. show vlan [vlan] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-7 - Cisco WS-C4506-E | Software Guide - Page 214
344 VLAN Type SAID MTU Parent RingNo BrdgNo Stp BrdgMode Trans1 Trans2 500 enet 100500 1500 - - - - - 0 0 VLAN AREHops STEHops Backup CRF Console> (enable) 10-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 215
the VLAN configuration. Command set vlan vlan [name name] [state {active | suspend}] [said said] [mtu mtu] [translation vlan] show vlan [vlan] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-9 - Cisco WS-C4506-E | Software Guide - Page 216
active 59 2/4 VLAN Type SAID MTU Parent RingNo BrdgNo Stp BrdgMode Trans1 Trans2 500 enet 100500 1500 - - - - - 0 0 VLAN AREHops STEHops Backup CRF 10-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 217
1000 must be mapped to an ISL VLAN in order to be recognized and forwarded by Cisco switches. These restrictions apply when mapping 802.1Q VLANs to ISL VLANs: • You can network. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-11 - Cisco WS-C4506-E | Software Guide - Page 218
is deleted only on the current switch. When you are on a VTP client, you can only delete a VLAN on the local switch. 10-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 219
other device that supports Voice-over-IP (VoIP). • Port 2 is an internal 10/100 interface that carries the phone traffic. • Port 3 connects to a PC or other device. Figure 10-2 shows how you can connect a Cisco IP Phone to a Catalyst 4500 series switch. 78-15486-01 Catalyst 4500 Series, Catalyst - Cisco WS-C4506-E | Software Guide - Page 220
• Data traffic present on the VLAN supporting phones might reduce the quality of VoIP traffic ports to send Cisco Discovery Protocol (CDP) packets that instruct an attached Cisco IP Phone to 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 221
CoS value (enter the set port auxiliaryvlan mod[/port] untagged command) Note The Cisco IP Phone always sets Layer 3 IP precedence to 5 in voice traffic. . Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-15 - Cisco WS-C4506-E | Software Guide - Page 222
. Ports belonging to a private VLAN are associated with a common set of supporting VLANs that are used to create the private VLAN structure. You can configure promiscuous port. 10-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 223
the primary, isolated, and any community VLANs to other switches that support private VLANs. In an Ethernet-switched environment, you can assign an individual community. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-17 - Cisco WS-C4506-E | Software Guide - Page 224
cannot change the VTP mode to client or server mode, because VTP does not support private VLAN types or mapping propagation. • You can configure VLANs as primary, to ensure that the spanning tree topologies match. You should manually double-check the STP configuration to ensure that the primary, - Cisco WS-C4506-E | Software Guide - Page 225
separately monitor egress or ingress traffic. • IGMP snooping and multicast shortcuts are not supported in private VLANs. • You cannot enable EtherChannel on isolated, community, or 01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-19 - Cisco WS-C4506-E | Software Guide - Page 226
ports 4/4 through 4/6 as the community port: Console> (enable) set pvlan 7 902 4/4-6 Successfully set the following ports to Private Vlan 7,902:4/4-6 Console> (enable) 10-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 227
7 902 Isolated 4/4-6 Console> (enable) show pvlan Primary Secondary Secondary-Type Ports 7 901 isolated 4/3 7 902 community 4/4-6 7 903 community 4/7-9 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-21 - Cisco WS-C4506-E | Software Guide - Page 228
7: Console> (enable) clear vlan 7 This command will de-activate all ports on vlan 7 Do you want to continue (y/n) [n]?y Vlan 7 deleted Console> (enable) 10-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 229
set on ports 3/2 through 3/5: Console> (enable) clear pvlan mapping 901 902 3/2-5 Successfully cleared mapping between 901 and 902 on 3/2-5 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 10-23 - Cisco WS-C4506-E | Software Guide - Page 230
Configuring Private VLANs Chapter 10 Configuring VLANs 10-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 231
allow you to extend VLANs across an entire network. The Catalyst 4500 series, 2948G, and 2980G switches support IEEE 802.1Q-802.1Q trunking encapsulation. You can configure a ." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-1 - Cisco WS-C4506-E | Software Guide - Page 232
the neighboring port manually as a trunk supported in the Catalyst 4500 series switch with 802.1Q-capable hardware. Automatic negotiation of 802.1Q trunks is supported in software release 4.2 and later. 11-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 233
if you do not intend to trunk across those links. When manually enabling trunking on a link to a Cisco router, use the nonegotiate keyword to cause the port to become a trunk but not generate DTP frames. Trunking Support Trunking capabilities are hardware dependent. Table 11-4 shows which switches - Cisco WS-C4506-E | Software Guide - Page 234
Encapsulation Support Cisco 802.1Q cloud through 802.1Q trunks. • Make sure that the native VLAN is the same on all of the 802.1Q trunks connecting the Cisco switches to the non-Cisco 802.1Q cloud. 11-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 235
Cisco switches to a non-Cisco 802.1Q cloud, all of the connections must be through 802.1Q trunks. You cannot connect Cisco switches to a non-Cisco auto dot1q (on hardware supporting 802.1Q only) normal- 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-5 - Cisco WS-C4506-E | Software Guide - Page 236
for that trunk. However, you can remove VLANs from the allowed list to prevent traffic for those VLANs from passing over the trunk. 11-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 237
1 Step 2 Task Turn off trunking on a port. Verify the trunking configuration. Command set trunk mod_num/port_num off show trunk [mod_num/port_num] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-7 - Cisco WS-C4506-E | Software Guide - Page 238
will continue to transmit and receive packets from control protocols such as Cisco Discovery Protocol (CDP), VLAN Trunking Protocol (VTP), Port Aggregation Protocol 850,917,999 11-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 239
and routers, refer to the Layer 3 Switching Software Configuration Guide-Catalyst 5000 Family, 4000 Family, 2926G Series, 2926 Series, /Ports 1 2/3-6 Switch_A> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-9 - Cisco WS-C4506-E | Software Guide - Page 240
on trunk 1-1005, 1025-4094 1-1005, 1025-4094 1-1005, 1025-4094 1-1005, 1025-4094 Port Vlans allowed and active in management domain 11-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 241
ports on Switch B are in EtherChannel auto mode. The system logging messages provide information about the formation of the EtherChannel bundle. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-11 - Cisco WS-C4506-E | Software Guide - Page 242
auto channel WS-C4003 JAB023806(Sw 2/4 3/5 connected auto channel WS-C4003 JAB023806(Sw 2/5 3/6 connected auto channel WS-C4003 JAB023806(Sw 2/6 Switch_B> (enable) 11-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 243
) set vlan 20 Vlan 20 configuration successful Switch_1> (enable) set vlan 30 Vlan 30 configuration successful Switch_1> (enable) set vlan 40 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-13 - Cisco WS-C4506-E | Software Guide - Page 244
are up by entering the show trunk command: Switch_1> (enable) show trunk 1 * - indicates vtp domain mismatch Port Mode Encapsulation Status Native vlan ----------- 11-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 245
---------- disabled disabled disabled disabled disabled disabled disabled disabled disabled Fast-Start ---------- disabled disabled disabled Group-method Group-method 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-15 - Cisco WS-C4506-E | Software Guide - Page 246
1/1 vlans 10 using portpri 1. Port 1/1 vlans 1005 using portpri 4. Switch_2> (enable) set spantree portvlanpri 1/1 1 20 Port 1/1 vlans 1-9,11-19,21-1004 using portpri 32. 11-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 247
disabled disabled disabled disabled disabled Group-method Group-method Figure 11-3 shows the network after you configure VLAN traffic load sharing. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-17 - Cisco WS-C4506-E | Software Guide - Page 248
> (enable) Priority -------- 32 32 32 32 1 1 1 32 4 Fast-Start ---------- disabled disabled disabled disabled disabled disabled disabled disabled disabled Group-method 11-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 249
how to configure an 802.1Q Fast Ethernet trunk between two Catalyst 4500 series switches with 802.1Q-capable hardware. (Use the show port 1 Port-type Switch 2 inconsistency 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-19 - Cisco WS-C4506-E | Software Guide - Page 250
VLAN Trunks on Fast Ethernet and Gigabit Ethernet Ports Step 2 Display the problem on Switch 2 by entering the the show spantree and show spantree the show spantree output.) 11-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 251
trunk and show spantree commands: Switch 2> (enable) show trunk 4/1 Port Mode Encapsulation 4/1 nonegotiate dot1q Status -----------trunking Native vlan ----------1 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 11-21 - Cisco WS-C4506-E | Software Guide - Page 252
port-state is "forwarding." Verify connectivity across the trunk using the ping command: Switch 1> (enable) ping switch_2 switch_2 is alive Switch 1> (enable) 11-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 253
for Dynamic Ports and VMPS, page 12-3 • Configuring VMPS, page 12-4 • Troubleshooting VMPS and Dynamic Port VLAN Membership, page 12-11 • VMPS Example, page 12 -to-VLAN mapping. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-1 - Cisco WS-C4506-E | Software Guide - Page 254
response. If VMPS is in secure mode, the port is shut down and you must manually bring the port back up with the set port command. If a VLAN in the is not supported on Gigabit Ethernet ports. 12-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 - Cisco WS-C4506-E | Software Guide - Page 255
each other about the VMPS database. You must enable VMPS on each server, and manually update each VMPS server when you update the VMPS database. • You must configure VMPS period. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-3 - Cisco WS-C4506-E | Software Guide - Page 256
read by the VMPS server. • Define the VMPS domain. The VMPS domain should correspond to the VTP domain name configured on the switch. 12-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 257
further restrict access to the network. • You can configure a restricted access using MAC addresses and the port groups or VLAN groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-5 - Cisco WS-C4506-E | Software Guide - Page 258
.4.254.222 port 1/3 device 198.4.254.223 all-ports ! !Section 4: VLAN GROUPS !VLAN groups ! !vmps-vlan-group ! vlan-name ! 12-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 259
each other about the VMPS database. You must enable VMPS on each server and manually update each VMPS server when you update the VMPS database. To configure a VMPS > (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-7 - Cisco WS-C4506-E | Software Guide - Page 260
100 2/1 connect dyn normal full 155 3/1 connect dyn-5 normal half 10 Type 100 BASE-TX 100 BASE-TX OC3 MMF ATM 10 BASE-T 12-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 261
entry from the VMPS client, perform this task in privileged mode: Task Clear a VMPS server entry. Command clear vmps server ip_addr 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-9 - Cisco WS-C4506-E | Software Guide - Page 262
' to see reconfirm status Console> (enable) To download the VMPS database manually and refresh the existing VMPS database, perform this task in privileged mode. static mode: 12-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 263
command. Unable to contact the TFTP server 172.16.254.222. Enter a static route (using the 3 using the set logging level vmps command. Troubleshooting Dynamic Ports A dynamic port might shut down 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-11 - Cisco WS-C4506-E | Software Guide - Page 264
: - Switch 2 - Switch 9 • The database configuration file is called Bldg-G.db and is stored on a TFTP server with IP address 172.20.22.7. 12-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 265
ASCII file resides: Console> (enable) set vmps tftpserver 172.20.22.7 Bldg-G.db b. Enable VMPS: Console> (enable) set vmps state enable 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-13 - Cisco WS-C4506-E | Software Guide - Page 266
to one VLAN. You could not enable the dynamic port VLAN feature on ports that carried a native VLAN and an auxiliary VLAN. 12-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 267
of the auxiliary VLAN ID is not dynamic, you need to configure it manually. As you manually configure the auxiliary VLAN ID, the VMPS server is queried for packets coming ID: 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 12-15 - Cisco WS-C4506-E | Software Guide - Page 268
Dynamic VLAN Membership with VMPS Console> (enable) set port auxiliaryvlan 5/10 223 Auxiliary vlan cannot be set to 223 as PVID=223. Console> (enable) 12-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 269
information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter command) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 13-1 - Cisco WS-C4506-E | Software Guide - Page 270
on the switch as well. For information on enabling dynamic VLAN creation, see the "Enabling GVRP Dynamic VLAN Creation" section on page 13-4. 13-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 271
Enable GVRP on an individual 802.1Q-capable port. set port gvrp enable mod_num/port_num Verify the configuration. show gvrp configuration 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 13-3 - Cisco WS-C4506-E | Software Guide - Page 272
1Q trunks • GVRP is enabled on all trunk ports Note Dynamic VLAN creation supports all VLAN types. If you enable dynamic VLAN creation, these configuration restrictions are . 13-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 273
Registration Configuring an 802.1Q trunk port in fixed registration mode allows manual creation and registration of VLANs, prevents VLAN deregistration, and registers all enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 13-5 - Cisco WS-C4506-E | Software Guide - Page 274
topology reconfiguration on a port that is connected to a device that does not support per-VLAN STP, configure the GVRP active applicant state on the port. Ports timer to 350 ms. 13-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 275
: 156 Join In Transmitted: 0 Empty Transmitted: 0 Leave In Transmitted: 0 Leave Empty Transmitted: 0 Leave All Transmitted: 41 VTP Message Received: 0 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 13-7 - Cisco WS-C4506-E | Software Guide - Page 276
set gvrp disable This example shows how to disable GVRP globally on the switch: Console> (enable) set gvrp disable GVRP disabled Console> (enable) 13-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 277
of service (QoS) on Catalyst enterprise LAN switches. Note For complete syntax and usage information for the commands used in this chapter, refer to the Catalyst 4500 Series tag. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 14-1 - Cisco WS-C4506-E | Software Guide - Page 278
Chapter 14 Configuring QoS QoS implements scheduling on supported egress ports with transmit queue drop thresholds and multiple is the selection of traffic to be marked. 14-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 279
traffic on a per-port basis. Note The Catalyst 4500 series, 2948G, and 2980G switches support frame classification and marking only on unclassified frames entering on page 14-6. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 14-3 - Cisco WS-C4506-E | Software Guide - Page 280
. Use the show port capabilities command to determine the specific QoS support for a module. QoS Default Configuration Table 14-1 shows the QoS commands only when necessary. 14-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 281
the default CoS value for port 8/1 and verify the configuration: Console> (enable) clear qos defaultcos qos defaultcos setting cleared. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 14-5 - Cisco WS-C4506-E | Software Guide - Page 282
queues and the number of drop thresholds that are supported on the port. For example, the 2q1t port type supports two transmit queues and one drop threshold. The q# > (enable) 14-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 283
. Disabling QoS To disable QoS, perform this task in privileged mode: Tas Disable QoS on the switch. Command set qos disable 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 14-7 - Cisco WS-C4506-E | Software Guide - Page 284
Configuring QoS on the Switch This example shows how to disable QoS: Console> (enable) set qos disable QoS is disabled. Console> (enable) Chapter 14 Configuring QoS 14-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 285
This chapter describes how to configure multicast services, including Cisco Group Management Protocol (CGMP), Internet Group Management Protocol (IGMP) snooping, and GARP Multicast Registration Protocol (GMRP) on the Catalyst enterprise LAN switches. Note For complete - Cisco WS-C4506-E | Software Guide - Page 286
Understanding How Multicasting Works Chapter 15 Configuring Multicast Services When the CGMP/IGMP-capable router receives an IGMP control in the group ask to leave the group. 15-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 287
Services 3-protocol independent, which allows it to support the multicast traffic of any Layer 3 components run on both the switch and on the host (Cisco is not a source for GMRP host software). On the 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-3 - Cisco WS-C4506-E | Software Guide - Page 288
15 Configuring Multicast Services Configuring CGMP verify the configuration: Console> (enable) set cgmp enable CGMP support for IP multicast enabled. Console> (enable) show cgmp 15-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 289
Chapter 15 Configuring Multicast Services Configuring CGMP topology notifications received 80 number of CGMP CGMP leave: enabled CGMP FastLeave: enabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-5 - Cisco WS-C4506-E | Software Guide - Page 290
15 Configuring Multicast Services Displaying Multicast Router : • Display information on dynamically learned and manually configured multicast router ports-show multicast router ] 15-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486 - Cisco WS-C4506-E | Software Guide - Page 291
Chapter 15 Configuring Multicast Services Configuring CGMP Task Display the total number of multicast addresses (groups) (enable) 211915 0 211729 186 0 3122 0 0 0 80 2032227 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-7 - Cisco WS-C4506-E | Software Guide - Page 292
Configuring CGMP Chapter 15 Configuring Multicast Services Disabling CGMP Leave Processing To disable CGMP support for IP multicast disabled. Console> (enable) Command set cgmp disable 15-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C4506-E | Software Guide - Page 293
Chapter 15 Configuring Multicast Services Configuring GMRP Configuring GMRP The following sections describe how to configure ): Join = 200 Leave = 600 LeaveAll = 10000 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-9 - Cisco WS-C4506-E | Software Guide - Page 294
Configuring GMRP Chapter 15 Configuring Multicast Services Port based GMRP Configuration: Port GMRP Status Registration gmrp disable mod_num/port_num show gmrp configuration 15-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 295
Chapter 15 Configuring Multicast Services Configuring GMRP This example shows how to disable GMRP on ports 6/ Forward All groups option disabled on port 1/1. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-11 - Cisco WS-C4506-E | Software Guide - Page 296
Configuring GMRP Chapter 15 Configuring Multicast Services Configuring GMRP Registration The following sections Configuration: GMRP-Status Registration ForwardAll Port(s 15-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 297
Chapter 15 Configuring Multicast Services Configuring GMRP Enabled Normal Enabled Fixed Console> (enable) Disabled Disabled 1/1-4 GARP timer values on the switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-13 - Cisco WS-C4506-E | Software Guide - Page 298
Configuring GMRP Chapter 15 Configuring Multicast Services When you set the timer values, the value for leave must be equal Packets Received:500 Join Empties:200 Join INs:250 15-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 299
Chapter 15 Configuring Multicast Services Configuring Multicast Router Ports and Group Entries Leaves:10 Leave manually specify multicast router ports and configure multicast group entries. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide- - Cisco WS-C4506-E | Software Guide - Page 300
Services Specifying Multicast Router Ports When you enable CGMP or GMRP, the switch automatically learns to which ports a multicast router is connected. However, you can manually -16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 301
15 Configuring Multicast Services Filtering IGMP Traffic Console> (enable) Disabling Multicast Group Entries To disable manually configured multicast group entries, perform this task in privileged 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-17 - Cisco WS-C4506-E | Software Guide - Page 302
. Using IGMP Traffic Filtering You can use IGMP filters in video service deployment of Ethernet to the Home (ETTH). IGMP transmits video channels None Disabled Deny 15-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 303
Chapter 15 Configuring Multicast Services Filtering IGMP Traffic IGMP Multicast Filter Activation IGMP multicast filters igmp filter igmp filter is disabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-19 - Cisco WS-C4506-E | Software Guide - Page 304
Filtering IGMP Traffic Chapter 15 Configuring Multicast Services Configuring Port IP Multicast Filtering IP multicast group igmp filter profile profile_id match-action 15-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 305
Chapter 15 Configuring Multicast Services Filtering IGMP Traffic This example shows how to permit an IP address enable) clear igmp filter profile 1 226.1.1.1 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-21 - Cisco WS-C4506-E | Software Guide - Page 306
Filtering IGMP Traffic Chapter 15 Configuring Multicast Services This example shows how to verify that an IGMP multicast filter ) set igmp filter map 1 2/1 Console> (enable) 15-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 307
Multicast Services Filtering IGMP 2/9 - 2/10 - 2/11 - 2/12 - 2/13 - 2/14 - 2/15 - 2/16 - . . . 2/46 - 2/47 - 2/48 - Console> (enable) Removing IGMP Multicast 01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-23 - Cisco WS-C4506-E | Software Guide - Page 308
Filtering IGMP Traffic Chapter 15 Configuring Multicast Services 15-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 309
port, 101 (1 + 100) on another port, 25 (1 + 24) on a third port, and 1 address on each of the rest of the ports 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-1 - Cisco WS-C4506-E | Software Guide - Page 310
address of the packet is compared to the list of secure source addresses that were manually configured or autoconfigured (learned) on the port. If a MAC address of a device only. 16-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486- - Cisco WS-C4506-E | Software Guide - Page 311
port security. Enabling Port Security Port security is either autoconfigured or enabled manually by specifying a MAC address. If a MAC address is not specified to Security Mode 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-3 - Cisco WS-C4506-E | Software Guide - Page 312
, 17:53:38 This example shows how to enable port security on a port and manually specify the secure MAC address: Console> (enable) set port security 2/1 enable 00-90 (enable) 16-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 313
Chapter 16 Configuring Port Security Configuring Port Security on the Switch This example shows how to -44-55 cleared from secure address list for port 4/7 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-5 - Cisco WS-C4506-E | Software Guide - Page 314
Configuring Port Security on the Switch Chapter 16 Configuring Port Security This example removes all MAC addresses from ports if the port has exceeded its address limitation. 16-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 315
Chapter 16 Configuring Port Security Configuring Port Security on the Switch Enabling MAC Address traps on the system. Command set snmp trap enable macnotification 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-7 - Cisco WS-C4506-E | Software Guide - Page 316
Configuring Port Security on the Switch Chapter 16 Configuring Port Security This example shows how to enable MAC address you attempt to connect the host to the port again. 16-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 317
Chapter 16 Configuring Port Security Configuring Port Security on the Switch Setting the Shutdown Time You Left 3/24 1 00-e0-4f-ac-b4-00 - - - - Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-9 - Cisco WS-C4506-E | Software Guide - Page 318
Monitoring Port Security Chapter 16 Configuring Port Security Restricting Traffic for a Host MAC • Shutdown and security mode • Statistics data related to port security 16-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 319
1: Total ports: 2 Total MAC address(es): 2 Total global address space used (out of 1024): 0 Status: installed Module 3: Module does not support port security feature Module 6: 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 16-11 - Cisco WS-C4506-E | Software Guide - Page 320
Security Total ports: 48 Total MAC address(es): 48 Total global address space used (out of 1024): 0 Status: installed Console> (enable) Chapter 16 Configuring Port Security 16-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 321
the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. see Chapter 16, "Configuring Port Security." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 - Cisco WS-C4506-E | Software Guide - Page 322
flood traffic. • If the Ethernet port is part of an IPX network, you must manually enter a static CAM entry in the CAM table before you disable unicast flood on the /port disable 17-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 323
unicast flood block information for port 1 on module 4: Console> (enable) show port unicast-flood 4/1 Port Unicast Flooding ---- 4/1 Disabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 17-3 - Cisco WS-C4506-E | Software Guide - Page 324
Configuring Unicast Flood Blocking on the Switch Chapter 17 Configuring Unicast Flood Blocking 17-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 325
SNMP access to the switch from unauthorized source IP addresses. All other TCP/IP services (such as IP traceroute and IP ping) continue to work normally when you enable lists. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 18-1 - Cisco WS-C4506-E | Software Guide - Page 326
list and verify the configuration: Console> (enable) set ip permit 172.16.0.0 255.255.0.0 telnet 172.16.0.0 with mask 255.255.0.0 added to Telnet permit list. Console> (enable . 18-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 327
list disabled. Snmp permit list disabled. Permit List Mask Access-Type 172.16.0.0 255.255.0.0 telnet 172.20.0.0 255.255.0.0 snmp 172.20. list enabled. Snmp permit list enabled. Permit List Mask Access-Type 172.16.0.0 255.255.0.0 telnet 172.20.0.0 255.255.0.0 snmp 172.20. - Cisco WS-C4506-E | Software Guide - Page 328
addresses. This action prevents your connection from being dropped by the switch you are configuring in case you clear your current IP address. 18-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 329
172.100.101.102 cleared from telnet permit list. Console> (enable) clear ip permit all IP permit list cleared. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 18-5 - Cisco WS-C4506-E | Software Guide - Page 330
Configuring the IP Permit List on the Switch Chapter 18 Configuring the IP Permit List 18-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 331
protocol group. Layer 2 protocols, such as Spanning Tree Protocol (STP) and Cisco Discovery Protocol (CDP), are not affected by protocol filtering. Dynamic VLAN ports and 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 19-1 - Cisco WS-C4506-E | Software Guide - Page 332
Configuring Protocol Filtering For example, if a host that supports both IP and Internetwork Packet Exchange (IPX) is configuration. show port protocol [mod_num[/port_num]] 19-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 333
This example shows how to disable protocol filtering: Console> (enable) set protocolfilter disable Protocol filtering disabled on this switch. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 19-3 - Cisco WS-C4506-E | Software Guide - Page 334
Configuring Protocol Filtering on the Switch Chapter 19 Configuring Protocol Filtering 19-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 335
information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter to module 2. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-1 - Cisco WS-C4506-E | Software Guide - Page 336
notconnect 1 normal full 1000 No GBIC Port Security Secure-Src-Addr Last-Src-Addr Shutdown Trap IfIndex 3/1 disabled No disabled 15 3/2 disabled No disabled 16 20-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 337
Admin Oper Detected mWatt mA @51V 2/1 none none - - - - - Port Security Violation Shutdown-Time Age-Time Max-Addr Trap IfIndex 2/1 disabled shutdown 0 0 1 disabled 15 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-3 - Cisco WS-C4506-E | Software Guide - Page 338
-bf-59-66 4/4 00-50-54-bf-59-67 . . . 4/47 00-50-54-bf-59-92 4/48 00-50-54-bf-59-93 20-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 339
Speed auto,10,100 Duplex half,full Trunk encap type 802.1Q Trunk mode on,off,desirable,auto,nonegotiate Channel 3/1-48 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-5 - Cisco WS-C4506-E | Software Guide - Page 340
switch to the remote host labsparc: Console> (enable) telnet labsparc Trying 172.16.10.3... Connected to labsparc. Escape character is '^]'. UNIX(r) System V Release ). 20-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 341
The SSH feature provides security for Telnet sessions to the switch. SSH is supported for remote logins to the switch only. Telnet sessions that are initiated from to generate. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-7 - Cisco WS-C4506-E | Software Guide - Page 342
console port session and an active Telnet session: Console> (enable) show users Session User Location console sam telnet jake jake-mac.bigcorp.com 20-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 343
executive and privileged executive mode. In normal executive mode, the ping command supports the -s parameter, which allows you to specify the packet size and , press Ctrl-C. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-9 - Cisco WS-C4506-E | Software Guide - Page 344
normal executive mode: Console> ping labsparc labsparc is alive Console> ping 72.16.10.3 12.16.10.3 is alive Console> This example shows how to ping a remote Console> (enable) 20-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 345
tables of the switches in the path. Information is displayed about all Catalyst 4500 series, Catalyst 5000 family, and Catalyst 6500 series switches that are in the duplex mode. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-11 - Cisco WS-C4506-E | Software Guide - Page 346
to trace the path packets take through the network. Command traceroute [-n] [-w wait_time] [-i initial_ttl] [-m max_ttl] [-p dest_port] [-q nqueries] [-t tos] host [data_size] 20-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 347
packets 1 10.1.1.1 (10.1.1.1) 2 ms 2 ms 2 ms 1 ms 2 ms 2 ms 2 10.1.1.100 (10.1.1.100) 2 ms 4 ms 3 ms 3 ms 3 ms 3 ms Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 20-13 - Cisco WS-C4506-E | Software Guide - Page 348
Using IP Traceroute Chapter 20 Checking Status and Connectivity 20-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 349
Access Protocol (SNAP). CDP runs over the data link layer only. Cisco devices do not forward CDP packets. When new CDP information is received, old information is discarded. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 21-1 - Cisco WS-C4506-E | Software Guide - Page 350
enable or disable CDP on a per-port basis. You must enable CDP globally before the switch can transmit CDP messages on any ports. 21-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 351
enabled 3/3 disabled 3/4 disabled 3/5 disabled 3/6 disabled 3/7 enabled 3/8 enabled 3/9 enabled 3/10 enabled 3/11 enabled 3/12 enabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 21-3 - Cisco WS-C4506-E | Software Guide - Page 352
specifies how often the switch will transmit CDP messages to directly connected Cisco devices. To set the default CDP message interval, perform this task : 225 Console> (enable) 21-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 353
.52.36 Holdtime: 132 sec Capabilities: TRANSPARENT_BRIDGE SWITCH Version: WS-C2948 Software, Version McpSW: 5.1(57) NmpSW: 5.1(1) Copyright (c) 1995-1999 by Cisco Systems, Inc. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 21-5 - Cisco WS-C4506-E | Software Guide - Page 354
: WS-C2948 Port-ID (Port on Neighbors's Device): 2/2 VTP Management Domain: Lab_Network Native VLAN: 522 Duplex: full Console> (enable) Chapter 21 Configuring CDP 21-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 355
information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter in Table 22-1. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 22-1 - Cisco WS-C4506-E | Software Guide - Page 356
not terminate the process. Completed Switch TopN reports remain available for viewing until you remove them using the clear top {all | report_num} command. 22-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 357
example shows how to run the Switch TopN Reports utility in the foreground: Console> (enable) show top 5 pkts Start Time: 06/16/1998,17:26:38 End Time: 06/16/1998,17:27:09 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 22-3 - Cisco WS-C4506-E | Software Guide - Page 358
pending reports: Console> (enable) show top report 5 Start Time: 06/16/1998,17:29:40 End Time: 06/16/1998,17:30:11 PortType: all Metric: overflow Port Band- Uti Bytes 22-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 359
by Console//. Console> (enable) 06/16/1998,17:36:52:MGMT-5:TopN report 3 killed by Console//. 06/16/1998,17:36:52:MGMT-5:TopN report 5 killed by Console//. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 22-5 - Cisco WS-C4506-E | Software Guide - Page 360
Running and Viewing Switch TopN Reports Chapter 22 Using Switch TopN Reports 22-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 361
affected port and alerts the user. Unidirectional links can cause a variety of problems, including spanning-tree topology loops. UDLD is a Layer 2 protocol that works 1 feature. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 23-1 - Cisco WS-C4506-E | Software Guide - Page 362
Devices on both ends of the link must support UDLD in order for the protocol to successfully Switch B on the same port. UDLD detects the problem and disables the port. Figure 23-1 Unidirectional Link Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C4506-E | Software Guide - Page 363
globally and verify the configuration: Console> (enable) set udld enable UDLD enabled globally Console> (enable) show udld UDLD : enabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 23-3 - Cisco WS-C4506-E | Software Guide - Page 364
set udld disable show udld This example shows how to disable UDLD globally: Console> (enable) set udld disable UDLD disabled globally Console> (enable) 23-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 365
Mode Software release 5.4(3) and later releases support UDLD aggressive mode. UDLD aggressive mode is only for point-to-point links between Cisco switches running software release 5.4(3) or later 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 23-5 - Cisco WS-C4506-E | Software Guide - Page 366
23-2 show udld Command Output Fields Field UDLD Message Interval Description Status of whether UDLD is enabled or disabled. Message interval, in seconds. 23-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 367
link has been detected and the port is disabled), or bidirectional (bidirectional link has been detected and the port is disabled). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 23-7 - Cisco WS-C4506-E | Software Guide - Page 368
Configuring UDLD on the Switch Chapter 23 Configuring UDLD 23-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 369
information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter technology. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-1 - Cisco WS-C4506-E | Software Guide - Page 370
The security strategy that is used by the SNMP agent. Currently, software supports three security models: SNMPv1, SNMPv2c, and SNMPv3. Simple Network A network ) and security. 24-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 371
Definition This second version of SNMP supports centralized and distributed network management strategies manage network performance, find and solve network problems, and plan for network growth. There 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-3 - Cisco WS-C4506-E | Software Guide - Page 372
same type of module For Fast EtherChannel and Gigabit EtherChannel interfaces, the ifIndex value is only retained and used after a high-availability switchover. 24-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 373
definitions on the switch. Catalyst enterprise LAN switches are managed devices that support SNMP network management with the following features: • SNMP traps (see the device 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-5 - Cisco WS-C4506-E | Software Guide - Page 374
MIBs, refer to this URL: http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml. SNMP commands supported by the Catalyst enterprise LAN switches, refer to the Catalyst 4500 Series, 24-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 - Cisco WS-C4506-E | Software Guide - Page 375
read-write Administrators read-write-all Root Trap-Rec-Address 172.16.10.10 172.16.10.20 Console> (enable) Trap-Rec-Community read-write read the community string). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-7 - Cisco WS-C4506-E | Software Guide - Page 376
:85 percent Traps Enabled:None Port Traps Enabled:None Community-Access Community-String read-only public read-write private read-write-all secret 24-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 377
2 172.20.60.100 mask 255.0.0.0 Access number 2 has been created with new IP Address 172.20.60.100 mask 255.0.0.0 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-9 - Cisco WS-C4506-E | Software Guide - Page 378
mode: Step 1 Step 2 Task Specify an interface alias. Display the interface alias. Command set snmp ifalias {ifIndex} [ifAlias] show snmp ifalias [ifIndex] 24-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 379
. An SNMP engine is made up of these four components (Figure 24-1): • Dispatcher • Message Processing Subsystem • Security Subsystem • Access Control Subsystem 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-11 - Cisco WS-C4506-E | Software Guide - Page 380
message format corresponding to a single version of SNMP (SNMPv1, SNMPv2c, SNMPv3), or it may contain a number of modules, each supporting a different version of SNMP. 58568 24-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 381
Message Processing Subsystem. Depending on the services required, the Security Subsystem may encrypt Subsystem. An implementation of the Security Subsystem may support one or more distinct security models. So 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C4506-E | Software Guide - Page 382
on the SNMP commands that are supported by the Catalyst enterprise LAN switches, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst | read-write | read-write-all) 24-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 383
sha authPasswd guestuser2password privProt no-priv with engineid 00:00:00:09:00:10:7b:f2:82:00:00:00 nonvolatile. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 24-15 - Cisco WS-C4506-E | Software Guide - Page 384
10.6.4.201 guestuser1 ifDescr.1 Enter Authentication password :guestuser1password Enter Privacy password :privacypasswd1 Error code set in packet - AUTHORIZATION_ERROR:1. 24-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 385
and troubleshoot a switched internetwork. For more information, refer to the following publications: • Getting Started with Resource Manager Essentials • Getting Started with CWSI Campus 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C4506-E | Software Guide - Page 386
Using CiscoWorks2000 Chapter 24 Configuring SNMP 24-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 387
25-1 • Enabling RMON, page 25-2 • Viewing RMON Data, page 25-2 • Supported RMON and RMON2 MIB Objects, page 25-2 Understanding How RMON Works RMON is an Internet analyzer. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 25-1 - Cisco WS-C4506-E | Software Guide - Page 388
Rec-Community 172.16.10.10 read-write 172.16.10.20 read- Supported RMON and RMON2 MIB Objects Table 25-1 lists the RMON and RMON2 MIB objects that are supported by the supervisor engine software. 25-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 389
16).alarm(3) engine Supervisor ...mib-2(1).rmon(16).event(9) engine Supervisor ...mib-2(1).rmon(16).usrHistory(18) engine Supervisor ...mib-2(1).rmon(16).probeConfig(19) engine Supported Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 25-3 - Cisco WS-C4506-E | Software Guide - Page 390
Supported RMON and RMON2 MIB Objects Chapter 25 Configuring RMON 25-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 391
usage information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter consists . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-1 - Cisco WS-C4506-E | Software Guide - Page 392
, the trunk settings of the destination port during the SPAN session configuration determine the encapsulation of the packets forwarded by the destination port. 26-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 393
is removed from the source list for VSPAN sessions. • A VSPAN session is disabled if the Admin source VLANs list is empty. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-3 - Cisco WS-C4506-E | Software Guide - Page 394
data unit (BPDU) packets, can be monitored using SPAN (RSPAN does not support monitoring of BPDU packets). SPAN and RSPAN Session Limits You can configure (and attached to it. 26-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 395
. • You can have up to five SPAN sessions running at the same time with any combination of ingress and egress sessions. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-5 - Cisco WS-C4506-E | Software Guide - Page 396
: Port 2/1-2 Direction : transmit/receive Incoming Packets: disabled Learning : enabled Filter : - Status : active Total local span sessions: 1 Console> (enable) 26-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 397
3/5 both filter 50,850 Overwrote Port 3/5 to monitor transmit/receive traffic of Port 3/4 Incoming Packets disabled. Learning enabled. Console> (enable) show span Destination : Port 3/5 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-7 - Cisco WS-C4506-E | Software Guide - Page 398
are as follows: • For source switches-Any Catalyst 4500 series switch supervisor engine • For destination or intermediate switches-Any Catalyst 4500 series or Catalyst 6500 series switch supervisor engine You cannot place any third-party or other Cisco switches in the end-to-end path for RSPAN - Cisco WS-C4506-E | Software Guide - Page 399
(see the "Understanding How SPAN Works" section on page 26-4), plus support for source ports and destination ports that are distributed across multiple switches, reflector port. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-9 - Cisco WS-C4506-E | Software Guide - Page 400
that the special properties of RSPAN VLANs are supported in all the switches to avoid unwanted traffic in get efficient flow of RSPAN traffic, or manually delete the RSPAN VLAN from all trunks 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 401
to filter VLANs 50 and 850: Console> (enable) set rspan source 2/3 500 reflector 2/34 filter 50,850 Rspan Type : Source Destination : - 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-11 - Cisco WS-C4506-E | Software Guide - Page 402
to specify port 3/1 as the RSPAN destination port in VLAN 500: Console> (enable) set rspan destination 3/1 500 Rspan Type : Destination Destination : Port 3/1 26-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 403
remote span traffic on port 4/1. Console> (enable) RSPAN Configuration Examples The following sections provide examples that show how to configure RSPAN. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-13 - Cisco WS-C4506-E | Software Guide - Page 404
-2 Making Modifications to an Active RSPAN Session Switch A (source) Action Disable the RSPAN session. RSPAN CLI Commands set rspan disable source 901 26-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 405
to configure this RSPAN session. This is a typical scenario where the monitoring probes would be placed in the data center and 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-15 - Cisco WS-C4506-E | Software Guide - Page 406
add probe 3 in Switch B to monitor RSPAN VLAN 901 using the set rspan destination 1/2 901 command. Similarly, you could add source ports to Switch C. 26-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 407
needed set rspan disable destination all set rspan disable destination all set rspan disable source all No RSPAN CLI command needed 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 26-17 - Cisco WS-C4506-E | Software Guide - Page 408
Configuring RSPAN Chapter 26 Configuring SPAN and RSPAN 26-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 409
27-4 • Enabling or Disabling the "Cisco Systems Console" Telnet Login Banner, page Generating System Status Reports for Tech Support, page 27-12 Setting the you do not manually configure a system name 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27-1 - Cisco WS-C4506-E | Software Guide - Page 410
appended). The prompt is updated whenever the system name changes, unless you have manually configured the prompt using the set prompt command. The switch performs a DNS 27-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 411
none PS1-Type PS2-Type PS3-Type WS-X4008-DC-650W WS-X4008 WS-X4008 Modem Baud Traffic Peak Peak-Time 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27-3 - Cisco WS-C4506-E | Software Guide - Page 412
message of the day. Display the login banner by logging out and logging back in to the switch. Command set banner motd c message_of_the_day c - 27-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 413
to disable the Cisco Systems Console Telnet login banner: Console> (enable) set banner telnet disable Cisco Systems Console banner will not be printed at telnet. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27 - Cisco WS-C4506-E | Software Guide - Page 414
Chapter 27 Administering the Switch This example shows how to display the Cisco Systems Console Telnet login banner content: Console> (enable) show banner (es) Hw Fw Sw 27-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 415
IP alias on the switch. Verify the currently defined IP aliases. Command set ip alias name ip_addr show ip alias [name] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27-7 - Cisco WS-C4506-E | Software Guide - Page 416
, the ARP entry is retained even after a system reset. Because most hosts support dynamic resolution, you usually do not need to specify static or permanent ARP cache > (enable) 27-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 417
IP traffic. In releases prior to software release 5.1, the switch always uses the classful subnet mask for IP routing table entries. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27-9 - Cisco WS-C4506-E | Software Guide - Page 418
is configured properly in the routing table: Console> (enable) set ip route 172.16.16.0/20 172.20.52.127 Route added. Console> (enable) show ip route Fragmentation day. 27-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 419
reset time is correct. show reset Note The minimum downtime argument is valid only if the system has a redundant supervisor engine. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 27-11 - Cisco WS-C4506-E | Software Guide - Page 420
Support Reports for Tech Support Using a single command to the Catalyst 4500 Series, Catalyst and send it to the Cisco Technical Assistance Center (TAC). status report for TAC. Command write tech-support {host} {file} [module mod_num] Console> (enable) write tech-support 172.20.32.10 techsupport.txt - Cisco WS-C4506-E | Software Guide - Page 421
4500 series switches. Note For information on power management for the Catalyst 4006 switch, see the "Understanding How Power Management Works on the Catalyst 4006 Switch" section on page 28-6. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 422
Catalyst 4500 series switches support these two the second power supply supports the switch without disrupting the support the switch configuration. By default, the power supplies in the Catalyst 4500 supply does not support combined mode. 4500 series switches. See Table 28-2 on page 28-9 for - Cisco WS-C4506-E | Software Guide - Page 423
Your switch will have no power redundancy. • The 1400 W DC power supply does not support combined mode. If you set the power budget to 2, the switch ignores this setting. For . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-3 - Cisco WS-C4506-E | Software Guide - Page 424
lists the power that is provided by the power supplies for the Catalyst 4500 series switches. Table 28-1 Available Power Power Supply 1000 W AC Redundant configuration. 28-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 425
system power requires 160 W from the DC input. • The 1400 W DC power supply does not support combined mode. If you set the power budget to 2 (combined mode), the switch ignores the -15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-5 - Cisco WS-C4506-E | Software Guide - Page 426
Catalyst 4500 Series Switches" section on page 28-1. The power management feature for the Catalyst 4000 series switches support a For more information, refer to the Catalyst 4000 Series Switch Installation Guide. Understanding Power Redundancy The Catalyst 4006 switch contains holding bays for - Cisco WS-C4506-E | Software Guide - Page 427
choose to use the 1+1 redundancy mode, the type and number of modules that are supported are limited by the power that is available from a single power supply. To determine mode. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-7 - Cisco WS-C4506-E | Software Guide - Page 428
that it is able to support with the limited power available power supply fails, the backup 650 W power supply comes into service; however, the switch still has only 400 W available. You Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 429
-port 10/100 Fast Ethernet RJ-45 WS-X4148-RJ Catalyst 4003 and 4006 Layer 3 Services Module WS-X4232-L3 12-port 1000BASE-T Gigabit Ethernet, plus 2-port 1000BASE-X (GBIC) 72 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-9 - Cisco WS-C4506-E | Software Guide - Page 430
In this case, the spanning tree topology does not change. If you add a Catalyst 4500 series switch with MAC reduction enabled and a default spanning tree bridge ID priority set 28-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 431
. Table 28-3 lists the switch components that support inline power. Table 28-3 Switch Components Supporting Inline Power Switch Chassis Catalyst 4006 Catalyst 4503 28-9). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-11 - Cisco WS-C4506-E | Software Guide - Page 432
allows the hardware-supported maximum value. The Cisco IP Phone is operational, it sends a CDP message with the actual power requirement to the supervisor engine. The supervisor engine then decreases the allocated power to the required amount if the port is set to Auto mode. 28-12 Catalyst 4500 - Cisco WS-C4506-E | Software Guide - Page 433
messaging with the port. If the phone supports inline power (the supervisor engine determines this unpowered phone is removed. Caution When you plug a Cisco IP phone into a port and turn the power on 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-13 - Cisco WS-C4506-E | Software Guide - Page 434
switch or a Catalyst 4500 series switch port. Figure 28-1 Power Detection Summary Catalyst Switch Inline power switching module Cisco legacy powered device for the switch. 28-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 435
allocation per port: 15.400 Watts (0.30 Amps @50V) Module Total Allocated Max H/W Supported Max H/W Supported To Module (Watts) Per Module (Watts) Per Port (Watts 2 31.00 836.00 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-15 - Cisco WS-C4506-E | Software Guide - Page 436
allocation per port: 6.00 Watts (0.12 Amps @50V) Module Total Allocated Max H/W Supported Max H/W Supported To Module (Watts) Per Module (Watts) Per Port (Watts 2 0.00 830.562 28-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 437
Modem Baud Traffic Peak Peak-Time disable 9600 0% 0% Fri May 31 2002, 10:24:04 Power Capacity of the Chassis: 1 supply 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-17 - Cisco WS-C4506-E | Software Guide - Page 438
Configuring Inline Power These sections show how to configure inline power for the Catalyst 4500 series switches and the Catalyst 4006 switch. Setting the Power Mode of a off} 28-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 439
, or if you are attempting to power up the maximum number of powered devices supported by your configuration (setting this may allow you to get one last powered device port]] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-19 - Cisco WS-C4506-E | Software Guide - Page 440
None cisco Port Maximum Power mWatt mA @42V 6/1 5200 123 Console> (enable) Actual Consumption mWatt mA @42V 5000 119 absentCounter ------------0 OverCurrent ----------0 28-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78 - Cisco WS-C4506-E | Software Guide - Page 441
• Cisco CallManager release 3.0 or later releases • If you want to utilize inline power, Table 29-1 lists the Catalyst 4500 series components that support inline per module. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 29-1 - Cisco WS-C4506-E | Software Guide - Page 442
4500, 2926G, or 2926 series switches can connect to an IP Phone and carry IP voice traffic. If necessary, the switch can supply electrical power to the circuit connecting it to an IP Phone. Cisco port. • The data traffic on the VLAN that supports the phones might reduce the quality of VoIP traffic. - Cisco WS-C4506-E | Software Guide - Page 443
inline power if necessary. The Catalyst 4500 series switch can sense if it is connected to a Cisco IP Phone. The Catalyst 4006 or Catalyst 4500 series switch can supply inline power to -01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 29-3 - Cisco WS-C4506-E | Software Guide - Page 444
Configuring VoIP on a Switch Chapter 29 Configuring VoIP 29-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 445
to allow or restrict traffic based on host MAC addresses, see Chapter 16, "Configuring Port Security." This chapter consists of these sections: • Local authentication 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-1 - Cisco WS-C4506-E | Software Guide - Page 446
login authentication. All authentication methods (RADIUS, TACACS+, Kerberos, or local) are supported. The lockout (delay) time is also configurable from the CLI and SNMP fail. 30-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 447
, so that a given TACACS+ configuration can use any or all of the three services. When the TACACS+ server receives the packet, it does the following: • Authenticates or fails. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-3 - Cisco WS-C4506-E | Software Guide - Page 448
the RADIUS protocol, refer to RFC 2138, "Remote Authentication Dial In User Service (RADIUS)." With RADIUS, you can do the following: • Enable or server deadtime interval 30-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 449
services. A credential for a network service. When issued from the KDC, this credential is encrypted with the password that is shared by the network service and the KDC and with the user's TGT. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 450
and the KDC share. 6. If the Telnet client has been instructed to do so, it forwards the TGT to the switch. This service from the switch. Figure 30-1 illustrates the Kerberos Telnet connection process. 30-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 451
the inband management port. Telnet does not support non-Kerberized login. When you launch a . 5. If you want to access other network services, you must contact the KDC directly for authentication. 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-7 - Cisco WS-C4506-E | Software Guide - Page 452
Enabled Disabled Disabled Disabled None specified 3 times 5 sec Disabled Disabled Disabled None specified Port 1812 None specified 5 sec 0 (servers not marked dead) 2 times 30-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 453
a particular server as primary by using the primary keyword. • RADIUS and TACACS+ support one privileged mode only (level 1). • Kerberos authentication does not work if TACACS+ 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-9 - Cisco WS-C4506-E | Software Guide - Page 454
enabled(primary) enabled(primary) attempt limit 3 3 lockout timeout (sec) disabled disabled Console> (enable) Http Session disabled disabled disabled enabled(primary) - 30-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 455
local enabled(primary) enabled(primary) attempt limit 5 5 lockout timeout (sec) 50 50 Console> (enable) Http Session disabled disabled disabled enabled(primary) - 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-11 - Cisco WS-C4506-E | Software Guide - Page 456
Session Telnet Session tacacs disabled disabled radius disabled disabled kerberos disabled disabled local enabled(primary) enabled(primary) Console> (enable) 30-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 457
: Console> (enable) set enablepass Enter old password: Enter new password: Retype new password: Password changed. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-13 - Cisco WS-C4506-E | Software Guide - Page 458
cycle or the recovery will fail. If you have lost both the login and enable passwords, repeat the process for each password. 30-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 459
15 Added local user picard. Console> (enable) show localusers Local User Authentication: disabled Username Privilege Level --------- picard 15 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-15 - Cisco WS-C4506-E | Software Guide - Page 460
disabled disabled kerberos disabled disabled local * enabled(primary) enabled(primary) attempt limit 3 3 Http Session disabled disabled disabled enabled(primary) - 30-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 461
Specify the IP address of one or more TACACS+ servers. set tacacs server ip_addr [primary] Verify the TACACS+ configuration. show tacacs 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-17 - Cisco WS-C4506-E | Software Guide - Page 462
you are using both RADIUS and TACACS+, you can enter the primary keyword to force the switch to try TACACS+ authentication first. 30-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 463
verify the configuration: Console> (enable) set tacacs key Secret_TACACS_key The tacacs key has been set to Secret_TACACS_key. Console> (enable) show tacacs 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-19 - Cisco WS-C4506-E | Software Guide - Page 464
of login attempts and verify the configuration: Console> (enable) set tacacs attempts 5 Tacacs number of attempts set to 5. Console> (enable) show tacacs 30-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 465
shows how to disable TACACS+ directed request: Console> (enable) set tacacs directedrequest disable Tacacs direct request has been disabled. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-21 - Cisco WS-C4506-E | Software Guide - Page 466
) Disabling TACACS+ Authentication If you disable TACACS+ authentication with both RADIUS and local authentication disabled, local authentication is reenabled automatically. 30-22 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 467
to use on the server. Verify the RADIUS server configuration. Command set radius server ip_addr [auth-port port_number] [primary] show radius 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-23 - Cisco WS-C4506-E | Software Guide - Page 468
on Table 30-2 on page 30-25 for and assign a password to that user. additional information. Verify the RADIUS configuration. show authentication 30-24 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 469
the $enab15$ user. If your RADIUS server does not support the $enab15$ username, you can set the service-type attribute (attribute 6) to Administrative (value 6) for Session 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-25 - Cisco WS-C4506-E | Software Guide - Page 470
Key: Radius Retransmit: Radius Timeout: 0 minutes Secret_RADIUS_key 2 10 seconds Radius-Server Status 172.20.52.3 primary Console> (enable) Auth-port -----------1812 30-26 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 471
if all of the configured servers are marked dead, the dead time is ignored because there are no alternate servers available. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-27 - Cisco WS-C4506-E | Software Guide - Page 472
of the attributes is disabled by default. Note Software release 7.5(1) supports only the framed-IP address (Attribute 8). To specify optional attributes | disable] show radius 30-28 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 473
task in privileged mode: Step 1 Step 2 Task Clear the RADIUS key. Verify the RADIUS configuration. Command clear radius key show radius 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-29 - Cisco WS-C4506-E | Software Guide - Page 474
(enable) show authentication Login Authentication tacacs radius local Console Session disabled disabled enabled(primary) Telnet Session disabled disabled enabled(primary) 30-30 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 475
database using the admin.local ktadd command as follows: ktadd host/[email protected] Move the keyadmin file to a place where the switch can ] show authentication 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-31 - Cisco WS-C4506-E | Software Guide - Page 476
Realm The Kerberos realm is a domain consisting of users, hosts, and network services that are registered to a Kerberos server. To authenticate a user defined in kerberos-realm 30-32 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 477
- 750 Console> (enable) Console> (enable) clear kerberos server CISCO.COM 187.0.2.1 750 Kerberos Realm-Server-Port entry CISCO.COM-187.0.2.1-750 deleted Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-33 - Cisco WS-C4506-E | Software Guide - Page 478
is to copy them onto physical media and then manually copy the files onto the system. To copy SRVTAB , create an entry for each Kerberos principal (service) on the switch. The entries are maintained in 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486 - Cisco WS-C4506-E | Software Guide - Page 479
an SRVTAB entry: Console> (enable) clear kerberos srvtab entry host/[email protected] 0 Console> (enable) Enabling Credentials Forwarding A user authenticated to a . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-35 - Cisco WS-C4506-E | Software Guide - Page 480
CISCO.EDU 0 933974942 1 1 8 00?91:107:423=:;9 Console> (enable) This example shows how to configure the switch so that Kerberos clients are mandatory for users to authenticate to other network services Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C4506-E | Software Guide - Page 481
command is executed, the secret key is not displayed in clear text. The key length should be eight characters or less. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-37 - Cisco WS-C4506-E | Software Guide - Page 482
Kerberos config key:abcd Kerberos SRVTAB Entries Srvtab Entry 1:host/[email protected] 0 933974942 1 1 8 12151>>3>11 Console> (enable) kerberos] host 30-38 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 483
SRVTAB Entries Srvtab Entry 1:host/[email protected] 0 932423923 1 1 8 03;;5>00>50;0=0=0 Srvtab Entry 2:host/[email protected] 0 933974942 1 1 8 kerberos creds 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-39 - Cisco WS-C4506-E | Software Guide - Page 484
to enable for telnet session. Console> (enable) set authentication login local disable telnet local login authentication set to disable for telnet session. 30-40 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 485
) Status ------primary Understanding How Authorization Works The Catalyst 4500 series switch supports TACACS+ and RADIUS authorization to control access to the behavior. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-41 - Cisco WS-C4506-E | Software Guide - Page 486
if authentication succeeds. If you have Administrative/Shell (6) Service-Type access, the NAS authenticates you and logs you in to privileged mode if authentication succeeds. 30-42 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 487
information on the key setup. Configuring TACACS+ Authorization The next two sections describe how to configure TACACS+ authorization on the switch. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-43 - Cisco WS-C4506-E | Software Guide - Page 488
shows how to verify the configuration: Console> (enable) show authorization Telnet: ------- Primary Fallback exec: tacacs+ deny enable: tacacs+ deny commands: 30-44 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 489
Telnet connections and how to verify the configuration: Console> (enable) set authorization enable disable both Successfully disabled enable authorization. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-45 - Cisco WS-C4506-E | Software Guide - Page 490
TACACS+ daemon determines if the user is authorized to use the feature and sends a response either executing the command or denying access. 30-46 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 491
: config: tacacs+ all: - Console> (enable) Fallback -------- deny deny deny - Understanding How Accounting Works The following sections describe how accounting works. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-47 - Cisco WS-C4506-E | Software Guide - Page 492
set accounting command), the switch can generate two types of records: • Start records-Include partial information of the event (when the event started, type of service, and traffic statistics). • Stop records-Include complete information of the event (when the event started, its duration, type of - Cisco WS-C4506-E | Software Guide - Page 493
Deadtime: Radius Key: Radius Retransmit: Radius Timeout: 0 minutes 2 5 seconds Radius-Server Status 172.20.52.3 primary Console> (enable) Auth-port -----------1812 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-49 - Cisco WS-C4506-E | Software Guide - Page 494
on page 30-19 or the "Specifying the RADIUS Key" section on page 30-25, for more information on the key setup. 30-50 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 495
unknown users: Console> (enable) set accounting suppress null-username enable Accounting will be suppressed for user with no username. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-51 - Cisco WS-C4506-E | Software Guide - Page 496
to disable for connect events. Console> (enable) Console> (enable) set accounting exec disable Accounting set to disable for exec events. Console> (enable) 30-52 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 497
at the conclusion of the event. Accounting is suspended for unknown users and the system is updated periodically every 120 minutes. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-53 - Cisco WS-C4506-E | Software Guide - Page 498
on tty288091924, User (null) Priv 0 Overall Accounting Traffic: Starts Stops Active Exec 0 0 0 Connect 0 0 0 Command 0 0 0 System 1 0 0 Console> (enable) 30-54 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 499
based on host MAC addresses, see Chapter 16, "Configuring Port Security." Note For information connected to a switch port before making available any services that are offered by the switch or the LAN. 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-1 - Cisco WS-C4506-E | Software Guide - Page 500
User Service (RADIUS) security system with Extensible Authentication Protocol (EAP) extensions is the only supported authentication server; it is available in Cisco to the host. 31-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 501
the switch to request the host's identity. Note If 802.1x is not enabled or supported on the network access device, any EAPOL frames from the host are dropped. If the 79598 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-3 - Cisco WS-C4506-E | Software Guide - Page 502
to flow normally. If a host that does not support 802.1x is connected to an unauthorized 802.1x authenticate. The switch cannot provide authentication services to the host through the interface. 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 503
the host when instructed to do so by the authentication server. Authentication server Entity that provides the authentication service for the support encapsulation of EAP frames built into it. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 504
an inactive state. • If the RADIUS-supplied VLAN is invalid or there is a problem with the port hardware, the server moves the port to the 802.1x unauthorized state .1x ports. 31-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 505
the RADIUS server must return the following three RFC 2868 attributes back to the authenticator (the Cisco switch to which the host attaches): • [64] Tunnel-Type = VLAN • [65] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-7 - Cisco WS-C4506-E | Software Guide - Page 506
we recommend that you use RADIUS with a remotely located authentication server. • 802.1x is supported only on Ethernet ports. • You cannot enable 802.1x on a trunk port until . 31-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 507
4/1 Port Auth-State BEnd-State Port-Control Port-Status 4/1 connecting finished auto unauthorized Port Multiple-Host Re-authentication 4/1 disabled disabled 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-9 - Cisco WS-C4506-E | Software Guide - Page 508
/port re-authenticate to a specific port. This example shows how to manually reauthenticate the host that is connected to port 1 on module 4: Console dot1x port 4/1 authorized. 31-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 509
set the quiet period to 45 seconds: Console> (enable) set dot1x quiet-period 45 dot1x quiet-period set to 45 seconds. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-11 - Cisco WS-C4506-E | Software Guide - Page 510
for the EAP-request frame to 15 seconds: Console> (enable) set dot1x supp-timeout 15 dot1x supp-timeout set to 15 seconds. 31-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 511
dot1x max-req 4 dot1x max-req set to 4. Setting the Shutdown Timeout Period If a port is shut down because of a security violation, you must either manually reenable it or configure the shutdown timeout period after which the port can be enabled again. 78-15486-01 Catalyst - Cisco WS-C4506-E | Software Guide - Page 512
this task in privileged mode: Task Set the back-end authenticator-to-host frame retransmission number. Command set dot1x max-req count 31-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 513
) set trace dot1x 5 DOT1X tracing set to 5 Warning!! Turning on trace may affect the operation of the system. Use with caution. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-15 - Cisco WS-C4506-E | Software Guide - Page 514
of EAP frames that are transmitted and received by the authenticator on a specific port on a specific module. Command show port dot1x statistics mod/port 31-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 515
-req 2 quiet-period 60 seconds re-authperiod 3600 seconds server-timeout 30 seconds supp-timeout 30 seconds tx-period 30 seconds 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 31-17 - Cisco WS-C4506-E | Software Guide - Page 516
Configuring 802.1x Authentication on the Switch Chapter 31 Configuring 802.1x Authentication 31-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 517
information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter on page 32-3. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 32-1 - Cisco WS-C4506-E | Software Guide - Page 518
manual boot and autoboot) • Debug utility and crash analysis • File system (the ROM monitor knows the simple file system and supports 2, 1, and 0) of the 16-bit configuration register form the boot Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C4506-E | Software Guide - Page 519
is no valid image to boot, the system enters ROM-monitor mode where you can manually specify an image to boot. The system stores and executes images in the order in variable. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 32-3 - Cisco WS-C4506-E | Software Guide - Page 520
boot field and leaves the remaining bits unaltered. The following boot methods are supported: • ROM monitor-Use the rommon keyword to keep the switch in ROM- boot command. 32-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 521
-config recurring Configuration register is 0x1820 ignore-config: disabled auto-config: recurring console baud: 9600 boot: the ROM monitor Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 32-5 - Cisco WS-C4506-E | Software Guide - Page 522
system flash bootflash:cat4000.6-1-1.bin prepend BOOT variable = bootflash:cat4000.6-1-1.bin,1;bootflash:cat4000.5-1-1.bin,1; bootflash:cat4000.4-5-2.bin,1; Console> (enable) 32-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 523
the list of configuration files to add to the CONFIG_FILE environment variable. Command set boot auto-config device:filename[;device:filename...] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 32-7 - Cisco WS-C4506-E | Software Guide - Page 524
Configuration register is 0x12f ignore-config: disabled auto-config: recurring console baud: 9600 boot: image specified by the boot system commands Console> (enable) 32-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 525
information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter modules. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-1 - Cisco WS-C4506-E | Software Guide - Page 526
. • Ensure that a power interruption (or other problem) does not occur during the download procedure; this file to download. On those platforms that support the Flash file system, you are also 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 527
:39:SYS-5:System reset from Console// System Bootstrap, Version 3.1(2) Copyright (c) 1994-1997 by cisco Systems, Inc. Presto processor with 32768 Kbytes of main memory Autoboot executing command: "boot Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide- - Cisco WS-C4506-E | Software Guide - Page 528
Passed Level2 Cache Present Level2 Cache test Passed Boot image: bootflash:cat4000.6-1-1.bin Cisco Systems Console Enter password: 07/21/2000,13:52:51:SYS-5:Module 1 System." 33-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 529
. When prompted, specify the TFTP server address and destination filename. On platforms that support the Flash file systems, you are first prompted for the Flash device and source -15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-5 - Cisco WS-C4506-E | Software Guide - Page 530
that the workstation acting as the rcp server supports the remote shell (rsh). • Ensure that username. • A power interruption (or other problem) during the download procedure can corrupt the 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 531
:39:SYS-5:System reset from Console// System Bootstrap, Version 3.1(2) Copyright (c) 1994-1997 by cisco Systems, Inc. Presto processor with 32768 Kbytes of main memory Autoboot executing command: "boot Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide- - Cisco WS-C4506-E | Software Guide - Page 532
Passed Level2 Cache Present Level2 Cache test Passed Boot image: bootflash:cat4000.6-1-1.bin Cisco Systems Console Enter password: 07/21/2000,13:52:51:SYS-5:Module 1 System." 33-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 533
specify the rcp server address and the destination filename. On platforms that support the Flash file systems, you are first prompted for the Flash device and Cisco for repair. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-9 - Cisco WS-C4506-E | Software Guide - Page 534
to be upgraded. The promupgrade programs are available at the same location on cisco.com where you download Catalyst 4000 system images. To upgrade to ROMMON version to Step 6. 33-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 535
not allowed to complete, you might damage the switch and have to return it to Cisco for repair. Upgrading the ROMMON may require up to 5 minutes because the switch boots . 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-11 - Cisco WS-C4506-E | Software Guide - Page 536
Upgrading your PROM... DO NOT RESET the system unless instructed or it may NOT be bootable!!! Beginning erase of 524288 :5.5(8) Copyright (c) 1995-2001 by Cisco Systems, Inc. 33-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 537
the promupgrade image from the BOOT string, use the show boot command to verify that the BOOT string is set correctly. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 33-13 - Cisco WS-C4506-E | Software Guide - Page 538
Upgrading the ROM Monitor Chapter 33 Working with System Software Images 33-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 539
usage information for the commands used in this chapter, see Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. The Flash Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 34-1 - Cisco WS-C4506-E | Software Guide - Page 540
a list of files on a Flash device. Display a list of only deleted files on a Flash device. Command dir [[m/]device:][filename] dir [[m/]device:][filename] deleted 34-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 541
2000 14:13:10 cat4000-k4.6-1-0-104-ORL.bin 2 3761580 Jun 14 2000 14:16:05 cat4000.6-1-0-104-ORL.bin 3795052 bytes available (7608212 bytes used) Console> (enable) dns_config.cfg begin ! #dns set ip dns server 172.16.10.70 primary set ip dns server 172.16.10.140 set ip dns enable set ip dns domain - Cisco WS-C4506-E | Software Guide - Page 542
set ip dns server 172.16.10.70 primary 172.16.10.70 added to DNS server table as primary server. >> set ip dns server 172.16.10.140 172.16.10.140 added to DNS . Console> (enable) 34-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 543
squeeze command on a Flash device, you cannot restore files that you deleted from that device before you entered the squeeze command. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 34-5 - Cisco WS-C4506-E | Software Guide - Page 544
12:04:40 cat4000.4-4-0-28.bin 6 135 Jul 17 1999 11:30:05 dns_config.cfg 1213952 bytes available (3231989 bytes used) Console> (enable) 34-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 545
cat4000.4-4-1.bin CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCCCCCCCCCCC File bootflash:cat4000.4-4-1.bin verified OK Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 34-7 - Cisco WS-C4506-E | Software Guide - Page 546
Working With the Flash File System on the Switch Chapter 34 Working With the Flash File System 34-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 547
information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter as clear text. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 35-1 - Cisco WS-C4506-E | Software Guide - Page 548
on multiple switches. begin ! #dns set ip dns server 172.16.10.70 primary set ip dns server 172.16.10.140 set ip dns enable set ip dns domain corp.com on your switch platform. 35-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 549
16.10.70 primary 172.16.10.70 added to DNS server table as primary server. >> set ip dns server 172.16.10.140 172.16 files on Flash devices on hardware that supports the Flash file system, configure the 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 35-3 - Cisco WS-C4506-E | Software Guide - Page 550
set ip dns server 172.16.10.70 primary 172.16.10.70 added to DNS server table as primary server. >> set ip dns server 172.16.10.140 172.16.10.140 added to DNS server server. 35-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 551
use rcp to copy files, the server from or to which you will be copying files must support rcp. The rcp copy commands rely on the remote shell (rsh) server (or daemon) on only to 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 35-5 - Cisco WS-C4506-E | Software Guide - Page 552
supports 16.10.70 primary 172.16.10.70 added to DNS server table as primary server. >> set ip dns server 172.16.10.140 172.16.10.140 added to DNS server table as backup server. >> set ip dns enable 35-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 553
copy to []? cat4000_config.cfg Upload configuration to rcp:cat4000_config.cfg, (y/n) [n]? y Configuration has been copied successfully. Console> (enable) Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 35-7 - Cisco WS-C4506-E | Software Guide - Page 554
on the problem module. This example shows how to clear the configuration on a specific module: Console> (enable) clear config 2 This command will clear module 2 configuration. Do you want to continue (y/n) [n]? y Module 2 configuration cleared. Console> (enable) 35-8 Catalyst 4500 Series, Catalyst - Cisco WS-C4506-E | Software Guide - Page 555
engines • Reduced internal traffic congestion The switch acceleration feature is supported on Catalyst 4006 switches with Supervisor Engine II and on the between SE1 and SE3. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 36-1 - Cisco WS-C4506-E | Software Guide - Page 556
Switch Acceleration Switch acceleration is supported in different configuration modes. Supervisor Engine II supports a mesh configuration with no ports on Supervisor Engine II. 36-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 557
between the switch engines. The Backplane Channel Module also allows you to retain the Gigabit Ethernet uplinks on the supervisor engine. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 36-3 - Cisco WS-C4506-E | Software Guide - Page 558
for a short time, and then remove it. You do not need to configure the Backplane Channel Module because it is enabled by default. 36-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 559
you can do the following: • Get logging information for monitoring and troubleshooting • Select the types of captured logging information • Select the destination of 90 seconds. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-1 - Cisco WS-C4506-E | Software Guide - Page 560
37-1 describes the facility types that are supported by the system message logs. Table 37 tftp udld vmps vtp Definition Cisco Discovery Protocol Dynamic Trunking Protocol Dual Quality of Service RADIUS authentication 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 561
supported 16 10:01:42 %SYS-5-MOD_OK:Module 6 is online 1999 Apr 16 10:02:27 %PAGP-5-PORTTOSTP:Port 3/1 joined bridge port 3/1 1999 Apr 16 10:02:28 %PAGP-5-PORTTOSTP:Port 3/2 joined bridge port 3/2 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 562
the severity levels that are supported by the system message logs. 16 10:02:27 %PAGP-5-PORTTOSTP:Port 3/1 joined bridge port 3/1 1999 Apr 16 10:02:28 %PAGP-5-PORTTOSTP:Port 3/2 joined bridge port 3/2 37-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 563
Change the logging enable state for a Telnet session. Verify the logging configuration. Command set logging session {enable | disable} show logging [noalias] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-5 - Cisco WS-C4506-E | Software Guide - Page 564
the time stamp display on system logging messages: Console> (enable) set logging timestamp enable System logging messages timestamp will be enabled. Console> (enable) 37-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 565
characters between user.debug and /var/log/myfile.log. Refer to entries in the /etc/syslog.conf file for further examples. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-7 - Cisco WS-C4506-E | Software Guide - Page 566
server severity set to Console> (enable) set logging server enable System logging messages will be sent to the configured syslog servers. Console> (enable) 37-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 567
facility: LOCAL5 server severity: notifications(5) Facility Default Severity Current Session Severity cdp 3 3 drip 2 5 dtp 5 5 dvlan 2 5 earl 2 5 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-9 - Cisco WS-C4506-E | Software Guide - Page 568
%SYS-5-MOD_OK:Module 2 is online 1999 Apr 16 08:41:15 %PAGP-5-PORTTOSTP:Port 2/1 joined bridge port 2/1 1999 Apr 16 08:41:15 %PAGP-5-PORTTOSTP:Port 2/2 joined bridge port 2/2 37-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 569
) %PAGP-5-PORTFROMSTP:Port 3/2 left bridge port 3/2 %PAGP-5-PORTTOSTP:Port 3/1 joined bridge port 3/1-2 %PAGP-5-PORTTOSTP:Port 3/2 joined bridge port 3/1-2 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 37-11 - Cisco WS-C4506-E | Software Guide - Page 570
Configuring System Message Logging on the Switch Chapter 37 Configuring System Message Logging 37-12 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 571
information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter Disabled 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 38-1 - Cisco WS-C4506-E | Software Guide - Page 572
dns DNS is currently enabled. The default DNS domain name is: corp.com DNS name server dns_serv2 dns_serv1 dns_serv3 Console> (enable) status ------- primary 38-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 573
] This example shows how to disable DNS on the switch: Console> (enable) set ip dns disable DNS is disabled Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 38-3 - Cisco WS-C4506-E | Software Guide - Page 574
Configuring DNS on the Switch Chapter 38 Configuring DNS 38-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 575
information for the commands used in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. This chapter lower. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-1 - Cisco WS-C4506-E | Software Guide - Page 576
reduced because the information flow is one-way only. Cisco's implementation of NTP does not support stratum 1 service; it is not possible to connect to a radio or the switch). 39-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 577
server. Enable NTP client mode. Verify the NTP configuration. Command set ntp server ip_addr set ntp client enable show ntp [noalias] 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-3 - Cisco WS-C4506-E | Software Guide - Page 578
: disabled Broadcast delay: 3000 microseconds Client mode: enabled NTP-Server 172.16.52.65 Console> (enable) Configuring Authentication in Client Mode Authentication can . 39-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 579
: 3000 microseconds Client mode: enabled Authentication: enabled NTP-Server Server Key 172.16.52.65 Key Number Mode Key String Console> (enable) Setting the Time Zone -15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-5 - Cisco WS-C4506-E | Software Guide - Page 580
50 Summertime is disabled and set to '' Start : Thu Apr 13 2000, 04:30:00 End : Mon Jan 21 2002, 05:30:00 39-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 581
example shows how to clear an NTP server address from the NTP server table: Console> (enable) clear ntp server 172.16.64.10 NTP server 172.16.64.10 removed. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 39-7 - Cisco WS-C4506-E | Software Guide - Page 582
example shows how to disable NTP client mode on the switch: Console> (enable) set ntp client disable NTP Client mode disabled Console> (enable) 39-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 583
Mode bridge protocol data unit Bridge Relay Function broadcast and unknown server content-addressable memory column address strobe constant bit rate 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 584
Distributed Data Interface Cisco Discovery Protocol Cisco Group Management Protocol command-line interface Common Open Policy Service class of service Cyclic Redundancy Industries Association Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-2 - Cisco WS-C4506-E | Software Guide - Page 585
Protocol half duplex International Code Designator Internet Control Message Protocol Initial Domain Part Internet Group Management Protocol Integrated Local Management Interface initial microprogram load Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 586
MBS MCP MIB MII Media Access Control Manufacturing Automation Protocol maximum burst size Master Communication Processor Management Information Base media-independent interface Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-4 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 587
Next Hop Client Next Hop Resolution Protocol Next Hop Server Network Management Processor Network-Network Interface network service access point Network Time Protocol nonvolatile random-access memory 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 588
permanent virtual circuit (or permanent virtual connection in ATM terminology) quality of service Remote Authentication Dial-In User Service row address strobe RAS-to-CAS delay Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-6 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 589
Module Security Association Identifier synergy advanced multipurpose bus arbiter service access point segmentation and reassembly Serial Control Protocol sustainable source-route transparent bridging Service-Specific Connection Oriented Protocol 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, - Cisco WS-C4506-E | Software Guide - Page 590
ticket Telecommunications Industry Association type-length value type of service Token Ring Bridge Relay Function Token Ring Concentrator Relay Function Time Appendix A Acronyms Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-8 78-15486 - Cisco WS-C4506-E | Software Guide - Page 591
LAN VLAN Membership Policy Server virtual path identifier VLAN Query Protocol VLAN Trunking Protocol weighted random early detect Weighted Round Robin 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration - Cisco WS-C4506-E | Software Guide - Page 592
Appendix A Acronyms 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 A-10 - Cisco WS-C4506-E | Software Guide - Page 593
VLANs to ISL 10-11 overview 11-1 restrictions 11-4 supported switches (table) 11-3 802.1x authentication authentication server defined support 10-5 B BackboneFast adding a switch (figure) 8-7 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 594
groups 15-6, 15-16 disabling 15-8 disabling Cisco Discovery Protocol See CDP Cisco Group Management Protocol See CGMP Cisco IP Phones sound quality 29-2 CiscoWorks2000 24-17 CIST 7-15 classification IN-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 595
classless interdomain routing See CIDR class of service See CoS clear boot system flash command tree See CST community ports definition 10-16 community strings defining 24-7 overview 24-5 CONFIG_FILE 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-3 - Cisco WS-C4506-E | Software Guide - Page 596
DTP non-Cisco devices and 11-3 overview 11-2 duplex mode Fast Ethernet 4-5 Dynamic Host Configuration Protocol See DHCP dynamic ports troubleshooting 12-11 dynamic -2 encryption IN-4 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 597
6-6 frame distribution 6-2 hardware support 6-2 maximum number of channels supported 6-4 modes 6-5 modes, using LACP 6-16 overview 6-1 PAgP and 6-5 port 44 frame classification 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-5 - Cisco WS-C4506-E | Software Guide - Page 598
groups 15-2 leaving multicast groups 15-2 overview 15-1 using traffic filtering 15-18 IGMP filtering software requirements 15-18 IGMP filter match-action IN-6 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 599
disabling 18-4 enabling 18-3 overview 18-1 IP Phones See Cisco IP Phones 29-2 IP phones detecting an IP phone supported switches (table) 11-3 isolated ports definition 10-16 IST MST regions 7-15 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 600
changing 20-6 loop guard multiple spanning tree 7-15 M MAC addresses allocating 7-13 blocking 16-1 blocking unicast flood packets 17-1 bridge identifiers 7-13 designating 2-8 IN-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 601
notification 16-7 enabling notification 16-7 port security and 16-1 setting notification history log size 16-7 setting notification interval 16-7 multicast filter profiles 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-9 - Cisco WS-C4506-E | Software Guide - Page 602
and 15-4 clearing 15-17 configuring 15-6, 15-16 GMRP and 15-9 joining 15-2 leaving 15-2 multicast See NTP New Software Features in Release 7.7 extended VLAN support with VTP version 3 10-3, 10-4, 10-6, 10-9 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 - Cisco WS-C4506-E | Software Guide - Page 603
VLAN 10-16 reconfirming VMPS 12-10 setting the debounce timer 4-6 speed 10/100 Fast Ethernet 4-4 port security configuring 16-1 to 16-12 clearing MAC addresses 16-5 guidelines for 16-3 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C4506-E | Software Guide - Page 604
28-16 power management Catalyst 4500 series 28-1, 28-6 Catalyst 4500 series 16 prompts configuring 27-2 overview 27-1 protocol filtering configuring 19-2 default configuration 19-2 overview 19-1 protocol support 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release - Cisco WS-C4506-E | Software Guide - Page 605
transmit queue overview 14-3 quality of service See QoS R RADIUS configuration guidelines 30- rapid Spanning Tree Protocol See RSTP 7-16 RARP sc0 interface and 3-9 using supported MIB objects 25-2 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide - Cisco WS-C4506-E | Software Guide - Page 606
26-1 session limits 26-4 See also SPAN; VSPAN RSTP overview 7-16 port roles 7-16 port states 7-17 running configuration downloading via rcp 35-6 S sc0 interface strings 24-8 IN-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 607
Index supported RMON MIB objects 25-2 SNMPv3 configuring 24-14 definitions 24-14 overview designating IP addresses 2-8 designating IP aliases 2-8 designating MAC addresses 2-8 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-15 - Cisco WS-C4506-E | Software Guide - Page 608
scheduling 27-10 system status report generating 27-12 T TACACS+ accounting accounting events 30-48 configuration guidelines 30-50 creating accounting records 30-48 IN-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 609
2 20-11 traffic filtering IGMP 15-17 transmit queue overview 14-3 troubleshooting dynamic port VLAN membership 12-11 system message logging and 37-1 VMPS disabling VLAN 1 11-8 encapsulation types descriptions (table) 11-2 switch support matrix (table) 11-3 modes (table) 11-2 overview 11-1 possible - Cisco WS-C4506-E | Software Guide - Page 610
disabling 17-3 disabling on a secure port 16-6 displaying 17-3 enabling 17-2 enabling on a secure port 16-6 UniDirectional Link Detection See UDLD UplinkFast configuring 10-3 IN-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 - Cisco WS-C4506-E | Software Guide - Page 611
dynamic port assignments 12-10 reconfirming membership 12-10 troubleshooting 12-11 troubleshooting dynamic ports 12-11 VMPS clients configuring 12-8 9-4 server, configuring 9-7 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 IN-19 - Cisco WS-C4506-E | Software Guide - Page 612
of extended range VLANs 10-3, 10-6 understanding 9-13 with private VLANs 10-18 VTP pruning configuring 9-11 disabling 9-12 overview 9-4 W write tech support command 27-12 IN-20 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
-
421
-
422
-
423
-
424
-
425
-
426
-
427
-
428
-
429
-
430
-
431
-
432
-
433
-
434
-
435
-
436
-
437
-
438
-
439
-
440
-
441
-
442
-
443
-
444
-
445
-
446
-
447
-
448
-
449
-
450
-
451
-
452
-
453
-
454
-
455
-
456
-
457
-
458
-
459
-
460
-
461
-
462
-
463
-
464
-
465
-
466
-
467
-
468
-
469
-
470
-
471
-
472
-
473
-
474
-
475
-
476
-
477
-
478
-
479
-
480
-
481
-
482
-
483
-
484
-
485
-
486
-
487
-
488
-
489
-
490
-
491
-
492
-
493
-
494
-
495
-
496
-
497
-
498
-
499
-
500
-
501
-
502
-
503
-
504
-
505
-
506
-
507
-
508
-
509
-
510
-
511
-
512
-
513
-
514
-
515
-
516
-
517
-
518
-
519
-
520
-
521
-
522
-
523
-
524
-
525
-
526
-
527
-
528
-
529
-
530
-
531
-
532
-
533
-
534
-
535
-
536
-
537
-
538
-
539
-
540
-
541
-
542
-
543
-
544
-
545
-
546
-
547
-
548
-
549
-
550
-
551
-
552
-
553
-
554
-
555
-
556
-
557
-
558
-
559
-
560
-
561
-
562
-
563
-
564
-
565
-
566
-
567
-
568
-
569
-
570
-
571
-
572
-
573
-
574
-
575
-
576
-
577
-
578
-
579
-
580
-
581
-
582
-
583
-
584
-
585
-
586
-
587
-
588
-
589
-
590
-
591
-
592
-
593
-
594
-
595
-
596
-
597
-
598
-
599
-
600
-
601
-
602
-
603
-
604
-
605
-
606
-
607
-
608
-
609
-
610
-
611
-
612
 |
 |
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
Catalyst 4500 Series, Catalyst 2948G,
Catalyst 2980G Switches Software
Configuration Guide
Software Release 8.1
Customer Order Number: DOC-7815486=
Text Part Number: 78-15486-01