Cisco WS-X6K-S2-PFC2 Software Guide

Cisco WS-X6K-S2-PFC2 - Supervisor Engine - Control Processor Manual

Get Cisco WS-X6K-S2-PFC2 - Supervisor Engine - Control Processor PDF manuals and user guides
UPC - 746320348841
View all Cisco WS-X6K-S2-PFC2 manuals
Add to My Manuals
Save this manual to your list of manuals

Cisco WS-X6K-S2-PFC2 manual content summary:

  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 1
    Catalyst 6000 Family Software Configuration Guide Software Releases 6.3 and 6.4 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Customer Order Number: DOC-7813315= Text Part
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 2
    , and iQuick Study are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, the Cisco IOS logo, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Empowering the
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 3
    Interface 1 Switch Command-Line Interface 2 MSFC Command-Line Interface 8 Cisco IOS Command Modes 8 Cisco IOS Command-Line Interface 10 Configuring the Switch IP Address and Default Gateway MSFC for the First Time 4 CONTENTS Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 4
    an ISL/802.1Q Negotiating Trunk Port 7 Defining the Allowed VLANs on a Trunk 7 Disabling a Trunk Port 8 Example VLAN Trunk Configurations 9 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 5
    Works 1 802.1Q Tunneling Configuration Guidelines 2 Configuring Support for 802.1Q Tunneling 3 Configuring the Switch to Support 802.1Q Tunneling 3 Configuring 802.1Q Tunnel Ports How Bridge Protocol Data Units Work 3 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 6
    Skewing Works 37 Configuring BPDU Skewing 38 9 C H A P T E R Configuring Spanning Tree PortFast, UplinkFast, BackboneFast, and Loop Guard 1 Understanding How PortFast Works 2 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 6 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 7
    Pruning 3 Default VTP Configuration 5 VTP Configuration Guidelines 5 Configuring VTP 6 Configuring a VTP Server 6 Configuring a VTP Client 6 Disabling VTP (VTP Transparent Mode) 7 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 8
    Port 21 Deleting a Private VLAN 22 Deleting an Isolated, Community, or Two-Way Community VLAN 22 Deleting a Private VLAN Mapping 23 Private VLAN Support on the MSFC 23 Configuring FDDI VLANs 24 Configuring Token Ring VLANs 24 Understanding Token Ring TrBRF VLANs 25 Understanding Token Ring TrCRF
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 9
    PFC2 Configuration 10 CEF for PFC2 Configuration Guidelines and Restrictions 11 Configuring CEF for PFC2 12 Displaying Layer 3-Switching Entries on the Supervisor Engine 12 Configuring CEF on the MSFC2 14 Configuring IP Multicast on the MSFC2 Software Configuration Guide, Releases 6.3 and 6.4 9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 10
    Disabling NDE 9 Removing the NDE IP Address 9 Displaying the NDE Configuration 10 16 C H A P T E R Configuring Access Control 1 Understanding How ACLs Work 1 Hardware Requirements 2 Supported ACLs 2 QoS ACLs 2 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 10 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 11
    7 Routed Packets 7 Multicast Packets 8 Using Cisco IOS ACLs in your Network 9 Hardware and Software Handling of Cisco IOS ACLs with PFC 10 Hardware and Software Handling of Cisco IOS ACLs with PFC2 12 Using VACLs with Cisco IOS ACLs 15 Guidelines for Configuring Cisco IOS ACLs and VACLs on the Same
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 12
    8 Troubleshooting VMPS 8 Troubleshooting Dynamic Port VLAN Membership 8 Dynamic Port VLAN Membership with VMPS Configuration Examples 9 VMPS Database Configuration File Example 9 Dynamic Port VLAN Membership Configuration Example 10 Catalyst 6000 Family Software Configuration Guide, Releases
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 13
    8 Scheduling a System Reset 9 Scheduling a Reset at a Specific Time 10 Scheduling a Reset Within a Specified Amount of Time 10 Power Management 11 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 14
    Monitoring Using CLI Commands 16 LED Indications 16 Displaying System Status Information for Technical Support 17 Generating a System Status Report 18 Using System Dump Files 18 21 C TACACS+ Authorization 52 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 14 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 15
    MSFC Redundancy 18 Dual MSFC Redundancy 19 Single Router Mode Redundancy 41 Manual-Mode MSFC Redundancy 45 Modifying the Switch Boot Configuration 1 Understanding How Boot Configuration 4 Setting the Configuration Register 5 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 16
    System Software Images to a TFTP Server 8 Preparing to Upload an Image to a TFTP Server 8 Uploading Software Images to a TFTP Server 9 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 16 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 17
    System Message Logging Configuration 4 Configuring System Message Logging 4 Enabling and Disabling Session Logging Settings 5 Setting the System Message Logging Levels 6 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 18
    UDLD on Individual Ports 4 Disabling UDLD Globally 4 Specifying the UDLD Message Interval 4 Enabling UDLD Aggressive Mode 5 Displaying the UDLD Configuration 5 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 18 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 19
    List 3 Disabling the IP Permit List 4 Clearing an IP Permit List Entry 4 Configuring Port Security 1 Understanding How Port Security Works 1 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 20
    Configuring SNMPv3 from an NMS 11 Configuring SNMPv3 from the CLI 12 Configuring RMON 1 Understanding How RMON Works 1 Enabling RMON 2 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 20 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 21
    P T E R 40 C H A P T E R 78-13315-02 Viewing RMON Data 2 Supported RMON and RMON2 MIB Objects 2 Configuring SPAN and RSPAN 1 Understanding How SPAN and RSPAN Works 1 SPAN Configuring Multicast Services 1 Understanding How Multicasting Works 1 Multicasting and Multicast Services Overview 2
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 22
    RGMP 22 Configuring RGMP on the Supervisor Engine 22 Configuring RGMP on the MSFC 25 Displaying Multicast Protocol Status 25 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 22 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 23
    Thresholds 52 Configuring DSCP Value Maps 55 Displaying QoS Information 58 Displaying QoS Statistics 59 Reverting to QoS Defaults 60 Disabling QoS 60 Configuring COPS Support 60 Configuring RSVP Support 66 Configuring QoS Statistics Data Export 70 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 24
    1 Configuration 23 Router 2 Configuration 24 LocalDirector Configuration 24 Troubleshooting the ASLB Configuration 25 43 C H A P T How a VoIP Network Works 2 Cisco IP Phone 7960 2 Cisco CallManager 4 Access Gateways 4 Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 24 78
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 25
    Power Management 10 Configuring Auxiliary VLANs on Catalyst LAN Switches 19 Configuring the Access Gateways 21 Displaying Active Call Information 27 Configuring QoS in the Cisco IP Phone 7960 29 Contents 78-13315-02 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 26
    Contents Catalyst 6000 Family Software Configuration Guide, Releases 6.3 and 6.4 26 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 27
    information that previously was in the Catalyst 6000 Family Multilayer Switch Feature Card (12.x) and Policy Feature Card Configuration Guide. This publication is organized as follows: Chapter Chapter 1 Chapter 2 Chapter 3 Chapter 4 Chapter 5 Chapter 6 Chapter 7 Chapter 8 Title Product Overview
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 28
    on the MSFC. Configuring CEF for PFC2 Describes how to configure Cisco Express Forwarding for Policy Feature Card 2 (CEF for PFC2). Configuring MLS Describes how to configure to configure the IP permit list. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 28 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 29
    39 Using Switch TopN Reports Chapter 40 Configuring Multicast Services Chapter 41 Configuring QoS Chapter 42 Configuring ASLB Family Software Release 6.x • Cisco IOS Configuration Guides and Command References-Use these publications to help you configure the Cisco IOS software that runs on the
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 30
    reader be careful. In this situation, you might do something that could result in equipment damage or loss of data. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 30 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 31
    order the Documentation CD-ROM (product number DOC-CONDOCCD=) through the online Subscription Store: http://www.cisco.com/go/subscription Ordering Documentation You can find instructions for ordering documentation at this URL: http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm You can order
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 32
    are available: the Cisco TAC website and the Cisco TAC Escalation Center. The avenue of support that you choose depends on the priority of the problem and the conditions stated in service contracts, when applicable. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 32 78
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 33
    website, go to this URL: http://www.cisco.com/tac All customers, partners, and resellers who have a valid Cisco service contract have complete access to the technical support resources on the Cisco TAC website. Some services on the Cisco TAC website require a Cisco.com login ID and password. If you
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 34
    users: Internetworking Terms and Acronyms Dictionary, Internetworking Technology Handbook, Internetworking Troubleshooting Guide, and the Internetworking Design Guide. For current Cisco Press titles and other information, go to Cisco Press online at this URL: http://www.ciscopress.com • Packet
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 35
    support the following configurations: • Supervisor Engine 2, Policy Feature Card 2 (PFC2), and Multilayer Switch Feature Card 2 (MSFC2) • Supervisor Engine 2 and PFC2 • Supervisor Engine 1, PFC, and MSFC or MSFC2 Guide. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 36
    Chapter 1 Product Overview Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 1-2 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 37
    a description of the ATM Cisco IOS CLI and commands, refer to the ATM Software Configuration Guide and Command Reference-Catalyst 5000 Family mode. From the ROM-monitor mode, you can load a system image manually from Flash memory, from a network server file, or from bootflash. You can enter ROM
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 38
    the switch configuration). Enter the necessary commands to complete the desired tasks. When finished, exit the session. Command - - enable - exit Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 2-2 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 39
    on page 3-5. Up to eight simultaneous Telnet sessions are supported. Telnet sessions disconnect automatically after remaining idle for a Connected to Catalyst_1. Escape character is '^]'. Cisco Systems Console Enter password: Catalyst_1> Accessing the Configuration Guide-Releases 6.3 and 6.4 2-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 40
    the console will switch to the MSFC on the active supervisor engine. Note To access the Cisco IOS CLI on the standby MSFC, connect to the console port of the standby supervisor engine. This Console> (enable) Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 2-4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 41
    supports two modes of operation: normal and privileged. Both modes are password protected. Enter normal-mode commands for everyday system monitoring. Enter privileged-mode commands to configure the system and perform basic troubleshooting Family Software Configuration Guide-Releases 6.3 and 6.4 2-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 42
    to the first character of the command line. Moves the cursor back one character. Escapes and terminates prompts and tasks. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 2-6 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 43
    string aaa. !?aaa bbb Add string bbb to the end of the command containing the string aaa. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 2-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 44
    the MSFC from the Switch" section on page 2-3, you can configure IOS to support direct Telnet access to the MSFC. Refer to "Configuring Authentication" in the Cisco IOS Security Configuration Guide: http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/secur_c/scprt1/scdathen.htm
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 45
    . Prompt Router> Router# Router(config)# Router(config-if)# Router(config-line)# The Cisco IOS command interpreter, called the EXEC, interprets and executes the commands you enter. You can Router# co? configure 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 2-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 46
    return to the previous mode. Cisco IOS Command-Line Interface These sections describe basic Cisco IOS configuration tasks you need to understand before you configure routing: • Accessing Cisco IOS Configuration Mode, page 2-10 • Viewing and Saving the Cisco IOS Configuration, page 2-11 • Bringing Up
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 47
    chapter.) Router(config)# Ctrl-Z Viewing and Saving the Cisco IOS Configuration To view and save the configuration after you make the redundant MSFC will stop forwarding packets. Therefore, you should manually shut down the matching interface on the redundant MSFC. To Guide-Releases 6.3 and 6.4 2-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 48
    MSFC Command-Line Interface Chapter 2 Command-Line Interfaces 2-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 49
    ) management interface is connected to the switching fabric and participates in all of the functions of a normal switch port, such as spanning tree, Cisco Discovery Protocol (CDP), VLAN membership, and so forth. The out-of-band management interface (sl0) is not connected to the switching fabric and
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 50
    Works There are three methods for obtaining an IP address from the DHCP server: • Manual allocation-The network administrator maps the switch MAC address to an IP address at the DHCP request another IP address. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 3-2 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 51
    the switch processes all supported options contained in the message. Table 3-1 shows the supported DHCP options. Other options specified in the DHCPOFFER message are ignored. Table 3-1 Supported DHCP Options Code 1 -02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 3-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 52
    code and end-host protocol code. The system image is the main Cisco IOS software image with full multiprotocol routing support. As shipped, the MSFC is configured to boot the boot loader image Flash PC card. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 3-4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 53
    belongs). If necessary, bring the interface up. set interface sc0 up Verify the interface configuration. show interface 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 3-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 54
    [metric] [primary] for the switch. Verify that the default gateways appear correctly show ip route in the IP routing table. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 3-6 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 55
    slip_addr dest_addr Verify the SLIP interface configuration. show interface Enable SLIP for the console port. slip attach 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 3-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 56
    Trying 172.20.52.38 ... Connected to 172.20.52.38. Escape character is '^]'. Cisco Systems, Inc. Console Enter password: Console> enable Enter password: Console> (enable) set Console port. Console> (enable) Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 3-8 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 57
    displayed under the MAC-Address(es) heading. (With DHCP, this step is necessary only if using the manual allocation method.) show module Add an entry for each switch in the DHCP, - BOOTP, or RARP server .254 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 3-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 58
    Releasing IP address... Console> (enable) Sending DHCP packet with address: 00:90:0c:5a:8f:ff Done Console> (enable) 3-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 59
    Ethernet Works Catalyst 6000 family switches support simultaneous, parallel connections between Ethernet different segments for the next packet. Catalyst 6000 family switches solve congestion problems caused by high-bandwidth devices and a large number of users by Guide-Releases 6.3 and 6.4 4-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 60
    at each end of the link are set inconsistently (port negotiation enabled on one port and disabled on the other). Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 4-2 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 61
    (Tx) Flow control (other Ethernet) Flow control set to off for receive (Rx); transmit (Tx) not supported Spanning Tree Protocol (STP) Enabled for VLAN 1 Native VLAN VLAN 1 Port VLAN cost • Port VLAN cost of 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 4-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 62
    Link connected trunk full 1000 1000BaseSX Last-Time-Cleared Wed Jun 16 1999, 16:25:57 Console> (enable) Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 4-4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 63
    the port is configured correctly. Command set port duplex mod/port {full | half} show port [mod[/port]] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 4-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 64
    flow control. The port does not send flow-control frames to the neighboring port. 1. Supported only on Gigabit Ethernet ports. To configure flow control, perform this task in privileged mode send flow control Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 4-6 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 65
    the Default Port Enable State Note Changing the default port enable state applies to all port types, not just Ethernet. Note This feature is not supported on systems that do not have a chassis ID PROM. 78-13315-02 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 66
    VLAN 1. This might cause a security and network instability problem. Entering the set default portstatus command puts all ports through the ports during a configuration loss. You can then manually configure the ports back to the enable state. The default Guide-Releases 6.3 and 6.4 4-8 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 67
    . Once a port is in the errdisable state, you have to reenable it manually. The errdisable timeout feature allows you to configure a timeout period for ports in reenable all the errdisabled ports manually. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 4-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 68
    will be enabled at the next timeout: Port ErrDisable Reason 3/1 udld 3/8 bpdu-guard 6/5 udld 7/24 duplex-mismatch Console> (enable) 4-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 69
    frames are supported on all Optical Services Modules (OSMs). • Jumbo frames are not supported on ATM modules (WS-X6101-OC12-SMF/MMF). • The Multilayer Switching Feature Card 2 (MSFC2) supports routing of . 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 4-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 70
    Feature on MSFC2 With an MSFC2, you can configure the MTU size on VLAN interfaces to support routing of jumbo frames. The jumbo frame feature supports only which is the size supported by the supervisor engine. 4-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 71
    3 gateway_a.company.com (173.16.1.201) 6 ms 3 ms 3 ms 4 somehost.company.com (10.1.2.3) 3 ms * 2 ms Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 4-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 72
    Setting the Port Configuration Chapter 4 Configuring Ethernet, Fast Ethernet, and Gigabit Ethernet Switching 4-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 73
    you to extend VLANs across an entire network. Two trunking encapsulations are available on all Ethernet ports: • Inter-Switch Link (ISL)-ISL is a Cisco-proprietary trunking encapsulation • IEEE 802.1Q-802.1Q is an industry-standard trunking encapsulation 78-13315-02 Catalyst 6000 Family Software
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 74
    is managed by the Dynamic Trunking Protocol (DTP). DTP supports autonegotiation of both ISL and 802.1Q trunks. Trunking Modes from generating DTP frames. You must configure the neighboring port manually as a trunk port to establish a trunk link. Table Guide-Releases 6.3 and 6.4 5-2 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 75
    Nontrunk ISL trunk Nontrunk 1. Using this configuration can result in spanning tree loops and is not recommended. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 76
    devices might forward DTP frames improperly. To avoid this problem, ensure that trunking is turned off on ports connected to non-switch devices if you do not intend to trunk across those links. When manually enabling trunking on a link to a Cisco router, use the nonegotiate keyword to cause the port
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 77
    Port Mode Encapsulation Status Native vlan 1/1 on isl trunking 1 Port Vlans allowed on trunk 1/1 1-1005, 1025-4094 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 78
    > (enable) show trunk Port Mode Encapsulation 2/9 desirable dot1q Status -----------trunking Native vlan ----------1 Port Vlans allowed on trunk 2/9 1-1005, 1025-4094 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-6 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 79
    remove VLANs from the allowed list to prevent traffic for those VLANs from passing over the trunk. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 80
    2 Task Turn off trunking on a port. Verify the trunking configuration. Command set trunk mod/port off show trunk [mod/port] Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-8 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 81
    Vlans allowed on trunk 1/1 1-1005, 1025-4094 Port Vlans allowed and active in management domain 1/1 1,521-524 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 82
    the switches to form a two-port EtherChannel bundle and then configure the EtherChannel bundle as an ISL trunk link. 5-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 83
    Neighbor Neighbor mode status device port 3/1 connected auto channel WS-C5500 069003103(Sw 1/1 3/2 connected auto channel WS-C5500 069003103(Sw 1/2 Switch_B> (enable) Step 4 trunk. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 84
    ,917,999 3/2 1-5,10,20,50,152,200,300,400,500,521-524,570,801,850,917,999 Switch_B> (enable) 5-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 85
    in EtherChannel auto mode. The system logging messages provide information about the formation of the EtherChannel bundle. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 86
    WS-C4003 JAB023806(Sw 2/3 3/4 connected auto channel WS-C4003 JAB023806(Sw 2/4 3/5 connected auto channel WS-C4003 JAB023806(Sw 2/5 3/6 connected auto channel WS :Port 2/3 has become dot1q trunk 5-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 87
    -524,570,850,917,999 Port Vlans in spanning tree forwarding state and not pruned 2/3 2/4 2/5 2/6 Switch_A> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 88
    configuration. Figure 5-3 shows a parallel trunk configuration between two switches, using the Fast Ethernet uplink ports on the supervisor engine. 5-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 89
    the VTP and VLAN configuration on Switch 1 by entering the show vtp domain and show vlan commands. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 90
    -------- 1/1 1/2 Vlans allowed and active in management domain 1,10,20,30,40,50,60 1,10,20,30,40,50,60 5-18 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 91
    disabled disabled Fast-Start ---------- disabled disabled disabled disabled disabled disabled disabled disabled disabled Group-method Group-method 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 92
    ,31-1004 using portpri 32. Port 1/1 vlans 10,20,30 using portpri 1. Port 1/1 vlans 1005 using portpri 4. Switch_2> (enable) 5-20 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 93
    disabled disabled Group-method Group-method Figure 5-4 shows the network after you configure VLAN traffic load sharing. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 94
    disabled disabled Fast-Start ---------- disabled disabled disabled disabled disabled disabled disabled disabled disabled Group-method -----------Group-method Group-method 5-22 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 95
    , but the supervisor engine continues to transmit and receive packets from control protocols such as Cisco Discovery Protocol (CDP), VTP, Port Aggregation Protocol (PAgP), and DTP. When a trunk show config 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 5-23
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 96
    Disabling VLAN 1 on Trunks Chapter 5 Configuring Ethernet VLAN Trunks 5-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 97
    a standby supervisor engine, support EtherChannel (maximum of eight 9-slot Catalyst 6000 family switches support a maximum of 128 EtherChannels. supported number of EtherChannels is 126 for a 6- or 9-slot chassis and 63 for a 13-slot chassis. Note that the 13-slot chassis was first supported
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 98
    the auto and desirable modes with the silent and non-silent keywords. By default, ports are in auto silent mode. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 6-2 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 99
    your switch: • If the display shows the "Sub-Type" to be "L2 Switching Engine I WS-F6020," then EtherChannel frame distribution is not configurable on your switch; it uses source and destination IP addresses. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 6-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 100
    problems. Follow these guidelines to avoid configuration problems: modes can have unexpected results. • An EtherChannel supports the same allowed range of VLANs on all the Protocol (GMRP), and quality of service (QoS) configurations. • Configure all Guide-Releases 6.3 and 6.4 6-4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 101
    auto mode: Console> (enable) set port channel 2/1 mode auto Ports 2/1 channel mode set to auto. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 6-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 102
    Admin Port Device-ID Port-ID Platform group 20 1/1 20 1/2 066510644(cat26-lnf(NET25)) 2/1 WS-C6009 Console> (enable) Console> (enable) set channel cost 768 12 Port(s) 1/1,1/2 port path the "cost." Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 6-6 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 103
    856 Admin Port Device-ID Port-ID Platform group 22 1/1 22 1/2 066510644(cat26-lnf(NET25)) 2/1 WS-C6009 Console> (enable) Console> (enable) set channel vlancost 856 10 Port(s) 3/47-48 vlan > (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 6-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 104
    [both] Note The set port channel all distribution session command option is supported on Supervisor Engine 2 only. This example shows how to configure EtherChannel to ] | dest_mac_addr | src_port dest_port Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 6-8 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 105
    an EtherChannel: Console> (enable) set port channel 2/2-8 mode off Ports 2/2-8 channel mode set to off. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 6-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 106
    Configuring EtherChannel Chapter 6 Configuring EtherChannel 6-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 107
    page 7-3 Understanding How 802.1Q Tunneling Works 802.1Q tunneling enables service providers to use a single VLAN to support customers who have multiple VLANs, while preserving customer VLAN IDs and VLAN. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 7-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 108
    to support: - Private VLANs - Voice over IP (Cisco IP Phone 7960) • The following Layer 2 protocols work between devices connected by an asymmetrical link: - CDP - UniDirectional Link Detection (UDLD) - Port Aggregation Protocol (PAgP) Catalyst 6000 Family Software Configuration Guide
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 109
    802.1Q tunneling, perform this task in privileged mode: Step 1 Step 2 Task Configure tunneling support on the switch. Verify the configuration. Command set dot1q-all-tagged enable [all] show dot1q-all-tagged 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 7-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 110
    4/1. Console> (enable) show port dot1qtunnel 4/1 Port Dot1q tunnel mode 4/1 disabled Removing Global Support for 802.1Q Tunneling You do not need to enter the set dot1q-all-tagged disable from the port. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 7-4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 111
    -all-tagged disable [all] show dot1q-all-tagged This example shows how to remove tunneling support on the switch and verify the configuration: Console> (enable) set dot1q-all-tagged disable Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 7-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 112
    Configuring Support for 802.1Q Tunneling Chapter 7 Configuring IEEE 802.1Q Tunneling Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 7-6 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 113
    chapter describes the IEEE 802.1D bridge Spanning Tree Protocol (STP) and how to use and configure Cisco's proprietary spanning tree protocols, Per VLAN Spanning Tree + (PVST+) and Multi-Instance Spanning Tree . 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 114
    the root associated with each switch port • The port identifier (MAC address of the port) associated with each switch port Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-2 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 115
    cost of the path to the root from the transmitting port • The identifier of the transmitting port 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 116
    16-bit (short) default port cost values to each port based on bandwidth. You can also manually assign port costs between 1 and 65535. The 16-bit values are only used for ports that 65535 1 to 65535 1 to 65535 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 117
    formula that is based on the bandwidth of the port. You can also manually assign port costs between 1 and 200,000,000. The formula for that have been forwarded using the old topology. Note With IOS Release 12.1.(1)E or later releases on the Multilayer Switch Feature Guide-Releases 6.3 and 6.4 8-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 118
    database. • The expiration of a protocol timer moves the port to the forwarding state, where both learning and forwarding are enabled. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-6 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 119
    in frame forwarding. Learning is disabled in the listening state. Figure 8-4 shows a port in the listening state. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 120
    another port for forwarding. • Incorporates station location into its address database. • Receives BPDUs and directs them to the system module. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-8 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 121
    Data frames BPDUs Port 2 Network management frames Learning All segment frames BPDU and network management frames S5694 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 122
    that forward messages. For more information about PortFast, see Chapter 9, "Configuring Spanning Tree PortFast, UplinkFast, BackboneFast, and Loop Guard." 8-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 123
    two modes: • Per VLAN Spanning Tree (PVST+) • Multi-Instance Spanning Tree Protocol (MISTP) • MISTP-PVST+ (combination mode) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 124
    has converged. (However, if ports are added at the same time the VLAN is moved, convergence time is required.) 8-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 125
    MAC address is 00-e0-1e-9b-31-ff. MAC Address Reduction For Catalyst family switches that support 4096 VLANs, MAC address reduction allows up to 4096 VLANs running under PVST+ or 16 MISTP instances is 2. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 126
    finer granularity in the selection of its bridge ID. Note The MAC address reduction feature is enabled by default on Cisco switches that have 64 MAC addresses (Cisco 7606, CISCO7603, WS-C6503, and WS-C6513). 8-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 127
    10/100 Mbps ports autonegotiate or are hard set to 10 Mbps, the port cost is 100. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 128
    + sys ID extension: 1) Console> (enable) show spantree 1/1 1 VLAN 1 Spanning tree mode PVST+ Spanning tree type ieee Spanning tree enabled 8-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 129
    -connected 4 32 disabled 0 2/1 1 not-connected 100 32 disabled 0 2/2 1 not-connected 100 32 disabled 0 2/3 1 forwarding 12 32 disabled 0 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 130
    parameters: - Portcost - Portvlancost (trunk ports only) - When uplinkfast is enabled, the actual cost is incremented by 10,000,000 8-18 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 131
    12. Port 2/3 VLANs 1-5,12 have path cost 20000. This parameter applies to trunking ports only. Console> (enable 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 132
    . Do not disable spanning tree in a VLAN without ensuring that there are no physical loops present in the VLAN. 8-20 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 133
    , they will have incomplete information about the physical topology of the network which may cause unexpected results. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 134
    MISTP Instance, page 8-25 • Mapping VLANs to an MISTP Instance, page 8-29 • Disabling MISTP-PVST+ or MISTP, page 8-31 8-22 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 135
    to the switch. After you map a VLAN to an MISTP instance, you can Telnet to the switch. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-23
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 136
    -50-3e-78-70-00 - 15 00-50-3e-78-70-00 - 16 00-50-3e-78-70-00 - 8-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 137
    20000 32 disabled 0 2/1 1 not-connected 2000000 32 disabled 0 2/2 1 not-connected 2000000 32 disabled 0 2/3 1 forwarding 200000 32 disabled 0 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-25
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 138
    spantree portpri mod/port priority [instance] Verify the port priority setting. show spantree mistp-instance instance [mod/port] active 8-26 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 139
    value for an MISTP instance, the port with the lowest port number forwards frames for that instance. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-27
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 140
    . Console> (enable) show spantree mistp-instance 2 Instance 2 Spanning tree mode MISTP Spanning tree type ieee Spanning tree instance enabled . . . 8-28 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 141
    ID ext: 1) 6 Hello Time 2 sec Forward Delay 15 sec Port Inst Port-State Cost Prio Portfast Channel_id 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-29
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 142
    MISTP instances, the VLAN is in conflict. To clear up the conflict, you must manually remove the incorrect mapping(s) from the root switch. The remaining entry on the list Vlan 6 configuration successful 8-30 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 143
    on access switches. To configure a switch as the primary root switch, perform this task in privileged mode: 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-31
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 144
    . VLANs 22,24 bridge hello time set to 1 second. VLANs 22,24 bridge forward delay set to 7 seconds. Console> (enable) Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 145
    the forwarding state. If a port in the PortFast mode begins blocking, it then goes through listening and 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-33
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 146
    for the specified port(s). If a port goes into the root-inconsistent state, it automatically goes into the listening state. 8-34 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 147
    time for a VLAN or for an MISTP instance. The possible range of interval is 1 to 10 seconds. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-35
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 148
    spanning tree maximum aging time for a VLAN or an instance. The possible range of agingtime is 6 to 40 seconds. 8-36 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 149
    "Configuring the Maximum Aging Time" section on page 8-36) • Rate limited at one for every 60 seconds 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-37
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 150
    Configuring BPDU Skewing Chapter 8 Configuring Spanning Tree Configuring BPDU Skewing Commands that support the spanning tree BPDU skewing feature perform these functions: • Allow you 26:05 Console> (enable) 8-38 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 151
    Blocking Listening Learning Forwarding STP Active 1 6 4 2 0 12 Blocking Listening Learning Forwarding STP Active Total 6 4 2 0 12 Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 8-39
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 152
    Configuring BPDU Skewing Chapter 8 Configuring Spanning Tree 8-40 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 153
    BPDU Filter, page 9-11 • Configuring UplinkFast, page 9-13 • Configuring BackboneFast, page 9-15 • Configuring Loop Guard, page 9-17 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 154
    device. BPDU guard can prevent invalid configurations, because you must manually put the interface back in service. Note When enabled on the switch, spanning tree applies the they are not transmitted. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-2 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 155
    Switch A (Root) Switch B L1 L2 Link failure Switch C L3 UplinkFast transitions port directly to forwarding state 11242 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 156
    switchover takes approximately 30 seconds. Figure 9-4 shows how BackboneFast reconfigures the topology to account for the failure of link L1. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 157
    isolates the failure and lets spanning tree converge to a stable topology without the failed link or bridge. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 158
    a shared link. Note We recommend that you enable loop guard on root ports and alternate root ports on access switches. Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-6 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 159
    PortFast These sections describe how to configure PortFast on the switch: • Enabling PortFast, page 9-8 • Disabling PortFast, page 9-8 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 160
    shows how to disable PortFast on a port: Console> (enable) set spantree portfast 4/1 disable Spantree port 4/1 fast start disabled. Console> (enable) Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-8 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 161
    0 0 4 4 100 0 0 0 4 4 152 0 0 0 4 4 200 0 0 0 5 5 300 0 0 0 4 4 400 0 0 0 4 4 500 0 0 0 4 4 521 0 0 0 4 4 524 0 0 0 4 4 570 0 0 0 4 4 801 0 0 0 0 0 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 162
    0 4 4 400 0 0 0 4 4 500 0 0 0 4 4 521 0 0 0 4 4 524 0 0 0 4 4 570 0 0 0 4 4 801 0 0 0 0 0 802 0 0 0 0 0 850 0 0 0 4 4 917 0 0 0 4 4 999 0 0 0 4 4 9-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 163
    for vlans: none. Portfast bpdu-filter enabled for bridge. Uplinkfast disabled for bridge. Backbonefast disabled for bridge. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 164
    0 0 4 4 2 0 0 0 4 4 3 0 0 0 4 4 4 0 0 0 4 4 5 0 0 0 4 4 6 0 0 0 4 4 10 0 0 0 4 4 . . . 802 0 0 0 0 0 850 0 0 0 4 4 917 0 0 0 4 4 999 0 0 0 4 4 9-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 165
    rate set to 15 packets/100ms. uplinkfast all-protocols field set to off. uplinkfast enabled for bridge. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 166
    spantree uplinkfast disable command, it affects all VLANs on the switch. You cannot disable UplinkFast on an individual VLAN. 9-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 167
    must enable it on all switches in the network. BackboneFast is not supported on Token Ring VLANs. This feature is supported for use with third-party switches. To enable BackboneFast on the switch, backbonefast 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 168
    ) set spantree backbonefast disable Backbonefast enabled for all VLANs Console> (enable) show spantree backbonefast Backbonefast is disable. Console> (enable) 9-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 169
    disable rootguard on this port. Do you want to continue (y/n) [n]? y Loopguard on port 5/1 is disabled. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 9-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 170
    Configuring Loop Guard Chapter 9 Configuring Spanning Tree PortFast, UplinkFast, BackboneFast, and Loop Guard 9-18 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 171
    configuration inconsistencies that can result in a number of problems, such as duplicate VLAN names, incorrect VLAN-type to 1005 in your network. (Note that VTP does not support VLANs 1025 to 4094.) With VTP, you can make configuration Family Software Configuration Guide-Releases 6.3 and 6.4 10-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 172
    VTP advertisements: • VLAN IDs (ISL and 802.1Q) • Emulated LAN names (for ATM LANE) • 802.10 SAID values (FDDI) 10-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 173
    forwards a message only if the version and domain name match. Since only one domain is supported in the supervisor engine software, VTP version 2 forwards VTP messages in transparent mode, without checking . 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 10-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 174
    disabled for the domain. Pruning eligibility always applies to the local device only, not for the entire VTP domain. 10-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 175
    pruning eligibility for those VLANs on that device only (not on all switches in the VTP domain). 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 10-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 176
    switch. The client switch receives VTP updates from a VTP server in the management domain and modifies its configuration accordingly. 10-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 177
    it for VTP transparent mode. Verify the VTP configuration. Command set vtp mode transparent show vtp domain 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 10-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 178
    use the same VTP version. Do not enable VTP version 2 unless every switch in the VTP domain supports version 2. Note In a Token Ring environment, you must enable VTP version 2 for Token Ring Console> (enable) 10-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 179
    -255 Vlans 2-99,250-255,501-1000 eligible for pruning on this device. VTP domain Lab_Network modified. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 10-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 180
    received and VTP errors, perform this task: Task Display VTP statistics for the switch. Command show vtp statistics 10-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 181
    pruning statistics: Trunk Join Trasmitted Join Received 1/1 0 1/2 0 Console> (enable) ------------0 0 Summary advts received from non-pruning-capable device 0 0 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 10-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 182
    Configuring VTP Chapter 10 Configuring VTP 10-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 183
    sections describe VLANs: • VLAN Ranges, page 11-2 • Configurable VLAN Parameters, page 11-3 • Default VLAN Configuration, page 11-4 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 184
    Engineering VLAN Marketing VLAN Cisco router Fast Ethernet Accounting routed. Port VLAN membership on the switch is assigned manually on a port-by-port basis. When you assign VLAN Ranges Catalyst 6000 family switches support 4096 VLANs in accordance with the Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 185
    -1005 Reserved range Cisco defaults for FDDI and Token Ring. Not N/A supported on Catalyst 6000 family switches. You cannot delete these VLANs. 1006-1009 Reserved range Cisco defaults. Not currently (SAID) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 186
    0F Default Token Ring TrCRF VLAN VLAN 1003 (trcrf-default) Spanning Tree Protocol (STP) version IBM for TrBRF VLAN 11-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 187
    vlan vlan [name name] [said said] [mtu mtu] [translation vlan] Verify the VLAN configuration. show vlan [vlan] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 188
    configure extended-range VLANs 1025-4094: • Extended-Range VLAN Configuration Guidelines, page 11-7 • Creating Extended-Range VLANs, page 11-7 11-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 189
    . See the "Deleting 802.1Q-to-ISL VLAN Mappings" section on page 11-11 for more information. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 190
    VLANs does match in both the switches, packet loss might occur. 1. From non-Cisco devices in your network using VLANs 1006-1024 to nonreserved VLANs on the Catalyst 6000 family switches. 2. VLAN Mappings, page 11-10 11-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 191
    nonreserved VLANs that are not in use. Nonreserved VLANs are any VLANs that are not reserved by Cisco; this includes normal-range and extended-range VLANs. Note If you have dot1q-to-isl VLAN mappings deleted. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 192
    greater than 1000 must be mapped to an ISL VLAN in order to be recognized and forwarded by Cisco switches. These restrictions apply when mapping 802.1Q VLANs to ISL VLANs: • If there are any mapping table. 11-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 193
    -ISL VLAN mappings: Console> (enable) clear vlan mapping dot1q all All vlan mapping entries deleted Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 194
    AuxVlan-Status 4/10 none none Last-Time-Cleared Tue Jun 6 2000, 16:45:18 Console> (enable) 11-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 195
    VLAN, page 11-22 • Deleting an Isolated, Community, or Two-Way Community VLAN, page 11-22 • Deleting a Private VLAN Mapping, page 11-23 • Private VLAN Support on the MSFC, page 11-23 78-13315-02 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 196
    . Ports belonging to a private VLAN are associated with a common set of supporting VLANs that are used to create the private VLAN structure. There are three VLANs to other switches that support private VLANs. 11-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 197
    the nontrunk ports or the MSFC ports as promiscuous ports. • You must set VTP to transparent mode. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 198
    mode to client or server mode, because VTP does not support private VLAN types and mapping propagation. • You can configure with Ports Listed by ASIC Groups Module Number WS-X6224-100FX-MT WS-X6248-RJ-45 WS-X6248-TEL Description Ports by ASIC 24-port 100FX Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 199
    by ASIC Groups (continued) Module Number WS-X6348-RJ-45 Description 48-port 10/100TX RJ-45 WS-X6024-10FL-MT 24-port 10BASE-FL ensure that the spanning tree topologies match. You should manually check the STP configuration to ensure that the primary, Configuration Guide-Releases 6.3 and 6.4 11-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 200
    order to be applied to all outgoing traffic from the MSFC. • If you map a Cisco IOS ACL to a primary VLAN, the Cisco IOS ACL automatically maps to the associated isolated and community VLANs. • You cannot map Cisco IOS ACLs to an isolated or community VLAN. • You cannot use policy-based routing (PBR
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 201
    port: Console> (enable) set pvlan 7 902 4/4-6 Successfully set the following ports to Private Vlan 7,902:4/4-6 Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 202
    Ports 7 902 Isolated 4/4-6 Console> (enable) show pvlan Primary Secondary Secondary-Type Ports 7 901 isolated 4/3 7 902 community 4/4-6 7 903 community 4/7-9 11-20 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 203
    a private vlan port due to Promiscuous ports cannot be made private vlan ports. Conflict with Trunking port(s) : 5/1 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 204
    will de-activate all ports on vlan 902 Do you want to continue(y/n) [n]?y Vlan 902 deleted Console> (enable) 11-22 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 205
    902 on 3/2-5 Console> (enable) Private VLAN Support on the MSFC These items describe private VLAN support on the MSFC: • Enter the show pvlan VLAN interface ARP entries do not age out, you must manually remove private VLAN interface ARP entries if a MAC address changes. 78-13315
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 206
    can add or remove private VLAN ARP entries manually as follows: obelix-rp(config)# no arp Token Ring VLANs These sections describe the two Token Ring VLAN types that are supported on switches running VTP version 2: • Understanding Token Ring TrBRF VLANs, page Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 207
    Configuring VLANs Configuring Token Ring VLANs Note Catalyst 6000 family switches do not support ISL-encapsulated Token Ring frames. Understanding Token Ring TrBRF VLANs Token Ring Bridge and backup. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-25
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 208
    one backup TrCRF for a TrBRF is allowed, and only one port per switch can belong to a backup TrCRF. 11-26 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 209
    vlan [name name] type trbrf [said said] [mtu mtu] bridge bridgeber [stp {ieee | ibm}] show vlan [vlan] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-27
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 210
    must specify a ring number (either in hexadecimal or in decimal) and a parent TrBRF VLAN when creating a new TrCRF. 11-28 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 211
    the VLAN configuration. Command set vlan vlan aremaxhop hopcount set vlan vlan stemaxhop hopcount show vlan [vlan] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 11-29
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 212
    998 trcrf 100998 4472 999 0xff - - srb 0 0 VLAN AREHops STEHops Backup CRF 998 10 10 off Console> (enable) 11-30 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 213
    in VLAN 10 and Switch B is in VLAN 20. The router has an interface in each VLAN. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 12-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 214
    them much as you do a physical router interface. MSFC2 and MSFC support the same range of VLANs as the supervisor engine. MSFC2 supports up to 1,000 VLAN interfaces. MSFC supports up to 256 VLAN interfaces. 12-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 215
    the VLAN. When you enable IPX routing on the VLAN, you can also specify an encapsulation type. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 12-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 216
    implemented on the MSFC: • Local Proxy ARP, page 12-5 • WCCP Layer 2 Redirection, page 12-5 • Auto State Feature, page 12-5 12-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 217
    Feature Card (PFC) supports this feature with Release 12.1(2)E or later releases. Supervisor Engine 2 with PFC2 supports this feature with Release 12 flows. Configure the Cisco IOS WCCP as described in the Cisco IOS Configuration Fundamentals Configuration Guide at http://www.cisco.com/univercd/cc
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 218
    the line protocol state determination for the MSFC: Console> (enable) show msfcautostate MSFC Auto port state: enabled Console> (enable) 12-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 219
    state determination of the MSFC: Console> (enable) set msfcautostate disable MSM port auto state disabled. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 12-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 220
    Configuring InterVLAN Routing on the MSFC Chapter 12 Configuring InterVLAN Routing 12-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 221
    Default CEF for PFC2 Configuration, page 13-10 • CEF for PFC2 Configuration Guidelines and Restrictions, page 13-11 • Configuring CEF for PFC2, page 13-12 the MSFC2 to support MLS on a Catalyst 5000 family switch, refer to the Layer 3 Switching Software Configuration Guide at http://www.cisco.com/
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 222
    forwarding on the switch, rather than on the MSFC2. Layer 3 switching requires minimal support from the MSFC2. The MSFC2 routes any traffic that cannot be Layer 3 switched. Note Layer 3 switching supports the routing protocols configured on the MSFC2. Layer 3 switching does not replace the routing
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 223
    PFC2 2 Frame Header Destination Source MSFC2 MAC Source A MAC Layer Destination Source Destination B MAC MSFC2 MAC Layer 3 IP Header Control Socket Source Net/ Node/ Socket MSFC2 MAC Source A MAC n Destination B Frame Header Destination Source Destination B MSFC2 MAC MAC Layer 3 IPX Header
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 224
    , page 13-7 CEF for PFC2 Overview Supervisor Engine 2, PFC2, and MSFC2 provide Layer 3 switching with CEF for PFC2. CEF for PFC2 is permanently enabled on Supervisor Engine 2. Cisco IOS CEF is permanently enabled on the MSFC2 in support of CEF for PFC2. CEF for PFC2 works with CEF (for unicast
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 225
    Decisions CEF for PFC2 provides Layer 3 switching based on: • Entries in the ACL ternary content addressable memory (TCAM) for based on the information in the routing tables on the MSFC2. The FIB supports 256K entries, which includes 16K IP multicast entries. With Guide-Releases 6.3 and 6.4 13-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 226
    weight Understanding the Adjacency Table For each FIB entry, CEF for PFC2 stores Layer 2 information from the designated MSFC2 to rewrite the packet during Layer 3 switching. CEF for PFC2 supports 256K adjacency table entries. Table 13-1 lists the adjacency Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 227
    PFC2 the outgoing interface. Note CEF for PFC2 provides Layer 3 switching when the and reset the appropriate expiration timers. CEF for PFC2 Examples Figure 13-1 shows a simple IP CEF A initiates an HTTP file transfer to Host C, the PFC2 uses the information in the FIB and adjacency table to
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 228
    Layer 3 Switching Works Chapter 13 Configuring CEF for PFC2 Figure 13-1 IP CEF Example Topology Source IP Engineering VLAN (IPX address 02.Cc). When Host A initiates a file transfer to Host C, the PFC2 uses the information in the FIB and adjacency table to forward packets from Host A to Host C.
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 229
    Entry Aging, page 13-10 • Flow Masks, page 13-10 NetFlow Statistics Overview CEF for PFC2 generates flow statistics for Layer 3-switched traffic, which are stored in the NetFlow table. NetFlow statistics -25). 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 13-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 230
    default CEF for PFC2 configuration. Table 13-2 Default CEF for PFC2 Configuration Feature CEF for PFC2 enable state CEF enable state on MSFC2 Default Value Enabled (cannot be disabled) Enabled (cannot be disabled) 13-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 231
    PFC2 Configuration (continued) Feature Default Value Multicast services (IGMP snooping or GMRP) Disabled Multicast routing on MSFC2 Disabled globally PIM routing on MSFC2 numbers, CEF for PFC2 cannot support the standby use-bia HSRP command. • CEF for PFC2 supports the following ingress and
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 232
    with the PFC2 and the MSFC2. No configuration is required. To display all the Layer 3-switching entries on the supervisor engine, perform this task: Task Command Display Layer 3-switching information. show mls entry [cef] | [netflow-route] 13-12 Catalyst 6000 Family Software Configuration Guide
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 233
    for PFC2 Configuring CEF for PFC2 This example shows how to display the Layer 3-switching entries: Console> (enable) show mls entry Mod FIB-Type Destination-IP Destination-Mask NextHop-IP Weight 15 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 13-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 234
    This section describes how to enable IP multicast routing on the MSFC2. For more detailed IP multicast configuration information, refer to the "IP Multicast" section of the Cisco IOS IP and IP Routing Configuration Guide at http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/ip_c
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 235
    PFC2 Configuring CEF for PFC2 Enabling IP PIM on an MSFC2 Interface You must enable PIM on MSFC2 interfaces before IP multicast will function on those interfaces. To enable IP PIM on an MSFC2 on an MSFC2 interface using an MSFC2 MSFC2 Interface" section on page 13-15. 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 236
    Configuring CEF for PFC2 Chapter 13 Configuring CEF for PFC2 To enable IP MMLS on display IP multicast information: • Displaying IP Multicast Information on the MSFC2, page 13-16 • Displaying IP Multicast Information on the 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 237
    13 Configuring CEF for PFC2 Configuring CEF for PFC2 Displaying the IP Multicast Routing Table The show ip mroute command displays the IP multicast routing table on the MSFC2. To display the | statistics] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 13-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 238
    Chapter 13 Configuring CEF for PFC2 This example shows how to display IP MMLS statistics on the MSFC: Router# show mls ip 61980 Hardware switched outgoing interfaces: Vlan20 Vlan9 RFD-MFD installed: Vlan12 13-18 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 239
    [no] debug mdss all Turns on all MDSS messages. 1. MDSS = Multicast Distributed Switching Services Using Debug Commands on the SCP Table 13-4 describes the Serial Control Protocol (SCP)-related debug commands to troubleshoot the SCP that runs over the Ethernet out-of-band channel (EOBC). Table
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 240
    Chapter 13 Configuring CEF for PFC2 Table 13-4 SCP Debug Commands ] This example shows how to display IP multicast statistics for the MSFC2: Console (enable) show mls multicast statistics Router IP Router Name Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 241
    Chapter 13 Configuring CEF for PFC2 Configuring CEF for PFC2 Receive: Open Connection Requests: 1 Keep Alive Messages: You can display entries based on any combination of the participating MSFC2, the VLAN, the multicast group address, or the multicast traffic Guide-Releases 6.3 and 6.4 13-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 242
    CEF for PFC2 1.1.9.254 224.1.1.1 1.1.5.252 224.1.1.1 1.1.9.254 224.1.1.1 Total Entries: 10 Console> (enable) 1.1.13.1 1.1.12.1 1.1.11.3 472770 15840 473667 82261980 13 2756160 20 82418058 11 This example shows how to display IP multicast entries for a specific MSFC2: Console> (enable
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 243
    Chapter 13 Configuring CEF for PFC2 Configuring NetFlow Statistics Specifying the NetFlow Table Entry Aging-Time Value The entry aging time for switching aging time IPX set to 512 Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 13-23
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 244
    Configuring NetFlow Statistics Chapter 13 Configuring CEF for PFC2 Specifying NetFlow Table IP Entry Fast Aging Time and Packet Threshold Values Note IPX purges all existing entries in the NetFlow table. 13-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 245
    Chapter 13 Configuring CEF for PFC2 Configuring NetFlow Statistics To set the minimum NetFlow statistics flow mask, perform this task in packets switched = 2 Total bytes switched = 112 Total routes = 48 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 13-25
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 246
    Configuring NetFlow Statistics Chapter 13 Configuring CEF for PFC2 IP statistics flows aging time = 256 seconds IP statistics flows fast aging time = 0 seconds, packet correspond to the forwarding entries. 13-26 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 247
    Chapter 13 Configuring CEF for PFC2 Configuring NetFlow Statistics Clearing All NetFlow Statistics To clear all NetFlow IP and IPX statistics, perform this tcp 1652 23 MLS IP entry cleared Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 13-27
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 248
    Chapter 13 Configuring CEF for PFC2 Clearing NetFlow IPX Statistics information that you can send to your technical support representative for analysis if necessary. To display can send to your technical support representative. Note The show tech-support command displays supervisor engine system
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 249
    Card (MSFC) or MSFC2. Note For complete PFC2, and MSFC2 provide Layer 3 switching with Cisco Express Forwarding for PFC2 (CEF for PFC2). See Chapter 13, "Configuring CEF for PFC2 minimal support from the MSFC. Layer 3 switching supports the routing protocols , and troubleshooting. Layer
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 250
    Source MSFC MAC Source A MAC Layer 3 IP Header Destination Source Destination B IP Source A IP TTL Checksum n calculation1 Data FCS 14-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 251
    MSFC MAC Layer 3 IP Header Destination Source Group G1 IP Source A IP TTL Checksum n-1 calculation2 Data FCS 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 252
    the internal MLS-RP. Supervisor Engine 1, PFC, and MSFC or MSFC2 provide Layer 3 switching with MLS. Layer 3 switching with MLS to-end conversations, or flows, between users or applications. MLS supports unicast and multicast flows: • A unicast flow can be any Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 253
    to identify the VLANs on which traffic to a given multicast flow should be replicated. These MSFC IOS commands affect the multicast MLS cache entries on the switch: • Using the clear ip mroute command . 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 254
    -6 • Flow Mask Mode and show mls entry Command Output, page 14-7 Flow Mask Modes The PFC supports only one flow mask (the most specific one) for all MSFCs that are Layer 3 switched by that and protocol ports. 14-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 255
    5/8 1/1 2345 123456 09:03:32 09:08:12 Total Entries: 2 * indicates TCP flow has ended Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 256
    Host A through the switch to Host C. The PFC uses this information to rewrite subsequent packets from Host A to Host C. 14-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 257
    IPX MLS entry so that the correct VLAN identifier is used when encapsulating traffic on trunk links. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 258
    (no fast aging) 0 packets Table 14-2 shows the default IP MMLS switch configuration. Table 14-2 Default IP MMLS Supervisor Engine Configuration Feature Default Value Multicast services (IGMP snooping or GMRP) Disabled IP MMLS Enabled 14-10 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 259
    1500. To change the MTU on an IP MLS-enabled interface, enter the ip mtu mtu command. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 260
    • Only ARPA rewrites are supported for IP multicast packets. • Subnetwork Address Protocol (SNAP) rewrites are not supported. • You must enable one of the multicast services (IGMP snooping or GMRP) hardware. 14-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 261
    Size, page 14-14 IPX MLS Interaction with Other Features Other IOS software features affect IPX MLS as follows: • IPX accounting-IPX be enabled on an IPX MLS-enabled interface. • IPX EIGRP-To support MLS on EIGRP interfaces you must set the Transport Control (TC) Guide-Releases 6.3 and 6.4 14-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 262
    specified as the MLS route processor (MLS-RP) for Catalyst 5000 family switches using MLS. Refer to the Layer 3 Switching Configuration Guide-Catalyst 5000 Family, 2926G Series, 2926 Series Switches, for MLS configuration procedures. Disabling and Enabling Unicast MLS on an MSFC Interface Unicast
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 263
    ip flowmask for unicast: current ipx flowmask for unicast: Router# enabled enabled disabled destination only destination only 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 264
    Commands on the MSFC Table 14-6 describes MLS-related debug commands that you can use to troubleshoot MLS problems on the MSFC. Table 14-6 MLS Debug Commands Command [no] debug l3-mgr events [ messages. 14-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 265
    . For example, a value of 65 is adjusted to 64 and a value of 127 is adjusted to 128. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 266
    IPX MLS entries in the MLS table is low relative to IP MLS entries in full-flow mode. 14-18 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 267
    mode: Task Set the minimum IP MLS flow mask. Command set mls flow {destination | destination-source | full} 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 268
    Displaying CAM Entries on the Supervisor Engine The show cam command displays the content-addressable memory (CAM) entries associated with a specific MAC address. If the MAC address belongs to Status -----H H 14-20 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 269
    -f4 25 00-10-07-38-29-18 26,111 00-d0-d3-9c-e3-f4 112 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 270
    2 SNAP ARPA 5/8 1/1 2345 1234567 09:03:32 09:08:12 Total IP entries: 5 * indicates TCP flow has ended. 14-22 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 271
    .1.0.56 (Module 15): 3E.0010.298a.0c00 13 00-00-00-00-00-09 26 4/7 Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-23
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 272
    Port MSFC 51.0.0.3: 10.0.2.15 51.0.0.2 TCP 37819 Telnet 08-00-20-7a-07-75 10 3/1 Console> (enable) 14-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 273
    -00-00-79-10 11 ARPA ARPA - 3943 181378 00:15:54 00:00:00 Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-25
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 274
    : • Displaying IP MLS Statistics by Protocol, page 14-27 • Displaying Statistics for MLS Cache Entries, page 14-27 14-26 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 275
    -Bytes MSFC 127.0.0.12: 172.20.22.14 172.20.25.10 6 50648 80 3152 347854 Console> 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-27
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 276
    mls debug command displays MLS debug information that you can send to your technical support representative for analysis if necessary. To display MLS debug information, perform this task , page 14-30 14-28 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 277
    on the MSFC. For more detailed IP multicast configuration information, refer to the "IP Multicast" section of the Cisco IOS IP and IP Routing Configuration Guide at http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/ip_c/ipcprt3/index.htm Enabling IP Multicast Routing Globally
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 278
    )# mls ip multicast Router(config-if)# Use the no keyword to disable IP MMLS on an MSFC interface. 14-30 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 279
    , RPF nbr 80.0.0.2, RPF-MFD Outgoing interface list: Vlan10, Forward/Dense, 00:00:19/00:00:00, H 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-31
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 280
    found error:0 L3 entry exists error :0 Hash collision error :0 L3 entry not found error:0 Complete flow exists error :0 14-32 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 281
    memory Number of partial hardware-switched flows:2 Number of complete hardware-switched flows:5 Router# Using Debug Commands on the IP MMLS MSFC Table 14-9 describes IP MMLS-related debug troubleshooting Distributed Switching Services Description Configures Guide-Releases 6.3 and 6.4 14-33
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 282
    on the SCP Table 14-10 describes the Serial Control Protocol (SCP)-related debug commands to troubleshoot the SCP that runs over the Ethernet out-of-band channel (EOBC). Table 14-10 SCP mls multicast 14-34 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 283
    MAC 1.1.5.252 ? 00-10-29-8d-88-01 Transmit: Delete Notifications: 22 Acknowledgements: 75 Flow Statistics: 22 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-35
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 284
    473670 15810 473220 15840 2761380 20 82340280 12 2742066 20 82418580 11 2750940 20 82340280 12 2756160 20 14-36 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 285
    65142 22 30,37 172.20.49.159 224.1.1.8 1.1.22.2 396 235620 22 13,19 Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 14-37
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 286
    Configuring MLS Chapter 14 Configuring MLS 14-38 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 287
    family switches provide Layer 3 switching with Cisco Express Forwarding for Policy Feature Card 2 (CEF for PFC2) or with Multilayer Switching (MLS). You NDE is not supported for IP multicast or Internetwork Packet Exchange (IPX) traffic. Note NDE version 7 and NDE version 8 are not supported for the
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 288
    information on configuring CEF for PFC2, see Chapter 13, "Configuring CEF for PFC2." For information on configuring MLS entries from the statistics cache of one or more switches or Cisco routers. The switch or router transmits data to the flow Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 289
    Filter, page 15-8 • Specifying Protocols for Statistics Collection, page 15-8 • Removing Protocols for Statistics Collection, page 15-8 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 15-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 290
    NDE collector and UDP port for data export of hardware-switched packets. Command set mls nde {collector_ip | collector_name} {udp_port_number} 15-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 291
    the NDE source address on the MSFC: Router(config)# ip flow-export source vlan 10 Router(config)# 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 15-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 292
    Command Specify a destination and source subnet set mls nde flow destination [ip_addr_spec] source filter for an NDE flow. [ip_addr_spec] 15-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 293
    .69.194.140/255.255.255.255 Destination port filter is 23 Filter type: include Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 15-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 294
    this task in privileged mode: Task Remove protocols for statistics collection. Command clear mls statistics protocol {protocol port | all} 15-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 295
    : Task Remove the NDE IP address from the MSFC. Command Router(config)# no mls nde-address [ip_addr] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 15-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 296
    171.69.194.140/255.255.255.0 Destination port filter is 23 Total packets exported = 26784 Console> (enable) 15-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 297
    : • Understanding How ACLs Work, page 16-1 • Hardware Requirements, page 16-2 • Supported ACLs, page 16-2 • Applying Cisco IOS ACLs and VACLs on VLANs, page 16-7 • Using Cisco IOS ACLs in your Network, page 16-9 • Using VACLs with Cisco IOS ACLs, page 16-15 • Using VACLs in your Network, page 16-22
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 298
    is required to configure ACLs on Catalyst 6000 family switches is as follows: • Cisco IOS ACLs: - Policy Feature Card (PFC) and MSFC or MSFC2 - PFC2 and MSFC2 • VACLs and QoS ACLs: - PFC - PFC2 Note The QoS feature set supported on your switch is determined by which switching engine daughter card is
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 299
    Supported ACLs Cisco IOS ACLs Cisco IOS ACLs are configured on the MSFC VLAN interfaces. An ACL provides access control and consists of an ordered set of access control entries (ACEs). Many other features in Cisco IOS Cisco IOS One Cisco IOS ACL Cisco IOS software examines it multiple times. Cisco IOS
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 300
    traffic between hosts on a hub or another switch connected to the Catalyst 6000 family switch. ACEs Supported in VACLs A VACL contains an ordered list of access control entries (ACEs). Each VACL can type 16-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 301
    Chapter 16 Configuring Access Control Supported ACLs Table 16-1 ACE Types and Parameters (continued) ACE Type Layer 2 parameters TCP or UDP1 ICMP1 Other allows you to control how fragments are handled. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 302
    Supported ACLs Chapter 16 Configuring Access Control In this example, 10.1.1.2 is configured to serve HTTP connections. If you do udp any host 10.1.1.2 eq 69 5. permit udp any gt 1023 10.1.1.2 gt 1023 [...] 16-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 303
    Control Applying Cisco IOS ACLs and VACLs on VLANs Applying Cisco IOS ACLs and VACLs on VLANs This section describes how to apply Cisco IOS ACLs and order: 1. VACL for input VLAN 2. Input Cisco IOS ACL 3. Output Cisco IOS ACL 4. VACL for output VLAN 78-13315-02 Catalyst 6000 Family
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 304
    Cisco IOS ACLs and VACLs on VLANs Chapter 16 Configuring Access Control Figure 16-2 Applying ACLs on Routed Packets Routed Input IOS ACL Bridged VACL MSFC Output IOS VACL for input VLAN b. Input Cisco IOS ACL 2. Packets after multicast expansion: a. Output Cisco IOS ACL b. VACL for output VLAN
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 305
    ACL for output VLAN for packets originating from router Output IOS ACL VACL (Not supported on PFC2) Host B (VLAN 20) Host D (VLAN 20) 26965 Using Cisco IOS ACLs in your Network Note Configuring Cisco IOS ACLs on the Catalyst 6000 family switch routed-VLAN interfaces is the same as configuring ACLs
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 306
    . For PFC2: If MSFC2 to generate the appropriate ICMP-unreachable messages. These sections describe hardware and software handling of ACLs with PFC and PFC2: • Hardware and Software Handling of Cisco IOS hardware. Note IPX Cisco IOS ACLs with the the software: • Security Cisco IOS ACLs, page 16-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 307
    12 • Bridge-Groups, page 16-12 Security Cisco IOS ACLs The IP and IPX security Cisco IOS ACLs with PFC are as follows: • The IPX extended input and output ACLs are supported in the hardware when the ACL parameters type of denial-of-service attack. The TCP intercept Guide-Releases 6.3 and 6.4 16-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 308
    not supported. Bridge-Groups Cisco IOS bridge-group ACLs are handled in the software. Hardware and Software Handling of Cisco IOS ACLs with PFC2 This section describes hardware and software handling of Cisco IOS ACLs with the PFC2. 16-12 Catalyst 6000 Family Software Configuration Guide-Releases
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 309
    16-15 • Bridge-Groups, page 16-15 Security Cisco IOS ACLs The IP and IPX security Cisco IOS ACLs with PFC2 are as follows: • If either the "ip unreachables software. • IPX extended input and output ACLs are supported in the hardware when the ACL parameters are IPX Guide-Releases 6.3 and 6.4 16-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 310
    Cisco IOS which are a type of denial-of-service attack. The TCP intercept feature helps duration of the connection. The hardware support for TCP intercept on a PFC2 is as follows: 1. Once ip pbr command is not required (and not supported) on PFC2. WCCP HTTP requests subject to WCCP redirection are
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 311
    Cisco IOS ACLs NAT NAT-required flows are handled in the software without impacting non-NAT flow forwarding in the hardware. Unicast RPF Check The unicast RPF feature is supported in hardware on the PFC2. For ACL-based RPF checks, traffic denied by the unicast RPF ACL is forwarded to the MSFC2
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 312
    ACL storage being used, enter the show security acl resource-usage command. These sections provide Cisco IOS ACL and VACL configuration guidelines and examples: • Using the Implicit Deny Action, page deny. 16-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 313
    Examples These examples show the merge results for various Cisco IOS ACL and VACL configurations. Note that in these examples, one VACL and one Cisco IOS ACL are configured on the same VLAN. Example 1 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 314
    Using VACLs with Cisco IOS ACLs Chapter 16 Configuring Access Control ******** IOS ACL 1 deny ip any host 239.255.255.255 2 permit ip any any ******** MERGE ********** has any any lt 30 5 permit ip any any 16-18 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 315
    without L4 information ******** MERGE ********** has 801 ACEs Example 7 This example shows that the same Cisco IOS ACL that was used in Example 6 is merged with a VACL with Layer 4 port information 168 entries 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 316
    the affected ACE to be translated into more than one ACE. Note If you have a Cisco IOS ACL and a VACL on the same VLAN interface, the recommended total number of Layer 4 operations deny ... neq 6 redirect 16-20 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 317
    Chapter 16 Configuring Access Control Using VACLs with Cisco IOS ACLs Note There is no limit to the use of "eq" operators as the "eq" ACL1 Layer 4 operations: 5 • ACL2 Layer 4 operations: 4 • LOUs: 4 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 318
    6000 family switches might not be equipped with MSFCs (routers). In this configuration, the switch can still support a VACL and a QoS ACL. Suppose Host X and Host Y are in different VLANs and with the MSFC. 16-22 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 319
    direct broadcast traffic to a multicast destination by redirecting the traffic to a group of ports (see Figure 16-5). 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-23
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 320
    68 set security acl ip SERVER permit any commit security acl SERVER set security acl map SERVER 10 16-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 321
    acl ip SERVER permit ip any any commit security acl SERVER set security acl map SERVER 10 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-25
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 322
    This feature is only available with Supervisor Engine 2 with PFC2. ARP traffic is permitted on each VLAN by default. VLANs. • Cisco IOS ACLs that are mapped to a primary VLAN get mapped to the associated secondary VLANs. • You cannot map Cisco IOS ACLs to Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 323
    are not supported or have limited support on the Catalyst 6000 family switches. • Non-IP version 4/non-IPX Cisco IOS ACLs-The following types of Cisco IOS security node number and socket number are not supported when specifying the IPX flow. 78-13315-02 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 324
    them to NVRAM. Note You can configure Cisco IOS ACLs and VACLs from Flash memory instead of NVRAM. See the "Configuring and Storing VACLs and QoS ACLs in Flash Memory" section on page 16-42 for of ACLs. 16-28 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 325
    for using the redirect option: - Note that redirected packets can only go out a port that supports the VLAN that the traffic is in. - Note that the redirect option only involves taking packets , page 16-36 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-29
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 326
    1. permit ip host 172.20.53.4 any 2. permit ip any any 3. deny ip host 171.3.8.2 any Console> (enable) 16-30 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 327
    -IP precedence values that range between zero for low priority and seven for high priority. • tos-Type of service levels that range between 0 and 15. Note The ToS is bits 3 through 6 of the IP ToS progress. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-31
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 328
    the show security acl info command, see the "Showing the Contents of a VACL" section on page 16-36. 16-32 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 329
    not been mapped to a VLAN, enter the set security acl map command to map it to a VLAN. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-33
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 330
    : Console> (enable) commit security acl all ACL commit in progress. ACL MACACL1 is committed to hardware. Console> (enable) 16-34 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 331
    been committed: Console> (enable) set security acl map IPACL1 10 Commit ACL IPACL1 before mapping. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-35
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 332
    ACL IPACL1. VLAN 1 is mapped to IPX ACL IPXACL1. VLAN 1 is mapped to MAC ACL MACACL1. Console> (enable) 16-36 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 333
    all clear security acl map acl_name clear security acl map vlan clear security acl map acl_name vlan 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-37
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 334
    be an ATM port. • The capture port must be in the spanning tree forwarding state for the VLAN. 16-38 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 335
    NVRAM: Console> (enable) commit security acl my_cap ACL commit in progress. ACL my_cap successfully committed. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-39
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 336
    This feature is only available with Supervisor Engine 2 with Layer 3 Switching Engine II (PFC2). You can log messages about denied packets for the standard IP access list by entering ) or 7 (debugging). 16-40 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 337
    the new buffer replaces the old one and all flows in the old table are cleared. If either memory is not enough or the maximum number is over the limit, an error message is displayed and the Rate (pps) : 1000 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-41
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 338
    and QoS ACLs in Flash memory instead of NVRAM. Prior to this feature, all configuration information was stored in NVRAM. With the addition of QoS and security ACLs (VACLs), NVRAM could become full. In addition to limiting ACL configuration, filling up NVRAM can cause problems when you attempt to
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 339
    Manually Moving the VACL and QoS ACL Configuration to Flash Memory, page 16-44 • Running with the VACL and QoS ACL Configuration in Flash Memory, page 16-45 • Moving the VACL and QoS ACL Configuration Back to NVRAM, page 16-46 • Redundancy Synchronization Support Guide-Releases 6.3 and 6.4 16-43
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 340
    Configuration to Flash Memory If your VACL and QoS ACL configuration requirements require more memory than the 512-KB NVRAM, you can manually move the VACL and QoS ACL configuration to Flash memory as follows: 16-44 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 341
    VACL and QoS ACL configuration to Flash memory, QoS ACLs and VACL commit operations are no longer written to NVRAM. You have to copy the configuration to the Flash file manually as follows: • If you use it. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-45
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 342
    , if the VACL and QoS ACL configuration resides in Flash memory, the auto-config file on the active supervisor engine is feature is an extension of VACL redirection supported by the Policy Feature Card 2 (PFC2). It can prove to be particularly beneficial Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 343
    and software requirements are as follows: • PBF requires Supervisor Engine 2 with the Policy Feature Card 2 (PFC2) (WS-X6K-S2-PFC2). • PBF is not supported with an operating (booted) Multilayer Switch Feature Card 2 (MSFC2) in the Catalyst 6000 family switch that is being used for PBF. If you try to
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 344
    00:00:00:00:00:0B Interface: Ethernet0 58995 Enabling PBF and Specifying a MAC Address for the PFC2 Note The MAC address can be a default or user-specified MAC address. The default MAC address is dropped. 16-48 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 345
    this task in privileged mode: Task Disable PBF and clear the PBF MAC address. Command clear pbf 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-49
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 346
    acl all command. Note The same adjacency table entry can be used by more than one redirect ACE. 16-50 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 347
    specify an adjacency table entry for the PFC2, perform this task in privileged mode: Task Specify an adjacency table entry for the PFC2. Command set security acl adjacency adjacency_name . Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-51
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 348
    adjacency table entry in PBF VACLs in the following order: 1. Clear the redirect ACE. 2. Commit the PBF VACL. 16-52 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 349
    : • Linux, page 16-54 • Sun Workstation, page 16-54 • MS-Windows/NT/2000 Hosts, page 16-55 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-53
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 350
    device to the MAC address of the PFC2. Note The IP addresses in the following the hosts. PBF Limitations PBF does not support ARP; you must set a static ARP of ARP in all Sun Workstations. To overcome this problem, you need to define a dummy gateway, which is Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 351
    provides example configurations to enable PBF between hosts on VLAN 1 and hosts on VLAN 2 (see Figure 16-9). 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-55
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 352
    Chapter 16 Configuring Access Control Figure 16-9 Policy-Based Forwarding Configuration Example Catalyst 6500 series switches PFC2 MAC address: 00-11-22-33-44-55 6/17 6/9 VLAN 1 VLAN 1 Hosts IP ip2 2 16-56 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 353
    -0a-11 6/9 [ALL] 2 00-0a-0a-0a-0a-10 6/9 [ALL] Total Matching CAM Entries Displayed for 6/9 = 16 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 16-57
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 354
    Chapter 16 Configuring Access Control This example shows how to display the PBF status and the PFC2 MAC address: Console> (enable) show pbf Pbf status Mac address ok 00-11-22 33-44-55 0x000260f8 b_4 16-58 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 355
    802.1Q trunk ports. Note GARP and GVRP are industry-standard protocols described in IEEE 802.1p. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 17-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 356
    GVRP Statistics, page 17-8 • Disabling GVRP on Individual 802.1Q Trunk Ports, page 17-8 • Disabling GVRP Globally, page 17-9 17-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 357
    must be an 802.1Q trunk port, either through CLI configuration or Dynamic Trunking Protocol (DTP) negotiation. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 17-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 358
    created dynamically on 802.1Q trunks in the normal registration mode. Note Dynamic VLAN creation supports all VLAN types. To enable GVRP dynamic VLAN creation on the switch, perform this task Console> (enable) 17-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 359
    GVRP Fixed Registration Configuring an 802.1Q trunk port in fixed registration mode allows manual creation and registration of VLANs, prevents VLAN deregistration, and registers all VLANs known > (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 17-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 360
    Tree Protocol (STP) topology reconfiguration on a port connected to a device that does not support Per-VLAN STP+ (PVST+), configure the GVRP active applicant state on the port. state (active mode disabled). 17-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 361
    . Console> (enable) show garp timer Timer Timer Value (milliseconds) Join 200 Leave 600 LeaveAll 10000 Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 17-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 362
    an individual 802.1Q trunk port. Verify the configuration. Command set port gvrp disable mod/port show gvrp configuration 17-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 363
    how to disable GVRP globally on the switch: Console> (enable) set gvrp disable GVRP disabled Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 17-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 364
    Configuring GVRP Chapter 17 Configuring GVRP 17-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 365
    Guidelines, page 18-3 • Configuring VMPS and Dynamic Port VLAN Membership, page 18-3 • Troubleshooting VMPS and Dynamic Port VLAN Membership, page 18-8 • Dynamic Port VLAN Membership with VMPS -to-VLAN mapping. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 18-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 366
    VLAN VMPS secure mode VMPS no domain requests Default Configuration Disabled Null None vmps-config-database.1 Null Open Allow 18-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 367
    VMPS Clients, page 18-5 • Administering and Monitoring VMPS, page 18-6 • Configuring Static VLAN Port Membership, page 18-7 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 18-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 368
    . Move the ASCII text file to a TFTP server so it can be downloaded to the switch. Command show cam - - 18-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 369
    vmps server ip_addr [primary] show vmps server set port membership mod/port dynamic show port [mod[/port]] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 18-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 370
    [vlan_name] To show VMPS statistics, perform this task in privileged mode: Task Show VMPS statistics. Command show vmps statistics 18-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 371
    dvlan statistics' to see reconfirm status Console> (enable) To download the VMPS database manually (to download a changed database configuration file or retry after a failed download attempt), [mod[/port]] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 18-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 372
    database. You can fix this problem by increasing the dynamic random-access memory (DRAM). After VMPS successfully downloads VMPS to 3 using the set logging level vmps 3 command. Troubleshooting Dynamic Port VLAN Membership A dynamic port might shut down under Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 373
    vlan-name ExecStaff address fedc.ba98.7654 vlan-name --NONE-address fedc.ba23.1245 vlan-name Purple ! 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 18-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 374
    configuration file is called Bldg-G.db and is stored on a TFTP server with IP address 172.20.22.7. 18-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 375
    .20.26.158 Catalyst 6500 series switches Secondary VMPS Server 3 Switch 10 172.20.26.159 55908 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 18-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 376
    data • Auxiliary VLAN ID-VLAN ID of an auxiliary VLAN • Native VLAN ID-VLAN ID of a native VLAN 18-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 377
    auxiliary VLAN ID is manually configured, the VMPS server is queried for packets coming from the PC, not for packets coming from the IP phone. • All packets except Cisco Discovery Protocol (CDP) > (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 18-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 378
    > (enable) set port auxiliaryvlan 5/10 223 Auxiliary vlan cannot be set to 223 as PVID=223. Console> (enable) 18-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 379
    . The output shows that there is one supervisor engine and four additional modules installed in the chassis. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 19-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 380
    WS-X6K-SUP1-2GE ok 2 2 24 100BaseFX MM Ethernet WS-X6224-100FX-MT ok 33 8 1000BaseX Ethernet WS-X6408-GBIC ok 4 4 48 10/100BaseTX (Telco) WS-X6248-TEL ok 5 5 48 10/100BaseTX (RJ-45) WS on page 19-1. 19-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 381
    Broadcast-Drop 1/1 - 0 Port Send FlowControl Receive FlowControl admin oper admin oper 1/1 desired off off off RxPause TxPause 0 0 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 19-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 382
    port capabilities for switch ports: Console> (enable) show port capabilities 1/1 Model WS-X6K-SUP1A-2GE Port 1/1 Type No Connector Speed 1000 Duplex full Trunk encap type 802.1Q,ISL are possible. 19-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 383
    encryption feature provides security for Telnet sessions to the switch. Secure Shell encryption is supported for remote logins to the switch only. Telnet sessions initiated from the switch Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 19-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 384
    , perform this task in privileged mode: Task Command Disconnect an active user session on the switch. disconnect {console | ip_addr} 19-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 385
    from normal executive and privileged executive mode. In normal executive mode, the ping command supports the -s parameter, which allows you to specify the packet size and packet count in progress, press Ctrl-C. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 19-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 386
    ----17.20.2.3 PING Statistics---10 packets transmitted, 10 packets received, 0% packet loss round-trip (ms) min/avg/max = 2/2/3 Console> 19-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 387
    when multiple devices are attached to one port through hubs, or when multiple neighbors are on a port. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 19-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 388
    a value large enough for the datagram to reach the destination host (or until the maximum TTL is reached). 19-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 389
    2 ms 2 ms 1 ms 2 ms 2 ms 2 10.1.1.100 (10.1.1.100) 2 ms 4 ms 3 ms 3 ms 3 ms 3 ms Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 19-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 390
    Using IP Traceroute Chapter 19 Checking Port Status and Connectivity 19-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 391
    , page 20-16 • Displaying System Status Information for Technical Support, page 20-17 Setting the System Name and System Prompt default configuration has no system name configured. If you do not manually configure a system name, the system name is obtained through the Guide-Releases 6.3 and 6.4 20-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 392
    than symbol [>] is appended). The prompt is updated whenever the system name changes, unless you manually configure the prompt using the set prompt command. The switch performs a DNS lookup for the > (enable) 20-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 393
    -Status Temp-Alarm Sys-Status Uptime d,h:m:s Logout ok none ok off ok 0,04:04:07 20 min 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 20-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 394
    describe how to configure and clear a login banner: • Configuring a Login Banner, page 20-5 • Clearing the Login Banner, page 20-5 20-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 395
    switch. Verify the currently defined command aliases. Command set alias name command [parameter] [parameter] show alias [name] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 20-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 396
    Console> (enable) sm8 Mod Module-Name Ports Module-Type Model Serial-Num Status 8 2 DS3 Dual PHY ATM WS-X5166 007243262 ok Mod MAC-Address(es) Hw Fw Sw 8 00-60-2f-45-26-2f 2.0 1.3 [name] 20-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 397
    metric (hop count) for the route. The destination IP network address can be variably subnetted to support Classless Interdomain Routing (CIDR). You can specify the subnet mask (netmask) for a destination network 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 20-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 398
    arp permanent command, the ARP entry is retained even after a system reset. Because most hosts support dynamic resolution, you usually do not need to specify static or permanent ARP cache entries. > (enable) 20-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 399
    if connectivity is lost, the system will reset in 30 minutes and return to the previous configuration. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 20-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 400
    is advanced ahead of the scheduled reset time, the reset will take place 5 minutes after the current time. 20-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 401
    AC-input and DC-input power supplies in the same chassis. For detailed information on supported power supply configurations for each chassis, refer to the Catalyst 6000 Family Installation Guide. Catalyst 6000 family modules have different power requirements and, depending upon the wattage of the
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 402
    messages are generated. • The system disables the lower wattage power supply; the higher wattage supply powers the system. 20-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 403
    down. If not enough power is available, the module status changes from power-down to power-deny. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 20-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 404
    1: WS-X6K-SUP1A-2GE WS-X6K-SUP1-2GE Supervisor Engine 1 with PFC: WS-X6K-SUP1A-PFC Supervisor Engine 1 with PFC and MSFC: WS-X6K-SUP1A-MSFC Supervisor Engine 1 with PFC and MSFC2: WS-X6K-S1A-MSFC2 Supervisor Engine 2 with PFC2: WS-X6K-S2-PFC2 Supervisor Engine 2 with PFC2 and MSFC2: WS-X6K-S2-MSFC2
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 405
    -GBIC 2.00A 2.00A 16-Port Gigabit Ethernet: WS-X6416-GBIC WS-X6416-GE-MT WS-X6316-GE-TX WS-X6516-GE-TX 2.81A 2.50A 5.15A 3.45A 1-Port OC-12 ATM: WS-X6101-OC12-MMF WS-X6101-OC12-SMF 2.10A 2.10A WAN module: WS-X6182-2PA (FlexWAN) 2.38A1 Optical Services Modules: OSM-2OC12-POS-MM, -SI, -SL
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 406
    Indications There are two alarm types, major and minor. Major alarms indicate a critical problem that could lead to the system being shut down. Minor alarms are for informational purposes refer to the Catalyst 6000 Family Module Installation Guide. 20-16 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 407
    also. 4. See the "Power Management" section on page 20-11 for instructions. Displaying System Status Information for Technical Support These sections describe how to display system status information for technical support: • Generating a System Status Report, page 20-18 • Using System Dump Files
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 408
    Information for Technical Support Chapter 20 Administering the Switch Generating a System Status Report Using a single command, you can generate a report that contains status information about your switch. The information generated is useful when reporting a problem to Cisco Technical Assistance
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 409
    Switch Displaying System Status Information for Technical Support This example shows how to enable the (enable) The size of the file system depends on the size of your memory card. An error process will generate a core image that is proportional to the Guide-Releases 6.3 and 6.4 20-19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 410
    Information for Technical Support Chapter 20 Administering the 00000000 T5: 00000007 T6: 00000000 T7: 00000000 S0: 00000001 S1: 00000032 S2: 81F1E9F8 S3: 80A74BC8 S4: 80C8DBDC S5: 000006E8 S6: 00000000 S7: 00000000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 411
    , page 21-4 • Understanding How Kerberos Authentication Works, page 21-4 • Understanding How 802.1x Authentication Works, page 21-7 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 412
    other authentication methods at the same time. The switch attempts local authentication only if the other authentication methods fail. 21-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 413
    of one another, so a given TACACS+ configuration can use any or all of the three services. When the TACACS+ server receives the packet, it does the following: • Authenticates the user reenabled automatically. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 414
    about how the RADIUS protocol operates, refer to RFC 2138, "Remote Authentication Dial In User Service (RADIUS)." You can configure the following RADIUS parameters on the switch: • Enable or from the network. 21-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 415
    center (KDC) Service credential SRVTAB Ticket granting ticket (TGT) Definition Applications and services that have been modified to support the Kerberos credential cannot use a Kerberized login procedure. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 416
    successfully authenticated to the KDC. The client then builds a service credential request and sends this to the KDC. This request the KDC share. 6. If the Telnet client has been instructed to do so, it forwards the TGT to the switch. Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 417
    server through the in-band management port. Telnet does not support non-Kerberized login. If you launch a non-Kerberized login, to the switch. 5. If you want to access other network services, the KDC must be contacted directly for authentication. To obtain the Guide-Releases 6.3 and 6.4 21-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 418
    and authorizes the supplicant when instructed to do so by the authentication server. Authentication server Entity that provides the authentication service for the authenticator PAE. It PAE=port access entity 21-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 419
    particularly when the authentication server is located remotely, because RADIUS has extensions that support encapsulation of EAP frames built into it. 802.1x Parameters Configurable on the Example, page 21-48 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 420
    Port 750 NULL string Disabled Not mandatory Disabled Force-Authorized Disabled Enable 60 seconds 30 seconds 30 seconds 21-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 421
    feature on that port. You cannot enable security on an 802.1x port. • 802.1x is only supported on Ethernet ports. • You cannot enable 802.1x on a trunk port until you turn off the trunking source port. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 422
    ) enabled(primary) attempt limit 3 3 lockout timeout (sec) disabled disabled Console> (enable) Http Session disabled disabled disabled enabled(primary) - 21-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 423
    Enable Password, page 21-15 • Disabling Local Authentication, page 21-15 • Recovering a Lost Password, page 21-16 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 424
    release 5.4 remain non-case sensitive. You must reset the password after installing software release 5.4 to activate case sensitivity. 21-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 425
    RADIUS or TACACS+ server is not online, you may be unable to log in to the switch. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 426
    the password if you are connected through a Telnet connection. Enter the reset system command to reboot the switch. 21-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 427
    .20.52.10 172.20.52.10 added to TACACS server table as backup server. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 428
    : Console> (enable) set authentication login tacacs enable tacacs login authentication set to enable for console and telnet session. 21-18 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 429
    You can specify the timeout interval between retransmissions to the TACACS+ server. The default timeout is 5 seconds. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 430
    request: disabled Tacacs-Server 172.20.52.3 172.20.52.2 172.20.52.10 Console> (enable) Status ------- primary 21-20 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 431
    TACACS+ directed request: Console> (enable) set tacacs directedrequest disable Tacacs direct request has been disabled. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 432
    shows how to clear the TACACS+ key: Console> (enable) clear tacacs key TACACS server key cleared. Console> (enable) 21-22 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 433
    Count, page 21-27 • Specifying the RADIUS Deadtime, page 21-28 • Clearing RADIUS Servers, page 21-29 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-23
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 434
    length of the key is limited to 65 characters. It can include any printable ASCII characters except tabs. 21-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 435
    and TACACS+, you can use the primary keyword to force the switch to try RADIUS authentication first. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-25
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 436
    assigned to the $enab15$ user. If your RADIUS server does not support the $enab15$ username, you can set the service-type attribute (attribute 6) to Administrative (value 6) for a RADUIS user > (enable) 21-26 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 437
    verify the configuration: Console> (enable) set radius retransmit 4 Radius retransmit count set to 4. Console> (enable) show radius 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-27
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 438
    ) enabled Enable Authentication: Console Session Telnet Session tacacs disabled disabled radius enabled(primary) enabled(primary) local enabled enabled 21-28 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 439
    Login Authentication tacacs radius local Console Session disabled disabled enabled(primary) Telnet Session disabled disabled enabled(primary) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-29
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 440
    Authentication: Console Session Telnet Session tacacs disabled disabled radius disabled disabled local enabled(primary) enabled(primary) Console> (enable) 21-30 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 441
    : ank user1/[email protected] Using the admin.local ktadd command, create the database entry for the switch as follows: ktadd host/[email protected] Move the keytab file to a place where the switch can reach it. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 442
    Telnet Session tacacs disabled disabled radius disabled disabled kerberos enabled(primary) enabled(primary) local enabled enabled kerberos> (enable) 21-32 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 443
    is a domain consisting of users, hosts, and network services that are registered to a Kerberos server. To authenticate a config key: Kerberos SRVTAB Entries Srvtab Entry 1:host/[email protected] 0 932423923 1 1 8 01;;8>00>50;0=0=0 kerberos Configuration Guide-Releases 6.3 and 6.4 21-33
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 444
    CISCO CISCO.COM Kerberos DnsDomain-Realm entry set to CISCO - CISCO.COM Console> (enable) Console> (enable) clear kerberos realm CISCO CISCO.COM Kerberos DnsDomain-Realm entry CISCO - CISCO each host in turn and manually copy the files onto the for each Kerberos principal (service) on the switch. The
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 445
    key: Kerberos SRVTAB Entries Srvtab Entry 1:host/[email protected] 0 932423923 1 1 8 03;;5>00>50;0=0=0 Srvtab Entry 2:host/[email protected] 0 933974942 1 1 8 00?58:127: principal_type 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-35
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 446
    kerberos> (enable) clear kerberos srvtab entry host/[email protected] 0 kerberos> (enable) Enabling Credentials Forwarding services: Console> (enable) set kerberos clients mandatory Kerberos clients set to mandatory Console> (enable) 21-36 Catalyst 6000 Family Software Configuration Guide
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 447
    Pre Authentication Method set to Encrypted Unix Time Stamp Kerberos config key: Kerberos SRVTAB Entries Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-37
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 448
    Encrypted Unix Time Stamp Kerberos config key:abcd Kerberos SRVTAB Entries Srvtab Entry 1:host/[email protected] 0 933974942 1 1 8 12151>>3>11 kerberos> (enable) To clear the DES command. 21-38 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 449
    key: Kerberos SRVTAB Entries Srvtab Entry 1:host/[email protected] 0 932423923 1 1 8 03;;5>00>50;0=0=0 Srvtab Entry 2:host/[email protected] 0 933974942 1 1 8 00?58:127: . Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-39
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 450
    21-41 • Setting and Enabling Automatic Reauthentication of the Supplicant, page 21-42 • Manually Reauthenticating the Supplicant, page 21-42 • Enabling Multiple Hosts, page 21-43 • Disabling control enable 21-40 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 451
    start option enabled for port 4/1. Console> (enable) set port dot1x 4/1 initialize Port 4/1 initializing... Port 4/1 dot1x initialization complete. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-41
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 452
    for supplicants connected to a specific port. To manually reauthenticate the supplicant connected to a specific port, see the "Manually Reauthenticating the Supplicant" section on page 21-42. on page 21-42. 21-42 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 453
    port dot1x mod/port re-authenticate to a specific port. This example shows how to manually reauthenticate the supplicant connected to port 1 on module 4: Console> (enable) set port from 0 to 65535 seconds. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-43
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 454
    frame to 15 seconds: Console> (enable) set dot1x supp-timeout 15 dot1x supp-timeout set to 15 seconds. 21-44 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 455
    802.1x configuration parameters to the default values with a single command, which also globally disables 802.1x. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-45
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 456
    : Console> (enable) show port dot1x help Usage: show port dot1x [] show port dot1x statistics [] 21-46 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 457
    Display the PAE capabilities, protocol version, system-auth-control, and other global dot1x parameters. Command show dot1x 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-47
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 458
    tacacs server 172.20.52.10 172.20.52.10 added to TACACS server table as primary server. 21-48 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 459
    21-50 • RADIUS Authorization, page 21-51 Authorization Overview Catalyst 6000 family switches support TACACS+ and RADIUS authorization. Authorization limits access to specified users using a dynamically . 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-49
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 460
    disabled the command authorization feature, the TACACS+ server will allow you to execute any command on the switch. 21-50 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 461
    you, and then logs you in to the EXEC mode. If you have Administrative/Shell (6) Service-Type access, the NAS authenticates you, and then logs you in to the privileged mode. Configuring types of connections. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-51
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 462
    fallback option is deny: Console> (enable) set authorization exec enable tacacs+ deny both Successfully enabled enable authorization. Console> 21-52 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 463
    disable authorization for both console port and Telnet connection attempts. set authorization enable disable [console | telnet | both] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-53
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 464
    deny deny - Console: -------- Primary ------- exec: tacacs+ enable: tacacs+ commands: config: tacacs+ all: - Console> (enable) Fallback -------- deny deny deny - 21-54 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 465
    of 6) in the RADIUS server to launch the user into enable mode in the RADIUS server. If the service-type is set for anything other than 6-administrative (for example, 1-login, 7-shell, or 2-framed), you 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-55
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 466
    for which the action lasted. You can use the accounting feature for security, billing, and resource allocation purposes. 21-56 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 467
    NAS, and then the system deletes the record from memory. The amount of memory used by the NAS for accounting varies depending on information of the event (when the event started, type of service, and traffic statistics). • Stop records-Include complete information of Guide-Releases 6.3 and 6.4 21-57
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 468
    : Radius Retransmit: Radius Timeout: 0 minutes 2 5 seconds Radius-Server Status 172.20.52.3 primary Console> (enable) Auth-port -----------1812 21-58 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 469
    Feature Accounting Accounting events (exec, system, commands, and connect) Accounting records Default Value Disabled Disabled Stop-only 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-59
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 470
    connect enable stop-only tacacs+ Accounting set to enable for connect events in stop-only mode. Console> (enable) 21-60 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 471
    accounting for system events. Command set accounting connect disable set accounting exec disable set accounting system disable 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-61
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 472
    actions on tty288091924, User (null) Priv 0 Overall Accounting Traffic: Starts Stops Active Exec 0 0 0 Connect 0 0 0 Command 0 0 0 System 1 2 0 Console> (enable) 21-62 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 473
    commands: config: - - all: tacacs+ stop-only TACACS+ Suppress for no username: enabled Update Frequency: periodic, Interval = 120 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 21-63
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 474
    actions on tty288091924, User (null) Priv 0 Overall Accounting Traffic: Starts Stops Active Exec 0 0 0 Connect 0 0 0 Command 0 0 0 System 1 0 0 Console> (enable) 21-64 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 475
    information. We do not support configurations where the MSFCs are Switching Engine II (Policy Feature Card 2 or PFC2) and Supervisor Engine 1 with Layer 3 Switching to refer to the MSFC and MSFC2 except where specifically differentiated. For 6000 Family Module Installation Guide. For syntax and
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 476
    interface (CLI) console, Telnet, Spanning Tree Protocol (STP), Cisco Discovery Protocol (CDP), and VLAN Trunk Protocol (VTP) are diagnostics on the active supervisor engine detect a major problem or an exception occurs, the active supervisor engine resets Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 477
    supervisor engine has a Flash PC card (PCMCIA) slot (slot0) in addition to the onboard Flash memory; this slot can hold a Flash PC card that can store additional boot images. Note Throughout this 22-14 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 478
    engine. Synchronization occurs when you change the boot variable. To run the new image, you must reset the system. 22-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 479
    have just made. To avoid this problem, the switch prompts you for Flash Slot Ports Module-Type Model Status 22 2 1000BaseX Supervisor WS-X6K-SUP1-2GE ok Mod Module-Name Serial-Num 2 SAD02330231 Mod WS-F6020 SAD02350211 0.101 Console> (enable) 78-13315-02 Catalyst 6000
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 480
    continue (y/n) [n]? y Console> (enable) 12/07/1998,17:04:39:SYS-5:Module 1 reset from Console// System Bootstrap, Version 3.1(2) Copyright (c) 1994-1997 by cisco Systems, Inc. System Bootstrap, Version 3.1(2) 22-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 481
    Engines Copyright (c) 1994-1997 by cisco Systems, Inc. Presto processor with 32768 Kbytes of main memory Autoboot executing command: "boot bootflash:cat6000 supervisor has synchronized the NMP image. Console> 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 482
    occur, ensuring that the standby supervisor engine knows the current protocol state of supported features. The standby supervisor engine knows the current protocol states for all modules, synchronization data. 22-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 483
    few minutes for the global synchronization to complete. High-Availability Supported Features Note MLS flows are preserved from the active supervisor MSFC because high availability is not run on the MSFC IOS software. However, you can configure both MSFCs on the active Guide-Releases 6.3 and 6.4 22-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 484
    22 Configuring Redundancy Table 22-1 High Availability Feature Support Supported Features CEF COPS-DS COPS-PR DTP EtherChannel IOS ACLs MLS PAgP QoS SPAN STP Trunking UDLD could result in configuration loss. 22-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 485
    to enable high-availability versioning: Console> (enable) set system highavailability versioning enable Image versioning enabled. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 486
    engine is propagated to the standby supervisor engine). However, high availability cannot be supported. - OFF (standby-supervisor-not-operational-yet): The standby supervisor engine is detected > (enable) 22-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 487
    ) reset 2 This command will reset the system. Do you want to continue (y/n) [n]? y ... display text truncated Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 488
    However, the supervisor engine does not support TFTP booting. The number is included in these examples to be consistent with Cisco IOS conventions. Note These examples are not : bootflash:f1,1 - Bootflash: f1 22-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 489
    active supervisor engine configuration is as follows: - Runtime image: bootflash:f1 - Boot string: bootflash:f1,1 - Bootflash: f1 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 490
    supervisor engine is unable to allocate f2, causing the synchronization to fail. - An error is recorded in syslog. 22-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 491
    on the standby supervisor engine. • The active supervisor engine bootstring is modified to the following: f2,1; f1,1;. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 492
    :BTSYNC_f2,1;bootflash:f1,1;. MSFC Redundancy MSFC redundancy is described in these sections: • Dual MSFC Redundancy, page 22-19 • Single Router Mode Redundancy, page 22-41 • Manual-Mode MSFC Redundancy, page 22-45 22-18 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 493
    support PFC2 and MSFC2 • Two chassis with a supervisor engine in each-You must have at least one supervisor engine in each chassis. Each supervisor engine must be equipped with a PFC and an MSFC. Note Each MSFC must be running the same release of Cisco IOS Guide-Releases 6.3 and 6.4 22-19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 494
    information. Note For MSFC and MSFC2 memory requirements, refer to the Release Notes for MSFC publication: http://www.cisco.com/univercd/cc/td/doc/ packets. Note PFC2: With PFC2, only the designated MSFC programs the forwarding information base (FIB) the adjacency table, Cisco IOS software, and
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 495
    expected, the configuration on each MSFC must be the same (see Table 22-2 on page 22-20). 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 496
    use Cisco IOS access Cisco Express Forwarding] for PFC2 Cisco IOS ACLs with PFC" section on page 16-10. Note PFC2: For detailed information on hardware and software handling of IOS ACLs with the PFC2, see the "Hardware and Software Handling of Cisco IOS ACLs with PFC2 S2 have a supervisor
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 497
    manually Sup2/ service both even and odd VLANs. You can achieve further load sharing by using MSFC #2 in Switch S1 as the primary HSRP router for VLAN 12 and MSFC #2 as the primary HSRP router in Switch S2 for VLAN 23 (see Figure 22-3). 78-13315-02 Catalyst 6000 Family Software Configuration Guide
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 498
    VLANs 10, 12, 21, and 23 VLAN 10/21 VLAN 12/23 Trunk 1 Trunk 2 Switch S1 Switch S2 Slot 1 Slot 1 Sup#1/MSFC#1 HSRP Active VLAN 10: priority 110 HSRP Standby VLAN 21: priority 108 HSRP static ACLs. 22-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 499
    the designated MSFC2 programs many of the ASICs on the PFC2 including building the CEF table. In a designated MSFC2 HSRP failover to the nondesignated MSFC2, the PFC2 continues to the designated MSFC. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-25
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 500
    address as the default gateway so that if one router interface fails, service is not interrupted to those devices. The interface with the highest HSRP priority is the active interface for that HSRP group. Note PFC2: The PFC2 supports a maximum of 16 unique HSRP group numbers. You can use the same
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 501
    Note PFC2: shortcuts are created. This problem is independent of any MSFC Cisco IOS release. (This problem is documented in caveat specify a group_number, group 0 is used. To assist in troubleshooting, configure the group number to match the VLAN number. Router Guide-Releases 6.3 and 6.4 22-27
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 502
    Switch S1 Sup#1/MSFC#1 HSRP Active VLAN 21: priority 110 HSRP Standby VLAN 10: priority 109 Switch S2 This example shows how to configure HSRP on the MSFC in Switch S1: Console> (enable) switch console .21 22-28 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 503
    config-if)# ^Z Router# ^C^C^C This example shows how to configure HSRP on the MSFC in Switch S2: Console> (enable) switch console 15 Trying Router-15... Connected to Router-15. Type ^C^C^C to ip 172.20.100.10 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-29
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 504
    Supervisor Engines and MSFCs Figure 22-7 shows two Catalyst 6000 family switches (S1 and S2), each with a supervisor engine and MSFC in slot 1 (Sup #1/MSFC #1) 10: priority 109 HSRP Standby VLAN 21: priority 107 Switch S1 Switch S2 Slot 2 Sup#2/MSFC#2 HSRP Standby VLAN 10: priority 107 HSRP
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 505
    if)# ^Z Router# ^C^C^C This example shows how to configure HSRP on the MSFC in Switch S2: Console> (enable) switch console 15 Trying Router-15... Connected to Router-15. Type ^C^C^C -if)# standby 21 authentication Secret Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-31
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 506
    default. Caution Configuration synchronization is only supported for IP and IPX configurations. Before enabling using AppleTalk, DECnet, VINES or any other routing, you must manually ensure that identical configurations are on both MSFCs for all protocols. Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 507
    AdminStatus is enabled. Table 22-3 shows the interface and global configuration commands that contain the alt keyword. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-33
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 508
    high-availability redundancy, the configuration mode is disabled on the nondesignated MSFC; only the EXEC mode is available. 22-34 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 509
    supervisor engine in slot 2. See the "alt Keyword Usage" section on page 22-33 for more information. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-35
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 510
    to the Non-Designated Router 00:20:41: %RUNCFGSYNC-6-SYNCEVENT: Syncing Startup Configuration to the Non-Designated Router 22-36 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 511
    nasi ! end Router-15# show running-config Building configuration... Current configuration: ! version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption ! Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-37
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 512
    :c6msfc-boot-mz.120-7.XE1 ! ip subnet-zero ! ip cef redundancy high-availability config-sync cns event-service server ! ! ! interface Vlan1 ip address 70.0.70.4 255.255.0.0 alt ip address 70.0.70.5 255 MSFC. 22-38 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 513
    -15(config)# redundancy Router-15(config-r)# high-availability Router-15(config-r-ha)# config-sync End with CNTL/Z. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 22-39
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 514
    , it will become the nondesignated MSFC; see the "Scenario 4: Nondesignated MSFC Comes Up" section on page 22-39. 22-40 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 515
    an alternative to internally redundant (dual) MSFC2 configurations where both MSFC2s are active at the same time. PFC2 and MSFC2 - Supervisor Engine 1 with PFC and MSFC or MSFC2 Note Cisco IOS Release 12.1(8a)E4 provides initial support • Cisco IOS Release 12.1(8a)E2 or
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 516
    router run the same Cisco IOS image. • SRM redundancy requires that a Cisco IOS image is present in the procedure assumes that the designated router is the MSFC2 in slot 1 and the nondesignated router is the MSFC2 in slot 2; the active supervisor engine is Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 517
    and nondesignated router. Note If you already have SRM-capable Cisco IOS images loaded, you do not need to perform Step 6. -router-mode Step 9 Step 10 Enter the write memory command on the designated router to ensure that the nondesignated Software Configuration Guide-Releases 6.3 and 6.4 22-43
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 518
    Router Mode Enabled This section describes how to upgrade the Cisco IOS image on the active and standby MSFC when SRM Step 7 Step 8 Step 9 On the active MSFC, enter the write memory command to ensure that the standby MSFC start-up configuration gets the boot Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 519
    availability Router(config-r-ha)#no single-router-mode Enter the write memory command on the designated router and nondesignated router. Enter the Cisco recommends using SRM rather than manual-mode MSFC redundancy to attain automatic Layer-3 failover capabilities in addition to unlimited support
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 520
    MSFC2 (both supervisor engines must have the same type of MSFC) - Supervisor Engine 2 with PFC2 and MSFC2 Cisco IOS software. Guidelines for Configuring Manual-Mode MSFC Redundancy Follow these guidelines to configure manual-mode MSFC redundancy: • Because the MSFC switchover is manual supported
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 521
    the supervisor engine. The switch console command is not supported on Telnet sessions. Accessing the Standby MSFC To access the Register For manual-mode MSFC redundancy, set the configuration registers as follows: Step 1 Step 2 From Cisco IOS configuration mode on Guide-Releases 6.3 and 6.4 22-47
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 522
    without problems. If Cisco IOS cisco Systems, Inc. Cat6k-MSFC platform with 131072 Kbytes of main memory
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 523
    effect rommon 2 > Step 10 Step 11 Enter the reset command at the ROMMON prompt to boot the system. After the MSFC has booted from the IOS configuration mode on the newly active MSFC's console port, enter the config-register 0x2102 command. 78-13315-02 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 524
    MSFC Redundancy Step 12 Enter ^C^C^C to return to the supervisor engine prompt. Chapter 22 Configuring Redundancy 22-50 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 525
    (NVRAM) configuration, the switch either stays in ROM-monitor mode or loads the supervisor engine system code. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 23-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 526
    (the ROM monitor knows the simple file system and supports the newly developed file system through the dynamic linked file manually. • When the boot field equals 0001, the switch loads the first valid system image found in onboard Flash memory. 23-2 Catalyst 6000 Family Software Configuration Guide
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 527
    . If there is no valid image to boot, the system enters ROM-monitor mode where you can manually specify an image to boot. The system stores and executes images in the order in which you added default setting. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 23-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 528
    port baud rate Default Configuration 0x10f System boots from the image specified in the BOOT environment variable 9600 baud 23-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 529
    that control the boot field and leaves the remaining bits unaltered. The following boot methods are supported: • ROM monitor-Enter the rommon keyword to force the switch to remain in ROM-monitor boot command. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 23-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 530
    register is 0x1800 ignore-config: disabled auto-config: non-recurring console baud: 2400 boot: the ROM monitor Console> (enable) 23-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 531
    means that the auto-config file will be executed without first clearing NVRAM. The default is overwrite. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 23-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 532
    the active supervisor engine. If a file with that name already exists on the standby supervisor engine, it is overwritten. 23-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 533
    is 0x1860 ignore-config: enabled auto-config: recurring console baud: 2400 boot: the ROM monitor Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 23-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 534
    .5-2-1.bin prepend BOOT variable = bootflash:cat6000-sup.5-2-1.bin,1;bootflash:cat6000-sup.5-5-1. bin,1;bootflash:cat6000-sup.4-5-2.bin,1; Console> (enable) 23-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 535
    privileged mode: Task Set the CONFIG_FILE environment variable. Command set boot auto-config device:filename[;device:filename...] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 23-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 536
    -config: disabled auto-config: recurring console baud: 9600 boot: image specified by the boot system commands Console> (enable) 23-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 537
    engine consists of two Flash devices on which you can store files: • bootflash: onboard Flash memory • slot0: Flash PC card in the PCMCIA slot Working with the Flash File System These a Flash Device, page 24-8 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 24-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 538
    either in NVRAM or Flash memory. This text file consists uses less NVRAM or Flash memory space than binary configuration mode. can also be saved to Flash memory. When operating in text file configuration to enter the write memory command to store the configuration. write memory Display the current
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 539
    configuration has been deleted from NVRAM. Configuration mode set to text. Use the write memory command to save configuration changes. System configuration file set to: nvram The nvram file :][filename] long 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 24-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 540
    to a TFTP server, rcp server, Flash memory, another Flash device, or to the running | config} Flash memory, to a Flash device, or to the running configuration. Copy a file from Flash memory to a TFTP server configuration. Copy the running configuration to Flash memory, copy config {flash | file-id
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 541
    successfully. Console> (enable) This example shows how to copy the running configuration to Flash memory: Console> (enable) copy config flash Flash device [bootflash]? slot0: Name of file successfully. Console> (enable) Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 24-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 542
    slot0: All deleted files will be removed, proceed (y/n) [n]? y Squeeze operation may take a while, proceed (y/n) [n]? y Erasing squeeze log Console> (enable) 24-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 543
    ) verify cat6000-sup.5-2-1-CSX.bin CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCCCCCCCCCCC File bootflash:cat6000-sup.5-2-1-CSX.bin verified OK Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 24-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 544
    memory, erasing all existing data. Note Flash PC cards formatted on Supervisor Engine 1 or on a route-switch processor (RSP)-based Cisco (enable) Note Supervisor Engine 2 and Supervisor Engine 1 do not support the same Flash PC card format. To use a Flash PC Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 545
    software release 6.1(3) is used in the examples): • 6.1(3) Flash image (standard)-cat6000-sup2.6-1-3.bin • 6.1(3) Flash image (CiscoView)-cat6000-sup2cv.6-1-3.bin • 6.1(3) Flash image ( and CiscoView image. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 25-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 546
    image file is downloaded to the supervisor engine Flash memory. You can store multiple image files on the Flash memory system devices (such as boot Flash and Flash PC -s /tftpboot Make sure that the /etc/services file contains this line: tftp 69/udp 25-2 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 547
    /etc/inetd.conf and /etc/services files. To restart the daemon, A power interruption (or other problem) during the download procedure can corrupt to the Flash memory on the standby download. On those platforms that support the Flash file system, you the Flash memory on the supervisor
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 548
    that type. The switch downloads the image file, erases the Flash memory on the appropriate modules, and reprograms the Flash memory with the downloaded Flash code. Note All modules in the switch on page 25-7. 25-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 549
    Version 4.2 Copyright (c) 1994-1998 by cisco Systems, Inc. c6k_sup1 processor with 32768 Kbytes of main memory Autoboot executing command: "boot bootflash:cat6000- Text segment .......Passed NVRAM Size 512 KB 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 25-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 550
    (Module 1) This may take up to 2 minutes....please wait Cisco Systems Console Enter password: 07/21/1998,13:52:51:SYS-5: (enable) show version 4 Mod Port Model Serial # Versions 4 1 WS-X6101 003414855 Hw : 1.2 Fw : 1.3 Sw : 3.2(6) Console> ( Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 551
    Mod Port Model Serial # Versions 4 1 WS-X6101 003414855 Hw : 1.2 Fw : 1.3 Model Serial # Versions 4 1 WS-X6101 003414855 Hw : 1.2 Fw Mod Port Model Serial # Versions 5 1 WS-X6101 003414463 Hw : 1.2 Fw : 1.3 WS-X6101 003414855 Hw : 1.2 Fw : 1.3 Sw
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 552
    show version 5 Mod Port Model Serial # Versions 5 1 WS-X6101 003414463 Hw : 1.2 Fw : 1.3 Sw : 3.2(7) the inetd daemon after modifying the /etc/inetd.conf and /etc/services files. To restart the daemon, either stop the inetd process and restart Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 553
    image using rcp, make sure of the following: • Ensure that the workstation acting as the rcp server supports the remote shell (rsh). • Ensure that the switch has a route to the rcp server. The switch command. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 25-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 554
    rcp username. • A power interruption (or other problem) during the download procedure can corrupt the Flash to download. On those platforms that support the Flash file system, you are disconnects. During startup, the Flash memory on the supervisor engine is Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 555
    that type. The switch downloads the image file, erases the Flash memory on the appropriate modules, and reprograms the Flash memory with the downloaded Flash code. Note All modules in the switch [bootflash]? 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 25-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 556
    1994-1999 by cisco Systems, Inc. Presto processor with 32768 Kbytes of main memory Autoboot executing command: this Supervisor (Module 1) This may take up to 2 minutes....please wait Cisco Systems Console 25-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 557
    to a single ATM module: Console> (enable) show version 4 Mod Port Model Serial # Versions 4 1 WS-X6101 003414855 Hw : 1.2 Fw : 1.3 Sw : 3.2(6) Console> (enable) copy rcp 4/flash IP address or -10. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 25-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 558
    to multiple ATM modules: Console> (enable) show version 4 Mod Port Model Serial # Versions 4 1 WS-X6101 003414855 Hw : 1.2 Fw : 1.3 Sw : 3.2(6) Console> (enable) show version 5 Mod File System." 25-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 559
    flash rcp command. When prompted, specify the rcp server address and destination filename. On platforms that support the Flash file systems, you are first prompted for the Flash device and source filename. If 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 25-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 560
    the serial port by entering the set speed rate command at the Kermit> prompt. Caution To prevent communication problems, do not use a speed greater than 19,200 baud. • Ensure that Kermit is using the proper . 25-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 561
    switch Console> prompt. You will see status information as the switch erases and reprograms the Flash memory. Note If you enter the connect command more than two minutes after the Kermit> prompt reappears, . 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 25-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 562
    onscreen for every four packets transferred. If there is a problem transferring the file, one or more of the following letter codes see status information as the switch erases and reprograms the Flash memory. Note If you enter the connect command more than two Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 563
    : Flash Programming Complete Flash erase in progress ... Erase done Programming Flash: Flash Programming Complete The system needs to be reset to run the new image. Cisco Systems Console Enter password: Mon Apr 06, 1998, 14:35:08 Console> 78-13315-02 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 564
    escape character followed by C to get back, or followed by ? to see other options. Download OK Initializing Flash Programming Flash Base....Code....Length....Time....Done Cisco Systems Console Enter password: Mon Apr 06, 1998, 17:35:08 Console> 25-20 Catalyst 6000 Family Software Configuration
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 565
    be running terminal emulation software that supports the Xmodem or Ymodem protocol. via Xmodem is not saved to memory; therefore, after the download if computer's hard drive. You can download an image from Cisco.com. To download from a local computer, connect the Guide-Releases 6.3 and 6.4 25-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 566
    1200 to 38400 bps, depending on the speed supported by your modem. Enter the confreg ROM monitor emulation software application manual for instructions on how to . The downloaded image resides only in memory. The image in memory cannot be saved as a file. Step Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 567
    several switches that have the same hardware configuration so that they have identical module and port configurations. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 26-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 568
    set ip dns server 172.16.10.140 set ip dns enable set ip dns domain corp.com end 26-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 569
    store configuration files on Flash devices on hardware that supports the Flash file system, and you can configure the restart the inetd daemon after modifying the /etc/inetd.conf and /etc/services files. To restart the daemon, either stop the inetd process and restart Guide-Releases 6.3 and 6.4 26-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 570
    DNS is enabled >> set ip dns domain corp.com Default DNS domain name set to corp.com Console> (enable) 26-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 571
    tftp 69/udp Note You must restart the inetd daemon after modifying the /etc/inetd.conf and /etc/services files. To restart the daemon, either stop the inetd process and restart it, or enter a fastboot command 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 26-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 572
    . To use rcp to copy files, the server from or to which you will be copying files must support rcp. The rcp copy commands rely on the rsh server (or daemon) on the remote system. To using the ping command. 26-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 573
    a Configuration File to an rcp Server, page 26-8 • Uploading a Configuration File to an rcp Server, page 26-8 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 26-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 574
    on the entire switch, perform this task in privileged mode: Task Clear the switch configuration. Command clear config all 26-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 575
    module command indicates this problem. To resolve the inconsistency, clear the configuration on the problem module. This example (permanent) configuration in NVRAM and the running (temporary) memory in RAM. The default configuration always remains available; NVRAM Guide-Releases 6.3 and 6.4 26-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 576
    in memory. supports the TFTP application. • You have the IP address or name of the remote host available. To store information on a remote host, enter the privileged write network EXEC command. This command prompts you for the destination host address and a filename and then displays the instructions
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 577
    contact your network administrator or see http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html for instructions on contacting the technical assistance center. Uploading the these steps: 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 26-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 578
    network administrator or see http://www.cisco.com/en/US/support/tsd_cisco_worldwide_contacts.html for instructions on contacting the technical assistance interfaces, and specific configuration instructions.) 26-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 579
    the stored startup configuration file to the MSFC running configuration. Router# copy sup-slot0:file_name startup-config 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 26-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 580
    Working with Configuration Files on the MSFC Chapter 26 Working with Configuration Files 26-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 581
    For more information on system messages, refer to the System Message Guide-Catalyst 6000 Family, Catalyst 5000 Family, and Catalyst 4000 Family, these features: • Provides you with logging information for monitoring and troubleshooting • Allows you to select the types of logging information captured
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 582
    up to 90 seconds. Table 27-1 describes the facility types supported by the system message logs. Table 27-1 System Message Log tac tcp Definition All facilities ACL facility Cisco Discovery Protocol Common Open Policy Server Dynamic Quality of Service Remote Access Dial-In User Service ReSerVation
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 583
    VLAN Membership Policy Server VLAN Trunking Protocol Table 27-2 describes the severity levels supported by the system message logs. Table 27-2 Severity Level Definitions Severity Level event being reported. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 27-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 584
    , page 27-6 • Setting the Logging Buffer Size, page 27-6 • Configuring the syslog Daemon on a UNIX syslog Server, page 27-7 27-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 585
    logging session disable System logging messages will not be sent to the current login session. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 27-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 586
    to log to the logging set logging buffer buffer_size buffer. Verify the system message logging configuration. show logging [noalias] 27-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 587
    server messages. Command set logging server ip_addr set logging server facility server_facility_parameter set logging server severity server_severity_level 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 27-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 588
    > (enable) set logging server disable System logging messages will not be sent to the configured syslog servers. Console> (enable) 27-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 589
    sys tac tcp telnet tftp udld vmps vtp Default Severity 5 4 3 5 2 2 2 2 2 2 3 2 5 5 5 2 2 3 3 2 3 2 2 2 5 2 2 2 2 4 2 2 Current Session Sever 5 4 3 5 2 2 2 2 2 2 3 2 5 5 5 2 2 3 3 2 3 2 2 2 5 2 2 2 2 4 2 2 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 27-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 590
    :Port 3/2 left bridge port 3/2 %PAGP-5-PORTTOSTP:Port 3/1 joined bridge port 3/1-2 %PAGP-5-PORTTOSTP:Port 3/2 joined bridge port 3/1-2 Console> (enable) 27-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 591
    Configuration Feature DNS enable state DNS default domain name DNS servers Default Value Disabled Null None specified 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 28-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 592
    enabled. The default DNS domain name is: corp.com DNS name server dns_serv2 dns_serv1 dns_serv3 Console> (enable) status ------- primary 28-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 593
    to disable DNS on the switch: Console> (enable) set ip dns disable DNS is disabled Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 28-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 594
    Configuring DNS Chapter 28 Configuring DNS 28-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 595
    the Cisco Discovery runs on all Cisco-manufactured equipment including the Cisco devices Cisco devices to discover Cisco devices that support Subnetwork Access Protocol (SNAP). CDP runs over the data link layer only. Cisco devices never forward CDP packets. When new CDP information is received, Cisco
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 596
    cdp disable CDP disabled globally Console> (enable) show cdp CDP : disabled Message Interval : 60 Hold Time : 180 Console> (enable) 29-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 597
    3/1 disabled 3/2 disabled 3/3 disabled 3/4 disabled 3/5 disabled 3/6 disabled 3/7 enabled 3/8 enabled 3/9 enabled 3/10 enabled 3/11 enabled 3/12 enabled Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 29-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 598
    message interval specifies how often the switch will transmit CDP messages to directly connected Cisco devices. To set the default CDP message interval, perform this task in privileged 225 Console> (enable) 29-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 599
    for a device that supports earlier versions of about directly connected Cisco devices, perform this WS-C2948 3/1 JAB023806JR(4003) 2/1 WS-C4003 3/2 JAB023806JR(4003) 2/2 WS-C4003 3/5 JAB023806JR(4003) 2/5 WS-C4003 3/6 JAB023806JR(4003) 2/6 WS Guide-Releases 6.3 and 6.4 29-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 600
    Copyright (c) 1995-1999 by Cisco Systems, Inc. Platform: WS-C2948 Port-ID (Port on Neighbors's Device): 2/2 VTP Management Domain: Lab_Network Native VLAN: 522 Duplex: full Console> (enable) Chapter 29 Configuring CDP 29-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 601
    shuts down the affected port and alerts the user. Unidirectional links can cause a variety of problems, including spanning tree topology loops. UDLD is a Layer 2 protocol that works with the Layer 1 mechanism. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 30-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 602
    unidirectional and the port is shut down. Devices on both ends of the link must support UDLD in order for the protocol to successfully identify and disable unidirectional links. Note With mode Disabled 30-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 603
    : enabled Message Interval: 15 seconds Port Admin Status Aggressive Mode Link State 4/1 enabled disabled bidirectional Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 30-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 604
    verify the message interval on the switch: Console> (enable) show udld UDLD : enabled Message Interval : 20 seconds Console> (enable) 30-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 605
    is disabled by default and its use is recommended only for point-to-point links between Cisco switches running software release 5.4(3) or later releases. With UDLD aggressive mode enabled, when a show udld 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 30-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 606
    neighbors has been disabled), not applicable (UDLD and/or the local port has been manually disabled), shutdown (unidirectional link has been detected and the port err-disabled), or in both directions). 30-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 607
    synchronize to a machine whose time is significantly different from the others, even if its stratum is lower. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 31-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 608
    is marginally reduced because the information flow is one-way only. Cisco's implementation of NTP does not support stratum 1 service; it is not possible to connect to a radio or atomic Time Zone, page 31-7 31-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 609
    mode. Verify the NTP configuration. Command set ntp server ip_addr set ntp client enable show ntp [noalias] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 31-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 610
    mode. set ntp client enable Enable NTP authentication. set ntp authentication enable Verify the NTP configuration. show ntp [noalias] 31-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 611
    the start and end dates and times and whether or not the time adjustment recurs every year. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 31-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 612
    . set summertime date month date year hh:mm month date year hh:mm offset Verify the configuration. show summertime 31-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 613
    NTP server to clear. Verify the NTP configuration. Command clear ntp server [ip_addr | all] show ntp [noalias] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 31-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 614
    disable NTP client mode on the switch: Console> (enable) set ntp client disable NTP Client mode disabled Console> (enable) 31-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 615
    between T4 and T5. During those time periods, the amount of broadcast traffic exceeded the configured threshold. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 32-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 616
    configure broadcast suppression on the Catalyst 6000 family switches: • Enabling Broadcast Suppression, page 32-3 • Disabling Broadcast Suppression, page 32-4 32-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 617
    > (enable) show port broadcast 1/2 Port Broadcast-Limit Total-Drop Multicast Unicast 1/2 80.00 % 0 80.00 % - Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 32-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 618
    disable broadcast suppression on one or more ports: Console> (enable) clear port broadcast 3/1 Port 3/1-8 broadcast traffic unlimited. Console> (enable) 32-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 619
    provided by port-VLAN membership. Layer 3 protocol filtering is supported only on nontrunking Ethernet, Fast Ethernet, and Gigabit Ethernet Layer 2 protocols, such as Spanning Tree Protocol (STP) and Cisco Discovery Protocol (CDP), are not affected by Layer 3 protocol Guide-Releases 6.3 and 6.4 33-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 620
    Chapter 33 Configuring Layer 3 Protocol Filtering For example, if a host that supports both IP and Internetwork Packet Exchange (IPX) is connected to a switch port 3 Protocol Filtering, page 33-3 33-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 621
    disable Layer 3 protocol filtering: Console> (enable) set protocolfilter disable Protocol filtering disabled on this switch. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 33-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 622
    Configuring Layer 3 Protocol Filtering Chapter 33 Configuring Layer 3 Protocol Filtering 33-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 623
    inbound Telnet and SNMP access to the switch from unauthorized source IP addresses. All other TCP/IP services (such as IP traceroute and IP ping) continue to work normally when you enable the IP permit . 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 34-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 624
    list. Verify the IP permit list configuration. Command set ip permit ip_address [mask] [telnet | snmp | ssh] show ip permit 34-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 625
    traps enabled. Console> (enable) set logging level ip 4 default System logging facility set to severity 4(warnings) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 34-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 626
    your connection from being dropped by the switch you are configuring in case you clear your current IP address. 34-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 627
    cleared from telnet permit list. Console> (enable) clear ip permit all IP permit list cleared. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 34-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 628
    Configuring the IP Permit List Chapter 34 Configuring the IP Permit List 34-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 629
    another port, 25 (1 + 24) on the third port, and 1 address each on the rest of the ports. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 35-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 630
    the source MAC address of the packet is compared to the list of secure source addresses that were manually configured or autoconfigured (learned) on the port. If a MAC address of a device attached to command. 35-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 631
    > (enable) show port 2/1 Port Name Status Vlan Level Duplex Speed Type 2/1 connected 522 normal half 100 100BaseTX 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 35-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 632
    Fri Jul 10 1998, 17:53:38 This example shows how to enable port security on a port and manually specify the secure MAC address: Console> (enable) set port security 2/1 enable 00-90-2b-03-34-08 > (enable) 35-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 633
    -44-55 00-11-22-33-44-55 cleared from secure address list for port 7/7 Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 35-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 634
    task in privileged mode: Task Set the shutdown timeout on a port. Command set port security mod/port shutdown time 35-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 635
    the filter: Console> (enable) clear cam 00-02-03-04-05-06 1 CAM entry cleared. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 35-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 636
    3/24 Port Total-Addrs Maximum-Addrs 3/24 4 10 Console> (enable) Port Total-Addrs Maximum-Addrs 3/24 1 10 Console> (enable) 35-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 637
    2 Total global address space used (out of 1024): 0 Status: installed Module 3: Module does not support port security feature Module 6: Total ports: 48 Total MAC address(es): 48 Total global address space ) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 35-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 638
    Configuring Port Security Chapter 35 Configuring Port Security 35-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 639
    of these messages is authoritative. When an SNMP message does not expect a response, the sender is authoritative. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 36-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 640
    Currently, Cisco IOS supports three supports centralized and distributed network management strategies and includes improvements in the structure of management information (SMI), protocol operations, management architecture, and security. 36-2 Catalyst 6000 Family Software Configuration Guide
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 641
    devices. SNMP enables network administrators to manage network performance, find and solve network problems, and plan for network growth. There are three versions of SNMP: • Version information on SNMPv3. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 36-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 642
    list of notifications its users can receive - A group also defines the security model and security level for its users 36-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 643
    Network ManagementSystem (NMS). Using Managed Devices Catalyst 6000 family switches are managed devices that support SNMP network management with the following features: • SNMP traps (see the "Configuring SNMPv1 -13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 36-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 644
    -based and management platform-independent products for managing Cisco enterprise networks and devices. CiscoWorks2000 includes Resource Manager Essentials and CWSI Campus, which allow you to deploy, configure, monitor, manage, and troubleshoot a switched internetwork. For more information, refer to
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 645
    is also responsible for dispatching PDUs to applications and for selecting the appropriate transports for sending messages. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 36-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 646
    the dispatcher. An implementation of the message processing subsystem may support a single message format corresponding to a single version of the message processing subsystem. Depending on the services required, the security subsystem may encrypt the enclosed Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 647
    returned to the message processing subsystem. An implementation of the security subsystem may support one or more distinct security models. The only currently defined security model is between SNMP entities. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 36-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 648
    to the NMS documentation (see the "Using CiscoWorks2000" section on page 36-6). The switch supports up to 20 trap receivers through the RMON2 trap destination table. You configure the RMON2 trap added. 36-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 649
    information. For detailed information on the SNMP commands supported by the Catalyst 6000 family switches, refer to the NMS documentation (see the "Using CiscoWorks2000" section on page 36-6). The switch supports up to 20 trap receivers through the RMON2 trap destination table. You configure the
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 650
    : Console> (enable) set snmp view interfacesMibView 1.3.6.1.2.1.2 included Snmp view name was set to interfacesMibView with subtree 1.3.6.1.2.1.2 included, nonvolatile. 36-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 651
    user guestuser2 security-model v3 Snmp group was set to mygroup user guestuser2 and version v3, nonvolatile. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 36-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 652
    -v3 10.6.4.201 guestuser2 ifDescr.1 Enter Authentication password :guestuser2password Enter Privacy password :privacypasswd2 REPORT received, cannot recover: usmStatsUnsupportedSecLevels.0 = 1 36-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 653
    , page 37-1 • Enabling RMON, page 37-2 • Viewing RMON Data, page 37-2 • Supported RMON and RMON2 MIB Objects, page 37-2 Understanding How RMON Works RMON is an Internet Engineering ProbeConfig (RMON2 group 19) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 37-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 654
    For more information on RMON, visit: http://www.cisco.com/en/US/docs/internetworking/technology/handbook/RMON.html Supported RMON and RMON2 MIB Objects Table 37-1 lists the RMON and RMON2 MIB objects supported by the supervisor engine software. 37-2 Catalyst 6000 Family Software Configuration Guide
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 655
    MIB Objects Table 37-1 Supervisor Engine RMON and RMON2 Support Object Identifier (OID) and Description Source ...mib-2(1).rmon(16).statistics(1).etherStatsTable(1) RFC capabilities and configurations. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 37-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 656
    Supported RMON and RMON2 MIB Objects Chapter 37 Configuring RMON 37-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 657
    38-3 • Egress SPAN, page 38-3 • VSPAN, page 38-3 • Trunk VLAN Filtering, page 38-4 • SPAN Traffic, page 38-4 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 38-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 658
    in an EtherChannel source are included in operational sources if the logical port is included in the spanning tree. 38-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 659
    WS-X6K-SUP1A-PFC, WS-X6K-SUP1A-MSFC, WS-X6K-SUP1A-MSFC2, WS-X6K-SUP2-PFC2, WS-X6K-SUP2-MSFC2-Two packets are forwarded by the SPAN destination port if the packets get switched on the same VLAN. - WS-X6K-SUP1-2GE, WS-X6K-SUP1A-2GE 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 38-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 660
    of 30 SPAN sessions in a Catalyst 6000 family switch. See Table 38-1 for the supported combinations of SPAN/RSPAN sessions. You can configure multiple ports or VLANs as sources for each 30 total SPAN sessions. 38-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 661
    the CLI, page 38-7 SPAN Hardware Requirements All Catalyst 6000 family switch supervisor engines support the SPAN feature. Understanding How SPAN Works SPAN selects network traffic for analysis by port. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 38-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 662
    : • Use a network analyzer to monitor ports. • For SPAN source ports, SPAN is not supported with ATM ports; it works with Ethernet 10/100/1000-Mbps ports and 10-Gbps ports. • first session is not overwritten. 38-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 663
    packets on the SPAN destination port are allowed. Console> (enable) set span 522 2/12 tx inpkts enable 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 38-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 664
    , page 38-9 • RSPAN Configuration Guidelines, page 38-10 • Configuring RSPAN, page 38-11 • RSPAN Configuration Examples, page 38-14 38-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 665
    WS-X6K-SUP1A-MSFC - Supervisor Engine 1, PFC, and MSFC2: WS-X6K-S1A-MSFC2 - Supervisor Engine 2 and PFC2: WS-X6K-S2-PFC2 - Supervisor Engine 2, PFC2, and MSFC2: WS-X6K-S1A-MSFC2 • For destination or intermediate switches-Any Cisco switch supporting Configuration Guide-Releases 6.3 and 6.4 38-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 666
    The learning option applies to RSPAN destination ports only. • RSPAN does not support monitoring of BPDU packets or Layer 2 protocol packets such as CDP, DTP bandwidth utilization in the connecting links, you can configure quality of service (QoS) parameters for the RSPAN VLAN in each of the
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 667
    . However, ensure that the special properties of RSPAN VLANs are supported in all the switches to avoid unwanted traffic in these VLANs VTP pruning to get efficient flow of RSPAN traffic, or manually delete the RSPAN VLAN from all trunks that do not need Configuration Guide-Releases 6.3 and 6.4 38-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 668
    : 500 Admin Source : VLAN 200 Oper Source : None Direction : receive Incoming Packets: - Learning : - Multicast : enabled Filter : - Console> (enable) 38-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 669
    /port: Console> (enable) set rspan disable destination 4/1 Disabled monitoring of remote span traffic on port 4/1. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 38-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 670
    set rspan source 4/1-2 901 rx set rspan source 3/1-3 901 No RSPAN CLI command needed set rspan destination 1/2 901 38-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 671
    set rspan source 3/1-3 901 No RSPAN CLI command needed set rspan source 2/1-2 901 set rspan destination 1/2 901 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 38-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 672
    RSPAN CLI command needed set rspan source 2/1-2 901 rx set rspan source 3/1-2 901 tx set rspan source 4/1-3 902 38-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 673
    center) Intermediate switch(es) (distribution) T3 1/1 1/2 Switch D 2/1 2/2 T4 T5 1/1 1/2 3/1 3/2 Switch E T6 1/1 1/2 4/1 4/2 4/3 Source switch(es) (access) Switch F 27393 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 38-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 674
    Configuring RSPAN Chapter 38 Configuring SPAN and RSPAN 38-18 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 675
    to generate reports on Multilayer Switch Module (MSM) or Multilayer Switch Feature Card (MSFC and MSFC2) ports. Note When calculating port utilization, the Switch TopN Reports utility bundles the Tx and duplex. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 39-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 676
    are completed. For reports that are not completed, the system displays a short description of the Switch TopN process information. 39-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 677
    : Task Run the Switch TopN Reports utility in the foreground. Command show top [N] [metric] [interval interval] [port_type] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 39-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 678
    privileged mode: Task Remove reports. Use the all keyword to remove all completed reports. Command clear top {all | report_num} 39-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 679
    3 killed by Console//. 06/16/1998,17:36:52:MGMT-5:TopN report 5 killed by Console//. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 39-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 680
    Running and Viewing Switch TopN Reports Chapter 39 Using Switch TopN Reports 39-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 681
    describe how multicasting works on the Catalyst 6000 family switches: • Multicasting and Multicast Services Overview, page 40-2 • Understanding How IGMP Snooping Works, page 40-2 • Subnets, page 40-6 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 682
    40 Configuring Multicast Services Multicasting and Multicast Services Overview IGMP snooping Cisco Group Management Protocol (CGMP) is not supported on the Catalyst 6000 family switches, although CGMP server is supported on the MSFC. To support Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 683
    Chapter 40 Configuring Multicast Services Understanding How Multicasting Works Joining a Multicast Group When a host wants to join an IP multicast group, it and the MAC group forwarding entry is removed. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 684
    Multicast Services When hosts might be dropped inadvertently. Fast leave is supported with IGMP version 2 hosts only. Understanding How software components run on both the switch and on the host. (Cisco is not a source for GMRP host software.) On the host, Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 685
    40 Configuring Multicast Services Understanding How Multicasting Works enabled on all routers for RGMP to work. Only PIM sparse mode is currently supported. All routers on the network must be RGMP-capable. RGMP-capable routers periodically Software Configuration Guide-Releases 6.3 and 6.4 40-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 686
    and make forwarding decisions based on their content. Note Quality of service (QoS) does not support IGMP traffic when IGMP snooping is enabled. These sections describe how Snooping Statistics, page 40-11 40-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 687
    Chapter 40 Configuring Multicast Services Configuring IGMP Snooping • Disabling IGMP Fast-Leave Processing, page 40-12 • Disabling IGMP Snooping rcvd 10 IGMP packets dropped 0 Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 688
    Configuring IGMP Snooping Chapter 40 Configuring Multicast Services Specifying IGMP Snooping Mode IGMP snooping runs in teither IGMP-only mode ratelimit {dvmrp | general-query | mospf1 | mospf2 | pimv2} rate 40-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 689
    Chapter 40 Configuring Multicast Services Configuring IGMP Snooping This example shows how to enable IGMP rate limiting: Console> (enable) set igmp ratelimit to which ports a multicast router is connected. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 690
    Services To display the dynamically learned multicast router information, perform these tasks in privileged mode: Task Command Display information on dynamically learned and show multicast router [mod/port] [vlan_id] manually Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 691
    Chapter 40 Configuring Multicast Services Configuring IGMP Snooping Task Display the total number of multicast addresses (groups) in each VLAN. Display > (enable) 18951 0 377 0 0 14 16741 0 16 0 0 0 10 0 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 692
    Configuring GMRP Chapter 40 Configuring Multicast Services Disabling IGMP Fast-Leave Processing To disable IGMP fast-leave processing, perform this task in • Disabling GMRP Globally on the Switch, page 40-19 40-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 693
    Chapter 40 Configuring Multicast Services Configuring GMRP Note For an overview of GMRP operation, see the "Understanding How GMRP Works" Timers (milliseconds): Join = 200 Leave = 600 LeaveAll = 10000 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 694
    Configuring GMRP Chapter 40 Configuring Multicast Services Port based GMRP Configuration: Port GMRP Status Registration ForwardAll 1/1-2,3/1,6/1-48,7/1-24 Enabled this task in privileged mode: 40-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 695
    Chapter 40 Configuring Multicast Services Configuring GMRP Step 1 port connected to a router that needs to receive any multicasts (routers do not support GMRP and so cannot send GMRP join mesages). The forward-all option can also be Family Software Configuration Guide-Releases 6.3 and 6.4 40-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 696
    Configuring GMRP Chapter 40 Configuring Multicast Services This example shows how to disable the GMRP forward-all option on port 1/1: Console> (enable) set on port 2/10 and verify the configuration: 40-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 697
    Chapter 40 Configuring Multicast Services Configuring GMRP Console> (enable) set gmrp registration fixed 2/10 GMRP Registration is set fixed on port 2/10. Console timer. The aliases may be used if desired. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 698
    Configuring GMRP Chapter 40 Configuring Multicast Services Note Modifying the GARP timer values affects the behavior of all GARP applications running Join 300 Leave 650 LeaveAll 12000 Console> (enable) 40-18 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 699
    Chapter 40 Configuring Multicast Services Configuring GMRP Displaying GMRP Statistics To display GMRP statistics on the switch, perform this task in globally on the switch. Command set gmrp disable 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 700
    Entries Chapter 40 Configuring Multicast Services This example shows how to sections describe how to specify multicast router ports manually and configure multicast group entries: • Specifying > (enable) 40-20 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 701
    Services Configuring Multicast Router Ports and Group Entries Configuring Multicast Groups To configure a multicast group manually manually and verify the configuration (the asterisks indicate the entry was manually manually configured multicast router ports. Clear all manually a manually configured
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 702
    Configuring RGMP Chapter 40 Configuring Multicast Services Clearing Multicast Group Entries To clear manually configured multicast group entries, perform this task in privileged mode: Task privileged mode: 40-22 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 703
    Chapter 40 Configuring Multicast Services Configuring RGMP Task Enable RGMP. Disable RGMP. Command set rgmp enable set rgmp disable This example shows a given VLAN, perform this task in privileged mode: 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-23
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 704
    Configuring RGMP Chapter 40 Configuring Multicast Services Task Display the RGMP statistics for a specified VLAN. Command show Number of Entries = 3 '*' - Configured '+' - RGMP-capable Console> (enable) 40-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 705
    Chapter 40 Configuring Multicast Services Displaying Multicast Protocol Status Clearing RGMP Statistics This command clears stored RGMP statistics. To clear status. Command show multicast protocols status 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-25
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 706
    40 Configuring Multicast Services This example shows how to display the multicast protocol status: Console> (enable) show multicast protocols status IGMP disabled IGMP fastleave enabled RGMP enabled GMRP disabled 40-26 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 707
    on the Catalyst 6000 family switches and includes the configuration information required to support Common Open Policy Service (COPS) and Resouce ReSerVation Protocol (RSVP). Note For complete syntax and . 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 708
    values carried in packets and frames: - Layer 2 class of service (CoS) values range between zero for low priority and seven for can carry either an IP precedence value or a DSCP value. QoS supports the use of either value, because DSCP values can be set Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 709
    Engine II (Policy Feature Card 2 or PFC2) - Supervisor Engine 1 with Layer 3 Switching Engine WS-F6K-PFC (Policy Feature Card or PFC) does not go through the Multilayer Switch Feature Card (MSFC or MSFC2) and retains the CoS value assigned by the Layer 3 switching Guide-Releases 6.3 and 6.4 41-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 710
    port (tail-drop thresholds) Strict priority queue 100% for CoS 5 Standard queue 100% for CoS 0, 1, 2, 3, 4, 6, 7 To switching engine 49393 41-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 711
    CoS-to-DSCP map 4 From DSCP markdown map 5 From DSCP-to-CoS map To egress interface 25041 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 712
    Address/ VLAN? *From SET QOS MAC-COS command Yes Apply configured CoS To Egress port Figure 41-5 Multilayer Switch Feature Card Marking (MSFC and MSFC2) From PFC Multilayer Switch Feature Card (MSFC) marking IP traffic Yes from PFC? No Write ToS byte into packet Route traffic 27107 CoS
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 713
    priority 100% for CoS 2, 3 and 4 Low priority 100% for CoS 0 and 1 (Default values shown) Transmit frame 49380 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 714
    " to be one of the following: • Supervisor Engine 2 (WS-X6K-SUP2-2GE) with Layer 3 Switching Engine II (WS-F6K-PFC2-Policy Feature Card 2 or PFC2) • Supervisor Engine 1 (WS-X6K-SUP1A-2GE or WS-X6K-SUP1-2GE) with one of the following: - Layer 3 Switching Engine (WS-F6K-PFC-Policy Feature Card or PFC
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 715
    Egress Port Features With any switching engine, QoS supports Ethernet egress port scheduling and congestion avoidance using Layer with Layer 3 DSCP values. Multilayer Switch Feature Card (MSFC or MSFC2) QoS marks IP traffic transmitted to an MSFC with Layer 3 DSCP Guide-Releases 6.3 and 6.4 41-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 716
    Gigabit Ethernet) • trust-cos Note • 1q4t ports (except Gigabit Ethernet) do not support the trust-ipprec and trust-dscp port keywords. You must configure a trust-ipprec or 3 IP precedence or DSCP values. 41-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 717
    If QoS detects traffic in the strict-priority queue, it suspends its service of the standard queue and completes service of all traffic in the strict-priority queue before returning to the received traffic. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 718
    -threshold configuration. Figure 41-8 shows the drop thresholds for a 1q4t port. Drop thresholds in other configurations function similarly. 41-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 719
    switching engine to mark. The trust-ipprec and trust-dscp keywords are supported only with a Layer 3 switching engine and are not supported on 1q4t ports except Gigabit Ethernet. On 1q4t ports (except Gigabit 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 720
    • Default ACLs, page 41-20 • Marking Rules, page 41-21 • Policing Rules, page 41-22 • PFC2 Policing Decisions, page 41-23 • Attaching ACLs, page 41-23 • Final Layer 3 Switching Engine CoS and ToS DSCP values. 41-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 721
    traffic of each type (IP, IPX, and MAC) only to the corresponding ACL type (see Table 41-2). 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 722
    allows MAC-level QoS to be applied to any traffic except IP and IPX. QoS supports user-created named ACLs, each containing an ordered list of ACEs, and user-configurable default - Internet (IP precedence 6) 41-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 723
    www 80 Note TCP ACEs that do not include a Layer 4 TCP port parameter match all TCP traffic. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 724
    9 option-missing 8 0 packet-too-big 0 0 parameter-problem 12 - port-unreachable 3 8 precedence-unreachable 3 14 protocol- 3 4 12 0 3 3 3 15 3 2 11 1 5 - 9 0 10 0 4 0 3 5 41-18 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 725
    support Internet Group Management Protocol (IGMP) traffic when IGMP snooping is enabled. QoS supports ), rip (1), sap (4), spx (5) • IPX ACEs support the following optional parameters: - IPX destination network (-1 IPX destination network, IPX ACEs support the following optional parameters: an
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 726
    have nonconfigurable classification criteria that matches all traffic. QoS compares any traffic with a supported ethertype field value that does not match a named ACL to the default ACLs. match all traffic. 41-20 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 727
    is zero). • dscp (all ACLs except IPX and MAC with a PFC2)-Instructs QoS to mark traffic as indicated by the port trust keywords: - In in the default ACLs contains the dscp ACE keyword, which supports per-port classification of traffic. With the default values, the Guide-Releases 6.3 and 6.4 41-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 728
    use that particular aggregate policing rule. You can create up to 1023 aggregate policing rules. • With a PFC2, you can specify a dual rate aggregate policing rule with a normal rate and an excess rate. - . 41-22 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 729
    or MAC ACEs. IPX and MAC ACEs support only aggregate policing rules. • By default Switching (MLS) candidate frames (MSFC2 does not use candidate and enabler configured with the same port keyword. PFC2 Policing Decisions With a PFC2, the policing decision consists of Guide-Releases 6.3 and 6.4 41-23
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 730
    41-25 • Transmit Queues, page 41-25 • Scheduling and Congestion Avoidance, page 41-25 • Marking, page 41-27 41-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 731
    the switch detects traffic in the strict-priority queue, it suspends its service of the standard queue and completes service of all traffic in the strict-priority queue before returning to the standard . 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-25
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 732
    -priority standard transmit queue (queue 1). • Frames with CoS 2, 3, or 4 go to the medium-priority standard transmit queue (queue 2). 41-26 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 733
    completely separate from TopN and NetFlow Data Export and does not interact with either of these features. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-27
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 734
    7 Marked-down DSCP from DSCP map Marked-down DSCP value equals original DSCP value (no markdown) Policing rules None Named ACLs None Default ACLs COPS1 support Supports per-port classification and marking, sets DSCP to 0 in traffic from untrusted ports, no policing Disabled RSVP
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 735
    low-priority/high-priority ratio 4:255 Standard transmit-queue size ratio • Low priority: 80% • High priority: 20% 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-29
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 736
    threshold 1 and transmit-queue 1/drop threshold 1: CoS 0-7 1. COPS=Common Open Policy Service 2. QoS implements receive-queue drop thresholds only on ports configured with the trust-cos port Rules, page 41-36 41-30 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 737
    QoS Defaults, page 41-60 • Disabling QoS, page 41-60 • Configuring COPS Support, page 41-60 • Configuring RSVP Support, page 41-66 • Configuring QoS Statistics Data Export, page 41-70 Note enable | disable} 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-31
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 738
    41 Configuring QoS Enabling Port-Based or VLAN-Based QoS Note The commands in this section are not supported with a Layer 2 Switching Engine. By default, QoS uses ACLs attached to ports. On a trust state. 41-32 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 739
    CoS value for port 1/1: Console> (enable) clear port qos 1/1 cos Port 1/1 qos cos setting cleared. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-33
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 740
    Rules Note The commands in this section are not supported with a Layer 2 Switching Engine. To create a as out of profile, set the rate parameter to zero (0). The PFC1 and PFC2 have the following hardware granularity for rate values: Rate Value Range 1 to 1000 Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 741
    rate (kbps) Burst size (kb) Excess action 64 128 drop ACL attached Console> (enable) For PFC2, this example shows how to create an aggregate excess rate policing rule with a 64-Kbps rate limit 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-35
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 742
    Burst size (kb) Excess action 8000000 100 policed-dscp ACL attached Console> (enable) For PFC2, this example shows how to create an aggregate excess rate policing rule with a 64-Kbps > (enable) 41-36 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 743
    QoS Configuring QoS Creating or Modifying ACLs Note The commands in this section are not supported with a Layer 2 Switching Engine. These sections describe ACL creation and modification: • ACL filtering. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-37
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 744
    parameter keyword options in IP ACEs, see the "IP ACE Layer 3 Classification Criteria" section on page 41-16. 41-38 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 745
    aggregate my-agg udp any any my_IPacl editbuffer modified. Use 'commit' command to apply changes. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-39
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 746
    to apply changes. Console> (enable) IP ACEs for IGMP Traffic Note QoS does not support IGMP traffic when IGMP snooping is enabled. To create or modify an IP ACE for IGMP all} editbuffer [editbuffer_index] 41-40 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 747
    [precedence precedence | dscp-field dscp] [before editbuffer_index | modify editbuffer_index] show qos acl info {acl_name | all} editbuffer [editbuffer_index] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-41
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 748
    [[dest_net_mask].dest_node_ mask]] [before editbuffer_index | modify editbuffer_index] With PFC2: set qos acl ipx acl_name aggregate aggregate_name protocol src_net [dest_net[. need to enter leading zeros. 41-42 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 749
    xxxx.xxxx.xxxx). • If you specify an IPX destination node, IPX ACEs support an IPX destination node mask, entered as 12 hexadecimal digits (48 bits), before editbuffer_index | modify editbuffer_index] With PFC2: set qos acl mac acl_name aggregate Configuration Guide-Releases 6.3 and 6.4 41-43
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 750
    mac} {dscp dscp | trust-cos} [aggregate aggregate_name] With PFC2: set qos acl default-action {ipx | mac} aggregate aggregate_name show Console> (enable) Note IPX and MAC ACLs do not support microflow policing rules. Deleting Named ACLs To delete a named ACL Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 751
    , or delete a named ACL, the changes exist temporarily in an edit buffer in memory. To commit the ACL so that it can be used, perform this task in privileged See "Configuring and Storing VACLs and QoS ACLs in Flash Memory" section on page 16-42 for information about where QoS ACLs are stored
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 752
    be attached to any interfaces. Detaching ACLs from Interfaces Note The commands in this section are not supported with a Layer 2 Switching Engine. To detach an ACL from a port or a VLAN, perform | vlan | all} 41-46 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 753
    > (enable) Deleting a CoS Value to a Host Destination MAC Address/VLAN Pair Note QoS only supports this command with a Layer 2 Switching Engine. To delete a host destination MAC address and VLAN ] | all} 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-47
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 754
    or Disabling Microflow Policing of Bridged Traffic Note The commands in this section are not supported with a Layer 2 Switching Engine. By default, microflow policing rules affect only Layer on page 41-11. 41-48 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 755
    the tail-drop thresholds in 1p3q1t transmit queues. Configuring Standard Transmit-Queue WRED-Drop Thresholds 1p2q2t and 1p3q1t ports have weighted early random detection (WRED)-drop thresholds in their standard transmit queues. Note 1p3q1t ports also have nonconfigurable tail-drop thresholds
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 756
    maintains separate configurations for each port type. This command configures only the standard queues; the strict-priority queue requires no configuration. The valid values for weight range from 1-255. 41-50 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 757
    : Console> (enable) set qos txq-ratio 2q2t 80 20 QoS txq-ratio is set successfully. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-51
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 758
    rx q# thr# cos coslist show qos info config {1p1q4t rx | 1p1q0t rx | 1p2q2t tx | 2q2t tx | 1p3q1t tx} 41-52 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 759
    -queue 2: Console> (enable) set qos map 1p1q0t rx 2 cos 7 QoS queue mapped to cos successfully. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-53
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 760
    revert to QoS map defaults: Console> (enable) clear qos map 1p3q1t tx Qos map setting cleared. Console> (enable) 41-54 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 761
    QoS Configuring QoS Configuring DSCP Value Maps Note The commands in this section are not supported with a Layer 2 Switching Engine. These sections describe how DSCP values are mapped to Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-55
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 762
    page 41-15 and the "Ethernet Egress Port Scheduling, Congestion Avoidance, and Marking" section on page 41-24. 41-56 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 763
    privileged mode: Task Step 1 Map DSCP values to markdown DSCP values. Step 2 Step 3 With PFC2, map DSCP values to markdown DSCP values. Verify the configuration. Command set qos policed-dscp-map (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-57
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 764
    Threshold CoS 1 1 0 1 1 2 2 3 2 1 4 5 2 2 6 7 Rx drop thresholds: Rx drop thresholds are disabled for untrusted ports. Queue # Thresholds - percentage (abs values ) 41-58 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 765
    (abs values ) 1 40% 100% 2 40% 100% Tx WRED thresholds: WRED feature is not supported for this port_type. Queue Sizes: Queue # Sizes - percentage (abs values ) 1 80% 2 20% 20 5 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-59
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 766
    set qos {enable | disable} Configuring COPS Support Note The commands in this section are not supported with a Layer 2 Switching Engine. Note COPS to configure QoS for all other traffic. These sections describe configuring COPS support: • Port ASICs, page 41-61 • Understanding QoS Policy, page
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 767
    family documents, the term "COPS" refers to COPS support as implemented on the Catalyst 6000 family switches. Port ASICs Some COPS support features affect all ports controlled by a port ASIC. policy-source 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-61
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 768
    and aggregate policing rules • CoS to queue assignments • Threshold configuration • WRR weight and buffer configuration • Default port CoS and ACL-to-interface attachments Selecting Locally . show port qos 41-62 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 769
    A role is a name that describes the capability of ports (for example, access or mod2_1-4). QoS supports 64 roles per switch. You can assign more than one role to a port ASIC (for example, Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-63
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 770
    . Step 2 Verify the PDP server configuration. Command clear cops server {all | ip_address [diff-serv | rsvp]} show cops info 41-64 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 771
    the PDP server. Verify the configuration. Command set cops retry-interval initial increment maximum show cops info 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-65
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 772
    null service template and receiver proxy functionality support as implemented on the Catalyst 6000 family switches. Enabling RSVP Support To enable RSVP support, info show qos rsvp flow-info This example shows how to enable RSVP support: Console> (enable) set qos rsvp enable RSVP enabled on the
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 773
    qos rsvp {enable | disable} show qos rsvp info This example shows how to disable RSVP support: Console> (enable) set qos rsvp disable RSVP disabled on the switch. Console> (enable) port rsvp [mod[/port]] 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-67
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 774
    > (enable) clear cops server all All COPS diff-serv servers cleared. All COPS rsvp servers cleared. Console> (enable) 41-68 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 775
    . The RSVP local policy setting is not used if the switch never establishes a connection to the PDP. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-69
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 776
    LOG_LOCAL6 (176), severity LOG_DE BUG (7) Aggregate policer export is not supported Console> (enable) show qos statistics export info Statistics export status 5/4 disabled Console> (enable) 41-70 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 777
    of ingress packets • Number of ingress bytes • Number of egress packets • Number of egress bytes • Time stamp 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-71
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 778
    -profile packets • Number of packets that exceed the CIR • Number of packets that exceed the PIR • Time stamp 41-72 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 779
    9996. Console> (enable) show qos statistics export info Statistics export status and configuration information Export status: enabled 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 41-73
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 780
    -policer statistics: Aggregate Policer Packet Count Packets exceed Packets exceed normal rate excess rate test 1000 20 5 Console> 41-74 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 781
    Card or PFC). ASLB is not supported on Supervisor Engine 2 with Layer 3 Switching Engine II (PFC2). This chapter consists of these sections • ASLB Redundant Configuration Example, page 42-21 • Troubleshooting the ASLB Configuration, page 42-25 Hardware and Software Guide-Releases 6.3 and 6.4 42-1
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 782
    Understanding How ASLB Works Note Refer to the Cisco LocalDirector Installation and Configuration Guide, Version 3.2, for an overview on load balancing VLAN. The LocalDirector supports directed mode and dispatched mode. Only the dispatched mode can be supported for ASLB feature implementation
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 783
    series switches PK PR PL PA PB PM Server pool S1 S2 S3 28062 VLAN 10 VLAN 20 LocalDirector Layer 3 Operations for Layer 2 Operations for ASLB The Catalyst 6000 family switch content-addressable memory (CAM) table contains entries for the router VLAN and the Guide-Releases 6.3 and 6.4 42-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 784
    the connection with the server has been terminated, and by the ASLB to purge the affected ASLB MLS entry. 42-4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 785
    Catalyst 6500 series switches Path 3 PK PR PL PA PB PM Path 1 Path 2 Server pool S1 S2 S3 VLAN 10 VLAN 20 LocalDirector 28063 Table 42-2 Client to Server ASLB Packet Flow Path Number 1 Router MAC 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 42-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 786
    ASLB Packet Flow Clients VLAN 10 VLAN 20 Catalyst 6500 series switches Path 3 PK Server pool S1 S2 S3 PR PL PA PB PM Path 2 Path 1 LocalDirector 28064 Table 42-4 Server to Client 1 redirect Path 2 42-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 787
    the detailed configuration procedures in the sections that follow. Configuring the LocalDirector Interfaces Refer to the Cisco LocalDirector Installation and Configuration Guide, Version 3.2, for detailed information on configuring the LocalDirector interfaces for ASLB. 78-13315-02 Catalyst 6000
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 788
    42-19. If you run into problems during your configuration, see the "Troubleshooting the ASLB Configuration" section on page the two VLANs that the LocalDirector is connected to; no security IOS ACLs or VACLs can be configured on these VLANs. Servers Follow Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 789
    guidelines: • Up to 32 router MAC addresses are supported. • Up to 1024 virtual-IP/TCP port pairs are supported. Backup LocalDirector Configuration (Optional) Connect the ports on will not work. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 42-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 790
    to which the LocalDirector is connected (router VLAN and server VLAN). You cannot configure any security IOS access control lists (ACLs) or VLAN access control lists (VACLs) on these VLANs. • Dedicate . 42-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 791
    setting as all 10/100 switch ports are set to autonegotiate as the default. If you have a problem with autonegotiation, configure the port speed and duplex type as follows: Enter the set port speed mod/ 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 42-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 792
    task in privileged mode: Task Command Specify MAC addresses for participating routers. set lda mac router {mac-address}... 42-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 793
    set router vlan and LD port. Use commit lda command to save settings to hardware. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 42-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 794
    . Once the ASLB configuration is successfully committed, the mapping is saved in NVRAM and restored at system bootup. 42-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 795
    LD are on VLAN 105 LD is connected to switch port 4/40 on VLAN 105 Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 42-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 796
    00-33-66-99-22-44 105 ARPA ARPA - 4/25 0 0 00:00:05 00:00:08 Console> (enable) 42-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 797
    -Pkts Stat-Bytes 172.20.22.14 172.20.25.10 6 50648 80 3152 347854 Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 42-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 798
    clear a specific ASLB router MAC address: Console> (enable) clear lda mac 1-2-3-4-5-6 Successfully cleared Router MAC address. Console> (enable) 42-18 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 799
    Example Server pool Clients VLAN 7 VLAN 5 S1 Catalyst 6500 series switches 5/n 5/6 5/n S2 5/7 5/5 5/n S3 LocalDirector S 28229 78-13315-02 The router configuration is as follows Committed Virtual IP addresses: Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 42-19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 800
    .255.201.55:80:0:tcp roundrobin redirection 192.255.201.55:80:0:tcp dispatched assisted wildcard-ttl 60 42-20 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 801
    the other router. Use the HSRP track command to track the opposite side interface of each router. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 42-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 802
    IP address: 5.0.0.1 • Server IP address: 5.100.100.100 • VIP address for servers: 13.13.13.13 Servers 33440 42-22 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 803
    .0.0.0 no ip redirects no ip directed-broadcast no ip route-cache distributed load-interval 30 no keepalive 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 42-23
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 804
    :0:tcp is predictor 13.13.13.13:80:0:tcp roundrobin predictor 13.13.13.13:23:0:tcp roundrobin 42-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 805
    23:0:tcp Troubleshooting the ASLB Configuration Table 42-6 lists the possible problem symptoms and recommended actions to troubleshoot the ASLB configuration. Table 42-6 Troubleshooting the ASLB command). 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 42-25
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 806
    the ASLB Configuration Chapter 42 Configuring ASLB Table 42-6 Troubleshooting the ASLB Configuration (continued) Symptom Recommended Action LocalDirector set commands did is also set to 100full. 42-26 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 807
    Fabric Module Works, page 43-1 • Configuring and Monitoring the Switch Fabric Module, page 43-2 Note The WS-C6500-SFM is supported in the Catalyst 6500 6-and 9-slot chassis only. The WS-X6500-SFM 2 is supported in the Catalyst 6500 6-slot, 9-slot, 13-slot, and 6509-NEB chassis. Understanding How the
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 808
    switch fabric channel, delivering the best possible switching rate. Nonfabric-enabled modules do not support the compact mode and generate cyclic redundancy check (CRC) errors if they receive frames command. 43-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 809
    Configuring the Switching Mode To improve performance, you can manually specify which switching mode the system uses. If you switch to use compact mode. Note Nonfabric-enabled modules do not support compact mode. To configure the switch to use flow-through mode Guide-Releases 6.3 and 6.4 43-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 810
    fails. A mixed redundant configuration with a WS-C6500-SFM and a WS-X6500-SFM 2 is not supported. Monitoring the Switch Fabric Module This Supervisor WS-X6K-SUP2-2GE yes ok 4 4 24 100BaseFX MM Ethernet WS-X6224-MM-MT no ok 43-4 Catalyst 6000 Family Software Configuration Guide-Releases
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 811
    6.2(0.14)KEY Mod Sub-Type Sub-Model Sub-Serial Sub-Hw 1 L3 Switching Engine II WS-F6K-PFC2 SAD04110B5S 0.305 Console> (enable) Displaying the Fabric Channel Counters To display the fabric channel ok 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 43-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 812
    > show fabric channel utilization Fab Chan Input Output 0 0% 0% 1 0% 0% 2 0% 0% 3 0% 0% 4 0% 0% 5 0% 0% 6 0% 0% 7 0% 0% 8 0% 0% 9 0% 0% 10 0% 0% 11 0% 0% 12 0% 0% 13 0% 0% 43-6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 813
    ok off ok 0,00:02:52 20 min PS1-Type PS2-Type WS-CAC-1000W none Modem Baud Backplane-Traffic Peak Peak-Time disable 9600 0% 0% 0% 7 0% 0% 8 0% 0% 9 0% 0% 10 0% 0% 11 0% 0% 12 0% 0% 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 43-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 814
    banner lcd command to include the following information: • Chassis serial number • Switch IP address • System Name • Supervisor engine version 43-8 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 815
    ) set banner lcd &HelloWorld!& LCD banner set Console> (enable) show banner MOTD banner: LCD config: Hello World! 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 43-9
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 816
    Configuring and Monitoring the Switch Fabric Module Chapter 43 Configuring the Switch Fabric Modules 43-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 817
    Catalyst 6000 family switches. Note While this chapter introduces a number of Cisco networking products related to VoIP, the primary focus of the chapter is hardware and software requirements for the Catalyst 6000 family switches and Cisco CallManager are as follows: • Catalyst 4000, 5000, and 6000
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 818
    WS-X6348-RJ45V) WS-PWR-PNL Analog stations (phone, fax, modem) IP phone PC IP phone PC 38202 Catalyst 6500 series switches * Catalyst 4000, 5000, and 6000 10/100 modules Cisco IP Phone 7960 The Cisco . 44-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 819
    phone. • WS-PWR-PNL-Inline-power patch panel provides inline power to the IP phone. The inline patch panel allows the IP phone to be connected to existing Catalyst 4000, 5000, and 6000 family 10/100BASE-TX switching modules. Examples 1 through 4 in Figure 44-2 show how to connect the Cisco IP Phone
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 820
    IP devices described in this chapter, refer to the Cisco CallManager Administration Guide, Release 3.0, the Configuration Notes for Cisco CallManager Release 3.0, and the Cisco CallManager v3.0 Remote Serviceability Users Guide publications. Access Gateways Access gateways allow the IP PBX system
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 821
    passthrough SPAN2 or port mirroring support FXS Interface Features Address Gateway Cisco access analog trunk gateways allow the IP PBX to connect to the PSTN or PBX. The gateway supports up is registered with Cisco CallManager in its domain, and is managed by Cisco CallManager. To configure
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 822
    support both digital Cisco CallManager. The module software is downloaded from a TFTP server. Depending upon which software you download, the ports can serve as T1/E1 interfaces or the ports support interface supports 23 operation modes are supported. T1 binary problems and gather statistics
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 823
    ring tone. When the user picks up the phone, Cisco CallManager instructs the called IP phone to start talking with the calling Cisco CallManager routes the call to an analog or digital trunk gateway which in turn routes it to the PSTN. 78-13315-02 Catalyst 6000 Family Software Configuration Guide
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 824
    Chapter 11, "Configuring VLANs." Figure 44-3 shows how a Cisco IP Phone 7960 can be connected to a Catalyst 6000 family switch phone and the PC are possible (see the "Cisco IP Phone 7960" section on page 44-2). Introducing supporting phones might reduce the quality of VoIP traffic. 44-8
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 825
    Platform Support CLI Commands Inline-power related commands set port inlinepower set inlinepower defaultallocation show port inlinepower show environment power WS-X6348-RJ45V1 WS-X6608-T1/E12 WS-X6624-FXS3 X4 X X X X X 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 826
    Table 44-3 Voice-Related CLI Command Module and Platform Support (continued) CLI Commands WS-X6348-RJ45V1 WS-X6608-T1/E12 WS-X6624-FXS3 Voice-related commands set port auxiliaryvlan X/X show the switch. 44-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 827
    2 1000BaseX Supervisor WS-X6K-SUP1A-2GE yes ok 15 1 1 Multilayer Switch Feature WS-F6K-MSFC no ok 8 8 48 10/100BaseTX Ethernet WS-X6348-RJ-45 no ok 9 9 48 10/100BaseTX Ethernet WS-X6348-RJ-45 -a5-05 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 44-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 828
    Port Model Serial # Versions 2 2 WS-X6K-SUP2-2GE SAD04450LF1 Hw : 1.1 Fw : 6.1(2) Fw1: 6.1(3) Sw : 6.3(0.62)PAN Sw1: 6.3(0.62)PAN WS-F6K-PFC2 SAD04440HVU Hw : 1.0 Console> Power device. 44-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 829
    • Phone Removal, page 44-14 • High-Availability Support, page 44-14 Unpowered Phone When an unpowered phone within 4 seconds, the supervisor engine instructs the switching module to turn power off 7W for the Cisco IP Phone and powers it up. Once the Cisco IP Phone Guide-Releases 6.3 and 6.4 44-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 830
    seconds between unplugging a device and plugging in a new device. High-Availability Support To support high availability during a failover from the active supervisor engine to the standby supervisor port. 44-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 831
    phone. 10/100 module 10/100 module Cisco phone or third party phone. Supervisor engine discovers the phone through CDP and/or IEEE. Wall-power Third party phone without CDP. Switching module will not discover the phone because CDP is not supported. However, the supervisor engine detects the
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 832
    Power to the Device The switching module detects if there is a problem providing inline power to the device and reports this problem to the supervisor engine. This syslog message is displayed: 1999 Jul so). 44-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 833
    Detected mWatt mA @42V 3/2 auto on yes 10.00 0.250 3/3 auto on yes 9.8 0.198 3/4 auto denied yes 0 0 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 44-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 834
    ports: Console> (enable) show environment power 5 Feature not supported on module 5. Console> (enable) show environment power 9 PowerRequested PowerAllocated CardStatus Watts A @42V Watts A @42V 9 WS-X6348 123.06 2.93 123.06 2.93 ok Default Inline Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 835
    WS-X6K-SUP1-2GE 3 WS-X6348-RJ-45 5 WS-X6348-RJ-45 6 Unknown 7 WS-X6248-RJ-45 9 WS- CDP packets that instruct an attached Cisco IP Phone 7960 the auxiliary VLAN ID). - Reset the Cisco IP Phone 7960 if the auxiliary VLAN ID ) Note The Cisco IP Phone 7960 always sets Layer
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 836
    port auxiliaryvlan 5/12 none Port 5/12 will not allow sending CDP packets with Voice VLAN information. Console> (enable) 44-20 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 837
    specify more than one port at a time because a unique IP address must be set for each port. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 44-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 838
    Port Call-Manager(s) DHCP-Server TFTP-Server Gateway 5/1-24 10.6.15.155 - 10.6.15.155 - Port DNS-Server(s) Domain 5/1-24 12.2.2.1* cisco.cisco.com 7.7.7.7 (*): Primary Console> (enable) 44-22 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 839
    Switch Displaying FDL Statistics Note FDL is a link management protocol used to help diagnose problems and gather statistics. To display Facilities Data Link (FDL) statistics for the specified detected. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 44-23
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 840
    Server TFTP-Sever Gateway 7/1 172.20.34.207* 172.20.34.207 172.20.34.207 - callm.cisco.com 7/2 172.20.34.207 172.20.34.207 172.20.34.207 172.20.34.20 7/3 172 7/8 (Port host processor not online) 44-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 841
    a VoIP Network Configuring VoIP on a Switch Port DNS-Server(s) Domain 7/1 172.20.34.207 cisco.com 7/2 172.20.34.207* int.cisco.com 171.69.45.34 172.78.111.132 7/3 172.20.34.207 - 7/4 172.20 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 44-25
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 842
    Speed Type 3/1 onhook 1 full 64k FXS 3/2 onhook 1 full 64k FXS 3/3 onhook 1 full 64k FXS 3/4 onhook 1 full 64k FXS 44-26 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 843
    .34.207 172.20.34.207 - Port DNS-Server(s) Domain 3/1-24 172.20.34.207* cisco.com 172.34.23.111 Port CallManagerState DSP-Type 3/1-24 registered C549 Port ToneLocal Impedance InputGain(dB . 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 44-27
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 844
    : Ringing : G.711 : 35243 : 438543 sec : 34534 sec : 123213 : 123 dB : 332433 : 23004 ms : 4 : 234 ms : 23423 ms : 2342342332423 44-28 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 845
    QoS in the Cisco IP Phone 7960 These sections describe QoS in the Cisco IP Phone 7960: • Understanding How QoS Works in the Cisco IP Phone 7960, page 44-30 • Configuring QoS in the Cisco IP Phone 7960, page 44-30 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 846
    to configure QoS in the Cisco IP Phone 7960: • Setting the Phone Access Port Trust Mode, page 44-31 • Setting the Phone Access Port CoS Value, page 44-31 • Verifying the Phone Access Port QoS Configuration, page 44-31 44-30 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 847
    configuration information: Console> (enable) show port qos 3/4 Port Ext-Trust Ext-Cos 3/4 untrusted 0 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 44-31
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 848
    Configuring VoIP on a Switch Chapter 44 Configuring a VoIP Network 44-32 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 849
    supplicant automatic reauthentication 42 manual reauthentication 42 transport layer packets setting retransmission time 45 8-port T1/E1 PSTN interface module configuring 25 description 6 A abbreviating commands 9 Accelerated Server Load Balancing See ASLB access control entries See IOS ACLs See QoS
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 850
    See IOS ACLs See QoS ACL See VACLs addresses IP, see IP addresses MAC, see MAC addresses address resolution protocol See ARP address table and switching 2 adjacency table 6 administering the switch 1 advertisements, VTP 2 aggregate policing rule See QoS policing aging-time CEF 10 MLS 17 PFC2 NetFlow
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 851
    2 on ports 3 displaying neighbor information 5 enabling globally 2 on ports 3 holdtime, setting 4 message interval, setting 4 overview 1 CEF 1 adjacency table 6 aging 10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 IN-3
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 852
    MSFC2 for multicast 11 CEF for PFC2 See CEF CGMP leaving multicast Cisco CallManager, overview 4 Cisco Discovery Protocol See CDP Cisco Group Management Protocol See CGMP Cisco IP Phone 7960 2 Cisco mode 9 interface configuration mode (IOS) 9 levels of access 8 Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 853
    5 user sessions disconnecting 6 monitoring 6 contact, setting 3 content-addressable memory See CAM convergence improving 33 COPS communications parameters 65 configuring 60 domain name configuration file 9 date, setting 4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 IN-5
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 854
    and 9 options 3 releasing lease 10 renewing lease 10 differentiated services codepoint See QoS DSCP disabling MLS on MSFC interfaces 14 on the frames setting retransmit time 44 manual reauthentication 42 returning to default 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 855
    avoidance DSCP See QoS DSCP DTP non-Cisco devices and 4 overview 2 duplex, Ethernet VLANs 12 overview 1 reconfirming 7 troubleshooting 8 Dynamic Trunking Protocol See DTP distribution 3 IDs 2 maximum number of channels supported 1, 4 modes 3 overview 1 PAgP and Guide-Releases 6.3 and 6.4 IN-7
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 856
    device 8 overview 1 setting configuration modes 2 Flash memory storing ACLs 42 Flash PC cards, formatting 8 entries and 7 IP MLS full flow 6 IPX MLS 6 minimum 19 PFC2 statistics 24 MLS destination 6 source-destination-ip 6 source-destination-vlan 6 Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 857
    availability configuring 11 downloading different image on standby supervisor engine 13 overview 8 supported features 9 versioning overview 10 history, switch CLI 7 Hot Standby Routing Protocol See HSRP HSRP ACLs IOS ACL configuration 22 reflexive and dynamic ACLs (note) 22 configuration examples 28
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 858
    configuring 3 overview 1 IOS bringing up interface 11 viewing and saving configuration 11 IOS ACLs 3 common uses for 9 features supported in PFC 10 supported in PFC II 12 list 2 aliases, creating 6 IN-10 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 859
    J jumbo frames configuring 11 disabling 11 enabling 11 K Kerberos authentication DES key, defining and clearing 38 disabling credentials forwarding 37 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 IN-11
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 860
    description 21 determining maximum number of 21 M MAC addresses address table 2 allocation 13 blocking 1 designating 6 port security and 1 IN-12 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 861
    8 metric values, switch TopN reports (table) 2 MIBs RMON/RMON2 support (table) 3 microflow policing rule 22 MISTP bridge ID priority 25 15, 30 debug commands on MSFC 16 debug commands on MSFC2 for multicast traffic 19 debug commands on MSFC for multicast traffic Guide-Releases 6.3 and 6.4 IN-13
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 862
    console port 4 telnet session 4 AppleTalk interVLAN routing, configuring 4 as MLS route processor for Catalyst 5000 family switches 14 IN-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 863
    on MSFC interfaces 29 session command and 4 switch console command and 4 MSFC2 Catalyst 5000 support 1 configuring IP multicast 14 unicast Layer 3 switching 14 enabling IP multicast 1 specifying collectors 4 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 IN-15
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 864
    PBF 50 disabling PBF and clearing the MAC address 49 displaying PBF information 52 displaying PBF statistics 52 IN-16 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 865
    filtering and 1 QoS, see Layer 3 Switching Engine PFC2 NetFlow fast aging-time 24 flow masks 24 packet threshold 22 statistics 9 displaying for NetFlow table entries 26 phones, Cisco IP Phone 7960 2 PIM 5 78-13315-02 PIM, 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 IN-17
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 866
    5 default configuration 2 example 10 overview 1 reconfirming 7 troubleshooting 8 errdisable timeout, configuring 9 isolated 14 name 4 default configuration 2 disabling 3 enabling 3 overview 1 protocol support 2 pruning, VTP See VTP, pruning PVST+ 15 Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 867
    deleting 36 reverting to default values 44 storing in Flash memory 42 QoS classification (definition) 2 QoS classification criteria IP MAC ACE Layer 2 20 QoS configuring 30 QoS configuring on Cisco IP Phone 7960 29 QoS congestion avoidance definition 3 dual transmit Guide-Releases 6.3 and 6.4 IN-19
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 868
    10 QoS receive queue 11 drop thresholds 11, 54 drop thresholds (figure) 13 tail-drop thresholds, configuring 48 IN-20 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 869
    synchronizing boot images 16 synchronizing runtime image with bootstring 14 redundant supervisor engine See supervisor engine, redundant 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 IN-21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 870
    displaying 23 statistics clearing 25 VLAN statistics displaying 23 RMON 1 enabling 2 overview 1 supported MIB objects 2 viewing data 2 ROM monitor BOOT environment variable and 3 boot process disabling 67 IN-22 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 871
    SNMP single router mode redundancy See SRM skewing BPDU configuring 38 sl0 (SLIP) interface configuring 7 overview 1 SLIP 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 IN-23
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 872
    4 SNMP agents and MIBs 5 SNMPv1 overview 5 SNMPv2c overview 5 SNMPv3 overview 7 supported RMON MIB objects 2 terms 1 SNMP entity access control subsystem 7 definition 7 dispatcher CIDR and 7 VLSM and 7 IN-24 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 873
    statistics BPDU skewing 38 statistics, PFC2 9 STP BPDUs and 2 bridge ID priority, understanding 13 forward delay 15 Supervisor Engine 1 environmental monitoring 16 supplicant automatic reauthentication 42 manual reauthentication 42 switch administration modules, checking status 1 Catalyst 6000 Family
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 874
    6 message format 3 message log, displaying 10 overview 1 server, configuring 7 session settings, setting 5 syslog daemon, configuring 7 syslog server configuring 7 IN-26 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 875
    configuration mode setting the configuration mode 2 TFTP downloading configuration files 3 downloading software images example, multiple module 7, 13 example, single module 6 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 IN-27
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 876
    VLANS, Token Ring TrCRF See VLANS, Token Ring Trivial File Transfer Protocol See TFTP troubleshooting system message logging and 1 VMPS 8 trunks 802.1Q configuring 6 negotiating 7 restrictions configuration 2 IN-28 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 877
    a specific server port figure 24 procedure 23 restricting ARP traffic 26 restricting the DHCP response for a specific server figure 25 procedure 24 storing in Flash memory 42 supported features 4 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 IN-29
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 878
    4 types and parameters 4 with IOS ACLs 15 virtual LAN See VLANs configuring 5 example 10 overview 1 reconfirming 7 troubleshooting 8 error messages (table) 8 example membership 10 monitoring 6 overview 1 reconfirming membership 7 troubleshooting 8 voice-over-IP network analog station gateway, 24
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 879
    CLI commands 9 configuring access gateways 21 converged voice gateway, Cisco VG200 7 digital trunk gateway, 8-port T1/E1 PSTN interface 14 Web Cache Coordination Protocol See WCCP 12, 14 WRED 49 write tech support 17 writetechsupport 17 X xmodem software download 21 Y ymodem software download 21
  • Cisco WS-X6K-S2-PFC2 | Software Guide - Page 880
    Index IN-32 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420
  • 421
  • 422
  • 423
  • 424
  • 425
  • 426
  • 427
  • 428
  • 429
  • 430
  • 431
  • 432
  • 433
  • 434
  • 435
  • 436
  • 437
  • 438
  • 439
  • 440
  • 441
  • 442
  • 443
  • 444
  • 445
  • 446
  • 447
  • 448
  • 449
  • 450
  • 451
  • 452
  • 453
  • 454
  • 455
  • 456
  • 457
  • 458
  • 459
  • 460
  • 461
  • 462
  • 463
  • 464
  • 465
  • 466
  • 467
  • 468
  • 469
  • 470
  • 471
  • 472
  • 473
  • 474
  • 475
  • 476
  • 477
  • 478
  • 479
  • 480
  • 481
  • 482
  • 483
  • 484
  • 485
  • 486
  • 487
  • 488
  • 489
  • 490
  • 491
  • 492
  • 493
  • 494
  • 495
  • 496
  • 497
  • 498
  • 499
  • 500
  • 501
  • 502
  • 503
  • 504
  • 505
  • 506
  • 507
  • 508
  • 509
  • 510
  • 511
  • 512
  • 513
  • 514
  • 515
  • 516
  • 517
  • 518
  • 519
  • 520
  • 521
  • 522
  • 523
  • 524
  • 525
  • 526
  • 527
  • 528
  • 529
  • 530
  • 531
  • 532
  • 533
  • 534
  • 535
  • 536
  • 537
  • 538
  • 539
  • 540
  • 541
  • 542
  • 543
  • 544
  • 545
  • 546
  • 547
  • 548
  • 549
  • 550
  • 551
  • 552
  • 553
  • 554
  • 555
  • 556
  • 557
  • 558
  • 559
  • 560
  • 561
  • 562
  • 563
  • 564
  • 565
  • 566
  • 567
  • 568
  • 569
  • 570
  • 571
  • 572
  • 573
  • 574
  • 575
  • 576
  • 577
  • 578
  • 579
  • 580
  • 581
  • 582
  • 583
  • 584
  • 585
  • 586
  • 587
  • 588
  • 589
  • 590
  • 591
  • 592
  • 593
  • 594
  • 595
  • 596
  • 597
  • 598
  • 599
  • 600
  • 601
  • 602
  • 603
  • 604
  • 605
  • 606
  • 607
  • 608
  • 609
  • 610
  • 611
  • 612
  • 613
  • 614
  • 615
  • 616
  • 617
  • 618
  • 619
  • 620
  • 621
  • 622
  • 623
  • 624
  • 625
  • 626
  • 627
  • 628
  • 629
  • 630
  • 631
  • 632
  • 633
  • 634
  • 635
  • 636
  • 637
  • 638
  • 639
  • 640
  • 641
  • 642
  • 643
  • 644
  • 645
  • 646
  • 647
  • 648
  • 649
  • 650
  • 651
  • 652
  • 653
  • 654
  • 655
  • 656
  • 657
  • 658
  • 659
  • 660
  • 661
  • 662
  • 663
  • 664
  • 665
  • 666
  • 667
  • 668
  • 669
  • 670
  • 671
  • 672
  • 673
  • 674
  • 675
  • 676
  • 677
  • 678
  • 679
  • 680
  • 681
  • 682
  • 683
  • 684
  • 685
  • 686
  • 687
  • 688
  • 689
  • 690
  • 691
  • 692
  • 693
  • 694
  • 695
  • 696
  • 697
  • 698
  • 699
  • 700
  • 701
  • 702
  • 703
  • 704
  • 705
  • 706
  • 707
  • 708
  • 709
  • 710
  • 711
  • 712
  • 713
  • 714
  • 715
  • 716
  • 717
  • 718
  • 719
  • 720
  • 721
  • 722
  • 723
  • 724
  • 725
  • 726
  • 727
  • 728
  • 729
  • 730
  • 731
  • 732
  • 733
  • 734
  • 735
  • 736
  • 737
  • 738
  • 739
  • 740
  • 741
  • 742
  • 743
  • 744
  • 745
  • 746
  • 747
  • 748
  • 749
  • 750
  • 751
  • 752
  • 753
  • 754
  • 755
  • 756
  • 757
  • 758
  • 759
  • 760
  • 761
  • 762
  • 763
  • 764
  • 765
  • 766
  • 767
  • 768
  • 769
  • 770
  • 771
  • 772
  • 773
  • 774
  • 775
  • 776
  • 777
  • 778
  • 779
  • 780
  • 781
  • 782
  • 783
  • 784
  • 785
  • 786
  • 787
  • 788
  • 789
  • 790
  • 791
  • 792
  • 793
  • 794
  • 795
  • 796
  • 797
  • 798
  • 799
  • 800
  • 801
  • 802
  • 803
  • 804
  • 805
  • 806
  • 807
  • 808
  • 809
  • 810
  • 811
  • 812
  • 813
  • 814
  • 815
  • 816
  • 817
  • 818
  • 819
  • 820
  • 821
  • 822
  • 823
  • 824
  • 825
  • 826
  • 827
  • 828
  • 829
  • 830
  • 831
  • 832
  • 833
  • 834
  • 835
  • 836
  • 837
  • 838
  • 839
  • 840
  • 841
  • 842
  • 843
  • 844
  • 845
  • 846
  • 847
  • 848
  • 849
  • 850
  • 851
  • 852
  • 853
  • 854
  • 855
  • 856
  • 857
  • 858
  • 859
  • 860
  • 861
  • 862
  • 863
  • 864
  • 865
  • 866
  • 867
  • 868
  • 869
  • 870
  • 871
  • 872
  • 873
  • 874
  • 875
  • 876
  • 877
  • 878
  • 879
  • 880
Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 526-4100
Catalyst 6000 Family
Software Configuration Guide
Software Releases 6.3 and 6.4
Customer Order Number: DOC-7813315=
Text Part Number: 78-13315-02