Manuale d’uso / di manutenzione del prodotto 4500 del fabbricante Cisco Systems
Vai alla pagina of 1504
Americas Headquarters Cisco Systems, In c. 170 West Tasman Drive San Jose, CA 951 34-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553-NETS (638 7) Fax: 408 527-0883 Catal yst 450 0 S eries S witc h Cisco IOS S of tw are Conf iguration Guide Re le ase 15.
THE SPECIFICATION S AND INFORMAT ION RE GARDIN G TH E PRODU CTS IN THIS MANU AL A RE SUBJ ECT T O CHAN GE W ITHOUT N OTICE. ALL STATEMENTS , INFORMATION, AND RECOMMENDATI ONS IN THI S MANUAL ARE BE LIEVED TO BE A CCURATE BUT ARE PRESENTED WI THOUT WARRANTY OF ANY KIND, EX PRESS OR IMPLIED.
i Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 CONTENTS Preface li Audience li Organization li Conventi ons liv Related Documentation lv Hardware Documents lv Software Documentation l.
Contents ii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Resilient Ethernet Protocol 1-7 SmartPort Macros 1-7 Spanning Tree Proto c ol 1-8 Stateful Switchover 1-8 SVI Autostate 1-9 User-Based Rate Limiting 1-9 Unidirectional Ethernet 1-9 Unidirectional Link Detection 1-9 VLANs 1-10 Virtual Switch System Client 1-10 Y.
Contents iii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Embedded Event Manager 1-20 Ethernet Management Port 1-21 FAT File Management System on Superviso r Engine 6-E and 6L-E 1-21 .
Contents iv Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Performing Com mand-Line Proce ssing 2-3 Performing History Substitution 2-4 About Cisco IOS Command Modes 2-4 Getting a List .
Contents v Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Setting the Privilege Leve l for a Command 3-23 Changing the Default Priv ilege Level for Lines 3-23 Logging In t o a Pri v ile.
Contents vi Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Understanding DNS 4-15 Default DNS Configuration 4-16 Setting Up DNS 4-16 Displaying the DNS Configuration 4-17 Creating a Ban.
Contents vii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Performing an ISSU Upgrade: 2 Metho ds 5-11 Changeversion Proce ss 5-12 Changeversion: Quick Option 5-12 Scheduled Changevers.
Contents viii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Deploying 10-Gigabit Etherne t and Gigabit Ethernet SFP Ports on Sup ervisor Engine V-10GE 6-12 Deploying 10-Gigabit Etherne.
Contents ix Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Checking Interfaces Status 7-2 Displaying MAC Addresses 7-3 Checking Cable Status Using Time Domain Reflectometer 7-3 Overview.
Contents x Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Manipulating Bootflash on the Redund ant Su pervisor Engine 8-15 CHAPTER 9 Configuring Cisco NSF with SSO Supervisor Engin e Re.
Contents xi Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Power Management Modes for the Catalyst 450 0 Switch 10-8 Selecting a Power Manageme nt Mode 10-8 Power Management Limitations.
Contents xii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Network Assistant-Related Parameters and Their Defaults 12-3 Network Assistant CLI Commands 12-3 Configuring Your Switch for .
Contents xiii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Understanding the VTP Domain 13-8 Understanding VTP Mode s 13-9 Understanding VTP Adv ertisements 13-9 Understanding VTP Ver.
Contents xiv Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Troubleshooting IP Unnumbered Interface 14-7 Related Documents 14-8 CHAPTER 15 Configuring Layer 2 Ethernet Interfaces 15-1 A.
Contents xv Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 cisco-global 16-4 cisco-desktop 16-4 cisco-phone 16-5 cisco-router 16-5 cisco-switch 16-5 SmartPort Macro Configuration Guidel.
Contents xvi Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Configuring STP Port Priority 18-13 Configuring STP Port Cost 18-15 Configuring the Bridge Priority of a VLAN 18-17 Configuri.
Contents xvii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Flex Links Failover Ac tions 19-3 MAC Address-Table Move Update 19-4 Configuring Flex Links 19-5 Default Configuration 19-5 .
Contents xviii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Enabling EtherChannel Guard (Optio nal) 21-6 About PortFast 21-7 Enabling PortFast 21-7 About BPDU Guard 21-8 Enabling BPDU.
Contents xix Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Understanding L ink-State T racking 22-18 Configuring Link-State Tracking 22-21 Default Link-State Tracking Configuration 22-.
Contents xx Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Configuring IGMP Profiles 23-21 Applying IGMP Profiles 23-22 Setting the Maximum Number of IGMP Groups 23-23 Displayin g IGMP .
Contents xxi Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Configuring VLAN Mapping 25-11 One-to-One Mapping 25-11 Traditional Q-in-Q on a Trunk Po rt 25 -12 Selective Q-in-Q on a Trun.
Contents xxii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 UDLD Topology 28-2 Fast UDLD Topology 28-2 Operation Modes 28-3 Default States for UDLD 28-3 Default UDLD Configuration 28-4.
Contents xxiii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Monitoring and Maintaining EIGRP 30-19 EIGRP Configuration Examples 30-19 Route Summarization Example 30-19 Route Authentic.
Contents xxiv Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Unicast RPF with BOOTP and DHCP 32-8 Restrictions 32-8 Limitation 32-8 Related Features an d Tech nologies 32-8 Prerequisite.
Contents xxv Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Load Splitti ng of IP Multic ast Traffic 33-22 Monitoring and Maintaining IP Multicast Routing 33-23 Displaying System and Ne.
Contents xxvi Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Deny ACE 35-9 CHAPTER 36 Configuring VRF-lite 36-1 About VRF-lite 36-2 Default VRF-lite Configuration 36-3 VRF-lite Configur.
Contents xxvii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Mapping Tables 37-14 Queueing and Scheduling 37-14 Active Queue Management 37-14 Sharing Link Bandwidth Among Tran smit Que.
Contents xxviii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Configuring the CoS-to-DSCP Map 37-53 Configuring the Policed-DSCP Map 37-54 Configuring the DSCP-to-CoS Map 37-55 Configu.
Contents xxix Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Transmit Queue Statistics 37-85 Policy Associations 37-85 Software QoS 37-87 Configuring CoS Mutation 37-88 Configuring Syst.
Contents xxx Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Configuring a Layer 2 Interface as a PVLAN Host Port 39-18 Configuring a Layer 2 Interface as an Isolate d PVLAN Trunk Port 3.
Contents xxxi Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Using 802.1X with Authentication Failed VLAN Assignme nt 40-17 Usage Guidelines for Using Authentication Failed VLAN Ass ignment 40-18 Using 802.1X with Port Security 40-19 Using 802.
Contents xxxii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Cisco ACS Configuration fo r VLAN Assignment 40-72 Enabling Fallback Authentication 40-73 Enabling Periodic Reauthenticatio.
Contents xxxiii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Displaying Authen tication Details 40-114 Determining the Authentication Methods Registered with the Auth Manage r 40-114 .
Contents xxxiv Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 LAN Port IP 42-5 Gateway IP 42-5 ACLs 42-5 Context-Based Access Control 42-5 802.
Contents xxxv Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Example 7: Setting a Rate Limit for Bad Packets 43-13 Example 8: Clearing Dynamic Secure MAC Addresses 43-14 Configuring Por.
Contents xxxvi Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 About Control Plane Policing 44-2 General Guidelines for Control Plane Policing 44 -3 Default Configuration 44-4 Configurin.
Contents xxxvii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 CHAPTER 45 Configuring DHCP Snooping , IP Source Guard, and IPSG for Static Hosts 45-1 About DHCP Snooping 45-1 Trusted an.
Contents xxxviii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Dynamic ACLs 47-5 VLAN Maps 47-5 Hardware and Software ACL Support 47-6 TCAM Programming and ACLs for Supervisor Engine I.
Contents xxxix Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Removing the Requirement for a Port ACL 47 -36 Configuration Restrictions 47-37 Debugging Considerations 47-37 Webauth Fall.
Contents xl Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Configuring Port Blocking 49-1 Blocking Flooded Traffic on an Interface 49-2 Resuming Normal Fo rwarding on a Port 49-3 CHAPTE.
Contents xli Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Ingress Packets 51-12 Access List Filtering 51-13 ACL Configuration Guidelines 51-13 Configuring Access List Filtering 51-14 .
Contents xlii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Information about Data Collected by OBFL 53-2 OBFL Data Overview 53-2 Temperature 53-3 Operational Uptime 53-4 Interrupts 53.
Contents xliii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Monitor-level Restrictions 55-2 Configuring NetFlow Packet Sampling 55-2 Configuring Information about the External Co llec.
Contents xliv Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 NetFlow Statistics Collection Config uration Example 56-13 NetFlow Configuration Examples 56-14 NetFlow Enabling Scheme Exam.
Contents xlv Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Understanding CFM ITU-T Y.1731 Fault Manag emen t 57-27 Y.1731 Termin ology 57-27 Alarm Indication Sig n al s 57-28 Ethernet Remote Defect Indication 57-28 Multicast Ethernet Lo opback 57-29 Configuring Y.
Contents xlvi Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Displaying Y.1731 Information 58-6 CHAPTER 59 Configuring Call Home 59-1 About Call Home 59-2 Obtaining Smart Call Home 59-2.
Contents xlvii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 IP SLA Configuration Guidelines 60-7 Configuring the IP SLAs Responder 60-8 Analyzing IP Service Levels by Using the UDP Ji.
Contents xlviii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Configuration Register 63-3 Changing th e Configurat ion Register Manua lly 63-3 Changing th e Co nfiguration Register Usi.
Contents xlix Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Downloading and Compiling MIBs 65-2 Guidelines for Working with MIBs 65-3 Downloading MIBs 65-3 Compiling MIBs 65-4 Enabling.
Contents l Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01.
li Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 Preface This preface describes who sh ould read this document, ho w it is organized, and its con ventions. The preface also tells you ho w to obtain Cisco documents, as well as ho w to obtain technical assistance .
lii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Preface Chapter 9 Conf igu ring Cisco N SF wi th SSO Supervisor Engine Redu ndancy Describes ho w to configure supervisor en gine redundancy using Cisco nonsto p forwarding (NSF) with stateful switchover (SSO).
liii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Preface Chapter 29 Conf iguring Unidirectio nal Ethernet Describes ho w to configure unidirection al Ethernet . Chapter 30 Conf iguring Layer 3 Interfaces Describes ho w to conf igure interfaces to support Layer 3 features.
liv Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Preface Conventions This document uses the f ollo wing typographical con ventions: Chapter 51 Conf iguring SP AN and RSP AN Describes ho w to conf igure the Switched Port Analyzer (SP AN).
lv Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Preface Notes use the follo wing con ventions: Note Means reader take note . Notes contain helpful suggestions or references to material not co vered in the publication. Cautions use the following con ventions: Caution Means reader be car e ful .
lvi Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Preface • Catalyst 4500 Series Switc hes Installation Guide http://www .cisco.com/en/ US/docs/switches/lan/cat alyst4500/hardware/installati on/guide/78-14409 -08/4500inst .html • Catalyst 4500 E-seri es Switches Inst allation Guide http://www .
lvii Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Preface Cisco IOS Documentation Platform- indep e ndent Cisco IOS do cumentation may al so apply to the Catalyst 45 00 and 4900 switches. These documents are av ailable a t the following URLs: • Cisco IOS conf iguration guides, Release 12.
lviii Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Preface Redistrib ution and use in source an d binary forms, with or without modif ication, are permi tted pro vided that the follo wing conditions are met: 1.
lix Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Preface Obtaining Do cumentatio n and Submitting a Service Request Redistrib ution and use in source an d binary forms, with or without modif ication, are permi tted pro vided that the follo wing conditions are met: 1.
lx Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Preface Obtaining Documentation an d Submitting a Se rvice Request.
CH A P T E R 1-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 1 Product Overview This chapter pro vides an ove rvie w of Catalyst 45 00 series switches and includes the follo wing majo.
1-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 2 Softwar e Features • Link Layer Discovery Protocol, page 1-5 • Link State Tracking, page 1-6 .
1-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 2 Software Features Cisco Discovery Protocol The Cisco Discov ery Protocol (CDP) is a de vice-discov ery protocol that is bo th media- and protocol-indep endent.
1-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 2 Softwar e Features Flex Links and MAC Address-Table Move Update Flex Links are a pair of Layer 2 interfaces (switc h ports or port channels) where one interface is configured to act as a backup to the other .
1-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 2 Software Features Jumbo Frames The jumbo frames feature allo ws the switch to forwar d packets as lar ge as 9216 bytes (larger than the IEEE Ethernet MTU), rather than declare those frames “ov e rsize” and discard them.
1-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 2 Softwar e Features Link State Tracking Link-state trac king, also kn own as trunk failover , is a feature that binds th e link state of multiple interfaces.
1-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 2 Software Features The quality of service (QoS) feature prev ents congestio n by selecting netw ork traf fic and prior itizing it according to its relati ve importance.
1-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 2 Softwar e Features For info rmation on conf iguring SmartPort macros, see Chapter 16, “Configuring SmartPort Macros.
1-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 2 Software Features SVI Autostate When an SVI has multiple ports on a V LAN, normally the SVI wil l go do wn when all the ports in the VLAN go do wn.
1-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 2 Softwar e Features VLANs A VLAN configures switches and routers according to logical, rather than p hysical, topologies.
1-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 3 Software Features ETH-AIS suppresses alarms follo wing detection of defe ct conditi ons at the server ( sub) layer .
1-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 3 Softwar e Features EIGRP Stub Routing The EIGRP stub routi ng feature, a vailable in all ima ges, reduces resource utili zation by mo ving routed traf fic clos er to the end u ser .
1-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 3 Software Features http://www .cisco.co m/en/US/docs/ios/ipapp/co nf iguration/guide/ipapp_ hsrp_ps6350_TSD_Products_ Config uration_Guide_Chapter .
1-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 3 Softwar e Features EIGRP The Enhanced Interior Ga tew ay Routing Protocol (EIGRP) is a v ersion of IGRP that combines the adv antages of link-state protocols with distance-vector protocols.
1-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 3 Software Features interfaces and their metrics is used in OSPF LSAs. As routers accumulate link-s tate information, they use the shortest path first (SPF) al gorithm to calculate the shortest path to each node.
1-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 3 Softwar e Features • ANCP Client —ANCP Mu lticast enables you to con trol multicast traf fic on a Catalyst 4500 switch using either ANCP (rather than IGMP) or direct static conf iguration on the CLI.
1-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Layer 3 Software Features NSF with SSO Non-Stop F orwar ding with Stateful Swi tcho ver (NSF/ SSO) of fers conti nuous data pack et forwardi ng in a Layer 3 routing en vironment during supervisor engine switcho ver .
1-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Management Features For info rmation on conf iguring unidirectional l ink routing, refer to th e chap ter “Conf iguring Unidirectional Link Routing” in the Cisco IP and IP Routing Conf iguration Guide .
1-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Management Features • Secure Shell, page 1-22 • Simple Netw ork Management Protocol, page 1-22 • SP A.
1-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Management Features Cisco Network Assistant Cisco Network Assistant manages standal one devices, cl usters of de vices, or fe deratio ns of devices fro m anywhere in y our intranet.
1-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Management Features Ethernet Management Port The Ethernet management port, also referred to as the F a1 or fastethernet1 port , is a Layer 3 host port to which you can connect a PC.
1-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Management Features NetFlow-lite Note NetFlo w-lite is only supported on Catalyst 4948E Ethernet Switch. The Netflo w-lite feature is based on ingress packet sampl ing at a monitoring point that can be an interface on the switch.
1-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Security Features Remote SP AN (RSP AN) is an extension of SP AN , where source ports and destination ports are distrib uted across multiple switches, allo wing remote monitoring of multipl e switches across the network.
1-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Security Features • Hardware- Based Control Plane Policing, page 1- 26 • IP Source Guard for Static Ho.
1-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Security Features • 802.1X with Inaccessible Authentication Bypass— Applies when the AAA servers are unreachable or nonresponsi ve. In this situation, 802 .
1-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Security Features http://www .cisco.com/en/US/ docs/switches/lan /tr ustsec/conf iguration/guide/trustsec.
1-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Security Features Catalyst 45 00 supervi sor engines . It supports vari ous Layer 2 and Layer 3 co ntrol pr.
1-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Security Features N AC Layer 2 IP is an in tegral part of Cisco Netw ork Admission Control. It of fers the first line of defense for infected hosts (PCs and other devices attached to a LAN p ort) attempting to connect to the corporate network.
1-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Security Features PPPoE Intermediate Agent PPPoE Intermediate Agent (PPPoE IA) is placed between a subscriber and BRAS to help the service provider BRAS disting uish betw een end ho sts conn ected over Ethernet to an access switch.
1-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 1 Product Overview Security Features Utilities Supported utilit ies include the follo wing: Layer 2 Traceroute Layer 2 traceroute al lows the switch to ident ify the phy sical path that a packet takes from a source de vice to a destination device.
CH A P T E R 2-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 2 Command-Line Interfaces This chapter describes the CLIs y ou use to conf igur e the Catalyst 4500 seri es switch.
2-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Inter fa ces Accessing the Switch CLI Accessing the Switch CLI The follo wing sections describe how to access t.
2-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Interfaces Performing Command-Line Processing T o make a T elnet connection to the switch, perform this task: This exampl e shows ho w to open a T elnet session to the switch: unix_host% telnet Switch_1 Trying 172.
2-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Inter fa ces Performing History Substitution Performing History Substitution The history b uffer stores the last 20 command lines you entered. Hist ory substitution enabl es you to access these command lines without retypin g them.
2-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Interfaces Getting a List of Commands and Syntax Y ou use a separate mode called ROMMON when the switch cannot boot up properly .
2-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Inter fa ces Getting a List of Comman ds and Syntax T o list ke ywords or ar guments, enter a question mark in place of a ke yword or ar gument. Include a space before the question mark.
2-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Interfaces ROMMON Command-Line In te rface T o log in to the standb y supervisor engine using a virtual console,.
2-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Inter fa ces Archiving Crashf iles Information When you enter R O MMON mode , the prompt changes to rommon 1> . Use the ? command to see the av ailable R OMMON commands.
2-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Interfaces Displaying a Crash Dump ========= Context ====================== pc=10999E70 lr=10999E34 msr=02029230.
2-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Inter fa ces Displaying a Crash Dump 2421FAF0: 00000000 00000000 00000000 00000000 2421FB00: 00000000 00000000.
2-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Interfaces Displaying a Crash Dump 151A3B48: 1586D 760 10C7FE38 10C7F17 C 1586FF98 10C7FE38 10C7F17 C 151A3B30:.
2-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Inter fa ces Displaying a Crash Dump Flags: analyze crashblock on_old_queue Status 0x00000000 Orig_ra 0x000000.
2-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Interfaces Displaying a Crash Dump ---- Level 2 Interrupt stack (0x3F8 bytes used, out of 0x2328 available) ---.
2-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Inter fa ces Displaying a Crash Dump 156D8FE0: 20526576 69657700 0 0 0 0 0 0 156D9000: 0 0 1ADBEEF 1896AD90 15.
2-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Interfaces Displaying a Crash Dump ---- Level 7 Interrupt stack (0x0 bytes used, out of 0x2328 available) ---- .
2-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Inter fa ces Displaying a Crash Dump 2421F8D0: 0 0 2421F8E8 10C1FD9C 2421F8F8 0 0 0 2421F8F0: 15868B74 15868B7.
2-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Interfaces Displaying a Crash Dump 234BBAF0: 0 23056294 23054D90 13597D4C 1 0 0 FD0110DF 234BBB10: AB1234CD FFF.
2-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Inter fa ces Displaying a Crash Dump 13794B6C: 546F6F20 6D616E79 206C696E 6B730000 426C6F63 6B206465 76696365 .
2-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Interfaces Displaying a Crash Dump L2CAPTECC: 0x0 L2ERRDET: 0x0 L2ERRDIS: 0x0 L2ERRATTR: 0x0 L2ERRADDRH: 0x0L2E.
2-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 2 Command-Line Inter fa ces Displaying a Crash Dump.
CH A P T E R 3-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 3 Configuring the Switch for the First Time This chapter describes ho w to initially conf igure a Catalyst 4500 series switch.
3-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Configuring DHCP-Based Autoconfig uration Configuring DHCP-Based Autoconfigurat.
3-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Configuring DHCP-Based Autoconfiguration W ith DHCP-based autoconfigurati on, no D.
3-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Configuring DHCP-Based Autoconfig uration Configuring the DHCP Server A switch can act as both the DHCP client and the DHCP serv er .
3-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Configuring DHCP-Based Autoconfiguration filename (i f any) and the follo wing fil es: network-confg, cisconet.cfg, hostnam e .confg, or hostname .
3-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Configuring DHCP-Based Autoconfig uration Figur e 3-2 Relay Device Used in A ut.
3-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Configuring DHCP-Based Autoconfiguration If the switch cannot read the netw ork-confg, cisconet.cfg, or the hostname f ile, it reads the router -confg fi le.
3-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Configuring the Switch DNS Server Conf iguration The DNS server maps the TFTP serv er name maritsu to IP address 10.0.0.3. TFTP Server Conf iguration (on UNIX) The TFTP server base direct ory is set to /tftpserver/ work/.
3-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Configuring the Switch Using Configuration Mode to Configure Your Switch T o conf .
3-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Configuring the Switch <..
3-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Configuring the Switch ! line con 0 exec-timeout 0 0 transport input none line vt.
3-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Configuring the Switch T o conf igure a static route, perform th is task: This example shows ho w to use the ip route command to conf igure a static route to a workstation at IP address 171.
3-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Controlling Access to Privileged EX EC Command s .
3-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Controlling Access to Pr ivileged EXEC Commands Using the enable password and .
3-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Controlling Access to Privileged EX EC Command s For informatio n on ho w to disp.
3-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Controlling Access to Pr ivileged EXEC Commands Figur e 3-4 T ypical T ACA CS+.
3-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Controlling Access to Privileged EX EC Command s TACACS+ Operation When a user attempts a simple ASCII login b y auth enticating to a switch using T A CA CS+, this process occurs: 1.
3-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Controlling Access to Pr ivileged EXEC Commands • Conf iguring T ACA CS+ Aut.
3-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Controlling Access to Privileged EX EC Command s T o remove the specif ied T A CACS+ serv er name or address, use the no tac acs-server host hostname global conf iguration command.
3-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Controlling Access to Pr ivileged EXEC Commands Step 3 aaa authentication login { default | list-name } method1 [ method2... ] Creates a login authenticatio n method list.
3-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Controlling Access to Privileged EX EC Command s T o disable AAA, use the no aaa new-model global conf iguration command.
3-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Controlling Access to Pr ivileged EXEC Commands T o enable T A CA CS+ accounti.
3-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Controlling Access to Privileged EX EC Command s For informatio n on ho w to disp.
3-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Controlling Access to Pr ivileged EXEC Commands Logging In to a Privilege Leve.
3-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Recovering a Lost Enable Pa ssw ord Recovering a Lost Enable Password Note For mo.
3-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Modifying the Supervisor En gine Startup Configuration Understanding the ROM Monitor The R OM monitor (R OMMON) i s in vok ed at switch bootup, reset, or when a f atal exception occurs.
3-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Modifying the Sup erviso r Eng ine Startup Co nfiguration Modifying the Boot Fiel.
3-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Modifying the Supervisor En gine Startup Configuration When the boot f ield is.
3-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Modifying the Sup erviso r Eng ine Startup Co nfiguration Step 2 Enter the conf igure terminal command at the EXEC mode pro mpt (#), as follo w s: Switch# configure terminal Enter configuration commands, one per line.
3-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Modifying the Supervisor En gine Startup Configuration System returned to ROM by reload System image file is "tftp://172.25.
3-31 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Modifying the Sup erviso r Eng ine Startup Co nfiguration Flash Memory Features F.
3-32 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Resetting a Switch to F actory Default Settings Image in the Conf iguration Fi.
3-33 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 3 Configuri ng the Switch for the First Time Resetting a Switch to Factory D efault Settings When the copying is comp leted, y.
3-34 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 3 Config uri ng the Switch fo r the First Time Resetting a Switch to F actory Default Settings.
CH A P T E R 4-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 4 Administering the Switch This chapter describes ho w to perform one-time operations t o administer the Catalyst 450 0 Series switch.
4-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the System Time and Date • Conf iguring NTP , page 4-3 • Conf iguring T ime and Date Manually , page 4-11 System Clock The core of the time service is the system clock, wh ich monitors the date and time.
4-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the System Time and Date Cisco’ s implement ation of NTP does not support st ratum 1 service; it is not possible to connect to a radio or atomic clock.
4-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the System Time and Date • Conf iguring NTP Associations, pa ge 4-6 • Conf iguring NT.
4-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the System Time and Date T o disable NTP authentication, use the no ntp authenticate global conf iguration command. T o remov e an authentication key , us e th e no ntp authentication-key number global conf iguration command.
4-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the System Time and Date Configuring NTP Associations An NTP association can be a peer a .
4-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the System Time and Date Configuring NTP Broadcast Service The communications between devic.
4-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the System Time and Date T o conf igure the switch to recei ve NTP broadcast pa ck ets fr.
4-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the System Time and Date Creating an Access Group and Assigning a Ba sic IP Access List T o.
4-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the System Time and Date T o remove access control to the switch NTP services, use the no ntp access-group { query-only | serv e-only | serve | peer } global con figur ation command.
4-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the System Time and Date The specif ied interface is used for the source address for al l packets sent to all destinations.
4-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the System Time and Date Displaying the Time and Date Configuration T o display the time and date conf iguration, use the show clock [ detail ] pri vileged EXEC command.
4-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the System Time and Date Configuring Summer Time (Daylight Saving Time) T o conf igu re su.
4-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Configuring a System N ame and Prompt If summer time in your area does not f ollo w a recurring p.
4-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Configuring a System Name and Prompt For complete syntax and usage information for t he commands used in this section, see the Cisco IOS Confi gurati on Fundamentals Comm and Refer ence, Release 12.
4-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Configuring a System N ame and Prompt These sections contain this configu ration informatio n: .
4-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Creating a Banner If you use the switch IP address as its hostname, th e IP address is used and no DNS query occurs. If you confi gure a hostname that contains no periods (.
4-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Creating a Banne r Default Banner Configuration The MO TD and login banners are not conf igured.
4-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the MA C Address Table Configuring a Login Banner Y ou can configure a lo gin ba nner t o be di splayed on all connected terminals. This banner appears after the MO TD banner and before the login prompt.
4-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the MAC Addr ess Table These sections contain this configu ration informatio n: • Buil.
4-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the MA C Address Table When PVLANs are conf igured, address learning depends on the ty pe of MA C address: • Dynamic MA C addresses learned in one VLAN of a PVLAN are replicated in the associated VLANs.
4-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the MAC Addr ess Table Removing Dynamic Address Entries T o remov e all dynamic entries, use the cl ear mac address-table dynamic command in EXEC mo de.
4-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the MA C Address Table Step 3 snmp-server enable traps mac-notification change Enables the switch to send MA C change traps to the NMS.
4-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the MAC Addr ess Table This example shows ho w to specify 172.
4-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the MA C Address Table T o conf igure MA C move not ificat ion, perform this task: This examp le sho ws ho w to specify 172.
4-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the MAC Addr ess Table Configuring MAC Threshold Notification Traps When you conf igure .
4-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the MA C Address Table This ex ample sho ws ho w to specify 172.
4-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the MAC Addr ess Table T o add a static address, perform this task: This exampl e show s how to add the static address c2f3.22 0a.12f4 to the MA C address table.
4-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the MA C Address Table • If you add a unicast MA C address as a static addres s an d con.
4-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the MAC Addr ess Table Disabling MAC Address Learning on a VLAN By default, MA C address learning is en abled on all VLANs on the switch.
4-31 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the MA C Address Table Usage Guidelines Note These guidelines are advisory only . Contact the Cisco solution p rovider team fo r specific solutio n implementa tions.
4-32 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the MAC Addr ess Table Figur e 4-2 Disabling MAC A ddress Lear ning: Point-t o -P oint Links Network Load Bala ncers In this topology , you ha ve tw o devices, one acti ve and one standb y .
4-33 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the MA C Address Table Layer 2 Firewall or Cache In this topolog y , a rewritten Layer 3 pack et is routed back to a Layer 2 f ire wall (or cache) before exiti ng.
4-34 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Managing the MAC Addr ess Table Feature Incompatibility The follo wing features are incompati ble with disabling MA C address learning and do not work properly when the feature is enabled: • 802.
4-35 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Managing the ARP Table Displaying Address Table Entries Y ou can display the MA C address table by usin g one or more of the p rivil eged EXEC commands described in T able 4-4 .
4-36 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Configuring Embedde d CiscoView Supp ort These sections describe the Embedded CiscoV iew suppor t av ailable with Cisco IOS Release 12.
4-37 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Configuring Embedd ed CiscoView Support The follo wing example sho ws how to instal l and configur .
4-38 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Configuring Embedde d CiscoView Supp ort Switch# Switch# archive tar /xtract Cat4000IOS.v5-1.tar /cv extracting Cat4000IOS-5.1.sgz (1956591 bytes) extracting Cat4000IOS-5.
4-39 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 4 Administering the Switch Configuring Embedd ed CiscoView Support For more information about web access to the swit ch, refer to the “Using the Cisco W eb Bro w ser” chapter in the Cisco IOS Conf iguration Fundam entals Conf iguration Guide at this URL: http://www .
4-40 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 4 Administerin g the Switch Configuring Embedde d CiscoView Supp ort.
CH A P T E R 5-1 Software Configuration Guide—Release 15(02)SG OL-23818-01 5 Configuring the Cisco IOS In-Service Software Upgrade Process Note Starting with Cisco IOS 12.2(3 1)SG A, ISSU is supported on the Catalyst 4500. All line cards are supported.
5-2 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Prerequisites to Perfor ming ISSU Prerequisites to Performing ISSU Before performing ISSU, you need to meet these prerequisites: • Image type of the existi ng and target image must match.
5-3 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process About ISSU About ISSU Note Do not make an y hardware changes while p erforming ISSU.
5-4 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process About ISSU Figur e 5-1 Cisco NSF with SSO Networ k Deployment.
5-5 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process About ISSU Figur e 5-2 Cisco NSF with SSO Networ k Deployment: Ent er prise Netw orks NSF Overview Cisco NSF works with the SSO feature in Cisco IOS so ftware.
5-6 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process About ISSU ISSU Process Overview The ISSU process allow s you to perform a Cisco IOS software upgr ade or do wngrade while the system continues to forward packets.
5-7 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process About ISSU An ISSU-capable switch consists of two super visor engines (acti ve and standby) and on e or more line cards.
5-8 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process About ISSU After you ha ve copied the Cisco I OS software to both f ile systems, load the new v ersion of Cisco IOS software onto t he standby supervisor eng ine (see Figure 5-5 ).
5-9 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process About ISSU After a switchov er (NSF or SSO, not RPR), the standb y supervisor engine t akes ov er as the new acti ve supervisor engine (see Figur e 5-6 ).
5-10 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process About ISSU The former activ e supervisor engine is loaded wi.
5-11 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process About ISSU Figur e 5-8 Steps Dur ing the ISSU Process Performing an ISSU Upgrade: 2 Methods There are two ways to perform an ISSU upgrade: manu ally , with four commands; or automatically , with one command.
5-12 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process About ISSU Changeversion Process The issu changev ersion command launches a single-step complete ISSU upgrade c ycle.
5-13 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process About ISSU Changeversion Deploy ment Scenario The typical issu changeversion command usage scenario is for experi enced users with a large installed base.
5-14 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process About ISSU ISSU requires additional infor mation to deter mine co mpatibility between softwa re versions.
5-15 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process SNMP Support for ISSU SNMP for SSO.
5-16 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process Verifying the ISSU Software Installation During the ISSU process, fiv e vali d states exist: disabled, init, load version, r un version, and system reset.
5-17 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process Maintenance Mode = Disabled Manual.
5-18 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process ISSU State = Init Boot Variable .
5-19 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process • Ensure the system (both activ e and standby superv isor engines) is in SSO redundancy mode.
5-20 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process Slot = 2 RP State = Standby ISSU.
5-21 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process The follo wing example sho ws the .
5-22 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process A switchover occurs at this point.
5-23 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process Hardware Mode = Duplex Configured .
5-24 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process This exampl e displays the timer before you stop it.
5-25 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process This example shows how to reset and re load the cur rent standby supervis or engine (slot 1) wi th the new Cisco IOS software v ersion.
5-26 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process Image Version = Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500-ENTSERVICES-M), Version 12.
5-27 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process Perform the follo wing steps at th.
5-28 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process Slot = 6 RP State = Standby ISSU State = Init Operating Mode = Stateful Switchover Current Image = bootflash:x.
5-29 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process *Feb 25 20:41:03.639: %INSTALLER-7-ISSU_OP_SUCC: iss u changeversion successfully executed 'issu runversion' Note Switchov er occurs.
5-30 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process Current Software state = ACTIVE .
5-31 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process Current Software state = ACTIVE Up.
5-32 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process If you abort the process after you enter the issu loadv ersion command, the standb y supervisor engine is reset and reloaded with the orig inal software.
5-33 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process Entering th e issu commitversion comman d at this stage is equal to entering both the issu acceptversion and the issu c om m itversion commands.
5-34 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process Switch# configure terminal Enter configuration commands, one per line. End with CNTL/Z.
5-35 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process 2010 1 262171 32 1 COMPATIBLE 2012.
5-36 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process 2059 1 1 262179 30 1 Y 2067 1 1 .
5-37 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Performing the ISSU Process 2084 ISSU IGMP Snooping clientNon-.
5-38 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Performing the ISSU Process This exampl e show s how to disp.
5-39 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 5 Configuring the Cisco IOS In-Service Software Up grade Process Related Documents This exampl e show s how to disp lay stored .
5-40 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 5 Configur ing the Cisco IOS In-Service Softw are Upgrade Process Related Documents.
CH A P T E R 6-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 6 Configuring Interfaces This chapter describes ho w to configure i nterfaces for the Catalyst 4500 series sw itches. It also provides guidelines, proced ures, and configu ration examp les.
6-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces About Interface Configuration About Interface Configuration By default, all interfaces are enabled. The 10/100-Mbps Ethernet interf aces autonegotiate connection speed and duplex .
6-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Using the interface Command Last clearing of "show interface" counters never Input queue: 0/.
6-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Configuring a Ra nge of Interfaces Step 4 T o begi n conf iguring F ast Ethernet interf ace 5/5, as.
6-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Configuring a Range of Interfaces Note The interface range co mmand wor ks only wi th VLAN interfaces that have been configured with the interface vlan command (the show running-conf iguration command displays the conf igured VLAN interfaces).
6-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Using the Etherne t Management Port Using the Ethernet Management Port This section has this in for.
6-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Using the Ethernet Mana gemen t Port Figure 6-2 Networ k with Routi ng Prot ocols Enable d The specific implementation of Ethernet manageme nt port depend s on the redundancy mod el you are applying.
6-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Using the Etherne t Management Port • T elnet, pa ge 6-8 • TFTP , page 6-8 • FTP , page 6-9 • SSH, page 6-9 Note Command usage specifi c to the mgmtVrf are mentioned belo w .
6-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Using the Ethernet Mana gemen t Port FTP If you want t o use an Fa1 port for an FTP op eration, conf i.
6-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Defining and U sing Interface-Ran ge Macros • Secure Shell (SSH) • DHCP-based autoconf igurati.
6-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Deploying SFP+ in X2 Ports T o define an in terface-rang e macro, en ter this command: This exampl e .
6-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Deploying 10-Gigabit E thernet and Gigabit Ethernet SFP Ports on Supe rvisor Engine V-10GE T o use an SFP+ in an X2 port to obtain 10-Gigabit Et hernet bandwi dth, the Cata lyst 4500 series switch supports OneX Con vertor modules.
6-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Deploying 10-Gigabit Ethernet o r Gigab it Etherne t Po rts on Supervisor Engine 6-E , Supervisor Eng.
6-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Deploying 10-Gigabit E thernet or Gigabit Ethe rnet Ports on Su pervisor Engine 6-E, Sup ervisor Engine 6L-E and In Cisco IOS, ports 1 th rough 18 alw ays exist.
6-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Deploying 10-Gigabit Ethernet o r Gigab it Etherne t Po rts on Supervisor Engine 6-E , Supervisor Eng.
6-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Invoking Shared-Bac kplane Uplink Mode on Supervisor Engine 6- E Gi1/13 inactive 1 full 1000 No Gb.
6-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Configuring Optional Interface Feature s Note This featur e is only av ai lable when a DOM ca pable transceiv er is present and configured for monito ring.
6-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Configuring Optio na l Interfa ce Featu res • If the interface speed is set to 10 or 100 , the duple x mode is set to half duplex b y d ef aul t unless you expli citly conf igure it.
6-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Configuring Optional Interface Feature s T o restore autone gotiation, enter the no speed nonegotiate command in the int erface conf iguration mode. Note For the blockin g ports on the WS-X4416 modul e, do not set the speed to autone gotiate.
6-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Configuring Optio na l Interfa ce Featu res 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0.
6-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Configuring Optional Interface Feature s T o conf igure flo w control, perform this task: This exampl.
6-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Configuring Optio na l Interfa ce Featu res Duplex: full Trunk encap.
6-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Configuring Optional Interface Feature s Configuring Jumbo Frame Support These sections describe jumb.
6-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Configuring Optio na l Interfa ce Featu res If the maximum limit of 32 is reached and an attempt i.
6-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Configuring Optional Interface Feature s Layer 3 and Layer 2 EtherChannels Starting with Release Cisco IOS Release 12.2(25) EW, you can configure all the interfaces in an EtherChannel pro vided that the y hav e the same MTU.
6-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Configuring Optio na l Interfa ce Featu res This exampl e shows ho w to conf igure the MTU size on.
6-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Configuring Optional Interface Feature s Note The default time i s 10ms for E-series supervisor engi nes and line cards (incl uding Catalyst 4900M, Catalyst 4948-E, Superv isor Engine 6-E, and Supe rvior Engine 6L-E).
6-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Configuring Optio na l Interfa ce Featu res Note The follo wing line cards support Auto -MDIX by def ault, when port auto -negotiatio n is enabled: WS-X4424-GB-RJ45, WS-X4448- GB-RJ45,WS-X4548- GB-RJ45 and WS-X4412-2GB-T .
6-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Configuring Optional Interface Feature s Switch(config-if)# end Displaying the Interface Auto-MDIX Co.
6-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Understanding Online Insertion and Removal 0 input packets with dribble condition detected 3552 pa.
6-31 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Monitoring and Main taining the In terface T o display informat ion about the interf ace, enter one o.
6-32 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Monitoring and Main taining the Interface T o shut down an interface and then restart it, perform .
6-33 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Monitoring and Main taining the In terface Configuring Link Status Event Notification for an Interfac.
6-34 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Monitoring and Main taining the Interface The follo wing exampl e displays the conf iguration and logging message output for link status and trunk status loggin g ev ents: // // The global link status and trunk status logging events are enabled.
6-35 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 6 Configuring Interfaces Monitoring and Main taining the In terface This command clears all the configurat i ons and shut do wn the interface: Switch# show run interface fastethernet 3/5 Building configuration.
6-36 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 6 Config uring Inter faces Monitoring and Main taining the Interface.
CH A P T E R 7-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 7 Checking Port Stat us and Connectivity This chapter describes how to check switch port stat us and connecti vity on the Catalyst 4500 series switch.
7-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 7 Check in g Port Status and Connectivity Checking Interfaces Status This exampl e show s how to ch eck module status for all modules on your switch: Switch# show module all Mod Ports Card Type Model Serial No.
7-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 7 Checking Port Status and Connec tivity Displaying MAC Addresses Displaying MAC Addresses In addition to displaying the MA C a.
7-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 7 Check in g Port Status and Connectivity Checking Cable Status U si ng Time Domain Reflectometer Note Four pair s of standard cate gory 5 cable exist. Each pair can assume one of the follo wing states: open (not connected), brok en, shorted, or terminated.
7-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 7 Checking Port Status and Connec tivity Using Telnet Note After this command is deprecated, use the diagnostic star t and the show diagnostic re sult commands to run the TDR test an d display the test results.
7-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 7 Check in g Port Status and Connectivity Changing the Logout Timer This example sh ows ho w to establish a T elnet connection from the switch to t he remote host named labsparc: Switch# telnet labsparc Trying 172.
7-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 7 Checking Port Status and Connec tivity Using Ping 2 vty 1 00:00:00 3 vty 2 00:00:00 4 vty 3 00:00:00 5 vty 4 00:00:00 Interfa.
7-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 7 Check in g Port Status and Connectivity Using IP Traceroute Running Ping T o ping another de vice on the network from the sw.
7-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 7 Checking Port Status and Connec tivity Using Layer 2 Traceroute drops the datagram and sends b ack an Internet Control Messag e Protocol (ICMP) Time-Exceeded message to the sender .
7-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 7 Check in g Port Status and Connectivity Using Layer 2 Traceroute These sections describe ho w to us e the Layer 2 tracerout.
7-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 7 Checking Port Status and Connec tivity Configuring ICMP Running Layer 2 Traceroute T o display the physical path that a pack.
7-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 7 Check in g Port Status and Connectivity Configuring ICMP Enabling ICMP Protocol Unreachable Messages If the Cisco IOS softwa re receiv es a nonbroadcast packet that uses an unkno wn protocol, it sends an ICMP Protocol Unreachable message back to t he source.
7-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 7 Checking Port Status and Connec tivity Configuring ICMP T o enable the sending of ICMP Redirect messages if the Cisco IOS so.
7-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 7 Check in g Port Status and Connectivity Configuring ICMP.
CH A P T E R 8-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 8 Configuring Supervisor Engine Redundancy Using RPR and SSO Catalyst 4500 series switche s allow a redundant superviso r engine to take over if the activ e supervisor engine fails.
8-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 8 Configuring Supervi sor Engine Redundancy Using RPR and SSO About Supervisor Engine Re du ndancy About Supervisor Engine Red.
8-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 8 Configuring Superv isor Engine Redunda ncy Using RPR and SSO About Supervisor Engine Red und ancy RPR Operation RPR is supported in Cisco IO S Release 12.2(12c)EW and l ater releases.
8-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 8 Configuring Supervi sor Engine Redundancy Using RPR and SSO About Supervisor Engine Re dundancy Synchronizatio n • 802.
8-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 8 Configuring Superv isor Engine Redunda ncy Using RPR and SSO Supervisor Engine Redun dan cy Guidelines and Restrictions Note Y ou cannot enter CLI co mmands on the redundant su pervisor engine console.
8-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 8 Configuring Supervi sor Engine Redundancy Using RPR and SSO Supervisor Engine Redun dancy Guideline s and Restric tions C4K_REDUND ANCY -2-IOS_ VERSION_CHECK_F AIL and ISSU-3-PEER_IMA GE_INCOMP A TIBLE messages to app ear because the peer image is listed as incompatible.
8-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 8 Configuring Superv isor Engine Redunda ncy Using RPR and SSO Supervisor Engine Redun dan cy Guidelines and Restrictions • In Cisco IOS Release 12.
8-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 8 Configuring Supervi sor Engine Redundancy Using RPR and SSO Configuring Supe rvisor Engine Redunda ncy • Conf iguration ch.
8-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 8 Configuring Superv isor Engine Redunda ncy Using RPR and SSO Configuring Supervisor En gine Red undancy This exampl e shows h.
8-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 8 Configuring Supervi sor Engine Redundancy Using RPR and SSO Configuring Supe rvisor Engine Redunda ncy Manual Swact = enabl.
8-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 8 Configuring Superv isor Engine Redunda ncy Using RPR and SSO Configuring Supervisor En gine Red undancy Y ou exit the virtual console wi th the exit or quit commands.
8-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 8 Configuring Supervi sor Engine Redundancy Using RPR and SSO Configuring Supe rvisor Engine Redunda ncy Note Configurati on changes made to the acti ve supervisor engine through SNMP are n ot syn c hron ized to the redundant superviso r engine.
8-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 8 Configuring Superv isor Engine Redunda ncy Using RPR and SSO Performing a Manual Switchover Performing a Manual Switchover T.
8-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 8 Configuring Supervi sor Engine Redundancy Using RPR and SSO Performing a So ftwa re Upgrade The follo wing scenario is not supported: An acti ve supervisor engine running Cisco IOS Release 12.
8-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 8 Configuring Superv isor Engine Redunda ncy Using RPR and SSO Manipula ting Bootflash on the Redun dan t Supervisor Engine Sw.
8-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 8 Configuring Supervi sor Engine Redundancy Using RPR and SSO Manipulating Bootflash on the Redundant Supe rvisor Engine Switch# format slaveslot0: or Switch# format slavebootflash: Form at s th e slot0: device on the redundant supervisor engine.
CH A P T E R 9-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 9 Configuring Cisco NSF with SSO Supervisor Engine Redundancy This chapter describes h ow to confi gure supervisor engin e redundancy using Cisco nonst op forwarding (NSF) with stateful switchover (SSO).
9-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 9 Configurin g Cisco NS F with SSO Supervisor Engine Redu ndancy About NSF with SSO Supe rvisor Engine Redu ndancy • Routing.
9-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 9 Configuring Cisco NS F with SSO Supervisor Engine Redundancy About NSF with SSO Supervisor En gine Red undancy T able 9-1 lists t he supervisor engines and Catalyst 4 500 seri es switches that support NSF- awar eness: Starting with Cisco IOS Rel ease 12.
9-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 9 Configurin g Cisco NS F with SSO Supervisor Engine Redu ndancy About NSF with SSO Supe rvisor Engine Redu ndancy NSF with SS.
9-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 9 Configuring Cisco NS F with SSO Supervisor Engine Redundancy About NSF with SSO Supervisor En gine Red undancy NSF Operation NSF always runs with SSO and pro v ides redundancy for Layer 3 traf fi c.
9-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 9 Configurin g Cisco NS F with SSO Supervisor Engine Redu ndancy About NSF with SSO Supe rvisor Engine Redu ndancy help reb uild the routing tables.
9-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 9 Configuring Cisco NS F with SSO Supervisor Engine Redundancy About NSF with SSO Supervisor En gine Red undancy OSPF Operation.
9-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 9 Configurin g Cisco NS F with SSO Supervisor Engine Redu ndancy About NSF with SSO Supe rvisor Engine Redu ndancy IETF IS-IS .
9-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 9 Configuring Cisco NS F with SSO Supervisor Engine Redundancy About NSF with SSO Supervisor En gine Red undancy quickly notif ied of the NSF restart.
9-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 9 Configurin g Cisco NS F with SSO Supervisor Engine Redu ndancy Configuring NSF with SSO Supervisor Engin e Re dundancy • All OSPF networking de vices on the same network segment must be NSF-aw are (running an NSF software image).
9-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 9 Configuring Cisco NS F with SSO Supervisor Engine Redundancy Configuring NSF with SSO Supervisor Engine Redund ancy Switch(c.
9-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 9 Configurin g Cisco NS F with SSO Supervisor Engine Redu ndancy Configuring NSF with SSO Supervisor Engin e Re dundancy Configuring BGP NSF Note Y ou m ust configure BGP graceful restart on all peer devi ces participating in BGP NSF .
9-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 9 Configuring Cisco NS F with SSO Supervisor Engine Redundancy Configuring NSF with SSO Supervisor Engine Redund ancy Step 3 O.
9-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 9 Configurin g Cisco NS F with SSO Supervisor Engine Redu ndancy Configuring NSF with SSO Supervisor Engin e Re dundancy nsf network 192.168.20.0 0.0.0.255 area 0 network 192.168.
9-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 9 Configuring Cisco NS F with SSO Supervisor Engine Redundancy Configuring NSF with SSO Supervisor Engine Redund ancy Verifying IS-IS NSF T o verif y IS-IS NSF , you must check that the NSF function is conf igured on the SSO- e nabled netw orking device.
9-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 9 Configurin g Cisco NS F with SSO Supervisor Engine Redu ndancy Configuring NSF with SSO Supervisor Engin e Re dundancy Step 3 If the NSF conf i gurat ion is set to ietf , enter the show isis nsf command to v erify that NSF is enabled o n the de vice.
9-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 9 Configuring Cisco NS F with SSO Supervisor Engine Redundancy Configuring NSF with SSO Supervisor Engine Redund ancy Configur.
9-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 9 Configurin g Cisco NS F with SSO Supervisor Engine Redu ndancy Configuring NSF with SSO Supervisor Engin e Re dundancy.
CH A P T E R 10-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 10 Environmental Monitoring and Power Management Note Before reading this chapter , read the “Preparing for In stallation” section of the Catalyst 4500 Series Installati on Guide .
10-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment About Environmental Monito rin g En vironmental monitoring of chassis components pro vides early warning indications of possible component failure.
10-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 10 Environmental Monitoring and Power Man agement About Environmental Monitoring Conditions on Supervisor Engi ne 6-E and Supervisor Engine 6L-E Supervisor Engine 6-E, Supervisor Engine 6L-E, and its associated line cards suppor t multiple temperature sensors per c ard.
10-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment About Environmental Monito rin g In Case 4, the stan dby supervisor eng ine takes ov e r wh en the active engine resets itsel f.
10-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 10 Environmental Monitoring and Power Man agement About Environmental Monitoring When the system issues a major alarm, it starts a timer whose duration depends on the alarm.
10-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment Power Management Power Management This section describes the po wer management feature in the Catalyst 4500 series swi tches.
10-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 10 Environmental Monitoring and Power Man agement Power Management Supported Power Supplies Y ou can select from sev eral different po wer supplies to ensure that you hav e enough power for the modules installed in your switch.
10-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment Power Management The follo wing example sho ws the output for the show po.
10-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 10 Environmental Monitoring and Power Man agement Power Management Y our swi tch hardware configuratio n dictates wh ich power supply or supplies yo u should use .
10-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment Power Management (for lack of po wer) into reset mode. The supervisor engine and modules for which there is adequate po wer always remain enabled, with no disrup tion of network connecti vity .
10-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 10 Environmental Monitoring and Power Man agement Power Management • Dual supervisor engines: WS-X45-Sup 6-E and WS-X45-Sup.
10-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment Power Management The follo wing example sho ws how to set the po wer man.
10-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 10 Environmental Monitoring and Power Man agement Power Management The follo wing example sho ws how to set the po wer manage.
10-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment Power Management Special Considerations for the 4200 W AC and 6000 W AC Power Supplies The 4200 W A C and 6000 W A C power sup ply has two input s: each can be pow ered at 110 or 220 V .
10-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 10 Environmental Monitoring and Power Man agement Power Management Note When the system is po wered with a 4200 W or 6000 W p.
10-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment Power Management In combined mode, all t he inputs to the chassis must be at the same v oltage. T able 10-10 illu strates how t he 6000 W A C power supply is e valuated in comb ined mode.
10-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 10 Environmental Monitoring and Power Man agement Power Management If you have max input s 3 configured with four “go od”.
10-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment Power Management PS1-2 110V good PS2 PWR-C45-4200ACV AC 4200W good good .
10-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 10 Environmental Monitoring and Power Man agement Power Management The same conf iguration is applied to both po wer slots. For e xample, if you set the dc power input to 1000 W , the switch e xpects 1000 W as the external DC source fo r both slot 1and slot 2 (if present).
10-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment Power Management The output of the show po wer detail and show power mod.
10-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 10 Environmental Monitoring and Power Man agement Power Management Switch# show power module sh power module Watts Used of Sy.
10-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment IEEE 802.3az Energy Efficient Ethernet Note After you enter no hw-mod mod x power command and OIR the linecard, the configuration persists and is v alid for an y slot in the chassi s it is applied to.
10-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 10 Environmental Monitoring and Power Man agement IEEE 802.3az Energy Efficient Ethernet Determining EEE Capability T o deter.
10-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 10 Environmental M onitoring a nd Power Manage ment IEEE 802.3az Energy Efficient Ethernet.
CH A P T E R 11-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 11 Configuring Power over Ethernet Note Before reading this chapter , read the “Preparing for In stallation” section of the Catalyst 4500 Series Installati on Guide .
11-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 11 Config uring Power ov er Ethernet About Power over Etherne t the PoE capabilities of in divid ual power suppl ies.
11-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 11 Configuring Power over Ethernet Power Management Mode s Power Management Modes If your switch has a module capabl e of providing PoE to end statio ns, you can set each interface on the module to automati cally detect and apply PoE i f the end station requires po wer .
11-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 11 Config uring Power ov er Ethernet Power Management Modes Note If you set a non-PoE-capable interface to automatically detect and apply power , an error message indicates that th e confi guration is not v alid.
11-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 11 Configuring Power over Ethernet Configuring Power Co ns umption fo r Powered Devices on an Interface Configuring Power Cons.
11-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 11 Config uring Power ov er Ethernet Displaying the Operationa l Status for an Interface Interface AdminPowerMax AdminConsumption (Watts) (Watts) ---------- --------------- -------------------- Gi7/1 15.
11-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 11 Configuring Power over Ethernet Displaying all PoE Detection and Removal Events Fa3/1 auto on 17.3 15.4 Ieee PD 0 Fa3/2 auto on 4.5 4.0 Ieee PD 1 Fa3/3 auto on 7.1 6.3 Cisco IP Phone 7960 0 Fa3/4 auto on 7.
11-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 11 Config uring Power ov er Ethernet Displaying the PoE Consumed by a Module Displaying the PoE Consumed by a Module A Catalyst 4500 series switch can measure the act ual PoE consumption for an 802.
11-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 11 Configuring Power over Ethernet Displaying the PoE Co nsumed by a M odule The follo wing example uses the show power detai l and show power inline commands to di splay the PoE consumption for an 80 2.
11-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 11 Config uring Power ov er Ethernet Displaying the PoE Consumed by a Module Switch# show power inline g1/1 Module 1 Inline .
11-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 11 Configuring Power over Ethernet Displaying the PoE Co nsumed by a M odule switch# show power inline module 2 Chassis Inlin.
11-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 11 Config uring Power ov er Ethernet PoE Policing and Monitoring Gi2/45 auto off 0.0 0.0 n/a n/a Gi2/46 auto off 0.0 0.0 n/a n/a Gi2/47 auto off 0.0 0.0 n/a n/a Gi2/48 auto off 0.
11-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 11 Configuring Power over Ethernet PoE Policing and M onitoring Configuring Power Policing on an Interface The default polici.
11-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 11 Config uring Power ov er Ethernet PoE Policing and Monitoring Interface Admin Oper Admin Oper Cutoff Oper State State Police Police Power Power --------- ------ ---------- ---------- ---------- ------ ----- Gi2/1 auto errdisable errdisable overdrawn 0.
11-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 11 Configuring Power over Ethernet Enhanced Power PoE Supp ort on the E-Series Chassis The errdisable autorecov ery mechanism.
11-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 11 Config uring Power ov er Ethernet Enhanced Power PoE Support on th e E-Series Chassis The default po wer inline conf igur.
CH A P T E R 12-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 12 Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant This chapter describes ho w to install Network Assistant on the w orkstation and conf igure the Catalyst 4500 (or 4900) series switch to communi cate with Network Assistant.
12-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant About Netw ork Assistan t Note For information on.
12-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Ci sco Network Ass istant Network Assistant-R elated Parameters and Their .
12-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant Configuring Your Sw itch for Network Assista nt C.
12-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Ci sco Network Ass istant Configuring Your Switch for N etwor k Assistant Note If you ha ve enabled clusterin g, disable clustering before conf iguring a community (see Ta b l e 1 2 - 2 ).
12-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant Managing a Networ k Using Community Managing a Ne.
12-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Ci sco Network Ass istant Managing a Network Using Co mmunity This section descri bes the guidelines and requiremen ts you should understand before yo u create a community .
12-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant Managing a Networ k Using Community Note Do not disable CDP on cand idates, members, or on an y network dev ices that you might w ant Network Assistant to discover .
12-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Ci sco Network Ass istant Managing a Network Using Co mmunity Access Modes.
12-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant Converting a Cluster into a Community Note If yo.
12-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Ci sco Network Ass istant Managing a Netwo rk Using Cluster Note If you ha ve enabled clus tering, you should disable clusteri ng before conf iguring a community ( see T able 12-2 ).
12-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant Managing a Network U sing Cluster • Has 16 VTY lines. Note On a Catalyst 4500 series switch, the default is 4 li nes.
12-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Ci sco Network Ass istant Configuring Network Assistant in Community or C.
12-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant Configuring Network Assistant in Community or Cluster Mo de Step 6 Switch(config-if)# switchport access vlan vlan_id Enables the selected interface to be in the specif ied VLAN.
12-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Ci sco Network Ass istant Configuring Network Assistant in Community or C.
12-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant Configuring Network Assistant in Community or Cl.
12-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Ci sco Network Ass istant Configuring Network Assistant in Community or C.
12-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant Configuring Network Assistant in Community or Cl.
12-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Ci sco Network Ass istant Configuring Network Assistant in Community or C.
12-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 12 Configuring the Catalyst 4500 Series Switch with Cisco Network Assistant Configuring Network Assistant in Community or Cl.
CH A P T E R 13-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 13 Configuring VLANs, VTP, and VMPS This chapter describes VLANs on Catalyst 4500 se ri es switches. It a lso describes h ow to enable the VLAN T runking Protocol (VTP) and to conf igure th e Catalyst 4500 series switch as a VMPS client.
13-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLANs Note VTP version 3 upd ates do not pass through promiscuous tru nk ports.
13-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLANs • VLAN state (activ e or suspended) • Maximum transmission unit (MTU) for the V.
13-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLANs T able 13-1 describes the uses f or VLAN ranges. Configurable Normal-R ange VLAN Parameters Note Ethernet VLANs 1 and 1006 through 4094 use onl y default v alues.
13-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLANs Note Catalyst 4500 series switches do n ot support T oken Ring or FDDI med ia. The switch does not forw ard FDDI, FDDI-NET , T rCRF , or T rBRF traf fic, b ut it does propagate the VLAN co nfigu ration by using VTP .
13-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLANs Configuring VLANs in Gl obal Configuration Mode If the switch is in VTP serv er or transparent mode (see the “VLA N T runking Protocol” section on page 13-7 ), you can conf igure VLANs in global and VLAN confi guration modes.
13-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Trunking Protocol • Because Layer 3 ports and some software features require internal VLANs allocated from 1006 and up, conf igure extended- range VLANs starting with 4094 and w ork downward.
13-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Trunkin g Protocol About VTP VTP is a Layer 2 messaging protocol that maintains VLAN conf iguration consistency by managing the addition, delet i on , and renaming of V LANs within a VTP domain.
13-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Trunking Protocol Understanding VTP Modes Y ou can configure a Cat alyst 4500 series.
13-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Trunkin g Protocol Note Catalyst 4500 series switches do not su pport T oken Ring or FDDI med ia.
13-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Trunking Protocol database information.
13-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Trunkin g Protocol Figur e 13-3 Flooding T raffic wi th VTP Pr uning Enabling VTP pruning o n a VTP server enable s pruning for the enti re management domain.
13-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Trunking Protocol • In a T ok en Ring en vironment, you must enable VTP v ersion 2 or v ersion 3 for T oken Ring VLAN switching to functio n properly .
13-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Trunkin g Protocol Configuring VTP These sections describe ho w to configure VTP: .
13-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Trunking Protocol This exampl e show s how to co nfigu re a VTP password in EXEC mode: Switch# vtp password WATER Setting device VLAN database password to WATER.
13-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Trunkin g Protocol Caution VTP versi on 1 and VTP v ersion 2 are not i nteropera ble on net work de vices in the same VTP domain. Every netw ork de vice in the VTP domai n must use th e same VTP v e rsion.
13-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Trunking Protocol Note When VTP is disabled, you can enter VLAN conf iguration command s in config urati on mode instead of the VLAN database mode and the VLAN configuratio n is stored in the startup conf iguration f ile.
13-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Trunkin g Protocol This exampl e show s an example of th e VTP configurati on param.
13-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Trunking Protocol Starting a Takeover This process applies to VTP v e rsion 3 only .
13-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Membership Policy Server Request advertisements transmitted : 3 Number of config re.
13-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Membership Policy Server About VMPS These subsections describe what a VMPS server d.
13-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Membership Policy Server Security Modes fo r VMPS Server VMPS operates in three dif ferent modes.
13-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Membership Policy Server Fallback VLAN Y ou can configure a f allback VLAN name on a VMPS server .
13-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Membership Policy Server Multiple hosts (MA C addresses) can be acti v e on a dy namic po rt if all are in the same VLAN.
13-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Membership Policy Server T o defi ne the primary and second ary VMPS on a Ca talyst.
13-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Membership Policy Server This example sho ws how to conf igure a dy namic access port and to verify the entry: Switch# configure terminal Enter configuration commands, one per line.
13-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Membership Policy Server This exampl e show s how to ch ange the reconf irmation interv al to 60 minutes and v erify the change: Switch# configure terminal Enter configuration commands, one per line.
13-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Membership Policy Server Administering and Monitoring the VMPS Y ou can display the.
13-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Membership Policy Server Troubleshooting Dynamic Po rt VLAN Membership VMPS errdisables a dynamic port under the foll owin g conditions: • The VMPS is in secure mode, and it does not al low the host to co nnect to the port.
13-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Membership Policy Server Figur e 13-4 Dynamic P ort VLAN Me mbership Configur ation T wo topologies are possible.
13-31 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Membership Policy Server Figur e 13-6 T opolog y with an End Station At tached to a.
13-32 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Membership Policy Server d. Assign the port dynamic VLAN membersh ip: switch(config-if)# switchport access vlan dynamic e. Return to pri vileged EXEC mode: switch(config-if)# exit switch# Step 3 Connect End Station 2 o n port Fa2 /1.
13-33 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 13 Config uring VLANs, VTP, and VMPS VLAN Membership Policy Server !MAC Addresses ! vmps-mac-addrs ! ! address <addr> vlan-name <vlan_name> ! address 0012.2233.4455 vlan-name hardware address 0000.
13-34 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 13 Configuring VLANs, VTP, and VMPS VLAN Membership Policy Server.
CH A P T E R 14-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 14 Configuring IP Unnumbered Interface This chapter discusses the IP Unnum bered In terface feature, whi ch allows you to enable IP p rocessing on an interface with out assigning an e xplicit IP address.
14-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 14 Configurin g IP Unnumbered Interface About IP Unnumbered Inte rfac e Supp ort IP Unnumbered Interface Support w ith DHCP S.
14-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 14 Configuring IP Unnumbered Interface IP Unnumbered Configura tion Guide lines and Restrictions Figur e 14-2 F orm at of the Ag ent Remote ID Suboption T able 14-1 describes the agent remote ID su boption fields displaye d in Figure 14-2 .
14-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 14 Configurin g IP Unnumbered Interface Configuring IP Unnu mb ered Interface Suppor t with DHCP Server • The option to add dhcp host r o utes as connecte d routes is available in Cisco IOS.
14-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 14 Configuring IP Unnumbered Interface Configuring IP Unnumbered Interfac e Support with Conne cted H ost Polling Configuring .
14-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 14 Configurin g IP Unnumbered Interface Displaying IP Unnumb ered Interface Settings The follo wing example sho ws how to enable IP proce ssing and connected host po lling on F ast Ethernet interface 6/2.
14-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 14 Configuring IP Unnumbered Interface Troubleshooting IP Unnumbered In te rface T o display status of an unnumber ed interfac.
14-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 14 Configurin g IP Unnumbered Interface Related Documents When an IP unnumbered interfac e shares the IP a ddress of a loopback interface whose pref ix is advertised in an OSPF netw ork, you must modify the loop back interface as a po int-to-point interface.
CH A P T E R 15-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 15 Configuring Layer 2 Ethernet Interfaces This chapter describes how to use the command-lin e interface (CLI) to configure Fast Ethernet and Gigabit Ethernet interf aces for Laye r 2 switching on Catalyst 4500 se ries switches.
15-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 15 Configuring Layer 2 Ethernet Interfaces About Layer 2 E thernet Switching Layer 2 Ethernet Switching Catalyst 4500 series switches su pport simultaneous, parallel conn ections between Layer 2 Et hernet segments.
15-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 15 Configuring Layer 2 Ether net Interfaces About Layer 2 Ethernet Switching VLAN Trunks A trunk is a point-to-poi nt link between on e or more Et hernet switch interfaces and another netwo rking device such as a router or a switch.
15-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 15 Configuring Layer 2 Ethernet Interfaces Default Layer 2 E thernet Interface Configuration Layer 2 Interface Modes T able 15-2 list s the Layer 2 interface modes and describe s ho w they function o n Ethernet interfaces.
15-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 15 Configuring Layer 2 Ether net Interfaces La ye r 2 Interface Configuratio n Guidelines an d Restrictions Layer 2 Interface .
15-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 15 Configuring Layer 2 Ethernet Interfaces Configuring Ethe rnet Interfaces for Laye r 2 Switching Configuring an Ethernet Interface as a Layer 2 Trunk Note The default for Lay er 2 interfaces is switchport mode dynamic auto .
15-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 15 Configuring Layer 2 Ether net Interfaces Configuring Ethernet Interfaces for Laye r 2 Switching This example sho ws ho w to conf igure the Fast Ethern et interface 5/8 as a n 802.
15-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 15 Configuring Layer 2 Ethernet Interfaces Configuring Ethe rnet Interfaces for Laye r 2 Switching This exampl e show s how to v erify the trunk configu ration: Switch# show interfaces fastethernet 5/8 trunk Port Mode Encapsulation Status Native vlan Fa5/8 desirable n-802.
15-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 15 Configuring Layer 2 Ether net Interfaces Configuring Ethernet Interfaces for Laye r 2 Switching This example sho ws how to conf igure the Fast Ethe rnet interface 5/6 as an access port in VLAN 200: Switch# configure terminal Enter configuration commands, one per line.
15-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 15 Configuring Layer 2 Ethernet Interfaces Configuring Ethe rnet Interfaces for Laye r 2 Switching This e xample sho ws how to cl ear the Layer 2 co n figuration on the Fast Ethernet interface 5/6: Switch# configure terminal Enter configuration commands, one per line.
CH A P T E R 17-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 17 Configuring Auto SmartPort Macros This chapter describes ho w to configur e and apply Auto SmartPor t macros on the Catalyst 4500 series switch.
17-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 17 Configurin g Auto SmartPort Mac ros Configuring Auto SmartPor ts System b uilt-in e vent triggers exist for vario us devi ces based mostly on CDP and LLDP messages ( T able 17-1 ) and some MA C address.
17-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 17 Configuring Auto SmartPor t Macros Configuring Auto SmartPorts Enabling Auto SmartPorts Note By default, Aut o SmartPort is disab led globally .
17-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 17 Configurin g Auto SmartPort Mac ros Configuring Auto SmartPor ts T able 17-2 sho ws the Auto SmartPorts built- in macros that are embedded in the switch soft ware. Note By default, the b uilt-in ev ent triggers are mapped to the built-in macro s.
17-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 17 Configuring Auto SmartPor t Macros Configuring Auto SmartPorts • If the macro conflicts wit h the original conf iguration, some macro commands might not be applied , or some antimacro co mmands might not be applied.
17-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 17 Configurin g Auto SmartPort Mac ros Configuring Auto SmartPor ts Configuring Auto SmartPorts Built-in Macro Parameters The switch automatically maps from b uilt-in ev en t triggers to bu ilt-in macros.
17-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 17 Configuring Auto SmartPor t Macros Configuring Auto SmartPorts The no macro auto execute e vent trigger {[ buil t in built-in macr o name [ parameter=valu e ]] | [[ par ameter = value ] { function contents } ]} command deletes th e mapping.
17-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 17 Configurin g Auto SmartPort Mac ros Configuring Auto SmartPor ts T o conf igure an even t trigger , perform this task: Use the no shell trigger identif ier global conf iguration command to delete the e vent trigger .
17-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 17 Configuring Auto SmartPor t Macros Configuring Auto SmartPorts Configuring Mapping Between User-Defined Triggers and Built-in Macros Y ou need to map the user -defined trigger to either a b uilt-in macro or user- defined macro.
17-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 17 Configurin g Auto SmartPort Mac ros Configuring Auto SmartPor ts Inside a user-def ined mac ro, besides parameters specified through macro auto execute trigger parameter -name=value .
17-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 17 Configuring Auto SmartPor t Macros Configuring Auto SmartPorts This example sho ws how to map a user-def ined even t trigger called Cisco Digital Media Player (DMP) to a user -defined macro .
17-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 17 Configurin g Auto SmartPort Mac ros Configuring Auto SmartPor ts T able 17-4 lists the supported shell keywords your can app ly in your mac ros and anti macro statem ents. T able 17-5 list s the shell ke ywords that are not suppor ted in macros and antimacros.
17-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 17 Configuring Auto SmartPor t Macros Displaying Auto SmartPorts Displaying Auto SmartPorts T o display the Auto SmartPorts and static SmartPorts macros, use on e or more of the pri vileged EXEC commands in Ta b l e 1 7 - 6 .
17-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 17 Configurin g Auto SmartPort Mac ros Displaying Auto SmartPorts function CISCO_AP_AUTO_SMARTPORT () { if [[ $LINKUP -eq YE.
CH A P T E R 16-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 16 Configuring SmartPort Macros This chapter describes ho w to configu re and apply SmartPort and Stati c SmartPort macros on your switch.
16-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 16 Con figuring SmartPort Macros Configuring SmartPort Macr os Cisco-default Smart Port macr os are embedded in the switch softw a re (see T able 16- 1 ). Y ou can display these macros and the commands they contain b y using the show parser ma cro user EXEC command.
16-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 16 Configuring SmartPort Macros Configuring SmartPort Macros Passing Parameters Through the Macro Some commands might not be suff iciently generic for all the interf aces; for example, VLAN ID for Layer 2 interfaces and the IP address for Layer 3 inte rface.
16-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 16 Con figuring SmartPort Macros Configuring SmartPort Macr os Default SmartPort Macro Configuration This section illustrates th e de fa ult con f igurations for the four supported macros.
16-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 16 Configuring SmartPort Macros Configuring SmartPort Macros cisco-phone This is the e xample for the cisco-phone macro: # VoI.
16-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 16 Con figuring SmartPort Macros Configuring SmartPort Macr os # Recommended value for native vlan (NVID) should not be 1 swi.
16-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 16 Configuring SmartPort Macros Configuring SmartPort Macros • Use the macro global trace macr o-name global configur ation command or th e macro trace macr o-name interface configuration command to apply and debug a macro to find any syntax or configuration errors.
16-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 16 Con figuring SmartPort Macros Configuring SmartPort Macr os Creating SmartPort Macros T o create a SmartPort macro, perform this task: Command Purpose Step 1 Switch# configure terminal Enters global conf iguration mode.
16-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 16 Configuring SmartPort Macros Configuring SmartPort Macros Applying SmartPort Macros T o apply a SmartPort macro, perform t his task: Command Purpose Step 1 Switch# configure terminal Enters global conf iguration mode.
16-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 16 Con figuring SmartPort Macros Configuring SmartPort Macr os Y ou can delete a global macro-applied conf iguration on a switch onl y by entering th e no v ersion of each command that is in the macro.
16-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 16 Configuring SmartPort Macros Configuring SmartPort Macros cisco-desktop This exampl e show s how to us e the system-defined macro cisco-desktop to assign a v alue of 35 to the access VLAN of the Fast Ethernet interface 2/9.
16-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 16 Con figuring SmartPort Macros Configuring SmartPort Macr os Macro type : customizable # VoIP enabled interface - Enable d.
16-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 16 Configuring SmartPort Macros Configuring SmartPort Macros # speed up convergence switchport mode trunk switchport nonegotiate # Configure qos to trust this interface auto qos voip trust # 802.
16-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 16 Con figuring SmartPort Macros Displaying SmartPort Macros Displaying SmartPort Macros T o display the SmartPort macros, use one o r more of the pri vileged EXEC commands in Ta b l e 1 6 - 2 .
16-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 16 Configuring SmartPort Macros Configuring Static SmartPort Macros Static SmartPort Configuration Guidelines • When a macro is applied globally to a switch or to a swit ch interface, all existing con figur ation on the interface is retained.
16-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 16 Con figuring SmartPort Macros Configuring Sta tic SmartPort Macros Y ou can only delete a global macro-applied conf iguration on a switch b y enter ing the no version of each command in the macro.
CH A P T E R 18-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 18 Configuring STP and MST This chapter descri bes how to configure the Spanning Tree Protocol (STP) on a Cata lyst 4500 se ries switch. This chapter also describes ho w to config ure the IEEE 802.
18-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T About STP A Catalyst 4500 series switch us e STP (the IEEE 802 .1D bridge protocol) on all VLANs. By default, a single spanning t ree runs on each conf igured VLAN (pro vided you do not manually d isable the spanning tree).
18-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST About STP Extended System ID Extended system IDs are VLAN IDs between 1025 and 4096. Cisco IOS Releases 12.1(1 2c)EW and later releases support a 12-bit e xtended system ID f ield as part of the bridge ID (see Ta b l e 1 8 - 2 ).
18-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T About STP • The identif ier of the transmitting port • V alues for the hello , forward dela.
18-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST About STP Creating the STP Topology The goal of the spanning tree algo rithm is to mak e th e most direct link the roo t port.
18-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T About STP • Disabled—In this state, th e Layer 2 interface does not participate i n spanning tree and does not forward frames.
18-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST Default STP Co nfiguration For enabling informat ion, see “Enabling Per -VLAN Rapid Spanning T ree” on page 20. Default STP Configuration T able 18-4 sho ws the default spannin g tree conf iguration.
18-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T Configuring STP • Disabling Sp anning T ree Protocol, page 18-20 • Enabling Per-VLAN Rapid .
18-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST Configuring STP Designated bridge has priority 32768, address 00e0.
18-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T Configuring STP Configuring the Root Bridge A Catalyst 4000 family switch main tains an instan ce of spanni ng tree for each acti ve VLAN conf ig ured on the switch.
18-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST Configuring STP VLAN1 is executing the ieee compatible Spanning Tree protocol Bridge Identifier has priority 32768, address 0030.94fc.0a00 Configured hello time 2, max age 20, forward delay 15 Current root has priority 32768, address 0001.
18-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T Configuring STP Port 324 (FastEthernet6/4) of VLAN1 is listening Port path cost 19, Port priority 128, Port Identifier 129.68. Designated root has priority 8192, address 0030.
18-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST Configuring STP Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32768 Address 0003.6b10.e800 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 Interface Role Sts Cost Prio.
18-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T Configuring STP Switch(config-if)# spanning-tree port-priority 100 Switch(config-if)# end Swit.
18-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST Configuring STP Designated root has priority 32768, address 0003.6b10.ebec Designated bridge has priority 32768, address 0003.6b10.ebec Designated port id is 128.
18-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T Configuring STP This e xample sho ws how to ch ange the spannin g tree port cos t of a Fast Et.
18-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST Configuring STP Number of transitions to forwarding state: 1 BPDU: sent 0, received 13513 <...output truncated...> Switch# Note The show spanning-tr ee command displays only information f or ports with an acti ve link (green li ght is on).
18-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T Configuring STP T o conf igure the spanning tr ee hello time of a VLAN, perform this task: Thi.
18-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST Configuring STP This exampl e shows ho w to verify the conf iguration: Switch# show spanning-tree .
18-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T Configuring STP Disabling Spanning Tree Protocol T o disable spanning t ree on a per-VLAN basi.
18-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST Configuring STP Switch# clear spanning-tree detected-protocols The follo wing example sho ws how t.
18-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T About MST About MST The follo wing sections describe how MST w orks on a Catalyst 4000 fami ly switch: • IEEE 802.1s MST , page 18-22 • IEEE 802.
18-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST About MST • MST establishes and mai ntains additional spanning trees within each MST region. These spanni ng trees are termed MST instances (MSTIs).
18-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T About MST RSTP Port Roles In RSTP , the port roles are defined as follo ws: • Root—A forw arding port elected for the spanning tree topolog y .
18-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST About MST Figur e 18-2 Networ k with Inter connected S ST and M ST Region s T o STP running in t h.
18-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T About MST MST Instances W e support 65 instances including i nst ance 0. Each spanning tree instance is identified by an instance ID that ranges from 0 to 40 94.
18-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST About MST T o form an MST region, bridges can be either of the follo wing: • An MST bridge that is the only member of the MST re gion. • An MST bridge interconnected by a LAN.
18-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T About MST T o pre v ent a misconf iguration, the PortFast operatio n is turned of f if the port receiv es a BPDU. Y ou can display the conf igured and operational status of PortFast b y using the show spanning-tr ee mst interface command.
18-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST MST Configu ration Restrict ions and Guid elines • Do not locate the roo t for some or all of th.
18-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T Configuring MST This example sho w how to enable MST : Switch# configure terminal Enter configuration commands, one per line.
18-31 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST Co nfig uring MST Switch(config-mst)# instance 1 vlan 2000-3000 Switch(config-mst)# no instance 1 .
18-32 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T Configuring MST Switch# show spanning-tree mst ###### MST00 vlans mapped: 11-4094 Bridge address 00d0.
18-33 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST Co nfig uring MST Switch# show spanning-tree mst 1 interface fastethernet 4/4 FastEthernet4/4 of M.
18-34 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T Configuring MST The follo wing examples sho w how to display spann ing tree VLAN conf iguratio.
18-35 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP and MST Co nfig uring MST Switch# show spanning-tree mst interface fastethernet 4/4 FastEthernet4/4 of MST.
18-36 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 18 Configuring STP an d M S T Configuring MST Bridge ID Priority 32769 (priority 32768 sys-id-ext 1) Address 00d0.00b8.1400 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Interface Role Sts Cost Prio.
CH A P T E R 19-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 19 Configuring Flex Links and MAC Address-Table Move Update Flex Links pr ovide a f ast and simplifi ed Layer 2 Link redundanc y mechanism. This chapter describes ho w to confi gure Flex Links o n the Catalyst 4500 series switch.
19-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 19 Configu rin g Flex Links and MAC Address-Table Mo ve Update About Flex Li n ks Flex Links Flex Links are a pair of Layer 2 interfaces (switc h ports or port channels) where one interface is confi gured to act as a backup to the ot her .
19-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 19 Configuring Flex Links and MAC Ad dress-Table Move U pdate About Flex Links port reactiv ates, it resumes forwarding traff ic in the preferred VLANs. In addit ion to providin g the redundanc y , this Flex Links pair can be used for load balancing.
19-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 19 Configu rin g Flex Links and MAC Address-Table Mo ve Update MAC Address -Table Move Update MAC Address-Table Move Update In Figure 19-3 , ports 1 and 2 on switch A are con nected to uplink switches B and D through a Fle x Links pair .
19-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 19 Configuring Flex Links and MAC Ad dress-Table Move U pdate Configuring Flex Links Figure 1 9-3 MAC Addr ess-T ab le Mov e U.
19-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 19 Configu rin g Flex Links and MAC Address-Table Mo ve Update Configuring Flex Lin ks Configuration Guidelines Follo w these.
19-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 19 Configuring Flex Links and MAC Ad dress-Table Move U pdate Configuring Flex Links T o disable a Flex Links backup interface, enter the no switchport backup interface interface-id interface configuration command.
19-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 19 Configu rin g Flex Links and MAC Address-Table Mo ve Update Configuring Flex Lin ks T o remov e a preemption scheme, ente r the no switchport backup interface interface-id preemption mode interface conf iguration command.
19-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 19 Configuring Flex Links and MAC Ad dress-Table Move U pdate Configuring Flex Links When both interf aces are up, Fast Ethernet port 1/0/8 forward s traf f i c for VLANs 60 and 100 to 120 and Fast Ethern et port 1/0/6 forw ards traff ic for VLANs 1 to 50.
19-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 19 Configu rin g Flex Links and MAC Address-Table Mo ve Update Configuring MAC Addres s- Table Move Update Configuring MAC A.
19-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 19 Configuring Flex Links and MAC Ad dress-Table Move U pdate Con figuring MAC Address-Table Move Update T o disable the MA C address-table move updat e feature on the access switch, enter the no mac address-t able move update transmit interface conf iguration command.
19-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 19 Configu rin g Flex Links and MAC Address-Table Mo ve Update Monitoring Flex Links and the MAC Address-Ta ble Move Update .
CH A P T E R 20-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 20 Configuring Resilient Ethernet Protocol This chapter descri bes how to use Resilient Ethernet Protocol (REP) on the Ca talyst 4500 series sw itch.
20-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilie nt Ethern et Protoc ol About REP Figur e 20-1 REP Open Segments The segment sho wn in Figure 20-1 is an open segment; there is no connecti vity between the two edge ports.
20-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilient Ethern et Protocol About REP Y ou can construct almost any type of network ba sed on REP segments. REP also supports VLAN load balancing, co ntrolled b y the primary edge port b ut occurring at any port in the seg ment.
20-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilie nt Ethern et Protoc ol About REP Link Integrity REP does not use an end-to-end pollin g mechanism between edge ports to v erify link integrity . It implements local link failure detecti on.
20-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilient Ethern et Protocol About REP The neighbor of fset number range is –256 to +256; a val ue of 0 is in valid. The primary edge p ort has an of fset number of 1; positiv e numbers above 1 identify do wnstream neighbors of the primary edge port.
20-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilie nt Ethern et Protoc ol About REP When VLAN load balancing is triggered, t he primar y edge port then sends out a message to alert all interfaces in th e segment about t he preemption.
20-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilient Ethern et Protocol Configuring REP Configuring REP A segment is a collection of ports connected one to the other in a ch ain and configured with a segment ID.
20-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilie nt Ethern et Protoc ol Configuring REP • Y ou cannot ru n REP and ST P on the sam e segment or interface. • If you conn ect an STP network to the REP se gment, be sure that the connection is at the se gment edge.
20-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilient Ethern et Protocol Configuring REP T o conf igure the REP administrati ve VLAN, perform this task: T.
20-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilie nt Ethern et Protoc ol Configuring REP T o enable and conf igure REP on an interface, perform this task: Command Purpose Step 1 Switch# configure terminal Enters global conf iguration mode.
20-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilient Ethern et Protocol Configuring REP Step 4 Switch(config-if)# rep segment segment-id [ edge [ no-neighbor ] [ primary ]] [ preferred ] Enables REP on the interface, and identifies a se gment number .
20-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilie nt Ethern et Protoc ol Configuring REP Enter the no form of each command to retu rn to the defaul t confi gu r at io n. Enter the show r ep topology pri vileged EXEC co mmand to see which port in the se gment is the primary edge port.
20-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilient Ethern et Protocol Configuring REP This exampl e shows ho w to configu re the same conf iguration w.
20-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 20 Configuri ng Resilie nt Ethern et Protoc ol Monitoring REP Configuring SNMP Traps for REP T o conf igure the switch to se.
CH A P T E R 21-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 21 Configuring Optional STP Features This chapter describes the Spannin g T ree Protocol (S TP) features supported on the Catalyst 4500 series switch. It also pro vides guidelines, procedur es, and conf iguration ex amples.
21-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features About Root Guard Note For complete syntax and usage info rmation for the switch commands used in this chapte r, look at the Cisco Catalyst 4500 Series Switc h Command Refer ence and related publications at thi s location: http://www .
21-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features About Loop Guard interface FastEthernet5/8 switchport mode access spanning-tree guard roo.
21-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features About Loop Guard Figur e 21 -1 T riang ular S witch Conf iguratio n with Loop Guar d Figure 21-1 ill ustrates the follo wing configuration: • Switches A and B are distribution switches.
21-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features En abling Lo op Guard – If a channel is block ed by loo p guard and the channel breaks, spanning tree loses all the state information.
21-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features About EtherChannel Gua rd This exampl e show s how to enable loop guard on port 4/4: Swi.
21-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features About PortFast T o disable the EtherChannel gu ard feature, use the no spanning-tree ether channel guard misconf ig global conf iguration command.
21-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features About BPDU Gu ar d This exa mple sho ws how to enab le PortFas t on Fast Ethernet interf.
21-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features Enabling BPDU Guard Enabling BPDU Guard T o enable BPDU guard to shut down PortFast-confi.
21-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features Enabling PortFast BPDU Filtering When you enable PortFast BPDU f iltering globally and .
21-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features About UplinkFast Note For PVST+ information, see Chap ter 18, “Conf iguring STP and MST .
21-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features Enabling UplinkFast Figure 21-2 sh ows an example of a topolog y with no link fa ilures. Switch A, the root switch , is connected directly t o Switch B ov er link L1 and to Switch C ov er link L2.
21-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features Enabling UplinkFast Note When you enable UplinkFa st, it affects all VLANs on the swit ch . Y ou cannot configure Upli nkFast on an indi vidual VLAN.
21-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features About BackboneFast About BackboneFast BackboneFast is a complementary tech nology to UplinkF ast.
21-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features About BackboneFast Next, assume t hat L1 fails. Swit ch A and Switch B, the switches directly co nnecte d to this s egment, instantly kno w that the li nk is do wn.
21-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features Enabling Backbo neFast Figure 21 -6 Adding a Switch in a Shar ed-M edium T opology Enabling BackboneFast Note For BackboneF ast to work, you must enable it on all sw itch es in the network.
21-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features Enabling BackboneFast Number of RLQ request PDUs received (all VLANs) : 0 Number of RLQ .
21-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 21 Configuring Optional STP Features Enabling Backbo neFast Number of RLQ request PDUs received (all VLANs) :0 Number of RLQ.
CH A P T E R 22-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 22 Configuring EtherChannel and Link State Tracking This chapter describes how to use the command-lin e interface (CLI) to configure EtherChannel on the Catalyst 45 00 series switc h Layer 2 o r Layer 3 int e rfaces.
22-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State T racking About EtherChannel About EtherChannel EtherChannel b u ndles up to eigh.
22-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State Tracking About EtherChannel Configuring EtherChannels These subsections describe h.
22-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State T racking About EtherChannel The protocol learn s the capabilities of LAN port groups dynamical ly and informs the other LAN ports.
22-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State Tracking EtherChannel Configuration Guide lines and Restrictions • LA CP admi ni.
22-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State T racking Configuring EtherCh ann el • F or Layer 2 EtherChannels: – Assign all interfaces in the EtherChannel to the same VLAN, or configur e them as trunks.
22-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State Tracking Configuring EtherChannel These sections describe Layer 3 EtherChannel con.
22-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State T racking Configuring EtherCh ann el This exampl e show s how to confi gure Fast .
22-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State Tracking Configuring EtherChannel Timers: H - Hello timer is running. Q - Quit timer is running. S - Switching timer is running. I - Interface timer is running.
22-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State T racking Configuring EtherCh ann el Number of aggregators: 2 Group Port-channel.
22-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State Tracking Configuring EtherChannel interface Port-channel2 switchport access vlan .
22-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State T racking Configuring EtherCh ann el 0 00 Fa5/7 Time since last port bundled: 00.
22-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State Tracking Configuring EtherChannel end Switch# This example show s how to v erify .
22-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State T racking Configuring EtherCh ann el This exampl e shows ho w to verify the conf iguration: Switch# show lacp sys-id 23456,0050.3e8d.
22-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State Tracking Configuring EtherChannel IPv6: Source XOR Destination IP address Switch#.
22-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State T racking Displaying EtherChann el to a Virtual Switch Syste m Displaying EtherChannel to a Virtual Switch System Catalyst 4500 series switches support enhanced P AgP .
22-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State Tracking Displaying Et herChannel to a Virtual Switch System remote switch stores the ne w activ e ID and immedi ately transmits asynchrono us P AgP messages with TL Vs containing the new acti ve ID.
22-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State T racking Understanding Link-State Trac king Displaying EtherChannel Links to VS.
22-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State Tracking Understanding Link-State Tracking Figure 22-3 on p age 22-20 sho ws a network configu red with link-state tracking.
22-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State T racking Understanding Link-State Trac king As an example of a connectivity change from link-s tate g roup 1 to link-state group 2 on switch A, see Figure 22-3 on page 22-20 .
22-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State Tracking Configuring Link -State Tracking Configuring Link-State Tracking These s.
22-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 22 Configuring Et herChannel and Link State T racking Configuring Link-S tate Tr ack ing This exampl e show s how to create .
CH A P T E R 23-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 23 Configuring IGMP Snooping and Filtering This chapter describes ho w to configure Internet Group Management Protocol (IGMP) snooping on th e Catalyst 4500 series switch. It provides guidelines, procedures, an d config uration examples.
23-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering About IGMP Snooping • IGMP Snoopin g Querier , page 23-4 • Explicit Host T racking, page 23-4 Note Quality of service does not apply to IG MP packets.
23-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 23 Configuri ng IGMP Snooping and Filtering About IGMP Snooping In contrast, IGMPv3 hosts send IG MPv3 membership reports (with the allow group record mode) to join a specif ic multicast group.
23-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering About IGMP Snooping IGMP Configurable-Leave Timer Immediate-leav e processing cannot be used on VL ANs where multipl e hosts may be connected to a single interface.
23-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 23 Configuri ng IGMP Snooping and Filtering Configuring IGMP Snooping Configuring IGMP Snooping Note When configuring IGMP , configure the VL AN in the VLAN database mode. See Chapter 13, “Configuring VLANs, VTP , and VMPS.
23-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering Configuring IGMP Snooping Enabling IGMP Snooping Globally T o enable IGMP sno.
23-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 23 Configuri ng IGMP Snooping and Filtering Configuring IGMP Snooping This exampl e show s how to enable IGMP snooping on VLAN.
23-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering Configuring IGMP Snooping This exampl e show s how to configu re IP IGMP snoo.
23-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 23 Configuri ng IGMP Snooping and Filtering Configuring IGMP Snooping This exampl e show s how to en able IGMP immediate-lea v.
23-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering Configuring IGMP Snooping Switch# show ip igmp snooping show ip igmp snoopin.
23-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 23 Configuri ng IGMP Snooping and Filtering Configuring IGMP Snooping For an e xample of how to display Sn ooping Querier information , refer to the “Displaying IGMP Snooping Quer ier Information” section on page 23 -19 .
23-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering Configuring IGMP Snooping This exampl e show s how to configu re a host statically in V LAN 200 on interface F ast Ethernet 2/11: Switch# configure terminal Switch(config)# ip igmp snooping vlan 200 static 0100.
23-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 23 Configuri ng IGMP Snooping and Filtering Configuring IGMP Snooping When the spanni ng tree protocol is runnin g in a VLAN, a spanning tree t opology change notif ication (TCN) is issued by the root switch in the VLAN.
23-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering Displaying IGMP Sn ooping Information T o establ ish an I GMP query thresho .
23-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 23 Configuri ng IGMP Snooping and Filtering Displaying IGMP Snooping Information • Displaying MA C Address Multic ast Entri.
23-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering Displaying IGMP Sn ooping Information 40.40.40.2/224.10.10.10 Gi4/1 20.20.20.20 00:23:37 00:06:50 00:20:30 40.40.40.3/224.10.10.
23-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 23 Configuri ng IGMP Snooping and Filtering Displaying IGMP Snooping Information This exampl e show s how to display the host types and ports of a group in VLAN 1: Switch# show ip igmp snooping groups vlan 10 226.
23-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering Displaying IGMP Sn ooping Information T o display multicast router interface.
23-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 23 Configuri ng IGMP Snooping and Filtering Displaying IGMP Snooping Information This exampl e show s how to display IGMP sno.
23-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering Configuring IGMP Filtering Vlan 2: IGMP switch querier status ------------------------------------------------ admin state : Enabled admin version : 2 source IP address : 1.
23-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 23 Configuri ng IGMP Snooping and Filtering Configuring IGMP Filtering Configuring IGMP Profiles T o conf igure an IGMP prof ile and to enter IGMP prof ile configuration mode, use th e ip igmp pro fil e global configuration com mand.
23-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering Configuring IGMP Filtering T o delete a profile, use the no ip ig mp prof ile pr ofile number global conf iguration command.
23-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 23 Configuri ng IGMP Snooping and Filtering Configuring IGMP Filtering Switch# show running-config interface fastethernet2/12 Building configuration.
23-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 23 Configu r in g IGMP Snoopin g an d Filtering Displaying IGMP Filte ring Configuration interface FastEthernet2/12 no ip ad.
CH A P T E R 24-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 24 Configuring IPv6 MLD Snooping Note IPv6 MLD Snooping i s only suppo rted on Cata lyst 49 00M, Cataly st 4948E, Supe rvisor Engine 6-E, and Supervisor Engin e 6L-E.
24-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 24 Config uring IPv6 M LD Sn ooping About MLD Snooping MLD is a protocol used b y IPv6 multicast routers to disco ver the pr .
24-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 24 Configuring IPv6 MLD Sn ooping About MLD Snooping MLD Queries The switch sends out MLD queries, const ructs an IPv6 multicast ad dress database, and generates MLD group-specif ic and MLD group-and-source-specif ic queri es in response to MLD Done messages.
24-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 24 Config uring IPv6 M LD Sn ooping About MLD Snooping MLD Reports The processing of MLDv1 join messages is e ssent ially the same as with IGMPv2. When no IPv6 multicast routers are detected in a VLAN, reports are not processed or forwarded from the switch.
24-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 24 Configuring IPv6 MLD Sn ooping Configuring IPv6 MLD Snooping confi guration command.
24-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 24 Config uring IPv6 M LD Sn ooping Configuring IPv6 MLD Snooping MLD Snooping Configuration Guidelines When config uring MLD.
24-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 24 Configuring IPv6 MLD Sn ooping Configuring IPv6 MLD Snooping T o disable MLD snooping on a VLAN inte rface, use the no ipv6 mld snooping vlan vlan-id global confi guration command for t he specifi ed VLAN number .
24-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 24 Config uring IPv6 M LD Sn ooping Configuring IPv6 MLD Snooping Note Static connections t o multicast routers are supported on ly on switch ports.
24-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 24 Configuring IPv6 MLD Sn ooping Configuring IPv6 MLD Snooping T o disable MLD Immediate Leave on a VLAN, use the no ipv6 mld snooping vlan vlan-id immediat e-leave global config uration command.
24-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 24 Config uring IPv6 M LD Sn ooping Configuring IPv6 MLD Snooping This example sho ws how to set the MLD sn ooping glo bal r.
24-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 24 Configuring IPv6 MLD Sn ooping Displaying MLD Snooping Information Displaying MLD Snooping Information Y ou can display MLD snooping i nformation for dynami cally lear ned and statically conf igured router ports and VLAN interfaces.
24-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 24 Config uring IPv6 M LD Sn ooping Displayi n g MLD Sn ooping Information.
CH A P T E R 25-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 25 Configuring 802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunneling V irtual priv ate networks (VPNs) provide e.
25-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tu nne ling, VLAN Mapping, and Layer 2 Protocol Tunneling About 802.
25-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunnelin g Configuring 802.
25-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tu nne ling, VLAN Mapping, and Layer 2 Protocol Tunneling Configuring 802.1Q Tunn eling Native VLANs When config uring 802.1Q tunneling o n an edge switch, you must use 802.
25-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunnelin g Configuring 802.
25-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tu nne ling, VLAN Mapping, and Layer 2 Protocol Tunneling Configuring 802.1Q Tunn eling • EtherChannel port grou ps are compatible with tunnel ports as long as the 802.
25-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunnelin g About VLAN Mapping Switch(config-if)# exit Swit.
25-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tu nne ling, VLAN Mapping, and Layer 2 Protocol Tunneling About VLAN Mapping Figure 25-4 La yer 2 VPN D.
25-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunnelin g Configuring VLAN Ma pping Mapping Customer VLAN.
25-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tu nne ling, VLAN Mapping, and Layer 2 Protocol Tunneling Configuring VLAN Mapping VLAN Mapping Configuration Guidelines Guidelines include t he follo wing: • T radi tional QinQ uses 802.
25-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunnelin g Configuring VLAN Ma pping Configuring VLAN Mapping The follo wing procedures sh o w ho w to config ure each type o f VLAN mapping on trunk port s.
25-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tu nne ling, VLAN Mapping, and Layer 2 Protocol Tunneling Configuring VLAN Mapping Switch(config-if)# .
25-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunnelin g Abou t Layer 2 Protocol Tunneling Use the no switchport vlan mapping vlan-id dot1q-tunnel ou ter vlan-id comm and to remov e the VLAN mapping conf iguration.
25-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tu nne ling, VLAN Mapping, and Layer 2 Protocol Tunneling About Layer 2 Proto col Tunneling • VTP pro vides consistent VLAN conf iguration thro ughout the customer netw ork, propagating to all switches through the service provider .
25-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunnelin g Configuring Layer 2 Protocol Tu nneling Figur .
25-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tu nne ling, VLAN Mapping, and Layer 2 Protocol Tunneling Configuring La yer 2 Protocol Tunneling • .
25-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunnelin g Configuring Layer 2 Protocol Tu nneling • Be.
25-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tu nne ling, VLAN Mapping, and Layer 2 Protocol Tunneling Configuring La yer 2 Protocol Tunneling Use .
25-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tunneling, VLAN Mapping, and Layer 2 Protocol Tunnelin g Monitoring a nd Maintaining Tunneling Status Monitoring and Maintaining Tunneling Status T able 25-2 sho ws the comman ds for monitoring and mainta in ing 802.
25-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 25 Configuring 802.1Q Tu nne ling, VLAN Mapping, and Layer 2 Protocol Tunneling Monitoring and Main ta ining Tunneling Statu.
CH A P T E R 26-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 26 Configuring CDP This chapter describe s how to configure Cisco Disc overy Protocol (CDP) on the Catalyst 450 0 series switch. It also pro vides guidelines, procedur es, and conf iguration ex amples.
26-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 26 Configur ing CDP Configuring CDP Each CDP-conf igured de vice sends periodic messages to a multicast address. Each de vice advertises at least one address at which it can receive SNMP messages.
26-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 26 Configuring CDP Configuring CDP Enabling CDP on an Interface T o enable CDP on an interf ace, use this command: This exampl.
26-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 26 Configur ing CDP Configuring CDP This exampl e show s how to clear the CDP counter conf iguration on your switch : Switch#.
CH A P T E R 27-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 27 Configuring LLDP, LLDP-MED, and Location Service This chapter describe s how to configure the Link Layer Discovery Protocol (LLDP), LLDP Media Endpoint Discov ery (LLDP-MED) , and Location Service on the Catalyst 45 00 series switch.
27-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Service About LLDP, LLDP-MED, and Loca tion Ser vice LLDP supports a set of attrib utes that it uses to discov er neighbor dev ices.
27-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Ser vic e About LLDP, LLDP-MED, and Location Service • In ventory man agement TL.
27-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Service Configuring LLDP and LLDP -ME D, and Location Service • De vice categor.
27-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Ser vic e Configuring LLDP and LLDP-M ED , and Location Service Configuring LLDP C.
27-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Service Configuring LLDP and LLDP -ME D, and Location Service This exampl e shows.
27-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Ser vic e Configuring LLDP and LLDP-M ED , and Location Service This example sho w.
27-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Service Configuring LLDP and LLDP -ME D, and Location Service Configuring LLDP-MED TLVs By default, the sw itch only sends LLDP packets un til it recei ves LLDP-MED packets fr om the end device.
27-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Ser vic e Configuring LLDP and LLDP-M ED , and Location Service Configuring Networ.
27-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Service Configuring LLDP and LLDP -ME D, and Location Service This exampl e show.
27-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Ser vic e Configuring LLDP and LLDP-M ED , and Location Service This exampl e show s how to enable LLDP po wer negotiation on interf ace Gigabit Ethernet 3 /1: Switch# config t Enter configuration commands, one per line.
27-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Service Configuring LLDP and LLDP -ME D, and Location Service Use the no form of each command to return to the default settin g.
27-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Ser vic e Monitoring and Maintaining LLDP, LLDP-MED, and Location Service This e .
27-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 27 Configuring LLDP, LLDP-MED, and Location Service Monitoring and Maintaining LLDP, LLDP-MED, and Location Service show lldp entry entry-name Displays information ab out a specific neighbor .
CH A P T E R 28-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 28 Configuring UDLD This chapter describes ho w to configure UniDirecti onal Link Detection (UDLD) Eth er net on a Cataly st switch.
28-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 28 Configuring UDLD About UDLD Starting with Cisco IOS Release 12.2(54)SG, the en hancement Fast UDLD was added, which sup ports timers in the fe w-hundred milliseconds range, whic h enables subsecond unid irectional link detection.
28-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 28 Configuring UDLD About UDLD Figur e 28-2 F ast UDLD T opology Note For F ast UDLD, Catalyst 4900 M, Catalyst 4948E, Catalyst 4948E-F , Superv isor Engine 6-E, and Supervisor 6L-E support up t o 32 ports.
28-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 28 Configuring UDLD Default UDLD Configuration Default UDLD Configuration T able 28-1 sho ws the UDLD default conf iguration.
28-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 28 Configuring UDLD Configuring UDLD on the Switch Enabling UDLD Globally T o enable UDLD in aggressi ve or normal mode and to.
28-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 28 Configuring UDLD Configuring UDLD on the Switch Enabling UDLD on Individual Interfaces T o enable UDLD on indi vidual inte.
28-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 28 Configuring UDLD Configuring UDLD on the Switch Disabling UDLD on Individual Interfaces T o disable UDLD on individual inte.
28-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 28 Configuring UDLD Configuring UDLD on the Switch Configuring a UDLD Probe Message Interval Globally T o conf igure the time.
28-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 28 Configuring UDLD Displaying UDLD Link Status Displaying UDLD Link Status T o verify link status reported b y UDLD, enter th.
28-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 28 Configuring UDLD Displaying UDLD Link Status T o verify st atus for a particular link as repo rted b y Fast UDLD, enter t.
CH A P T E R 29-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 29 Configuring Unidirectional Ethernet Note Unidirectional Ethernet is not supported o n Catalyst 4900M, Catalyst 4948 E, Su pervisor En gine 6-E, or Supervisor Engin e 6L-E.
29-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 29 Configur ing Unidirectional Ethernet Configuring Unidirectional Ethernet Configuring Unidirectional Ethernet Note Y ou must configure Uni directional Ethernet on the non-blocki ng Gigabit Ethernet Port, which automatically disables UDLD on the port.
29-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 29 Configuring Unidirectional Ethernet Configuring Unidirectional Eth erne t This exampl e shows ho w to verify the conf igura.
29-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 29 Configur ing Unidirectional Ethernet Configuring Unidirectional Ethernet.
CH A P T E R 30-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 30 Configuring Layer 3 Interfaces This chapter describes the Layer 3 interfaces on a Cataly st 4500 series switch. It also pr ovides guidelines, proced ures, and configu ration examp les.
30-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 30 Configuring Layer 3 Interfaces About Layer 3 In terfaces Note On a Catalyst 4500 Series Switch, a p hysical Layer 3 interf ace has MAC address learni ng enabled.
30-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 30 Con figuring Layer 3 Interfaces About Layer 3 Interfaces Figure 30-2 Physical La yer 3 Interf aces for the Catalyst 450 0 S.
30-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 30 Configuring Layer 3 Interfaces About Layer 3 In terfaces • Output unicast • Output multicast For each count er type, bo th the numb er of pack et s and the total number of b ytes receiv ed or transmit ted are counted.
30-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 30 Con figuring Layer 3 Interfaces Configuratio n G uidelines Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute i.
30-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 30 Configuring Layer 3 Interfaces Configuring Logical Layer 3 VLAN Interfac es Configuring Logical Layer 3 VLAN Interfaces No.
30-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 30 Con figuring Layer 3 Interfaces Configuring VLANs as Laye r 3 Interface s 5 minute output rate 0 bits/sec, 0 packets/sec 0 .
30-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 30 Configuring Layer 3 Interfaces Configuring VLANs as Layer 3 Interfaces T o apply SVI Autostate Excl ude, perform this task: This exampl e show s how to apply SVI Autostate Exclude on interface g3/1: Switch# conf terminal Enter configuration commands, one per line.
30-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 30 Con figuring Layer 3 Interfaces Configuring VLANs as Laye r 3 Interface s Configuring IP MTU Sizes Y ou can set the protocol-specific maximu m transmission unit (MTU) size of IPv4 or IPv6 packets that are sent on an interface.
30-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 30 Configuring Layer 3 Interfaces Configuring VLANs as Layer 3 Interfaces The follo wing example sho ws how to co nf igure IPv6 MTU on an interface: Switch# configure terminal Enter configuration commands, one per line.
30-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 30 Con figuring Layer 3 Interfaces Configuring VLANs as Laye r 3 Interface s This exampl e show s how to enable counters on interf ace VLAN 1: Switch# configure terminal Enter configuration commands, one per line.
30-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 30 Configuring Layer 3 Interfaces Configuring Physical Layer 3 Interface s Configuring Physical Layer 3 Interfaces Note Before you can conf igure physical Layer 3 interfaces, you must enable IP r outing if IP routing i s disabled, and specify an IP rou ting protocol.
30-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 30 Con figuring Layer 3 Interfaces Configuring EIGRP Stub Routing line vty 0 4 ! end Configuring EIGRP Stub Routing This sect.
30-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 30 Configuring Layer 3 Interfaces Configuring EIGRP Stub Routing Figure 30-3 EIGRP Stub Switch Configuration For more inform.
30-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 30 Con figuring Layer 3 Interfaces Configuring EIGRP Stub Routing Figure 30-4 Simpl e Hu b-and-Spoke Netw o rk The stub routing feature do es not pre vent routes fro m being advertis ed to the remote router .
30-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 30 Configuring Layer 3 Interfaces Configuring EIGRP Stub Routing Figure 30-5 Simpl e Dual-Homed Rem ote T opology Figure 30-5 sh ows a si mple dual-homed remote with one remote ro uter and two distrib ution routers.
30-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 30 Con figuring Layer 3 Interfaces Configuring EIGRP Stub Routing network. The use of t he lower band width route that passes using the remote ro uter might cause W AN EIGRP distrib ution routers t o be dropped.
30-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 30 Configuring Layer 3 Interfaces Configuring EIGRP Stub Routing Note Multi-access interfaces, such as A TM, Ethernet, Frame Relay , ISDN PRI, and X.
30-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 30 Con figuring Layer 3 Interfaces Configuring EIGRP Stub Routing (sec) (ms) Cnt Num 0 10.
30-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 30 Configuring Layer 3 Interfaces Configuring EIGRP Stub Routing default route learned f rom the neighbors is displaced b y .
30-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 30 Con figuring Layer 3 Interfaces Configuring EIGRP Stub Routing • static • summary This section prov id es config urati on examples for all forms of t he eigrp stub command.
30-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 30 Configuring Layer 3 Interfaces Configuring EIGRP Stub Routing.
CH A P T E R 31-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 31 Configuring Cisco Express Forwarding This chapter describes Cisco Express Forwarding (C EF) on the Catalyst 450 0 series switch. It also provides guidelines, procedu res, and ex amples to configure this feature.
31-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 31 Configurin g Cisco Express Forwardin g About CEF CEF provides th e follo wing features: • Impro ves performance ov er the caching schemes of multilayer switches, which oft e n flush the entire cache when information chan ges in the routing tables.
31-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 31 Configuring Cisco Express Forwardin g Catalyst 4500 Series Switch Implementation of CEF Adjacency Types That Require Specia.
31-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 31 Configurin g Cisco Express Forwardin g Catalyst 4500 Series Switch Implementation of CEF Figur e 31 -1 Logical L2/L3 Switch Components The integrated swi tching engine performs inter -VLAN routing on logical Layer 3 interf aces with the ASIC hardware.
31-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 31 Configuring Cisco Express Forwardin g Catalyst 4500 Series Switch Implementation of CEF Figur e 31 -2 Hardwar e and Softw ar e Switching Components The integr ated switching engine performs i nter-VLAN ro uting in hardware.
31-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 31 Configurin g Cisco Express Forwardin g CEF Configuration Restrictions Load Balancing The Catalyst 4500 series switch supports load balancing fo r routing packets in the inte grated switching engine hardware.
31-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 31 Configuring Cisco Express Forwardin g Config uring CE F Configuring Load Balancing for CEF CEF load balancing is based on a.
31-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 31 Configurin g Cisco Express Forwardin g Monitoring and Maintaining CEF Note The include-ports optio n does not apply to software-switched tr aff ic on the Catalyst 4500 series switches.
31-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 31 Configuring Cisco Express Forwardin g Monitoring and Maintaining CEF This exampl e shows ho w to display IP unicast statist.
31-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 31 Configurin g Cisco Express Forwardin g Monitoring and Maintaining CEF.
CH A P T E R 32-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 32 Configuring Unicast Reverse Path Forwarding Note The feature is only supported o n Catalyst 4900M, Catalyst 49 48E, Supervisor Engine 6-E, and Supervisor Engin e 6L-E . This chapter de scribes the Unic ast Re verse Path F orwarding (Unica st RPF) feature.
32-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 32 Configurin g Unicast Reve rse Path Fo rwarding About Unicast Reverse Path Forwarding About Unicast Reverse Path Forwarding.
32-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 32 Configuring Unicast Reverse Path Forward ing About Unicast Reverse Path Forwarding Step 2 Unicast RPF chec ks to see if the p acket has arri ved on th e best return path to the source, w hich it does by doing a re verse lookup in the FIB table.
32-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 32 Configurin g Unicast Reve rse Path Fo rwarding About Unicast Reverse Path Forwarding 1/1. If there is a matching path, the pack et is forwarded. There is no re verse entry in t he routing table that routes the customer packet b ack to source addres s 209.
32-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 32 Configuring Unicast Reverse Path Forward ing About Unicast Reverse Path Forwarding Caution Using optional BGP attrib utes such as weight and lo cal preference, you can modify the best path back to the source address.
32-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 32 Configurin g Unicast Reve rse Path Fo rwarding About Unicast Reverse Path Forwarding A CLs work well for man y single-home.
32-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 32 Configuring Unicast Reverse Path Forward ing About Unicast Reverse Path Forwarding Unicast RPF works wi th a si ngle def a ult ro ute. No ad diti onal routes o r rou ting pro tocols e xist.
32-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 32 Configurin g Unicast Reve rse Path Fo rwarding About Unicast Reverse Path Forwarding Figure 32-4 Unicast RPF Bloc king T raffic in an Asymmetr ical Routing Envir onment Unicast RPF with BOOTP and DHCP Unicast RPF will allo w packets with 0.
32-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 32 Configuring Unicast Reverse Path Forward ing Unicast RPF Configuration Tasks – Ingress filtering applies f ilters to traffi c receiv ed at a network interface fro m e ither int ernal or external netw orks.
32-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 32 Configurin g Unicast Reve rse Path Fo rwarding Unicast RPF Configuration Tasks T o conf igure Unicast RPF , perform the followi ng task: Verifying Unicast RPF T o verify that Uni cast RPF is o perational, use the sho w cef interface command.
32-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 32 Configuring Unicast Reverse Path Forward ing Monitoring and Maintaining Unicast RPF Monitoring and Maintaining Unicast RPF.
32-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 32 Configurin g Unicast Reve rse Path Fo rwarding Unicast RPF Configuration Exam ple: Inbou nd and Outb ound Filters The sho w access-lists command displays the number of matches found for a specific entry in a specif ic access list.
CH A P T E R 33-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 33 Configuring IP Multicast This chapter describes I P multicast routing on the Cataly st 4500 series switch. It also pr ovides procedures and exampl es to config ure IP multicast routing.
33-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast About IP Multicast to the destination host b y routers. At each point on th e path between source and destination, a r outer uses a unicast routing table to mak e unicast forwarding decisions, based on the IP destination address in the packet.
33-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast About IP Multicast Figure 33-1 IP Mu lt icast Routing Protocols Internet Group Management Protocol.
33-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast About IP Multicast PIM Sparse Mode PIM Sparse Mode (PIM-SM) uses a pull model to deli ver multicast tra f fic. Only netw orks with acti ve recei vers that ha ve explicitly r equested the data are forwa rded the traf fic.
33-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast About IP Multicast IP Multicast Implementation on the Catalyst 4500 Series Switch The Catalyst 4500 series switch supports an ASIC-b ased integ r ated switching engine that provides Ethernet brid ging at Layer 2 and IP routing a t Layer 3.
33-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast About IP Multicast upper -layer routing table, only one route needs to be changed in the hardw a re ro uting state.
33-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast About IP Multicast The route (*,224.1.2.3) i s loaded in the hardw are FIB table and the list of output interf aces is loaded into the MET .
33-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast About IP Multicast Figure 33-4 IP Mu lt icast T a bles and Protocols The integrated swi tching engine maintains the hardw are FIB table to identify indi vidual IP multicast routes.
33-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast About IP Multicast Hardware and Software Forwarding The integrated swi tching engine forwards the majority of packets in hardware at very high rates of speed.
33-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast About IP Multicast The follo wing conditions cause some rep licas of a packet for a route to be.
33-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast About IP Multicast Figur e 33-6 Redundant Mult icast Router Configuration in a Stub Networ k In this kind of to pology , only Router A, the PIM designated router (PIM DR), forw ards data to the common VLAN.
33-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast About IP Multicast Multicast Forwarding Information Base The Multicast Fo rwarding Informatio n Base (MFIB) subsystem supports I P multicast routing in the integrated switch ing engi ne hard ware on th e Cataly st 4500 series switch.
33-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast Configuring IP Multicast Routing S/M, 224/4 An (S/M, 224/4) entr y is created in the MFIB for e very multicast-enabled interface.
33-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast Configuring IP Multicast Routing Note Source-specific multicast and IGMP v3 are supported. For more i nformation about source-specif ic multi cast with IGM Pv3 and IGMP , see the follo wing URL: http://www .
33-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast Configuring IP Multicast Routing encapsulated and sent tow ard the RP .
33-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast Configuring IP Multicast Routing When an interface is treat ed in sparse mode, it is popul ated.
33-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast Configuring IP Multicast Routing For an e xample of how to conf igure bidir-PIM, see the “Bidirectio nal PIM Mode Example” section on page 33-29 .
33-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast Configuring IP Multicast Routing Step 5 Switch(config-if)# ip pim [ sparse-mode | sparse-dense-mode ] Enables PIM sparse or sparse-dense mode on an interface.
33-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast Configuring IP Multicast Routing Step 10 Switch(config)# ip pim send-rp-discovery [ interface-type interface-number ] scope ttl-value [ interval seconds ] Conf igures the router to be an RP mapping ag ent.
33-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast Configuring IP Multicast Routing This example illustr ates how to configure Auto-RP: Switch>.
33-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast Configuring IP Multicast Routing T o conf igure a single static RP , perform this task: Command or Action Purpose Step 1 Switch> enable Enables privile ged EXEC mode.
33-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast Configuring IP Multicast Routing This exampl e show s how to configu re a single-static RP: Swi.
33-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast Monitoring and Maintainin g IP Multicast Routing The follo wing example sho ws ho w to enable ECM.
33-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast Monitoring and Maintain ing IP Multicast Routing Switch# show ip mroute cbone-audio IP Multicas.
33-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast Monitoring and Maintainin g IP Multicast Routing (130.207.8.33/32, 224.2.127.254), 00:00:25/00:02:32, flags: CLJT (131.243.2.62/32, 224.2.127.254), 00:00:51/00:02:03, flags: CLJT (140.
33-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast Monitoring and Maintain ing IP Multicast Routing Source: 128.195.7.62/32, 527/0/118/0 Source: 128.223.32.25/32, 554/0/105/0 Source: 128.223.32.151/32, 551/1/125/0 Source: 128.
33-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast Monitoring and Maintainin g IP Multicast Routing (10.34.2.92, 239.192.128.80), flags () Packets: 24579/100/0, 2113788/15000/0 bytes Vlan7 (F NS) Vlan100 (A) (*, 239.
33-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast Configuration Examples Switch# show ip pim interface count States: FS - Fast Switched, H - Hardware Switched Address Interface FS Mpackets In/Out 192.
33-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Multicast Configuration Example s ip multicast-routing ip pim rp-address 10.8.0.20 1 interface ethernet 1 ip pim sparse-mode Bidirectional PIM Mode Example By default, a bidirectio nal RP advertises all groups as bidirectional.
33-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 33 Configuring IP Mu lticast Configuration Examples Sparse Mode with Auto-RP: Example The follo wing example conf igures spa.
CH A P T E R 34-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 34 Configuring ANCP Client This chapter describes Access-Netw ork Control Protocol (ANCP) Cli ent on Catalyst 4500 series switches.
34-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 34 Configuring ANCP Client Enabling and Configuring ANCP Client Note IGMP snooping must be enabled o n an ANCP client (Cataly.
34-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 34 Configuring ANCP Clie nt Enabling and Configuring ANCP Client Step 3 (Optional) Enable the ANCP multicast client to identif.
34-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 34 Configuring ANCP Client Enabling and Configuring ANCP Client Example 2 ANCP_Client# show ancp multicast interface Fa2/3 vlan 19 ANCP Multicast Streams Interface FastEthernet2/3 VLAN 19: client ID 0x0106000700130203 Group Source Joined on 239.
34-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 34 Configuring ANCP Clie nt ANCP Guidelin es and Restrictio ns ANCP Guidelines and Restrictions When using (or conf iguring) ANCP , consider these guidelines and restrictions: • Entering a shut co mmand on a port remo v es ANCP acti vated mult icast streams from the por t.
34-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 34 Configuring ANCP Client ANCP Guidelines and Restrict io ns.
CH A P T E R 35-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 35 Configuring Policy-Based Routing This chapter describes the tasks fo r configu ring polic y-based routing (PBR) on a C.
35-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 35 Confi guring Polic y-Based Routing About Policy-Based Ro uting Y ou c an set up PBR as a way t o route packets bas ed on configured polici es.
35-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 35 Configuring Policy-Based Routing About Policy-Based Routing route-map rm-test permit 23 match ip address 101 2102 set interface vlan23 ! route-map rm-test deny 24 match ip address 104 set ip next-hop 24.
35-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 35 Confi guring Polic y-Based Routing About Policy-Based Ro uting PBR Route-Map Processing Logic Example Consider a route-map called rm-test defined as follo ws: access-list 101 permit tcp host 61.
35-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 35 Configuring Policy-Based Routing About Policy-Based Routing • TCP packet from 6 1.1.1.1 to 133.3.3.1 with desti nation port 105 – Processing mov es from sequence #21 to #24, b ecause all ACLs in these sequence numbers ha ve a deny action for po rt 105.
35-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 35 Confi guring Polic y-Based Routing Policy-Based Routing Configuration Tasks • Routing based on dedi cated links Some app.
35-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 35 Configuring Policy-Based Routing Policy-Bas ed Routing Co nfiguratio n Tasks Step 4 Swit ch(config-route-map)# set interface interface-type interface-number [... type number ] Or Specif ies the output interf ace from which the pack et will be sent.
35-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 35 Confi guring Polic y-Based Routing Policy-Based Routing Co nfiguration Examples Use the set commands with each other . These commands are ev aluated in the order shown in Step 3 in the pre vious task table.
35-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 35 Configuring Policy-Based Routing Policy-Based Routing Configuration E xamp les Switch (config)# access-list 1 permit ip 1.
35-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 35 Confi guring Polic y-Based Routing Policy-Based Routing Co nfiguration Examples route-map Texas permit 10 match ip address 1 set ip next-hop 3.3.3.3 ! route-map Texas permit 20 match ip address 2 set ip next-hop 3.
CH A P T E R 36-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 36 Configuring VRF-lite V irtual Priv ate Networks (VPNs) provide a secure way for customers to share bandwidth ov er an ISP backbone network . A VPN is a collection of sit es sharing a common rout ing table.
36-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite About VRF-lite • VRF-lite Conf iguration Guidelines, page 36-4 • Conf iguring VRFs, page 36-5 •.
36-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite Default VRF-lite Configuration Figur e 36-1 Ca t al yst 4500 Ser ies Switc h es Acting as Multipl e Virtual CEs Figure 36-1 ill ustrates the packet-f orwarding proc ess in a VRF-lite CE-enabled network.
36-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite VRF-lite Configuration Guidelines VRF-lite Configuration Guidelines Consider these points when conf iguring VRF in your netw ork: • A switch with VRF-l ite is shared b y multiple customers, an d all customers ha ve thei r own r outing tables.
36-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite Configuring VRFs • Multicast VRF is suppor ted on Supervisor Engine 6- E, Supervisor 6L-E, Catalyst 4900M, and Catalyst 49 48E.
36-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite Configuring VRF-Aw ar e Se rvices Configuring VRF-Aware Services IP services can be conf igured on gl obal interfaces and withi n the global routing instance.
36-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite Configuring VRF-Aware Services Configuring the User Interface for SNMP T o configure VRF-a ware services for SNMP , perform this task: Configuring the User Interface for uRPF Y ou can configure uRPF on an interface assigned to a VRF .
36-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite Configuring VRF-Aw ar e Se rvices Configuring the User Interface for Syslog T o configure VRF-a ware .
36-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite Configuring Per-VRF for TACACS+ Servers T o specify the IP address of an interface as th e source address for TFTP connec tions, use the ip tftp source-interface sho w mode command.
36-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite Configuring Per-VRF for TACACS+ Servers . The follo wing example lists all the st eps to configure p.
36-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite Configuring Multicast VRFs Configuring Multicast VRFs T o conf igure multicast within a VRF table, pe.
36-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite Configuring a VPN Routing Session Configuring a VPN Routing Session Routing within the VPN can be conf i gured with an y supported rou ting pr otocol (RIP , OSPF , or BGP) or with static routing.
36-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite VRF-lite Configuration Example Use the no router bgp autonomous-syste m-number global conf iguration command to delete the BGP routing process. Use the command with keyw or ds to delete routing characteristics.
36-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite VRF-lite Configuration Example Configuring Switch S8 On switch S8, enable rou ting and conf igure VRF . Switch# configure terminal Enter configuration commands, one per line.
36-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite VRF-lite Configuration Example Switch(config)# interface Vlan20 Switch(config-if)# ip vrf forwarding v12 Switch(config-if)# ip address 83.0.0.8 255.255.
36-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite VRF-lite Configuration Example Configuring Switch S11 Config ure S11 to connect to CE: Switch# configure terminal Enter configuration commands, one per line.
36-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite Displaying VRF-lite Stat us Router(config)# router bgp 100 Router(config-router)# address-family ipv4 vrf v2 Router(config-router-af)# neighbor 83.0.0.8 remote-as 800 Router(config-router-af)# neighbor 83.
36-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 36 Configuring VRF-lite Displaying VRF-lite Status Note For more informati on about the information in the displays, refer to the Cisco IOS Switching Servic es Command Refer ence at: http://www .
CH A P T E R 37-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 37 Configuring Quality of Service Note QoS functionality on Supervisor Eng ine 6-E, Superv isor Engine 6L-E, Catalyst 4 900M, and Catalyst 4948E are equivalent.
37-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e About QoS Note For complete syntax and usag e infor mation for the swi tch command s used in thi s chapter , see the Cisco Catalyst 4500 Series Switc h Command Refer ence and related p ublicat ions at t his locat ion: http://www .
37-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service About QoS – Layer 2 Inter -Switch Link (ISL) frame headers ha ve a 1-byte User field that carries an IEEE 802.1p class of service (CoS) value in the three least-signif icant bits.
37-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e About QoS Switches and routers along th e path can use the class information to limi t the amount of resources allocated per traf fic class.
37-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service About QoS • Classifi cation is the se lection o f traffi c to be m arked.
37-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e About QoS Basic QoS Model Figure 37-2 sh ows the b asic QoS model (also referred to as Switch QoS mo del; it is not MQC compliant).
37-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service About QoS For non- IP traff ic, you hav e the follo wing classif ication options: • Use the port def ault. If the packet is a non-IP packet, assign the def ault port DSCP va lue to the incoming packet.
37-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e About QoS Figur e 37 -3 Classification Flowc hart Ye s Ye s Ye s No No No No No No No No No Ye s Ye s Ye s Ye s Ye s Ye s Read interface configuration for classification.
37-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service About QoS Classification Based on QoS ACLs A packet can be classified for Qo S using mu lti.
37-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e About QoS Y ou create a cla ss map by us ing the class-map global conf iguration command. When you enter the class-map command, the switch enters the class map confi guration mode.
37-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service About QoS When config uring policing and po li cers, observ e these gui delines: • On Su.
37-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e About QoS Figur e 37 -4 P olicing and Mar king Flowc hart Star t Use QoS policy on the V.
37-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service About QoS Internal DSCP Values The follo wing sections describe the internal DSCP values: .
37-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e About QoS Mapping Tables During QoS proc essing, the switch repr esents the priority of .
37-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service About QoS The follo wing table provides the def a ult DSCP-to-transmit qu eue mapping: For e xample, if you are sending two streams, one wi th a DSCP of 16 and other w ith a valu e of 0, they will transmit from dif ferent queues.
37-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e About QoS Traffic Shaping T raff ic shaping prov ides the ability to control th e rate of outgoing traf fic in ord er to make sure that the traff ic conforms to the maxim um rate of transmissi on contracted for it .
37-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and 4948-10GE Note On a gi ven port, the Cisco IP phone disco very information is not maintained on th e standby supervi sor engine.
37-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-31 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-32 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-33 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-34 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-35 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-36 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-37 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-38 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-39 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4948-10GE Example 3 Assume there are two activ e flows on the F ast Et hernet interface 6/1 wi th source addresses 192.
37-40 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-41 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-42 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-43 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-44 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-45 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-46 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-47 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-48 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and 4948-10GE Configuring the Trust State of Interfaces This command configures the trust state of interf aces.
37-49 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-50 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-51 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-52 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-53 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4.
37-54 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Engines II- Plus , II+10GE, IV, V, V-10GE, 4924, 4948, and.
37-55 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Supervisor Engi nes II-Plus, II+10GE, IV, V, V-1 0GE, 4924, 4948, and 4948-10GE T o return to the default map, u se the no qos dscp policed global confi guration command.
37-56 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring Auto-QoS on Supervisor Engines II- Pl us, II+10GE, IV, V, V-10GE, 4924, 4948.
37-57 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring Auto-QoS on Supervisor Engines II-Plus, II+10GE, IV, V, V-10GE, 4924, 4948, and 4948-10GE When you enable auto-QoS, it automa tically classifies traf fic based on ingress packet label.
37-58 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring Auto-QoS on Supervisor Engines II- Pl us, II+10GE, IV, V, V-10GE, 4924, 4948.
37-59 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring Auto-QoS on Supervisor Engines II-Plus, II+10GE, IV, V, V-10GE, 4924, 4948, an.
37-60 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring Auto-QoS on Supervisor Engines II- Pl us, II+10GE, IV, V, V-10GE, 4924, 4948.
37-61 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring Auto-QoS on Supervisor Engines II-Plus, II+10GE, IV, V, V-10GE, 4924, 4948, an.
37-62 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring Auto-QoS on Supervisor Engines II- Pl us, II+10GE, IV, V, V-10GE, 4924, 4948.
37-63 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd .
37-64 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and Cataly st 4948E by def ault. Only when t he trusted boundary feature is enabled on an interface can the port enter untrusted mode.
37-65 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd .
37-66 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and .
37-67 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd .
37-68 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and .
37-69 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd .
37-70 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and .
37-71 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd Catalyst 4948E For info rmation on conf iguring a polic y map, see th e “Creating a Polic y Map” section on page 37-31.
37-72 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and Cataly st 4948E Traffic Marking Procedure Flowchart Figure 37-8 illustrat es the order of the pr ocedures for configuring traf fic marking.
37-73 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd .
37-74 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and .
37-75 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd .
37-76 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and Cataly st 4948E Dynamic resizing of queues (q ueue limit class- map action) is supp orted using the use of the queue-limit command.
37-77 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd Catalyst 4948E T o delete an existing p olicy map, use the no policy-map policy-map-name global conf iguration command.
37-78 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and .
37-79 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd Catalyst 4948E T o delete an existing p olicy map, use the no policy-map policy-map-name global conf iguration command.
37-80 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and .
37-81 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd .
37-82 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and Cataly st 4948E Queue-limiting When a class-based queue is instanti ated on a physical port, it is se t up with a default size.
37-83 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd .
37-84 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and Cataly st 4948E This exampl e show s how to configu re a class-based queue with an explicit queue-limi t command.
37-85 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd Catalyst 4948E T o delete an existing p olicy map, use the no policy-map policy-map-name global conf iguration command.
37-86 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and .
37-87 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd Catalyst 4948E Classification criteria for the poli c y map on the physical member ports cannot be based on a combination of fi elds.
37-88 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring QoS on Supervisor Eng ine 6- E, Supervisor Engine 6L-E, Catalyst 4900M, and .
37-89 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configuring QoS on Super visor Engine 6-E, Su pervisor Engine 6L-E, Ca talyst 4900M, a nd .
37-90 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring Auto-QoS on Supervisor Engine 6-E, Supervisor Engine 6L-E, Catalyst 4900M, a.
37-91 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Service Configu rin g Auto-QoS on Super visor Engine 6-E, Supervi sor E ngine 6L-E, Catalyst 4900M.
37-92 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 37 Config uring Quality of Servic e Configuring Auto-QoS on Supervisor Engine 6-E, Supervisor Engine 6L-E, Catalyst 4900M, and Catalyst 4948E It establishes a trusted boundar y that recognizes Cisc o IP phones and trusts the CoS setting of the packets from the phone.
CH A P T E R 38-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 38 Configuring Voice Interfaces This chapter descri bes how to configure voice in terfaces for the Catalyst 4500 series switches.
38-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 38 Configuring Voice Interfaces About Voice Interfaces The Cisco 7960 IP Phone contai ns an integrated three-port 10/100 switch .
38-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 38 Con figuring Voice Interfaces Configur ing a Port to Conn ect to a Cisco 7960 IP Phone Configuring a Port to Conne ct to a .
38-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 38 Configuring Voice Interfaces Configuring Voice Ports fo r Voice and Data Traffic In the follo w ing example, VLAN 1 car ries data tra ff ic, and VL AN 2 carries voice traf fic.
38-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 38 Con figuring Voice Interfaces Overriding the CoS Prior ity of Incomin g Frames Overriding the CoS Priority of Incoming Frames A PC or another data de vice can connect to a Cisc o 7960 IP Phone port.
38-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 38 Configuring Voice Interfaces Configuring Power.
CH A P T E R 39-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 39 Configuring Private VLANs This chapter de scribes ho w to implement pri vate VLANs (PV LANs) on Catalyst 4500 series switches. It also pro vides restrictions, proc edures, and conf iguration e xamples.
39-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs About Private VLANs Purpose of a PVLAN Using PVLA Ns provides scalab ilit y and IP address management benefits fo r service providers and Layer 2 security for customers.
39-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs About Private VLANs In a switched e n vironment, yo u can assign an i ndivi dual PVLAN and associated IP subnet to each indi vidual or common group of end stations.
39-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs About Private VLANs Isolated Port An isolated port is a ho st port that belongs to an isolated secondary VLAN. It has complete Layer 2 separatio n from other ports within the same PVLAN, ex cept for the promiscuous ports.
39-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs About Private VLANs PVLANs across Multiple Switches This section discusses the fo llowi ng topics.
39-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs About Private VLANs Because VTP does not support PVLANs, you must manually configu re PVLANs on all switches in the Layer 2 network.
39-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs About Private VLANs T raff ic in the upstream direction is sent b y host1 to the non-PVLAN switch , arri ving in VLAN 11 . The packets are then transmitted to the switch tagg ed with that VLA N’ s tag (VLAN 11) over the trunk port.
39-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs About Private VLANs PVLAN Modes Over Gigabit Etherchannel Beginni ng with Cisco IOS Release 15.0(2)SG you can configu re PVLAN modes ov er Etherchannel.
39-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs About Private VLANs • A packet r eceiv ed on a PVLAN trunk port belongs to the secon dary VLAN if the packet i s tagged with a secondary VLAN or if the pa cket is untagge d and the nati ve V LAN on the port i s a secondary VLAN.
39-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs PVLAN Commands PVLANs and SVIs In a Layer 3 switch, a switch virtua l interface (SVI) represents the Layer 3 interface of a VLAN. Layer 3 devices communicate wi th a PVLAN only us ing the prim ary VLAN and not through second ary VLANs.
39-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs Configuring PVLANs These sections describe ho w to configure PVLANs: • Basi.
39-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs • Conf iguring a Layer 2 Interf ace as an Isolated PVLAN T runk Port, page.
39-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs • Do not include VLAN 1 or VLANs 10 02 through 10 05 in PVLANs. • Use only PVLAN commands to assign ports to primary , isolated, community VLANs, or two way-community VLANs.
39-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs • W ith port A CLS functionality av ailable, you can apply Cisco IOS A CLS to secondary VLAN ports and Cisco IOS A CLS to PVLANS (V A CLs).
39-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs Configuring a VLAN as a PVLAN T o configure a VLAN as a PVLAN, perform this t.
39-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs This exampl e sho ws how to conf igure VLAN 550 as a tw ow ay-community VLAN.
39-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs Switch# configure terminal Switch(config)# vlan 202 Switch(config-vlan)# priv.
39-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs • Use the remove keyw ord with a secondary_vlan_list to clear the mapping between se condary VLANs and the PVLAN promis cuous port.
39-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs This example sho ws how to conf igure inte rface FastEt hernet 5/1 as a PVLAN.
39-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs This example sho ws how to conf igure inte rface FastEt hernet 5/2 as a seco.
39-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs Trunking Native Mode VLAN: 1 (default) Administrative Native VLAN tagging: en.
39-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs The [ no ] switchport priv ate-vlan mapping comman d provides the f ollowing three levels of removal: • Remov e one or more secondary VLANs from the list.
39-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs Capture Mode Disabled Capture VLANs Allowed: ALL Unknown unicast blocked: dis.
39-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs vlan202 309 community vlan202 440 isolated Switch# Configuring PVLAN over Et.
39-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs Note The maximum number of unique PVLAN pairs supported b y the switchport private-vlan mapping command is 1000.
39-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs Configuring a Layer 2 EtherCh annel as a PVLAN Host Port T o conf igure a La.
39-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs Configuring a Layer 2 EtherChannel as an Isol ated PVLAN Trunk Port T o conf .
39-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs This example shows ho w to configure interface port chan nel 63 as a seconda.
39-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs Note The maximum number of unique PVLAN pairs supported by th e switchpo rt pri vate-vlan mapping tru nk command is 500.
39-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 39 Configuring Private VLANs Configuring PVLANs Switch(config-if)# switchport private-vlan trunk native vlan 10 Switch(confi.
CH A P T E R 40-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 40 Configuring 802.1X Port-Based Authentication This chapter describe s how to configure IEEE 802.1X po rt-based authent ication on the Catalyst 450 0 series switch to pre vent unauthorized client de vices from gaining access t o the network.
40-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Until a client is authen ticated, only Extensible Authenti cation Protocol o ver LAN (EAPOL) traf fic is allowed using the port to which the client is connected.
40-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Figure 40-1 802.1X Device Roles • Client—The wor kstation that requests access to th e LAN, and responds to requests from the switch.
40-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Authentication Initiation and Message Exchange The switch or the client can in itiate authentication.
40-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Ports in Authorized and Unauthorized States The switch port state determines wh ether the client is granted access to the network.
40-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Figur e 40-3 A uthentication Flo wch art 802.
40-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication • Pre-authentication Open Access, page 40-8 Single-Host Mode Y ou can configur e an 802.
40-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Figur e 40-5 Multidomain A uth entication Mode Example Figure 40-5 sho ws a typical M D A application w ith a singl e host behin d an IP phone co nnected to t he 802.
40-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication In single-host mode, a security violation is trig gered when more than one device are detected on the data vlan.
40-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Using 802.1X with VLAN Assignment Y ou can use the VLAN assignment to limit network a ccess for certain users.
40-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication • Enable AAA authoriz ation by usin g the network ke yword to allo w interf ace conf iguration from the RADIUS server .
40-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Usage Guidelines for Using 802.1X Authen tication with Guest VLANs on Windows-XP Hosts When using 802.
40-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Feature Interaction This section lists feature interactions and restrictio ns when MAB is enabled.
40-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication • When both MAB and gues t VLAN are co nfigu red and no EAPOL pa ckets ar e recei ve d on a port, t he 802.
40-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Note Inaccessible Authentication Bypa ss allows a v o ice client to a ccess configured voice VLAN when RADIUS becomes unav ailable.
40-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication For detai ls on ho w to config ure 802.1X with Unidirectional Con trolled Port, see the “Conf iguring 802.
40-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Deployment Example In a lar ge campus LAN design, you might want to design the VLAN infrastructure wit hout large Layer 2 domain.
40-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Y ou can set the maximum number of aut hentication a ttempt s that the authent icator sends before mo ving a port into the authentication-fai led VLAN.
40-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication • Internal VLANs that are used for Layer 3 ports cannot be conf igured as authentication-fail ed VLANs.
40-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication • Whene v er port security ag es out a 802.1X client’ s MA C address, 802.1X attempts to reau thenticate the client.
40-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication – url-redirect = <HTTP or HTTPS U.
40-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Using 802.
40-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication MD A does not enforce the order of de vice authentication.
40-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication 802.
40-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication About 802.1X Port-Based Authentication Host Authorization— Ensures that on ly traf f ic from authorized hosts (connect ing to the switch with a supplicant) is allo wed on the network.
40-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication switch denies access to the netw ork for all wireless access point-attached clients.
40-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication • Conf iguring 802.1X with Inaccessible Authentication Bypass, page 40-60 (optional) • Conf iguring 802.
40-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication 802.1X Configuration Guidelines Guidelines for conf iguring 802.1X authentication in clude the follo wing: • The 802.
40-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Note T o allow VLAN assignment, you must enable AAA authorization to configure the switch for all network-related service requests.
40-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Note Enabling Spanning T ree PortFast ensures that a port comes up immediately after authorization.
40-31 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Switch(config-if)# switchport m.
40-32 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Dot1x Authenticator Client List ------------------------------- Supplicant = 0015.
40-33 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication T o conf igure the RADIUS server parameters on the swi tch, perform this task: Command Purpose Step 1 Switch# configure terminal Enters global conf iguration mode.
40-34 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication This ex ample shows ho w to specify t he server with IP address 17 2.120.39.46 as the RADIUS serv er .
40-35 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication This exampl e show s how to en able 802.1X authentication and to allo w multiple hosts: Cisco IOS Release 12.
40-36 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication This example sho ws ho w to enable MD A and to allo w both a host and a 802.1X voice de vice (a Cisco or third-party phon e with 802.
40-37 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Switch(config-if)# dot1x port-c.
40-38 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Switch(config-if)# authenticat.
40-39 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication switchport voice vlan 1234 acce.
40-40 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Cisco ACS Configuration for DACL Note O n l y C i s c o AC S s u p p o r t s DAC L .
40-41 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Configuring ACS T o conf igure .
40-42 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication dot1x pae authenticator end Switch# Switch# show access-list pacl-4 10 permit ip host 1.
40-43 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Configuring a Do wnloadable Policy T o configure do wnloadable po licies, perform this task: Command Purpose Step 1 Switch# configure terminal Enters global conf iguration mode.
40-44 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication The follo wing example illustrates ho w to configure a swit ch for do wnloadable policy: Switch# config terminal Enter configuration commands, one per line.
40-45 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Configuring the Switch T o conf igure the switch for per -user AC L and filt er-ID A CL: Step 1 Config ure the IP de vice tracking table.
40-46 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Figure 40-12 sho ws how members of the group you are conf iguring are denied all acce ss to the 10.
40-47 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Figure 40-13 Configur ing the Filter -ID At tribute Note Outbound A CLs (for example, 100 .
40-48 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication The follo w ing command sho ws that the Policy Enforced Module (EPM) session contains the per-user -a cl from A CS: Switch# show epm session ip 50.
40-49 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication The follo wing command shows t .
40-50 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Configuring a Per-User ACL and.
40-51 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication The follo wing example illustrates ho w to configure a swit ch for do wnloadable policy: Switch# config terminal Enter configuration commands, one per line.
40-52 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication This example sho ws ho w to configure a switch to deri ve the reauthenti cation period from the server and to verify the conf iguration: Cisco IOS Release 12.
40-53 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Dot1x Authenticator Client List Empty Port Status = AUTHORIZED Switch# Configuring MAC Move MA C move allo ws an authenticated host to move fro m one switch port to anoth er .
40-54 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication This exampl e show s how to gl.
40-55 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication %PM-4-ERR_DISABLE: security-violation error detected on <interface name>, putting <interface name> in err-disable state Configuring 802.
40-56 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication This example sho ws how to enable regular VLAN 50 on Fast Ethernet 4/3 as a guest VLAN on a static access port: Cisco IOS Release 12.
40-57 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Cisco IOS Release 12.
40-58 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication This e xample sho ws how to en able the gues t VLAN feature and to specify VLAN 5 as a guest VLAN: Cisco IOS Release 12.
40-59 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Note Removing a 802 .1X MAB conf igurat ion from a port does not imp act th e authorized or authenticated state of the port.
40-60 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication QuietPeriod = 60 ServerTimeout.
40-61 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Step 4 Switch(config)# interface interface-id Specifi es the port to be configured and enters interface configuration mode.
40-62 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication The follo wing example shows a full configuration of 802.
40-63 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Switch# configure terminal Swit.
40-64 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Note Unidirectional controlled port only w orks when Sp anning Tree PortF ast is enabled on the port.
40-65 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication SuppTimeout = 30 ReAuthPeriod = 3600 (Locally configured) ReAuthMax = 2 MaxReq = 2 TxPeriod = 30 RateLimitPeriod = 0 Switch# Cisco IOS Release 12.
40-66 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Note Ensure that the VLANs yo u specify as part of the VLA N group are enabled on the switch.
40-67 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication ACS Configuration After conf iguring the switch, you mu st provide the VLAN gro up name in the A CS configur ation.
40-68 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Figur e 40-15 VLAN User Distr .
40-69 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication This exampl e shows ho w to enable a regular VLAN 4 0 on Fast Ethernet 4 /3 as a authentication-fa iled VLAN on a static access port: Cisco IOS Release 12.
40-70 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Cisco IOS Release 12.
40-71 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication This exampl e show s how to enable 802.1X with v oice VLAN feature on Fa st Ethernet interface 5/ 9: Cisco IOS Release 12.
40-72 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication T o enable 802.1X with VLAN assignment, perfo rm this task: The follo wing example sho ws ho w to configure MD A on an interface and 802.
40-73 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Figure 40-16 User Se t Up Note .
40-74 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Step 3 Switch(config-fallback-profile)# ip access-group rule-name in Specif ies the default A CL to apply to network tr af fic before web-based aut hentication.
40-75 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Step 3 Switch(config-fallback-profile)# ip access-group rule-name in Specif ies the default A CL to apply to network tr af fic before web-based aut hentication.
40-76 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication This exampl e show s how to enable 802.1X fal lback to MAB, and then to enable web-based authentication, on an 802 .
40-77 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Dot1x Info for GigabitEthernet7.
40-78 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication T o determine if a host was au.
40-79 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication T o enable periodic reauthentic.
40-80 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication Cisco IOS Release 12.
40-81 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication This exampl e shows ho w to enable 802.1X on Fa st Ethernet interface 5/9 and to allo w multiple hosts: Cisco IOS Release 12.
40-82 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication This exampl e shows ho w to set the quiet period on the swi tch to 30 seconds: Cisco IOS Release 12.
40-83 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication This example sho ws how to set the re transm ission time to 60 seconds: Cisco IOS Release 12.
40-84 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication T o set the switch-to-client f.
40-85 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Cisco IOS Release 12.
40-86 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication When CISP is enabled on a trunk po rt, the following features are iner t.
40-87 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Figur e 40-17 Specifying the Cisco A V P air Starting with Cisco IOS XE Release 3.
40-88 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication dot1x pae authenticator authen.
40-89 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication Current configuration : 149 byt.
40-90 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port -Based Authentication This exampl e show s how to co.
40-91 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Configuring 802.1X Port-Based Auth entication • Although modif ied trunk pa.
40-92 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS Switch# dot1x initialize Removing 802.
40-93 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS Understanding RADIUS RADIUS is a distributed client/server system th at secures networks against unauthorized access.
40-94 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS Figur e 40-18 T ransiti oning fr om RA.
40-95 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS • CoA Request Commands, page 40 -97 • Session Reauthenticati on, page 40-98 • Displaying 802.
40-96 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS T able 40-3 sho ws the possible values fo r the Error-Cause attribute. Preconditions T o use the CoA interface, a session must already ex ist on the switch.
40-97 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS • Audit-Session-Id (Cisco VSA) • Ac.
40-98 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS Session Reauthentication The AAA serve.
40-99 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS CoA Disconnect-Request This command is a standard Discon nect-Request.
40-100 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS Configuring RADIUS This section descri bes ho w to conf igure your switch to suppor t RADIUS.
40-101 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS Y ou identify RADIUS security servers b y their hostnam e or IP address, hostname and specif ic UDP port numbers, or their IP address and specif ic UDP port numbers.
40-102 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS T o configure per -server RADIUS server communication, perform this task. This procedure is required .
40-103 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS This exampl e sho ws how to conf igure.
40-104 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS Step 3 Switch(config)# aaa authentication login { default | list-name } method1 [ method2.
40-105 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS T o disable AAA, use the no aaa new-model global conf iguration command. T o disable AAA authentic ation, use the no aaa authentication login { default | list-name } metho d1 [ method2.
40-106 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS T o define th e AAA server group and .
40-107 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS T o remove the specif ied RADIUS server , use the no radius-server host hostname | ip-addr ess global confi guration command.
40-108 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS T o disable authorization, use the no aa a authorization { network | exec } me thod1 global configuratio n command.
40-109 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS Configuring Settings fo r All RADIUS S.
40-110 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS For e x ample, this A V pair activ at.
40-111 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS Configuring the Switch for Vendor-Prop.
40-112 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Controlling Switch Access with RADIUS Configuring CoA on the Switch T o conf igure CoA on a switch, perfo rm th ese steps. This procedure is required.
40-113 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Displaying 802.1X Statistics and Status T o disable AAA, use the no aaa new-model global configurat ion comm and.
40-114 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Displaying Authentication Details Displaying Authentication Details This se.
40-115 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Displaying Authentication Details Displaying a Summary of All Auth M anager .
40-116 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Displaying Authentication Details The indi vidual output can be further ref ined by using the handle , interface , MA C , session-id , or method ke ywords: Switch# show authentication sessions mac 000f.
40-117 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Displaying Authentication Details mab Not run Displaying MAB Details The fol.
40-118 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 40 Configuring 802.1X Port-Based Authentication Displaying Authentication Details Switch(config)# epm logging Switch# clear dot1x all Switch# *May 15 08:31:26.561: %EPM-6-POLICY_REQ: IP=100.
CH A P T E R 41-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 41 Configuring the PPPoE Intermediate Agent DSL Forum TR-101 [1] of fers a means by which the PPPoE Discov ery packets are tagged at the service provider's access switch with subscriber line specif ic information.
41-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 41 Configuring the PPPoE Intermediate Agent Related Documents Related Documents RFCs About PPPoE Intermediate Agent PPPoE Int.
41-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 41 Configuring the PPPoE Intermediate Agent RFCs The follo wing example sho ws how to set an access node id entifier o f abcd .
41-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 41 Configuring the PPPoE Intermediate Agent RFCs Enabling PPPoE IA on an Interface This functionality enables the PPPoE IA feature on an interf ace. The pppoe intermediate-agent command has an effect only if the PPPoE IA feature was enabled globally with this command.
41-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 41 Configuring the PPPoE Intermediate Agent RFCs Configuring PPPoE IA Vendor-tag Stripping on an Interface This functionality .
41-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 41 Configuring the PPPoE Intermediate Agent Displaying Config uration Parameters Specif ic VLAN: Switch# configure terminal S.
41-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 41 Configuring the PPPoE Intermediate Agent Displaying Configuration Parameters The info ke yword appears if the PPPoE Intermediate Agent is enabled globally on an interf ace or on a VLAN (in an interface).
41-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 41 Configuring the PPPoE Intermediate Agent Clearing Packet Counters Server responses from untrusted ports = 0 Client request.
41-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 41 Configuring the PPPoE Intermediate Agent Tro ublesho oting Tips The event option of the command echoes important messag es (interf ace st at e change to errd isabled due to PPPoE discov ery packet s entering at a rate exceedin g the conf igured limit).
41-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 41 Configuring the PPPoE Intermediate Agent Troubleshooting Tips.
CH A P T E R 42-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 42 Configuring Web-Based Authentication This chapter describe s how to configure web-based authentication.
42-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 42 Configurin g Web-Based Authenticatio n About Web-Based Authentic ation These sections describe the role of web-based authe.
42-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 42 Configuring Web-Based Authentic ation About Web-Based Authentication For Layer 3 interfaces, web-based authentication se ts an HTTP intercept ACL when the feature is configured on the interf ace (or when the interface is put in service).
42-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 42 Configurin g Web-Based Authenticatio n About Web-Based Authentic ation Customization of the Authentication Proxy Web Pages.
42-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 42 Configuring Web-Based Authentic ation About Web-Based Authentication LAN Port IP Y ou can configur e LAN port IP (LPIP) and Layer 2 we b-based auth entication on the same port.
42-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 42 Configurin g Web-Based Authenticatio n Configuring Web-Base d Authentication Configuring Web-Based Authentication These se.
42-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 42 Configuring Web-Based Authentic ation Configuring Web-Based Authentication proxyacl# 40=permit udp any any eq tftp Note The proxyacl entry determines the type of allowed network access.
42-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 42 Configurin g Web-Based Authenticatio n Configuring Web-Base d Authentication This exampl e show s how to enable web-based .
42-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 42 Configuring Web-Based Authentic ation Configuring Web-Based Authentication Configuring AAA Authentication T o enable web-ba.
42-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 42 Configurin g Web-Based Authenticatio n Configuring Web-Base d Authentication When you configure the RADIUS serv er parameters, foll ow these steps: • Specify th e key string on a separate command line.
42-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 42 Configuring Web-Based Authentic ation Configuring Web-Based Authentication This example sho ws how to conf igure the RADIUS server parameters on a switch: Switch(config)# ip radius source-interface Vlan80 Switch(config)# radius-server host 172.
42-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 42 Configurin g Web-Based Authenticatio n Configuring Web-Base d Authentication When configuring customized auth entication pro xy web pa ges, observe the following guide lines: • T o enable the custom web pages featur e, specify all four cust om HTML f iles.
42-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 42 Configuring Web-Based Authentic ation Configuring Web-Based Authentication Specifying a Redirection URL for Successful Login W ith Cisco IOS Release 12.
42-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 42 Configurin g Web-Based Authenticatio n Displaying Web-Based Authentication Status This exampl e shows ho w to set the max.
CH A P T E R 43-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 43 Configuring Port Security This chapter descr ibes how to config ure port security on the Catalyst 4500 series switch.
43-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Port Securi ty Comm ands Port Security Commands This table lists the commands most commonly used with port secur ity . Command Purpose Navigation errdisable recov ery cause psecure-vi olation Brings a secure p ort out of error-disabled state.
43-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security About Port Security About Port Security Port security enables you to res trict the number of MA C addresses (termed secur e MA C addresses ) on a port, allowing you to pre vent access by unauthorized M AC addresses.
43-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity About Port Security Secure MAC Addresses Port security supports th e follo w ing types of secure MA C addresses: • Dynamic or Learned—Dynamic secure MAC addresses are learned when packets are recei v ed from the host on the secure port.
43-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security About Port Security Note On a trunk port, a maximum numb er of secure MA C addresses can be configured on both the port and port VLAN.
43-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity About Port Security The sticky secure MA C a ddresses do not automatically become part of the conf iguration f ile, which is the startup config uration used each time the sw itch restarts.
43-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Configuring Port Security on Acc ess Ports Invalid Packet Handling Y ou might want to rate limit .
43-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Configuring Port Security on Ac cess Po rts Step 4 Switch(config-if)# [ no ] switchport port-security maximum value (Optional) Sets the max imum number of secure MA C addresses for the interface.
43-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Configuring Port Security on Acc ess Ports Step 6 Switch(config-if)# [ no ] switchport port-secur.
43-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Configuring Port Security on Ac cess Po rts Note T o clear dynamic ally learned port security MA C addre sses in the CAM table, use the clear port-security dynamic command.
43-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Configuring Port Security on Acc ess Ports Example 1: Setting Maximum Nu mber of Secure Addresses This exampl e show s how to enable port security on the F ast Ethernet interface 3/12 and ho w to set the maximum number of secure ad dresses to 5.
43-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Configuring Port Security on Ac cess Po rts This exampl e shows ho w to set the aging time to .
43-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Configuring Port Security on Acc ess Ports Example 6: Configuring Sticky Port Security This exam.
43-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Configuring Port Security on PVLA N Po rts The follo wing example sho ws how to conf igure rate limit for in val id source packets on F ast Ethernet interface 5/1: Switch# configure terminal Enter configuration commands, one per line.
43-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Configuring Port Security on PVLAN Ports Figur e 43-1 P ort Secur i ty on Isol ated Pr ivat e VL.
43-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Configuring Port Security on PVLA N Po rts Example of Port Security on an Isolated Private VLA.
43-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Configuri ng Port Securit y on Trunk Port s Example of Port Security on a Private VLAN Promiscuo.
43-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Configuring Port Security on Trun k Ports Figure 43-2 T r unk Por t Se cur ity Y ou can configure various po rt security related parameters on a per -port per-VLAN basis.
43-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Configuri ng Port Securit y on Trunk Port s Examples of Trunk Port Security The follo wing examp.
43-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Configuring Port Security on Trun k Ports 5 3 0 6 3 0 Switch# Switch# show running interface gi1/1 Building configuration.
43-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Configuri ng Port Securit y on Trunk Port s Switch# show port-security interface g1/1 address vl.
43-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Configuring Port Security on Voice Ports Port Mode Changes Generally , when a port mode changes, all dynamic ad dresses associated with that port are removed.
43-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Configuring Port Security on Voice Ports Configuring Port Security on Voice Ports T o conf igure.
43-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Configuring Port Security on Voice Ports Step 6 Switch(config-if)# [ no ] switchport port-security mac-address mac_address [ vlan { voice | access }] (Optional) Specif ies a secure MA C address for the interface.
43-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Configuring Port Security on Voice Ports Note T o clear dynamically learned port security MA C addresses in the CAM table, use the clear port-security dynamic command.
43-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Configuring Port Security on Voice Ports Switch# show port-security address Secure Mac Address.
43-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Displaying Port Security Settings Total Addresses in System (excluding one mac per port) : 5 Max Addresses limit in System (excluding one mac per port) : 3072 Switch# show running-config interface fastEthernet 5/1 Building configuration.
43-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Displaying Port Security Settings T o display traf fic contro l information, perform one or mo.
43-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Displaying Port Security Settings Fa3/6 2 2 0 Shutdown Fa3/7 2 2 0 Shutdown Fa3/8 2 2 0 Shutdown.
43-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Displaying Port Security Settings 1 0000.0001.1201 SecureSticky Fa3/7 - 1 0000.0001.1300 SecureSticky Fa3/8 - 1 0000.0001.1301 SecureSticky Fa3/8 - 1 0000.
43-31 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Configuring Port Security with Oth er Features/Environments Example 7: Displaying Secured MAC Ad.
43-32 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Configuring Port Security w ith Other Features/En vironments Any combination of the source MA .
43-33 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Security Port Security Configuration Guidelines and Restrictions Figur e 43-3 P ort Secur ity in a Wirele.
43-34 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 43 Configuring Port Secu rity Port Security Con figuration Guidelines an d Re stric tions • When you enter a maximum secu .
CH A P T E R 44-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 44 Configuring Control Plane Policing and Layer 2 Control Packet QoS This chapter cont ains information on ho w to protect yo ur Catalyst 4500 series switch using control plane policing (CoPP).
44-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 44 Configuri ng Control Plane Policing and Layer 2 Control Packet QoS Configuring Control Plane Policing • General Guid eli.
44-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 44 Configuring Control Pl ane Policing and Layer 2 Control Packet QoS Configuring Cont ro l Plane Policing For the data and m anagement p lane traff ic, you can de fine your own A CLs to m atch the tra f fi c class that you want to police.
44-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 44 Configuri ng Control Plane Policing and Layer 2 Control Packet QoS Configuring Control Plane Policing • Begi nning with Cisco IOS Release 12.2(31) SGA1, the GARP class wa s excluded from CoPP .
44-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 44 Configuring Control Pl ane Policing and Layer 2 Control Packet QoS Configuring Cont ro l Plane Policing The follo wing example sho ws how to pol ice CDP packets: Switch# config terminal Enter configuration commands, one per line.
44-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 44 Configuri ng Control Plane Policing and Layer 2 Control Packet QoS Configuring Control Plane Policing Configuring CoPP for.
44-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 44 Configuring Control Pl ane Policing and Layer 2 Control Packet QoS Configuring Cont ro l Plane Policing The follo wing example sho ws how to configure trusted hosts wi th source addresses 10.
44-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 44 Configuri ng Control Plane Policing and Layer 2 Control Packet QoS Configuring Control Plane Policing Class system-cpp-cgm.
44-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 44 Configuring Control Pl ane Policing and Layer 2 Control Packet QoS Monitoring CoPP Monitoring CoPP Y ou can e nter the show.
44-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 44 Configuri ng Control Plane Policing and Layer 2 Control Packet QoS Monitoring CoPP Match: access-group name system-cpp-ri.
44-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 44 Configuring Control Pl ane Policing and Layer 2 Control Packet QoS Configuring Layer 2 Control Packet QoS permit any 0180.c200.0000 0000.0000.000f Extended MAC access list system-cpp-cdp permit any host 0100.
44-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 44 Configuri ng Control Plane Policing and Layer 2 Control Packet QoS Configuring Layer 2 Control Packet QoS Enabling Layer 2 Control Packet QoS T o enable Layer 2 control packet Qo S, perform this task: T able 44-1 list s the types of packets impacted b y this feature.
44-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 44 Configuring Control Pl ane Policing and Layer 2 Control Packet QoS Configuring Layer 2 Control Packet QoS Switch(config-if.
44-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 44 Configuri ng Control Plane Policing and Layer 2 Control Packet QoS Configuring Layer 2 Control Packet QoS Note TCAM resources are not consumed when the interface is in a down state.
44-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 44 Configuring Control Pl ane Policing and Layer 2 Control Packet QoS Configuring Layer 2 Control Packet QoS Switch(config)# .
44-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 44 Configuri ng Control Plane Policing and Layer 2 Control Packet QoS Configuring Layer 2 Control Packet QoS The follo w ing example sho ws how to create user-def ine d MACLs and class maps to id entify EAPOL and BPDU pack ets.
44-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 44 Configuring Control Pl ane Policing and Layer 2 Control Packet QoS Policing IPv6 Control Traffic Policing IPv6 Control Tra.
44-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 44 Configuri ng Control Plane Policing and Layer 2 Control Packet QoS Policing IPv6 Control Traffic police cir 32000 bc 1500.
CH A P T E R 46-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 46 Configuring Dynamic ARP Inspection This chapter descri bes how to configure Dynamic ARP Inspection (D AI) on the Catalyst 4500 series switch.
46-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 46 Co nfig uring Dynamic ARP Inspectio n About Dynamic ARP Inspectio n ARP Cache Poisoning Y ou can atta ck hosts, switches, and routers connected to your Layer 2 network by “poisoning ” their ARP caches.
46-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 46 Configuring Dynamic ARP Insp ection About Dynamic ARP In spection Interface Trust State, Security Co verage and Network Configuration D AI assoc iates a trust state with each interface on the system.
46-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 46 Co nfig uring Dynamic ARP Inspectio n About Dynamic ARP Inspectio n Relative Priority of Static Bindings and DHCP Snooping Entries As mentioned pre viously , DAI populates it s database of v alid MA C address to IP address bindings through DHCP snoo ping.
46-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 46 Configuring Dynamic ARP Insp ection Configuring Dynamic ARP Inspection Port Channels Function A gi ve n physical port can join a chann el only when th e trust state of the physical port and of the channel match.
46-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 46 Co nfig uring Dynamic ARP Inspectio n Configuring Dynamic ARP Inspection Figur e 46-3 ARP P ack et V alidation on a VLAN E.
46-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 46 Configuring Dynamic ARP Insp ection Configuring Dynamic ARP Inspection DAI Configuration Example This example sh ows ho w to configu re D A I on Switch A in VLAN 100. Y ou would perform a similar procedure on Switch B.
46-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 46 Co nfig uring Dynamic ARP Inspectio n Configuring Dynamic ARP Inspection Gi3/1 Untrusted 15 1 Gi3/2 Untrusted 15 1 Gi3/3 U.
46-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 46 Configuring Dynamic ARP Insp ection Configuring Dynamic ARP Inspection SwitchA# show ip dhcp snooping binding MacAddress IpAddress Lease(sec) Type VLAN Interface ------------------ --------------- ---------- ------------- ---- -------------------- 00:01:00:01:00:01 170.
46-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 46 Co nfig uring Dynamic ARP Inspectio n Configuring Dynamic ARP Inspection Gi3/20 Untrusted 15 1 Gi3/21 Untrusted 15 1 Gi3/.
46-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 46 Configuring Dynamic ARP Insp ection Configuring Dynamic ARP Inspection Configuring ARP ACLs for Non-DHCP Environments This procedure sho ws ho w to conf igure D AI when Switch B show n in Figure 46-3 does not support D AI or DHCP snoopi ng.
46-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 46 Co nfig uring Dynamic ARP Inspectio n Configuring Dynamic ARP Inspection Step 5 Switch(config)# ip arp inspectio n filter arp-acl-name vlan vlan-range [ static ] Applies the ARP A CL to the VLAN.
46-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 46 Configuring Dynamic ARP Insp ection Configuring Dynamic ARP Inspection T o remov e the ARP A CL, use the no arp access-list gl obal confi guration command.
46-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 46 Co nfig uring Dynamic ARP Inspectio n Configuring Dynamic ARP Inspection Gi3/35 Untrusted 15 1 Gi3/36 Untrusted 15 1 Gi3/.
46-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 46 Configuring Dynamic ARP Insp ection Configuring Dynamic ARP Inspection T o conf igure the log b uffer , perform this task: Command Purpose Step 1 Switch# configure terminal Enters global configurati on mode.
46-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 46 Co nfig uring Dynamic ARP Inspectio n Configuring Dynamic ARP Inspection T o return to the default lo g buf fer settings, use th e no ip arp inspection log-b uffer global configuration command.
46-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 46 Configuring Dynamic ARP Insp ection Configuring Dynamic ARP Inspection T o limit the rate of incoming ARP pack ets, perform this task: T o return to the defaul t rate-limit conf iguration, use the no ip arp inspection limit interf ace configuration command.
46-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 46 Co nfig uring Dynamic ARP Inspectio n Configuring Dynamic ARP Inspection SwitchB# show ip arp inspection interfaces Inter.
46-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 46 Configuring Dynamic ARP Insp ection Configuring Dynamic ARP Inspection vmps Disabled pagp-flap Disabled dtp-flap Disabled .
46-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 46 Co nfig uring Dynamic ARP Inspectio n Configuring Dynamic ARP Inspection T o perform specific checks on incomin g ARP pack ets, perform this task: T o disable checking , use the no ip arp inspection v alidate [ src-mac ] [ dst-mac ] [ ip ] global confi guration command.
46-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 46 Configuring Dynamic ARP Insp ection Configuring Dynamic ARP Inspection Vlan Configuration Operation ACL Match Static ACL -.
46-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 46 Co nfig uring Dynamic ARP Inspectio n Configuring Dynamic ARP Inspection.
CH A P T E R 45-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 45 Configuring DHCP Snooping, IP Source Guard, and IPSG for Static Hosts This chapter describes ho w to configu re Dynamic Host Conf iguration Protocol (DHCP) snoopin g, IP source guard, and IP source guard (IPSG) for static hosts on Catalyst 4500 series switches.
45-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts About DHCP Snooping The DHCP snooping binding table.
45-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts About DHCP Snooping The mechanism for the database agent stores the bindings in a file at a conf igured location .
45-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts About DHCP Snooping Option 82 Data Insertion In residential, metropolit an Ethern et-acces s en vironments, DHCP can cent rally manage the IP address assignments for a large number of subscribers.
45-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts About DHCP Snooping • The DHCP serv er unicasts the reply to the switch if the request was relayed to the server b y the switch.
45-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping Figure 45-3 sho ws the packet formats for user-confi gured remote ID and circuit ID suboptions.
45-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping • Enabling DHCP Sn oopin.
45-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping T o enable DHCP snooping, perform th is task: Y ou can configure DHCP snooping for a single VLAN or a r ange of VLANs.
45-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping Switch(config-if)# ip dhcp.
45-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping the ip dhcp snooping inf.
45-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping T o disable DHCP snooping, use the no ip dhcp snooping global config uration command.
45-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping This exampl e shows ho w.
45-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping Enabling the DHCP Snoopin.
45-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping T o pre vent the port fr.
45-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping Switch# show errdisable r.
45-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping Switch# show ip dhcp snooping database detail Agent URL : tftp://10.
45-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts Configuring DHCP Snooping The switch maintains tw o sets of counters for thes e i gnored bindings.
45-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Displaying DHCP Sno oping Inform ation Last Succeded Time : 15:24:34 UTC Sun Jul 8 2001 Last Failed Time : None Last Failed Reason : No failure recorded.
45-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts About IP Source Gu ard Displaying a Binding Table The DHCP snooping bindi ng table f or each switch contains bi nding entries that correspond to unt rusted ports.
45-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Configuring IP Source Gua rd the client IP traf fi.
45-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts Configuring IP Source Guard If you want to stop IP .
45-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Displaying IP Source Guar d Information Switch# sh.
45-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts Displaying IP Source Bindi ng Information • This .
45-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Configuring IP Source Guard for Static Hosts Configuring IP Source Guard for Static Hosts Note IPSG for static hosts should not be used o n uplink ports.
45-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts Configuring IP Source Gu ard for Static Hosts Configuring IPSG for Static Hosts on a Layer 2 Access Port Y ou c an configure IPSG for static hosts on a Laye r 2 access po rt.
45-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Configuring IP Source Guard for Static Hosts T o s.
45-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts Configuring IP Source Gu ard for Static Hosts The follo wing example displays all IP- to-MA C binding entries for all interfaces.
45-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Configuring IP Source Guard for Static Hosts 200.1.1.5 0001.0600.0000 8 GigabitEthernet3/1 INACTIVE 200.
45-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 45 Configuring DHCP Snoopin g, IP Source Guard, and IPSG for Static Hosts Configuring IP Source Gu ard for Static Hosts Switc.
45-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 45 Configurin g DHCP Snooping, IP Source Guard, and IPSG for Static Hosts Configuring IP Source Guard for Static Hosts.
CH A P T E R 47-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 47 Configuring Network Security with ACLs This chapter describes how to use access control lists (A CLs) to configure network security on the Catalyst 4500 series switches.
47-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs About ACLs • Using VLAN Maps with Router A CLs, page 47-32 • Conf iguring P A.
47-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs About ACLs The Catalyst 4500 seri es switch supports three types of A CLs: • IP A.
47-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs About ACLs • Extended IP access lists u se source and destination addresses and o ptional protocol type information for matching operations.
47-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs About ACLs As with router A CLs, the switch examines A CLs assoc i ated with features configured on a gi ven interface and permits or denies pack et forwardi ng based on ho w the packet ma tches the ent ries in the A CL.
47-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Hardware and Software ACL Support Figur e 47 -2 Using VLAN Maps t o Control T raf.
47-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs TCAM Programming and ACLs for Supervisor En gine II-Pl us, Supervisor Eng in e IV, .
47-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs TCAM Programming and ACLs for Supervisor Engine II-Plus, Su perviso r Engine IV, .
47-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs TCAM Programming and ACLs for Supervisor En gine II-Pl us, Supervisor Eng in e IV, .
47-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs TCAM Programming and ACLs for Supervisor Engine II-Plus, Su perviso r Engine IV,.
47-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs TCAM Programming and ACLs for Supervisor En gine II-Pl us, Supervisor Eng in e IV,.
47-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs TCAM Programming and ACLs for Supervisor Engine II-Plus, Su perviso r Engine IV,.
47-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs TCAM Programming and ACLs for Supervisor En gine II-Pl us, Supervisor Eng in e IV, Supervisor Eng in e V, and Pack ets that match entries in partiall y programmed A C Ls are processed in software using the CPU.
47-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs TCAM Programming and ACLs for Supervisor Engine II-Plus, Su perviso r Engine IV, Supervisor Engine V, and Supervisor • DHCP Snooping shoul d be enabled globally on a gi ven VLAN.
47-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs TCAM Programming and ACLs for Supervisor En gine II-Pl us, Supervisor Eng in e IV,.
47-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs TCAM Programming and ACLs for Superviso r En gine 6-E and Supervisor Engine 6L-E.
47-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Layer 4 Operators in ACLs • gt (greater than) • lt (less than) • neq (not eq.
47-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Layer 4 Operators in ACLs Note The eq operator can be used an unlimited n umber of times because eq does not use a Layer 4 operation in hardware.
47-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Layer 4 Operators in ACLs • F or some packets, when the hardware runs out of res.
47-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Configuring Unicast MA C Address Filtering access-list 103 permit tcp any gt 1024 any gt 1023 Note Remember that source port lt 80 an d destination port lt 80 are consider ed dif ferent operations.
47-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring Named MAC Exten ded ACLs For more in formation about the supp orted non-IP protocols in the mac access-list extended command, refer to the Catalyst 4500 Series Switc h Cisco IOS Command Refer e nce .
47-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Configuring EtherT ype Matching Switch(config)# mac access-list extended mac1 Sw.
47-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring Named IPv6 ACLs Switch(config)# mac access-list extended matching Swit.
47-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Applying IPv6 ACLs to a Layer 3 Interface Note Hardware stat istics is disabled b y default.
47-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring VLAN Maps • VLAN Map Conf iguration Guidelines, page 47-25 • Creat.
47-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Configuring VLAN Maps • If the VLAN map has at least one match clause for the type of packet (IP or MA C) and the packet does not ma tch any of these match c lauses, the de fault is to drop the pac ket.
47-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring VLAN Maps Example 1 This example sho ws how to create an A CL and a VLAN map to deny a packet. In the f irst map, any packets that match the ip1 A CL (TCP pack ets) wo uld be dropp ed.
47-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Configuring VLAN Maps Example 3 In this examp le, the VLAN map is configured to dr op MA C packets and forward IP packets by default.
47-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring VLAN Maps Applying a VLAN Map to a VLAN T o apply a VLAN map to on e o.
47-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Configuring VLAN Maps Figur e 47 -3 Wiring Closet Configur ation For e xample, i.
47-31 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring VLAN Maps Denying Access to a Server on Another VLAN Figure 47-4 sho ws how to restrict access to a server on another VLAN.
47-32 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Displaying VL AN Ac cess Map Information Displaying VLAN Access Map Information .
47-33 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Using VLAN Maps with Router ACLs When possible , try to writ e the ACL so that all entrie s have a single action except for the final, default action.
47-34 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Using VLAN Maps with Ro ute r AC Ls Figur e 47 -5 Applying ACLs on S witched P a ck ets ACLs and Routed Packets Figure 47-6 sho ws how A CLs are applied on routed packet s.
47-35 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring PACLs Figur e 47 -6 Applying ACLs on Routed P ack ets Configuring PACLs This section describes ho w to conf igure P A CLs, which are used to control f iltering on Layer 2 interfaces.
47-36 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Configuring PACLs Step 2 Use the IP access-group, IPv6 traff i c-filter , or mac access-group interface co mmand to apply IPv4, IPv6, or MA C A CLs to one or more La yer 2 interfaces.
47-37 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring PACLs ip access-list extended AUTH-DEFAULT-ACL This A CL is not n vgened. A UTH-DEF A UL T -A CL is a ttached provided there are sessions applying dynamic A CLs (Per-user/Filter -Id/DA CL).
47-38 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Configuring PACLs Configuring IPv4, IPv6, and MAC ACLs on a Layer 2 Interface Note Only IPv4, IPv6 and MA C A CLs can be applied to Layer 2 physical in terfaces.
47-39 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring PACLs Using PACL with Access-Group Mode Y ou can use the access group mode to change the way P A CLs interact with other A CLs.
47-40 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Configuring PACLs Applying ACLs to a Layer 2 Interface T o apply IPv4, IPv6, an .
47-41 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Using PACL with VLAN Maps an d Router ACLs This example sho ws that MA C a ccess g.
47-42 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Using PACL with VLAN Maps and Router ACLs Figur e 47 -7 Scenar io 1: P ACL Int e.
47-43 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring RA Guard Scenario 3 : Host A is connected to an interface in VLAN 10, which has a V A CL and an SVI conf igured.
47-44 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Configuring RA Guard obtained from the obser ved source address of the Router-Adv ertisement (RA) message. Howev er, in some networks, in v alid RAs are observed.
47-45 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring RA Guard Figur e 47 -1 0 T ypical RA Guard Deployment Configuring RA G.
47-46 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Configuring RA Guard ! interface GigabitEthernet1/1 ipv6 nd raguard end The foll.
47-47 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 47 Configuri ng Network Security with ACLs Configuring RA Guard • RA Guard is purely an Layer 2 port based feature and can be conf igured only on switchpo rts. It works irresp ectiv e of whether IPv6 routing is enabled.
47-48 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 47 Configurin g N etwork Security with ACLs Configuring RA Guard.
CH A P T E R 48-1 Catalyst 4500 Switch Software Configuration Guide OL-23818-01 48 Support for IPv6 This chapter lists th e IP version 6 (IPv6) features supported on the Catalyst 45 00 and Catalyst 4900 series switches.
48-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 48 Suppo rt for IPv6 About IPv6 For informatio n about ho w Cisco Systems implements IPv6, go to thi s URL: http://www .cisco.com/en/ US/products/ps6553/pro ducts_ios_technolog y_home.
48-3 Catalyst 4500 Switch Software Configuration Guide OL-23818-01 Chapter 48 Support for IPv6 About IPv6 Y ou can find infor mation about these features at t his location: http://www .cisco.com/en/ US/docs/ios/ipv6/conf iguration/guide/ip6-addr g_bsc_con.
48-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 48 Suppo rt for IPv6 About IPv6 • MQC traf fic po licing • MQC packing marking an d remarking • Queueing Y ou can find infor mation about these features at t his location: http://www .
48-5 Catalyst 4500 Switch Software Configuration Guide OL-23818-01 Chapter 48 Support for IPv6 About IPv6 Static Routes Networking de vices forward pack ets using route information t hat is either manually conf igured or dynamically learned using a routing protocol.
48-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 48 Suppo rt for IPv6 About IPv6 http://www .cisco.com/en/ US/docs/ios/ipv6/con figuration /guide/ip6-rip.htm l OSPF The switch running the IP services feature set su pports Open Shortest P ath First (OSPF) for IPv6, a link-state protocol for IP .
48-7 Catalyst 4500 Switch Software Configuration Guide OL-23818-01 Chapter 48 Support for IPv6 IPv6 Default States Tunneling The follo wing tunneling features are supported for IPv6 on the Cat alyst 4.
48-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 48 Suppo rt for IPv6 IPv6 Default States.
CH A P T E R 49-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 49 Port Unicast and Mult icast Flood Blocking This chapter de scribes how to configure multicast a nd unicas t flood bloc king on th e Cataly st 4000 family swi tch.
49-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 49 Port Unic as t and Multicast Flood Blocking Configuring Port Block ing Note Blocking of unicast or multicast traf fic is not auto matically en abled on a switch port; you must explicit ly configure it.
49-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 49 Port Unicast and Multicast Flo od Blocking Configuring Port Blocking Broadcast Suppression Level: 100 Multicast Suppression.
49-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 49 Port Unic as t and Multicast Flood Blocking Configuring Port Block ing.
CH A P T E R 50-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 50 Configuring Storm Control This chapter describe s how to configure port-based traf fic con trol on the Catalyst 4500 series swit ch.
50-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 50 Configuring Sto rm Control About Storm Control Note Storm control and Multicast storm con trol are supported in hardw are on all ports on the WS-X4516 , WS-X4013+10GE, WS-X4516-10GE, WS-C4948, WS-C4948-10GE, WS-C4900M, WS-C4948E, WS-X45-Sup6-E, and WS-X45 -Sup6L-E.
50-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 50 Configuring Storm Control Enabling Broadcast Storm Control Software-Based Storm Control Implementation When storm control is enabled on an inte rface, the switch monitors pack ets receiv ed on the interface and determines whether the packets are broadcast.
50-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 50 Configuring Sto rm Control Enabling Multicast Storm Control The follo wing example sho ws how to enab le storm control on interf ace: Switch# configure terminal Enter configuration commands, one per line.
50-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 50 Configuring Storm Control Enabling Multicast Storm Control Enabling Multicast Suppression on Catalyst 4900M, Catalyst 4948E.
50-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 50 Configuring Sto rm Control Disabling Broadca st Storm Control Enabling Multicast Suppression on All Other Supervisor Engin.
50-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 50 Configuring Storm Control Disabling Multicas t Storm Control The follo wing example sho ws how to disabl e storm control on interf ace. Switch# configure terminal Enter configuration commands, one per line.
50-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 50 Configuring Sto rm Control Displaying St orm Control Displaying Storm Control Note Use the show interface capabilities command to determine the mode in which storm con trol is supported on an i nterface.
CH A P T E R 51-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 51 Configuring SPAN and RSPAN This chapter descri bes how to configure the Swit ched Port Analyzer (SP AN) and Remote SP AN (RSP AN) on the Catalyst 4500 seri es switches.
51-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN About SPAN and RSPAN • Defa ult SP AN and RSP AN Configurat ion, page 51-6 SP AN mirrors traf fic from one or more source interfaces on an y VLAN or from one or more VLANs to a destination interface for analysis.
51-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN About SPAN and RSPAN SPAN and RSPAN C oncepts and Terminology This section describes co ncepts a.
51-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN About SPAN and RSPAN Some features that can cause a pa cket to be dropped du ring recei ve processing hav e no effect on SP AN; the destination port recei ves a copy of th e packet e ven if the actual incoming packet is dropped.
51-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN About SPAN and RSPAN Destination Port Each local SP AN session or RSP AN destin ation sessi on must ha ve a destination port (also called a monitoring port ) that recei ves a copy of traff ic from the source ports and VLANs.
51-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN About SPAN and RSPAN • VSP AN monitors only t raff ic that enters the sw itch, not traff ic that is routed betwee n VLANs.
51-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN Configuring SPAN Configuring SPAN The follo wing sections describe how to conf igure SP AN: • .
51-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN Configuring SPAN Configuring SPAN Sources T o conf igure the source for a SP AN session, perfo.
51-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN Configuring SPAN Configuring SPAN Destinations T o conf igure the destination for a SP AN session, perform this task: Note SP AN is limited t o one destinat ion port per session.
51-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN CPU Port Sniffing Configuration Scenario This exampl e shows ho w to use the commands described in this chapter to completely configu re and unconf igure a span session.
51-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN CPU Port Sniffing T o conf igure CPU source snif fing, perform this task: This e xample sho ws how to configu re a CPU source to snif f all pack ets receiv ed by the CPU: Switch# configure terminal Enter configuration commands, one per line.
51-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN Encapsulation Configuratio n This example sh ows ho w to use queue names and queue number ran.
51-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN Access List Filtering T o configure ingress packets and en capsulati on, perform this task: This examp le shows ho w to conf igure a destination port with 802.
51-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN Access List Filtering • When no A CLs are applied to packets e xiting a SP AN destination i.
51-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN Packet Type Filtering This example sho ws how to conf igure IP access grou p 10 on a SP AN session and verify that an access list has been conf igured: Switch# configure terminal Enter configuration commands, one per line.
51-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN Configuration Example This example sho ws how to conf igure a session to a ccept only unicast.
51-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN Configuring RSPAN Note Y ou can apply an output access control list ( A CL) to RSP AN traff ic to selectively f ilter or monitor specific pack ets.
51-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN Configuring RSPAN This exampl e show s how to clear any e xisting RSP AN conf iguration for session 1, conf igure RSP AN session 1 to monitor mul tiple source interfac es, and conf igure the destination RSP AN VLAN.
51-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN Configuring RSPAN Creating an RSPAN Destination Session T o create an RSP AN destinati on sessi.
51-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN Configuring RSPAN Creating an RSPAN Destination Se ssion and Enabling Ingress Traffic T o cre.
51-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN Configuring RSPAN This examp le sho ws how to co nf igure VLAN 901 as the source remote VLAN and ho w to config ure t he destination port for ing ress traff ic on VLAN 5 by using a securit y device that su pports 802.
51-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN Configuring RSPAN This exampl e shows ho w to remove port 1 as an RSP AN source for RSP AN session 1: Switch# configure terminal Enter configuration commands, one per line.
51-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN Configuring RSPAN T o remove one or more source VLANs from the RSP AN ses sion, use the no monitor session session_number source vlan vlan-id rx glo bal configurat ion command.
51-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN Configuring RSPAN T o monitor all VLANs on the trunk port, use th e no monitor session session_number f ilter vlan global confi guration command.
51-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 51 Configuring SPAN and RSPAN Displaying SPAN and RSPAN Status This exampl e show s how to clear any e xisting configu ration.
51-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 51 Config uring SPAN and RSPAN Displaying SPAN and RSPAN Status.
CH A P T E R 52-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 52 Configuring System Message Logging This chapter describe s how to configure system me ssage logging on the Catalyst 4500 ser ies switch.
52-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 52 Config ur ing System Message Loggin g Configuring System Message Logging Y ou can a ccess logged system messages by using the switch command-line interface (CLI) or by sa ving them to a properly configured sysl og server .
52-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 52 Configuring System Messag e Logging Configuring System Messa ge Lo gging This example sho ws a partial switch system messag.
52-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 52 Config ur ing System Message Loggin g Configuring System Message Logging Disabling Message Logging Message logging is enabled b y default. It must be en abled to send messages to any destin ation other than the console.
52-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 52 Configuring System Messag e Logging Configuring System Messa ge Lo gging Setting the Message Display Destination Device If message logging is en abled, you ca n send messages to specific locati ons in additi on to the co nsole.
52-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 52 Config ur ing System Message Loggin g Configuring System Message Logging Synchronizing Log Messages Y ou can synchronize u.
52-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 52 Configuring System Messag e Logging Configuring System Messa ge Lo gging T o disable synchroni zation of unsoli cited messages an d debug out put, use the no logging synchr onous [ lev el severity-le vel | all ] [ limit number -of-buf fers ] line confi guration command.
52-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 52 Config ur ing System Message Loggin g Configuring System Message Logging T o enable sequence numbers in log messages, perform this task, whi ch is optional. T o disable sequence numbers , use the no service sequence-numbers global conf iguration command.
52-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 52 Configuring System Messag e Logging Configuring System Messa ge Lo gging T o disable logging to the console, use the no logg ing console global conf iguration command.
52-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 52 Config ur ing System Message Loggin g Configuring System Message Logging T o change the le vel and history table size d e.
52-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 52 Configuring System Messag e Logging Configuring System Messa ge Lo gging Log in as root, and perform these steps: Step 1 Add a line such as the follo wing to the file /etc/syslog .
52-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 52 Config ur ing System Message Loggin g Displaying the Logging Configuration T o remove a syslog serv er, use the no logging host global configuration command, and specify the syslog server IP address.
CH A P T E R 53-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 53 Onboard Failure Logging (OBFL) • Prerequisites for OBFL, page 53-1 • Restrictions for OBFL, page 53-2 • Informat.
53-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 53 Onboard Failure Lo gging (OBFL) Restricti ons fo r OBFL Restrictions for OBFL They in clude: • Software Restri ctions—.
53-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 53 Onboa rd Failure Logging (OBFL) Information About OBFL recorded in one of tw o formats: continuous i nformat ion that di splays a snapshot of measurements and samples in a continuous f ile, and summary informa tion that provid es details about the data being collected.
53-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 53 Onboard Failure Lo gging (OBFL) Information About OBFL 32 209h 935h 138h 0m 120m 141h 258h 33 331h 934h 192m 0m 0m 113h 31.
53-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 53 Onboa rd Failure Logging (OBFL) Information About OBFL Operational Uptime Example Switch# sh logging onboard uptime detail .
53-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 53 Onboard Failure Lo gging (OBFL) Information About OBFL 04/19/2010 22:35:38 0x9 0 0 0 0 5 04/19/2010 22:49:41 0x9 0 0 0 0 0.
53-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 53 Onboa rd Failure Logging (OBFL) Information About OBFL Interrupts Interrupts are generated b y system components that require attention from the CPU such as ASICs and NMIs. Interrupts are generally related to hardw are limit conditions or erro rs that need to be corrected.
53-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 53 Onboard Failure Lo gging (OBFL) Information About OBFL Message Logging The OBFL feature logs stan dard system messages.
53-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 53 Onboa rd Failure Logging (OBFL) Default Settings for OBFL • The Persistence Flag gi ves a message priority ov er others that do not hav e the flag set. Default Settings for OBFL The OBFL feature is enabled by default.
53-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 53 Onboard Failure Lo gging (OBFL) Configuration Examples for OBFL Configuration Examples for OBFL The important OBFL feature is the information that is displayed b y the show logging on board module pri v ile ged EXEC command.
53-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 53 Onboa rd Failure Logging (OBFL) Configuration Examples for OBFL OBFL Component Uptime Report: Example The follo wing examp.
53-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 53 Onboard Failure Lo gging (OBFL) Configuration Examples for OBFL ---------------------------------------------------------.
53-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 53 Onboa rd Failure Logging (OBFL) Configuration Examples for OBFL Air inlet 0 Air inlet remote 1 Air outlet 2 Air outlet rem.
53-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 53 Onboard Failure Lo gging (OBFL) Configuration Examples for OBFL 01/18/2013 19:04:28 35 27 42 44 01/18/2013 19:14:28 35 27.
53-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 53 Onboa rd Failure Logging (OBFL) Configuration Examples for OBFL ----------------------------------------------------------.
53-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 53 Onboard Failure Lo gging (OBFL) Configuration Examples for OBFL.
CH A P T E R 54-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 54 Configuring SNMP This chapter describe s how to configure the Simp le Network Management Protocol (SNMP) on t he Catalyst 4500 series switch.
54-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 54 Configu rin g SNMP About SNMP This section includes info rmation about these topics: • SNMP V ersions, page 54-2 • SNM.
54-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 54 Configuring SNMP About SNMP The follo wing table identifies th e characteristics of the di fferent combin ations of security models and lev els. Y ou must configure t he SNMP agent to use the SNMP versi on supported by the management station.
54-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 54 Configu rin g SNMP About SNMP SNMP Agent Functions The SNMP agent responds to SNMP manager request s as follows: • Get a MIB variable—T he SNMP a gent begins thi s functio n in response to a requ est from th e NMS.
54-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 54 Configuring SNMP Configuring SNMP SNMP Notifications SNMP allows the switch to sen d no tifications t o S N M P managers wh en particular events occur . SNMP notifications can be sen t as traps or in form requests.
54-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 54 Configu rin g SNMP Configuring SNMP SNMP Configuration Guidelines An SNMP gr oup is a table that maps SNMP users to SNMP views. An SNMP user is a member of an SNMP group. An SNMP host is the recipient of an SNMP trap operation.
54-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 54 Configuring SNMP Configuring SNMP Disabling the SNMP Agent T o disable the SNMP agent, perform this task: The no snmp-ser ver global conf iguration command disables all running v ersions (V ersion 1, V ersion 2C, and V ersion 3) on the de vice.
54-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 54 Configu rin g SNMP Configuring SNMP T o conf igure a community strin g on the switch, perform this task: Note T o disable access for an SNMP community , set the community st ring for that commun ity to the null string (do not enter a v alue for the community string).
54-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 54 Configuring SNMP Configuring SNMP Note Y ou cannot use the snmp-server enable inf orms command. T o enable the sending of SNMP inf orm notif ications, use the snmp-ser ver enable traps command combined with the snmp-serv er host host-addr inf orms command.
54-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 54 Configu rin g SNMP Configuring SNMP Step 3 Switch(config)# snmp-s erver group groupname { v1 | v2c | v3 [ auth | noauth | priv ]} [ read readview ] [ write writeview ] [ notify notifyview ] [ access access-list ] Conf igures a ne w SNMP group on the remote de vice.
54-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 54 Configuring SNMP Configuring SNMP Configuring SNMP Notifications A trap manager is a management station that recei ves and processes traps. T rap s are system alerts that the switch generates when certain e vents occur .
54-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 54 Configu rin g SNMP Configuring SNMP config Generates a trap for SNMP configuration changes. config-copy Generates a trap for SNMP copy conf iguration changes. cpu Allows cpu-relate d traps.
54-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 54 Configuring SNMP Configuring SNMP Y ou c an use th e snmp-server host global conf iguration command to a specif i c host to receive the notif ication types listed in Ta b l e 5 4 - 3 .
54-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 54 Configu rin g SNMP Configuring SNMP The snmp-server host command specif ies which hosts receive the notif ications. The snmp-server enable trap command globally enables the mechanis m for the sp ecified not ificat ion (for traps and informs).
54-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 54 Configuring SNMP Configuring SNMP Limiting TFTP Servers Used Through SNMP T o limit the TFTP serv ers used for savi ng and.
54-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 54 Configu rin g SNMP Displaying SNMP Status This examp le shows ho w to permit an y SNMP manage r to access all objects wi th read-only permission using the community string public.
54-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 54 Configuring SNMP Displaying SNMP Status Note Y ou cannot use the snmp-server enable inf orms command. T o enable the sending of SNMP inf orm notif ications, use the snmp-ser ver enable traps command combined with the snmp-server host host-addr inf or ms command.
54-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 54 Configu rin g SNMP Displaying SNMP Status.
CH A P T E R 55-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 55 Configuring NetFlow-lite Note NetFlo w-lite is only supported on Catalyst 4948E Ethernet Switch. This chapter descri bes how to configure NetFlow-li te on the Catalyst 4948E switch.
55-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 55 C onfiguring Ne tFlow- lite About NetFlow Packet Sampling About NetFlow Packet Sampling The Netflo w-lite feature is based on ingress packet sampl ing at a monitoring point that can be an interface on the switch.
55-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 55 Configuring NetFlow-lite Conf iguring NetFlow Packet Sampling Configuring Information about the External Collector T o conf.
55-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 55 C onfiguring Ne tFlow- lite Configuring NetFlow Packet Sampling VRF label: none DSCP: 0x20 TTL: 128 COS: 7 Transport Proto.
55-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 55 Configuring NetFlow-lite Conf iguring NetFlow Packet Sampling Example This exampl e show s how to co nfigure samp ling para.
55-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 55 C onfiguring Ne tFlow- lite Configuring NetFlow Packet Sampling T o acti v ate sampling on an interface, perfo rm this tas.
55-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 55 Configuring NetFlow-lite Conf iguring NetFlow Packet Sampling Switch(config-netflow-lite-monitor)# exporter exporter1 Switc.
55-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 55 C onfiguring Ne tFlow- lite Display Commands The system automatically deter mines the average pack et size at an interface based on observ ation of input traf fic and uses that v alue in rate DBL sampling.
55-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 55 Configuring NetFlow-lite Clear Commands Average Packet Size observed: 64 Average Packet Size used: 64 The follo wing exampl.
55-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 55 C onfiguring Ne tFlow- lite Clear Commands.
CH A P T E R 56-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 56 Configuring NetFlow Note Supervisor Engine 6-E and Cat alyst 4900M chassis do not suppo rt Netflo w; it is only suppor ted on Supervisor Engine IV , Supervisor Engine V , Supervisor Engine V -10G E, or WS-F4531.
56-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 5 6 Configur in g NetFlow About NetFlow Statistics Collection About NetFlow Statistics Collection A network flo w is defined .
56-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 56 Configuring NetFlow About NetFlow Statistics Collection Information Derived from Hardware Informati on available in a typic.
56-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 5 6 Configur in g NetFlow About NetFlow Statistics Collection • Source and destinati on IP addresses • IP protocol • So.
56-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 56 Configuring NetFlow About NetFlow Statistics Collection packet with this IP destination ad dress needs to be routed. This pr ocess assumes that the forw arding paths are symmetrical.
56-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 5 6 Configur in g NetFlow Configuring NetFlow Statistics Collection L3 Output Multicast Packets :0 L3 Output Multicast Octets.
56-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 56 Configuring NetFlow Configuring NetFlow Statistics Collection Mod Submodule Model Serial No. Hw Status ----+-----------------------+-----------------+------------+----+--------- 1 Netflow Services Card WS-F4531 JAB062209CG 0.
56-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 5 6 Configur in g NetFlow Configuring NetFlow Statistics Collection Configuring Switched/Bridged IP Flows NetFlo w is defined as a collection of routed IP flo w s created and tracked for al l routed IP traff ic.
56-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 56 Configuring NetFlow Configuring NetFlow Statistics Collection Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec) -------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts Fa1 150.
56-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 5 6 Configur in g NetFlow Configuring NetFlow Statistics Collection Configuring an Aggregation Cache Aggregatio n of NetFlo w Statistics is typically perfo rmed b y NetFlo w collection tools on management workstations.
56-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 56 Configuring NetFlow Configuring NetFlow Statistics Collection Configuring a NetFlow Minimum Prefix Mask for Router-Based A.
56-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 5 6 Configur in g NetFlow Configuring NetFlow Statistics Collection Configuring the Minimum Mask of a Source-Prefix Aggregat.
56-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 56 Configuring NetFlow NetFlow Statistics Collecti on Configuratio n E xample NetFlow Statistics Collection Configuration Example The follo wing example sho ws how to modi fy the conf iguration to enable NetFlo w switching.
56-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 5 6 Configur in g NetFlow NetFlow Configu ra tion Examples Gi6/2 30.20.1.11 Gi6/1 30.10.1.11 11 4001 4001 539K Gi6/2 30.20.1.14 Gi6/1 30.10.1.14 11 4001 4001 539K Gi6/2 30.20.
56-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 56 Configuring NetFlow NetFlow Configuration Examples Autonomous System Configuration This ex ample sho ws how t o configure .
56-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 5 6 Configur in g NetFlow NetFlow Configu ra tion Examples Source Prefix Configuration This example sho ws ho w to configure.
CH A P T E R 57-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 57 Configuring Ethernet OAM and CFM Ethernet Operations, Administrati on, and Maintenance (O AM) is a protocol for instal.
57-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM About Ethernet CFM • Ethernet CFM and Ethernet O AM Interaction, page 57-51 About Ethernet CFM Ethernet CFM is an end-t o-end per- service-instance (per -VLAN) Ethernet layer O AM protocol.
57-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM About Ethernet CFM As s h ow n i n Figure 57-2 , domains cannot intersect or o verlap because t hat would require management by more than one entity , which is not allo wed.
57-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM About Ethernet CFM Maintenance Associations and Maintenance Points A maintenance association (MA) identifies a servic e that can be uniquely identif ied within the maintenance domain.
57-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM About Ethernet CFM If port on which th e MEP is configured is block ed by Spanning-T ree Protocol (STP), the MIP can r eceiv e and might respond to CFM m essages from both the wire and relay side, b ut cannot forward an y CFM messages.
57-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Ethern et CFM Configuration Error List CFM configuration errors in CFM 802.1 ag can be misconfigur ations or e xtra config uration commands detected during MEP conf iguration.
57-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Configuring Ethernet CFM T o configure Ethern et CFM you mu st prepare the network and conf ig uri ng services. Y ou can optionally configure and enable crosscheckin g.
57-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Ethern et CFM • CFM Unicast packets (Loopback Messages and T raceroute Reply), are not allo wed on Down MEP on STP blocked ports.
57-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Configuring Ethernet CFM Step 7 ethernet cfm domain domain-name level level-id Def ine a CFM domain, set th e d omain le vel, and enter ethernet-cfm conf iguration mode for the domain.
57-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Ethern et CFM Step 14 sender-id { chassis | none } (Optional) I nclude the sender ID TL Vs, attrib utes containing ty pe, length, and v alues for neighbor de vices.
57-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Configuring Ethernet CFM Use the no versions of the commands to remo ve the config uration or return to th e default conf igurati ons.
57-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Ethern et CFM Use the no form of each command to remo ve a conf igur ation or to return to the def ault settings.
57-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Configuring Ethernet CFM Configuring Static Remote MEP T o conf igure Ethernet CFM static remote MEP , perform this task: Use the no form of each command to remo ve a conf iguration or to return to the def ault settings.
57-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Ethern et CFM Switch(config-ecfm-srv)# mep mpid 34 Switch(config-ecfm-srv).
57-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Configuring Ethernet CFM Use the no form of each command to remo ve a conf iguration or to return to the def ault settings.
57-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Ethern et CFM Configuring SNMP Traps T o conf igure traps for Ethern et CFM, perfor m this tas k: Use the no form of each command to remo ve a conf igur ation or to return to the def ault settings.
57-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Configuring Ethernet CFM Command Purpose Step 1 configure terminal Enters global conf iguration mode.
57-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Ethern et CFM Use the no form of each command to remo ve a conf igur ation or to return to the def ault settings.
57-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Configuring Ethernet CFM Manually Configuring an IP SLAs CFM Probe or Jitter Operation T .
57-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Ethern et CFM T o remov e an IP SLAs operation, enter th e no ip sla operation-nu mber global conf iguration command.
57-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Configuring Ethernet CFM Target domain: abc Target MPID: 23 Target VLAN ID: 5 Request siz.
57-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Ethern et CFM Step 3 Switch(config-ip-sla-ethernet-monitor)# type echo dom.
57-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Configuring Ethernet CFM T o remov e an IP SLAs operation, enter th e no ip sla operat ion-number global conf iguration command.
57-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Ethern et CFM Operations List : Empty Schedule Period(sec): 60 Request size : 0 CoS : 0 Start Time : Start Time already passed SNMP RowStatus : Active Switch# Configuring CFM on C-VLAN (Inner VLAN) IEEE 802.
57-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Configuring Ethernet CFM Use the no form of each command to remo ve a conf iguration or to return to the def ault settings.
57-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Ethern et CFM Feature Suppor t and Behavior CFM S-VLAN compo nent support: • Up MEPs at any le vel (0 to 7). Up MEPs use the port access VLAN ID ( the outer tag or S-VLAN).
57-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Understanding CFM ITU- T Y.1731 Fault Management – 802.3ah interworki ng with CFM C -VLAN – CFM C-VLAN IP SL As – CFM C-VLAN MIP autocreation – CFM C-VLAN with One-to-One VLAN mappi ng on T runk ports.
57-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Understanding CFM ITU-T Y.1731 Fault Management Alarm Indication Signals The Ethernet .
57-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Configuring Y.1731 Fault Management Multicast Ethernet Loopback The multicast Ethernet loopback (ETH- LB) function veri fies bidirecti onal connecti v ity of a MEP with its peer MEPs and is an on-dem and OAM function.
57-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Configuring Y.1731 Fault Management Step 3 level level-id or disable Conf igures the maintenance le vel for sending AIS frames transmitted by the SMEP .
57-31 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Man aging and Displaying Ethernet CFM Information Use the no form of the commands to return t o the def ault conf ig uration or to remo v e a conf iguration.
57-32 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Managing and Displaying Ethernet CFM Information Y ou can use the pri vileged EXEC commands in Ta b l e 5 7 - 2 to display Ethernet CFM informat ion.
57-33 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM About Ethernet OAM Protocol Level to transmit LCK: Default Defect Condition: No Defect presentRDI: FALSE AIS-Status: Enabled AIS Period: 60000(ms) AIS Expiry Threshold: 3.
57-34 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM About Ethernet O AM Protocol Ethernet O AM has two major components: • The OA M c l i e n t establishes and manages Ethernet O AM on a link and enables and co nfigures t he O AM sublayer .
57-35 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Enabling a nd Con figu ring E thernet OAM Enabling and Configuring Ethernet OAM This sect.
57-36 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Enabling and Configuring Ethern et OAM Enabling Ethernet OAM on an Interface T o enabl.
57-37 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Enabling a nd Con figu ring E thernet OAM Link fault action: no action Dying gasp action:.
57-38 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Enabling and Configuring Ethern et OAM Use the no ethernet oam r emote-loopback { supported | timeout } interface con figuration command to disable remote loopback sup port or remov e the timeout setting.
57-39 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Enabling a nd Con figu ring E thernet OAM T o configure Ethernet O A M link monitoring on an interface, perform this task: Command Purpose Step 1 Switch# configure terminal Enters global conf iguration mode.
57-40 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Enabling and Configuring Ethern et OAM Step 6 Switch(config-if)# ethernet oam link-mon.
57-41 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Enabling a nd Con figu ring E thernet OAM The ethernet oam link-monitor transmit- crc { t.
57-42 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Enabling and Configuring Ethern et OAM GigabitEthernet1/1 General ------- Admin state:.
57-43 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Enabling a nd Con figu ring E thernet OAM T o enable Ethernet O AM remote-failure i ndica.
57-44 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Enabling and Configuring Ethern et OAM Link Monitoring --------------- Status: support.
57-45 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Enabling a nd Con figu ring E thernet OAM error-d isabled state, or the switch is reloading. It can respond to b ut not generate Dying Gasp PDUs based on loss of po wer .
57-46 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Enabling and Configuring Ethern et OAM Step 4 Switch(config-template)# ethernet oam li.
57-47 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Enabling a nd Con figu ring E thernet OAM The switch does not support monitoring e gress frames with CRC errors.
57-48 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Enabling and Configuring Ethern et OAM Switch# show ethernet oam status int gi1/2 Giga.
57-49 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Displaying Ethernet OA M Protocol Information Displaying Ethernet OAM Protocol Information T o display Ethernet O AM protocol inf ormation, you can use the pri vileged EXEC commands in T able 57-4 .
57-50 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Displaying Ethern et OAM Protocol Information Unique Event Notification OAMPDU Rx : 0 .
57-51 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Ethernet CFM and Ethernet OAM Interaction Ethernet CFM and Ethernet OAM Interaction Y ou can also conf igure the O AM Manager infrastruct ure to interact between CFM and Eth ernet O AM.
57-52 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Ethernet CFM and Eth ernet OAM Interaction Configuring the OAM Manager T o conf igure .
57-53 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 57 Configuring Ethernet OAM and CFM Ethernet CFM and Ethernet OAM Interaction Example: Configuring Ethernet OAM and CFM These are conf iguration e xamples of the interworking between Ethernet O AM and CFM in a sample service pro vider network.
57-54 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 57 Configu rin g Ethernet OAM and CFM Ethernet CFM and Eth ernet OAM Interaction Switch(config-if)# ethernet oam Customer-ed.
CH A P T E R 58-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 58 Configuring Y.1731 (AIS and RDI) The Catalyst 4500 series switch support s Y .
58-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 58 Configuring Y.1731 (AIS and RDI) About Y.1731 About Y.1731 These sections contain concep tual information about Y .
58-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 58 Configuring Y.1731 (AIS and RDI) About Y.1731 For mult ipoin t ETH connect i vity , a MEP cannot d etermin e the specif ic server (sub) layer entity that has encountered defect conditi ons upon recei ving a frame with ETH-A IS informatio n.
58-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 58 Configuring Y.1731 (AIS and RDI) Configuring Y.1731 Figure 58-1 Gener ating and Propag ating AI S Messag es Upon a Def ect (Link F ail) Configuring Y.1731 Note Y .1731 is enabled b y default.
58-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 58 Configuring Y.1731 (AIS and RDI) Configuring Y.1731 Configuring AIS Parameters T o set the parameters for AIS, perform this task: Use the no versions of the commands to remo ve the config uration or return to th e default conf igurati ons.
58-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 58 Configuring Y.1731 (AIS and RDI) Displaying Y.173 1 Information Clearing MEP from the AIS Defect Condition T o clear the M.
58-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 58 Configuring Y.1731 (AIS and RDI) Displaying Y.1731 Information Level Type Port MAC 7 MIP Gi3/1 001b.
58-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 58 Configuring Y.1731 (AIS and RDI) Displaying Y.173 1 Information.
CH A P T E R 59-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 59 Configuring Call Home This chapter descri bes how to configure the Call Home feature in Catalyst 4500 Series Switch.
59-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home About Call Home About Call Home Call Home prov ides e-mail-based an d web-based notif ication of criti cal system ev ents.
59-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Configuring Call Home • W eb-based access to Call Home messages and recommendations, in ventory and conf iguration information for all Call Home de vices.
59-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Configuring Call Home Home service. The script, provided on an as-is basis, can be downlo aded from this URL: http://support forums.
59-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Configuring Call Home Enter configuration commands, one per line. End with CNTL/Z. Switch(config)# call-home Switch(cfg-call-home)# contact-email-addr username@example.
59-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Configuring Call Home Copying a Destination Profile T o create a ne w destination profile b y copy.
59-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Configuring Call Home Y ou can select one or more alert groups to b e receiv ed by a destination prof ile. Note A Call Home alert is only sent t o destination prof iles that hav e subscribed to the alert group containing that Call Home aler t.
59-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Configuring Call Home Configuring Peri odic Notification When you subscribe a destinatio n prof il.
59-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Configuring Call Home Configuring Syslog Pattern Matching When you subscribe a destinatio n prof ile to the Syslog aler t group, you can optio nally specify a te xt pattern to be matched within each syslog m essage.
59-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Configuring Call Home The follo wing notes apply when confi guring general e-mail options : • Backup e-mail servers can be def ined by repeating the mail-ser ver command using dif ferent priority numbers.
59-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Configuring Call Home Sending a Call Home Test Message Manually T o manually send a Call Home test m.
59-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Configuring Call Home – For an y acti ve prof ile that subscr ibes to diagnostic ev ents with a.
59-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Configuring Call Home • Based on the ke yword specifyi ng the type of report requested, the follo .
59-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Displaying Call Home C onfiguration Infor mation Displaying Call Home Co nfiguration Information .
59-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Displaying Call Home Co nfiguration Information Example 59-2 Configured Call Home Infor matio n i n Detail Switch# show call-home detail Current call home settings: call home feature : disable call home message's from address: switch@example.
59-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Displaying Call Home C onfiguration Infor mation Syslog-Pattern Severity ------------------------ ------------ .
59-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Displaying Call Home Co nfiguration Information Alert-group Severity ------------------------ ------------ diagnostic minor environment warning inventory normal Syslog-Pattern Severity ------------------------ ------------ .
59-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Call Home Default Settings Total Failed 0 0 0 Config 0 0 0 Diagnostic 0 0 0 Environment 0 0 0 Inv.
59-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Alert Group Trigger Eve nts and Commands T able 59-3 Call Home Alert Gr oups, Events, and A ctions Alert Group Call Home T rigger Event Sy slog Event Severity Description and CLI Commands Executed Syslog Event logged to syslog.
59-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Alert Group Tr igger Events an d Co mmands PO WE R_ RECO VER Y PowerSupply FanGood 3 A failed po wer supply fan ha s been f ixed. PO WE R_REC OV E RY Power SupplyOutputInc reased 3 A power supply ou tput has increased.
59-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Message Contents Message Contents The follo wing tables display the content formats of alert group messages: • T able 59-4 describes the content f ields of a short text message.
59-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Message Contents Error isolation message Plain English description of triggering e vent Alarm ur .
59-23 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Message Contents Server ID If message is generated from fa bric switch, UDI of switch. If message is proxied or origi nated by MA, the MA should ov erwrite this fi eld with the MA UDI.
59-24 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Message Contents Attachment type Specifical ly command output.
59-25 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Message Contents Syslog Alert Notification in Long-Text Format Example TimeStamp : 2009-02-06 12:57 .
59-26 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Message Contents Console logging: level debugging, 95 messages logged, xml disabled, filtering di.
59-27 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Message Contents *Feb 6 01:12:11.995: %C4K_IOSMODPORTMAN-6-POWERSUPPLYINSERTEDDETAILED: Power supply 1 (PWR-C45-1300ACV S/N: DTM123900VH Hw: 5.2) has been inserted *Feb 6 01:12:11.
59-28 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Message Contents NAME: "Linecard(slot 5)", DESCR: "10/100BaseTX (RJ45) with 32 10/.
59-29 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Message Contents <ch:ContractData> <ch:CustomerId></ch:CustomerId> <ch:SiteId&g.
59-30 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Message Contents *Feb 6 00:59:55.379: %CALL_HOME-3-HTTP_REQUEST_FAILED: failed to send HTTP request to : https://172.17.46.17/its/service/oddce/services/DDCEService (ERR 107 : Bad parameters) *Feb 6 01:04:37.
59-31 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 59 Configuring Call Home Message Contents Switch#]]></aml-block:Data> </aml-block:Attachment> <aml-block:At.
59-32 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 59 Co nfig uring Call Home Message Contents.
CH A P T E R 60-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 60 Configuring Cisco IOS IP SLA Operations This chapter describes ho w to use Cisco IOS IP Se rvice Le vel Agreements (S LA) on the switch.
60-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Operations Cisco IP SLA Commands Cisco IP SLA Commands This table lists the co mmands most commonly used with Cisco IP SLAs.
60-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Opera tions About Cisco IOS IP SLA options such as source and destina tion IP address, User D .
60-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Operations About Cisco IOS IP SLA on the type of IP SLAs operation, it respon ds w ith time-stamp information for t he source to make the calculation on performance metrics.
60-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Opera tions About Cisco IOS IP SLA Note The IP SLAs responder can be a Cisco IOS Laye r 2, responder -config urable switch, such as a Catalyst 4500 running the IP base image.
60-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Operations About Cisco IOS IP SLA IP SLAs Operation Scheduling For more detail s about the IP.
60-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Opera tions Configuring IP SLAs Operations Configuring IP SLAs Operations Note This section do.
60-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Operations Configuring IP SLAs Operations Number of pending Entries : 0 Number of inactive Entries : 0 Supported Operation Types Type of Operation to Perform: 802.
60-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Opera tions Configuring IP SLAs Operations Analyzing IP Service Levels by Using the UDP Jitter Operation Jitter means interpacket delay vari ance.
60-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Operations Configuring IP SLAs Operations Step 3 Switch(config-ip-sla)# udp-jitter { destina.
60-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Opera tions Configuring IP SLAs Operations T o d i s a b l e t h e I P SL A s operation, enter the no ip sla operation-number global configuration command .
60-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Operations Configuring IP SLAs Operations measurements between the source IP SLAs device an d the destination IP de vice.
60-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Opera tions Monitoring IP SLAs Operations T o disable the IP SLAs operation, enter th e no ip sla operation-nu mber global conf ig uration command.
60-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 60 Configuring Cisco IOS IP SLA Operations Monitoring IP SLAs Operations Command Purpose show ip sla application Displays global informat ion about Cisco IOS IP SLAs. show ip sla authentication Displays IP SLAs authentication informat ion.
CH A P T E R 61-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 61 Configuring RMON This chapter describes ho w to configu re Remote Network Monit oring (RMON) on your Catal yst 4500 series switch.
61-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 61 Configuring RMON About RMON Figure 61 -1 Remote Monit or ing Ex ample The switch supports these RMON groups (defined in RFC 1757): • Statistics (RMON group 1)—Collects Ethernet, F ast Ethe rnet, and Gigabit Et he rnet statist ics on an interface.
61-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 61 Configuring RMON Configuri ng RMON • Alarm (RMON gr oup 3)—Moni tors a sp ecif ic MIB obj ec t for a specif ied interv al, triggers an alarm at a specified v alue (rising threshold), and resets the alarm at another v alue (falling threshol d).
61-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 61 Configuring RMON Configuring RMON T o enable RMON alarms and ev ents, perform this task: Command Purpose Step 1 Switch# configure terminal Enters global conf iguration mode.
61-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 61 Configuring RMON Configuri ng RMON T o disable an alarm, use the no r mon alarm number global configuration command on each alarm you configured. Y ou cannot disable at once all the alarms that you conf igured.
61-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 61 Configuring RMON Displaying RMON Status T o collect group Ether net statistics on an interf ace, perform this task: Displa.
CH A P T E R 62-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 62 Performing Diagnostics Y ou can use diagnostics to test and verify the funct ionality of the hardw are components of your system (chassis, supervisor engines, modules, and ASICs) wh ile your Catalyst 4500 series switch is connected to a liv e network.
62-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Configuring On-Dem and Online Diagnostics Y ou can run o n-deman d onl ine di agno stic test s from th e C L I.
62-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Performing Diagnostics After you conf igure online diagnost ics, you can start or stop diagnostic tests or display the test results. Y ou can also see which tests are conf igured and what diagnostic tests ha ve already run.
62-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics This exampl e show s how to stop a diagnostic test on module 6: Switch# diagnostic stop module 6 Diagnostic[module 6]: Diagnostic is not active.
62-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics received by the cpu, the port passes the test. Sometimes one port or a group of ports sharing common components fail. The linecard is then placed in partial faulty mode.
62-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Detailed Status --------------- . = Pass U = Unknown L = Loopback failure S = Stub failure P = Port failure E = SEEPROM failure G = GBIC integrity check failure Ports 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 .
62-7 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Last test failure time ------> n/a Last test pass time ---------> Dec 20 2009 22:30:41 Total f.
62-8 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics First test failure time -----> n/a Last test failure time ------> n/a Last test pass time ---.
62-9 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics For al l of these situation s, the output of the show module command w ould display the st atus of the line card as faulty: Switch# show mod Chassis Type : WS-C4507R Power consumed by backplane : 40 Watts Mod Ports Card Type Model Serial No.
62-10 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics The message indicates that the line car d passed online diagnostics ei ther when it was inserted int o the chassis the last time or wh en the switch was po wered up (as reported by the “.
62-11 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics • WS-C4948G-10G E • ME-4924-10GE • WS-X45-SUP6-E • WS-X45-SUP6L-E The POST results are indicat ed with a period (.) or a Pass for Pass, an F for a F ail and a U for Untested.
62-12 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics The follo wing example illustrates the o utput from a system memory test: Switch Subsystem Memory ... 1: . 2: . 3: . 4: . 5: . 6: . 7: . 8: . 9: . 10: .
62-13 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Port Traffic: L2 Asic Loopback ... 0: . 1: . 2: . 3: . 4: . 5: . 6: . 7: . 8: . 9: . 10: . 11: . 12: . 13: . 14: . 15: . 16: . 17: . 18: . 19: . 20: .
62-14 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Packet memory errors: 0 0 Current alert level: green Per 5 seconds in the last minute: 0 0 0 0 0 0.
62-15 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Total failure count ---------> 0 Consecutive failure count ---> 0 Power-On-Self-Test Results for ACTIVE Supervisor prod: WS-X45-SUP6-E part: XXXXXXXXX serial: XXXXXXXXXX Power-on-self-test for Module 3: WS-X45-SUP6-E Test Status: (.
62-16 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics POST on the Activ e Supervisor Engine The activ e supervisor engine tests the remote re dundant 10- Gigabit ports on the stand by supervisor engine if it is present when the acti ve supervisor engi ne is booti ng.
62-17 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Port Traffic: L2 Serdes Loopback ... 0: . 1: . 2: . 3: . 4: . 5: . 6: . 7: . 8: . 9: . 10: . 11: . 12: . 13: . 14: . 15: . 16: . 17: . 18: . 19: . 20: .
62-18 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Last test failure time --------------> n/a Last test pass time -----------------> n/a Total .
62-19 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Note On a redundant chassis, concurrent POST i s supported on supervisor en gines th at are already inserte d.
62-20 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Port Traffic: L2 Asic Loopback ... 0: . 1: . 2: . 3: . 4: . 5: . 6: . 7: . 8: . 9: . 10: . 11: . 12: . 13: . 14: . 15: . 16: . 17: . 18: . 19: . 20: .
62-21 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Packet memory errors: 0 0 Current alert level: green Per 5 seconds in the last minute: 0 0 0 0 0 0 .
62-22 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 62 Performing Diagnostics Note On a redundant chassis, concurrent POST i s supported on supervisor en gines th at are already inserte d.
CH A P T E R 63-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 63 ROM Monitor This chapter describes the Cisco Catalyst 4500 seri es switch R O M monitor (also called the bootstrap program). The R OM monitor f irmware runs when the ro uter is powered up or reset.
63-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 63 ROM Monitor ROM Monitor Commands T o conf igure the router to boot u p in R OM monitor mode the ne xt time it is rebooted .
63-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 63 ROM Monitor ROM Mo nitor Command Descriptions ROM Monitor Command Descriptions T able 63-1 describes th e most commonly used R OM monitor commands.
63-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 63 ROM Monitor Console Download Changing the Configuration Register Using Prompts Entering confre g without an ar gument displays the contents of the virtu al conf iguration register an d a prompt to alter the contents b y describing the meaning of each bit.
63-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 63 ROM Monitor Debug Commands Note If you are usi ng a PC to dow nload a Cisco IOS image ov er the router co nsole port at 115,20 0 bps, ensure that the PC serial port is using a 16550 univ ersal asynchronous transmitter/recei ver (U AR T).
63-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 63 ROM Monitor Exiting the ROM Monitor Exiting the ROM Monitor Y ou must set the config uration regist er to a v alue from 0x2 to 0xF for the router to boot a Cisco IOS image from fl ash memory upon startup or relo ading.
CH A P T E R 64-1 Software Configuration Guide—Release 15(02)SG OL-23818-01 64 Configuring WCCP Version 2 Services This chapter d escribes how to configure the C atalyst 4500 series switches to redi.
64-2 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 64 Config ur ing WCCP Version 2 Services About WCCP Overview WCCP is a Cisco-de veloped content-rout ing technology that enables you to inte grate content engines into your netw ork infrastructure.
64-3 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 64 Config uring WCCP Version 2 Services About WCCP Understanding WCCP Configuration Multiple routers can use WCCP to service a cache cluster . Figure 64-1 ill ustrates a sample configurat ion using multiple rout ers.
64-4 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 64 Config ur ing WCCP Version 2 Services About WCCP 2. Each content engine announ ces its presence with a "Here I A m" message and a list of routers with which it has established communication .
64-5 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 64 Config uring WCCP Version 2 Services Restrictions for WCCP Web Content Packet Return If a content engine is unab le to provi.
64-6 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 64 Config ur ing WCCP Version 2 Services Configuring WCCP Configuring WCCP The follo wing configuratio n tasks assume that you ha ve already i nstalled and conf igured the content engines you want to include in your network.
64-7 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 64 Config uring WCCP Version 2 Services Configuring WCCP T o enable a service on a Catalyst 4500 series swit ch, perform this t.
64-8 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 64 Config ur ing WCCP Version 2 Services Configuring WCCP Specifying a Web Cache Service T o conf igure a web-cache service an.
64-9 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 64 Config uring WCCP Version 2 Services Verifying and Monitoring WCCP Configuration Sett ings Setting a Password for a Router a.
64-10 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 64 Config ur ing WCCP Version 2 Services WCCP Configuration Examples WCCP Configuration Examples This section pro vides the f.
64-11 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 64 Config uring WCCP Version 2 Services WCCP Configuration Examples Running TCP-Promiscuous Service Example The follo wing e x.
64-12 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 64 Config ur ing WCCP Version 2 Services WCCP Configuration Examples Verifying WCCP Settings Example T o verify your conf iguration changes, use the mor e system:running-config EXEC command.
64-13 Software Configuration Guide—Release 15(02)SG OL-23818-01 Chapter 64 Config uring WCCP Version 2 Services WCCP Configuration Examples ip wccp web-cache group-listen ip wccp 60 group-listen ip .
64-14 Software Configuration Guide—Rele ase 15(02)SG OL-23818-01 Chapter 64 Config ur ing WCCP Version 2 Services WCCP Configuration Examples.
CH A P T E R 65-1 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 65 Configuring MIB Support This chapter describe s how to configure SNMP an d MIB support for the Cisco 4500 series switch.
65-2 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 65 Config uring MIB Support Using Cisco IOS MIB Tools Using Cisco IOS MIB Tools This section describes how to access the Cisco MIB tools page. T he MIB Locator finds MIBs in Cisco IOS software releases.
65-3 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 65 Configuring MIB Support Downloading and Compilin g M IBs Guidelines for Working with MIBs While worki ng with MIBs, consider the follo wing guidelines: • Mismatches on datatype definiti ons migh t cause compiler errors or w arning messages.
65-4 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 65 Config uring MIB Support Enabling SNMP Support ftp://ftp.cisco.com/pub /mibs/v2 ftp://ftp.cisco.com/pub /mibs/v1 Step 3 Click the link for a MIB to do wnload that MIB to your system.
65-5 Software Configuration Guide—Release 15.0(2)SG OL-23818-01 Chapter 65 Configuring MIB Support Enabling SNMP Suppo rt Router (config)# snmp-server enable traps [ notification-type ] [ notificati.
65-6 Software Configuration Guide—Rele ase 15.0(2)SG OL-23818-01 Chapter 65 Config uring MIB Support Enabling SNMP Support.
A-1 Catalyst 4500 Series Switch Cis co IOS Software Con figuration Guide OL-23818-01 APPENDIX A Acronyms and Abbreviations Ta b l e A - 1 defines the acron yms and abbre viations used in this publication.
EFT Draf t - Cisco Conf idential A-2 Catalyst 4500 Series Switch Cisco IOS Software Confi guration Guide OL-23818-01 Appendix A Acronyms an d Ab breviations CHAP Challenge Handshake Authentication Pro.
EFT Draf t - Cisco Conf idential A-3 Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Appendix A Acronyms and Abbreviations EAP Extensible Authentication Pr otocol EARL Enhanced Address R.
EFT Draf t - Cisco Conf idential A-4 Catalyst 4500 Series Switch Cisco IOS Software Confi guration Guide OL-23818-01 Appendix A Acronyms an d Ab breviations LD A Local Director Acceleration LCP Link C.
EFT Draf t - Cisco Conf idential A-5 Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Appendix A Acronyms and Abbreviations O A M Operation, Administration, and Main tenance ODM order dep.
EFT Draf t - Cisco Conf idential A-6 Catalyst 4500 Series Switch Cisco IOS Software Confi guration Guide OL-23818-01 Appendix A Acronyms an d Ab breviations RPF re verse path forwarding RPR Route Proc.
EFT Draf t - Cisco Conf idential A-7 Software Co nfiguration Guide—Release 15.0(2)SG OL-23818-01 Appendix A Acronyms and Abbreviations TL V type-length- value TTL Time T o Li ve TVX valid tran smiss.
EFT Draf t - Cisco Conf idential A-8 Catalyst 4500 Series Switch Cisco IOS Software Confi guration Guide OL-23818-01 Appendix A Acronyms an d Ab breviations.
IN-1 Catalyst 4500 Series Switch Cis co IOS Software Con figuration Guide OL-23818-01 INDEX Numerics 10/100 autonegotiation feature, forced 6-18 10-Gigabit Ethernet or Gigabit Ethernet ports deploy on.
Index IN-2 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 with RADIUS 40-108 with TACACS+ 3-16, 3-21 ACEs ACLs 47-2 IP 47-3 Layer 4 operation restrictions 47-16 ACEs an.
Index IN-3 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 ANCP client enabling and configuring 34-2 guidelines and restrictions 34-5 identify a port with DH CP option 82 34-4 identify a.
Index IN-4 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 Auto Smartports macros See also Smartports macros B Baby Giants interacting with 6-26 BackboneFast adding a sw.
Index IN-5 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 destination profiles 59-5 displayin g informat ion 59-14 mail-server priority 59-10 pattern matching 59-9 periodic notification.
Index IN-6 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 monitoring 57-32, 57-33 port MEP, configuri ng 57-14 remote MEPs 57-5 static RMEP, configuring 57-13, 57-16, 57-18 static RMEP ch eck 57-5 Y.
Index IN-7 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 listing 2-5 meminfo 63-5 reset 63-3 ROM monitor 63-2 to 63-3 ROM monitor debugging 63-5 SNMP 65-4 sysret 63-5 command switch, c.
Index IN-8 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 configuring for con trol plane traffic 44-4 configuring for dat a plane and management plan traffic 44-6 defau.
Index IN-9 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 denial-of-service attacks IP address spoofing, mitigat ing 32-5 Unicast RPF, deploying 32-5 denying access to a server on anoth.
Index IN-10 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 discovery, clusters See automatic discovery discovery, Ethernet OAM 57-34 display dection and r emoval events.
Index IN-11 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 E EAP frames changing retransmission time 40-82 exchanging (figure) 40-4, 40-6, 40-13 request/id entity 40-4 response/identity 40-4 setting retransmission number 40-83 EAPOL frames 802.
Index IN-12 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 overview 21-6 Ethernet management port and routing 6-6 and routing prot ocols 6-6 configuring 6-10 default se.
Index IN-13 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 loading system images from 3-30 security pre cautions 3-31 Flex Links configuration guid elines 19-6 configuring 19-6, 19-7 co.
Index IN-14 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 See MST IEEE 802.3ad See LACP IEEE 802.3az Energy Efficient Ethernet 10-22 IGMP configurable-leave timer 23-4.
Index IN-15 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 interfaces adding descriptive name 6-20 clearing counters 6-31 configuring 6-2 configuring ranges 6-4 displayin g informat ion.
Index IN-16 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 IP multicast traffic, load sp litting 33-22 IP phones automatic classifica tion and queueing 37-57 configurin.
Index IN-17 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 ISL encapsulation 15-3 trunking with 802.1Q tunneling 25-4 isolated port 39-4 isolated VLANs 39-2, 39-3, 39-4 ISSU compatibili.
Index IN-18 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 modes 15-4 show interfaces command 15-7 Layer 2 interface type resetting 39-24 setting 39-24 Layer 2 protocol.
Index IN-19 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 configuring for EtherC hannel 22-14 overview 22-5, 31-6 per-destination 31-7 load splitting IP multi cast traffic 33-22 Locati.
Index IN-20 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 manual preemption, REP, con figuring 20-13 mapping DSCP markdown values 37-18 DSCP values to transmit queu es.
Index IN-21 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 multicast router interfaces 24-11 multi-VRF CE 36-17 REP 20-14 traffic flowing amo ng switches 61-1 tunneling 25-19 VLAN filte.
Index IN-22 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 multiple-hosts mode 40-7 Multiple Spanning Tree See MST multiple VPN routi ng/forwarding See multi-VRF CE mul.
Index IN-23 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 network poli cy TLV 27-2, 27-8 Network Time Protocol See NTP network traffic, markin g 37-69 New Software Features in Release 7.
Index IN-24 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 displaying tests and test results 62-4 linecard 62-8 scheduling 62-2 starting and stopping tests 62-3 online .
Index IN-25 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 power consumption fo r powered devices Intelligent Power Management 11-4 powering down a module 10-21 power management modes 1.
Index IN-26 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 port security multiple-hosts mode 40-7 ports not s upport ed 40-5 pre-authentication open access 40-8 resetti.
Index IN-27 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 with other features 43-33 port states description 18-5 port trust stat e See trust states port VLAN ID TLV 27-2 power inline 3.
Index IN-28 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 configuring PVLAN 39-17 defined 39-4 setting mode 39-24 protocol timers 18-4 provider edge de vices 36-2 pruning, VTP See VTP pruning pseudobridges description 18-25 PVACL 45-19 PVID (port VLAN ID) and 802.
Index IN-29 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 priority 37-15 traffic shaping 37-16 transmit rate 37-52 trust st ates trusted device 37-21 VLAN-based 37-46 See also COS; DSC.
Index IN-30 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 vendor-specific 40-109 change of authorization 40-94 configuring accounting 40-108 authentication 40-103 auth.
Index IN-31 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 REP administrative VLAN 20-8 administrative VLAN, configuring 20-9 and STP 20-6 configuration guid elines 20-7 configuring int.
Index IN-32 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 overview 21-2 routed packets ACLs 47-34 route-map (IP) command 35-6 route maps defining 35-6 PBR 35-2 router .
Index IN-33 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 See Auto Sm artPorts macros See Auto Smartports macros show adjacency command 31-9 show boot command 3-32 show catalyst4000 ch.
Index IN-34 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 defined 1-7, 16-1 displayin g 16-14 tracing 16-7, 16-15 SNMP accessing MIB variables with 54-4 agent describe.
Index IN-35 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 overview 51-1 session limits 51-6 SPAN enhancements access list filtering 51-13 configuration example 51-16 CPU port sniffing .
Index IN-36 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 disabling 21-7 forward-delay time 18-19 hello ti me 18-17 Layer 2 protocol tunneli ng 25-13 maximum aging tim.
Index IN-37 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 on Sup 2+ to V-10 GE 10-5 on Sup 6-E 10-5 overview 10-4 system and network statistics, displayin g 33-23 system capabilities T.
Index IN-38 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 enabling and disabling test 7-3 guidelin es 7-3 Telnet accessing CLI 2-2 disconnecting user sessions 7-7 exec.
Index IN-39 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 configuring access VLANs 15-6 configuring allow ed VLANs 15-6 default interface confi guration 15-6 different VTP domains 15-3.
Index IN-40 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 description 32-2 disabling 32-11 enterprise network (figur e) 32-6 FIB 32-2 implementing 32-4 packets, droppi.
Index IN-41 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 VLAN ID translation See VLAN mapping VLAN load balanc ing REP 20-4 VLAN load ba lancin g, trigge ring 20-6 VLAN load balanc in.
Index IN-42 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01 entering IP VMPS address 13-24 reconfirmation interval 13-27 reconfirm VLAM membership 13-26 default configu .
Index IN-43 Software Configuration Guid e—Release 15.0(2)SG OL-23818-01 and 802.1X authentication 40-22 configuring 38-3 W WCCP configuration examples 64-10 configuring on a router 64-2, 64-11 featu.
Index IN-44 Catalyst 4500 Series Switch Cisco IOS Software Configuration Guide OL-23818-01.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Cisco Systems 4500 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Cisco Systems 4500 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Cisco Systems 4500 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Cisco Systems 4500 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Cisco Systems 4500, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Cisco Systems 4500.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Cisco Systems 4500. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Cisco Systems 4500 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
