Manuale d’uso / di manutenzione del prodotto DOC-7814982 del fabbricante Cisco Systems
Vai alla pagina of 648
Corporate He adquarters Cisc o Syst ems , Inc . 170 West Ta sman Drive San Jos e, CA 95 134-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553- NETS (638 7) Fax: 408 526-4100 Catal yst 2950 Desktop S witc h Sof tware Configuration Guide Cisco IOS Release 12.
THE SPECIFICATIONS AND INFORMATION REG ARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOU T NOTICE. ALL STATEMENT S, INFORMATI ON, AND RECOMMENDA TIONS IN T HIS MANUAL ARE BELIEVED TO BE ACCURATE BU T ARE PRESEN TED WITHOUT WARRANTY OF ANY KIND, EXPRE SS OR IMPLIED.
iii Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 CONTENTS Preface xx v Audienc e xxv Pur pose xxv Organi zation xx vi Conv enti ons xxviii Rela te d Publi cation s xxix Obta.
Cont ent s iv Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 CHAPTER 2 Using t he Command -Line I nterface 2-1 IOS Command Mode s 2-1 Gettin g Help 2-3 Specif ying P orts in I.
Content s v Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Topolo gy View Po pup Menus 3-22 Link Popu p Me nu 3-22 Device Po pup Menus 3-23 Inter action Mode s 3-25 Guide Mo d.
Cont ent s vi Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Example Conf igurat ion 4-8 Manua lly As sign ing IP Infor matio n 4-10 Checki ng and Sav in g the Runn i ng Confi.
Content s vii Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Virtua l IP Addr es s es 6-13 Other Consider ations for Clust er Stan dby Grou ps 6-13 Automa tic Recov ery of Clu.
Cont ent s viii Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Identi fying t he TACACS+ Server Host and Sett in g the Aut hentica tion Key 7-1 3 Config urin g TACAC S+ Logi n.
Content s ix Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Config urin g a Sys tem Name and Prompt 7-48 Defaul t Syste m Name and Prompt Co nfig ura tion 7-48 Config urin g a.
Cont ent s x Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Changin g the Swi tch-to- Client Retran smi ssio n Ti me 8-12 Settin g t he S witch -to -Cli ent Fr ame -Re trans mis sion Num ber 8-13 Enab ling Mul tip le Host s 8-13 Resett ing th e 802 .
Content s xi Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Guidel ines f or Using LRE Profil es 10-7 CPE Ether net Li nk Guidel ines 10-7 Cons ider atio ns f or Co nne cted C.
Cont ent s xii Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Spannin g Tree an d Redundan t Connec tivit y 11-8 Acceler ated Aging to R etain Connect ivity 11-9 Config urin g.
Content s xiii Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Config urin g a Sec ondar y Root Switc h 12-16 Config urin g the Port Pr iori t y 12-17 Config urin g the Path Co.
Cont ent s xiv Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 CHAPTER 14 Configur ing V LANs 14-1 Underst anding VL ANs 14-1 Support ed V LANs 14 -2 VLAN Port Mem ber ship M o.
Content s xv Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Config urin g the VMPS Clie nt 14 -28 Enter ing the IP Ad dres s o f the V MP S 14-28 Config urin g Dynamic Acce ss.
Cont ent s xvi Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Defau lt V oic e VLA N Co nfig urat ion 16 -2 Voice VLA N Config urat ion Guidel ines 16-3 Config urin g a Port to Con nect to a Cisco 7960 IP Phone 16-3 Config urin g Ports to Ca rry Voice T raffic in 8 02.
Content s xvii Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 CHAPTER 18 Configur ing Port -Ba sed Traf fi c Control 18-1 Config urin g Sto rm Contr ol 18-1 Underst anding St .
Cont ent s xviii Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 SPAN Sessi on 21-3 Tra ffic Ty pes 21-3 Source Po rt 21-4 Destin atio n Por t 21-5 Reflec tor Po rt 21 -5 VLAN-.
Content s xix Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Setti ng the Message Displ ay Des tinati on Device 23-4 Synchro nizing Log Mes sages 23-6 Enabli ng and Disa blin .
Cont ent s xx Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 ACL Numbers 25-8 Creati ng a Nu mbered Standar d ACL 25-9 Creati ng a Nu mbered Extend ed ACL 25-10 Creati ng Name.
Content s xxi Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Config urin g Trusted Bo undary 26-13 Enab ling P ass-Thr ough Mode 26 -15 Config urin g a QoS Policy 26-16 Classi.
Cont ent s xxii Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Replac ing a Fail ed Command Swit ch with a Clus ter Member 28-9 Replac ing a Fail ed Command Swit ch with Anoth.
Content s xxiii Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Copyin g Configur atio n Fi les By Usin g FTP B- 13 Prepa ring to Downlo ad or U pload a C onfig urat ion File B.
Cont ent s xxiv Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01.
xxv Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Preface Audience The Cataly st 2 950 Desktop Sw itch Sof tware Configuration Gui de is for t he n etwor k ma na ger responsible for conf igur ing the Catalyst 2950 switches, hereaf ter referred to as the switches .
xxvi Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Preface Organizati on This guid e does not descr ibe system me ssages you migh t encounte r or how to install your swit ch.
xxvii Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Pre face Organization Chapter 8, “ Config uring 802.1X Po rt-Based Au thentication, ” describe s how to configure 802. 1X port-base d authe nticat i on to pr ev ent unau thoriz ed devices (c lients) from ga i ning ac cess to the ne twork.
xxvii i Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Preface Conv ent ions Chapter 25, “ Conf iguring Network Sec urity with A CLs, ” des cri bes h ow to conf igure netw ork securi ty by using acce ss cont rol list s (ACLs).
xxix Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Pre face Related Publ icati ons Related Publications These do cuments p rovid e comple te informati on about the switch and ar e av a ilable f rom this Cisco.com site: http://www .
xxx Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Preface Obtain in g Technical Assis ta nce Documenta tion C D-ROM Cisco documentati on and additio nal literature are a v ailable in a Cisco Documentation CD-R OM packag e, w hich is shi pped with you r prod uct.
xxxi Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Pre face Ob taining Technical Assistance Cisco.com Cisco.com is t he foundation of a suite of inter acti ve, network ed ser.
xxxii Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Preface Obtain in g Technical Assis ta nce If you are a Ci sco. com registered use r, and you cannot resol ve your tech nica l issu es by using the C isco T AC W eb Site, you can open a ca se online by using the T AC Case Op en tool at t his URL: http://www .
C HAPTER 1-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 1 Overview This chapter pro vides these topics ab out the Catalyst 2950 switch software: • Feat ures , page 1- 1 .
1-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Ch ap ter 1 Ov er vi ew Feature s Th is section descri bes the featu res suppor ted in this rele ase: Note Som e features re quire tha t you have the EI installed on your switch.
1-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 1 Overview Features • Switch clus teri n g te chnol ogy u sed with CM S for – Unif ied conf iguration, mo nitoring, authen tication, and softw are upgrade of multip le switches (refer to the r elease notes for a li st of eli gible clust er membe rs).
1-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Ch ap ter 1 Ov er vi ew Feature s • Address Resolution Protocol (ARP) for identif ying a switch through its IP address and.
1-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 1 Overview Features – Loop gu ar d for pr ev enting alterna te or roo t ports fr om bec om ing d esignate d port s be cause of a failur e that l eads to a unidirect ional li nk Note The switch support s up to 64 spanni ng-tre e insta nces.
1-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Ch ap ter 1 Ov er vi ew Feature s Quality of Service and Class of Service • Classif ication – IEEE 8 02.
1-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 1 Overview Manageme nt Options Management Options The swi t ch es are des igned for plug-an d-play o peratio n: you on ly need to assign basic IP infor ma tion to the switc h and c on nect i t to t he ot her devices in you r net work.
1-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Ch ap ter 1 Ov er vi ew Netwo rk Conf igurati on Ex amples By using switch cl usters a nd CM S, yo u c an: • Manage and mo.
1-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 1 Overview Network Configuration Examples Bandwidt h alone is not the only c onsiderat ion when d esigning you r network.
1-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Ch ap ter 1 Ov er vi ew Netwo rk Conf igurati on Ex amples Y o u can cr eate bac kup paths by using Fast Ethern et, Gigab it, Fast Eth erChanne l, or Gigab it EtherCha nnel li nks.
1-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 1 Overview Network Configuration Examples Figur e 1 -1 Example Configur ations Small to Medium-Sized Network Configuration Figure 1-2 sh ows a con figurat ion for a n etwork th at has u p t o 25 0 u ser s.
1-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Ch ap ter 1 Ov er vi ew Netwo rk Conf igurati on Ex amples A network backbone i s a high-ba ndwidth co nnectio n (such as Fast Ethe rnet or G igabit Ethe rnet) tha t interc onnects segm ents and netw ork resour ces.
1-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 1 Overview Network Configuration Examples Collaps ed Backbo ne an d Switch Clu ster Configuratio n Figure 1-3 sh ows a con figura tion for a n etwor k of appro xi mat ely 50 0 em pl oyees.
1-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Ch ap ter 1 Ov er vi ew Netwo rk Conf igurati on Ex amples Figur e 1 -3 Collapsed Back bone and Switc h Clust er Conf iguration Large C ampus C onfiguration Figure 1-4 shows a c on f i gur atio n fo r a n etw ork of m ore th an 1 0 00 users.
1-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 1 Overview Network Configuration Examples Figur e 1 -4 Larg e Campus Confi gura tion Catalyst 6500 s witch Cisco ac.
1-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Ch ap ter 1 Ov er vi ew Netwo rk Conf igurati on Ex amples Hotel Network Configuration Figure 1-5 sh ows the Cataly st 2950 LRE switches in a hotel netw ork en vironmen t with approximatel y 200 room s.
1-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 1 Overview Network Configuration Examples Y ou can mana ge the swit ch es as a s witch clu s ter an d th r oug h th e clu s te r ma na geme nt suite (C MS).
1-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Ch ap ter 1 Ov er vi ew Netwo rk Conf igurati on Ex amples Multidwelling Network Usi ng Catalyst 2950 Switches A growing segmen t of residen tial a nd co mmer cial cu stome rs ar e requir ing h igh-spe ed acc ess t o Ether net metropolita n-area networks (MANs).
1-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 1 Overview Network Configuration Examples Figur e 1 -6 Catalyst 2950 Swi tches in a MAN Con figur ation 50833 Ser v.
1-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Ch ap ter 1 Ov er vi ew Netwo rk Conf igurati on Ex amples Long-Distan ce, High-Ba ndwidth T ransport C onfiguration Note T o use the feature de scribed in this sectio n, you must hav e the EI installe d on your Cataly st 2950 switch.
1-21 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 1 Overview Where t o Go Next Where to Go Next Before conf iguring the switch, re view th ese section s for start up.
1-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Ch ap ter 1 Ov er vi ew Where to Go Nex t.
C HAPTER 2-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 2 Using the Command-Line Interface This c ha pter d escri bes th e IO S comm an d-l ine int erfa ce ( CLI ) th at you c a n u se to con figure your switch es.
2-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce IOS Command Modes Ta b l e 2 - 1 desc ribes the main co mman d modes, how to acc ess each one , the prom pt you see in that mo de, and ho w to e xit the mo de.
2-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 2 Using the Comm a nd-Line In terface Getting Help Getting Help Y ou can enter a qu es t i on ma rk (? ) at th e s y s tem pr om p t to d is p lay a lis t of co mm an d s a v ailab l e f or eac h comma nd mode .
2-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce Spec ifyi ng Po rts in I nte rfa ce Co nfig urat ion Mo de Specifying .
2-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 2 Using the Comm a nd-Line In terface Abbrev iating Com mands • Port number — T he n umber of the physic al por t on the sw itch . Refe r to y our swi tch for th e por t numb ers .
2-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce Usin g C omm a nd His tor y Using Command History The IOS provid es a history or re cord of com mands tha t you have entered.
2-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 2 Using the Comm a nd-Line In terface Using Edit ing Featu res Disabling th e Com mand His tor y F eatu re The comma nd history feature is automatic ally enab led.
2-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce Using E diting Feature s Editing C ommands throu gh Keystrok es Ta b l e 2 - 5 shows th e ke ystrok es that you need to edit co mmand lines .
2-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 2 Using the Comm a nd-Line In terface Using Edit ing Featu res Editing C ommand Lines that Wrap Y o u can use a wrap around feature for commands t hat extend beyond a singl e line on th e screen .
2-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce Searching and F iltering O utput of show and more Com man ds Use lin e wrapping with the co mman d history fe ature to recall and modif y previous complex co mmand entries.
2-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 2 Using the Comm a nd-Line In terface Acce ssi ng th e C L I fro m a B rows er Accessing the CLI from a Bro wser Th.
2-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt er 2 Us i ng th e Com ma n d-L i ne In terfa ce Access ing th e CLI from a Br owse r.
C HAPTER 3-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 3 Getting Started with CMS This chapte r provides these topics about the Cluste r Management Suite (CMS ) software:.
3-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Feature s Features CMS pro vides these featu res (see Figure 3-1 ) for m anagi ng switc h.
3-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Features • T wo lev els of access to the conf iguration optio ns: read-wr ite access for users allo wed to change switch se ttings; read- only acce ss for users allo wed to on ly vie w switch settings.
3-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Front Panel Vi ew Front Panel View When CMS is laun ched from a comma nd switch, the Fron.
3-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Front Pa nel Vie w Figur e 3-3 F r ont P anel View fr om a 2950 Com mand Sw itch When CM.
3-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Front Panel Vi ew Figur e 3-5 F r ont P anel View fr om a 2950 no n-LRE Standalone S witc.
3-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Front Pa nel Vie w Front-Panel Images Y o u can mana ge the swit ch from a remot e stati on by using the front- panel ima ges.
3-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Front Panel Vi ew Redundant Power System LE D The Redundant Po wer System ( RPS) LED sho ws t he RPS stat us (see Ta b l e 3 - 3 ).
3-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Front Pa nel Vie w T o sele ct or ch an ge a m ode, c lick t he M ode button un til the desi re d mo de L ED i s gree n.
3-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Topology Vie w Topology Vie w The T opology vie w displays ho w the de vices within a switch cluster are con nected and ho w the switch cluster i s con ne cte d to oth er cl usters and devices .
3-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Topol ogy View Figur e 3-8 Expan d Cluste r View Figur e 3-9 Collaps e Clust er View Right-click a link icon to displa y a link popup menu.
3-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Topology Vie w Topology Icons The T op ology view and the cl ust e r tree us e the sam e set of device icons to r epresen t cluster s, com mand and standby c omm and sw it ches, a nd m embe r swit che s (see Figur e 3-10 ).
3-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Topol ogy View Figur e 3-1 1 T opolog y -V iew Lin k Icons Device and Link Lab els The .
3-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Topology Vie w Colors in the Topo logy Vie w The col ors of the T o pology vi e w ic ons show the st atus of t he d evices and li nks (see Ta b l e 3 - 7 , Ta b l e 3 - 8 , and Ta b l e 3 - 9 ).
3-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Menus and To olbar Topology Display Optio ns Y o u can set th e type of info rmati on displaye d in the T opology view b y changing the settings i n the T opology O ptio ns wi ndow .
3-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Menu s an d Toolba r Note • W e stron gly recomm end that the hig hest- end, comm and-.
3-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Menus and To olbar T able 3-1 1 Menu Bar Menu-B ar O ptio ns T ask CMS Page Setup Set default doc um ent pr int er p rop ertie s t o be use d whe n prin tin g from CM S.
3-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Menu s an d Toolba r STP 2 Display and conf igure STP para meters for a switch. IGMP Sn oopin g 2 E nable and di sable In ternet Group Manage ment Protoc ol (IGMP) snoo ping an d IGMP Immediate-Lea ve proc essing on the switch.
3-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Menus and To olbar V oice VL AN 2 Configu re a port to use a v oice VLAN f or voice traf fic, separating it fr om the VLANs for data traf f ic.
3-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Menu s an d Toolba r Toolbar The toolba r buttons display com monly- used switch and cluster configurat ion options and i nformat ion windo ws such as l eg ends an d onlin e he lp.
3-21 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Menus and To olbar Front Panel V iew Po pup M enus These popu p menus ar e available in the Front Panel view .
3-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Menu s an d Toolba r Topology View P opup Men us These popu p menus ar e available in the T o pology vi ew .
3-23 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Menus and To olbar Figur e 3-12 Multilin k Decomposer Window Device Popup Menus Specifi.
3-24 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Menu s an d Toolba r T able 3-1 7 Device P opup M enu of a Comm and-S witc h Icon Popup M enu Opt ion T ask Coll apse clu ster V ie w the neighbo rhood outsi de a specific clu ster .
3-25 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Inter action Mo des Interaction Modes Y o u can ch an ge the inte ra ctio n m ode of CMS t o eit her gu ide or expert m ode . G uide m od e st ep s you through each fea ture optio n and provides i nformat ion about the parame ter .
3-26 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Wizards Wizards Note Wiz ards are not a v ailable if your switch access le v el is read-only . For more informa tion about the read- only acc ess mode, s ee the “ Ac cess Modes in CMS ” sect ion o n page 3-31 .
3-27 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Online Help Figur e 3-13 Help Con ten ts and In dex Figur e 3-14 Help Con ten ts and In dex Inf or mation about the CMS interf ace. F eature help , such as concepts.
3-28 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS CMS W indow Com ponent s CMS Window Components CMS windo ws consistently present conf iguration info rmation. Figure 3-15 shows the components of a typical CMS window .
3-29 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS CMS Wi nd ow Co mpo n ents Tabs, Lists, and T ables Some CMS windows ha ve tabs that presen t diff erent sets of info rmation. T abs are arranged like fold er headings acr oss the top of the windo w .
3-30 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Access ing CMS Buttons These a re the m ost common butto ns that you use to change the info rmation in a CMS win dow: • OK — Sa v e an y chan ge s and clos e th e wi ndo w .
3-31 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Acce s sing CMS T o acces s CMS, follo w these st eps: Step 1 Enter the switc h IP address and your pri vile ge le v el in the browser Location fie ld (Netsc ape Commu nicator ) or Address field (M icrosof t Internet Explore r).
3-32 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Verifying Yo ur Cha nges • These switc hes do n ot su ppo rt r ead- only mo de on CMS:.
3-33 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Star ted with CMS Saving Your Configuration Saving Your Co nfigurat ion Note Th e Save Configurati on option is not a vailable if you r switch acce ss lev el is read-onl y .
3-34 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 3 Getting Started with CMS Using Differen t Versions of CMS Using Different Versions of CMS When managi ng switch c.
C HAPTER 4-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 4 Assigning the Switch IP Address and Default Gateway This chapt er describes ho w to create the initial switch conf iguration (for e xample, assig n the switch IP address an d default gateway informa tion) by using a variety of au tomati c and manua l methods.
4-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 4 Assigning the S witch IP Add ress and Defau lt Gateway Assign ing Swi tch Info rmatio n The boot loader a lso provid es trap-door access in to the system if the o perating system has problems serious enoug h that i t cannot be use d.
4-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 4 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Assigning Switch Information Default Switch Information Ta b l e 4 - 1 shows the default switch information.
4-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 4 Assigning the S witch IP Add ress and Defau lt Gateway Assign ing Swi tch Info rmatio n DHCP Client Request Proce .
4-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 4 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Assigning Switch Information Configuring the DHCP Ser ver Y o u shoul d configure t he DHC P server wi th rese rved leases t hat ar e boun d to each switch by th e switc h hardware address.
4-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 4 Assigning the S witch IP Add ress and Defau lt Gateway Assign ing Swi tch Info rmatio n For the switch to successf ull y do wnl oad a conf igu ratio n f i le, the TFTP ser v er must contain one o r more configur ation files in its base direct ory .
4-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 4 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Assigning Switch Information Figur e 4-2 Rela y Devic e.
4-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 4 Assigning the S witch IP Add ress and Defau lt Gateway Assign ing Swi tch Info rmatio n Note The switch br oadcast.
4-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 4 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Assigning Switch Information DNS Ser ver Conf iguration The DNS server ma ps the TF TP server name ma ri ts u to IP address 10.
4-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 4 Assigning the S witch IP Add ress and Defau lt Gateway Checking and Saving th e Run ning Confi gura tion Manually.
4-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 4 Assigni ng the Swi tch IP Addr ess an d Defa ult Ga tewa y Checki n g an d Sav in g the Ru nnin g Co nfig ur atio n ! hostname Switch ! enable secret 5 $1$ej9.
4-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 4 Assigning the S witch IP Add ress and Defau lt Gateway Checking and Saving th e Run ning Confi gura tion no ip address shutdown ! interface Vlan1 ip address 172.20.
C HAPTER 5-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 5 Configuring IE2100 CNS Ag ents This chap ter describes h ow to c onfigure th e Intelligence Engine 2100 (IE2100) Series Cisco Netw orking Servic es (CNS) embe dded ag ent s on you r switc h.
5-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configur ing IE2100 C NS Agents Unders tan ding IE21 0 0 Series Config uration Reg istrar Softwar e Figur e 5-1 Co.
5-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configuring IE21 00 CNS Agents Understan ding IE2100 Series Configurat ion Registrar S oftware CNS E ven t Serv i ce The Conf iguration Regi strar uses the CNS Ev ent Servic e for rece ipt and ge neration of conf iguration e ven ts.
5-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configur ing IE2100 C NS Agents Unders tan ding IE21 0 0 Series Config uration Reg istrar Softwar e DeviceID Each .
5-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configuring IE21 00 CNS Agents Unde rstan ding CNS Embe dde d Ag ent s Understandin g CNS Embedde d Agents The CNS e v ent ag ent feature allo ws the swit ch to publish and su bscribe to e vents on the e v ent b us and works with the CNS configurati on agent.
5-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configur ing IE2100 C NS Agents Configur ing CNS Em b edded A gen ts Incremental (Partial) Configur ation After t he ne twork is r unn ing, new serv ice s ca n b e ad de d by using t he CN S c onfigura tion ag en t.
5-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configuring IE21 00 CNS Agents Config uri ng CNS Embe dded Ag en ts Note For more informatio n about running the s.
5-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configur ing IE2100 C NS Agents Configur ing CNS Em b edded A gen ts Enabling th e CNS Ev ent Agent Note Y ou must e nable t he CNS ev ent agent on the s witch b efore y ou enab le the CNS conf igurat ion ag ent.
5-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configuring IE21 00 CNS Agents Config uri ng CNS Embe dded Ag en ts T o disable the CNS e v ent agent, use the no cns event { ip-address | hostname } glob al configur ation comm and.
5-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configur ing IE2100 C NS Agents Configur ing CNS Em b edded A gen ts Step 3 config-cli or line -c li Enter config -cli to connect to the Config uration Registrar through t he interface de fined in cns c onfig connect-i ntf .
5-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configuring IE21 00 CNS Agents Config uri ng CNS Embe dded Ag en ts T o disa ble t he CNS conf igurati on age nt, use t he no cns conf ig initia l { ip-add r ess | hostname } global configurati on comm a nd.
5-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configur ing IE2100 C NS Agents Configur ing CNS Em b edded A gen ts Enabling a Partial Configur ation Beginn ing.
5-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configuring IE21 00 CNS Agents Displaying CNS Configuration Displaying CNS Confi guration Y o u can use the privileged EXEC comma nds in Ta b l e 5 - 2 to display CN S Configuration inform ation .
5-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 5 Configur ing IE2100 C NS Agents Displaying CNS Con figuration.
C HAPTER 6-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 6 Clustering Switches This chapte r provides these topics to help you get started with switch clu stering: • Unde.
6-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Unders tan din g Sw itch Cluste rs Understandin g Switch Clust ers A switch cluster i s a group of connected C atalyst swit ches that a re manage d as a sing le entity .
6-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Underst anding Swi tch Clust ers Command Switch Character istics A Cataly st 2950 co mm an d swit ch m ust me et t hese r equi reme nts: • It is running Release 12.
6-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Unders tan din g Sw itch Cluste rs Note Ca talyst 2950 com mand sw itches r unning R eleas e 12. 1(9)EA1 or la ter can conn ect to s tandby com mand swit ches in the ma nage ment VLAN.
6-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Planni ng a Swit ch Clust er Note Catalyst 2950 stand by command switche s runni ng Releas e 12. 1(9)EA1 or later can co nnect to candidat e and membe r switche s in VLANs di f fer ent from their mana gement VL ANs.
6-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Planning a Sw it ch Cl ust er Discovery through CDP Hops By using CDP , a comma nd switch can di scover switches up to se ven CDP hops away (the default is three hops) from the ed ge of the clus ter .
6-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Planni ng a Swit ch Clust er Figur e 6-2 Disco very thr ough CDP Hops (Co mmand S witch Running Releas e 12.
6-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Planning a Sw it ch Cl ust er Discovery through the Same Management VLAN A Catalyst 2900 XL command switch, a Ca talyst 2950 comma nd switch ru nning a rele ase earl ier than Release 12 .
6-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Planni ng a Swit ch Clust er Discovery through Different M anagement VLANs W e reco mmend us ing a Catalyst 3550 com mand switc h or a Catalyst 2950 comm and swi tch runni ng Releas e 12.
6-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Planning a Sw it ch Cl ust er Figur e 6-6 Disco very thr ough Dif f er ent Ma nagem ent VLANs.
6-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Planni ng a Swit ch Clust er Figur e 6-7 Disco v ery of Newly I nstalled S witc hes in the S.
6-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Planning a Sw it ch Cl ust er HSRP and S tandby Command Sw itches The switc h supp orts H ot Sta ndby Rout er Protoc ol (HSRP) so that you ca n co nfigure a group of standby comman d s wit che s.
6-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Planni ng a Swit ch Clust er Virtual IP Addresses Y o u need to assig n a uniqu e virt ual IP add ress and gr oup num ber a nd name to t he clu ster sta ndby group.
6-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Planning a Sw it ch Cl ust er • All stan dby-group memb ers must be me mber s of the clust er . Note The re is no lim it to the number of sw itches that you can assi gn as standb y command switches.
6-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Planni ng a Swit ch Clust er Automatic Recover y of Cluster Configuration The act iv e comm and switc h contin ually forwa rds clust er-configurati on informa tion (but not device-configurat ion info rmation) to the standby comma nd switch.
6-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Planning a Sw it ch Cl ust er Host Names Y o u do not need to assig n a host name to either a c omman d switch or an eligibl e clust er membe r .
6-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Planni ng a Swit ch Clust er TACACS+ an d RADIUS Inconsistent authenti cation configur ations in switch clusters cause CMS to continually pr ompt for a user name and pa ssword.
6-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Planning a Sw it ch Cl ust er Manageme nt VLAN Communication wi th the sw itch manag ement int erfaces i s through the comma nd-switch IP address.
6-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Creati ng a Swit ch Cluster Availability of Switch-Specifi c Features in Switch Clusters The me nu bar on t he co m mand switch d isplays al l optio ns av ailab le f rom the switch c l uster .
6-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Creating a Switch Cluster If you did not enab le a command switch durin g initial switch setup, launch De vice Manager from a command-cap able switch, a nd select Cluster > Cr eate Cluster .
6-21 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Creati ng a Swit ch Cluster If a cand idat e s witc h in th e gr oup has a password di fferent from t he gr oup, on ly that speci fic candi dat e switch is no t adde d to t h e cl us ter .
6-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Creating a Switch Cluster Figur e 6-12 Using the T opolog y V iew t o A dd Member Switc hes C.
6-23 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Creati ng a Swit ch Cluster These a bbreviations are ap pended t o the switc h host nam es i.
6-24 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Creating a Switch Cluster Verifying a Switch Cluster When yo u fini sh adding cl uster me mbe.
6-25 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switche s Using the CLI to Manage Switch Clusters Using the CLI to Manage Swit ch Clusters Y o u can co nfigure memb er switch es from the CLI by f irst logg ing into the co mmand switch .
6-26 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 6 Clustering Switches Using SNMP to Ma nage Sw itch Cl usters Using SNMP to Manage Switc h Clusters When you first power on the sw itch, SN MP is en abled i f you e nter the IP infor matio n by using the setup program a nd a ccep t i ts p rop ose d con figurat ion.
C HAPTER 7-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 7 Administering the Switch This cha pter descri bes how to perform one-t ime ope rations to administ er your switc h.
7-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Protecting A ccess to Privileged EXE C Comman ds • For an add iti o n al la ye r of se cu rity , you can al so co nfigur e user name a nd password p airs, w h i ch are locally stored on the switch.
7-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Prote c ting Acce ss t o Priv i lege d EX EC Co mman ds Setting o r Changin g a Static Enab le Pa ssword The en able password control s access to the privileged EXEC mode.
7-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Protecting A ccess to Privileged EXE C Comman ds Protecting En able and E nable Secre t .
7-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Prote c ting Acce ss t o Priv i lege d EX EC Co mman ds If bo th the en able and e nable sec ret pas sword s are de f ined, us ers must enter th e enable s ecret p asswo rd.
7-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Protecting A ccess to Privileged EXE C Comman ds Beginning i n privileged E X EC mo de ,.
7-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Prote c ting Acce ss t o Priv i lege d EX EC Co mman ds T o remo v e the passwo rd, use the no password global co nfigurati on comm and.
7-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Protecting A ccess to Privileged EXE C Comman ds T o disable us ernam e authe nticat ion for a specif ic u ser , use the no username na me global conf igurati on comman d.
7-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Prote c ting Acce ss t o Priv i lege d EX EC Co mman ds When y ou set a command to a pr i vile ge le ve l, all command s whose syntax is a subs et of th at com mand are al so set to th at le v el.
7-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Controlling Sw itch Acce ss w ith TACACS+ Logging into and Exiting a Privilege Level Be.
7-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Controlling Switch Access with TACACS+ Figur e 7 -1 T ypical T ACACS+ N etwo r k Confi.
7-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Controlling Sw itch Acce ss w ith TACACS+ TACACS+ Ope ration When a use r attempts a sim ple ASCII login by authent icating to a switch using T A CA CS+, this proc ess occurs: 1.
7-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Controlling Switch Access with TACACS+ This se ctio n c onta ins thi s configu ratio n.
7-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Controlling Sw itch Acce ss w ith TACACS+ T o remov e the specif ie d T A CA CS+ s erv er name or addr ess, use the no tac acs- server ho st hostnam e global configurat ion comm and.
7-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Controlling Switch Access with TACACS+ Beginning i n privileged E XEC mo de, foll ow these s teps to c on figure lo gi n au th entic a tion : Comma nd Pu rpos e Step 1 conf igure t erminal Enter globa l configurati on mode.
7-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Controlling Sw itch Acce ss w ith TACACS+ T o disa ble A AA, us e the no aaa new-model glo bal co nfigur atio n c omm and.
7-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Controlling Switch Access with TACACS+ Starting TACACS+ Accounting The AA A accou nting featu re trac ks the servic es tha t users are a ccess ing an d the amoun t of ne twor k resources th at the y are co nsuming.
7-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Controllin g Switch A cce ss wit h RA DIUS Controlling Switch Access with RADIUS This s.
7-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Controlling Switch Access with RADIUS RADIUS is not suitable in these netw ork security situations: • Multipr otocol acce ss en v ironmen ts.
7-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Controllin g Switch A cce ss wit h RA DIUS Configuring RADIUS This se ctio n de scri bes how to c onfigure yo ur sw itch to su ppo rt R ADI US.
7-21 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Controlling Switch Access with RADIUS Y o u iden tif y R ADI US secu ri ty s er vers by the ir host na me or I P ad dre ss, host name a nd spe c ific UDP port num bers, or t heir I P addre ss and spec ific UDP port numb ers.
7-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Controllin g Switch A cce ss wit h RA DIUS T o remo ve the specif ied RADIUS serv er , u se the no radius-serv er host hostname | ip- address global configurati on comm a nd.
7-23 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Controlling Switch Access with RADIUS This examp le shows how to configure ho st1 as t.
7-24 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Controllin g Switch A cce ss wit h RA DIUS Comma nd Pu rpos e Step 1 conf igure t erminal Enter globa l configurati on mode. Step 2 aaa new-model Enable AAA.
7-25 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Controlling Switch Access with RADIUS T o disa ble A AA, us e the no aaa new-model glo bal co nfigur atio n c omm and.
7-26 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Controllin g Switch A cce ss wit h RA DIUS Beginning i n privileged E XEC mo de, fol lo.
7-27 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Controlling Switch Access with RADIUS T o remo ve the specif ied RADIUS serv er , u se the no radius-serv er host hostname | ip- address global configurati on comm and.
7-28 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Controllin g Switch A cce ss wit h RA DIUS Beginn ing in pri vile ged EXEC mo de, follo.
7-29 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Controlling Switch Access with RADIUS Configuring Settings for All RADIUS S ervers Beg.
7-30 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Controllin g Switch A cce ss wit h RA DIUS For e x am ple , th e f oll o wing A V p air.
7-31 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Controlling Switch Access with RADIUS Beginning i n privileged EXEC mode, f ollow thes.
7-32 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Configur ing the Switc h fo r Local Au thentica tion and A uthorizat ion Configuring th.
7-33 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Configuring the Switch for Secure Shell Configuring the Switch for Se cure Sh ell This sec tion descri bes ho w to conf igure th e Secure Shell (SSH) feature .
7-34 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Managin g the Syste m Time and Date Managing the System Time and Date Y o u can ma nage.
7-35 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e NTP uses the concept o f a str atum to desc ribe h ow many NT P hops away a d evice is fro m an author itative time sourc e.
7-36 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Managin g the Syste m Time and Date Figur e 7 -3 T ypical NTP Netw or k Config ura tion.
7-37 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e Default NTP Configurati on Ta b l e 7 - 2 shows the d efault NTP co nfiguration . NTP is enable d on all interfa ces b y default.
7-38 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Managin g the Syste m Time and Date T o dis ab le N TP au then tic atio n, use the no ntp authenticate global configurat ion comm and.
7-39 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e Y o u need to co nfigure only one end of an assoc iation; the other de vice can a utomat icall y establi sh the associat ion.
7-40 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Managin g the Syste m Time and Date T o disable the interface from s ending NTP broadcast pack ets, use the no ntp broadcast interface conf igurat ion command.
7-41 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e Creating an Access Gro up and Assigni ng a .
7-42 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Managin g the Syste m Time and Date If the source IP address m atches the access lists fo r more t han one acces s type, the f irst typ e is grant ed.
7-43 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e Beginn ing in pri vile ged EXEC mode, follo.
7-44 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Managin g the Syste m Time and Date Setting the System Clock If you have an outsid e source on the net work that pr ovides time ser vices, su ch as a n NTP server , you do not need to manuall y set the syste m clock.
7-45 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e Configuring the Tim e Zone Beginn ing in pr.
7-46 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Managin g the Syste m Time and Date Configuring Summer Time (Daylight Saving Ti me) Beg.
7-47 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Mana gi ng th e S y stem Tim e an d Da t e Beginning in privileged EX EC mode, fol low.
7-48 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Configur ing a Sys tem Nam e and Prompt Configuring a System Name a nd Prompt Y o u configure the system name on the switc h to identi fy it.
7-49 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Confi guring a S ystem Name an d Prompt Configuring a System P rompt Beginning i n pri.
7-50 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Configur ing a Sys tem Nam e and Prompt Default DNS Configur ation Ta b l e 7 - 3 shows the d efault DNS configura tion .
7-51 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Creat ing a Bann er domain name is the v alue set by the ip d oma in -n ame glo bal c onfigurati on c om mand.
7-52 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Creating a Banner Configurin g a Mess age-of-the -Day Log in Bann er Y ou can create a sing le or mult iline messa ge b anner tha t a ppea rs on th e scr een wh en so m eone lo g s in to the switch.
7-53 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Creat ing a Bann er Configurin g a Login B anner Y o u c an co nfigur e a l og in ba nner t o be di spla yed on al l c onnec ted t ermin al s.
7-54 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Managin g the MAC A ddre ss Table Managing the MAC Ad dress Tabl e The MA C address table cont ains add ress inf ormation that th e switc h uses to fo rwar d traf fic betwe en ports.
7-55 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Managin g the MAC Addre ss Table MAC Addr esses an d VLANs All addr esses are as sociate d with a VLAN. An add ress can e xist in more than one VLA N and ha ve different de stinati ons in each.
7-56 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Managin g the MAC A ddre ss Table T o retur n to the default v alue, use the no mac address-table agi ng-time global configurati on comma nd.
7-57 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Managin g the MAC Addre ss Table Beginning i n privileged E X EC mo de , follow these .
7-58 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Managin g the MAC A ddre ss Table T o disable the switch fr om sending MA C address notification tra ps, use the no snmp-serv er enable traps mac-notification global con f igura tion co mman d.
7-59 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Managin g the MAC Addre ss Table Beginning i n privileged EX EC mo de , follo w these .
7-60 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Managin g the MAC A ddre ss Table Beginning i n privileged EX EC mo de , follow these s.
7-61 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adminis ter ing the Switch Managi ng the ARP Ta ble Managing the ARP Ta ble T o commun icate w ith a de vice (o v er Eth ernet, for e xam ple), the softw are f irst m ust dete rmine the 48-bi t MA C or the local data link addre ss of that device.
7-62 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 7 Adm inistering the Switch Switch Softw are Release s.
C HAPTER 8-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 8 Configuring 802.1X Port-Ba sed Authen tication This cha pter describ es how to configure IEEE 802 .1X port-ba sed au thentic ation to pr e vent unautho rized devices (clie nt s) f rom ga ining ac cess to the network.
8-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configur ing 802. 1X Port-Bas ed Authen ticat ion Unders tan ding 802.1X Port -Based A ut henticat io n Device Roles W it h 802.1X po rt-ba sed authentic ation, the de vices in the netw ork ha ve specif ic role s as sho wn in Figure 8-1 .
8-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configuring 8 02.1X Port-B as ed Authen ti cat ion Understandi ng 802.1X P ort-Based Aut henticat ion Authentication Initiation and Message Exchange The swi tch or th e client can initi ate authen tication.
8-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configur ing 802. 1X Port-Bas ed Authen ticat ion Unders tan ding 802.1X Port -Based A ut henticat io n Ports in Au thorized and Un authorized S tates The switc h port state determi nes whet her or not the client is gran ted acces s to the net work.
8-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configuring 8 02.1X Port-B as ed Authen ti cat ion Configuring 802.
8-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configur ing 802. 1X Port-Bas ed Authen ticat ion Configur ing 80 2. 1X Au thent ica tion Default 802.1X Configuration Ta b l e 8 - 1 shows the d efault 802.1 X configurat ion .
8-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configuring 8 02.1X Port-B as ed Authen ti cat ion Configuring 802. 1X Authent ication 802.1X Configuration Guidelines These ar e the 80 2.1X authenti cation co nfigurati on guid elines : • When 802.
8-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configur ing 802. 1X Port-Bas ed Authen ticat ion Configur ing 80 2. 1X Au thent ica tion Enabling 802.1X Authentication T o enable 802 .1X port-based auth entication , you must enable AAA and specify the au thenticatio n method list.
8-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configuring 8 02.1X Port-B as ed Authen ti cat ion Configuring 802.
8-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configur ing 802. 1X Port-Bas ed Authen ticat ion Configur ing 80 2. 1X Au thent ica tion This exam ple sh ows how to specify the server w it h IP add re ss 172. 20.
8-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configuring 8 02.1X Port-B as ed Authen ti cat ion Configuring 802.
8-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configur ing 802. 1X Port-Bas ed Authen ticat ion Configur ing 80 2. 1X Au thent ica tion Changing the Sw itch-to-Clie nt Retran smission Time The client respon ds to the EAP-request/id entity frame fro m the switch with an EAP-response/i dentity frame.
8-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configuring 8 02.1X Port-B as ed Authen ti cat ion Configuring 802.
8-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 8 Configur ing 802. 1X Port-Bas ed Authen ticat ion Display ing 802.1 X Stat is t ics and Status T o disabl e multip le hosts on the po rt, use the no do t1x mu ltipl e-ho sts interface conf iguration c ommand.
C HAPTER 9-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 9 Configuring the Switch Interfaces This c ha pter d efines the ty pes o f i nte rface s on th e swi tch and de scri bes how to c on figure th em .
9-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring the Switch Interfaces Unders tan ding Inte rfa ce Type s These sectio ns describes these type s of int.
9-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring th e Sw itch Interf ace s Unde rsta ndi n g In t erf ac e Ty p es Port-Based VLANs A VLAN is a switched netwo rk that is logically segmented b y function, team, or application, witho ut reg ard to the physic al location of the user s.
9-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring the Switch Interfaces Using the Inter fa ce Comma nd Figur e 9-1 Connecting VLANs with La y er 2 S wit.
9-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring th e Sw itch Interf ace s Using the Interface Command Enter configuration commands, one per line. End with CNTL/Z. Switch(config)# Step 2 Enter t he interface globa l c onfigurati on co mma nd.
9-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring the Switch Interfaces Using the Inter fa ce Comma nd Queueing strategy: fifo Output queue 0/40, 0 drop.
9-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring th e Sw itch Interf ace s Using the Interface Command – gigab iteth ernet slo t/{ fi rs t p o r t } .
9-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring the Switch Interfaces Using the Inter fa ce Comma nd Configur ing an d Using Inter f ace- Ra nge Ma cros Y ou can crea te an in terface -rang e macro to autom atically select a range o f inter faces for co nfig uration .
9-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring th e Sw itch Interf ace s Configuring Switch Interfaces This exampl e shows ho w to define an interfac.
9-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring the Switch Interfaces Conf igu rin g Sw itch Int erf aces Default Ethernet Interface Configuration Ta b l e 9 - 1 shows th e E th erne t inter f ace d efa ul t c onf igura tion.
9-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring th e Sw itch Interf ace s Configuring Switch Interfaces become acti v e.
9-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring the Switch Interfaces Conf igu rin g Sw itch Int erf aces Note Y ou c annot co nfigure spee d or dupl.
9-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring th e Sw itch Interf ace s Configuring Switch Interfaces Setting the Interface Speed and Duplex Pa ram.
9-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring the Switch Interfaces Conf igu rin g Sw itch Int erf aces service timestamps log uptime no service pa.
9-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring th e Sw itch Interf ace s Configuring Switch Interfaces These ru les appl y to flo w co ntrol settin .
9-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring the Switch Interfaces Monito rin g and Mai nt aining th e In terfaces Adding a De scription fo r an In terface Y ou can add a descrip tion about an inte rface to help you remember its func tion.
9-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring th e Sw itch Interf ace s Monitoring and Maintaining the Interfaces This exam ple sh ows how to displ.
9-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring the Switch Interfaces Monito rin g and Mai nt aining th e In terfaces Operational Mode: down <outp.
9-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring th e Sw itch Interf ace s Monitoring and Maintaining the Interfaces Clearing and Resetting Interfaces and Counters Ta b l e 9 - 3 lists the clear p ri vile ged EXEC co mmands that you can use to clear coun ters and r eset interf aces.
9-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 9 Configuring the Switch Interfaces Monito rin g and Mai nt aining th e In terfaces Use the no shutdown inter face co nf iguration command to restart th e interf ace.
C HAPTER 10-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 10 Configuring LRE This chap ter de scri bes ho w to con fig ure the Lo ng-Re ach Ether net (LRE) featur es on you r switch.
10-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configur ing LRE LRE Link s and LRE Profiles LRE Links and LRE Profiles The LR E link s ettings d efine the conn ection be twee n the swi tch LRE port and the CPE RJ-11 wall port .
10-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configuring LRE LRE Links and LRE Profiles Y our data rates will al ways b e le ss than the g ross d ata rate li sted in table .
10-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configur ing LRE LRE Link s and LRE Profiles • Use the LL prof iles (LRE-5LL, L RE-10LL, an d LRE-15LL ) with car e. These prof iles ha ve the low-latency (LL) fe ature enable d and the in terleaver featur e disa bled.
10-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configuring LRE Configuring LRE Ports Beginn ing with the f irst prof ile in a sequence, the switc h attempts to apply each pro file within that sequence to the L RE interf ace.
10-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configur ing LRE Conf igu rin g LR E Por ts Environmental Guidelines for LRE Links The guid eline s for your LR .
10-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configuring LRE Configuring LRE Ports The g reate st imp act on LR E pe rf orm ance is from t he fr eq ue ncy respon se of th e c ab le at th e hi gher freque ncies.
10-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configur ing LRE Conf igu rin g LR E Por ts Note Whe n the defau lt speed is set to 10 or 100 Mbps with half dupl ex, the va lues set are the same.
10-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configuring LRE Configuring LRE Ports Use the sho w contro llers lr e privileged EXEC co mmand s to displa y the LR E link st a tistic s an d profile informatio n on the LRE ports.
10-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configur ing LRE Conf igu rin g LR E Por ts Assigning a Sequence to a Specific LRE Port Y o u can set seq uenc es on a per-port basis. Y ou can assign the same sequen ce or different se quence s to the LRE ports on the switch.
10-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configuring LRE Configuring LRE Ports In any of these cases, rate selection obta ins the optimal prof ile for your line condit ions.
10-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configur ing LRE Conf igu rin g LR E Por ts Link Qualification and SN R Margins When rate se lection is ru nning, th e SNR is used as an ind icator of li nk quality .
10-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configuring LRE Configuring LRE Ports The margin ra nge for link qu alificatio n is from 1 to 10 dB. The re comme nded value in a low-noise en vi ronme nt is 2 dB .
10-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configur ing LRE Conf igu rin g LR E Por ts Note Th e margin co mm an d is effective with any profile, but only in conj unct ion w ith rate select ion an d only when a link is being acti vated.
10-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configuring LRE Upgrading LRE Switch Firmware • Link Fail Counts : Th e number of times the link f ailed. A link f ail interru pts operation of the Ethernet link for a small nu mber of milli seconds.
10-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configur ing LRE Upgradi ng L RE Switch F ir m w are If you wish to ov erride the switch ’ s automatic select.
10-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configuring LRE Upgrading LRE Switch Firmware Global Configuration of LRE Upgrades Beginning in pr ivileged EXE.
10-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configur ing LRE Upgradi ng L RE Switch F ir m w are LRE Upgrad e Behavior De tails Y o u see on th e console screen wh en you star t an upgr ade: Switch> en Switch# hw-module slot 0 upgrade lre You are about to start an LRE upgrade on all LRE interfaces.
10-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configuring LRE Upgrading LRE Switch Firmware The CPE device has finished resetti ng.
10-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 10 Configur ing LRE Upgradi ng L RE Switch F ir m w are.
C HAPTER 11-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 11 Configuring STP This chapt er describ es ho w to configure the Span ning Tree Protocol (STP) on you r switch.
11-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Unders tan ding Spa nni ng-Tree Fea tures • Spanning Tree and Redun da nt Co nnec tivity , pag.
11-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Unders tanding Spanni ng-Tree Featu res • Message age • The iden tif ier of the sending inte.
11-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Unders tan ding Spa nni ng-Tree Fea tures BPDUs conta in informa tion about the sending switch and i ts ports, inclu ding switch a nd MA C addresses, swit ch pri ority , port prior ity , and path co st.
11-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Unders tanding Spanni ng-Tree Featu res Creating the S pannin g-Tree To pology In Figure 11 -1 ,.
11-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Unders tan ding Spa nni ng-Tree Fea tures An interfac e mov es through these state s: • From i.
11-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Unders tanding Spanni ng-Tree Featu res Blocking State A Layer 2 in ter f ace in th e b lo ckin g state does not p ar tic ipate in frame f o rw a rdin g.
11-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Unders tan ding Spa nni ng-Tree Fea tures Disabled State A Laye r 2 int erface in th e disab led state do es not parti cipa te in frame forwar ding or in the span ning tree.
11-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Confi guring S panni ng-Tree Featu res Figur e 1 1 - 3 Spanning T r ee and Redun dan t Connectivity Y o u can also c reate red undan t links betwe en switches by using EtherCha nnel gro ups.
11-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Configur ing Span ning-T ree F eature s • Conf iguring the Hello T ime, page 11-19 • Conf i.
11-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Confi guring S panni ng-Tree Featu res Cautio n Switches that are not running spanning tree still for ward BPDUs that the y recei v e so that the other switche s on the V LA N that have a run ning span ning -tree in stance can b reak l oops.
11-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Configur ing Span ning-T ree F eature s Disabling STP STP is e nabl ed by d efau lt on V LAN 1 a nd on al l newly cre ated V LAN s u p to the sp anni ng- tree lim it specif ied in T able 11- 3 .
11-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Confi guring S panni ng-Tree Featu res These e xamp les sho w the ef fect of th e spanning-tree.
11-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Configur ing Span ning-T ree F eature s Be gin n in g i n p r i vil e g ed E XEC m ode, follo w.
11-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Confi guring S panni ng-Tree Featu res Beginn ing in pri vile ged EXEC mo de, follo w these ste.
11-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Configur ing Span ning-T ree F eature s Note Th e show spanning-tree int erface interface- id privileged EXEC command displa ys informat ion only if th e por t is i n a l ink -up op er ative state .
11-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Confi guring S panni ng-Tree Featu res Note Th e show spanning-tree int erface interface- id privileged EXEC command displa ys informat ion only for por ts that ar e in a link- up opera ti ve s tate.
11-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Configur ing Span ning-T ree F eature s Configuring the Switch Priority of a VLAN Y ou can config ure the switch prior ity and make it more lik ely that the switc h will be chosen as t he root switch.
11-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Confi guring S panni ng-Tree Featu res Configuring the Hello Time Y ou can config ure the interv al b etween the genera tion of conf iguratio n messages by the root switch b y chan ging the hello tim e.
11-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Configur ing Span ning-T ree F eature s T o retur n the switc h to its def ault settin g, use the no spanning-tr ee vlan vlan -id for w a r d - t i m e global configurati on comm a nd.
11-21 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Display ing the S panning -Tree St atus Figur e 1 1 -4 Gigabit Ether ne t Stac k Displaying the.
11-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 11 Configuring STP Displaying the Spannin g-Tree Stat us.
C HAPTER 12-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 12 Configuring RSTP and MST P This ch apter descr ibes how to co nfigure the C isco im plement ation of the IE EE 80 2.1W Ra pid Spa nning T ree Protocol (RSTP) and th e IEEE 802.
12-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Unders tan din g RSTP Understandin g RSTP The RSTP takes ad vantage of point- to-po int wiring and provides rapi d conv ergence of the span ning tree .
12-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Configuring RSTP and MSTP Understa nding RST P T o be consistent with Cisco STP implementation s, this guide documents the por t state as bloc k ing instead of discar ding .
12-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Unders tan din g RSTP Figur e 12-1 Pr oposa l and A gr eemen t Handshak ing for R.
12-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Configuring RSTP and MSTP Understa nding RST P Figur e 12-2 Sequen ce of Eve nts Dur ing Rapid Conv er ge nce Bridge Protoco l Data Unit Format an d Process ing The R STP BP DU for mat is th e sam e as t he IEEE 802.
12-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Unders tan din g RSTP The RSTP does not have a separate topol ogy chan ge notificati on (TCN) BPDU . It uses the topology change (T C) flag to sho w the to pology cha nges.
12-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Configuring RSTP and MSTP Unde rsta ndi n g MS TP • Propagatio n — When an RSTP s witch r ecei ves a TC mess.
12-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Unders tan din g MSTP IST, CIST, an d CST Unlike PVST+ i n which all the spann in.
12-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Configuring RSTP and MSTP Unde rsta ndi n g MS TP Operations Between M ST Regions If there are multip le regio ns or legacy 802.
12-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Unders tan din g MSTP Hop Count The IST and M ST inst ances do not use the mes sage- age an d maximum -age informa tion in the configurati on BPDU to comp ut e t he sp an ning- tre e t opolo gy .
12-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Configuring RSTP and MSTP Interoperability with 802.1D STP Interoperability with 802.1D STP A switch running both M STP a nd RST P supports a built-in p rotoco l migrati on m ec ha nism t ha t ena bl es it to interoperate with leg acy 802.
12-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Configuring RSTP and MSTP Featur es Default RSTP and MS TP Configura tion T able 12-3 sh ows the de fault RST P a nd M STP c onfiguration .
12-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Configuring RSTP and MSTP Confi guring RSTP and MSTP Featu res Specifying the MST Region Co nfiguration and En .
12-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Configuring RSTP and MSTP Featur es configurati on com mand. T o retur n to the default revision nu mber, use the no revision MST conf igurat ion comman d.
12-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Configuring RSTP and MSTP Confi guring RSTP and MSTP Featu res Note Th e ro ot swi tch fo r eac h s pan ning -t ree inst anc e shoul d b e a ba ckbon e or dist ribution sw itch .
12-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Configuring RSTP and MSTP Featur es Configur ing a Se co ndar y R oot S witch Wh.
12-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Configuring RSTP and MSTP Confi guring RSTP and MSTP Featu res Configuring the Port Priority If a l oop occur s, the MST P uses the port priority when selec ting an in terface to put in to the for warding state.
12-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Configuring RSTP and MSTP Featur es Configuring the Path Cost The MSTP path cost def ault v alue is deri v ed from the media speed of an interf ace.
12-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Configuring RSTP and MSTP Confi guring RSTP and MSTP Featu res Configuring the Switch Priority Y ou can config ure the switch prior ity and make it more lik ely that the switc h will be chosen as the root switch.
12-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Configuring RSTP and MSTP Featur es Beginn ing in pri vileg ed EXEC mode, follo .
12-21 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Configuring RSTP and MSTP Confi guring RSTP and MSTP Featu res Configuring the Maxi mum-Aging Time Beginning in.
12-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Configuring RSTP and MSTP Featur es Specifying the Link Type to Ensure Rapid Tra.
12-23 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Configuring RSTP and MSTP Displaying the MST Configuration and Status Displaying the MST Configuratio n and Sta.
12-24 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 12 Co nfiguring R ST P and M ST P Displaying the MST Configu rat ion and Status.
C HAPTER 13-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 13 Configuring Optional Spannin g-Tree Features This cha pter descri b es how to configure opt iona l span ning- t ree fea tu res. Y o u ca n configur e all of the se featu re s whe n you r swi t ch is run ning th e per-VLAN sp anni ng-tre e (PVST ).
13-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 13 Configurin g Optiona l Spann ing-Tr ee Featu res Unders tan ding Opti on al Spann ing -Tree Fe at ures Understa.
13-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 13 Configuring Op tiona l Spa nni ng-Tree Features Unders tanding Opt ional Spanning- Tree Featu res Understanding .
13-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 13 Configurin g Optiona l Spann ing-Tr ee Featu res Unders tan ding Opti on al Spann ing -Tree Fe at ures Understa.
13-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 13 Configuring Op tiona l Spa nni ng-Tree Features Unders tanding Opt ional Spanning- Tree Featu res Figur e 13-3 U.
13-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 13 Configurin g Optiona l Spann ing-Tr ee Featu res Unders tan ding Opti on al Spann ing -Tree Fe at ures How CSUF Work s CSUF ensures that one link in the stack is elected as the path to the root.
13-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 13 Configuring Op tiona l Spa nni ng-Tree Features Unders tanding Opt ional Spanning- Tree Featu res The switch sen.
13-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 13 Configurin g Optiona l Spann ing-Tr ee Featu res Unders tan ding Opti on al Spann ing -Tree Fe at ures Limitati.
13-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 13 Configuring Op tiona l Spa nni ng-Tree Features Unders tanding Opt ional Spanning- Tree Featu res Figur e 13-6 G.
13-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 13 Configurin g Optiona l Spann ing-Tr ee Featu res Unders tan ding Opti on al Spann ing -Tree Fe at ures Understand ing Back boneF ast Backbo neFas t detects ind irect failures in the core of th e backbon e.
13-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 13 Configuring Op tiona l Spa nni ng-Tree Features Unders tanding Opt ional Spanning- Tree Featu res If lin k L 1 fail s as s hown in Figure 13 -8 , Switch C cannot det ect this f ailure bec ause it is not co nnected direct ly to link L1.
13-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 13 Configurin g Optiona l Spann ing-Tr ee Featu res Unders tan ding Opti on al Spann ing -Tree Fe at ures Unders tanding Root Gu ar d The Laye r 2 network of a service provide r (SP) can incl ude many co nnectio ns to switche s that are no t owned by the SP .
13-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 13 Configuring Op tiona l Spa nni ng-Tree Features Configurin g Optional Spanni ng-Tree Fe atures Understand ing L.
13-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 13 Configurin g Optiona l Spann ing-Tr ee Featu res Configur ing Optiona l Spanning- Tree Fea tures Default Optional Spanning-Tree Conf iguration T able 13-1 sh ows the default opt iona l spa nn ing- tree co nfigurat ion.
13-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 13 Configuring Op tiona l Spa nni ng-Tree Features Configurin g Optional Spanni ng-Tree Fe atures Note Y ou ca n use the spa nning-tre e portfast default global con figuration co mmand to global ly enab le the Port Fast featur e on all nontrun king por ts.
13-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 13 Configurin g Optiona l Spann ing-Tr ee Featu res Configur ing Optiona l Spanning- Tree Fea tures T o disable BPDU guard, use the no spanning-tree por tfast bpduguard default global configur ation comm an d.
13-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 13 Configuring Op tiona l Spa nni ng-Tree Features Configurin g Optional Spanni ng-Tree Fe atures T o disable BPDU filte ring, use t he no spanning-tree portfa st bpdufilt er default global configurat ion comm an d.
13-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 13 Configurin g Optiona l Spann ing-Tr ee Featu res Configur ing Optiona l Spanning- Tree Fea tures Enabling C ross-S tack Up linkFas t Before ena bling CSU F , make sure your sta ck switch es are proper ly connec ted.
13-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 13 Configuring Op tiona l Spa nni ng-Tree Features Configurin g Optional Spanni ng-Tree Fe atures Enabling Ba ckbon eFast Y o u can en able Bac kboneFast to detect indi rect li nk failures and to start the sp anning- tree reconfigur atio n soo ne r .
13-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 13 Configurin g Optiona l Spann ing-Tr ee Featu res Configur ing Optiona l Spanning- Tree Fea tures T o disa ble ro ot g uard, use the no spanning-tre e guard interf ace conf igurati on command.
13-21 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 13 Configuring Op tiona l Spa nni ng-Tree Features Display ing the S panning -Tree St atus Displaying the Sp annin.
13-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 13 Configurin g Optiona l Spann ing-Tr ee Featu res Displaying the Spannin g-Tree Stat us.
C HAPTER 14-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 14 Configuring VLANs This c hapt er d escri b es how to c onfigure norm al -ra nge V LAN s (V L AN IDs 1 to 100 5) and extended-ra nge V LANs (VLAN I Ds 100 6 to 4094 ).
14-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Unders tan ding VLAN s For a Catalyst 295 0 LRE Switch, th e maxim um supported num ber of VLA Ns is 250, t he maximum number of STP inst ances is 64, an d trunkin g is supported.
14-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Unde rst an din g VLA Ns VLAN Port M embership M odes Y o u configure a port to belong to a VLAN by assigning a me mber ship mode that de termin es the ki nd of traf fic the port c arries and t he number of V LANs to which i t can belon g.
14-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configur ing Normal- R ang e VLAN s Configuring Normal -Range VLANs Normal- range VL A Ns are VL ANs with VLA N I Ds 1 to 1005 .
14-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Configur ing N orma l -Ran g e VL A N s This sect ion incl udes infor mation ab out these top.
14-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configur ing Normal- R ang e VLAN s • The swi tch supp orts 64 spa nning-t ree instanc es.
14-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Configur ing N orma l -Ran g e VL A N s Saving VL AN Configur ation The co nfiguration s of VLAN IDs 1 to 10 05 are a lways sa ved in the VLA N database (vlan.
14-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configur ing Normal- R ang e VLAN s Default Ethernet VLAN Configuration T able 14-2 shows the default co nfig uration for Ethernet VL ANs. Note The switch suppo rts Ethe rnet interf aces exc lusi v ely .
14-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Configur ing N orma l -Ran g e VL A N s Beginning i n privileged EXEC mode, f ollow these st .
14-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configur ing Normal- R ang e VLAN s T o return th e VLAN name to th e defaul t settings, use th e no vlan vlan-id name or no vl an vlan-i d mtu VLAN conf iguration comm and.
14-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Configur ing N orma l -Ran g e VL A N s Assigning S tatic-Ac cess Ports to a VLAN Y o u can assi gn a s tati c-ac cess port to a VLAN wi tho ut having VT P gl obal ly p rop agate V LAN configurat ion inf orm at ion ( VTP is di sabl ed).
14-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configur ing Extended-R ange VLA Ns Configuring Ex tended-Rang e VLANs When the switch is in VTP transparent mode (VT P disabled) and the EI is installed) , you can create extended -rang e VLA Ns ( in the ra nge 1006 t o 4094).
14-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Confi guring Exte nded-Ra nge VL ANs • STP is enable d by default on extended -range V LANs, but you can di sable it by using the no spann ing- tre e vlan vlan-id global co nfigur ation c omm an d.
14-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Displa ying VL ANs T o delete an extend ed-range VLA N, use the no vlan vlan-i d global configurat ion comm and. The proc edure fo r assign ing stat ic-acc ess port s to an ext ended-r ange VLAN is the s ame as for normal-ra nge VL ANs.
14-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Config uri n g VL AN Tr unk s Configuring VLAN T runks These sec tions descr ibe how VLAN trunks functio n on the swi tch: • T runking O verview , page 14 -15 • 802.
14-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configur ing VLAN Trunk s T o avoid this, yo u s hould configu re int erfac es conn ect ed t o devices tha t do no t sup port DTP to n ot forward D TP frame s, tha t i s, to t urn off DTP .
14-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Config uri n g VL AN Tr unk s • Disabling span ning tree on the na ti v e VLAN of an 802.1 Q trunk without d isabling spann ing tree on e very VLAN i n the network can po tentia lly cause spa nning-t ree loops.
14-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configur ing VLAN Trunk s – STP Port F ast setting – trunk s tat us: i f o ne po rt i n a po rt g rou p ce as es t o b e a t runk, a ll por t s ce ase t o be t runk s.
14-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Config uri n g VL AN Tr unk s This exam pl e shows how to c on figure t he Fast E the rne t i nte rface 0 /4 as a n 802 .1 Q t run k. Th e exam pl e assumes th at the nei ghbor int erface is configure d to support 80 2.
14-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configur ing VLAN Trunk s This e xample shows ho w to remo v e VLAN 2 f rom the allo wed V .
14-21 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Config uri n g VL AN Tr unk s Beginning i n privileged EX EC mo de, foll ow these s teps to c onfigure th e nat iv e VL AN on an 8 02.
14-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configur ing VLAN Trunk s In thi s way , Trunk 1 c arri es t r affic for VLA Ns 8 t hr oug h 10, a nd Trunk 2 c ar rie s tra ff ic fo r VLA Ns 3 through 6.
14-23 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Config uri n g VL AN Tr unk s Load Sharing Using STP Path C ost Y o u can co nfigure paralle l trunks to share VLAN traffic by setting di fferent path costs on a trunk and associ ating the path costs with dif feren t sets of VLA Ns.
14-24 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configuring VMPS Beginn ing in pri vile ged EXE C mode, follo w these steps to conf ig ure .
14-25 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Configuring VMPS • “ Monitori ng the VMPS ” sectio n on pa ge 14-31 • “ T rouble s.
14-26 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configuring VMPS If the link goes do wn on a dynamic por t, the port retur ns to an isolated state and does not belong to a VLAN.
14-27 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Configuring VMPS ! address <addr> vlan-name <vlan_name> ! address 0012.2233.4455 vlan-name hardware address 0000.6509.a080 vlan-name hardware address aabb.
14-28 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configuring VMPS VMPS Configuration Guidelines These gui deline s and restric tions app ly to dynami c port VL AN memb ership: • Y o u must co nfigure the VMPS befo re you con figure ports as dyna mic.
14-29 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Configuring VMPS Beginn ing in pri vilege d EXEC mode, follo w these step s to enter the IP address of the VMPS: Note The switch port that is co nnected to the V MPS serv er cannot be a dynamic acc ess port.
14-30 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configuring VMPS Reconfirming VLAN Memberships Beginning in privileged EXEC mo de, foll ow .
14-31 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Configuring VLA Ns Configuring VMPS T o retur n the switc h to its def ault settin g, use the no vmps r etry global configura tion c om mand .
14-32 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 14 Co n figuring VLANs Configuring VMPS VMPS Co nfig ur at ion Ex am ple Figure 14-5 shows a ne twork with a VMPS serve r switch and V MPS client switches with dynamic p orts.
C HAPTER 15-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 15 Configuring VTP This c hapt er d escri b es how to us e t he V LAN Trunking Pr otoc ol ( VTP) a nd t he V LAN dat aba se for managing V LANs .
15-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Unders tan din g VTP The VTP Do main A VTP do ma in ( also c alle d a VLA N ma nage ment domai n ) con sis ts of o ne sw itch or several interconn ected swit ches under th e same a dministrati ve responsibili ty sharing the same VTP d omain name.
15-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Understanding VTP VTP Mode s Y o u can co nfigure a supporte d switch to be in one of the VTP modes liste d in Ta b l e 1 5 - 1 .
15-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Unders tan din g VTP • MD5 diges t VLAN co nf igurat ion, in clud ing max imum tr ansmi ssion unit (M TU) si ze fo r each VLAN.
15-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Understanding VTP Figur e 15-1 Floodi ng T raffi c withou t VTP Pr un ing Figure 15-2 shows a swi tched network w ith V T P pruni ng ena ble d.
15-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Conf igu rin g VTP VTP pruning is not designed to func tion in VTP transparent mode . If one or more switches in the netwo rk are in VTP transparen t mode, yo u should do on e of thes e: • T urn off VTP prun ing in the en tire network .
15-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Configuring VTP VTP Configuration Options Y o u can co nfigure VTP by using these co nfiguration mo des.
15-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Conf igu rin g VTP VTP Configuration Guidelines These sec tions descr ibe guid elines you should fol low when implem entin g VTP in your ne twork.
15-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Configuring VTP VTP Ve rs ion Foll ow these gui delines whe n deciding which VTP ver sion to im plement: • All switches in a VTP domain must run the same VTP versi on.
15-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Conf igu rin g VTP When you con figure a domain na me, it cannot be rem oved; you can only rea ssign a switc h to a different domain. T o retu rn the swi tch to a no-pa sswor d s tate, u se the no vtp password global co nfiguration c omman d.
15-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Configuring VTP This exam ple sh ows ho w to use VLA N configurat ion m ode to configure the sw.
15-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Conf igu rin g VTP Note Y ou ca n also configur e a VTP client by using th e vlan database p ri.
15-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Configuring VTP Note Y ou ca n also configure V TP transpare nt mode by using the vlan dat abas.
15-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Conf igu rin g VTP Enabling V TP Prunin g Pruning inc reases available bandwi dth by restric ting flood ed traffic to those trunk links th at the traffic must use to acces s the destinat ion devices.
15-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Configuring VTP Adding a VT P Client S witch to a VT P Domain Before adding a V TP clien t to a.
15-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 15 Configuring VTP Monito rin g VTP Monitoring VTP Y o u mon itor V TP by di sp layin g VT P configu ratio n in for matio n: th e dom ain name , the c ur rent V T P revision, and the n umb er of VL AN s.
C HAPTER 16-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 16 Configuring Voic e VLAN This ch apt er descr ibes how to configure the voice VLAN f eature on yo ur sw itch. V oice VLA N is re ferred to as an auxiliary VLAN in the Cata lyst 6000 f amily swi tch do cumentation.
16-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 16 C onfiguring Voice VLAN Configuring Voic e VL AN Figure 16-1 shows one way to conne ct a Cisco 7 960 IP Phone.
16-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 16 Configuring Voice VLA N Configuring Voice VLAN Voice V LAN Con figuration Guide lines These a re the v oic e VLAN con figu ration guid elines: • Y o u shou ld configu re voice VLA N on swi tch a cce ss port s.
16-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 16 C onfiguring Voice VLAN Configuring Voic e VL AN Configuring Ports to Carr y Voice Traffic in 802.1Q Frames Beginn ing in pri vileg ed EXEC mode, follo w thes e steps to conf igure a port to carry v oice traf fic in 802.
16-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 16 Configuring Voice VLA N Configuring Voice VLAN Overriding the CoS Pr iority of Incoming Data Frame s Y o u can conne ct a PC or o t her dat a device to a Cisco 7960 IP Phon e por t .
16-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 16 C onfiguring Voice VLAN Displa ying Vo ice VLA N Configuring the IP Phone to Tr ust the CoS Priority of Inc oming Data Frames Y o u can conne ct a PC or o t her dat a device to a Cisco 7960 IP Phon e por t .
C HAPTER 17-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 17 Configuring IGMP Sno oping an d MVR This cha pter d escribes h ow to configure In ternet Gr oup Ma nageme nt Prot ocol (IGM P) snoop ing on your switch, including an applicatio n of loca l IGMP snoopi ng, Multica st VLAN Re gistration (MVR).
17-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Unders tan ding IGM P Snoo ping the switc h adds the host p ort numb er to the for wardin g table en try; when it recei ves an IGMP Lea v e Group message from a host, it remo ves the host port from the table entry .
17-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Configuring IGMP Sno oping and M VR Understanding IGMP Snooping Figur e 17 -1 Initial IGMP J oin Messag e Router A se nds a genera l query to t he switc h, which f orwards the qu ery t o ports 2 thro ugh 5, a ll members of the same VLAN.
17-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Unders tan ding IGM P Snoo ping Figur e 17 -2 Second Host Joi ning a Multi.
17-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping Note Y o u shou ld on ly u se the I mm ediat e- Leave proc essin g feat ure on V LANs wher e a si ng le h ost i s connect ed to each port.
17-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Configuring IG MP Sn ooping Beginning i n privileged E X EC mo de , follow.
17-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping Beginn ing in pr i vileged EXEC m ode, follo w t h.
17-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Configuring IG MP Sn ooping T o rem ov e a mul ticast route r port f rom the VLAN, use the no ip igmp snooping vlan vlan- id mr outer interface inte rface-id global configurat ion comm and.
17-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping This e xample sho ws how to statically conf igure a hos t on an interface and verify the co nfig uration: Switch# configure terminal Switch(config)# ip igmp snooping vlan 1 static 0100.
17-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Configuring IG MP Sn ooping If you disable IP multicast- source-only lea .
17-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Configuring IGMP Sno oping and M VR Displaying IGMP Snooping Information Displaying IGMP Snooping Information Y o u can di spla y IG MP snoo ping inf orm ati on for dyn am ica lly l ear ne d and st at ical ly c on figured rou ter ports and V LAN interfac es.
17-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Displaying IG MP Sn ooping Informa tion IGMP snooping immediate-leave is .
17-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Configuring IGMP Sno oping and M VR Underst anding Multicast VLAN Registration Understandin g Multicast VL AN R.
17-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Unde rs ta n din g Mu ltic as t V LAN Reg i stra t io n When a subscriber chan ges channels or turns of f the tele vision, the set-to p box sends an IGMP leav e messag e for th e mult icast st ream.
17-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Configuring IGMP Sno oping and M VR Configuring MVR MVR elimin ates the need to duplicate tele vision-c h annel multi cast traf fic for subscribers in e ach VLAN.
17-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Conf igu rin g MVR MVR Configuration Guidelines and Limitations Foll ow these gui delines when conf iguring MV R: • Receiver ports cann ot b e t runk p ort s.
17-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Configuring IGMP Sno oping and M VR Configuring MVR T o return t he switch t o its defa ult settin gs, use the no mvr [ mode | group ip-a dd ress | querytime | vlan ] global configurati on comm ands.
17-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Conf igu rin g MVR T o return the inter face to its default settings, u se the no mvr [ type | immediate | vlan vl an-id | group ] interf ace conf igu ration com mands.
17-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Configuring IGMP Sno oping and M VR Displaying MVR Information This is an example of output fro m the show mvr interface privileged EXE C c omm and w hen th e member keyword is inc lud ed : Switch# show mvr interface fastethernet0/2 members 224.
17-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Conf igu ring I GMP Filt eri ng This is an example of output fro m the show mvr interface privileged EXEC com mand for a spe cified interf ace: Switch# show mvr interface fastethernet0/2 224.
17-21 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Configuring IGMP Sno oping and M VR Con f ig u ri n g IG M P Fi lt e ri n g Default IGMP Filtering Configuration T able 17-7 shows the default IGMP f iltering configura tion.
17-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Conf igu ring I GMP Filt eri ng T o delete a profil e, use the no i p igmp p rof ile pr of ile numb er global configurat ion comm and.
17-23 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Configuring IGMP Sno oping and M VR Con f ig u ri n g IG M P Fi lt e ri n g Current configuration : 123 bytes !.
17-24 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 17 Co nfiguring IGMP S noo ping and M VR Displaying IGMP Filterin g Configura ti on Displaying IGMP Filtering Conf.
C HAPTER 18-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 18 Configuring Port-Base d Traffic Control This chapte r des cribes how t o conf igure th e port-b ased traf fic contro l featur es on your switch .
18-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 18 Configuring Port-Based Traffic Co ntro l Configuring Stor m Control The rising t hresho ld is the p erce nt age of to tal a v a ilab le b andwi dth assoc iate d with m ultica st, broad cast, or unicast t raf fi c before forwarding is block ed.
18-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 18 Configuring Port -B ased Tra ffic Control Configuring Protected Ports Disabling Stor m Co nt rol Beginning i n p.
18-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 18 Configuring Port-Based Traffic Co ntro l Configuring Port Security Beginning in privileged EXE C mode, foll ow these step s to define a port as a pro tected port: T o disable prot ected p ort, use th e no switchport protected interface configurat ion comm and.
18-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 18 Configuring Port -B ased Tra ffic Control Confi guring Port Securi ty Understand ing Port Secu rity This sect io.
18-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 18 Configuring Port-Based Traffic Co ntro l Configuring Port Security This i s a n exampl e of t ext fr om the r un.
18-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 18 Configuring Port -B ased Tra ffic Control Confi guring Port Securi ty Default Port Security Configuration T able 18-1 shows the default por t security conf iguration for an interface.
18-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 18 Configuring Port-Based Traffic Co ntro l Configuring Port Security Step 5 switchport port-security maximum value (Optional ) Set the maxim um numbe r of secure MA C address es for the interface .
18-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 18 Configuring Port -B ased Tra ffic Control Confi guring Port Securi ty T o retur n the inter fac e to the de fault conditi on as not a secure p ort, use the no switchport port -security interf ace co nf igurati on com mand.
18-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 18 Configuring Port-Based Traffic Co ntro l Configuring Port Security This e xampl e sho ws how to co nf igure a s.
18-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 18 Configuring Port -B ased Tra ffic Control Confi guring Port Securi ty Beginn ing in pri vilege d EXEC mode, fol.
18-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 18 Configuring Port-Based Traffic Co ntro l Displaying Port-Base d Traffic Cont rol Settings Displaying Port-Based.
C HAPTER 19-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 19 Configuring UDLD This c hapt er d escri b es how to c onfigure the Un iDi rec tiona l Li n k De tect ion (UD LD) pr otoc ol o n y our switch.
19-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 19 Co nfiguring UDLD Unders tan ding UDL D UDLD oper ates b y using two mech anisms: • Neighbor datab ase mainten.
19-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 19 Configuring UD LD Configuring UDLD Configuring UDLD This se cti on de scri bes how to c onfigure UD LD o n your sw it ch.
19-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 19 Co nfiguring UDLD Conf igu ring U DLD Enabling UDL D Globally Beginning in privileged EXEC mode , foll ow these .
19-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 19 Configuring UD LD Configuring UDLD T o disabl e UDLD on a no n-f ibe r- opti c inte rface , use the no udld enable interf ace conf igura tion comm an d.
19-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 19 Co nfiguring UDLD Displa ying U DLD Statu s Displaying UDLD Status T o display the UDLD stat us for the s pecif ied i nterf ace or for all interf aces, use the show udld [ interface-id ] pri vileged EX EC comm and.
C HAPTER 20-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 20 Configuring CDP This c hapt er d escrib es how to configure Cisc o Discovery Pro toco l ( CDP ) on your swi tch .
20-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 20 Co nfigu ri n g CDP Conf igu rin g CD P Configuring CDP These sec tions inclu de CDP con figuration info rmatio.
20-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 20 Configuring CDP C onfiguring CDP Use the no form of the CDP commands to return to the def ault settings. This e xample sho ws how to confi gure an d veri fy CDP character istics .
20-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 20 Co nfigu ri n g CDP Conf igu rin g CD P This example shows how to enable CDP if it has been di sabled .
20-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 20 Configuring CDP Monitoring and Maintaining CDP Monitoring and Maintaining CDP T o mon itor a nd mai ntai n CDP on yo ur device, per form one o r mor e of t hese ta sks, begi nnin g in privileged EXEC mo de .
20-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapte r 20 Co nfigu ri n g CDP Monito rin g and Mai nt aining CDP.
C HAPTER 21-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 21 Configuring SPAN and RSPAN This chapte r descr ibes ho w to co nf igure Switc hed Port Analyzer (SP AN) and Remote SP AN (RSP AN) on your switch.
21-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 C onfiguring SPAN and RSPAN Understan din g SPA N and RSPAN Figur e 21 -1 Example SP AN Configur ation Only traf.
21-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 Configuring SPAN and RSPAN Understanding SPAN a nd RSPAN SPAN and RS PAN Conc epts a nd Terminology This secti on descri bes conce pts and te rminology associate d with SP AN and RSP AN co nfiguration.
21-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 C onfiguring SPAN and RSPAN Understan din g SPA N and RSPAN standard a nd extende d output ACLs for unicast a nd ingress QoS policing .VLAN ma ps, ingress Q oS policing, and p olicy-based routing .
21-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 Configuring SPAN and RSPAN Understanding SPAN a nd RSPAN Destination Port Each local SP AN sessio n or RSP AN de.
21-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 C onfiguring SPAN and RSPAN Understan din g SPA N and RSPAN • Spanning tree is au tomati cally disabl ed on a refl ecto r port. • A refl ector port recei v es co pies o f sen t and recei v ed t raf f ic fo r all m onitor ed sou rce port s.
21-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 Configuring SPAN and RSPAN Understanding SPAN a nd RSPAN SPAN and RS PAN Interac tion with Other F eatures SP AN interacts with th ese featur es: • Routing — Ingress SP AN does not mo nitor r outed traf f ic.
21-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 C onfiguring SPAN and RSPAN Configuring SPAN SPAN and RS PAN Sess ion Limits Y o u can co nfigure (and st ore in NV RAM) a m aximum of t wo SP AN or RSP A N sessions o n each sw itch.
21-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 Configuring SPAN and RSPAN Configuring SPAN • When yo u con figure a switc h por t as a SP AN dest ination port, it is no l ong er a norm al switc h por t ; only m onitore d traffic passes thr oug h th e SP AN dest inatio n p ort.
21-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 C onfiguring SPAN and RSPAN Configuring SPAN This exam ple shows how to set up a SP AN sessi on, s essi on 1 , for m oni tor ing s our ce p ort t raffi c to a destinati on port .
21-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 Configuring SPAN and RSPAN Configuring SPAN Removin g Ports from a SPAN Session Beginning in pr ivileged EXEC m.
21-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 C onfiguring SPAN and RSPAN Configuring SPAN Specifying VLANs to Monitor VLAN monitor ing is similar to port monitoring.
21-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 Configuring SPAN and RSPAN Configuring SPAN Specifying VLANs to Filter Beginn ing in p ri vil eged EXEC mode , .
21-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 C onfiguring SPAN and RSPAN Configuring RSPAN Configuring RSPAN This secti on descri bes how to configure RSP AN on you r switc h.
21-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 Configuring SPAN and RSPAN Configuring RSPAN • Y o u shou ld cre ate a n RSP AN VL AN befo re c onfiguring a n RS P AN sou rce or de stina tion s ession .
21-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 C onfiguring SPAN and RSPAN Configuring RSPAN This example shows ho w to clear any existing RSP AN configur ati.
21-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 Configuring SPAN and RSPAN Configuring RSPAN Removin g Ports from an RS PAN Session Beginning i n privileged EX.
21-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 C onfiguring SPAN and RSPAN Configuring RSPAN Specifying VLANs to Monitor VLAN monitor ing is similar to port monitoring.
21-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 Configuring SPAN and RSPAN Configuring RSPAN Specifying VLANs to Filter Beginn ing in pri vilege d EXEC mode, f.
21-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 21 C onfiguring SPAN and RSPAN Displaying SPAN and RS PAN Status Displaying SPAN and RSPAN Status T o display the statu s of the current SP AN or RSP AN configuratio n, use the show monitor pri vilege d EXEC co mmand.
C HAPTER 22-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 22 Configuring RMON This ch apter descr ibes how to con figure Remote Network Mo nitori ng (RMO N) on your swit ch.
22-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 22 Co n figuring RM ON Conf igu ring R MON Figur e 22-1 Remot e Mo nito r ing Exam ple The switc h supports t hese .
22-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 22 Configuring RMON Configuring RMON Note RM ON configuration , statu s, and di splay for rem ote CP E FE interfac es is suppor ted thro ugh SNMP onl y by using the RMON-MIB.
22-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 22 Co n figuring RM ON Conf igu ring R MON T o disable an al arm, use th e no rmo n alar m num ber global configura t ion com mand on e ach al arm you configured . Y ou c anno t disa ble at on ce a ll t he ala rms tha t yo u c on figured.
22-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 22 Configuring RMON Configuring RMON Configuring RMON Collection on an Interface Y o u must first c onfigure RM ON al ar ms an d events to displa y co llec tion i nf orma tio n.
22-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 22 Co n figuring RM ON Displa ying RM ON Sta tus T o disabl e the co llecti on of g roup E thern et sta tistics , use th e no rmon collec tion stats index interf ace configurati on comm a nd.
C HAPTER 23-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 23 Configuring System Message Logg ing This c hapter d escrib es how to c onfigure system me ssage log ging on your sw itch.
23-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 23 Configuri ng System Me ssage Logging Configur ing System Mes sage Logg ing Configuring Sy stem Me ssage Logging .
23-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 23 Configuring Sys te m Message L ogging Config uring Syst em Message Logging This example shows a partial switch s.
23-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 23 Configuri ng System Me ssage Logging Configur ing System Mes sage Logg ing Disabling an d Enab ling Me ssage Lo gging Message logging is enab led by de fault. It must be enabled to send messages to any destination othe r than the conso le.
23-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 23 Configuring Sys te m Message L ogging Config uring Syst em Message Logging The logging buffered globa l configur ation comm and c opies l ogging messa ges to a n inte rnal buffer .
23-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 23 Configuri ng System Me ssage Logging Configur ing System Mes sage Logg ing Synchronizing Log M essages Y o u can.
23-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 23 Configuring Sys te m Message L ogging Config uring Syst em Message Logging T o disable syn chroni za t ion of un.
23-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 23 Configuri ng System Me ssage Logging Configur ing System Mes sage Logg ing Enabling a nd Disab ling Seq uence Nu.
23-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 23 Configuring Sys te m Message L ogging Config uring Syst em Message Logging Note Spe cifying a level c auses messages at that le v el an d numerical ly lo wer le v els to be displayed a t the destination.
23-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 23 Configuri ng System Me ssage Logging Configur ing System Mes sage Logg ing Limiting Syslog Messages Sent to the.
23-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 23 Configuring Sys te m Message L ogging Config uring Syst em Message Logging Logging Messages to a UNIX Syslog Daemo n Before yo u ca n send system log m essages to a UNIX syslog server , you m ust con figure the syslog daemon on a U N IX ser ver .
23-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 23 Configuri ng System Me ssage Logging Display ing the Log gi ng Configur ation T o remov e a syslog s erv er , use the no logging host globa l configurati on co mman d, and spe cify the syslog server IP address.
C HAPTER 24-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 24 Configuring SNMP This chapt er describ es ho w to configure the Sim ple Network Mana gement Prot ocol (SNM P) on your switch.
24-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNMP Unders tan ding SNMP • Using SNMP to Access MIB V ariables, page 24-4 • SNMP Notif ica tion.
24-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNM P Under standin g SNMP Y ou must co nfigure the SN MP agent to use the SNMP version support ed by the manage ment stat ion.
24-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNMP Unders tan ding SNMP SNMP Community String s SNMP comm unity stri ngs authent icate acc ess to MIB object s and functio n as embedde d passwords.
24-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNM P Configuring SNMP SNMP Notifications SNMP allo ws t he switch to send n otif ications to SNMP manager s when p articular ev ents occur . SNMP notifications ca n be sent as tr aps or inform request s.
24-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNMP Conf igu rin g SNMP Default SNMP Configuration T able 24-3 sh ows the de fault SNM P c onfigurat ion. SNMP Configuration Guidelines An SNMP gr oup is a table th at ma ps SNM P use rs to SN MP views.
24-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNM P Configuring SNMP Disabling the SNMP Agent Beginn ing in pr iv ileged EXEC mode, f ollo w these.
24-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNMP Conf igu rin g SNMP Note T o disabl e acce ss for an SNM P commun ity , set th e comm unity string for that co mmunity to the null string (do not enter a value for th e communi ty string ).
24-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNM P Configuring SNMP Beginn ing in pri vileg ed EXEC mode, follo w these st eps to confi gure SNMP on the switch: Command Purpo se Step 1 c onfigure te rmina l Enter global configurat ion mode .
24-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNMP Conf igu rin g SNMP Configuring SNMP Notifications A trap manag er is a mana geme nt statio n that recei ves and pro cesses tr aps. T rap s are sys tem alerts that the switc h gener ates whe n cert ain events occu r .
24-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNM P Configuring SNMP Some noti fication type s can not be c ontr olled wi th the sn mp-se rver ena ble globa l configurati on comm an d, for exampl e, tty a nd udp-port .
24-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNMP Conf igu rin g SNMP The snmp-serv er host co mmand s pecif ies which ho sts rec eiv e th e noti fica tions. T he snmp-serv er enab le trap command global ly enable s the mech anism for the specif ied notif icatio n (for tra ps and informs ).
24-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNM P Configuring SNMP Setting th e Agent C ontact and Location In formation Beginn ing in pri vile.
24-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNMP Conf igu rin g SNMP SNMP Examp les This example shows ho w to enable all versions of SN MP . Th e configurati on permi ts any SNMP manager to access all objects with read-only permissions using the co mmunity string public .
24-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNM P Disp la yin g S N M P S t at us Displaying SNMP Status T o display SN M P input and o utput s.
24-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 24 Configuring SNMP Displaying SNM P Status.
C HAPTER 25-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 25 Configuring Network Security with ACLs This cha pter d escri bes how to configu re net work se curit y on yo ur swi tch by usi ng a cce ss contr ol l ists (A CL s), whic h are also ref erred to in comm ands an d tables as acce ss lists .
25-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Unders tandin g A CLs Understandin g ACLs Pack et f ilterin g can limit net work traff ic and restrict netw ork use b y certain users or de v ices.
25-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Unde rsta ndi n g AC Ls Figur e 25-1 Usi ng AC Ls to Contr ol T raff ic t o a Netw or k Handling Fragmented and Unfragmented Traffic IP packets can be fragment ed as they cross the ne twork.
25-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Unders tandin g A CLs • Packet A is a TCP pa cket fro m ho st 10. 2. 2.2, po rt 65000 , go ing to h ost 10.1. 1.1 on th e SMTP por t.
25-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Unde rsta ndi n g AC Ls • Layer 4 fields: – TCP (Y ou c an sp eci fy a T CP so urce , de stin ation po rt n um ber, or both a t the same time.
25-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Conf igu ring A CLs Guidelines for Applying ACLs to Physical Interfaces When ap plyi ng ACLs to physic al in terfaces , f oll ow these configura tion g uide lines: • Only one A C L can be attached to an interface .
25-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Confi guring ACLs Unsupporte d Features The switc h does not support t.
25-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Conf igu ring A CLs ACL Numbers The numbe r you use to denote your A CL shows the type of access list th at you ar e cre ating.
25-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Confi guring ACLs Creating a Numbered Standard ACL Note For info rmati.
25-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Conf igu ring A CLs This exampl e shows ho w to creat e a standard ACL to deny access to IP host 171 .69.1 98.102, pe rmit access to an y others, and display the results.
25-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Confi guring ACLs Note Th e switc h does not supp ort dyna mic or reflexive access lis ts. It al so does n ot suppor t filtering based on the min imize -mon eta ry-co st typ e of servic e (T oS ) bit.
25-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Conf igu ring A CLs Beginn ing in pri vileg ed EXEC mode, follo w these st eps to create an exte nded A CL: Command Purp ose Step 1 co nfi gure terminal Ent er g loba l c onfigura tion m od e.
25-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Confi guring ACLs Use the no a ccess-lis t a ccess-list-number gl obal conf igurat ion command to dele te the entire access list.
25-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Conf igu ring A CLs Be ginning in pri vile ged EXEC m ode, fo llo w .
25-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Confi guring ACLs When ma king t he stan dar d an d extend ed A CL, r.
25-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Conf igu ring A CLs T o remov e a conf igu red time -ran ge, use the no time-r ange ti me-range-nam e globa l c onfigura tion comm and.
25-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Confi guring ACLs deny tcp any any time-range new_year_day_2000 (inac.
25-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Conf igu ring A CLs In this exam ple, the Jones subnet is not allo w.
25-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Confi guring ACLs This exam ple sh ows how to cr eate an d displ ay a n acc ess l ist name d mac1 , denying o nl y E the rT yp e DECnet Phase IV traf f ic, b ut permitting all other types of traf f ic.
25-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Applying ACLs to Ter m in al Lines or Phy sical Inter faces Applying.
25-21 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Displaying ACL Information Applying ACLs to a Physical Interface Begi.
25-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Displa ying A CL Inf ormati on Displaying ACLs Y ou ca n display existi ng A CLs by using show commands.
25-23 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Examples for Compiling ACLs Displaying A ccess Groups Note Th is fea ture is available o nly i f your sw itch i s r unn ing the EI .
25-24 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Examples fo r Compilin g ACLs Use swi tch A CLs to d o these: • Create a standa rd A CL, and filter traff ic fr om a spe cific Interne t host with an addre ss 172.
25-25 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Configuring Net work Securi t y with ACLs Examples for Compiling ACLs Numbered ACL Examples This example shows that the swi tch accept s addre sses on networ k 36.
25-26 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 25 Con figuring Ne two rk Sec urity with ACLs Examples fo r Compilin g ACLs In this ex ample o f a num bered A CL,.
C HAPTER 26-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 26 Configuring QoS This chapter descr ibes ho w to conf igure quality of service (QoS) b y using QoS com mands. W ith QoS, you can p rovid e preferen tial treatm ent to cert ain types of traf fi c at the e xpense o f others.
26-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Unders tan ding QoS • V ideo w izard — Giv es traff ic th at origin ates from speci fied video servers a highe r priori ty than the prior ity of data t raf f ic.
26-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Under sta n din g Q oS Figur e 26-1 QoS Cl assificatio n Lay ers in F ram es and P ack ets All .
26-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Unders tan ding QoS • Markin g e va luates the policer an d conf iguration info rmation.
26-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Under sta n din g Q oS The trust DSCP con figur ation is meaningless fo r non-IP traf f ic.
26-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Unders tan ding QoS Classification Based on Class Maps and Policy Map s A class map is a mechanism th at you use to isol ate and n ame a specif ic tr af fic flo w (or clas s) from all other traf f ic.
26-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Under sta n din g Q oS • Only one policer can be applied to a pack et in the input direc tion. • Only t he a verag e rate and com mitted b urst parameter s are co nf igurable.
26-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Unders tan ding QoS Port Prior ity Frames rec ei ve d from users in the adminis trati v ely-def ined VLANs are clas sif ied or tagge d for transmission to other de vices.
26-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Configur ing Qo S Configuring QoS Before configur ing QoS, you must hav e a thoroug h understand ing of the se items: • The type s of applica tions used and the traffic patterns on yo ur network.
26-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Conf igu rin g QoS Configuration Guidelines Note Th ese guide lines are applicab le only if you r switch is ru nning the E I.
26-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Configur ing Qo S Note Both the EI a nd SI support this featur e. Configuring the Trust State on Po rts within the QoS Domain Pa ckets en tering a QoS domai n are classi fied at the edge of the QoS dom ain.
26-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Conf igu rin g QoS Beginn ing in pr iv ilege d EXEC mode, follo w the se steps to conf i.
26-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Configur ing Qo S Configuring the CoS Val ue for an Interface QoS assigns the CoS v al ue specif ied with the mls qos cos interfac e conf igu ration c ommand to unta gged frames re ceived on trusted and untrust ed port s.
26-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Conf igu rin g QoS Ho we ver , if a user byp asses the telep hone and c onnects th e PC .
26-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Configur ing Qo S Enabling Pass-Through Mode In software rel eases earl ier than Re lease 12.
26-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Conf igu rin g QoS Configuring a QoS Policy Note Th is fea ture is available o nly i f your sw itch i s r unn ing the EI .
26-17 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Configur ing Qo S For more information abo ut creating IP standar d A CLs, see the “ Guidelin es f or A pplying ACLs to Physica l Interfa ces ” section on page 25-6 .
26-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Conf igu rin g QoS Beginn ing in pri vileg ed EXEC mode, follo w the se steps to create an IP exte nded A CL for IP tra ff ic: Command Purpose Step 1 conf igure t erminal Enter glo bal configurat ion m ode.
26-19 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Configur ing Qo S For more information about crea ting IP exten ded A CLs, see the “ Guidelines for Applyi ng A CLs to Physica l Interfa ces ” section on page 25-6 .
26-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Conf igu rin g QoS This e xample sho ws ho w to cr eate a Lay er 2 MA C A CL wit h a permit s tatement. Th e statem ent allo ws traff ic from the host wi th MA C address 0001.
26-21 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Configur ing Qo S T o delete an exi sting class ma p, u se the no class-map cl ass-map- name gl obal conf igur ati on com man d.
26-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Conf igu rin g QoS Beginning in privileged EX EC mode , follow these steps t o create a po licy map: Command Purpose Step 1 conf igure t erminal Enter glo bal configurat ion m ode.
26-23 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Configur ing Qo S T o delete an e xisting polic y map, use the no policy-map poli cy-m ap-n ame global configuration comm and. T o de lete an existi ng class ma p, use the no clas s class-map-nam e poli cy-map co nfigurati on comma nd.
26-24 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Conf igu rin g QoS Switch(config)# access-list 1 permit 10.
26-25 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Configur ing Qo S Configuring the CoS-t o-DSCP Map Y ou use the CoS- to-DSCP ma p to map CoS v alues in incomin g pack ets to a DSCP v alu e that Qo S uses internall y to rep resent the priority o f the tr af fic .
26-26 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Conf igu rin g QoS Configuring the DSCP-to- CoS Map Y o u use the DSCP- to-CoS ma p to map DSCP values in incom ing pac kets to a Co S value, which is used to sele ct one of the fou r egress queues .
26-27 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S Configur ing Qo S Config ur ing Co S an d WRR Note Th is feature is supported by both the EI and SI.
26-28 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS Displa ying QoS Infor mation T o di sable th e WRR sche dule r an d ena ble th e st rict pri ori ty sc he du ler, use the no wrr -queue bandwidth globa l configuration command.
26-29 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S QoS Config uratio n Examples QoS Configuration Exa mples Note These ex amples are applicab le only i f your switc h is run ning the EI .
26-30 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS QoS Configura tion Examp les QoS Configuration for the Existing Wiring Closet The exi sting wiring closet in Figure 26-4 consi sts of existing Ca talyst 290 0 X L and 3500 X L switche s.
26-31 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 26 Configuring Qo S QoS Config uratio n Examples Step 9 police 5000000 819 2 exce ed-ac tion drop Def ine a p olicer f or the classi fie d vide o traf f ic to drop tr af fi c that exc eeds 5-Mb ps a v erag e tra f f ic rat e with an 81 92-b y te b u rst size .
26-32 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapt e r 2 6 Co nf igur ing Q oS QoS Configura tion Examp les.
C HAPTER 27-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 27 Configuring EtherChannels This cha pter descri bes how to configure Ether Channel on Layer 2 interfaces. EtherCha nnel provi des fault-to lerant high- speed links betw een switc hes, ro uters, and ser vers.
27-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 2 7 Configur ing Ethe rChannel s Unders tan ding Ether Channels Figur e 27 -1 T ypical EtherChanne l Configur ation Each Et h erCha nne l ca n co ns is t of up to eigh t com pa tib ly configur ed Ethe rn et i nte rface s.
27-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 27 Configuring Eth erCh annels Understa nding Et herChann els Figur e 27 -2 Relationship of P h ysical P orts, Lo g.
27-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 2 7 Configur ing Ethe rChannel s Unders tan ding Ether Channels PAgP Modes T able 27-1 sh ows the user-configurab le Ethe rC han nel mode s f or the channel-group interfa ce configurati on comm a nd: on , auto , and desi r abl e .
27-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 27 Configuring Eth erCh annels Understa nding Et herChann els Physical Learners an d Aggregate-P ort Learners Network devices are cla ssified as P AgP physic al lea rner s o r a ggregate- por t l ear ne rs.
27-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 2 7 Configur ing Ethe rChannel s Unders tan ding Ether Channels Use the option tha t provi des the greatest v ariety in your conf iguration.
27-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 27 Configuring Eth erCh annels Config uring Et herCh annels Configuring Eth erChannels These sec tions descr ibe ho.
27-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 2 7 Configur ing Ethe rChannel s Configur ing Eth erChann els EtherChann el Configuratio n Guidelin es If improperly co nf igured, some EtherCh annel interf aces are automatic ally disabled to a v oid network loops and ot her pr oblems.
27-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 27 Configuring Eth erCh annels Config uring Et herCh annels Beginn ing in pri vileg ed EXEC mode, follo w these st .
27-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 2 7 Configur ing Ethe rChannel s Configur ing Eth erChann els T o remove an inte rface from the Et herC hannel group, u se the no channel-group interface co nfiguration comm and.
27-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 27 Configuring Eth erCh annels Displa ying Ethe rChannel and PAgP St atus T o ret urn EtherCh annel load balancing to the d efault c onfig uration, u se the no port-channel load-balanc e global con figurati on comm and.
27-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 2 7 Configur ing Ethe rChannel s Displaying Eth erCh annel and PA gP Status.
C HAPTER 28-1 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 28 Troubleshooting This chapte r describes ho w to identify and resolv e software prob lems related to the IOS softwa re.
28-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Trouble shooting LRE St atisti cs T a ble 28-1 Ether net P ort Sta tistics Statistic T ype Explanation T ransmi t Unicast Frames The to tal numbe r of well -formed un icast frame s sent by a port.
28-3 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Troublesho oti ng LRE Stat istics Multicast Frames Th e total number of well- formed multica st fra mes recei ved b y a port. It e xcludes f rames received with errors, wit h unicast or br oadcast de stination addresses, or with oversized or undersi zed frame s.
28-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Trouble shooting LRE St atisti cs T able 28-2 LRE Li nk Statistics Statistic T ype Explanation Upstrea m Ba ndwi.
28-5 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Troublesho oti ng LRE Stat istics Late Collisions The total number of frames disca rded because of late c ollisions detect ed during transmission. It includes all transmit frames that ha d a collision after the transmission of the frame's 64th byte.
28-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Trouble shooting Using Re covery Procedu res Using Recovery Proced ures These re covery procedur es requir e tha.
28-7 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Troublesho oti ng Using Reco very Pr ocedures Step 3 Unplug the swi tc h power cor d. Step 4 Press the Mode button, and at th e same time, reconnect the pow er cord to the switch.
28-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Trouble shooting Using Re covery Procedu res Step 13 Copy the c onfiguration file into memory: switch# copy flash: config.text system: running-config Source filename [config.
28-9 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Troublesho oti ng Using Reco very Pr ocedures Replacing a Failed Command Switch with a Cluster Member T o replac.
28-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Trouble shooting Using Re covery Procedu res Step 11 Respond to the questions in the setup program. When prom pted for t he host n ame, reca ll that on a comman d switch, the host nam e is limite d to 28 charac ters; on a member switch to 31 character s.
28-11 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Troublesho oti ng Using Reco very Pr ocedures Basic management setup configures only enough connectivity for ma.
28-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Trouble shooting Preventing Autone gotiati on M ismatche s Preventing Autone gotiation Mismatc hes The IEE E 802.
28-13 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Troublesho oti ng GBIC and SF P Module Securi ty and Ide ntif icati on GBIC and SFP Module Security and Identif.
28-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Trouble shooting Using D ebug Command s Using Debug Commands This sectio n explains how you use deb ug com mands to dia gnose a nd resolve inter networki ng prob lems.
28-15 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Troublesho oti ng Usin g th e c ra shi n fo Fi le Enabling All-Sy stem Diag nostics Beginn ing in pri vile ged .
28-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Chapter 28 Trouble shooting Using t he c rashinfo File Each ne w crash info fi le that is created uses a sequen ce number that is lar ger than any pre vious ly-exi sting sequence number , so the f ile with the lar gest sequence n umber describes the most re cent failu re.
A- 1 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 APPEND IX A Supported MIBs This appendix l ists the supp orted mana gement i nformat ion base (M IBs) for this re lease.
A- 2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendi x A Support ed MIBs Using FTP t o Acces s the MIB Fi le s • CISCO-TCP-MIB • CISCO-VL AN-MEMB ERSHIP-M IB • CI.
A-3 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix A Support ed M IBs Using FTP to Access the MIB Files Step 5 Chan ge di rector ies to wsc2 900xl for a list of Catalyst 2900 X L MIBs. Step 6 Use the get MIB_f ilename command to obtain a copy of the MIB file.
A- 4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendi x A Support ed MIBs Using FTP t o Acces s the MIB Fi le s.
B-1 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 APPEND IX B Working with the IOS File System, Configuration Files, and Software Imag es This a ppend ix desc ribe s how to manip ul ate t he Flash file s ystem , how to copy c on figurati on files, an d how to archiv e (upload an d download) software i mages.
B-2 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working w it h t he F lash File S.
B-3 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with the Flash File .
B-4 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working w it h t he F lash File S.
B-5 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with the Flash File .
B-6 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working w it h t he F lash File Sy st em Use the /rec ursiv e keyword for deleting a director y and all subdire ctori es and the files contai ned in it.
B-7 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with the Flash File .
B-8 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working w ith Con figuration Files • For the T ri vial Fil e T ransfer Pr otocol (TFTP), the synt ax is tftp: [[ // lo cation ] / dir ectory ] / tar -f ilename .
B-9 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with Configuration Files Yo u c a n c o p y ( uploa d ) conf iguration f iles fr om the switch to a f ile serve r by u sing TFTP , FTP , or RCP .
B-10 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working w ith Con figuration Fil.
B-11 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with Configuration .
B-12 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working w ith Con figuration Fil.
B-13 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with Configuration Files Copying Configuration Files By Using FTP Y o u can co py configuration f iles to or fro m an FTP server .
B-14 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working w ith Con figuration Files NVRAM.
B-15 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with Configuration Files Switch# copy ftp: nvram:startup-config Address of remote host [255.
B-16 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working w ith Con figuration Fil.
B-17 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with Configuration .
B-18 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working w ith Con figuration Fil.
B-19 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with Configuration .
B-20 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working wi th Soft ware Images Deleting a Stored Config uration File T o delete a sa ved configurati on from Flash memory , use the delete flash: f ilen ame privileged EXEC comm and.
B-21 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with So ftware Images tar File Forma t of Images on a Server o r Cisco.
B-22 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working wi th Soft ware Images Copying Imag e Files By Us ing TF TP Y ou can do wnload a switch image fr om a TFTP serv er or u pload the image f rom the switc h to a TFTP server .
B-23 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with So ftware Images Downloading an Image File By Using TFTP Y ou can do wnlo ad a n ew image f ile and rep lace the curr ent imag e or k eep th e curren t imag e.
B-24 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working wi th Soft ware Images N.
B-25 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with So ftware Images Cautio n For the download and up load al gorithms to operate properl y , do not rename imag e names.
B-26 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working wi th Soft ware Images B.
B-27 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with So ftware Imag.
B-28 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working wi th Soft ware Images The alg orithm insta lls the do wnlo aded ima ge onto t he system board Flash dev ice (fla sh:).
B-29 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with So ftware Imag.
B-30 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working wi th Soft ware Images For th e R CP c op y re qu est to e x ecute succ es sf ully , an account mu st be de f in ed on th e n et wor k serv e r fo r the remo te userna me.
B-31 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with So ftware Imag.
B-32 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working wi th Soft ware Images If yo u sp ecify the /lea ve- old-sw , the e xisting f iles ar e not rem o ved .
B-33 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 Append ix B Workin g w ith the IOS Fi le System, Co nfigu ration Fi les, and Soft w are Imag es Working with So ftware Imag.
B-34 Catalyst 2950 Desktop Switch Software C onfiguratio n Guide 78-14982-01 Appendix B Working with the IOS File System , Configura tion Files, an d Software Ima g es Working wi th Soft ware Images.
IN-1 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 INDEX Numerics 802.1 D See STP 802.1 Q and trunk ports 9-2 config urati on limitat ions 14-16 nati ve VL AN fo r un tagge d tr affic 14-20 trunk m ode 3-10 802.1 S See MSTP 802.
Index IN-2 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 displaying i nterfac e 25-23 exam ple s of 25-23 exten ded I P configuring for QoS classi fication 26-18 crea ting 2.
Inde x IN-3 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 ARP table address resolution 7-61 managing 7-61 asymmetric d igital subs criber line See ADSL attribute s, RADIUS ve.
Index IN-4 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 disabling 18-3 browser conf i gurat ion 3-1, 6-1 buttons, CMS 3-30 C cables , monit oring for uni direct ional links.
Inde x IN-5 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 See CMS clusters, switch acce ssing 6-15 adding me mber swit ches 6-20 automatic d iscovery 6-5 automatic r ecovery .
Index IN-6 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 no and defaul t 2-5 setting privileg e levels 7-8 comm an d sw it ch acce ssing 6-13 active (AC) 6-12, 6-23 comman d.
Inde x IN-7 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 config uring duplex mo de 10-7 for an LRE upg rade 10-15 LRE por ts 10-5 speed on Cisco 575 LR E CPE 10-8 config-vla.
Index IN-8 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 RMON 22-3 RSPAN 21-8 RSTP and M STP 12-12 SNMP 24-6 SPAN 21-8 STP 11-10 system message logging 23-3 system name and .
Inde x IN-9 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 using FTP B-26 using RC P B-30 using T FTP B-23 DSCP 1-6, 26-2 DSCP-to-CoS ma p for QoS 26-26 DTP 1-5, 14-15 duplex .
Index IN- 10 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 ETSI 1-2 European T elecommunicatio n Standard s Institute See ETSI even ts , RMON 22-3 exam ples convent ion s fo.
Inde x IN- 11 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 G GBICs 1000BASE -L X/LH modul e 1-10 1000BASE -SX m odu le 1-10 1000BASE -ZX modul e 1-10 CWDM m odul e 1-20 Giga.
Index IN- 12 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 config urati on servic e 5-2 describe d 5-1 even t s ervi c e 5-3 describe d 1-7 support fo r 1-3 IEEE 8 02.
Inde x IN- 13 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 exten ded , crea tin g 25-10 for QoS clas sificat ion 26-16 implici t deny 25-9, 25-13, 25-15 implicit m asks 25-9.
Index IN- 14 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 troublesh ooting 28-12 LRE li nk monitor 10-14 persistence 10-14 LRE li nks See LRE ports LRE por ts config uring .
Inde x IN- 15 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 manageme nt VLAN chan ging 6-18 consider ations in switch cluster s 6-8, 6-9, 6-18 discovery thr oug h d iffere nt.
Index IN- 16 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 describe d 12-10 BPDU filtering describe d 13-3 enab lin g 13-16 BPDU guard describe d 13-3 enab lin g 13-15 CIST,.
Inde x IN- 17 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 MVR configur ing interfaces 17-17 default conf igur ati on 17-15 describe d 17-13 modes 17-17 monitoring 17- 19 se.
Index IN- 18 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 passwords default conf igur ati on 7-2 disabling re cove ry of 7-5 encr ypting 7-4 in clusters 6-16, 6-20 in CMS 3.
Inde x IN- 19 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 port-cha nnel See E ther Chann el Port Fast describe d 13-2 enab lin g 13-14 mode, s pa nning t ree 14-28 support .
Index IN- 20 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 CMS 3-31 comm an d sw it ch 6-25 exiting 7- 10 logging i nto 7-10 mapping on me mber switche s 6-25 overvi ew 7-2,.
Inde x IN- 21 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 ingress po rt scheduling 26-8 IP phone s, detec tion a nd t rus ted se ttin gs 26-13 mappin g tabl es CoS-to-DSCP .
Index IN- 22 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 read-on ly a c cess mode 3-31 read-w rit e a cce ss mode 3-31 reconf irmation i nterval, VMPS, chang ing 14-30 rec.
Inde x IN- 23 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 removi ng source (m onitored ) ports 21-17 specifying mo nitore d ports 21-15 source ports 21-4 transmitted tra ff.
Index IN- 24 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 SNAP 20-1 SNMP acce ssing MIB variab les with 24-4 agen t describe d 24-3 disabling 24-7 communi ty strings config.
Inde x IN- 25 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 source ports 21-4 transmitted tra ffic 21-4 VLAN-based 21-6 spannin g tr ee and na tiv e V LAN s 14-17 Spanning T .
Index IN- 26 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 enab lin g 13-18 default conf igur ati on 11-10 defau lt option al featur e configur ation 13-14 designat ed po rt.
Inde x IN- 27 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 displaying the tim e and date 7-44 overvi ew 7-34 See also NT P system message logging default conf igur ati on 23.
Index IN- 28 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 limiti ng acc ess by server s 24-13 time See NTP and s ystem cloc k time -range co mm and 25-15 time ranges in ACL.
Inde x IN- 29 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 neighbor da tabase 19-2 overvi ew 19-1 resettin g an interface 19-5 status, displaying 19-6 unautho rized port s with 802.
Index IN- 30 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1 config urati on option s 14-6 config uring 14-1 config uring IDs 10 06 to 4094 14-12 creating in config -vlan mode.
Inde x IN- 31 Catalyst 2950 Desktop Switch Software Conf igurati on Guide 78-14982-01 server mode 15-9 transp arent mo de 15-12 cons iste ncy ch ecks 15-4 default conf igur ati on 15-6 describe d 15-1.
Index IN- 32 Catalyst 2950 Desktop Switch Software C onfigurati on Guide 78-14982-0 1.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Cisco Systems DOC-7814982 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Cisco Systems DOC-7814982 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Cisco Systems DOC-7814982 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Cisco Systems DOC-7814982 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Cisco Systems DOC-7814982, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Cisco Systems DOC-7814982.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Cisco Systems DOC-7814982. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Cisco Systems DOC-7814982 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
