Cisco WS-SUP32-GE-3B Software Configuration Guide
Cisco WS-SUP32-GE-3B - Supervisor Engine 32 Manual
 |
UPC - 882658006777
View all Cisco WS-SUP32-GE-3B manuals
Add to My Manuals
Save this manual to your list of manuals |
Cisco WS-SUP32-GE-3B manual content summary:
- Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 1
Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide Release 12.2(18)ZY and Later Releases Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 527-0883 Text Part Number: OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 2
at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1005R) Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 3
Switch 3-2 Using the Setup Facility or the setup Command 3-2 Using Configuration Mode 3-10 Checking the Running Configuration Before Saving 3-10 Saving the Running Configuration Settings 3-11 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY iii - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 4
Supervisor Engine Redundancy Overview 5-2 SSO Operation 5-2 NSF Operation 5-2 Cisco Express Forwarding 5-3 Multicast MLS NSF with SSO 5-3 Routing Protocols 5-4 NSF Benefits and Restrictions 5-7 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY iv OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 5
6-4 Synchronizing the Supervisor Engine Configurations 6-5 Displaying the Redundancy States 6-5 Performing a Fast Software Upgrade 6-6 Copying Files to the Redundant Supervisor Engine 6-7 Contents OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 6
Field Value 8-15 Configuring Flex Links 9-1 Understanding Flex Links 9-1 Configuring Flex Links 9-2 Flex Links Default Configuration 9-2 Flex Links Configuration Guidelines and Restrictions 9-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY vi OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 7
11-10 Configuring VLANs 12-1 Understanding How VLANs Work 12-1 VLAN Overview 12-1 VLAN Ranges 12-2 Configurable VLAN Parameters 12-3 Understanding Token Ring VLANs 12-3 VLAN Default Configuration 12-6 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 8
14-1 Understanding Cisco IP Phone Support 14-1 Cisco IP Phone Connections 14-1 Cisco IP Phone Voice Traffic 14-2 Cisco IP Phone Data Traffic 14-3 Cisco IP Phone Power Configurations 14-3 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY viii OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 9
and Processing 17-15 Topology Changes 17-17 Rapid-PVST 17-17 Understanding MST 17-17 MST Overview 17-18 MST Regions 17-18 Contents OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY ix - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 10
the Link Type to Ensure Rapid Transitions 17-47 Designating the Neighbor Type 17-48 Restarting the Protocol Migration Process 17-49 Displaying the MST Configuration and Status 17-49 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY x OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 11
UDLR 20-1 UDE and UDLR Overview 20-1 Supported Hardware 20-2 Understanding UDE 20-2 Understanding UDLR 20-3 Configuring UDE and UDLR 20-3 Configuring UDE 20-3 Configuring UDLR 20-6 Contents OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xi - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 12
Configuration Guidelines and Restrictions 22-7 Configuring MVPN 22-8 Forcing Ingress Multicast Replication Mode (Optional) 22-8 Configuring a Multicast VPN Routing and Forwarding Instance 22-9 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xii OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 13
the NetFlow Hardware Forwarding Count 24-6 Displaying the FIB Hardware Bridging and Drop Counts 24-7 Displaying the Shared and Well-Known Hardware Adjacency Counters 24-7 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xiii - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 14
PIM Information 25-20 Using IPv4 Debug Commands 25-22 Clearing IPv4 Multicast Layer 3 Switching Statistics 25-22 Redundancy for Multicast Traffic 25-23 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xiv OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 15
Guidelines and Restrictions 27-7 IGMP Snooping Querier Configuration Guidelines and Restrictions 27-8 Enabling the IGMP Snooping Querier 27-8 Configuring IGMP Snooping 27-9 Contents OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xv - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 16
Cisco IOS ACL Support 31-1 Cisco IOS ACL Configuration Guidelines and Restrictions 31-1 Hardware and Software ACL Support 31-2 Optimized ACL Logging with a PFC3B 31-3 Understanding OAL 31-3 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xvi OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 17
Default Configuration 33-19 CoPP Configuration Guidelines and Restrictions 33-19 Configuring CoPP 33-20 Monitoring CoPP 33-21 Defining Traffic Classification 33-22 Traffic Classification Overview 33-22 Contents OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 18
Packets 35-4 Default DAI Configuration 35-5 DAI Configuration Guidelines and Restrictions 35-5 Configuring DAI 35-6 Enabling DAI on VLANs 35-7 Configuring the DAI Interface Trust State 35-7 xviii Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 19
38-38 PFC QoS Configuration Guidelines and Restrictions 38-39 General Guidelines 38-39 PFC3B Guidelines 38-41 Class Map Command Restrictions 38-42 Policy Map Command Restrictions 38-42 Contents OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 20
Limit the Amount of Traffic from a PC 38-100 PFC QoS Glossary 38-102 Configuring MPLS QoS 39-1 Terminology 39-2 MPLS QoS Features 39-3 MPLS Experimental Field 39-3 Trust 39-3 Classification 39-3 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xx OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 21
the P Router-Output Interface 39-37 Configuring the Egress PE Router-Customer Facing Interface 39-38 Configuring Uniform Mode 39-39 Configuring the Ingress PE Router-Customer Facing Interface 39-39 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xxi - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 22
Port-Based Authentication 42-7 Configuring Switch-to-RADIUS-Server Communication 42-8 Enabling Periodic Reauthentication 42-10 Manually Reauthenticating the Client Connected to a Port 42-11 xxii Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 23
44-2 Displaying the CDP Interface Configuration 44-3 Monitoring and Maintaining CDP 44-3 Configuring UDLD 45-1 Understanding How UDLD Works 45-1 UDLD Overview 45-1 UDLD Aggressive Mode 45-2 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xxiii - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 24
-2 Default NetFlow Configuration 47-5 NetFlow Configuration Guidelines and Restrictions 47-5 Configuring NetFlow 47-6 Configuring NetFlow on the PFC3B 47-6 Configuring NetFlow on the PISA 47-10 xxiv Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 25
IfIndex Persistence on Specific Interfaces 49-2 Clearing SNMP IfIndex Persistence Configuration from a Specific Interface 49-3 Modules Off and On 50-3 Viewing System Power Status 50-4 Power Cycling Modules 50-5 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 26
Utility 53-1 Usage Guidelines 53-1 Using the Layer 2 Traceroute Utility 53-2 Online Diagnostic Tests A-1 Global Health-Monitoring Tests A-1 TestSPRPInbandPing A-1 TestSPNPInbandPing A-2 xxvi Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 27
A-17 TestAclQosTcam A-17 TestNetflowTcam A-18 TestQoSTcam A-18 IPSEC Services Modules Tests A-19 TestIPSecClearPkt A-19 TestHapiEchoPkt A-19 TestIPSecEncryptDecryptPkt A-20 Stress Tests A-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xxvii - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 28
INDEX TestTrafficStress A-20 TestEobcStressPing A-21 Critical Recovery Test-TestL3HealthMonitoring A-21 General Tests A-22 ScheduleSwitchover A-22 TestFirmwareDiagStatus A-22 Acronyms B-1 xxviii Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 29
Network Protocols Configuration Guide, Part 1, 2, and 3 - Network Protocols Command Reference, Part 1, 2, and 3 - Security Configuration Guide - Security Command Reference - Switching Services Configuration Guide OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 30
Control-for example, the key combination ^D in a screen display means hold down the Control key while you press the D key. Nonprinting characters, such as passwords are in angle brackets. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xxx OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 31
Documentation as an RSS feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service. Cisco currently supports RSS Version 2.0. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY xxxi - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 32
Preface xxxii Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 33
chassis, modules, and software features supported by the Supervisor Engine 32 PISA, refer to the Release Notes for Cisco IOS Release 12.2ZY on the Supervisor Engine 32 PISA: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2ZY/release/notes/ol_13011.html To configure Network-Based - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 34
redundant supervisor engine. Enters global configuration mode. Enables the HTTP web server. Configures the SNMP password for read-only operation. Configures the SNMP password for read/write operation. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 1-2 OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 35
and Firewalls," at this URL: http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfacls.html • VLAN ACLs (VACLs)-To configure VACLs, see Chapter 32, "Configuring VLAN ACLs." OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 1-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 36
: http://www.cisco.com/en/US/docs/ios/12_2/interface/configuration/guide/icflogin.html Note The PFC3B does not provide hardware acceleration for tunnels configured with the tunnel key command. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 1-4 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 37
PISA supports tunnels configured with egress features on the tunnel interface. Examples of egress features are output Cisco IOS ACLs, NAT (for inside to outside translation), TCP intercept, CBAC, and encryption. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 38
Software Features Supported in Hardware by the PFC3B Chapter 1 Product Overview Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 1-6 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 39
the CLI These sections describe accessing the CLI: • Accessing the CLI through the EIA/TIA-232 Console Interface, page 2-2 • Accessing the CLI through Telnet, page 2-2 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 2-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 40
want to access. Initiates authentication. Note If no password has been configured, press Return. Initiates enable mode enable. Completes enable mode enable. Exits the session when finished. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 2-2 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 41
end of the command line. Press Esc B Moves the cursor back one word. Press Esc F Moves the cursor forward one word. 1. The arrow keys function only on ANSI-compatible terminals such as VT100s. Performing . OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 42
image when it is booting, or if its configuration file is corrupted at startup. See the "Securing the CLI" section on page 2-6. Table 2-3 lists and describes frequently used Cisco IOS modes. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 2-4 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 43
called command syntax help because it reminds you which keywords or arguments are applicable based on the command, keywords, and arguments you have already entered. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 2-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 44
or a browser that supports HTTP over Secure Socket Layer (HTTPS) to make an encrypted connection to the switch. For more information about SSH, see "Configuring Secure Shell" at this URL: Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 2-6 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 45
mark (?) to see the available ROM-monitor commands. For more information about the ROM-monitor commands, see the Catalyst Supervisor Engine 32 PISA Cisco IOS Command Reference, Release 12.2ZY. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 2-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 46
ROM-Monitor Command-Line Interface Chapter 2 Command-Line Interfaces Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 2-8 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 47
, page 3-14 • Recovering a Lost Enable Password, page 3-18 • Modifying the Supervisor Engine Startup Configuration, page 3-19 Default Configuration Table 3-1 shows the default configuration. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 48
setup command process and are queried by the system to make changes. For example, you will see this display when you use the setup facility: Configuring interface FastEtherent3/1: Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-2 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 49
Software clause at DFARS sec. 252.227-7013. cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 OL-11439-03 Cisco Internetwork Operating System Software IOS (tm) c6sup2_sp Software Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 50
System Configuration Dialog --- Continue with configuration dialog? [yes/no]: y At any point you may enter a question mark '?' for help. Use ctrl-c to abort configuration dialog at any prompt. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-4 OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 51
the current interface summary. Press Return to accept the default (yes): Would you like to enter the initial configuration dialog? [yes]: First, would you like to see administratively down down OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 52
, a number cannot be the first character. Spaces are also valid password characters; for example, "two words" is a valid password. Leading spaces are ignored; trailing spaces are recognized. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-6 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 53
! ip routing eigrp 301 ! interface Vlan1 shutdown no ip address ! interface GigabitEthernet1/1 shutdown no ip address ! interface GigabitEthernet1/2 shutdown no ip address ! . Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 54
no response returns you to the enable prompt (#). You will need to reenter the setup command to reenter your configuration. A yes response saves the running configuration to NVRAM as follows: Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-8 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 55
For detailed interface configuration information, refer to the Cisco IOS Interface Configuration Guide at this URL: http://www.cisco.com/en/US/docs/ios/12_2/interface/configuration/guide/finter_c.html OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 56
-config Building configuration... Current configuration: Current configuration : 3441 bytes ! version 12.1 service timestamps debug datetime localtime service timestamps log datetime localtime 3-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 57
on a different network from your switch and a routing protocol has not been configured, you might need to add a static routing table entry for the network where your end station is located. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 58
configured static route: Router# show running-config Building configuration... . . ip classless ip route 171.20.52.3 255.255.255.255 Vlan1 no ip http server ! 3-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 59
password lab login transport input lat pad dsipcon mop telnet rlogin udptn nasi ! end Router# Configuring performs a BOOTP request only if the current IP address is set to 0.0.0.0. (This address is the default OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 60
password lab Router(config)# To display the password or access level configuration, see the "Displaying the Password, Access Level, and Privilege Level Configuration" section on page 3-18. 3-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 61
for the privileged level. To display the password or access level configuration, see the "Displaying the Password, Access Level, and Privilege Level Configuration" section on page 3-18. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 62
access passwords, and Border Gateway Protocol (BGP) neighbor passwords. The service password-encryption command keeps unauthorized individuals from viewing your password in your configuration file. 3-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 63
privilege level for a given line or a group of lines, perform this task: Command Router(config-line)# privilege level level Purpose Changes the default privilege level for the line. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-17 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 64
. Configure the switch to boot up without reading the configuration memory (NVRAM). Reboot the system. Access enable mode (which can be done without a password when one is not configured). 3-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 65
is corrupted, or if the configuration register is set to enter ROM-monitor mode. From ROM-monitor mode, you can manually load a software image from bootflash or a Flash PC card. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-19 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 66
recommended configuration register setting is 0x2102. If you configure a setting that leaves break enabled and you send a break sequence over a console connection, the switch drops into ROMMON. 3-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 67
-line memory module (SIMM). • When the entire boot field equals a value between 0-0-1-0 and 1-1-1-1, the switch loads the system image specified by boot system commands in the startup configuration file. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 68
to display the configuration register value currently in effect and that will be used at the next reload. The value is displayed on the last line of the screen display, as in this example: 3-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 69
Startup System Image in the Configuration File" section in the "Loading and Maintaining System Images and Microcode" chapter of the Cisco IOS Configuration Fundamentals Configuration Guide. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-23 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 70
" section on page 3-21, for more information on modifying the configuration register. Save your configurations. Power cycle and reboot your system to ensure that all is working as expected. 3-24 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 71
running configuration to your startup configuration. • Cisco IOS software supports the boot bootldr global configuration command and the ROM monitor supports c6sup22-jsv-mz.121-5c.EX.bin,1; OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 3-25 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 72
3a.E4 Configuration register is 0x2 Router# To display the contents of the configuration file pointed to by the CONFIG_FILE environment variable, enter the more nvram:startup-config command. 3-26 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 73
Engine 32 PISA, see the Release Notes for Cisco IOS Release 12.2ZY on the Supervisor Engine 32 PISA at this URL: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2ZY/release/notes/ol_13011.h tml OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 74
configure QoS on WS-S32-10GE-PISA ports. • You can disable Port 3 and reallocate its port ASIC capacity to the PISA EtherChannel (see the "Configuring Full PISA EtherChannel Bandwidth" section on page 4-3 section). Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 75
the port is a member of the PISA EtherChannel, all port configuration commands except the [no] channel-group 256 mode on command are ignored. • The PISA EtherChannel MTU size is 4,096 bytes. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 4-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 76
Catalyst Supervisor Engine 32 PISA Cisco IOS Command Reference, Release 12.2ZY, at this URL: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2ZY/command/reference/cmdr ef.html Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 4-4 OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 77
Router# clear platform pisa np counter-type counters This example shows how to clear the ACL counters in Cisco IOS Release 12.2(33)ZYA1 and later releases: Router# clear platform pisa np acl counters OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 78
Displaying PISA Platform Statistics Chapter 4 Configuring a Supervisor Engine 32 PISA Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 4-6 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 79
, page 5-2 • NSF Operation, page 5-2 • Cisco Express Forwarding, page 5-3 • Multicast MLS NSF with SSO, page 5-3 • Routing Protocols, page 5-4 • NSF Benefits and Restrictions, page 5-7 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 5-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 80
that has been synchronized between the active and the redundant supervisor engine to recover route information following a switchover instead of information received from peer devices. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 5-2 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 81
(PIM) sparse mode and PIM dense mode are data driven, multicast packets are leaked to the router during switchover so that the protocols can converge. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 5-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 82
. This function will allow interoperability with non-NSF-aware BGP peers (and without NSF functionality), but the BGP session with non-NSF-aware BGP peers will not be graceful restart capable. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 5-4 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 83
and link-state information to help rebuild the routing information following a switchover. A benefit of IETF IS-IS configuration is operation between peer devices based on a proposed standard. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 5-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 84
supervisor engine; however, a new NSF restart will not be attempted by IS-IS until the interval time expires. This functionality prevents IS-IS from attempting back-to-back NSF restarts. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 5-6 OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 85
RS bit, the neighbor can only detect an adjacency reset by receiving an INIT update or by the expiration to send an end of table (EOT) marker in the last update packet to indicate the end of the OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 5-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 86
unicast protocols must be NSF-aware in order to use multicast NSF with SSO. • Bidirectional forwarding detection (BFD) is not SSO-aware and is not supported by NSF with SSO. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 5-8 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 87
supervisor engine and PISA in a reset condition. • Each supervisor engine must have the resources to run the switch on its own, which means all supervisor engine resources are duplicated, including all flash devices. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 88
• Configuring BGP NSF, page 5-13 • Verifying BGP NSF, page 5-13 • Configuring OSPF NSF, page 5-14 • Verifying OSPF NSF, page 5-14 • Configuring IS-IS NSF, page 5-15 • Verifying IS-IS NSF, page 5-16 5-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 89
users, the default settings are adequate. Multicast MLS NSF with SSO is on by default when SSO is selected as the redundancy mode. To configure multicast NSF with SSO parameters, perform this task: OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 90
enabled/running CEF switching enabled/running CEF default capabilities: Always FIB switching: yes Default CEF switching: yes Default dCEF switching: yes Update HWIDB counters: no 5-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 91
the BGP configuration of the SSO-enabled router by entering the show running-config command: Router# show running-config . . . router bgp 120 . . . bgp graceful-restart neighbor 10.2.2.2 remote-as 300 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 92
OSPF NSF, follow these steps: Step 1 Verify that "nsf" appears in the OSPF configuration of the SSO-enabled device by entering the show running-config command: Router# show running-config 5-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 93
ospf 1" with ID 192.168.2.1 and Domain ID 0.0.0.1 Supports only single TOS(TOS0) routes Supports opaque LSA SPF schedule delay 5 secs, Hold time default time between consecutive NSF restart attempts is 5 minutes. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 94
completing the restart. The default is 10 seconds. Verifying IS-IS NSF To verify IS-IS NSF, you must check that the NSF function is configured on the SSO-enabled state:ACTIVE, Mode:SSO 5-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 95
:FALSE NSF L2 Restart state:Running NSF L2 Restart retransmissions:0 Maximum L2 NSF Restart retransmissions:3 L2 NSF ACK requested:FALSE L2 NSF CSNP requested:FALSE OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 5-17 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 96
all interfaces is not set Default networks flagged in outgoing updates Default networks accepted from incoming updates EIGRP metric weight K1=1, K2=0, K3=1, K4 : internal 90 external 170 5-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 97
slavesup-bootdisk:target_filename Enter this command to copy a file to the bootdisk: device on a redundant PISA: Router# copy source_device:source_filename slavebootdisk:target_filename OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 5-19 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 98
Copying Files to the Redundant Supervisor Engine Chapter 5 Configuring NSF with SSO Supervisor Engine Redundancy 5-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 99
These sections describe supervisor engine redundancy using RPR: • Supervisor Engine Redundancy Overview, page 6-2 • RPR Operation, page 6-2 • Supervisor Engine Configuration Synchronization, page 6-3 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 100
reprogrammed into supervisor engine hardware Note In a switchover, there is a disruption of traffic because some address states are lost and then restored after they are dynamically redetermined. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 6-2 OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 101
, which means all supervisor engine resources are duplicated, including all Flash devices. • Make separate console connections to each supervisor engine. Do not connect a Y cable to the console ports. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 102
Configures RPR mode. When this command is entered, the redundant supervisor engine is reloaded and begins to work in RPR mode. Verifies that RPR mode is enabled. Displays the operating redundancy mode. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 6-4 OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 103
shows how to display the redundancy states: Router# show redundancy states my state = 13 -ACTIVE peer state = 8 -STANDBY HOT Mode = Duplex Unit = Primary Unit ID = 1 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 6-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 104
-register 0x2102 Router(config)# boot system flash device:file_name Router# copy running-config start-config Configures the supervisor engines to boot the new image. Saves the configuration. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 6-6 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 105
slavesup-bootdisk:target_filename Use the following command to copy a file to the bootdisk: device on a redundant PISA: Router# copy source_device:source_filename slavebootdisk:target_filename OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 6-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 106
Copying Files to the Redundant Supervisor Engine Chapter 6 Configuring RPR Supervisor Engine Redundancy Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 6-8 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 107
2ZY/command/reference/cmdr ef.html • The Release 12.2 publications at this URL: http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_installation_and_configuratio n_guides_list.html OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 7-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 108
port number on the module. On the Catalyst 6500 configuration mode: Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# In the global configuration Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 7-2 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 109
default software cisco Catalyst 6000 (R7000) processor with 114688K/16384K bytes of memory. configuration memory. 16384K bytes of Flash internal SIMM (Sector size 512K). Configuration register is 0x2 Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 110
• The no interface range command supports VLAN interfaces. • The interface range command supports VLAN interfaces for which Layer 2 VLANs have not been created with the interface vlan command. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 7-4 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 111
-range macro to automatically select a range of interfaces for configuration. Before you can use the macro keyword in the interface range macro command string, you must define the macro. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 7-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 112
• Configuring Jumbo Frame Support, page 7-10 • Configuring IEEE 802.3x Flow Control, page 7-13 • Configuring the Port Debounce Timer, page 7-14 • Adding a Description for an Interface, page 7-15 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 7-6 OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 113
If you decide to configure the port speed and duplex modes manually, consider the following configured. Configures the speed of the Ethernet interface. Reverts to the default configuration (speed auto). OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 114
(link negotiation enabled on one port and disabled on the other port). Table 7-1 shows the four possible link negotiation configurations and the resulting link status for each configuration. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 7-8 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 115
input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 1238 packets input, 273598 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 7-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 116
interface and configuring the global LAN port MTU size. Note • Jumbo frame support fragments routed traffic in software on the PISA. • Jumbo frame support does not fragment bridged traffic. 7-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 117
Ethernet port limits ingress and egress packets to the global LAN port MTU size. Configuring a nondefault MTU size on an Ethernet port limits routed traffic to the configured MTU size. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 7-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 118
supported MTU values are from 64 to 9216 bytes. • For Layer 2 Ethernet ports, you can configure only the global egress LAN port MTU size (see the "Configuring the Global Egress LAN Port MTU Size" section on page 7-13). 7-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 119
] flowcontrol Reverts to the default flow control settings. Displays the flow-control configuration for all ports. 1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 7-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 120
control configuration: Router# configure terminal Router(config)# interface gigabitethernet 1/2 Router(config-if)# flowcontrol receive on Router(config-if)# end 2 and Layer 3 protocols. 7-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 121
about an interface to help you remember its function. The description appears in the output of the following commands: show configuration, show running-config, and show interfaces. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 7-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 122
interfaces: • Monitoring Interface Status, page 7-17 • Clearing Counters on an Interface, page 7-17 • Resetting an Interface, page 7-18 • Shutting Down and Restarting an Interface, page 7-18 7-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 123
interface counters shown with the show interfaces command, perform this task: Command Router# clear counters {{vlan example shows how to clear and reset the counters on Fast Ethernet port specific interface. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 124
using SNMP. Resetting an Interface To reset an interface, perform this task: Command Router# clear interface type1 slot/port Purpose Resets an interface. show interfaces command display. 7-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 125
defects or by the end of the cable itself. Cisco IOS Release 12.2ZY on the Supervisor Engine 32 PISA for information about which modules support the TDR. To start or stop the TDR test, perform OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 7-19 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 126
Checking the Cable Status Using the TDR Chapter 7 Configuring Interfaces 7-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 127
8-4 Understanding Layer 2 Ethernet Switching These sections describe Layer 2 Ethernet switching: • Layer 2 Ethernet Switching Overview, page 8-2 • Switching Frames Between Segments, page 8-2 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 8-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 128
from the address table. Understanding VLAN Trunks These sections describe VLAN trunks on the Catalyst 6500 series switches: • Trunking Overview, page 8-3 • Encapsulation Types, page 8-3 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 8-2 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 129
trunk encapsulation isl Function Specifies ISL encapsulation on the trunk link. Note Some modules do not support ISL encapsulation (see the "Trunking Overview" section on page 8-3). OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 8-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 130
intend to trunk across those links. To enable trunking to a device that does not support DTP, use the nonegotiate keyword to cause the LAN port to become a trunk but not generate DTP frames. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 8-4 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 131
VLANs 2 to 1001 Default access VLAN VLAN 1 modules do not support ISL encapsulation: - WS-X6502-10GE - WS-X6548-GE-TX, WS-X6548V-GE-TX, WS-X6548-GE-45AF - WS-X6148-GE-TX, WS-X6148V-GE-TX, WS-X6148-GE-45AF OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 132
• Configuring a Layer 2 Switching Port as a Trunk, page 8-8 • Configuring a LAN Interface as a Layer 2 Access Port, page 8-14 • Configuring a Custom IEEE 802.1Q EtherType Field Value, page 8-15 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 8-6 OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 133
memory and in the running configuration, use the default interface command. To avoid potential issues while changing the role of a port using the switchport command, shut down the interface before applying the switchport command. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 134
.1Q. • The following switching modules do not support ISL encapsulation: - WS-X6502-10GE - WS-X6548-GE-TX, WS-X6548V-GE-TX, WS-X6548-GE-45AF - WS-X6148-GE-TX, WS-X6148V-GE-TX, WS-X6148-GE-45AF Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 8-8 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 135
: • Before entering the switchport mode trunk command, you must configure the encapsulation (see the "Configuring the Layer 2 Switching Port as an ISL or 802.1Q Trunk" section on page 8-8). OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 8-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 136
VLAN, perform this task: Command Router(config-if)# switchport trunk native vlan vlan_ID Router(config-if)# no switchport trunk native vlan Purpose (Optional) Configures the 802.1Q native VLAN. Reverts to the default value (VLAN 1). 8-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 137
allowed by default. • Configuring the List of Prune-Eligible VLANs Note Complete the steps in the "Configuring a LAN Port for Layer 2 Switching" section on page 8-7 before performing the tasks in this section. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 138
. Displays the switch port configuration of the interface. Displays the trunk configuration of the interface. 1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet 8-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 139
is configured to support 802.1Q trunking: Router# configure terminal Enter configuration commands, one per line. End with VLAN: 1 (default) Trunking Native Mode VLAN: 1 (default) Trunking VLANs OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 8-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 140
Ethernet VLAN" section on page 12-10). To configure a LAN port as a Layer 2 access port, perform this task: Command Purpose Step 1 Router(config)# interface type1 (config-if)# end Router# exit 8-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 141
not recognize the standard 0x8100 EtherType field value on 802.1Q-tagged frames and cannot put the frames into the VLAN to which they belong. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 8-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 142
modules that support custom IEEE 802.1Q EtherType field values. This example shows how to configure the EtherType field value to 0x1234: Router (config-if)# switchport dot1q ethertype 1234 Router (config-if)# 8-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 143
interfaces. The Catalyst 6500 series switches support a maximum of 16 Flex Links. To configure the Flex Links feature, you configure one Layer 2 interface as the continues to forward traffic. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 9-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 144
on the switch, be sure that there are no Layer 2 loops in the network topology. • Do not configure the following STP features on Flex Links ports or the ports to which the links connect: Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 9-2 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 145
Simulation Configuring Flex Links To configure Flex Links, perform this task: Command Purpose Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Router# configure terminal the Flex Links configuration. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 146
all Flex Links configured on the switch and the state of each active and backup interface (up or standby mode). 1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 9-4 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 147
eight compatibly configured LAN ports on any module in a Catalyst 6500 series switch. All LAN ports in each EtherChannel must be the same speed and must all be configured as either Layer 2 or Layer 3 LAN ports. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 148
LACP negotiation. (Default) active LACP mode that places a port into an active negotiating state, in which the port initiates negotiations with other ports by sending LACP packets. 10-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 149
. • A LAN port in passive mode cannot form an EtherChannel with another LAN port that is also in passive mode, because neither port will initiate negotiation. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 10-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 150
or shared medium - Configuration restrictions that you establish On ports configured to use LACP, LACP tries to configure the maximum number of compatible ports in an EtherChannel channel. 10-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 151
ports, verify that the trunking mode is the same on all the trunks. LAN ports in an EtherChannel with different trunk modes can operate unpredictably. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 10-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 152
-7). • To move an IP address from a Layer 3 LAN port to an EtherChannel, you must delete the IP address from the Layer 3 LAN port before configuring it on the port channel logical interface. 10-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 153
LAN ports into a manually created port channel interface. • For Cisco IOS to create port channel interfaces for Layer 2 EtherChannels, the Layer 2 LAN ports must be connected and functioning. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 10 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 154
interface port-channel 2 Building configuration... Current configuration: ! interface Port-channel2 no ip address switchport switchport access vlan 10 switchport mode access end Router# 10-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 155
configuration... Current configuration: ! interface FastEthernet5/6 no ip address switchport switchport access vlan 10 switchport mode access channel-group 2 mode desirable end # OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 10-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 156
-ip-Destination IP addresses • dst-mac-Destination MAC addresses • dst-port-Destination Layer 4 port • mpls-Load balancing for MPLS packets • src-dst-ip-Source and destination IP addresses 10-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 157
. To configure the EtherChannel Min-Links feature, perform this task configured only on one end of an EtherChannel, for best results, configure the same number of minimum links on both ends of the EtherChannel. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 158
than 2 member ports are active in the EtherChannel: Router# configure terminal Router(config)# interface port-channel 1 Router(config-if)# port-channel min-links 2 Router(config-if)# end 10-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 159
complete information on configuring VLANs, see Chapter 12, "Configuring VLANs." These sections describe how VTP works: • Understanding the VTP Domain, page 11-2 • Understanding VTP Modes, page 11-2 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 160
to VTP client mode if the switch detects a failure while writing configuration to NVRAM. If this happens, the switch cannot be returned to VTP server mode until the NVRAM is functioning. 11-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 161
increases available bandwidth by restricting flooded traffic to those trunk links that the traffic must use to access the appropriate network devices. By default, VTP pruning is disabled. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 11-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 162
in the management domain must support VTP pruning. On devices that do not support VTP pruning, you must manually configure the VLANs allowed on trunks 6 Switch 3 Interface 1 Switch 1 31075 11-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 163
network devices in the domain enable VTP version 2. • In a Token Ring environment, you must enable VTP version 2 for Token Ring VLAN switching to function properly. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 11-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 164
shows one way to configure a VTP password in global configuration mode: Router# configure terminal Router(config)# vtp password WATER Setting device VLAN database password to WATER. Router# 11-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 165
in the VTP domain supports version 2. Note In a Token Ring environment, you must enable VTP version 2 for Token Ring VLAN switching to function properly on devices that support Token Ring interfaces. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 166
VTP is disabled, you can enter VLAN configuration commands in configuration mode instead of the VLAN database mode and the VLAN configuration is stored in the startup configuration file. 11-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 167
This example shows how to disable VTP on the switch: Router# configuration terminal Router(config)# vtp mode transparent Setting device to VTP TRANSPARENT mode. Router(config)# end Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 11-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 168
shows how to verify the configuration: Router# show vtp status VTP Version : 2 Configuration Revision : 247 Maximum VLANs supported locally : 1005 Number of Fa5/8 43071 42766 5 11-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 169
example, all the end stations in a particular IP subnet belong to the same VLAN. Traffic between VLANs must be routed. LAN port VLAN membership is assigned manually on an port-by-port basis. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 170
do not extend to any switches running Catalyst software. • You must enable the extended system ID to use extended range VLANs (see the "Understanding the Bridge ID" section on page 17-2). 12-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 171
default values. • You can configure the VLAN name for Ethernet VLANs 1006 through 4094. You can configure the two Token Ring VLAN types supported on network devices running VTP version OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 12-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 172
between the undistributed TrCRFs. Note To pass data between rings located on separate network devices, you can associate the rings to the same TrBRF and configure the TrBRF for an SRB. 12-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 173
default, Token Ring ports are associated with the default TrCRF (VLAN 1003, trcrf-default), which has the default TrBRF (VLAN 1005, trbrf-default) as its parent. In this configuration TrCRF. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 12-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 174
ID VLAN name 802.10 SAID MTU size Ring number Parent VLAN Translational bridge 1 Default 1002 "fddi-default" 101002 1500 0 0 0 Range 1-1005 - 1-4294967294 1500-18190 1-4095 0-1005 0-1005 12-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 175
ibm, ieee active, suspend Table 12-6 Token Ring (TrBRF) VLAN Defaults and Ranges Parameter VLAN ID VLAN name 802.10 SAID Default 1005 "trnet-default" 101005 Range 1-1005 - 1-4294967294 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 12-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 176
is stored in nonvolatile memory. You can cause inconsistency in the VLAN database if you manually delete the vlan.dat file. If you want to modify the VLAN configuration or VTP, use the commands described in this guide and in the Catalyst Supervisor Engine 32 PISA Cisco IOS Command Reference, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 177
the switch uses the configuration in the vlan.dat file. • You can configure extended-range VLANs only in global configuration mode. You cannot configure extended-range VLANs in VLAN database mode. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 178
, note the following information: • Because Layer 3 ports and some software features require internal VLANs allocated from 1006 and up, configure extended-range VLANs starting with 4094. 12-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 179
in global configuration mode and verify the configuration: Router# configure terminal Router(config)# vlan 3 Router(config-vlan)# end Router# show assign one or more LAN ports to the VLAN. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 12-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 180
• VLAN Translation Guidelines and Restrictions, page 12-13 • Configuring VLAN Translation on a Trunk Port, page 12-14 • Enabling VLAN Translation on Other Ports in a Port Group, page 12-15 12-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 181
16 Translations per VLAN Translation Port Group Trunk-Type Support 16 ISL 802.1Q 16 ISL 802.1Q 128 ISL 802.1Q 32 802.1Q 128 ISL 802.1Q 32 802.1Q 32 802.1Q 32 802.1Q OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 12-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 182
-if)# end Router# show interface type1 slot/port vlan mapping Exits configuration mode. Verifies the VLAN mapping. 1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet 12-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 183
group, perform this task: Step 1 Step 2 Step 3 Step 4 Command Purpose Router(config)# interface type1 slot/port Selects the LAN port to configure. Router( trunk in the mapping table. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 12-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 184
will have to reload the supervisor engine after uploading the file. To view the file location, use the dir vlan.dat command. To copy the file (binary), use the copy vlan.dat tftp command. 12-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 185
Supervisor Engine 32 PISA Cisco IOS Command Reference, Release 12.2ZY, at this URL: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios Interaction with Other Features, page 13-5 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 13-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 186
. • Community VLANs-Ports within a community VLAN can communicate with each other but cannot communicate with ports in other communities at the Layer 2 level. 13-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 187
VLAN domain. Note Because trunks can support the VLANs carrying traffic between isolated, end stations. The end stations need to communicate only with a default gateway to communicate outside the private VLAN. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 188
same primary VLAN. When new devices are added, the DHCP server assigns them the next available address from a large pool of subnet addresses. 13-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 189
support private VLANs, you must manually configure private VLANs on all switches in the Layer 2 network. If you do not configure the VLAN Configuration Guidelines and Restrictions" section on page 13-6. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 190
VLANs are described in the following sections: • Secondary and Primary VLAN Configuration, page 13-7 • Private VLAN Port Configuration, page 13-9 • Limitations with Other Features, page 13-9 13-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 191
ARP entries. For security reasons, private VLAN port sticky ARP entries do not age out. For information about configuring sticky ARP, see the "Configuring Sticky ARP" section on page 33-25. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 13-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 192
must manually remove private VLAN port ARP entries if Private VLANs support these Switched Port Analyzer (SPAN) features: - You can configure a private Configuring Local SPAN, RSPAN, and ERSPAN." 13-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 193
VLAN. • Do not configure a remote SPAN (RSPAN) VLAN as a private VLAN primary or secondary VLAN. For more information about SPAN, see Chapter 48, "Configuring Local SPAN, RSPAN, and ERSPAN." OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 194
VLAN configuration for other ports within the 12 ports is inactive. To reactivate the ports, remove the isolated or community VLAN port configuration and enter the shutdown and no shutdown commands. 13-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 195
private VLAN. Clears the private VLAN configuration. Note These commands do not take effect until you exit VLAN configuration submode. Exits configuration mode. Verifies the configuration. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 13-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 196
can be a single private VLAN ID or a hyphenated range of private VLAN IDs. • The secondary_vlan_list parameter can contain multiple community VLAN IDs. 13-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 197
of private VLAN ingress traffic, perform this task: Command Step 1 end Step 4 Router# show interface private-vlan mapping Purpose Enters interface configuration configuration mode. Verifies the configuration. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 198
. • Required only if you have not entered the switchport command already for the interface. Configures the Layer 2 port as a private VLAN host port. Clears private VLAN port configuration. 13-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 199
a Layer 2 interface before you can enter additional switchport commands with keywords. • Required only if you have not entered the switchport command already for the interface. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 13-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 200
Router(config-if)# end This example shows how to verify the configuration: Router# show interfaces Mode VLAN: 1 (default) Trunking Native Mode VLAN: 1 (default) Administrative private-vlan 13-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 201
Displays the private VLAN information for the switch. Displays private VLAN configuration on interfaces. Displays information about the private VLAN mapping for VLAN 10 503 non-operational OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 13-17 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 202
Monitoring Private VLANs Chapter 13 Configuring Private VLANs 13-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 203
how to configure support for Cisco IP phones on the Catalyst 6500 series switches. Note For complete syntax and usage information for the commands used in this chapter, refer to the Catalyst Supervisor Engine 32 PISA Cisco IOS Command Reference, Release 12.2ZY, at this URL: http://www.cisco.com/en - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 204
value (the default is 5 for voice traffic and 3 for voice control traffic). You cannot use Cisco IOS software commands to configure the frame type used by data traffic sent from a device attached to the access port on the Cisco IP phone. 14-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 205
points. Cisco inline power modules are available to support one or both of the two most common implementations of Power over Ethernet (PoE): • Cisco prestandard inline power • IEEE 802.3af standard OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 206
device could be damaged. We recommend that you wait at least 10 seconds between unplugging a network device and plugging in another network device. 14-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 207
Configuration Cisco IP phone support is disabled by default. When the voice VLAN feature is enabled, all untagged traffic is sent with the default CoS priority of the port. The CoS is not trusted for 802.1P or 802.1Q tagged traffic. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 208
14-7 • Configuring Data Traffic Support, page 14-8 • Configuring Inline Power Support, page 14-9 Note Voice VLANs are referred to as auxiliary VLANs in the Catalyst software publications. 14-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 209
Configuring Cisco IP Phone Support Configuring Cisco IP Phone Support Configuring Voice Traffic Support To configure the way in which the Cisco IP phone transmits voice traffic, perform : dot1q OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 210
: Router# configure terminal Router(config)# interface fastethernet 5/1 Router(config-if)# mls qos trust extend This example shows how to verify the configuration on Fast Ethernet port 5/1: 14-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 211
or the configured maximum power level, if lower. This example shows how to disable inline power on Fast Ethernet port 5/1: Router# configure terminal Router(config)# interface fastethernet 5/1 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 212
inline power configuration on Fast Ethernet port 5/1: Router# show power inline fastethernet 5/1 Interface Admin Oper Power Device (Watts) Fa5/1 auto on 6.3 cisco phone device 14-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 213
and enters the service-provider edge switch through a tunnel port. The link between the 802.1Q trunk port on a customer device and the tunnel port is called an asymmetrical link because one end is OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 214
802.1Q Tunneling Works Chapter 15 Configuring IEEE 802.1Q Tunneling configured as an 802.1Q trunk port and the other end is configured as a tunnel port. You assign Customer B VLANs 1 to 200 15-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 215
port. A tunnel can have as many tunnel ports as required to support the customer devices that need to communicate through the tunnel. An egress • Configure tunnel ports only to form an asymmetrical link. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 216
Configure jumbo frame support on tunnel ports: - See the "Configuring Jumbo Frame Support" section on page 7-10. - Take note of the modules listed in the "Configuring Jumbo Frame Support" section that do not support Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL- - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 217
-tree portfast trunk • If the service provider does not want the customer to see its switches, CDP should be disabled on the 802.1Q tunnel port as follows: Router(config-if)# no cdp enable OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 15-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 218
that configures the switch to tag native VLAN traffic, and admit only 802.1Q tagged frames on 802.1Q trunks, dropping any untagged traffic, including untagged traffic in the native VLAN. 15-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 219
the switch to tag native VLAN traffic and verify the configuration: Router# configure terminal Router(config)# vlan dot1q tag native Router(config)# end Router# show vlan dot1q tag native OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 15-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 220
Configuring 802.1Q Tunneling Chapter 15 Configuring IEEE 802.1Q Tunneling 15-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 221
Catalyst Supervisor Engine 32 PISA Cisco IOS Command Reference, Release 12.2ZY, at this URL: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2ZY/command/reference/cmdr ef.html • The WS-X6548-GE-TX, WS-X6548V-GE-TX, WS-X6148-GE-TX, and WS-X6148V-GE-TX switching modules do not support - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 222
ports: - See the "Configuring Jumbo Frame Support" section on page 7-10. - Take note of the modules listed in the "Configuring Jumbo Frame Support" section that do not support jumbo frames. 16-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 223
10 Router(config-if)# l2protocol-tunnel shutdown-threshold stp 10 Router(config-if)# l2protocol-tunnel shutdown-threshold vtp 10 Router(config-if)# end Router# show l2protocol-tunnel summary OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 16-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 224
Threshold (cos/cdp/stp/vtp) Router# This example shows how to clear Layer 2 protocol tunneling port counters: Router# clear l2protocol-tunnel counters Router# 16-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 225
Supervisor Engine 32 PISA Cisco IOS Command Reference, Release 12.2ZY, at this URL: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios the Spanning Tree Topology, page 17-4 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 226
on all VLANs. By default, a single instance of STP runs on each configured VLAN (provided you do not manually disable STP). You can Configuring the Bridge Priority of a VLAN" section on page 17-33). 17-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 227
2048 1024 512 256 128 64 32 16 8 4 2 1 STP MAC Address Allocation Catalyst 6500 series switches have 64 addresses available to support software features such as STP. To as the root bridge. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 228
STP protocol timers that affect STP performance. Table 17-2 STP Protocol Timers the bridge priority of all the network devices is set to the default (32768) and Switch A has the lowest MAC address. However, Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 229
When the spanning tree topology is calculated based on default parameters, the path between source and destination end stations in a switched network might not be ideal. frame forwarding. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 230
expire, moves the Layer 2 LAN port to the learning state, and resets the forward delay timer. 3. In the learning state, the Layer 2 LAN port continues to block forwarding are enabled. 17-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 231
the blocking state performs as follows: • forwarding. • Does not incorporate end station location into its address system module. • Does not transmit BPDUs received from the system module. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 232
module Frame forwarding Data frames BPDUs Port 2 Network management frames S5693 Listening All segment frames BPDU and network management frames A Layer 2 LAN port in the listening state performs Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 233
2 LAN port in the forwarding state forwards frames, as shown in Figure 17-6. The Layer 2 LAN port enters the forwarding state from the learning state. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 234
module Frame forwarding Station addresses BPDUs Port 2 Network management and data frames Forwarding All segment frames S5695 A Layer 2 LAN port in the forwarding state performs . 17-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 235
separating the Cisco network devices is treated as a single trunk link between the network devices. For more information on 802.1Q trunks, see Chapter 8, "Configuring LAN Ports for Layer 2 Switching." OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 236
(IEEE 802.1D) Blocking Listening Learning RSTP Port State Discarding Discarding Learning Is Port Included in the Active Topology? No No Yes 17-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 237
B as its root port, and both ends immediately transition to the forwarding state. With default setting that is controlled by the duplex setting by using the spanning-tree link-type interface configuration command. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 238
is in the blocking state. • It is an edge port (a port configured to be at the edge of the network). If a designated port is in the forwarding state and is events is shown in Figure 17-9. 17-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 239
Chapter 17 Configuring STP and MST Understanding How IEEE 802.1w RSTP Works Figure 17-9 Sequence role: Unknown Alternate port or backup port Root port Designated port Learning Forwarding OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 240
Understanding How IEEE 802.1w RSTP Works Chapter 17 Configuring STP and MST Table 17-4 Bit 6 7 RSTP BPDU Flags (continued) Function BPDU, it immediately replies with its own information. 17-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 241
and BackboneFast configurations are ignored in Rapid-PVST mode; both features are included in RSTP. Understanding MST These sections describe MST: • MST Overview, page 17-18 • MST Regions, page 17-18 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 242
to support a configuration controls to which MST region each switch belongs. The configuration includes the name of the region, the revision number, and the MST VLAN-to-instance assignment map. 17-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 243
ID, root path cost, and so forth. By default, all VLANs are assigned to the IST. An MST by the spanning tree algorithm running among switches that support the 802.1w, 802.1s, and 802.1D OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-19 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 244
Understanding MST Chapter 17 Configuring STP and MST Spanning Tree Operation Within an MST Region The IST connects 3 (C) are the roots for their respective subtrees within the CIST. 17-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 245
(for example, switch priority, port VLAN cost, and port VLAN priority) can be configured on both the CST instance and the MST instance. MST switches use Version 3 BPDUs to any region. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-21 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 246
external. When a message is external, it is received only by the CIST. If the CIST role is root or alternate, or if 17-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 247
Cisco prestandard implementation is that a designated port is not defined as boundary unless it is running in an STP-compatible ID. The whole region performs like a single virtual switch OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-23 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 248
this specific situation. The CLI displays different flags depending on the port configuration when balancing is possible between A and B. The same problem exists on segment X, but B might transmit topology Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 249
the Hello Time, page 17-34 • Configuring the Forward-Delay Time for a VLAN, page 17-35 • Configuring the Maximum Aging Time for a VLAN, page 17-35 • Enabling Rapid-PVST, page 17-36 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-25 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 250
default on VLAN 1 and on all newly created VLANs. You can enable STP on a per-VLAN basis. The Catalyst 6500 series switch maintains a separate instance of STP for each VLAN (except on VLANs on which you disable STP). 17-26 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 251
Delay 15 sec Bridge ID Priority 32768 Address 00d0.00b8.14c8 Hello Time 2 sec Max Age 20 sec Aging Time 300 Forward Delay 15 sec OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-27 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 252
, if all network devices in, for example, VLAN 20 have the default priority of 32768, entering the spanning-tree vlan 20 root primary command on configure an access switch as the STP primary root. 17-28 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL- - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 253
run this command on more than one switch to configure multiple backup root bridges. Use the same network diameter and hello time values as you used when configuring the primary root bridge. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-29 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 254
in increments of 4. The vlan_ID value can be 1 through 4094, except reserved VLANs (see Table 12-1 on page 12-2). Reverts to the default VLAN port priority value. Exits configuration mode. 17-30 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 255
config-if)# spanning-tree vlan 200 port-priority 64 Router(config-if)# end Router# The configuration entered in the example only applies to VLAN 200. All VLANs other 64.196 P2p Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-31 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 256
the configuration: Router# show spanning-tree interface gigabitethernet 1/4 Vlan Role Sts Cost Prio.Nbr Status VLAN0001 Back BLK 1000 160.196 P2p VLAN0006 Back BLK 1000 160.196 P2p 17-32 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 257
secondary commands to modify the bridge priority. To configure the STP bridge priority of a VLAN, perform this task: Step 1 Command Router(config)# the default bridge priority value. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17- - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 258
. This example shows how to configure the hello time for VLAN 200 to 7 seconds: Router# configure terminal Router(config)# spanning-tree vlan 200 hello-time 7 Router(config)# end Router# 17-34 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 259
can be from 6 to 40 seconds. The vlan_ID value can be 1 through 4094, except reserved VLANs (see Table 12-1 on page 12-2). Reverts to the default maximum aging time. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-35 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 260
configuring the link type. To configure a specific link type, enter the spanning-tree linktype command. Restarting Protocol Migration A switch running both MSTP and RSTP supports the region. 17-36 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 261
on a per-CIST port basis) Hello time Forward-delay time Default Setting PVST+ (Rapid PVST+ and MST are disabled) 32768 128 1000 Mbps: 4 100 Mbps: 19 10 Mbps: 100 2 seconds 15 seconds OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-37 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 262
perform this task: Step 1 Step 2 Command Router# configure terminal Router(config)# spanning-tree mst configuration Purpose Enters global configuration mode. Enters MST configuration mode. 17-38 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 263
To return to the default revision number, use the no revision MST configuration command. • To reenable PVST+, use the no spanning-tree mode or the spanning-tree mode pvst global configuration command. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 264
manually configure the hello time, forward-delay time, and maximum-age time with the spanning-tree mst hello-time, spanning-tree mst forward-time, and spanning-tree mst max-age global configuration commands. 17-40 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 265
the same network diameter and hello-time values that you used when you configured the primary root bridge with the spanning-tree mst instance_id root primary global configuration command. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-41 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 266
{{gigabitethernet 1/port} | {port-channel number}} Purpose Enters global configuration mode. (Optional) Specifies an interface to configure, and enters interface configuration mode. 17-42 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 267
The default is 128. The lower the number, the higher the priority. The priority values are 0, 16, 32, 48 configuration mode. (Optional) Specifies an interface to configure, and enters interface configuration mode. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 268
, we recommend that you use the spanning-tree mst instance_id root primary and the spanning-tree mst instance_id root secondary global configuration commands to modify the switch priority. 17-44 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 269
the generation of configuration messages by the root bridge. These messages mean that the switch is alive. For seconds, the range is 1 to 10; the default is 2. Returns to privileged EXEC mode. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 270
-config (Optional) Saves your entries in the configuration file. To return the switch to its default setting, use the no spanning-tree transmit hold-count global configuration command. 17-46 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 271
the other port by using the proposal-agreement handshake to ensure a loop-free topology as described in the "Rapid Convergence" section on page 17-13. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 17-47 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 272
your entries. (Optional) Saves your entries in the configuration file. To return the port to its default setting, use the no spanning-tree mst prestandard interface configuration command. 17-48 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 273
the MST region configuration. Displays the MD5 digest included in the current MSTCI. Displays MST information for the specified instance. Displays MST information for the specified interface. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 274
Displaying the MST Configuration and Status Chapter 17 Configuring STP and MST 17-50 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 275
18-14 • Enabling Root Guard, page 18-14 • Enabling Loop Guard, page 18-15 Note For information on configuring the spanning tree protocol (STP), see Chapter 17, "Configuring STP and MST." OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 18-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 276
the port configuration as the default for PortFast BPDU filtering (see the "Enabling PortFast BPDU Filtering" section on page 18-10), then PortFast enables or disables PortFast BPDU filtering. 18-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 277
end hosts are connected. Table 18-1 PortFast BPDU Filtering Port Configurations Per-Port Configuration Default Global Configuration at any given time. Specifically, an uplink group consists of OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12. - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 278
bridge). Under normal STP rules, the network device ignores inferior BPDUs for the configured maximum aging time, as specified by the STP max-age command. The network in the blocking state. 18-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 279
This switchover takes approximately 30 seconds, twice the Forward Delay time if the default Forward Delay time of 15 seconds is set. Figure 18-4 shows how BackboneFast A, the root bridge. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 18-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 280
feature prevents a port from becoming root port or blocked port. If a port configured for root guard receives a superior BPDU, the port immediately goes to the root- to the listening state. 18-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 281
, all the physical ports grouped in the channel must have compatible configurations. PAgP enforces uniform configurations of root guard or loop guard on all the physical ports with a designated role. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 18-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 282
5/8 Building configuration... Current configuration: ! interface FastEthernet5/8 no ip address switchport switchport access vlan 200 switchport mode access spanning-tree portfast end Router# 18-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 283
host. Connecting hubs, concentrators, switches, bridges, etc... to this interface when portfast is enabled, can cause temporary bridging loops. Use with CAUTION Router(config-if)# ^Z OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 18-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 284
by default UplinkFast is disabled BackboneFast is disabled Pathcost method used is long Name Blocking Listening Learning Forwarding STP Active 2 vlans 0 0 0 3 3 Router# 18-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 285
mode. Verifies the configuration. This example shows how to enable BPDU Guard: Router# configure terminal Router(config)# spanning-tree portfast bpduguard Router(config)# end Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 286
Router# configure terminal Router(config)# spanning-tree uplinkfast Router(config)# exit Router# This example shows how to enable UplinkFast with an update rate of 400 packets per second: 18-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 287
) : 0 Number of RLQ response PDUs received (all VLANs) : 0 Number of RLQ request PDUs sent (all VLANs) : 0 Number of RLQ response PDUs sent (all VLANs) : 0 Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 18-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 288
To manually return a port to service, enter a shutdown and then a no shutdown command for the interface. Enabling Root Guard To enable root guard, perform this inconsistentports command. 18-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 289
: Router# show spanning-tree interface fastEthernet 4/4 detail Port 196 (FastEthernet4/4) of VLAN0010 is forwarding Port path cost 1000, Port priority 160, Port Identifier 160.196. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 18-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 290
port is in the portfast mode by portfast trunk configuration Link type is point-to-point by default Bpdu filter is enabled Loop guard is enabled on the port BPDU:sent 0, received 0 Router# 18-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 291
. • To support VLAN interfaces, create and configure VLANs and assign VLAN membership to Layer 2 LAN ports. For more information, see Chapter 12, "Configuring VLANs" and Chapter 11, "Configuring VTP." OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 292
- Stub IP multicast routing - IGMP join - IGMP static group - Multicast routing monitor (MRM) - Multicast source discovery protocol (MSDP) - SSM - IPv4 Ping - IPv6 Ping 19-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 293
Release 12.2, at these URLs: http://www.cisco.com/en/US/docs/ios/12_2/ipaddr/command/reference/fipras_r.html http://www.cisco.com/en/US/docs/ios/12_2/iproute/command/reference/fiprrp_r.html OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 19-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 294
routing protocol configuration mode. Selects an interface to configure. Configures the IPv4 address and IPv4 subnet. Enables the interface. Exits configuration mode. Verifies the configuration. 19-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 295
no shutdown Router(config-if)# end Router# This example uses the show interfaces command to display the interface IPv4 address configuration and status of Fast Ethernet port : 224.0.0.10 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 19-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 296
/configuration/guide/fatipx_c.html • Cisco IOS AppleTalk and Novell IPX Command Reference, Release 12.2, at this URL: http://www.cisco.com/en/US/docs/ios/12_2/atipx/command/reference/fatipx_r.html 19-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 297
.cisco.com/en/US/docs/ios/12_2/atipx/configuration/guide/fatipx_c.html • Cisco IOS AppleTalk and Novell IPX Command Reference, Release 12.2, at this URL: http://www.cisco.com/en/US/docs/ios/12_2/atipx/command/reference/fatipx_r.html OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 298
html • Cisco IOS Apollo Domain, VINES, DECnet, ISO CLNS, and XNS Command Reference, Release 12.2, at this URL: http://www.cisco.com/en/US/docs/ios/12_2/apollo/command/reference/fapolo_r.html 19-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 299
receiver and the equally high-capacity reverse-direction link, called the "back channel," that carries the few acknowledgements from the receiver back to the source. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 20-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 300
are less expensive than bidirectional transceivers. These are the supported unidirectional transceivers: • Receive-only WDM GBIC (WDM-GBIC-REC=) • Receive-only XENPAK (WDM-XENPAK-REC=) 20-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 301
UDE These sections describe how to configure UDE: • UDE Configuration Guidelines, page 20-4 • Configuring Hardware-Based UDE, page 20-4 • Configuring Software-Based UDE, page 20-5 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 20-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 302
ARP. Configuring Hardware-Based UDE There are no software configuration procedures required to support hardware-based UDE. Install a unidirectional transceiver to implement hardware-based UDE. 20-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 303
(config-if)# end Warning! Enable port unidirectional mode will automatically disable port udld. You must manually ensure that the unidirectional link does not create a spanning tree loop in the network. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 304
configure source and destination IPv4 addresses on UDLR back-channel tunnel interfaces. • The UDLR back-channel tunnel default mode is GRE. • UDLR back-channel tunnels do not support IPv6 or MPLS. 20-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 305
Ethernet port 1/2 is a receive-only UDE port. - The UDLR back-channel tunnel is configured as send-only and is associated with 10 Gigabit Ethernet port 1/2. - ARP and NHRP are enabled. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 20-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 306
tunnel udlr send-only tengigabitethernet 1/2 tunnel udlr address-resolution ! ! Configure OSPF. ! router ospf network 10.0.0.0 0.255.255.255 area 0 Chapter 20 Configuring UDE and UDLR 20-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 307
• Supported Cisco IOS Features, page 21-5 • MPLS Guidelines and Restrictions, page 21-7 • Configuring MPLS, page 21-7 • MPLS Per-Label Load Balancing, page 21-7 • MPLS Configuration Examples, page 21-8 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 308
Owned by service provider For additional information on MPLS, see this publication: http://www.cisco.com/en/US/docs/ios/12_2/switch/configuration/guide/xcftagov_ps1835_TSD_Produc ts_Configuration_Guide_Chapter.html Understanding MPLS Label Switching Supervisor Engine 32 PISA supports Multiprotocol - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 309
, resulting in either an MPLS packet with the remaining label for any VPN or AToM use or a native IP packet. MPLS to IP At the egress of the MPLS network there are several possibilities. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 21 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 310
sent to the label path. • MPLS Traffic Engineering (MPLS TE)-Enables an MPLS backbone to replicate and expand the traffic engineering capabilities of Layer 2 ATM and Frame Relay networks. 21-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 311
http://www.cisco.com/en/US/tech/tk436/tk428/technologies_configuration_example09186a008009 3fcb.shtml http://www.cisco.com/en/US/tech/tk436/tk428/technologies_configuration_example09186a008009 3fd0.shtml OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 312
com/en/US/docs/ios/12_2t/12_2t8/feature/guide/ospfshmk.html • Any Transport over MPLS (AToM)-Transports Layer 2 packets over an MPLS backbone. See the "Any Transport over MPLS" section on page 21-13. 21-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 313
/guide/xcftagov_ps1835_TSD_Produc ts_Configuration_Guide_Chapter.html MPLS Per-Label Load Balancing The following sections provide information on basic MPLS, MLPS Layer 2 VPN, and MPLS Layer 3 VPN load balancing. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 314
link-status mpls ip Router# show ip route 188.0.0.0 Routing entry for 188.0.0.0/24, 1 known subnets O IA 188.0.0.0 [110/1] via 75.0.77.2, 00:00:10, GigabitEthernet6/2 Router#sh ip ro 88.0.0.0 21-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 315
switch, m - load balancing modnumber, B - BGP Bucket sel V0 - Vlan 0,C0 - don MPLS VPN Guidelines and Restrictions, page 21-11 • MPLS VPN Supported Commands, page 21-11 • MPLS VPN Sample Configuration, page 21-12 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 316
packet to the final destination based upon a label lookup in the FIB. Note The PFC3B allocates only one aggregate label per VRF. 21-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 317
Note If you use a Layer 3 VLAN interface as the MPLS uplink through a Layer 2 port peering with another MPLS device, then you can use another Layer 3 VLAN interface as the VRF interface. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 21-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 318
network 10.4.4.4 0.0.0.0 area 0 network 10.0.0.0 0.0.255.255 area 0 ! router ospf 65000 vrf blues log-adjacency-changes redistribute bgp 100 subnets network 10.19.0.0 0.0.255.255 area 0 21-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 319
ATM AAL5 over MPLS, ATM Cell Relay over MPLS, Frame Relay over MPLS), see this URL: http://www.cisco.com/en/US/docs/routers/7600/install_config/12.2SX_OSM_config/mpls.html#Any_ Transport_over_MPLS OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 320
a new command that allows you to trust the P bits while preserving the IP precedence bits. To preserve the IP precedence bits, use the no mls qos rewrite ip dscp command. 21-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 321
EoMPLS circuits. • The AToM control word is not supported. • EoMPLS is not supported on Layer 3 VLAN interfaces. • Point-to-point EoMPLS works with a physical interface and subinterfaces. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 21-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 322
/12.2SX_OSM_config/mpls.html Configuring VLAN-Based EoMPLS When configuring VLAN-based EoMPLS, follow these guidelines and restrictions: • The AToM control word is not supported. 21-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 323
Ports 1 default active 2 VLAN0002 active 3 VLAN0003 active 1002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 324
the specified label space to be "discovered." Router# show mpls ldp discovery Local LDP Identifier: 13.13.13.13:0 Discovery Sources: Interfaces: GE-WAN3/3 (ldp): xmit/recv LDP Id: 12.12 . 21-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 325
11.11.11.11:0 up MPLS VC labels: local 20, Configuring Port-Based EoMPLS When configuring port-based EoMPLS, follow these guidelines and restrictions: • The AToM control word is not supported OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 21-19 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 326
run int g7/11.2000 Building configuration... Current configuration : 112 bytes ! interface GigabitEthernet7/11.2000 encapsulation dot1Q 2000 xconnect 75.0.78.1 2000 encapsulation mpls end 21-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 327
from another PE router, it considers that router and the specified label space to be "discovered." Router# show mpls ldp discovery Local LDP Identifier: 13.13.13.13:0 Discovery Sources: OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 21-21 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 328
LDP discovery sources: GE-WAN3/3, Src IP mpls l2transport vc command: Router# show mpls l2transport vc Local intf Local circuit Dest address VC ID Status Vl2 Eth VLAN 2 11.11.11.11 2 UP 21-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 329
for IPv4 multicast traffic to forward multicast traffic over VPNs at wire speeds. MVPN adds support for IPv4 multicast traffic over Layer 3 IPv4 VPNs to the existing IPv4 unicast support. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 22-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 330
the configured threshold. (Depending on when the stream is sampled, this means that in a worst-case scenario, it could take up to 180 seconds before a high-bandwidth stream is detected.) 22-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 331
is flowing along the default MDT. Each PE router maintains a PIM relationship with the other PE routers over the default MDT, as well as a PIM relationship with its directly attached PE routers. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 332
) receives the request. Figure 22-2 shows how the PE router forwards the request to the CE router associated with the multicast source (CE1a). 22-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 333
MTI is automatically created when an MVRF is configured. The BGP peering address is assigned as the MTI interface source address, and the PIM protocol is automatically enabled on each MTI. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 22-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 334
increased PISA CPU utilization. In a customer VRF, hardware acceleration supports multicast traffic in PIM dense, PIM sparse, PIM bidirectional, and PIM Source Specific Multicast (SSM) modes. 22-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 335
available. • MVPN does not support multiple BGP peering update sources, and configuring them can break MVPN RPF checking MPLS VPN networks, you cannot apply MPLS tags or labels to multicast traffic over the VPNs. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 336
the table entries can be rebuilt. To avoid disrupting customer traffic, we recommend verifying that the switch is already in ingress multicast replication mode before configuring any MVRFs. 22-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 337
Configuring the Default MDT, page 22-11 • Configuring Data MDTs (Optional), page 22-12 • Enabling Data MDT Logging, page 22-12 • Sample Configuration, page 22-13 • Displaying VRF Information, page 22-13 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 338
to configure 55:1111 as the route distinguisher and verify the configuration: Router(config-vrf)# rd 55:1111 Router(config-vrf)# do show ip vrf blue Name Default RD blue 55:1111 Interfaces 22-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 339
Default MDT To configure the default MDT, perform this task: Command Router(config-vrf)# mdt default group_address Router(config-vrf)# no mdt default Purpose Configures the default MDT. Deletes the default MDT. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 340
to configure 239.1.1.1 as the default MDT: Router(config-vrf)# mdt default 239.1.1.1 Configuring Data MDTs (Optional) To configure optional data MDTs, perform this data MDT logging. 22-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 341
MDT Group * 227.1.0.1 * 227.2.0.1 * 228.1.0.1 * 228.2.0.1 Interface Tunnel1 Tunnel2 Tunnel3 Tunnel4 Source Loopback0 Loopback0 Loopback0 Loopback0 VRF BIDIR01 BIDIR02 SPARSE01 SPARSE02 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 22-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 342
3.0.0.0/32 is subnetted, 1 subnets B 3.3.3.3 [200/0] via 3.1.1.3, 00:20:09 C 21.0.0.0/8 is directly connected, GigabitEthernet3/16 B 22.0.0.0/8 [200/0] via 3.1.1.3, 00:20:09 Router# 22-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 343
I - Received Source Specific Host Report, Z BGP extended communities must be enabled (using the neighbor send-community both or neighbor send-community extended command) to support the use of MDTs in the network. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 344
messages. Disables IPv4 multicast VRF routing. This example show how to configure a PIM VRF register message source address: Router(config)# ip pim vrf blue register-source loopback 3 22-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 345
22 Configuring IPv4 Multicast VPN Support Configuring MVPN Specifying the PIM VRF Rendezvous Point (RP) Address To specify the PIM VRF RP address, perform this for display-only purposes. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 22-17 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 346
is from 1 to the value of the limit parameter. This example show how to configure the maximum number of multicast routes: Router(config)# ip multicast vrf blue route-limit 200000 20000 22-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 347
Configuring IPv4 Multicast VPN Support Configuring MVPN Configuring IPv4 Multicast Route Filtering To configure IPV4 multicast route filtering, perform vpn250 rp-address 192.200.50.6 ... OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 22-19 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 348
, perform this task Step 1 Step 2 Command Router# configure terminal Router(config)# interface type {slot/port | number} Purpose Enters global configuration mode. Enters interface configuration mode for the specified interface. 22-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 349
address, so reconfigure the IP address. Disables IPv4 VRF forwarding. This example shows how to configure the interface for VRF blue forwarding: Router(config-if)# ip vrf forwarding blue OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 22-21 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 350
service password-encryption service compress-config ! hostname MVPN Router ! boot system flash slot0: logging snmp-authfail ! ip subnet-zero ! ! no ip domain-lookup ip host tftp 223.255.254.238 ! 22-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 351
.255.255 ! interface Loopback11 ip vrf forwarding mvpn-cus1 ip address 210.111.255.14 255.255.255.255 ip pim sparse-dense-mode Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 22-23 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 352
2:2 mdt default 226.2.2.1 mdt data 226.2.2.128 0.0.0.7 ! ip vrf v3 rd 3:3 route-target export 3:3 route-target import 3:3 mdt default 226.3.3.1 mdt data 226.3.3.128 0.0.0.7 ! ip vrf v4 22-24 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 353
Configuring IPv4 Multicast VPN Support Sample Configurations for MVPN OL-11439-03 rd 155.255.255.1:4 route-target export 155.255.255.1:4 route-target import 155.255.255.1:4 mdt default -to-point ! Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 22-25 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 354
Configuring IPv4 Multicast VPN Support interface GigabitEthernet1/1 description Gi1/1 - 155.50.1.155 255.255.255.0 - peer dut50 - mpls connected subnets tag 155 redistribute bgp 1 subnets tag 155 network Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 355
.ANYCAST.CE permit 2.2.2.2 ip access-list standard MCAST.ANYCAST.PE permit 1.1.1.1 ip access-list standard MCAST.BOUNDARY.VRF.v1 deny 226.192.1.1 permit any Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 22-27 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 356
for MVPN Chapter 22 Configuring IPv4 Multicast VPN Support ip access-list standard MCAST.GROUP.BIDIR permit 226.192.0.0 226.1.1.1 access-list 2 deny 226.1.1.1 access-list 2 permit any ... 22-28 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 357
about IP multicast Layer 3 switching, see Chapter 25, "Configuring IPv4 Multicast Layer 3 Switching." Understanding How Layer 3 Switching Works These sections describe Layer 3 switching: OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 23-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 358
, changing the Layer 2 destination address to the Layer 2 address of Destination B and the Layer 2 source address to the Layer 2 address of the PISA. The Layer 3 addresses remain the same. 23-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 359
MAC = Bb MAC = Dd MSFC Subnet 3/Marketing Host B 171.59.3.1 Subnet 2/Engineering MAC = Cc Data 171.59.1.2:171.59.2.2 Aa:Dd Host C 171.59.2.2 Data 171.59.1.2:171.59.2.2 Dd:Cc 44610 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 23-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 360
ucast: 0 pkt, 0 bytes - mcast: 0 pkt, 0 bytes 4046399 packets input, 349370039 bytes, 0 no buffer Received 3795255 broadcasts, 2 runts, 0 giants, 0 throttles Router# 23-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 361
. 1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet This example shows how to display adjacency statistics: Router# show adjacency gigabitethernet 9/5 detail OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 23-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 362
.20.53.206(11) 504 packets, 6110 bytes 00605C865B82 000164F83FA50800 ARP 03:49:31 Note Adjacency statistics are updated approximately every 60 seconds. 23-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 363
not supported. • IPv6 Multicast rate limiters-See Chapter 33, "Configuring Denial of Service Protection." • IPv6 Multicast: Bootstrap Router (BSR)-See the BSR information in the Cisco IOS IPv6 Configuration Guide and Cisco IOS IPv6 Command Reference. OL-11439-03 Catalyst Supervisor Engine 32 PISA - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 364
automatic tunnels - IPv6 over GRE tunnels - IPv6-in-IPv6 PIM register tunnels - IPv6 multicast basic ISATAP tunnels - ISATAP tunnels with embedded 6to4 tunnels 24-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 365
the (*,G) Forwarding Capability, page 24-5 • Verifying the Subnet Entry Support Status, page 24-5 • Verifying the Current Replication Mode, page 24 Hardware Adjacency Counters, page 24-7 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 24-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 366
Capability This example shows how to verify the (S,G) forwarding: Router# show platform software ipv6-multicast capability | include (S,G) (S,G) forwarding for IPv6 supported using Netflow 24-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 367
modules: Router# show platform software ipv6-multicast capability | begin ^Slot Slot Replication-Capability Replication-Mode 1 Ingress Ingress 2 Egress Ingress 6 Egress Ingress 8 Ingress Ingress OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 368
: Router# show platform software ipv6-multicast summary IPv6 Multicast Netflow SC summary on Slot[1]: Shortcut Type Shortcut count (S, G) 100 (*, G) 0 24-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 369
PIM-SM (*,G) forwarding is supported in software on the PISA. Displaying the FIB Hardware Bridging Default drop adjacency 0xA 0 0 StarG (spt == INF) adjacency 0xB 0 0 StarG (spt != INF) adjacency 0xC 0 0 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 370
bridge adjacency 0x8 0 0 S_G bridge adjacency 0x9 0 0 Default drop adjacency 0xA 28237 3146058 StarG (spt == INF) adjacency 0xB 0 0 StarG (spt != INF) adjacency 0xC 0 0 24-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 371
Layer 3 Switching Cache, page 25-2 • Layer 3-Switched Multicast Packet Rewrite, page 25-3 • Partially and Completely Switched Flows, page 25-3 • Non-RPF Traffic Processing, page 25-5 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 25-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 372
on an individual interface basis using the no mls ipmulticast command, flows that use this interface as the RPF interface are routed only by the PISA in software. 25-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 373
to a destination multicast group, the PFC3B performs a packet rewrite that is based on information learned from the PISA and stored in the adjacency table. For Switched Flows, page 25-4 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 25-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 374
count statistics for all completely switched flows to the PISA. The PISA updates the corresponding multicast routing table entry and resets the expiration timer for that multicast route. 25-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 375
download to the PFC3B and are applied to the interface you specify: access-list 100 permit ip A.B.C.0 0.0.0.255 any access-list 100 permit ip A.B.D.0 0.0.0.255 any access-list 100 permit ip any 224.0.0.0 0.0.0.255 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 376
the "Configuring IPv4 Bidirectional PIM" section on page 25-18. Default IPv4 Multicast Layer 3 Switching Configuration Table 25-1 shows the default IP multicast Layer 3 switching configuration. 25-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 377
Protocol (IGMP) snooping is enabled by default on all VLAN interfaces. If you is used by routing protocols. Layer 3 switching is supported for groups 224.0.2.* to 239.*.*.*. Note Groups in the OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 25-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 378
, page 25-22 • Redundancy for Multicast Traffic, page 25-23 Note When you are in configuration mode you can enter EXEC mode commands by entering the do keyword before the EXEC mode command. 25-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 379
, gigabitethernet, or tengigabitethernet This example shows how to enable PIM on an interface using the default mode (sparse-dense-mode): Router(config-if)# ip pim Router(config-if)# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 25-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 380
IP multicast Layer 3 switching is enabled by default on the Layer 3 interface when you enable PIM on the interface. Perform this task only if you disabled IP multicast Router(config-if)# 25-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 381
. Reverts to the default IP MMLS threshold. This example shows how to configure the Layer 3 switching threshold to 10 packets per second: Router(config)# mls ip multicast threshold 10 Router(config)# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 382
default of 25 seconds, it will take 100 seconds to forward statistics for all flows to the PISA. To specify how often flow statistics messages forwarded from the supervisor engine to the PISA, perform Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 383
: Router# show mls ip multicast summary 10004 MMLS entries using 1280464 bytes of memory Number of partial hardware-switched flows:4 Number of complete hardware-switched flows:10000 Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 25-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 384
Router# show ip mroute count IP Multicast Statistics 56 routes using 28552 bytes of memory 13 groups, 3.30 average sources per group Forwarding Counts:Pkt Count/Pkts per is still active. 25-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 385
multicast) 0 runts, 41 giants, 0 throttles 41 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 input packets with dribble condition detected 198 packets output, 14732 bytes, 0 underruns Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 25-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 386
Configuring IPv4 Multicast Layer 3 Switching 0 output errors, 0 collisions, 0 interface resets table, perform this task U - URD, I - Received Source Specific Host Report Outgoing interface flags:H - Hardware Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 387
or tengigabitethernet This example shows how to display information on a specific IP multicast Layer 3 switching entry: Router# show mls ip outgoing interfaces: MFD installed: Vlan10 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 25-17 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 388
, perform this task: Command Router(config)# ip pim bidir-enable Router(config)# no ip pim bidir-enable Purpose Enables IPv4 bidirectional PIM globally on the switch. Disables IPv4 bidirectional PIM globally on the switch. 25-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 389
RPF scan interval, perform this task: Command default. This example shows how to set the IPv4 bidirectional PIM RP RPF scan interval: Router(config)# mls ip multicast bidir gm-scan-interval 30 Router(config)# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 390
PIM Chapter 25 Configuring IPv4 Multicast Layer 3 Switching Displaying IPv4 Bidirectional PIM Information To display IPv4 bidirectional PIM information, perform one of :00:00/00:02:59, H 25-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 391
5) This example shows how to display the entries for a specific multicast group address: Router# show mls ip multicast group 230.31 H H H H DF Vl131 Vl151 Vl415 Gi4/16 State H H H H OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 25-21 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 392
example of the show mls ip multicast statistics command, see the "Displaying IPv4 Multicast Layer 3 Switching Statistics" section on page 25-17. 25-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 393
not need to configure anything else for multicast when the unicast routing protocol is working as expected and PIM is configured on all the Layer 3 links associated with the unicast routing protocol. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 394
Configuring IPv4 Bidirectional PIM Chapter 25 Configuring IPv4 Multicast Layer 3 Switching 25-24 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 395
, page 26-2 • Source-Based Filtering, page 26-3 • Explicit Host Tracking, page 26-3 • MLDv2 Snooping Proxy Reporting, page 26-3 • Joining an IPv6 Multicast Group, page 26-4 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 26-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 396
or EXCLUDE mode of one or more multicast groups. - Source list change record (unsolicited)-Sent by a host to change information about multicast sources. 26-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 397
MAC-group. Note Source-based filtering is not supported in hardware. The states are maintained only in software and used for explicit host tracking and statistics cannot be disabled. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 26-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 398
multicast groups learned through MLDv2 snooping are dynamic. However, you can statically configure Layer 2 multicast groups using the mac-address-table static command. When 0x0100.5E01.0203. 26-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 399
Chapter 26 Configuring MLDv2 Snooping for IPv6 Multicast Traffic Understanding How MLDv2 Snooping MAC Address 0100.5exx.xxxx 0100.5e01.0203 Type of Packet MLDv2 !MLDv2 Ports 0 1, 2, 5 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 26-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 400
Fast-leave processing is enabled by default. To disable fast-leave processing, enabled, hosts send BLOCK_OLD_SOURCES{src-list} messages for a specific group when they no longer want to receive traffic from Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 401
Default MLDv2 Snooping Configuration Understanding the MLDv2 Snooping Querier Use the MLDv2 snooping querier to support MLDv2 snooping in a VLAN where PIM and MLDv2 are not configured IGMPv3 messages. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 402
an IPv6 multicast router. • QoS does not support MLDv2 packets when MLDv2 snooping is Configures the IPv6 address and subnet. Enables the MLDv2 snooping querier. Disables the MLDv2 snooping querier. 26-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 403
Router(config)# end Step 3 Router# show ipv6 mld interface vlan vlan_ID | include globally Purpose Enables MLDv2 snooping. Disables MLDv2 snooping. Exits configuration mode. Verifies the configuration. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 404
in the same VLAN. This example shows how to configure a static connection to a multicast receiver: Router(config)# mac-address-table static 0050.3e8d.6400 vlan 12 interface fastethernet 5/7 26-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 405
-interval 1000 Router(config-if)# exit Router# show ipv6 mld interface vlan 200 | include last MLD snooping last member query response interval is 1000 ms OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 26-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 406
SSM safe reporting. Clears the configuration. This example shows how to SSM safe reporting: Router(config)# interface vlan 10 Router(config-if)# ipv6 mld snooping ssm-safe-reporting 26-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 407
-if)# ipv6 mld snooping report-suppression Router(config-if)# end Router# Router# show ipv6 mld interface vlan 25 | include report-suppression MLD snooping report-suppression is enabled OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 26-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 408
address multicast entries for a VLAN, perform this task: Command Router# show mac show mac-address-table multicast vlan 1 vlan mac address type qos ports 1 0100.5e02.0203 static -- Gi1/1,Gi2/1,Fa3/ Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 409
Traffic Configuring MLDv2 Snooping Displaying MLDv2 Snooping Information for a VLAN Interface To display MLDv2 snooping information for a VLAN interface, perform 50 00:00:50 Last-Leave - OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 26-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 410
Configuring MLDv2 Snooping Chapter 26 Configuring MLDv2 Snooping for IPv6 Multicast Traffic 26-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 411
page 27-2 • Joining a Multicast Group, page 27-2 • Leaving a Multicast Group, page 27-4 • Understanding the IGMP Snooping Querier, page 27-5 • Understanding IGMP Version 3 Support, page 27-5 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 27-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 412
, see Chapter 25, "Configuring IPv4 Multicast Layer 3 Switching." You can configure the IGMP snooping querier on the switch to support IGMP snooping in subnets that snooping-learned settings. 27-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 413
the CPU from becoming overloaded with multicast frames. The second entry tells the switching engine to send frames addressed to the 0x0100.5E01.0203 multicast MAC address that are to the CPU. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 27-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 414
determine if any other devices connected to that interface are interested in traffic for the specific multicast group. If IGMP snooping does not receive an IGMP Join message in response 27-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 415
Support IGMP snooping supports IGMP version 3. IGMP version 3 uses source-based filtering, which enables hosts and routers to specify which source addresses should be allowed or blocked for a specific OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 416
3 reports is not supported in hardware. The states are maintained only in software and used for explicit query interval. Proxy reporting is turned on by default. When you disable proxy reporting, the switch Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 417
server. Refer to the Cisco IOS IP Configuration Guide, Release 12.2, "Configuring IP Multicast Routing," at this URL: http://www.cisco.com/en/US/docs/ios/12_2/ip/configuration/guide/1cfmulti.html OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 418
VLAN, perform this task: Step 1 Step 2 Command Router(config)# interface vlan vlan_ID Router(config-if)# ip address ip_address subnet_mask Purpose Selects the VLAN interface. Configures the IP address and IP subnet. 27-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 419
Leave Processing, page 27-12 • Configuring Source Specific Multicast (SSM) Mapping, page 27-12 • Configuring IGMPv3 Explicit Host Tracking, page commands are supported only on VLAN interfaces. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 420
perform this task: Command Step 1 Router(config)# interface vlan vlan_ID Step 2 Router(config-if)# ip igmp snooping Router(config-if)# no ip igmp snooping Step 3 Router(config-if)# end # 27-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 421
if hosts are still interested in a specific multicast group. Note When both IGMP fast-leave processing and the IGMP query interval are configured, fast-leave processing takes precedence. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 27-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 422
mapping in a VLAN that supports IGMPv3 multicast receivers. To configure SSM mapping, refer to this publication: http://www.cisco.com/en/US/docs/ios/12_3t/12_3t2/feature/guide/gtssmma.html 27-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 423
end Router# show ip igmp snooping explicit-tracking vlan 25 Source/Group Interface Reporter Filter_mode 10.1.1.1/226.2.2.2 Vl25:1/2 16.27.2.3 INCLUDE 10.2.2.2/226.2.2.2 Vl25:1/2 16.27.2.3 INCLUDE OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 424
address multicast entries for a VLAN, perform this task: Command Router# show mac show mac-address-table multicast vlan 1 vlan mac address type qos ports 1 0100.5e02.0203 static -- Gi1/1,Gi2/1,Fa3/ Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 425
To display IGMP snooping statistics, perform this task: Command Router# show ip igmp snooping statistics interface vlan_ID Purpose Displays IGMP snooping information on a VLAN interface. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 27-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 426
IGMP Snooping Chapter 27 Configuring IGMP Snooping for IPv4 Multicast Traffic This example shows IGMP snooping statistics information for 01:47 Last-Join 00:00:50 00:00:50 Last-Leave - 27-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 427
of traffic and flooding that results in networks without PIM snooping enabled and the flow of traffic and traffic restriction when PIM snooping is enabled. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 28-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 428
Understanding How PIM Snooping Works Chapter 28 Configuring PIM Snooping Figure 28-1 shows the flow of a PIM join Receiver IGMP join (*, G) PIM join Router A Router B RP Source 99474 28-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 429
Chapter 28 Configuring PIM Snooping Understanding How PIM Snooping Works Figure 28-3 shows the Router C Router D SP network G traffic Receiver Router A Router B RP Source Data 99475 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 28-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 430
are supported for configure PIM snooping: • Enabling PIM Snooping Globally, page 28-5 • Enabling PIM Snooping in a VLAN, page 28-5 • Disabling PIM Snooping Designated-Router Flooding, page 28-6 28-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 431
pim snooping Router(config-if)# end Router# show ip pim snooping vlan 10 3 neighbors (0 DR priority incapable, 0 Bi-dir incapable) 6 mroutes, 3 mac entries DR is 10.10.10.4 RP DF Set Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 28-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 432
Exits configuration mode. Verifies the configuration. This example shows how to disable PIM snooping designated-router flooding: Router(config)# no ip pim snooping dr-flood Router(config)# end 28-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 433
on a router, the router must send an RGMP bye message to the Catalyst 6500 series switch. Table 29-1 provides a summary of the RGMP packet types. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 29-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 434
is not supported in networks where RGMP is enabled on routers. You cannot enable both RGMP and CGMP on a Layer 3 interface. If RGMP is enabled on a Layer 3 interface, CGMP is silently disabled and vice versa. 29-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 435
port 3/3: Router# configure terminal Enter configuration commands, one per line. Router(config)# interface fastethernet 3/3 Router(config-if)# ip rgmp Router(config-if)# end Router# End with CNTL/Z. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 436
Enabling RGMP on Layer 3 Interfaces Chapter 29 Configuring RGMP 29-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 437
Unicast Reverse Path Forwarding Check, page 30-2 Configuring MAC Address-Based Traffic Blocking To block all traffic to or from a MAC address in a specified VLAN, perform this task: OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 30-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 438
supports up to eight reverse-path interfaces (the Cisco IOS software is limited to eight reverse paths in the routing table). There are four methods of performing Unicast RPF check in Cisco IOS: • Strict Unicast RPF check 30-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 439
mode, which only verifies that the source IP address exists in the FIB table. Note The most recently configured mode is automatically applied to all ports configured for Unicast RPF check. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 30-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 440
the configuration: Router# show running-config interface gigabitethernet 4/2 Building configuration... Current configuration : 114 bytes ! interface GigabitEthernet4/2 ip address 42.0.0.1 255.0.0.0 30-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 441
-path interfaces (these packets always pass the Unicast RPF check). This example shows how to configure punt as the multiple path RPF check mode: Router(config)# mls ip cef rpf mpath punt OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 30-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 442
how to enable self-pinging: Router(config)# interface gigabitethernet 4/1 Router(config-if)# ip verify unicast source reachable-via any allow-self-ping Router(config-if)# end 30-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 443
messages, which allows all access group-denied packets to be dropped in hardware. • ICMP unreachable messages are not sent if a packet is denied by a VACL. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 31-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 444
in software. Note Idle timeout is not configurable. Catalyst 6500 series switches do not support the access-enable host timeout command. • Except on MPLS Protocol type-code access list 31-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 445
hardware support for the following: - Reflexive ACLs - ACLs used to filter traffic for other features (for example, QoS) - Exception packets (for example, TTL failure and MTU failure) - Packets with IP options OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 446
if the entry is inactive for this duration it is removed from the cache. - Range: 5-86,400 (1440 minutes or 24 hours, entered without commas). - Default: 300 seconds (5 minutes). 31-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 447
guidelines and restrictions when configuring ACLs that include Layer 4 port operations: • Determining Layer 4 Operation Usage, page 31-6 • Determining Logical Operation Unit Usage, page 31-6 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 31 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 448
and Restrictions for Using Layer 4 Operators in ACLs Chapter 31 Understanding Cisco IOS ACL Support Determining Layer 4 Operation Usage You can specify these types of operations Dst gt 10 31-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 449
Chapter 31 Understanding Cisco IOS ACL Support Guidelines and Restrictions for Using Layer 4 Operators in ACLs A more one more) • LOU 4 stores "range 11 13" (range needs the entire LOU) OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 31-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 450
Guidelines and Restrictions for Using Layer 4 Operators in ACLs Chapter 31 Understanding Cisco IOS ACL Support 31-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 451
to all packets and can be applied to any VLAN or WAN interface. VACLS are processed in hardware. VACLs use Cisco IOS ACLs. VACLs ignore any Cisco IOS ACL fields that are not supported in hardware. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 452
packets. For routed or Layer 3-switched packets, the ACLs are applied in the following order: 1. VACL for input VLAN 2. Input Cisco IOS ACL 3. Output Cisco IOS ACL 4. VACL for output VLAN 32-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 453
Understanding VACLs Figure 32-2 Applying VACLs on Routed Packets Routed Input IOS ACL Bridged VACL Host A (VLAN 10) MSFC Supervisor Engine Output IOS ACL VACL Bridged Host B (VLAN 20) 120554 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 454
, page 32-6 • Configuring a Match Clause in a VLAN Access Map Sequence, page 32-6 • Configuring an Action Clause in a VLAN Access Map Sequence, page 32-7 • Applying a VLAN Access Map, page 32-8 32-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 455
VACL capture is configured on an egress interface together with another egress feature that requires software processing of the traffic, packets of the overlapping traffic may be captured twice. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 456
," at this URL: http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfacls.html See the "VLAN Access Map Configuration and Verification Examples" section on page 32-9. 32-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 457
interfaces do not support the drop, forward, or redirect actions. • Forwarded packets are still subject to any configured Cisco IOS security ACLs. Configuration and Verification Examples" section on page 32-9. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 458
Configuration and Verification Examples" section on page 32-9. Verifying VLAN Access Map Configuration To verify VLAN access map configuration, perform or channel group descriptor 32-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 459
dropped due to the default drop action. The map Configuring the Layer 2 Switching Port as an ISL or 802.1Q Trunk" section on page 8-8 and the "Configuring the Layer 2 Trunk Not to Use DTP" section on page 8-9). OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 460
configured destination VLAN list and returns vlan to the default value (all). Step 3 Router(config-if)# switchport capture Configures Configured on VLANs: Active on VLANs: Router# 2,4-6 2,4-6 32-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL- - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 461
The default is 500 with a configure global VACL logging in hardware: Router(config)# vlan access-log maxflow 800 Router(config)# vlan access-log ratelimit 2200 Router(config)# vlan access-log threshold 4000 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 462
Configuring VACL Logging Chapter 32 Configuring VLAN ACLs 32-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 463
Default Configuration, page 33-19 • CoPP Configuration Guidelines and Restrictions, page 33-19 • Configuring CoPP, page 33-20 • Monitoring CoPP, page 33-21 • Defining Traffic Classification, page 33-22 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 464
QoS Rate Limiting, page 33-3 • uRPF Check, page 33-3 • Traffic Storm Control, page 33-4 • Network Under SYN Attack, page 33-4 • ARP Policing, page 33-5 • Recommended Rate-Limiter Configuration 33-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 465
discarded. Cisco Express Forwarding (CEF) tables are used to verify that the source addresses and the interfaces on which they were received are consistent with the FIB tables on the supervisor engine. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 466
check with ACL is not supported in any PFC3B in also cause trouble on the PISA because return ends: • The total incomplete connections • Connection requests during the last one-minute sample period 33-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 467
protocol arp command: Router(config)# mls qos protocol arp ? pass-through pass-through keyword police police keyword precedence change ip-precedence(used to map the dscp to cos value) OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 33-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 468
limiter on VACL logging unless you configure VACL logging. • Disable redirects because a platform that supports hardware forwarding, such as the Catalyst • Multicast IPv4 • Multicast IPv6 33-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 469
example shows how to rate limit the uRPF check failure packets sent to the PISA to 100000 pps with a burst of 100 packets: Router(config)# mls rate-limit unicast ip rpf-failure 100000 100 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 33-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 470
the register if you have manually enabled the feature. FIB ( PISA. This situation occurs when traffic enters a port and contains the destination of a host on a subnet that is locally connected to the 33-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 471
to 5000 pps (the range for this rate limiter is from 10 to 5000 pps): Router(config)# mls rate-limit unicast acl vacl-log 5000 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 33-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 472
uses truncated mode for traffic between fabric-enabled modules when there are both fabric-enabled and nonfabric-enabled modules installed. In this mode, the switch sends l2pt 10000 10 33-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 473
This rate limiter limits the IPv6 multicast packets. Table 33-1 lists the IPv6 rate limiters and the class of traffic that each rate limiter serves. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 33-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 474
ipv6 connected 1500 20 This example shows how to configure a direct association of the rate limiters for a traffic class: Router(config)# mls rate-limit multicast ipv6 default-drop 1000 20 33-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 475
ON 100000 pps, burst of 100 packets ON 100000 pps, burst of 100 packets OFF OFF ON If the packets-in-burst is not set, a default of 100 is programmed for multicast cases. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 33-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 476
and restrictions, see the "CoPP Configuration Guidelines and Restrictions" section on page 33-19. • These rate limiters are supported: - Unicast IP options - Multicast capture destination. 33-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 477
configure terminal Enter configuration commands, one per line. End Command The PFC3B supports ACL hit counters TOS - TOS Value - A -ACK rtr - Router MRFM - M -MPLS Packet TN - T -Tcp Control - P -PSH COD - C - OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 478
, VACL capture granularity is only applicable to traffic switched locally; you cannot preserve the granularity if you direct traffic to a remote switch. 33-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 479
On/Sharing indicates that a particular case (not manually configured) is affected by the configuration of another rate limiter belonging to the same Group:0 S Group:0 S Group:0 S Group:0 S - OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 33-17 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 480
policy for packets matching the rate-limiter criteria. The traffic managed by the PISA is divided into three functional components or planes: • Data plane • Management plane • Control plane 33-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 481
connection. • The PFC3B supports built-in special-case qos commands to troubleshoot evaluate CPU traffic. • CoPP is performed on a per-forwarding-engine basis and software CoPP is performed on an aggregate basis. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 482
service policy map. Use the police statements to associate actions to the service policy map. Enters the control plane configuration mode. Applies the QoS service policy to the control plane. 33-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 483
, 0 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: access-group 130 police: 96000 bps, 3125 limit, 3125 extended limit conformed 0 packets, 0 bytes; action: transmit OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 33-21 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 484
the policy, enter the show mls qos ip command: Router# show mls qos ip QoS Summary [IP]: (* - shared aggregates, Mod - switch module) Int Mod Dir Class-map DSCP transfer protocol (FTP). 33-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 485
You do not have to define policies that match bidirectionally. You only need to identify traffic unidirectionally (from the network to the PISA) since the policy is applied on ingress only. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 33-23 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 486
bgp This example shows how to allow BGP from a peer's BGP port to this switch: Router(config)# access-list 120 permit tcp host 47.1.1.1 eq bgp switch from a host in a specific subnet and police the rest of Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 487
shows how to enable sticky ARP on interface 5/1: Router# configure terminal Router(config)# interface gigabitethernet 5/1 Router(config-if)# ip sticky-arp Router(config-if)# end Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 33-25 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 488
Configuring Sticky ARP Chapter 33 Configuring Denial of Service Protection 33-26 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 489
is sent from a device that is not in the service-provider network, such as a customer's switch. Messages from unknown devices are untrusted because they can be sources of traffic attacks. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 34-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 490
addresses match (the default), the switch forwards To support trusted configured with a helper address to enable broadcast forwarding and to transfer DHCP messages between the clients and the server. 34-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 491
the circuit ID type • Remote ID suboption fields - Suboption type - Length of the suboption type - Remote ID type - Length of the circuit ID type Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 34-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 492
Circuit type ID type Length Length 1604 VLAN Module Port 1 byte 1 byte 1 byte 1 entry-2> ... ... END Each entry in the file is tagged with a checksum Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 493
interface associated with a binding. At the end of each entry is a checksum that The writes are performed with a configurable delay to batch as Default Value/State Disabled Enabled Disabled None Untrusted Disabled OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 494
: DHCP Snooping configuration may not take effect on secondary vlan XXX - The show ip dhcp snooping command displays all VLANs (both primary and secondary) that have DHCP snooping enabled. 34-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 495
snooping globally, the switch drops DHCP requests until you configure the ports. To enable DHCP snooping globally, perform this task: Step 1 Step 2 Command Router( or to deny ARP packets. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 34-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 496
configure terminal Enter configuration commands, one per line. End , perform this default setting is disabled. Disables the DHCP option 82 on untrusted port feature. Verifies the configuration. 34-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 497
Router# configure terminal Enter configuration commands, one per line. End with CNTL . To enable DHCP snooping MAC address verification, perform this task: Step 1 Step 2 Command Router configuration. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 498
snooping is configured on the following Interfaces: Insertion of option 82 is enabled Verification of hwaddr field is enabled Interface Trusted ------- Router# Rate limit (pps 34-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 499
)# ip dhcp snooping trust Configures the interface as trusted. Router(config-if)# no ip dhcp snooping trust Reverts to the default (untrusted) state. Router /12 no unlimited Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 34-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 500
FastEthernet5/12 no 100 Router# Configuring the DHCP Snooping Database Agent To configure the DHCP snooping database agent, perform one or more of the following with the database agent. 34-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 501
configuration and operating state: Router# configure terminal Router(config)# ip dhcp snooping database tftp://10.1.1.1/directory/file Router(config)# end 0 First successful access: Read OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 34-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 502
been ignored because the indicated VLAN is not supported on the system. The Parse failures counter Entries from a TFTP File To manually read the entries from a TFTP file, perform this task: Step 1 Step 2 Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 503
34 Configuring DHCP Snooping Configuring DHCP Snooping This is an example of how to manually read /1): ! [OK - 457 bytes] Database downloaded successfully. Router# 00:01:29: %DHCP_SNOOPING OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 504
lease time Binding type; dynamic binding learned by DHCP snooping or statically-configured binding. VLAN number of the client interface Interface that connects to the DHCP client host 34-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 505
Catalyst Supervisor Engine 32 PISA Cisco IOS Command Reference, Release 12.2ZY, at this URL: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2ZY/command/reference/cmdref.h tml This chapter consists of these sections: • Understanding DAI, page 35-1 • Default DAI Configuration, page - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 506
DAI ensures that only valid ARP requests and responses are relayed. The switch performs these activities: • Intercepts all ARP requests and responses on untrusted ports • ARP packets 35-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 507
dropped by Switch B. Connectivity between Host 1 and Host 2 is lost. Figure 35-2 DHCP server ARP Packet Validation on a VLAN Enabled for DAI A Port 6/3 B Port 3/3 130194 OL-11439-03 Host 1 Host 2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 35-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 508
DAI. For configuration information, see the "Sample Two: One Switch Supports DAI" performs DAI validation checks, which rate limits incoming ARP packets to prevent a denial-of-service attack. By default Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 509
responses. Make sure to enable DHCP snooping to permit ARP packets that have dynamically assigned IP addresses. For configuration information, see Chapter 34, "Configuring DHCP Snooping." OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 35-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 510
, page 35-9 • Enabling DAI Error-Disabled Recovery, page 35-10 • Enabling Additional Validation, page 35-11 • Configuring DAI Logging, page 35-12 • Displaying DAI Information, page 35-15 35-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 511
Deny Deny Deny Configuring the DAI Interface Trust State The switch does not check ARP packets that it receives from the other switch on the trusted interface. It simply forwards the packets. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 512
| vlan_range} [static] Router(config)# do show ip arp inspection vlan {vlan_ID | vlan_range} Purpose Enters global configuration mode. Applies the ARP ACL to a VLAN. Verifies your entries. 35-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 513
Enters global configuration mode. Selects the interface to be configured. (Optional) Configures ARP packet rate limiting. Clears the ARP packet rate-limiting configuration. Verifies the configuration. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 514
disabled by default). Disables DAI error disabled recovery. Verifies the configuration. This example shows how to enable DAI error disabled recovery: Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. 35-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 515
validate src-mac Router(config)# do show ip arp inspection | include abled$ Source Mac Validation : Enabled Destination Mac Validation : Disabled IP Address Validation : Disabled OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 35-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 516
mac, dst-mac, and ip additional validation: Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# ip arp inspection validate src entry. 35-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 517
the log buffer is always empty). An interval setting of 0 overrides a log setting of 0. • System messages are sent at the rate of number_of_messages per length_in_seconds. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 35-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 518
match DHCP bindings. • dhcp-bindings none-Does not log packets that match DHCP bindings. • dhcp-bindings permit-Logs DHCP-binding permitted packets. 35-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 519
not to log packets that match ACLs: Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# ip arp inspection vlan appropriate failure count. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 35-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 520
Repeater, P - Phone Device ID SwitchB SwitchA# Local Intrfce Fas 6/3 Holdtme 177 Capability Platform Port ID R S I WS-C6506 Fas 3/3 Enable DAI on VLAN 1 and verify the configuration: 35-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 521
Step 3 Configure Fast Ethernet port 6/3 as trusted: SwitchA# configure terminal Enter configuration commands, one per line. End with CNTL/Z. 1 0 SwitchA# IP Validation Failures 0 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 35-17 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 522
, P - Phone Device ID SwitchB SwitchB# Local Intrfce Fas 3/3 Holdtme 120 Capability Platform Port ID R S I WS-C6506 Fas 6/3 Enable DAI on VLAN 1, and verify the configuration: 35-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 523
Configuration Samples SwitchB# configure terminal Enter configuration commands, one per line. SwitchB(config)# ip arp inspection vlan 1 SwitchB(config)# end SwitchB# show ip arp inspection vlan 1 End Failures OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 524
is not static, which would make it impossible to apply the ACL configuration on Switch A, you must separate Switch A from Switch B at Layer 3 and use a router to route packets between them. 35-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 525
ip arp inspection trust SwitchA(config-if)# end Switch# show ip arp inspection interfaces fastethernet 6/3 Interface Trust State Fa6/3 Untrusted Rate (pps) ---------- 15 Switch# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 35-21 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 526
------- ---------- ---------- 1 5 0 0 0 Vlan DHCP Permits ACL Permits Source MAC Failures 1 0 5 0 Vlan Dest MAC Failures IP Validation Failures 1 0 0 Switch# 35-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 527
example, traffic storm control occurs between times T1 and T2 and between T4 and T5. During those intervals, the amount of broadcast traffic exceeded the configured threshold. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 36-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 528
drops all broadcast and multicast traffic until the end of the traffic storm control interval. Default Traffic Storm Control Configuration Traffic storm control is disabled by default. 36-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 529
modules: - WS-X6748-SFP - WS-X6724-SFP - WS-X6748-GE-TX - WS-X6748-GE-TX - WS-X6704-10GE - WS-SUP32-GE-3B - WS-SUP32-10GE-3B When multicast suppression is enabled on the listed modules, do not configure OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12. - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 530
shows how to enable multicast traffic storm control on Gigabit Ethernet interface 3/16 and how to configure the traffic storm control level at 70.5 percent: Router# configure terminal 36-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 531
-tree portfast edge Router# end Router# configure terminal Router(config)# interface control Router# show interfaces counters storm-control [module slot_number] Displays the total number of packets OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12. - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 532
Displaying Traffic Storm Control Settings Chapter 36 Configuring Traffic Storm Control 36-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 533
specific port, only permitting egress traffic with MAC addresses that are known to exist on the port. The UUFB and UMFB features are supported on all ports that are configured 24 range. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 37-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 534
Configuring Unknown Unicast and Multicast Flood Blocking Configuring UUFB or UMFB To configure UUFB or UFMB, perform this task: Step 1 Step 2 Step 3 Step 4 Step 5 Command Router# configure 37-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 535
QoS Default Configuration, page 38-25 • PFC QoS Configuration Guidelines and Restrictions, page 38-39 • Configuring PFC QoS, page 38-44 • Common QoS Scenarios, page 38-92 • PFC QoS Glossary, page 38-102 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 536
is implemented in the port ASICs, Catalyst 6500 series switches do not support MQC-configured queuing. Figure 38-1 shows an overview of QoS processing in a Catalyst 6500 series switch. 38-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 537
Ethernet LAN port QoS features: - Layer 3 DSCP marking with the final internal DSCP (optional) - Layer 2 CoS marking mapped from the final internal DSCP - Layer 2 CoS-based congestion avoidance. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 538
-3 switched by the PFC3B or routed in software by the PISA. - Egress PFC QoS and egress LAN-port QoS can be applied to LAN-port egress traffic (not supported with PISA-accelerated features). 38-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 539
sections provide an overview of the ingress port QoS features: • Flowchart of Ingress LAN Port PFC QoS Features, page 38-6 • Port Trust, page 38-7 • Ingress Congestion Avoidance, page 38-7 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 540
is set to trust-cos Yes Yes Ingress CoS Mutation? Mutate CoS No Ingress queues and drop thresholds To PFC Note Ingress CoS mutation is supported only on 802.1Q tunnel ports. 144807 38-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 541
, page 38-10 Supported Policy Feature Cards The policy feature card (PFC3B) is a daughter card that resides on the supervisor engine. The PFC3B provides QoS in addition to other functionality. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 542
policer statistics Basis of policer operation PFC3B Source Destination IP, MAC Optional Optional Yes Yes 1022 64 rates 110,000 Bytes Layer 2 length 38-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 543
Configuring PFC QoS Understanding How PFC QoS Works Figure 38-5 Figure 38-5 shows how traffic flows through the QoS features on the PFC3B. QoS Features on the PFC3B Ingress PFC QoS . OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 544
value. For trust CoS traffic and trust IP precedence traffic, PFC QoS uses configurable maps to derive the initial internal 6-bit DSCP value from CoS or subsequently applied QoS features. 38-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 545
Values, page 38-12 • Egress DSCP Mutation with a PFC3B, page 38-12 • Egress ToS Byte, page 38-13 • Egress PFC QoS Interfaces, page 38-13 • Egress ACL Support for Remarked DSCP, page 38-13 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 546
egress DSCP mutation maps to any interface that PFC QoS supports. Note If you configure egress DSCP mutation, PFC QoS does not derive the egress CoS value from the mutated DSCP value. 38-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 547
2 feature matches the ingress-QoS-modified IP precedence or DSCP value, the Layer 2 feature might redirect or drop the matched packets, which prevents them from being processed by egress QoS. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 548
a policy map to trust IP precedence or DSCP, which uses the trusted value as the basis of the initial internal DSCP value, instead of the QoS label that was trusted at the port. 38-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 549
(except FlexWAN interfaces) • Each EtherChannel port-channel interface • Each VLAN interface You can attach one policy map to each Layer 3 interface to apply egress PFC QoS. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 550
the QoS Services Accelerator (PISA) marking IP traffic Yes from PFC? No Write ToS byte into packet Process traffic 182575 CoS = IP precedence for all traffic (not configurable) To egress port 38-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 551
supported on some WAN modules. For more information about traffic shaping on the FlexWAN module, refer to the FlexWAN QoS documentation at this URL: http://www.cisco.com and mark traffic OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-17 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 552
in VLAN 3, the microflow policer allows each of these flows 1 Mbps. You can configure PFC QoS to apply the bandwidth limits in a microflow policer as follows: • You can create aggregately. 38-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 553
switch LAN modules: • Ingress and Egress Buffers and Layer 2 CoS-Based Queues, page 38-20 • Ingress Queue Types, page 38-21 • Egress Queue Types, page 38-22 • Module to Queue Type Mappings, page 38-23 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 554
QoS allocates the port ASIC memory as buffers for each queue on each port. The Catalyst 6500 series switch LAN modules support each queue is user configurable. The percentage or weight allocated to a queue Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 555
1 Receive queue (Default values shown) 26249 Ingress configurable tail-drop thresholds. • 8q8t indicates eight standard queues, each with eight thresholds, each configurable as either WRED-drop or tail-drop. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 556
threshold • 1p3q8t indicates the following: - One strict-priority queue - Three standard queues, each with eight thresholds, each threshold configurable as either WRED-drop or tail-drop 38-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 557
- Egress Queue and Drop Thresholds Egress Queue Scheduler 1p3q1t DWRR Total Buffer Ingress Egress Size Buffer Size Buffer Size 1,116 KB 28 KB 1,088 KB OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-23 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 558
Queue and Drop Thresholds Egress Queue Scheduler 1p2q2t WRR Total Buffer Ingress Egress Size Buffer Size Buffer Size 1.4 MB 185 KB 1.2 MB 38-24 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 559
sections describe the PFC QoS default configuration: • PFC QoS Global Settings, page 38-26 • Default Values with PFC QoS Enabled, page 38-27 • Default Values with PFC QoS Disabled, page 38-38 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 560
-down DSCP value equals original DSCP value (no markdown) Policers None Policy maps None Protocol-independent MAC ACL filtering Disabled VLAN-based MAC ACL QoS filtering Disabled 38-26 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 561
: 15% Strict priority 15% Low priority: 70% High priority: 15% Strict priority 15% Low priority: 50% Medium priority: 20% High priority: 15% Strict priority 15% OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-27 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 562
values shown are the values in effect when the port is configured to trust CoS or DSCP. When the port is untrusted, the receive queue values are the same as when QoS is globally disabled. 38-28 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 563
50% WRED-drop Not supported CoS 2 and 3 Tail-drop 60% WRED-drop Not supported CoS 4 and 5 Tail-drop 80% WRED-drop Not supported CoS 6 and 7 Tail-drop 100% WRED-drop Not supported OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 564
receive queue Strict-priority receive queue Default Value CoS 0, 1, 2, 3, 4, 6, and 7 Tail-drop 100% (nonconfigurable) WRED-drop Not supported CoS 5 Tail-drop 100% (nonconfigurable) 38-30 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 565
; 90% WRED-drop Enabled; 60% low, 90% high CoS 7 Tail-drop Disabled; 100% WRED-drop Enabled;70% low, 100% high CoS 5 Tail-drop 100% (nonconfigurable) OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-31 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 566
-drop 80% WRED-drop Not supported CoS None Tail-drop 80% WRED-drop Not supported CoS 5 Tail-drop 100% WRED-drop Not supported CoS None Tail-drop 100% WRED-drop Not supported 38-32 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 567
5-8 CoS None Tail-drop 100% WRED-drop Not supported Threshold 1 CoS 5 Tail-drop 100% WRED-drop Not supported Thresholds 2-8 CoS None Tail-drop 100% WRED-drop Not supported OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-33 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 568
Standard transmit queue 1 (low priority) Threshold 1 Threshold 2 Default Value CoS 0 and 1 Tail-drop 80% WRED-drop Not supported CoS 2 and 3 Tail-drop 100% WRED-drop Not supported 38-34 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 569
% low, 100% high CoS 4 Tail-drop Not supported WRED-drop 40% low, 70% high CoS 6 and 7 Tail-drop Not supported WRED-drop 70% low, 100% high CoS 5 Tail-drop 100% (nonconfigurable) OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-35 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 570
% low, 100% high Thresholds 2-8 CoS None Tail-drop Disabled; 100% WRED-drop Enabled; 70% low, 100% high CoS 5 Tail-drop 100% (nonconfigurable) 38-36 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 571
Chapter 38 Configuring PFC QoS PFC QoS Default Configuration 1p7q8t Transmit Queues Feature Standard transmit queue 1 (lowest low, 100% high CoS 5 Tail-drop 100% (nonconfigurable) OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-37 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 572
mapping Default Value Trust DSCP. All thresholds set to 100%. All thresholds set to 100%. 255:1. Low priority: 100% (other queues not used). All QoS labels mapped to the low-priority queue. 38-38 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 573
-source or the mls flow ip interface-full global configuration mode command. • Interface counters are not accurate on interfaces where egress ACL support for remarked DSCP is configured. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-39 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 574
For these commands, PFC QoS applies identical configuration to all LAN ports controlled by the same application-specific integrated circuit (ASIC): - rcv-queue random-detect queue bandwidth 38-40 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 575
the classmaps associated with these commands. You can view the aggregate policer count in the QoS Policer Resources section of the output of the show platform hardware capacity qos command. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-41 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 576
and PIR rate values: CIR and PIR Rate Value Range 32768 to 2097152 (2 Mbs) 2097153 to 4194304 (4 Mbs) 4194305 to 8388608 (8 Mbs) Granularity 32768 (32 Kb) 65536 (64 Kb) 131072 (128 Kb) 38-42 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 577
(16 MB) 524288 (512 KB) 16777217 to 33554432 (32 MB) 1048576 (1 MB) Within each range, PFC QoS programs the PFC3B with token bucket sizes that are multiples of the granularity values. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-43 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 578
6500 series switches: • Enabling PFC QoS Globally, page 38-45 • Enabling Ignore Port Trust, page 38-46 • Configuring DSCP Transparency, page 38-46 • Enabling Queueing-Only Mode, page 38-47 38-44 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 579
the switch. Exits configuration mode. Verifies the configuration. This example shows how to enable PFC QoS globally: Router# configure terminal Router(config)# mls qos Router(config)# end Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 580
Note In addition to support for other IP traffic, the PFC3B supports the no mls qos rewrite ip dscp command for MPLS traffic, traffic in IP in IP tunnels, and traffic in GRE tunnels. 38-46 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 581
ports that cannot be configured to trust CoS. This example shows how to enable queueing-only mode: Router# configure terminal Router(config)# mls qos queueing-only Router(config)# end Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 582
-based PFC QoS on a Layer 2 LAN port, perform this task: Step 1 Command Router(config)# interface {{type1 slot/port} | {port-channel number}} Purpose Selects the interface to configure. 38-48 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 583
IP ACL, enter the IP ACL name or number. • If you do not enter an IP ACL name or number, egress ACL support for remarked DSCP is enabled for all IP ingress IP traffic on the interface. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-49 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 584
. - For TCP traffic, configure the token bucket size as a multiple of the TCP window size, with a minimum value at least twice as large as the maximum size of the traffic being policed. 38-50 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 585
, both the input policy and the output policy must either mark down traffic or drop traffic. PFC QoS does not support ingress markdown with egress drop or ingress drop with egress markdown. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-51 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 586
Map, page 38-61 • Verifying Policy Map Configuration, page 38-66 • Attaching a Policy Map to an Interface, page 38-67 Note PFC QoS policies process both unicast and multicast traffic. 38-52 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 587
: - Policy map class trust mode - Aggregate policing and marking - Microflow policing and marking • service-policy-Enter the service-policy command to attach a policy map to an interface. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-53 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 588
be bridged or Layer 3 switched in hardware by the PFC3B. • Protocol-independent MAC ACL filtering supports microflow policing when the permitted traffic is routed in software by the PISA. 38-54 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 589
ACLs. To disable VLAN-based QoS filtering in MAC ACLs, perform this task: Command Router(config)# no mac packet-classify use vlan Purpose Disables VLAN-based QoS filtering in MAC ACLs. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-55 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 590
-idp-Xerox XNS IDP - 0x0BAD-vines-ip-Banyan VINES IP - 0x0baf-vines-echo-Banyan VINES Echo - 0x6000-etype-6000-DEC unassigned, experimental 38-56 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 591
} mac any Purpose Configures an ARP ACL for QoS filtering. Deletes an ARP ACL. Configures an access control entry (ACE) in an ARP ACL for QoS filtering. Deletes an ACE from an ARP ACL. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 592
is not supported and cannot be used to filter ARP traffic for QoS. • ACLs entries are scanned in the order you enter them. The first matching entry is used. To improve performance, place 38-58 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 593
the class map to filter using an ACL. Clears the ACL configuration from the class map. (Optional-for IPv6 traffic) Configures the class map to filter IPv6 traffic. Clears IPv6 filtering. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-59 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 594
5 Router(config-cmap)# end End with CNTL/Z. This example shows how to verify the configuration: Router# show class-map ipp5 Class Map match-all ipp5 (id 1) Match ip precedence 5 38-60 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 595
Purpose Creates a policy map class and configures it to filter with a class map. Note PFC QoS supports class maps that contain a single match command. Clears use of the class map. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-61 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 596
class action configuration: • Configuring Policy Map Class Marking, page 38-63 • Configuring the Policy Map Class Trust State, page 38-63 • Configuring Policy Map Class Policing, page 38-63 38-62 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 597
Policing with the conform-action transmit keywords sets the port trust state of matched traffic to trust DSCP or to the trust state configured by a trust command in the policy map class. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-63 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 598
. - By default and with the mask full-flow keywords, PFC QoS bases IP flow identification on source IP address, destination IP address, the Layer 3 protocol, and Layer 4 port numbers. 38-64 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 599
token bucket size is 32 megabytes, entered as 32000000 - To sustain a specific rate, set the are only supported for IP traffic. PFC QoS sets egress ToS and CoS from the configured value. - OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38- - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 600
-c)# end Step 2 Router# show policy-map policy_name Purpose Exits policy map class configuration mode. Note Enter additional class commands to create additional classes in the policy map. Verifies the configuration. 38-66 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 601
drop traffic. PFC QoS does not support ingress markdown with egress drop or ingress drop with egress markdown. This example shows how to attach the policy map named pmap1 to Fast Ethernet port 5/36: OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 602
enter multiple commands to map additional DSCP values to a mutated DSCP value. • You can enter a separate command for each mutated DSCP value. 38-68 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 603
Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# interface fastethernet 5/36 Router(config-if)# mls qos dscp-mutation mutmap1 Router(config-if)# end OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 604
the first EtherChannel. If the configuration originated on a nonmember port in a port group that has a member port of the first EtherChannel, the configuration fails on the nonmember port. 38-70 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 605
)# end Router# This example shows how to verify the map configuration: Router(config)# show mls qos maps cos-mutation COS mutation map testmap cos-in : 0 1 2 3 4 5 6 7 cos-out : 4 5 6 7 0 1 2 3 Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 606
73 • Mapping Received IP Precedence Values to Internal DSCP Values, page 38-73 • Configuring DSCP Markdown Values, page 38-74 • Mapping Internal DSCP Values to Egress CoS Values, page 38-75 38-72 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 607
internal DSCP map: Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# mls qos map ip-prec-dscp 0 1 2 3 4 5 6 7 Router(config)# end Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 608
-down DSCP value. • You can enter a separate command for each marked-down DSCP value. Note Configure marked-down DSCP values that map to CoS values consistent with the markdown penalty. 38-74 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 609
dscp-cos Router(config)# end Router# show mls qos maps Purpose Configures the internal DSCP to egress CoS map. Reverts to the default map. Exits configuration mode. Verifies the configuration. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 610
default, all ports are untrusted. You can configure the port trust state on all Ethernet LAN ports ports. Note On non-Gigabit Ethernet 1q4t/2q2t ports, you must repeat the trust configuration in a class map. 38-76 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 611
)# mls qos trust cos Router(config-if)# end Router# This example shows how to verify the configuration: Router# show queueing interface gigabitethernet 1/1 | include trust Trust state: trust COS Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 612
percentages: • Configuring a Tail-Drop Receive Queue, page 38-79 • Configuring a WRED-Drop Transmit Queue, page 38-80 • Configuring a WRED-Drop and Tail-Drop Receive Queue, page 38-81 38-78 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 613
chance of being dropped as the queue fills. Configuring a Tail-Drop Receive Queue These port types have only tail-drop thresholds in their receive-queues: • 1q2t • 1p1q4t • 2q8t • 1q8t OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-79 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 614
)# no wrr-queue random-detect min-threshold [queue_id] Purpose Selects the interface to configure. Configures the low WRED-drop thresholds. Reverts to the default low WRED-drop thresholds. 38-80 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 615
Tail-Drop Transmit Queue These port types have both WRED-drop and tail-drop thresholds in their transmit queues: • 1p3q1t (transmit) • 1p3q8t (transmit) • 1p7q8t (transmit) OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-81 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 616
Configuring PFC QoS Chapter 38 Configuring PFC QoS To configure the drop thresholds, perform this task: Command Step 1 Router(config)# interface type1 slot/port Purpose Selects the interface to configure Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439- - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 617
verify the configuration: Router# show queueing interface gigabitethernet 2/1 Transmit queues [type = 2q2t]: queue tail-drop-thresholds 1 60[1] 100[2] 2 40[1] 100[2] OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 618
standard queue thresholds can be configured as either tail-drop or WRED-drop thresholds on these port types: - 1p1q8t (receive) - 1p3q1t (transmit) - 1p3q8t (transmit) - 1p7q1t (transmit) 38-84 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 619
: Router# show queueing interface gigabitethernet 1/1 queue thresh cos-map 1 1 0 1 1 2 2 3 1 3 4 5 1 4 6 7 Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-85 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 620
default mapping. Exits configuration mode. Verifies the configuration. 1. type = fastethernet, gigabitethernet, or tengigabitethernet When mapping CoS values to the strict-priority queues, note the following information: 38-86 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 621
38 Configuring PFC QoS Configuring PFC QoS Ethernet port 1/1: Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# priority) threshold 2 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 622
serviced in a round-robin fashion: • Shaped round robin (SRR)-SRR allows a queue to use only the allocated bandwidth. Supported as an option on Supervisor Engine 32 SFP 1p3q8t ports. • Deficit weighted Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 623
-if)# end Router# show queueing interface type1 slot/port Reverts to the default bandwidth allocation. Exits configuration mode. Verifies the configuration. 1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 624
terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# interface fastethernet 2/2 Router(config-if)# rcv-queue queue-limit 75 15 Router(config-if)# end 38-90 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 625
on the interface (2, 3, or 7 weights). • Valid values are from 1 to 100 percent, except on 1p2q1t egress LAN ports, where valid values for the high priority queue are from 5 to 100 percent. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-91 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 626
. This is the basic port configuration: Access Layer switchport mode access switchport access vlan 10 switchport voice vlan 110 Distribution and Core Interswitch Links switchport mode trunk 38-92 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 627
than when PFC QoS is disabled. These problems with the PFC QoS default configuration can have a negative effect on network performance. Classifying Traffic from have different priorities. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38-93 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 628
way to support three different classes of service on the configuring the QoS policy is to define the class maps. These class maps associate the identifying ACLs with the QoS actions that you want to perform Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 629
Port QoS Port QoS is enabled To ensure that the class map configuration is correct, enter this command: Router# show class-map Class Map match-all CLASSIFY-OTHER (id 1) Match access-group name CLASSIFY-OTHER OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 630
traffic types. The configuration was done with the MQC QoS policy syntax, which allows you to apply different marking or trust actions to the different traffic classes arriving on a port. 38-96 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 631
switch Ethernet modules also have input queue structures, but these are used less often, and because there probably will not be congestion within the switch fabric, this example does not include them. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 632
. This example shows how to display the DSCP-to-CoS mapping: Router# show mls qos maps dscp-cos Dscp-cos map: d1 : d2 0 1 2 3 4 5 2 4 2 5 2 6 2 7 2 8 3 1 6 7 3 2 3 3 3 4 38-98 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 633
QoS values (high, medium, and low), so you can assign each CoS value to a separate queue and use the default the LAN switching modules are strict priority (SP) queueing and weighted round robin OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 634
configuration after traffic has been mapped to it. The WRR queues have a default bandwidth allocation that might be sufficient for your network; if it is not, then you can change the relative weights Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 635
. The PFC3 supports a dual-rate service-policy input IPPHONE-PC To monitor the policing operation, use these commands: show policy-map interface fastethernet 5/1 show class-map show mls qos ip fastethernet 5/1 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 636
processing devices. Sometimes referred to as a packet buffer. • Class of Service (CoS) is a Layer 2 QoS label carried in three bits of either an ISL, 802.1Q, or • Labels-See QoS labels. 38-102 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 637
store data on a port. • QoS labels-PFC QoS uses CoS, DSCP, and IP Precedence as QoS labels. QoS labels are prioritization values carried in 63. • Weight-ratio of bandwidth allocated to a queue. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 38 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 638
PFC QoS Glossary Chapter 38 Configuring PFC QoS 38-104 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 639
39-7 • MPLS QoS Default Configuration, page 39-15 • MPLS QoS Commands, page 39-16 • MPLS QoS Restrictions and Guidelines, page 39-17 • Configuring MPLS QoS, page 39-17 • MPLS DiffServ Tunneling Modes, page 39-31 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 640
periods of congestion. • Packets carry traffic at Layer 3. • Policing is limiting bandwidth used by a flow of traffic. Policing can mark or drop traffic. 39-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 641
bits in the received topmost label of received MPLS packets (after a policy is installed). See the "Configuring a Class Map to Classify MPLS Packets" section on page 39-20 for information. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 642
for each transmitted packet the service specified for that packet by its QoS. Service can be specified in different ways, for example, using the IP precedence bit settings in IP packets. 39-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 643
core of the network of the service provider • PE2-service provider egress LER • CE2-Customer equipment 2 Note PE1 and PE2 are at the boundaries between the MPLS network and the IP network. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 644
LER (or other core device) arrive at the core LSR. 2. The PFC3B receives the traffic from the input interface and uses the EXP bits to perform classification, marking, and policing. 39-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 645
in QoS TCAM separately for ingress and egress lookup. The ternary content addressable memory (TCAM) egress lookup takes place after the IP forwarding table (FIB) and NetFlow lookups are completed. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 646
for IP-to-MPLS, page 39-9 • Classification for IP-to-MPLS MPLS QoS, page 39-10 • Classification at IP-to-MPLS Ingress Port, page 39-10 • Classification at IP-to-MPLS Egress Port, page 39-10 39-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 647
based on the internal DSCP-to-CoS global map. If the default internal DSCP-to-EXP and the internal DSCP-to-CoS maps are consistent, then the egress CoS has the same value as the imposed EXP. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 648
section provides information about the MPLS-to-IP MPLS QoS classification. Additionally, this section provides information about the capabilities provided by the ingress and egress modules. 39-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 649
EXP value. OSM and FlexWAN interfaces classify traffic using the match mpls experimental command. The match mpls experimental command matches on the EXP value in the received topmost label. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 650
QoS features are supported: • General MPLS QoS features for IP packets • Classification, policing, or marking of CE-to-PE IP traffic through the VPN subinterface • Per-VPN QoS (per-port, per-VLAN, or per-subinterface) 39-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 651
-to-CoS global map. If the DSCP maps are consistent, then the egress CoS is based on the EXP value in the topmost outgoing label. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 652
the egress CoS; it does not match on the EXP in the topmost label. If the egress port is a trunk, the LAN ports and OSM GE-WAN ports copy the egress CoS into the egress 802.1Q field. 39-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 653
to EXP map (EXP set from DSCP values) DSCP 0-7 = EXP 0 DSCP 8-15 = EXP 1 DSCP 16-23 = EXP 2 DSCP 24-31 = EXP 3 DSCP 32-39 = EXP 4 DSCP 40-47 = EXP 5 DSCP 48-55 = EXP 6 DSCP 56-63 = EXP 7 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 654
mutation • mls qos exp-mutation • show mls qos mpls • no mls qos mpls trust exp Note For information about supported non-MPLS QoS commands, see "Configuring PFC QoS" section on page 38-44. 39-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 655
configure MPLS QoS: • Enabling QoS Globally, page 39-18 • Enabling Queueing-Only Mode, page 39-19 • Configuring a Class Map to Classify MPLS Packets, page 39-20 • Configuring the MPLS Packet Trust State on Ingress Ports, page 39-22 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 656
or Portchannel(Multi-Earl) policies supported: Yes Egress policies supported: Yes ----- Module [5] ----QoS global counters: Total packets: 3 MPLS packets with EXP changed by policing: 0 39-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439- - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 657
original EXP value (in the absence of EXP mutation). - Imposing an additional label when QoS is disabled, the EXP value is based on the original EXP value (in the absence of EXP mutation). OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-19 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 658
configuration : 173 bytes ! interface FastEthernet3/27 ip address 47.0.0.1 255.0.0.0 tag-switching ip end Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. 39-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 659
, Mod - switch module) Int Mod Dir Class-map DSCP Agg Trust Fl AgForward-By AgPoliced-By Id Id Vl300 5 In x 44 1 No 0 0 0 Fa3/27 5 Out iptcp 24 2 -- 0 0 0 All 5 - Default 0 0* No 0 3466610741 0 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 660
2 and Layer 3 packets; use this command only on interfaces with Layer 2 switched packets. • The no mls qos mpls trust exp command affects ingress marking; it does not affect classification. 39-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 661
-map ip2tag Policy Map ip2tag Class iptcp set mpls experimental imposition 3 Router# show class iptcp Class Map match-all iptcp (id 62) Match access-group101 Router# configure terminal OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-23 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 662
, follow these guidelines and restrictions: • Use the set mpls experimental imposition command during label imposition. This command sets the MPLS EXP field on all imposed label entries. 39-24 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 663
. This is an example of creating a policy map with a policer: Router(config)# policy-map ip2tag Router(config-pmap)# class iptcp Router(config-pmap-c)# no set mpls exp topmost 3 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-25 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 664
0 bps, drop rate 0 bps Match: any R7# show mls qos ip QoS Summary [IPv4]: (* - shared aggregates, Mod - switch module) Int Mod Dir Class-map DSCP Agg Trust Fl AgForward-By AgPoliced-By 39-26 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 665
a MPLS QoS policy map class summary, perform this task: Command Router# show mls qos mpls [{interface interface_type interface_number} | {module slot} Purpose Displays a MPLS QoS policy map class summary. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 666
These sections describe how to configure MPLS QoS egress EXP mutation: • Configuring Named EXP Mutation Maps, page 39-29 • Attaching an Egress EXP Mutation Map to an Interface, page 39-29 39-28 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 667
example shows how to attach the egress EXP mutation map named mutemap2: Router(config)# interface fastethernet 3/26 Router(config-if)# mls qos exp-mutation mutemap2 Router(config-if)# end OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-29 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 668
configuration mode. Verifies the configuration. This example shows how to configure a named egress-DSCP to egress-EXP map: Router(config)# mls qos map dscp-exp 20 25 to 3 Router(config)# 39-30 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 669
header and not the MPLS header. Note The presence of an egress IP policy (based on the customer's PHB marking and not on the provider's PHB marking) automatically implies the Short Pipe mode. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 670
the PHB of a packet, that change must be propagated to all encapsulation markings. The propagation is performed by a router only when a PHB is added or exposed due to label imposition or 39-32 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 671
precedence bits are 3, the BGP label and the IGP label also contain 3 because in Uniform mode, the labels always are identical. The packet is treated uniformly in the IP and MPLS networks. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-33 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 672
OSM port must be untrusted. FlexWAN ports do not have the trust concept, but, as with traditional Cisco IOS routers, the ingress ToS is not changed (unless a marking policy is configured). 39-34 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 673
GE-WAN 3/1.31 Router(config-if)# service-policy input set-MPLS-PHB Configuring Ingress PE Router-P Facing Interface This procedure classifies packets based on their MPLS EXP field and provides appropriate discard and scheduling treatments. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 674
bandwidth percent 40 Router(config-p-map)# class class-default Router(config-p-map-c)# random-detect Router(config)# interface pos 4/1 Router(config-if)# service-policy output output-qos 39-36 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 675
bandwidth percent 40 Router(config-p-map)# class class-default Router(config-p-map-c)# random-detect Router(config)# interface pos 2/1 Router(config-if)# service-policy output output-qos OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 39-37 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 676
percent 40 Router(config-p-map)# class class-default Router(config-p-map-c)# random-detect Router(config)# interface GE-WAN 3/2.32 Router(config-if)# service-policy output output-qos 39-38 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 677
to configure. Configures received DSCP as the basis of the internal DSCP for all the port's ingress traffic. Attaches the policy map created in step 5 to the interface as an input service policy. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 678
a QoS policy to an interface and specifies that policies should be applied on packets leaving the interface. Note The bandwidth command and random-detect command are not supported on LAN ports. 39-40 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 679
a QoS policy to an interface and specifies that policies should be applied on packets coming into the interface. Note The bandwidth command and random-detect command are not supported on LAN ports. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 680
)# class class-default Router(config-p-map-c)# random-detect Router(config)# interface GE-WAN 3/2.32 Router(config-if) mpls propagate-cos Router(config-if)# service-policy output output-qos 39-42 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 681
exported. PFC QoS statistics collection is enabled by default, and the data export feature is disabled by default for all ports and all aggregate policers configured on the Catalyst 6500 series switch. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 682
example shows how to enable PFC QoS statistics data export globally and verify the configuration: Router# configure terminal Router(config)# mls qos statistics-export Router(config)# end 40-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 683
port, PFC QoS statistics data export contains the following fields, separated by the delimiter character: • Export type ("1" for a port) • Slot/port • Number of ingress packets • Number of ingress bytes OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 684
slot number • Number of in-profile bytes • Number of bytes that exceed the CIR • Number of bytes that exceed the PIR • Time stamp 40-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 685
- Direction ("in") - Slot/port - Number of in-profile bytes - Number of bytes that exceed the CIR - Number of bytes that exceed the PIR - Time stamp OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 40-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 686
how to set the PFC QoS statistics data export interval and verify the configuration: Router# configure terminal Router(config)# mls qos statistics-export interval 250 Router(config)# end 40-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 687
local4 Definition cron/at subsystem reserved for local use reserved for local use reserved for local use reserved for local use reserved for local use OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 40-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 688
following ports FastEthernet5/24 QoS Statistics Data export is enabled on following shared aggregate policers aggr1M QoS Statistics Data Export is enabled on following class-maps class3 40-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 689
on following ports FastEthernet5/24 QoS Statistics Data export is enabled on following shared aggregate policers aggr1M QoS Statistics Data Export is enabled on following class-maps class3 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 40 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 690
Configuring PFC QoS Statistics Data Export Chapter 40 Configuring PFC QoS Statistics Data Export 40-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 691
NAC These sections describe NAC: • NAC Overview, page 41-2 • NAC Device Roles, page 41-2 • AAA Down Policy, page 41-3 • NAC Layer 2 IP Validation, page 41-4 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 41-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 692
41-1 PC Posture Validation Devices Workstation Server Clients running the Cisco Trust Agent software Switch Network Access Device Cisco Secure ACS Authentication Server (RADIUS) 92734 41-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 693
Configuring Network Admission Control Understanding NAC The following devices that support NAC on the network perform can configure a default AAA 's policies can be downloaded from the ACS. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 41-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 694
validation, ARP snooping is the default method to detect connected hosts. If you want the switch to detect hosts when a DHCP snooping binding entry is created, you must enable DHCP snooping. 41-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 695
specific hosts by specifying those hosts in an exception list and applying a user-configured policy posture validation occurs, the switch enforces the default access policy. After the switch sends an OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 696
to the downloadable ACL applied to the switch interface to which the endpoint device is connected. If traffic matches the CiscoSecure-Defined-ACL ACEs, the appropriate NAC actions are taken. 41-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 697
supported by Cisco IOS software, see the ACS configuration and command reference documentation about the software releases running on the AAA clients. Audit Servers End devices that do not run Cisco OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12. - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 698
or Cisco Secure ACS receives invalid messages. If the switch or authentication server continuously receives invalid messages, a malicious user might be trying to cause a denial-of-service attack. 41-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 699
IP device tracking table. The idle timer is reset when the switch receives an ARP packet or switch ends the EAPoUDP session on the host, and the host is no longer validated. The default value OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 41-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 700
EAPoUDP session ends. Status-Query default value of the status-query timer is 300 seconds (5 minutes). The timer resets configured, a switchover triggers a reposturing of all currently postured hosts. 41-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 701
. • NAC Layer 2 IP validation is not supported on trunk ports, tunnel ports, EtherChannel members, or routed ports. The Catalyst 6500 series switches support Layer 2 IP on EtherChannels. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 41-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 702
filtering, you should define a VLAN ACL on the switch port access VLAN. This configuration allows you to bypass the redirection of the HTTP traffic destined for the remediation servers. 41-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 703
. To remove the IP NAC rule that was applied to a specific interface, use the no ip admission rule-name interface configuration command. Returns to global configuration mode. Enables AAA. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 41-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 704
seconds. The default is 30 seconds. (Optional) Configures the RADIUS server within and at the end of the key are Configures the network access server to recognize and use vendor-specific attributes. 41-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 705
Displays the downloaded host policies in the Cisco IOS software configuration. (Optional) Saves your entries in the configuration file. To default group radius Router(config)# radius-server host admin key rad123 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 706
the global default EAPoUDP values, use the no forms of the eou global configuration commands. To disable the EAPoUDP associations, use the no forms of the eou interface configuration commands. 41-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 707
(config-identity-prof)# exit Router(config)# end Configuring a NAC AAA Down Policy Note This feature is only available on the Catalyst 6500 series switch and the Catalyst 7600 router. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 41-17 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 708
network default local command. Step 11 Router(config)# ip device tracking Enables the IP device tracking table. To disable the IP device tracking table, use the no ip device tracking global configuration commands. 41-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 709
is from 1 to 5. The default is 3. • interval interval-Set the and at the end of the key configuration command. Returns to privileged EXEC mode. Displays the NAC configuration or network admission cache entries. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 710
-server attribute 8 include-in-access-req radius-server host 40.0.0.4 auth-port 1645 acct-port 1646 test username administrator idle-time 1 key cisco radius-server vsa send authentication 41-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 711
NAC You can perform the tasks in configuration or session cache entries. Displays the NAC configuration or network admission cache entries. Displays information about the entries in the IP device tracking table. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 712
Monitoring and Maintaining NAC Chapter 41 Configuring Network Admission Control 41-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 713
: • Device Roles, page 42-2 • Authentication Initiation and Message Exchange, page 42-3 • Ports in Authorized and Unauthorized States, page 42-4 • Supported Topologies, page 42-4 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 42-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 714
authentication server, the server's frame header is removed, leaving the EAP frame, which is then encapsulated for Ethernet and sent to the client. 42-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 715
. Note If 802.1X is not enabled or supported on the network access device, any EAPOL frames from Unauthorized States" section on page 42-4. The specific exchange of EAP frames depends on the authentication OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 716
of the client. This is the default setting. • force-unauthorized-Causes the Supported Topologies The 802.1X port-based authentication is supported in two topologies: • Point-to-point • Wireless LAN 42-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 717
Cisco Router Authentication server (RADIUS) 79550 Default 802.1X Port-Based Authentication Configuration Table 42-1 shows the default 802.1X configuration. Table 42-1 Default 802.1X Configuration OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12. - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 718
Default 802.1X Configuration (continued) Feature Retransmission time Maximum retransmission number Multiple host support Client timeout period Authentication server timeout period Default . 42-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 719
Hosts, page 42-14 • Resetting the 802.1X Configuration to the Default Values, page 42-15 Enabling are attempted. To configure 802.1X port-based authentication, perform this task: Command OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 720
= 30 Seconds TxPeriod = 30 Seconds Configuring Switch-to-RADIUS-Server Communication RADIUS security servers are identified by any of the following: • Host name • Host IP address 42-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 721
Cisco IOS Security Configuration Guide, Release 12.2, publication and the Cisco IOS Security Command Reference, Release 12.2, publication at this URL: http://www.cisco.com/en/US/docs/ios/12_2/security/command/reference/fsecur_r.html OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 722
the number of seconds between reauthentication attempts to 4000: Router(config-if)# dot1x reauthentication Router(config-if)# dot1x timeout reauth-period 4000 42-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 723
authentication of the client might occur because the client provided an invalid password. You can provide a faster response time to the user by entering a smaller number than the default. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 42-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 724
You should change the default value of this command only to adjust for unusual circumstances such as unreliable links or specific behavioral problems with certain clients tx-period 60 42-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 725
end Returns to the default retransmission time. Returns to privileged EXEC mode. Step 4 Router# show dot1x all Verifies your entries. 1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 726
should change the default value of this command only to adjust for unusual circumstances such as unreliable links or specific behavioral problems with certain clients and to the network. 42-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 727
-id privileged EXEC command. For detailed information about the fields in these displays, refer to the Catalyst Supervisor Engine 32 PISA Cisco IOS Command Reference, Release 12.2ZY. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 42-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 728
Displaying 802.1X Status Chapter 42 Configuring IEEE 802.1X Port-Based Authentication 42-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 729
of secure MAC addresses to one and assign a single secure MAC address, the device attached to that port has the full bandwidth of the port. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 43-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 730
MAC addresses in the startup-config file and the port does not have to learn addresses from ingress traffic after bootup or a restart. 43-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 731
-disabled state with the default port security configuration, enter the errdisable recovery cause shutdown global configuration command, or manually reenable it by entering the native VLAN. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 43-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 732
maximum number of secure MAC addresses on the port before you enable port security on a trunk (see "Configuring the Maximum Number of Secure MAC Addresses on a Port" section on page 43-7). 43-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 733
(config-if)# do show port-security Verifies the configuration. interface type1 slot/port | include Port Security 1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 43-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 734
recovery cause violation_mode global configuration command, or you can manually reenable it by entering the shutdown and no shut down interface configuration commands. This example shows how to configure Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 735
default is 1). Note Per-VLAN configuration is supported only on trunks. Router(config-if)# no switchport port-security maximum Reverts to the default configuration MAC Addresses : 64 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 43-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 736
# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# interface fastethernet 5/12 Router(config-if)# switchport port-security mac-address sticky 43-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 737
commands, one per line. End with CNTL/Z. Router(config)# interface fastethernet 5/12 Router(config-if)# switchport port-security mac-address 1000.2000.3000 Router(config-if)# end OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 43-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 738
-if)# switchport port-security aging type inactivity Router(config-if)# do show port-security interface fastethernet 5/12 | include Type Aging Type : Inactivity 43-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 739
Port 5/1: Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router( the following information: • Port security supports the vlan keyword only on trunks. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 740
Violation mode: Shutdown Maximum MAC Addresses: 11 Total MAC Addresses: 11 Configured MAC Addresses: 3 Aging time: 20 mins Aging type: Inactivity SecureStatic Addresses limit in System: 128 43-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 741
discarding it. Configuring CDP These sections describe how to configure CDP: • Enabling CDP Globally, page 44-2 • Displaying the CDP Global Configuration, page 44-2 • Enabling CDP on a Port, page 44-2 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 742
Selects the port to configure. Enables CDP on the port. Router(config-if)# no cdp enable Disables CDP on the port. 1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet 44-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 743
, perform one or more of these tasks: Command Purpose Router# clear cdp counters Resets the /port] [detail] Displays information about a specific neighbor. The display can be limited to tengigabitethernet OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 744
127 127 127 122 122 167 152 Capability T S T S T S T S T S T S T S Platform WS-C2948 WS-C2948 WS-C2948 WS-C2948 WS-C2948 WS-C4003 WS-C4003 Port ID 2/46 2/45 2/44 2/50 2/49 2/47 2/48 44-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 745
1, autonegotiation takes care of physical signaling and fault detection. UDLD performs tasks that autonegotiation cannot perform, such as detecting the identities of neighbors and shutting OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 45-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 746
has a port stuck (both Tx and Rx) • One side of a link remains up while the other side of the link has gone down 45-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 747
LAN ports. Note This command only configures fiber-optic LAN ports. Individual LAN port configuration overrides the setting of this command. Disables UDLD globally on fiber-optic LAN ports. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 45-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 748
udld type1 slot/number Note This command is only supported on fiber-optic LAN ports. Verifies the configuration. 1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet 45-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 749
Disabled LAN Interfaces To reset all LAN ports that have been shut down by UDLD, perform this task: Command Router# udld reset Purpose Resets all LAN ports that have been shut down by UDLD. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 45 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 750
Configuring UDLD Chapter 45 Configuring UDLD 45-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 751
cisco.com/en/US/products/sw/iosswrel/ps1835/products_installation_and_configuratio n_guides_list.html • NetFlow version 9 is supported-See this document: Cisco IOS NetFlow Configuration Guide Configuring NetFlow." OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 752
granularity of the statistics gathered, which controls the volume of statistics for NDE to export. For more details about flow masks, refer to Chapter 47, "Configuring NetFlow". 46-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 753
NDE Versions NetFlow version 9 is supported and is described at this URL: http://www.cisco.com/en/US/docs/ios/12_3/feature/gde/nfv9expf.html NDE this document: Cisco IOS NetFlow Configuration Guide. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12. - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 754
router booted Current seconds since 0000 UTC 1970 Residual nanoseconds since 0000 UTC 1970 Sequence counter of total flows seen Unused (zero) bytes 46-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 755
-based routing is configured. 4. In PFC3BXL or PFC3B mode, for ICMP traffic, contains the ICMP code and type values. 5. Always zero for hardware-switched flows. 6. Populated in PFC3BXL or PFC3B mode. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 756
. 3. Always zero when policy-based routing is configured. 4. In PFC3BXL or PFC3B mode, for ICMP traffic, contains the ICMP code and type values. 5. Always zero for hardware-switched flows. 46-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 757
the end of the interval configured with the mls aging long command (default 32 minutes). types of NetFlow sampling supported by Cisco 6500 series switches: • perform software based NetFlow accounting also reduces OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 758
is a user-configurable value in the range 8000-16000 milliseconds. The default for the interval is configuring packet-based NetFlow flow sampling is: mls sampling packet-based rate [interval]. 46-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 759
1 in 2048 1 in 4096 1 in 8192 Sampling Time in Milliseconds (Not Configurable) 64 32 16 8 4 4 4 4 Export Interval Milliseconds (Not Configurable) 4096 4096 4096 4096 4096 8192 16384 32768 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 46-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 760
NDE on the PISA to support NDE on the PFC3B. • When you configure NAT and NDE on an interface, the PFC3B sends all fragmented packets to the PISA to be processed in software. (CSCdz51590) 46-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 761
router • Egress interface SNMP ifIndex • BGP AS Not all of the additional fields are populated with all flow masks. See the "NDE Versions" section on page 46-3 for additional information. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 46-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 762
sampling on individual Layer 3 interfaces. With all other flow masks, NetFlow flow sampling is enabled or disabled globally. • The Layer 3 interface must be configured with an IP address. 46-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 763
. • You can use a loopback interface. This example shows how to configure a loopback interface as the NDE flow source: Router(config)# ip flow-export source loopback 0 Router(config)# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 46-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 764
, you must create a corresponding VLAN interface, assign it an IP address, and enter the no shutdown command to bring up the interface. 46-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 765
= 0 IPWRITE_ENCAPFIX_FAILED = 0 Netflow Aggregation Enabled source-prefix aggregation export is disabled destination-prefix aggregation exporting flows to 10.34.12.245 (9999) OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 46-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 766
how to configure a port flow filter so that only expired flows to destination port 23 are exported (assuming the flow mask is set to full): Router(config)# mls nde flow include dest-port 23 46-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 767
This example shows how to configure a TCP protocol flow filter so that only expired flows from destination port 35 are exported: Router(config)# mls nde flow include protocol tcp dest-port 35 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 46 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 768
in the "Displaying the NDE Configuration" section on page 46-18. Displaying the NDE Configuration To display the NDE configuration, perform this task: Command Router# show Enabled Router# 46-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 769
feature provides the ability to export the statistics to an external device (called a NetFlow collector). You can configure NetFlow to collect statistics for both routed and bridged traffic. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 47-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 770
of statistics to export. Less specific flow masks aggregate the traffic statistics supports sampled NetFlow and NetFlow aggregation. The PFC3B does not support NetFlow ToS-based router aggregation. 47-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 771
flow mask. The PFC3B supports the following flow masks: • source-only-A less-specific flow mask. The Configuration Guidelines and Restrictions" section on page 47-5 for information about NetFlow table capacity. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 772
message at the CLI. Follow these guidelines to avoid problems with feature conflicts: • Configure your highest priority features first. If an unresolvable conflict the RP processor. 47-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 773
utilization levels. Table 47-3 NetFlow Table Utilization PFC PFC3B Recommended NetFlow Table Utilization Total NetFlow Table Capacity 117,760 (115 K) entries 131,072 (128 K) entries OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 47-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 774
you configure NetFlow for Layer 2 traffic on the PISA, it is enabled automatically on the PFC3B. • When you configure multicast NetFlow on the PISA, it is enabled automatically on the PFC3B. 47-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 775
time in the range of 32 to 4092 seconds. Flows can age as much as 4 seconds sooner or later than the configured interval. On average, flows age within 2 seconds of the configured value. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 47-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 776
Purpose Displays the MLS aging-time configuration. This example shows how to display the MLS aging-time configuration: Router# show mls netflow aging enable timeout packet threshold 47-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 777
IP traffic on the PFC3B is enabled when you configure NetFlow for ingress-bridged IP traffic on the PISA. See the "Enabling NetFlow for Ingress-Bridged IP Traffic" section on page 47-11. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 47-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 778
traffic. Enables NetFlow multicast traffic on the specified interface (for PISA and PFC3B). Shows the configuration for NetFlow aggregation. Shows the configuration for multicast NetFlow. 47-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 779
traffic on a VLAN, you must create a corresponding VLAN interface, assign it an IP address, and enter the no shutdown command to bring up the interface. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 47-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 780
fast switching or multicast distributed fast switching (MDFS). However, this prerequisite does not apply when configuring NetFlow multicast support on the Supervisor Engine 32 PISA. 47-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 781
of the packets received or transmitted by the source ports and VLANs to the destination port. You must dedicate the destination port for SPAN use. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 48-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 782
Network analyzer S6884 RSPAN Overview RSPAN supports source ports, source VLANs, configure an RSPAN destination session on another switch, you associate the destination ports with the RSPAN VLAN. 48-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 783
B2 B3 Switch B Source switch(es) (access) 27389 ERSPAN Overview ERSPAN supports source ports, source VLANs, and destination ports on different switches, which sources, but not both. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 48-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 784
default, local SPAN and ERSPAN monitor all traffic, including multicast and bridge protocol data unit (BPDU) frames. RSPAN does not support BPDU monitoring. Duplicate Traffic In some configurations Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 785
For local SPAN, you can configure per-VLAN filtering on destination trunk ports using allowed VLAN lists (see the "Configuring Destination Trunk Port VLAN Filtering" section on page 48-21). OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 48-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 786
-channel interface (an EtherChannel) can be a SPAN source, but you cannot configure active member ports of an EtherChannel as SPAN source ports. Inactive member ports of an .3Z Flow Control. 48-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 787
" section on page 48-21). For local SPAN and RSPAN, you can configure Source VLAN Filtering (see the "Configuring Source VLAN Filtering for Local SPAN and RSPAN" section on page 48-20). OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 48-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 788
from the source port. RSPAN does not support BPDU monitoring. • All packets sent through the switch for transmission from a port configured as an egress source are copied to in the VLAN. 48-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 789
Supervisor Engine 2 does not support RSPAN if you configure an egress SPAN source for a local SPAN session. • Supervisor Engine 2 does not support egress SPAN sources for local SPAN if you configure 0x88BE. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 790
and the system jumbomtu command (see the "Configuring Jumbo Frame Support" section on page 7-10) set the maximum Layer 3 packet size (default is 1,500 bytes, maximum is 9,216 sessions. 48-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 791
gigabitethernet 6/1 This example shows how to verify the configuration: Router(config)# do show monitor permit-list SPAN Permit-list :Admin Enabled Permit-list ports :Gi5/1-4,Gi6/1 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 48-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 792
configure the destination port to trunk unconditionally before you configure it as a destination (see the "Configuring a Destination Port as an Unconditional Trunk" section on page 48-21). 48-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 793
-separated list (do not enter space characters). Configures the VLAN as an RSPAN VLAN. Clears the RSPAN VLAN configuration. Updates the VLAN database and returns to privileged EXEC mode. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 48-13 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 794
Configuring Local SPAN, RSPAN, and ERSPAN Configuring RSPAN Source Sessions To configure an RSPAN source session, perform this task: Step 1 Step 2 Step 3 Step 4 Command Router# configure 48-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 795
To configure an RSPAN destination session, perform this task: Step 1 Step 2 Step 3 Step 4 Command Router# configure terminal is, in any order, single_interface , interface_range , ... OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 48-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 796
source session number with the source ports or VLANs, and selects the traffic direction to be monitored. (Optional) Configures source VLAN filtering when the ERSPAN source is a trunk port. 48-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 797
end Purpose Enters ERSPAN source session destination configuration mode. Configures the ERSPAN flow destination IP address, which must also be configured , single_vlan , single_vlan ... OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 48-17 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 798
destination session number and enters ERSPAN destination session configuration mode for the session. Clears the monitor configuration. (Optional) Describes the ERSPAN destination session. 48-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 799
must also change all ERSPAN source session destination IP addresses (see the "Configuring ERSPAN Source Sessions" section on page 48-16, Step 8). • ERSPAN_flow_id can range from 1 to 1023. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 48-19 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 800
, ... This example shows how to monitor VLANs 1 through 5 and VLAN 9 when the source is a trunk port: Router(config)# monitor session 2 filter vlan 1 - 5 , 9 48-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 801
vlan {add | except | none | remove} vlan [,vlan[,vlan[,...]] Configures the list of VLANs allowed on the trunk. 1. type = ethernet, fastethernet, gigabitethernet, or tengigabitethernet OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 48-21 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 802
comma-separated vlan parameters or in dash-specified ranges. • All VLANs are allowed by default. • To remove all VLANs from the allowed list, enter the switchport trunk allowed Gi1/1 - 4 48-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 803
remove options for sources for a session: Router(config)# no monitor session 2 source interface gigabitethernet 1/2 Router(config)# no monitor session 2 source interface port-channel 102 tx OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 48-23 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 804
32.1.1.1 This example shows the configuration of ERSPAN destination session 13: monitor session 13 type erspan-destination destination interface Gi6/1 source erspan-id 130 ip address 10.11.1.1 48-24 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 805
of the interface. Recommended information for this description includes the name of the manufacturer, the product name, and the version of the interface hardware and software. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 49-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 806
a specific interface, perform this task: Step 1 Command Router(config)# interface {vlan vlan_ID} | {type1 slot/port} | {port-channel port_channel_number} Purpose Selects an interface to configure. 49-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 807
Configuration from a Specific Interface To clear the interface-specific SNMP ifIndex persistence setting and configure the interface to use the global configuration setting, perform config-if)# exit OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12. - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 808
Configuring SNMP IfIndex Persistence Chapter 49 Configuring SNMP IfIndex Persistence 49-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 809
both AC-input and DC-input power supplies in the same chassis. For detailed information on supported power supply configurations, refer to the Catalyst 6500 Series Switch Installation Guide. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 50-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 810
to power all installed modules with two power supplies. However, redundancy is not supported in this configuration because the total power module status because the power capability is unchanged. 50-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 811
Enters global configuration mode. Powers a module on. Powers a module off. Note When you enter the no power enable module slot command to power down a module, the module's configuration is not saved. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 812
module in slot 3: Router# configure terminal Router(config)# power enable module - 5 WS-X6248-RJ-45 112.98 2.69 112.98 2.69 on on Router# You can view the current power status of a specific power supply Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 813
hardware capacities, including the following: • Hardware forwarding table utilization • Switch fabric utilization • CPU(s) utilization • Memory device (flash, DRAM, NVRAM) utilization OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 50-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 814
minute 1% 5% 69% 74% 5 minutes 1% 4% 69% 74% Processor memory: Module 1 RP 1 SP 7 8 I/O memory: Module 1 RP 1 SP 7 8 Bytes: Bytes: Total 176730048 192825092 195111584 % 93% 1% 6% 4% 0% 50-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 815
, LOUsrc - LOU source, LOUdst - LOU destination, ADJ - ACL adjacency Module ACLent ACLmsk QoSent QoSmsk Lbl-in Lbl-eg LOUsrc LOUdst AND OR ADJ 6 1% 1% 1% 1% 1% 1% 0% 0% 0% 0% 1% OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 50-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 816
capacity qos QoS Policer Resources Aggregate policers: Module 1 5 Microflow policer configurations: Module 1 5 Total 1024 1024 Total 64 64 Used 102 1 Used 32 1 %Used 10% 1% %Used 50% 1% 50-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 817
1 device-1 temperature: (sensor value > 60) is system minor alarm threshold #2 for module 1 device-1 temperature: (sensor value > 70) is system major alarm module 1 device-2 temperature: 29C OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 50-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 818
, which allows you to identify and rapidly correct hardware-related problems in your system. Monitoring System Environmental Status To display system status environmental alarms: no alarms 50-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 819
OL-11439 module 4: module 4 power-output-fail: OK module 4 outlet temperature: 32C module 4 inlet temperature: 32C module 5: module 5 power-output-fail: OK module 5 outlet temperature: 39C module 5 inlet temperature: 34C Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 820
condition is not corrected, the system shuts down after 5 minutes. Minor STATUS LED orange Monitors the condition if a minor alarm is generated. 50-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 821
red on the failed supervisor engine. If there is no redundant supervisor, the SYSTEM LED is red also. 4. See the "Understanding How Power Management Works" section on page 50-1 for instructions. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 822
Understanding How Environmental Monitoring Works Chapter 50 Power Management and Environmental Monitoring 50-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 823
problems in the following areas: • Hardware components • Interfaces (GBICs, Ethernet ports, and so forth) • Connectors (loose connectors, bent pins, and so forth) • Solder joints • Memory (failure over time) OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 824
default bootup diagnositcs level is minimal. Note The diagnostic level applies to the entire switch and cannot be configured on a per-module basis. To set the bootup diagnostic level, perform 51-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 825
using the no diagnostic monitor module module test all command. The EOBC connection is disrupted during this test and will cause the health-monitoring tests to fail and take recovery action. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 51 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 826
or on a daily, weekly, or monthly basis for a specific module. You can schedule tests to run only once or to repeat at an interval. Use the no form of this command to remove the scheduling. 51-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 827
min 2 Router(config)# This example shows how to run the test on the specified module if health monitoring has not previously been enabled: Router(config)# diagnostic monitor module 1 test 1 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 51-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 828
Online Diagnostic Tests and Test Results You can display the online diagnostic tests that are configured for specific modules and check the results of the tests using the show commands. 51-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 829
M**N****I** not configured 30) TestFabricSnakeBackward ---------> M**N****I** not configured 31) TestFibTcamSSRAM D****IR* not configured 32) ScheduleSwitchover D****I** not configured OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 830
21) TestIPv6FibShortcut 22) TestMPLSFibShortcut 23) TestNATFibShortcut 24) TestAclPermit 25) TestAclDeny 26) TestQoSTcam 27) TestNetflowInlineRewrite: Port 1 2 ---------- U U 51-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 831
RESET U Router# This example shows how to display the detailed online diagnostic results for a module: Router# show diagnostic result module 5 detail Current bootup diagnostic level:minimal Module # OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 832
to normal operating mode. Note Turn off all background health-monitoring tests on the supervisor engine and switching modules using the no diagnostic monitor module num test all command. 51-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 833
Supervisor Engine 32 PISA Cisco IOS Command Reference, Release 12.2ZY, at this URL: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios . When the interval ends, the reports obtain OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 52-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 834
sections describe how to use Top-N reports: • Enabling Top-N Reports Creation, page 52-3 • Displaying Top-N Reports, page 52-3 • Clearing Top-N Reports, page 52-4 52-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 835
through 999; the default is 30 seconds). • Except for a utilization report (configured with the sort- Reports To display Top-N reports, perform this task: Command Router# show interval. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 52-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 836
shows how to display a specific Top-N report: Router# show top counters :18:25 UTC Tue Nov 23 2004 End Time : 08:19:42 UTC Tue Top-N Reports To clear Top-N reports, perform one of these tasks: Command Router# Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 837
Supervisor Engine 32 PISA Cisco IOS Command Reference, Release 12.2ZY, at this URL: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios path that does not support Layer 2 traceroute, OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 53-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 838
an error message. • The Layer 2 traceroute utility is not supported in Token Ring VLANs. Using the Layer 2 Traceroute Utility a source device to a destination device, perform one of these tasks in privileged EXEC Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL- - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 839
Po120 [auto, auto] 4 AGNI / WS-C6509 / 2.1.1.11 : Po120 [auto, auto] => Gi8/12 [full, 1000M] Destination 0001.0000.0304 found on AGNI[WS-C6509] (2.1.1.11) Layer 2 trace completed. Router# OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY 53 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 840
Using the Layer 2 Traceroute Utility Chapter 53 Using the Layer 2 Traceroute Utility 53-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 841
problems on supervisor engines by running diagnostic packet tests using the Layer 2 forwarding engine, the Layer 3 and 4 forwarding engine, and the replication engine on the path from the switch processor to the route OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 842
support Description Nondisruptive. Do not disable. Test is automatically disabled during CPU-usage spikes in order to maintain accuracy. On. 12.2(18)ZY2. Reset the active supervisor engine. Active and standby supervisor engine. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 843
group are tested in parallel. Table A-4 TestNonDisruptiveLoopback Test Attributes Attribute Disruptive/Nondisruptive Recommendation Default Description Nondisruptive. Do not disable. On. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY A-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 844
Disruptive for looped-back ports. Disruption is typically less than one second. Duration of the disruption depends on the configuration of loopback port (for example, Spanning Tree Protocol.). Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY A-4 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 845
bootup only. This test runs by default during bootup or after a reset or OIR. 12.2(18)ZY. None. See the system message guide for more information. All modules including supervisor engines. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY A-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 846
used as a health-monitoring test. This test runs by default during bootup or after a reset or OIR. 12.2(18)ZY. None. See the system message guide for more information. Supervisor engines only. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY A-6 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 847
is verified during the diagnostic packet lookup by the Layer 2 forwarding engine. Table A-11 TestBadBpduTrap Test Attributes Attribute Disruptive/Nondisruptive Description Disruptive. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY A-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 848
used as a health-monitoring test. This test runs by default during bootup or after a reset or OIR. 12.2(18)ZY. None. See the system message guide for more information. Supervisor engines only. Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY A-8 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 849
default during bootup or after a reset or OIR. 12.2(18)ZY. None. See the system message guide for more information. Supervisor engines and DFC-enabled modules. PFC Layer 3 Forwarding Engine page A-14 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12. - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 850
be used as a health-monitoring test. This test runs by default during bootup or after a reset or OIR. 12.2(18)ZY. None. See the system message guide for more information. Supervisor engines. A-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 851
if you are routing MPLS traffic. This test runs by default during bootup or after a reset or OIR. 12.2(18)ZY. None. See the system message guide for more information. Supervisor engines. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY A-11 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 852
Default Release Corrective action Hardware support Description default during bootup or after a reset or OIR. 12.2(18)ZY. None. See the system message guide for more information. Supervisor engines. A-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 853
/Nondisruptive Recommendation Default Release Corrective action Hardware support Description Disruptive. Do not disable. On. 12.2(18)ZY. Automatic ASIC reset for recovery. Supervisor engines. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 854
. Supervisor engines and DFC-enabled modules. Replication Engine Tests These are the Replication Engine tests: • TestL3VlanMet, page A-15 • TestIngressSpan, page A-15 • TestEgressSpan, page A-16 A-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 855
. This test runs by default during bootup or after a reset or OIR. 12.2(18)ZY. None. See the system message guide for more information. Supervisor engines and WS-65xx and WS-67xx modules. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY A-15 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 856
the FIB TCAM and Layer 3 Adjacency SSRAM memory. Table A-27 TestFibTcamSSRAM Test Attributes Attribute Disruptive/Nondisruptive Description Disruptive. Disruption is several hours. A-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 857
before putting the hardware into a live network. Do not run any traffic in the background on the module that you are testing. The supervisor engine must be rebooted after running this test. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY A-17 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 858
the background on the module that you are testing. The supervisor engine must be rebooted after running this test. Off. 12.2(18)ZY. Not applicable. All modules including supervisor engines. A-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 859
Hardware support Description Disruptive. Run this test on-demand. This test cannot be run from on-demand CLI. On. 12.2(18)ZY. None. See the system message guide for more information. VPN service module. OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 860
Default Release Corrective action Hardware support Description Disruptive. Disruption is several minutes. Use this test to qualify hardware before installing it in your network. Off. 12.2(18)ZY. Not applicable. PFC3. A-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 861
(for example, Spanning Tree Protocol). Forwarding and port functions are disrupted during the test. Do not disable. On. 12.2(18)ZY. Not applicable. DFC-equipped modules OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY A-21 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 862
This test can only be run at bootup. This test runs by default during bootup or after a reset or OIR 12.2(18)ZY None. See the system message guide. All modules, including supervisor engines. A-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 863
bridge relay function Bisync Block Serial Tunnel broadcast and unknown server bridge-group virtual interface content-addressable memory committed access rate circuit card assembly Cisco Discovery Protocol Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY B-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 864
Name System Department of Defense denial of service 802.1Q dynamic RAM Dual Ring Protocol destination service access point differentiated services code point downstream SNA Physical Units Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY B-2 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 865
memory Module IOS File System Internet Group Management Protocol Interior Gateway Routing Protocol Integrated Local Management Interface Internet Protocol interprocessor communication Internetwork Packet Exchange OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 866
Source Discovery Protocol multiple spanning tree maximum transmission unit multiple VLAN access port Network Analysis Module Name Binding Protocol Native Client Interface Architecture Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY B-4 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 867
Optical Services Module open shortest Services Accelerator Point-to-Point Protocol Policy Rule Identifiers Per VLAN Spanning Tree+ QoS device manager QoS manager quality of service router interface access control list Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 868
Monitor Present Simple Multicast Routing Protocol Station Management Subnetwork Access Protocol Simple Network Management Protocol single router mode stateful switchover Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY B-6 Appendix B Acronyms OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 869
Appendix B Acronyms OL-11439-03 Table B-1 Acronym Resolution Protocol Ternary Content Addressable Memory table contention level Transmission Control Cache Communications Protocol weighted fair queueing Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY B-7 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 870
Table B-1 Acronym WRED WRR XNS List of Acronyms (continued) Expansion weighted random early detection weighted round-robin Xerox Network System Appendix B Acronyms Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY B-8 OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 871
-1 AToM 21-13 audience 1-xxix authentication See also port-based authentication Authentication, Authorization, and Accounting See AAA Authentication, Authorization, and Accounting (AAA) 33-1 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY IN-1 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 872
Cisco Group Management Protocol See CGMP Cisco IOS Unicast Reverse Path Forwarding 30-2 CiscoView 1-2 CIST regional root See MSTP CIST root See MSTP class command 38-61 class-map command 38-53 IN-2 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 873
33-22 guidelines 33-23 overview 33-22 sample ACLs 33-24 sample classes 33-22 copy running-config startup-config command 3-11 copy system OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY IN-3 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 874
a TFTP file (example) 34-14 differentiated services codepoint See QoS DSCP DiffServ configuring short pipe mode 39-34 configuring uniform mode 39-39 short pipe mode 39-31 uniform mode 39-32 IN-4 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 875
for exceeding rate limit 35-4 function of 35-2 interface trust states 35-3 log buffer clearing 35-16 configuring 35-13, 35-14 displaying 35-16 logging of dropped packets, described 35-4 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY IN-5 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 876
-channel interfaces 10-4 port-channel load-balance command 10-10 command example 10-11 STP 10-4 switchport trunk encapsulation dot1q 10-5 understanding 10-1 IN-6 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 877
G global configuration mode 2-5 global parameters, configuring 3-3 H hardware Layer 3 switching guidelines 23-4 hello time MSTP 17-45 hello time, STP 17-34 High Capacity Power Supply Support 50-4 history OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 878
13-3 http //www-tac.cisco.com/Teams/ks/c3/xmlkwery.php?srI d=612293409 10-6 I ICMP unreachable messages 31-1 IEEE 802.10 SAID (default) 12-6 IEEE 802.1Q configuring Internet Group Management Protocol IN-8 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 879
Layer 3 Switching 24-1 IPv6 QoS 38-41 ISL encapsulation 8-3 ISL trunks 8-2 isolated port 13-3 isolated VLANs 13-2, 13-3 J join messages, IGMP 27-2 jumbo frames 7-10 K keyboard shortcuts 2-3 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY IN-9 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 880
43-2 main-cpu command 6-4 mapping 802.1Q VLANs to ISL VLANs 12-12, 12-15 markdown see QoS markdown maximum aging time MSTP 17-47 maximum aging time, STP 17-35 maximum hop count, MSTP 17-47 IN-10 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 881
39-30 Differentiated Services Code Point 39-2 displaying a policy map 39-27 E-LSP 39-2 enabling QoS globally 39-18 EXP bits 39-2 features 39-3 IP Precedence 39-2 QoS Tags 39-2 queueing-only mode 39-19 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 882
non-RPF 25-5 overview 27-1 PIM snooping 28-4 RGMP 29-1 multicast, displaying routing table 25-16 multicast flood blocking 37-1 multicast groups IN-12 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 883
with SSO does not support IPv6 multicast traffic. 5-1 NVRAM saving settings 3-11 O OIR 7-16 online diagnostics configuring 51-2 memory tests 51-10 overview out of profile see QoS out of profile OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY IN - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 884
MPLS guidelines and restrictions 21-7 MPLS label switching 21-1 MPLS supported commands 21-7 recirculation 21-4 supported Cisco IOS features 21-5 VPN supported default configuration 42-5 IN-14 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 885
resetting to default values 42-15 switch as proxy 42-2 RADIUS client 42-2 topologies, supported 42-4 port-based QoS features see QoS configuration guidelines 13-7, 13-9, 13-11 configuring 13-11 host ports 13-14 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 886
private 13-11 end station access to 13-4 IP addressing 13-4 isolated VLANs 13-2, 13-3 monitoring 13-17 ports community 13-3 configuration guidelines 13-9 isolated 38-73 QoS markdown 38-19 IN-16 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 887
5-1 configuring BGP 5-13 CEF 5-12 EIGRP 5-18 IS-IS 5-15 OSPF 5-14 configuring multicast NSF with SSO 5-11 configuring supervisor engine 5-9 routing protocols 5-4 redundancy (RPR) 6-1 configuring 6-4 configuring supervisor engine 6-3 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 888
see QoS secondary VLANs 13-2 Secure MAC Address Aging Type 43-10 security configuring 30-1, 31-1, 33-1 security, port 43-1 security precautions with Flash memory card 3-24 serial interfaces IN-18 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 889
register functions 3-20 to 3-23 source-only-ip flow mask 47-3 source specific multicast with IGMPv3, IGMP v3lite, and URD 25-9 SPAN configuration guidelines 48-6 configuring 48-11 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY IN-19 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 890
17-29 defaults 17-26 EtherChannel 10-4 understanding 17-1 802.1Q Trunks 17-11 Blocking State 17-7 BPDUs 17-3 disabled state 17-10 forwarding state 17-9 learning state 17-8 listening state 17-7 overview 17-2 IN-20 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 891
8-8 switchport trunk encapsulation dot1q 8-3 example 8-13 switchport trunk encapsulation isl 8-3 switchport trunk encapsulation negotiate 8-3 default 8-5 switchport trunk native vlan 8-10 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY IN-21 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 892
11 trust-dscp see QoS trust-dscp trust-ipprec see QoS trust-ipprec tunneling 39-4, 39-31 tunneling, 802.1Q See 802.1Q 15-1 U UDE 20-1 configuration 20-3 overview 20-2 UDE and UDLR 20-1 UDLD IN-22 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 893
dot1q command 12-14, 12-15, 12-16 command example 12-16 VLAN mode 21-16 VLANs allowed on trunk 8-11 configuration guidelines 12-8 configuration options global configuration mode 12-9 OL-11439-03 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY IN-23 - Cisco WS-SUP32-GE-3B | Software Configuration Guide - Page 894
mode, configuring 11-8 version 2 enabling 11-7 overview 11-3 W web browser interface 1-1 weighted round robin 38-89 wireless access point inline power 14-4 WRR 38-89 X xconnect command 21-15 IN-24 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
-
421
-
422
-
423
-
424
-
425
-
426
-
427
-
428
-
429
-
430
-
431
-
432
-
433
-
434
-
435
-
436
-
437
-
438
-
439
-
440
-
441
-
442
-
443
-
444
-
445
-
446
-
447
-
448
-
449
-
450
-
451
-
452
-
453
-
454
-
455
-
456
-
457
-
458
-
459
-
460
-
461
-
462
-
463
-
464
-
465
-
466
-
467
-
468
-
469
-
470
-
471
-
472
-
473
-
474
-
475
-
476
-
477
-
478
-
479
-
480
-
481
-
482
-
483
-
484
-
485
-
486
-
487
-
488
-
489
-
490
-
491
-
492
-
493
-
494
-
495
-
496
-
497
-
498
-
499
-
500
-
501
-
502
-
503
-
504
-
505
-
506
-
507
-
508
-
509
-
510
-
511
-
512
-
513
-
514
-
515
-
516
-
517
-
518
-
519
-
520
-
521
-
522
-
523
-
524
-
525
-
526
-
527
-
528
-
529
-
530
-
531
-
532
-
533
-
534
-
535
-
536
-
537
-
538
-
539
-
540
-
541
-
542
-
543
-
544
-
545
-
546
-
547
-
548
-
549
-
550
-
551
-
552
-
553
-
554
-
555
-
556
-
557
-
558
-
559
-
560
-
561
-
562
-
563
-
564
-
565
-
566
-
567
-
568
-
569
-
570
-
571
-
572
-
573
-
574
-
575
-
576
-
577
-
578
-
579
-
580
-
581
-
582
-
583
-
584
-
585
-
586
-
587
-
588
-
589
-
590
-
591
-
592
-
593
-
594
-
595
-
596
-
597
-
598
-
599
-
600
-
601
-
602
-
603
-
604
-
605
-
606
-
607
-
608
-
609
-
610
-
611
-
612
-
613
-
614
-
615
-
616
-
617
-
618
-
619
-
620
-
621
-
622
-
623
-
624
-
625
-
626
-
627
-
628
-
629
-
630
-
631
-
632
-
633
-
634
-
635
-
636
-
637
-
638
-
639
-
640
-
641
-
642
-
643
-
644
-
645
-
646
-
647
-
648
-
649
-
650
-
651
-
652
-
653
-
654
-
655
-
656
-
657
-
658
-
659
-
660
-
661
-
662
-
663
-
664
-
665
-
666
-
667
-
668
-
669
-
670
-
671
-
672
-
673
-
674
-
675
-
676
-
677
-
678
-
679
-
680
-
681
-
682
-
683
-
684
-
685
-
686
-
687
-
688
-
689
-
690
-
691
-
692
-
693
-
694
-
695
-
696
-
697
-
698
-
699
-
700
-
701
-
702
-
703
-
704
-
705
-
706
-
707
-
708
-
709
-
710
-
711
-
712
-
713
-
714
-
715
-
716
-
717
-
718
-
719
-
720
-
721
-
722
-
723
-
724
-
725
-
726
-
727
-
728
-
729
-
730
-
731
-
732
-
733
-
734
-
735
-
736
-
737
-
738
-
739
-
740
-
741
-
742
-
743
-
744
-
745
-
746
-
747
-
748
-
749
-
750
-
751
-
752
-
753
-
754
-
755
-
756
-
757
-
758
-
759
-
760
-
761
-
762
-
763
-
764
-
765
-
766
-
767
-
768
-
769
-
770
-
771
-
772
-
773
-
774
-
775
-
776
-
777
-
778
-
779
-
780
-
781
-
782
-
783
-
784
-
785
-
786
-
787
-
788
-
789
-
790
-
791
-
792
-
793
-
794
-
795
-
796
-
797
-
798
-
799
-
800
-
801
-
802
-
803
-
804
-
805
-
806
-
807
-
808
-
809
-
810
-
811
-
812
-
813
-
814
-
815
-
816
-
817
-
818
-
819
-
820
-
821
-
822
-
823
-
824
-
825
-
826
-
827
-
828
-
829
-
830
-
831
-
832
-
833
-
834
-
835
-
836
-
837
-
838
-
839
-
840
-
841
-
842
-
843
-
844
-
845
-
846
-
847
-
848
-
849
-
850
-
851
-
852
-
853
-
854
-
855
-
856
-
857
-
858
-
859
-
860
-
861
-
862
-
863
-
864
-
865
-
866
-
867
-
868
-
869
-
870
-
871
-
872
-
873
-
874
-
875
-
876
-
877
-
878
-
879
-
880
-
881
-
882
-
883
-
884
-
885
-
886
-
887
-
888
-
889
-
890
-
891
-
892
-
893
-
894
 |
 |
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
Catalyst Supervisor Engine 32 PISA
Cisco IOS Software Configuration Guide
Release 12.2(18)ZY and Later Releases
Text Part Number: OL-11439-03