Gebruiksaanwijzing /service van het product 2960 van de fabrikant Cisco Systems
Ga naar pagina of 680
Corporate He adquarters Cisc o Syst ems , Inc . 170 West Ta sman Drive San Jos e, CA 95 134-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553- NETS (638 7) Fax: 408 526-4100 Catal yst 2960 S witc h S of t w are Conf iguration Guide Cisco IOS R elease 12.
THE SPECIFICATIONS AND INFORMATION REGARDING TH E PRODUCTS IN THIS MANUAL ARE SUBJE CT TO CHANGE WITHOUT NO TICE. ALL STATEMENT S, INFORMATI ON, AND RECOMMENDA TIONS IN T HIS MANUAL ARE BELIEVED TO BE ACCURATE BU T ARE PRESEN TED WITHOUT WARRANTY OF ANY KIND, EXPRE SS OR IMPLIED.
iii Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 CONTENTS Preface xx vii Audienc e xxvii Pur pose xxvi i Conv enti ons xxviii Rela ted Publi cation s xxvi ii Obtain ing Docu mentati on xxix Cisco.
Cont ent s iv Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Wher e to Go N ext 1-16 CHAPTER 2 Using t he Command -Line I nterface 2-1 Underst anding Comma nd Modes 2-1 Underst anding.
Content s v Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Specif ying the Fi lename to Read and Writ e the Syst em Configu ration 3-12 Bootin g Manual ly 3-13 Bootin g a Speci fic So.
Cont ent s vi Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 CHAPTER 6 Administ ering the Swit ch 6-1 Managing the System Ti me and Date 6-1 Underst anding th e Syste m Clock 6-2 Unde.
Content s vii Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 CHAPTER 7 Configur ing S DM Templates 7-1 Underst anding th e SDM Templa tes 7-1 Config urin g the Switch SDM Templat e 7-.
Cont ent s viii Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Config urin g RADIUS Author ization f or User Pri vilege d Access and Net work Ser vices 8-27 Starti ng RADI US Acco unt.
Content s ix Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Using IE EE 802. 1x with VLAN Ass ignment 9-8 Using IE EE 802. 1x with Gues t VLAN 9-10 Conf igur ing IEEE 8 02. 1x Au then tic ation 9-10 Defa ult IEEE 8 02.1x Conf igur ation 9-11 IEEE 802 .
Cont ent s x Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Config urin g IEEE 802. 3x Flo w Control 10-14 Config urin g Auto-MDIX on an Inte rface 10-15 Adding a De scrip tion for an.
Content s xi Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Displa ying VLANs 12-1 3 Config urin g VLAN Trunks 12-14 Trunki ng Over view 12-14 IEEE 802 .
Cont ent s xii Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 VTP C onf igurat ion in G lobal Con fig uratio n M ode 13-7 VTP Confi gurati on in VLAN Data base Con figurati on Mode 13.
Content s xiii Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 How a Switch or Port Become s the Root Swi tch or Root Port 15-7 Spannin g Tree an d Redundan t Connec tivit y 15-8 Spann.
Cont ent s xiv Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Bridg e Pr otoc ol Da ta U nit F orm at an d Pr oce ssing 16-9 Proces sing Su perior BP DU Informat ion 16-10 Proces sing.
Content s xv Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Enabli ng E therChan nel Guard 17-14 Enab ling R oot G uard 17-15 Enab ling L oop G uard 17-15 Displa ying the Sp anning- T.
Cont ent s xvi Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Config urin g IGMP Snoop ing 20-6 Defaul t IGMP Snoo ping Co nfigura tion 20-6 Enabl ing or Disa blin g IGMP Snoopi ng 20.
Content s xvii Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Config urin g a Protect ed Port 21-6 Config urin g Port Bloc king 21-6 Defaul t Por t Bloc king C onfig uratio n 21-6 Blo.
Cont ent s xviii Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 SPAN Confi gurati on Guideline s 23-10 Creati ng a Local SPAN S ession 23-10 Creati ng a Loca l SPAN Sessi on and Confi.
Content s xix Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Defaul t Syste m Message Lo gging Conf igurat ion 26-3 Disabl ing Message Loggin g 26-3 Setti ng the Message Displ ay Dest.
Cont ent s xx Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Config urin g IPv4 ACLs 28-4 Creati ng Standar d and Ext ended IPv 4 ACLs 28-5 Access Li st Numbers 28-6 Creati ng a Nu mb.
Content s xxi Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Config urin g Auto-QoS 29-19 Generat ed Auto- QoS Confi guratio n 29-19 Effect s of Auto-Q oS on the Co nfigura tion 29-24.
Cont ent s xxii Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Config urin g Egress Queu e Chara cteris tics 29-62 Config uration Guidel ines 29-6 2 Alloca ting Buff er Spac e to and .
Content s xxiii Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Recover ing from a Comma nd Switch Fa ilure 31-7 Replac ing a Fail ed Command Swit ch with a Clus ter Member 31-8 Replac.
Cont ent s xxiv Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Copyin g File s B-4 Dele ting F iles B-5 Creati ng, Di splayi ng, and Ext racting tar File s B- 5 Creati ng a tar F ile .
Content s xxv Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Copyin g Image Fil es By Using RCP B-29 Prepar ing to Download or Upl oad an Image File By Usi ng RCP B-29 Download ing an.
Cont ent s xxvi Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Span ning Tre e D-4 Unsuppor ted Globa l Conf igurati on Command D-4 Unsuppor ted Inte rfac e Configur ation Co mmand D-.
xxvii Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Preface Audience This gu ide is for the ne tworking profe ssional m ana ging the Cata lyst 29 60 switc h, here after refe rred t o as t he switch .
xxvii i Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Preface Conv ent ions Conven tions This pu blica tion use s the se conv enti ons to conve y instru ctions and i nforma tion: Command descri ptions use th ese conventions: • Command s and keywords are in boldface te xt.
xxix Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Pre face Obtaining Documentat ion • For cluste r requ ireme nts, see the Release Notes for C isco Network Assistant (no t orderabl e but av ailable on Cisco.co m). • For upgrading i nform ation , see the “D ownloading Soft ware” se ction in th e release notes.
xxx Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Preface Docum entation Fe edback Product Docu mentation DVD Cisco docum entat ion and a dditiona l litera ture ar e av ailable in the Pro duct Do cument ation D VD package , which may have shipped with your pro duct.
xxxi Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Pre face Cisco Pro duct Se curity Ove rview Cisco Product Security Overview Cisco pro vides a free onlin e Security V ulnerability Polic y po rtal at t his URL: http://www .cisco.com/en /US/products/pr oducts_security_ vulnerability_p olicy .
xxxii Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Preface Obtain ing Techni cal Ass istance Obtaining Tech nical Ass istance Cisco T ech nical Suppo rt provides 24- hour-a-day award-win ning techn ical assistance . The Cisc o T echnica l Support & Docume ntatio n website o n Cisco.
xxxii i Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Pre face Obtaining Additional Publications and Information T o ope n a servi ce reque st by telephone , use one of th e followin.
xxxiv Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Preface Obtainin g Addi tional Pub lications and Informat ion • iQ Magazine is t he quarte rly publ ication fr om Ci sco System .
C HAPTER 1-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 1 Overview This chapte r provides these topics about the Catal yst 2960 switch software: • Feat ures , page 1- 1 • Defa u.
1-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Ch apter 1 Over view Feature s Ease -of-Use and Eas e-of- Deployme nt Featur es • Express Se tup for quickly configur ing a swi tc.
1-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 Ov erview Features Performa nce Featu res • Autosensi ng of port spe ed and aut onegotiation of duplex mode on all switch .
1-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Ch apter 1 Over view Feature s • CLI—Th e Cisco I OS software suppo rts desktop - and mu ltilaye r-switching fe atures.
1-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 Ov erview Features • In-band manageme nt access thro ugh SNMP V ersions 1, 2c, and 3 get and set reque sts • Out-of- ban.
1-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Ch apter 1 Over view Feature s VLAN Fea tures • Support for up to 255 VL ANs for assi gning use rs to VLANs assoc iated wit h appro priate ne twork resources, traff ic pat terns, a nd bandw idth • Support for VL AN ID s in the 1 to 4094 range as al lowed by the IEE E 80 2.
1-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 Ov erview Features – Guest VLAN to pr ovide lim ited servi ces to non- IEEE 80 2.
1-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Ch apter 1 Over view Default Set tings Aft er Initial Swi tch Configurat ion • Egress q ueues a nd sche duling – Four egress que.
1-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 Ov erview Default Settings After Initial Switch Configuration If you do not co nfigure the switc h at all, t he switch operate s with the se default sett ings: • Default swi tch IP addre ss, subnet mask , and defaul t gateway is 0.
1-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Ch apter 1 Over view Default Set tings Aft er Initial Swi tch Configurat ion • For STP , PVST+ is enabl ed on VLAN 1 . For m ore informatio n, see Chapter 15, “C onfiguring STP .
1-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 Ov erview Network Configuration Examples Network Config uration Examp les This se ction provides network co nfigurati on co.
1-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Ch apter 1 Over view Netwo rk Configura tion Examp les Bandwidt h alone is not the only c onsidera tion whe n designing you r network.
1-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 Ov erview Network Configuration Examples Figur e 1 -1 High-P erfor mance W or kgr oup (Gigabit-t o-the-Desktop ) • Serv e.
1-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Ch apter 1 Over view Netwo rk Configura tion Examp les Figu re 1 - 2 Ser ver Aggregati on Small to M edium-Si zed Net work Using Catalyst 2960 Switches Figure 1-3 shows a configurat ion fo r a ne twork of up to 500 e mployees.
1-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 Ov erview Network Configuration Examples Catalyst PoE sw itch ports aut omatical ly detect any Cisco pre-standard and IEEE 802. 3af- complia nt powered devices that ar e connec ted.
1-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Ch apter 1 Over view Where to Go Nex t Figur e 1 -4 Long-Distanc e, High-Bandw idth T ransp ort Con figur ation Where to Go Next Be.
C HAPTER 2-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 2 Using the Command-Line Interface This c hapte r descr ibes t he Cisco IOS comm and-li ne in terface ( CLI) and how t o use it to configure your Catalyst 29 60 switch.
2-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 2 Usi ng th e Com ma nd-L ine I nter face Unders tanding Comm and Mode s T able 2-1 Command Mo de Summa ry Mod e Acce ss Met hod Promp t Exit M ethod Abou t Thi s Mode User EXE C Begin a session with your sw itch.
2-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 Using the Comma nd-Line In terface Understa nding the Hel p System For more detail ed info rmat ion on the command mode s, see the c omma nd refe rence g uide for th is re lease .
2-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 2 Usi ng th e Com ma nd-L ine I nter face Unders tanding Abbre viated Co mmands Understandin g Abbreviated Co mmands Y ou need to en ter on ly e nough charac ters for t he swit ch to rec ognize t he co mmand as u nique.
2-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 Using the Comma nd-Line In terface Unders tandin g CLI Err or Messages Understandin g CLI Error Mess ages Ta b l e 2 - 3 li sts so me err or messa ges that you might encoun ter whi le using the C LI to configure your switch.
2-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 2 Usi ng th e Com ma nd-L ine I nter face Using E diting Feature s Beginning i n lin e co nfiguration mode , en ter th is c.
2-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 Using the Comma nd-Line In terface Using Edit ing Featu res Enabling a nd Di sabling Ed iting F eatures Although enhan ced edit ing mode i s automa tical ly enable d, you can di sable it, re-en able it, or co nfigure a sp ecif ic lin e to ha ve enha nced e ditin g.
2-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 2 Usi ng th e Com ma nd-L ine I nter face Using E diting Feature s Editing C ommand Lines that Wrap Y ou can use a w raparo und f eature for c ommands that extend b eyond a si ngle l ine o n the screen .
2-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 Using the Comma nd-Line In terface Searching and Filtering Output of show and m ore Commands In this exam ple, the acce ss-list global configura tion com mand e ntry extend s beyond one line .
2-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 2 Usi ng th e Com ma nd-L ine I nter face Access ing the CLI Accessing the CLI throu gh a Co nsole Conn ection or through .
C HAPTER 3-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 3 Assigning the Switch IP Address and Default Gateway This chap ter de scribe s ho w to creat e the initial s witch conf igur.
3-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 Assigning the Switch IP Address and Defau lt Gateway Assign ing Swi tch Info rmatio n The bo ot loader prov ides ac cess to t he flas h f ile syste m before the ope rating s ystem is loaded.
3-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Gate way Assigning Switch Information These sec tions co ntain this co nfig.
3-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 Assigning the Switch IP Address and Defau lt Gateway Assign ing Swi tch Info rmatio n DHCP Client Request Proce ss When yo.
3-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Gate way Assigning Switch Information Configuring DHCP-Base d Autoconfigura.
3-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 Assigning the Switch IP Address and Defau lt Gateway Assign ing Swi tch Info rmatio n If you did no t speci fy the co nfig.
3-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Gate way Assigning Switch Information Figur e 3-2 Rela y Device Use d in A .
3-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 Assigning the Switch IP Address and Defau lt Gateway Assign ing Swi tch Info rmatio n Note The switch br oadcasts TFTP ser.
3-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Gate way Assigning Switch Information TFTP Serve r Conf iguration (on UNIX) The TF TP server base di rectory is set to / tftpserver/wor k/.
3-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 Assigning the Switch IP Address and Defau lt Gateway Checking and Saving th e Running Con figuration T o remov e the switch IP ad dress, use the no ip address inte rface con figuratio n comma nd.
3-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Gate way Modifying the Startup Configuration ip address 172.20.137.50 255.255.255.0 no ip directed-broadcast ! ip default-gateway 172.
3-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 Assigning the Switch IP Address and Defau lt Gateway Modifyin g the Startup Conf iguration Default Boot Configuration Ta b l e 3 - 3 shows the default boot c onfiguration.
3-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Gate way Modifying the Startup Configuration T o return to the default setting, use the no boot config-f ile glo bal configurat ion c omma nd.
3-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 Assigning the Switch IP Address and Defau lt Gateway Modifyin g the Startup Conf iguration T o return to the default setting, use t he no boot syste m globa l configurat ion c ommand.
3-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Gate way Schedul ing a Rel oad of t he Sof tware Ima ge Note For c omplete s yntax and usag e info rmation for th e boot loader command s and en vironment v ariables, see the c omman d refere nce fo r this rel ease.
3-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 Assigning the Switch IP Address and Defau lt Gateway Scheduli ng a Reload of the Software Image Configur ing a Sc heduled.
3-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 Assigni ng the Swi tch IP Addr ess an d Defa ult Gate way Schedul ing a Rel oad of t he Sof tware Ima ge Displaying S chedu.
3-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 Assigning the Switch IP Address and Defau lt Gateway Scheduli ng a Reload of the Software Image.
C HAPTER 4-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 4 Configuring IE2100 CNS Ag ents This chap ter descri bes ho w to c onfigu re the Inte lligence En gine 2100 (IE2 100) Serie s Cisco Netwo rking Services (CN S) emb edded age nts on your C atal yst 2960 switch.
4-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 4 Configur ing IE2100 C NS Agents Unders tanding IE21 00 Series Conf igurati on Registrar Sof tware Figur e 4-1 Configur ati.
4-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 4 Conf iguring IE21 00 CNS Agents Understan ding IE2100 Series Co nfigu ration Regi strar Software CNS E vent Servi ce The Conf ig uration Re gistrar uses the CNS E vent Service for receip t and genera tion of co nfigur ation e ven ts.
4-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 4 Configur ing IE2100 C NS Agents Unders tanding IE21 00 Series Conf igurati on Registrar Sof tware DeviceID Each co nfigure.
4-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 4 Conf iguring IE21 00 CNS Agents Unde rstan ding CNS Embe dde d Ag ent s Understandin g CNS Embedded Agent s The CNS e vent agen t feature a llo ws the swit ch to pub lish and sub scribe to ev ents on the e vent b us and works with the CNS configurati on agent.
4-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 4 Configur ing IE2100 C NS Agents Configur ing CNS Embedd ed Agents Incremental (Partial) Configur ation After t he ne twork is runn ing, new serv ices c an be adde d by usi ng the CNS con figuration agen t.
4-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 4 Conf iguring IE21 00 CNS Agents Config uri ng CNS Embe dde d Ag ents Note For more informatio n about running the setup program and cr eating templates o n the Configurat ion Registrar , see the Cisco Intelligence Engine 2100 Series C onfiguration Re g istrar Manual .
4-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 4 Configur ing IE2100 C NS Agents Configur ing CNS Embedd ed Agents Enabling th e CNS Ev ent Agent Note Y ou must ena ble the CNS e v ent agen t on t he swit ch befo re you enable the CNS co nf iguratio n agent.
4-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 4 Conf iguring IE21 00 CNS Agents Config uri ng CNS Embe dde d Ag ents This e xample sho ws ho w to enable the CNS e vent agent, set th e IP address g ate way to 1 0.180.1.27, set 120 seconds as the kee pali ve in terv al, and set 10 as the retry cou nt.
4-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 4 Configur ing IE2100 C NS Agents Configur ing CNS Embedd ed Agents Step 3 conf ig-cli or line -c li Enter conf ig-cli to connect to the Conf iguration Registrar through t he interface de fined in cns c onfig connect-i ntf .
4-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 4 Conf iguring IE21 00 CNS Agents Config uri ng CNS Embe dde d Ag ents T o dis abl e the CNS co nf igur ati on age nt, use t he no cns conf ig initia l { ip-add r ess | hostnam e } gl obal configurati on c ommand.
4-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 4 Configur ing IE2100 C NS Agents Configur ing CNS Embedd ed Agents Enabling a Partial Configur ation Beginn ing in pri vil.
4-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 4 Conf iguring IE21 00 CNS Agents Displaying CNS Configuration Displaying CNS Configuration Y ou ca n use the privileged EXEC co mmand s in Ta b l e 4 - 2 to displa y CNS Configuration inf ormati on.
4-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 4 Configur ing IE2100 C NS Agents Displaying CNS Con figuration.
C HAPTER 5-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 5 Clustering Switches This ch apter pr ov ides an o ver vie w of the concepts an d of the pro cedure s used to cr eate and ma nage Catalyst 296 0 switc h cluste rs.
5-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 5 C lustering Switches Unders tanding Switch Cl usters Using switc h clusters simpl ifies the managem ent of multip le switches, regar dless of their physi cal location and p latfo rm fam ilies.
5-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 5 Cluste ring Switche s Using the CLI to Manage Switch Clusters • It is r edundantly c onnected to the c luster so th at connect i vity to c luster mem ber switche s is maintaine d.
5-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 5 C lustering Switches Using SNMP to Ma nage Sw itch Clusters If you do not know the mem ber-switc h number, enter the show cluster memb ers privileged EX EC comm and on the cluster co mmand switch.
5-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 5 Cluste ring Switche s Using S NMP to Ma nage Swit ch Clust ers Note Whe n a clust er standby grou p is configured , the clu ster c ommand swi tch can ch ange without you r kno wled ge.
5-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 5 C lustering Switches Using SNMP to Ma nage Sw itch Clusters.
C HAPTER 6-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 6 Administering the Switch This c hapter d escrib es how to per form one-time opera tions to admi nister t he Cata lyst 29 60 switch.
6-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Managin g the Syste m Time and Date Understand ing the S ystem Clock The heart o f the time serv ice is the system clock. This cl ock runs from th e moment the syste m starts up and keeps tra ck of the da te and tim e.
6-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Mana gi ng th e S ystem Tim e an d Da te Cisco’ s implementatio n of NTP doe s not suppor t stratum 1 se rvice; it is not possibl e to conne ct to a radi o or atom ic cloc k.
6-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Managin g the Syste m Time and Date Configuring NTP The switc h does not have a hardware-sup ported clo ck and cann ot functi on as an NTP maste r clock to which p eers syn chronize themselv es when an e xternal NT P source is n ot a v ailabl e.
6-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Mana gi ng th e S ystem Tim e an d Da te Configuring NTP Authentication This pr oced ure must be c.
6-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Managin g the Syste m Time and Date Configuring NTP Associations An NTP associat ion ca n be a pe.
6-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Mana gi ng th e S ystem Tim e an d Da te Configuring NTP Broadcast Service The co mmunic ations be.
6-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Managin g the Syste m Time and Date Beginn ing in pri vileg ed EXEC mode, follo w th ese step s t.
6-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Mana gi ng th e S ystem Tim e an d Da te Creating an Access Gro up and Assigni ng a Basic IP Acces.
6-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Managin g the Syste m Time and Date T o remov e acces s control to th e switch NTP servi ces, use the no ntp access-gr oup { query-only | serve -only | serve | peer } global con figuration com mand .
6-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Mana gi ng th e S ystem Tim e an d Da te The specif ied interface is used for the source a ddress for all packets sent to all destinat ions.
6-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Managin g the Syste m Time and Date This example shows ho w to manuall y set the system cl ock to 1:32 p.
6-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Mana gi ng th e S ystem Tim e an d Da te Configuring Summer Time (Daylight Saving Time) Beginning.
6-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Configur ing a System Nam e and Prom pt Beginning in privileged EX EC mode, fol low these steps .
6-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Confi guring a S ystem Name an d Prompt These sec tions co ntain this co nfiguration info rmat io.
6-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Configur ing a System Nam e and Prom pt These sec tions co ntain this co nfiguration info rmat i.
6-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Creat ing a Bann er If you u se t he switc h IP ad dress a s its hostnam e, the IP a ddress i s used and no DNS query oc curs. I f you configure a ho stname that contai ns no periods (.
6-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Creating a Banner Configurin g a Mess age-of-the -Day Log in Bann er Y ou can crea te a single o r multiline m essage banner that appears on the screen when someone logs in to the switch.
6-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Managin g the MAC Addre ss Table Beginning i n privileged EX EC mo de, fol low these s teps t o configure a logi n banne r: T o delet e the lo gin ba nne r , use t he no banner login global con figurati on comm and.
6-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Managin g the MAC A ddress Tab le • Configuring M A C Addr ess Notificat ion Traps, page 6-21 .
6-21 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Managin g the MAC Addre ss Table Changing the Addre ss Aging Time Dynami c address es are sour ce MA C addresses that the sw itch lear ns and then ages when they ar e not in use.
6-22 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Managin g the MAC A ddress Tab le Beginn ing in pri vilege d EXEC mode, follo w th ese steps to .
6-23 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Managin g the MAC Addre ss Table T o di sable the sw itch from se nding MAC address notificat ion traps, use the no snmp-serv er enable traps mac-notification global con f igura tion co mman d.
6-24 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Managin g the MAC A ddress Tab le Beginning i n privileged EX EC mo de, follo w these steps to a.
6-25 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 6 Administer ing the Switch Managin g the MAC Addre ss Table For example, if yo u ent er t he mac address-table static mac-ad.
6-26 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 6 Administering the Switch Managin g the ARP Table Managing the ARP Ta ble T o co mmuni cate with a device (over Ethern et, for exam ple), t he softwa re first must learn the 48-b it MAC address o r the l ocal dat a lin k address o f that device.
C HAPTER 7-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 7 Configuring SDM Templates This chapte r describes ho w to conf igure the Switch Data base Management (SDM ) templates on the Catalyst 2960 swit ch.
7-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 7 Configuring SDM Templates Conf igu rin g th e Swi tch SDM T empl ate The ro ws in the table represen t approximate ha rdware bounda ries set when a template is selected .
7-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 7 Conf iguring SDM Te mplates Displaying the SDM Templates Displaying the SDM Te mplates Use the show sdm pr efer pri vile ged EXEC command w ith no parame ters to display the a cti v e template.
7-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 7 Configuring SDM Templates Display ing the SDM Templates.
C HAPTER 8-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 8 Configuring Switch-Based Authentication This c hapter d escrib es how to configure switch -based authen tication on the Cata lyst 2 960 swit ch.
8-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Protecting A ccess to Privileged EXE C Comman ds • If you want t o use usernam e.
8-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Prote cti ng Ac cess to Pri vile ged EXEC Comm and s Setting o r Changin g a Static Enab le Pa ssword The en able password control s access to the privileged EXEC mode.
8-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Protecting A ccess to Privileged EXE C Comman ds Be ginnin g in pri vileg ed EXEC .
8-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Prote cti ng Ac cess to Pri vile ged EXEC Comm and s If bo th the en able and e nable sec ret pas sword s are de f ined, us ers must enter th e enable s ecret p asswo rd.
8-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Protecting A ccess to Privileged EXE C Comman ds T o r e-ena ble password r ecovery , us e the service pas sword- reco v ery global con f igura tion com mand.
8-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Prote cti ng Ac cess to Pri vile ged EXEC Comm and s Configuring Us ername and P assword Pairs Y ou ca n configure use rname an d password pai rs, which a re locally stored on the switch.
8-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Protecting A ccess to Privileged EXE C Comman ds Configuring Multiple Privil ege Levels By default, the Cisco IO S software has two modes of passwor d security: use r EXEC and pr i vileged EXEC.
8-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Prote cti ng Ac cess to Pri vile ged EXEC Comm and s When y ou set a command to a pr i vile ge le vel, all co mmands whose s yntax is a subset of tha t comman d are al so set to th at le vel.
8-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Controlling Sw itch Acce ss with TACA CS+ Logging into and Exiting a Privilege Le.
8-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Controlling Switch Access with TACACS+ Figur e 8-1 T ypical T AC ACS+ Ne twor k .
8-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Controlling Sw itch Acce ss with TACA CS+ TACACS+ Ope ration When a use r attempts a sim ple ASCII login by authent icating to a switch using T A C A CS+, this p rocess occurs: 1.
8-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Controlling Switch Access with TACACS+ • Configuring T A CA CS+ Authori zation.
8-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Controlling Sw itch Acce ss with TACA CS+ T o remo ve the spec if ied T A CA CS+ server n ame or addr ess, use the no tac acs- server host hostna me global configurat ion comm and.
8-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Controlling Switch Access with TACACS+ Step 3 aaa authent ication log in { default | list-name } method1 [ meth od2 ... ] Create a logi n authen tica tion meth od list.
8-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Controlling Sw itch Acce ss with TACA CS+ T o disa ble A AA, use the no aaa new-model global co nfiguration comm and.
8-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS Starting TACACS+ Accounting The AA A accou nting featu re trac ks the servic es tha t users are a ccess ing an d the amoun t of ne twor k resources th at the y are consuming.
8-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Controllin g Switch A ccess w ith RADIUS Understanding RADIUS RADIUS is a distr ibu ted client /serv er system that secures n etworks against u nauthori zed access .
8-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS Figur e 8-2 T ransitioning fro m RADIUS to.
8-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Controllin g Switch A ccess w ith RADIUS Configuring RADIUS This se ction describe s how to c onfigure your switch to su pport R ADIUS.
8-21 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS Y ou identify RADIUS security servers b y their hostname or IP address, hostname and specif ic UDP po rt numbers, or their I P addre ss and specific UD P port num bers.
8-22 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Controllin g Switch A ccess w ith RADIUS Comma nd Pu rpos e Step 1 conf igure t erminal Enter globa l configurati on mode.
8-23 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS T o remov e the specif ied RADIUS serve r , u se the no radius-serv er host hostname | ip- addre ss glob al configurati on c ommand.
8-24 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Controllin g Switch A ccess w ith RADIUS Beginn ing in pri vilege d EXEC mode, follo w th ese steps to conf igure login authenticat ion.
8-25 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS T o disa ble A AA, use t he no aaa new-model global co nfiguration comm and.
8-26 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Controllin g Switch A ccess w ith RADIUS Be ginning in pri vile ged EXEC mode, fo.
8-27 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS T o remov e the specif ied RADIUS serve r , u se the no radius-serv er host hostname | ip- addre ss glob al configurati on comm and.
8-28 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Controllin g Switch A ccess w ith RADIUS Beginn ing in pri vil eged EXEC m ode, f.
8-29 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS Configuring Settings for All RADIUS S erve.
8-30 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Controllin g Switch A ccess w ith RADIUS This e xample sho ws ho w to provid e a .
8-31 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Controlling Switch Access with RADIUS As ment ioned ea rlier, to configure RAD I.
8-32 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Configur ing the Switc h for Lo cal Authe ntication a nd Authori zation Configuri.
8-33 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Configuring the Switch for Secure Shell Configuring the Switch for Se cure Shell This section descri bes how to c onfigure the Secure Shell ( SSH) f eature.
8-34 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Conf igu rin g th e Swi tch for S ec ure S hel l SSH also supports these user aut.
8-35 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Configuring the Switch for Secure Shell Setting Up the Switch to R un SSH Foll ow these steps to set up your switch to run SSH: 1. Download the cr ypto graph ic software imag e from Cisco .
8-36 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Conf igu rin g th e Swi tch for S ec ure S hel l Configuring the SSH Server Begin.
8-37 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Configuring the Switch for Secure Socket Layer HTTP For more informa tion about .
8-38 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Conf igu rin g the S wit ch f or Se cur e So cket L aye r HT TP When a c onnec tion at tempt is made , the HT TPS s erver provid es a se cure connect ion by iss uing a certif ied X.
8-39 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Configuring the Switch for Secure Socket Layer HTTP CipherSuit es A CipherSuite specif ies the en cryption algorithm a nd the digest algorithm to use on a SSL connection.
8-40 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Conf igu rin g the S wit ch f or Se cur e So cket L aye r HT TP SSL Configuration Guid elines When SSL is used in a switch cluster , the SSL session terminates at the cluster commander .
8-41 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Configuring the Switch for Secure Socket Layer HTTP Use the no crypto ca tr ustpo int nam e global conf iguration command to d elete all iden tity inform ation and ce rtifica tes as soc iated wit h the CA .
8-42 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Conf igu rin g the S wit ch f or Se cur e So cket L aye r HT TP Use th e no ip http server global configu ration c ommand to disabl e the standa rd HTT P server .
8-43 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 8 Configuring Sw itch-Ba sed Auth entication Configuring the Switch for Secure Socket Layer HTTP Use the no ip http client secure -trustpoint name to remo ve a client trustpoint conf iguration.
8-44 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 8 Configuring Switch-Based Authentication Conf igu rin g the S wit ch f or Se cur e So cket L aye r HT TP.
C HAPTER 9-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 9 Configuring IEEE 802.1x Port-Based Auth enticat ion This chapter desc ribes how to configure IEEE 802 .1x port- bas ed authent ication on t he Catalyst 29 60 switch. IEEE 802.
9-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 9 Configuring IEEE 802.1x Por t-Based Aut hentication Unders tanding IE EE 802.1x Port-Ba sed Au thentic ation • Using IE EE 802.1x wit h V oice VLA N Ports, page 9-8 • Using IE EE 802.
9-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 9 Configuri ng IEEE 802.1x Port-Ba sed Auth entication Underst anding I EEE 8 02.
9-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 9 Configuring IEEE 802.1x Por t-Based Aut hentication Unders tanding IE EE 802.
9-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 9 Configuri ng IEEE 802.1x Port-Ba sed Auth entication Underst anding I EEE 8 02.1x P ort-Based Authent ication received. The switch re quests the identity of the clie nt and begins r elaying aut hentic ation m essages between the client and the authen tication serv er .
9-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 9 Configuring IEEE 802.1x Por t-Based Aut hentication Unders tanding IE EE 802.
9-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 9 Configuri ng IEEE 802.1x Port-Ba sed Auth entication Underst anding I EEE 8 02.1x P ort-Based Authent ication W it h the multip le-host s mode en abled, y ou can use IEEE 802.
9-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 9 Configuring IEEE 802.1x Por t-Based Aut hentication Unders tanding IE EE 802.1x Port-Ba sed Au thentic ation • If the port is administr ativ ely shut do wn, the port becomes unauthenticate d, and all dynamic entrie s are re moved from the se cure host table.
9-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 9 Configuri ng IEEE 802.1x Port-Ba sed Auth entication Underst anding I EEE 8 02.1x P ort-Based Authent ication When co nfigured on the switch and the RA DIUS se rver , IEE E 802.
9-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 9 Configuring IEEE 802.1x Por t-Based Aut hentication Configur ing IEEE 80 2.1x Authen ticatio n Using IEEE 8 02.1x with Guest V LAN Y ou can conf igure a gues t VLAN for each IEEE 802.
9-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 9 Configuri ng IEEE 802.1x Port-Ba sed Auth entication Configur ing IEEE 802.1x Auth enticat ion • Resetting the IEEE 802.1 x Configurati on to the D efault V alues , page 9-20 ( optional) • Configuring IEEE 802.
9-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 9 Configuring IEEE 802.1x Por t-Based Aut hentication Configur ing IEEE 80 2.1x Authen ticatio n IEEE 80 2.1x C onfig uration Gu idelines These ar e the IE EE 802. 1x authe ntica tion co nfiguration guidel ines : • When IEEE 802.
9-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 9 Configuri ng IEEE 802.1x Port-Ba sed Auth entication Configur ing IEEE 802.1x Auth enticat ion T o allo w VLA N assignmen t, you mu st enable A AA author ization to c onfig ure the switch for all network-re lated ser vice re quests.
9-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 9 Configuring IEEE 802.1x Por t-Based Aut hentication Configur ing IEEE 80 2.
9-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 9 Configuri ng IEEE 802.1x Port-Ba sed Auth entication Configur ing IEEE 802.
9-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 9 Configuring IEEE 802.1x Por t-Based Aut hentication Configur ing IEEE 80 2.1x Authen ticatio n Changing the Quiet P eriod When the swi tch cannot au thenticate the client, the switch remains idle f or a set period of time and then tries agai n.
9-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 9 Configuri ng IEEE 802.1x Port-Ba sed Auth entication Configur ing IEEE 802.1x Auth enticat ion T o return to the defaul t retransmission time, use the no d ot1x timeou t tx- period interfa ce conf iguratio n comm and.
9-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 9 Configuring IEEE 802.1x Por t-Based Aut hentication Configur ing IEEE 80 2.
9-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 9 Configuri ng IEEE 802.1x Port-Ba sed Auth entication Configur ing IEEE 802.
9-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 9 Configuring IEEE 802.1x Por t-Based Aut hentication Configur ing IEEE 80 2.1x Authen ticatio n Beginn ing in pri vilege d EXEC mode, follo w th ese steps to enab le the optional guest VLAN beha vior and to configu re a guest V LAN.
9-21 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 9 Configuri ng IEEE 802.1x Port-Ba sed Auth entication Configur ing IEEE 802.1x Auth enticat ion Configuring IEEE 802.1x Accounting Enabling AAA sy stem accountin g with IEEE 802.
9-22 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 9 Configuring IEEE 802.1x Por t-Based Aut hentication Displaying IEEE 802.1x St atistics and St atus Displaying IEEE 802.1x Statistics an d Status T o d isplay IEEE 802.1 x statis tics for all ports, use the s how dot1x all statistics pri vilege d EXE C comman d.
C HAPTER 10-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 10 Configuring Interface Cha racteristics This ch apter d efines the type s of inter faces on the Catalyst 2960 swi tch an d describe s how to configure them.
10-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 10 Configuring Interface Characteristics Unders tanding Inte rface Type s Port-Based VLANs A VLAN is a switched netwo rk that is logically segmented b y function, team, or application, witho ut reg ard to the physic al location of the user s.
10-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 0 Configuring Interfac e Charact eristics Unde rsta ndi ng In ter face Typ es T wo ty pes of a ccess por ts are sup ported : • Static acces s ports are manually assigned to a VLAN (or throu gh a RADIUS serv er for use with IEEE 8 02.
10-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 10 Configuring Interface Characteristics Using I nterface Configu ration Mode Dual-P urpose Uplin k Ports Some Cataly st 2960 switch es suppor t dual-p urpose upl ink port s.
10-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 0 Configuring Interfac e Charact eristics Using Inte rface C onfigu ration Mo de T o configu re a phys ical interface (por t), specify the interface type, m odule number , and switch port number , and en te r in terf ace co n f ig ur at io n m od e.
10-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 10 Configuring Interface Characteristics Using I nterface Configu ration Mode Step 3 Foll o w each interface command w ith the interf ace con fig uration comma nds that the in terface requires.
10-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 0 Configuring Interfac e Charact eristics Using Inte rface C onfigu ration Mo de When usin g the interf ace range glob al c.
10-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 10 Configuring Interface Characteristics Using I nterface Configu ration Mode Beginning in privileged EX EC mode, fol low these steps t o define an interface ra nge macr o: Use the no de fine interface-range macr o_ name global conf igura tion comm and to delete a macro.
10-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 0 Configuring Interfac e Charact eristics Configuring Ethernet Interfaces This example shows ho w to define an interfac e-r.
10-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 10 Configuring Interface Characteristics Configur ing Ethern et Interface s Configuring In terface Sp eed and Du plex M ode Ether net inter faces on the swit ch opera te at 10, 10 0, or 1000 Mbps an d in eith er full- or ha lf-dupl ex mode.
10-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 0 Configuring Interfac e Charact eristics Configuring Ethernet Interfaces Speed and Duplex Configuration Gui delines When .
10-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 10 Configuring Interface Characteristics Configur ing Ethern et Interface s T o return to the default setting, use t he no media-type interface co nfiguration c ommand. When you cha nge the i nterface t ype, the speed and d uplex configurat ions are re moved.
10-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 0 Configuring Interfac e Charact eristics Configuring Ethernet Interfaces The switch does not ha ve this be ha vior with 100B ASE-FX-GE SFP modules.
10-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 10 Configuring Interface Characteristics Configur ing Ethern et Interface s This e xample sho ws how to set the interface .
10-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 0 Configuring Interfac e Charact eristics Configuring Ethernet Interfaces This exampl e shows ho w to turn on flow contro .
10-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 10 Configuring Interface Characteristics Conf igu rin g the S yst em MT U This e xample s ho ws ho w to enable auto- MDIX .
10-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 0 Configuring Interfac e Charact eristics Confi guring the S ystem MTU Y o u canno t set t he M TU size for an individual interfa ce; yo u set i t for a ll 10/10 0 or a ll Giga bit Et hernet interfaces on the switch.
10-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 10 Configuring Interface Characteristics Monito ring and Mai ntainin g the Interfac es Monitoring and Maintainin g the Int.
10-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 0 Configuring Interfac e Charact eristics Monitoring and Maintaining the Interfaces Clearing and Resetting In terfaces and Counters T ab le 10-4 lists the pri vileged EXEC mode clear commands that you can u se to clear counte rs and res et interf aces.
10-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 10 Configuring Interface Characteristics Monito ring and Mai ntainin g the Interfac es.
C HAPTER 11-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 11 Configuring Smartports Macro s This chapt er describ es ho w to configure and appl y Smartport s macros on th e Catalyst 296 0 switch.
11-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 11 Configur ing Smart ports Mac ros Configuring Smartpor ts Macros Cisco also provid es a collection of pretes ted, Cisco-recommende d baseline conf iguration tem plates for Catalyst switc hes.
11-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 11 Configur ing Smartpor ts Macros Configuring Smartports Macros Smartports Mac ro Con figuration Guidelines Follow these gui.
11-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 11 Configur ing Smart ports Mac ros Configuring Smartpor ts Macros The Cisc o-defaul t macros use th e $ character to help iden tify required k eyw ords. There is no restric tion on using the $ char acte r to define keywords w hen y ou cr eate a m acro.
11-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 11 Configur ing Smartpor ts Macros Configuring Smartports Macros Applying Smartpo rts Macro s Beginning i n privileged E XEC .
11-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 11 Configur ing Smart ports Mac ros Configuring Smartpor ts Macros This exam ple sh ows how to app ly th e user-cre ated m .
11-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 11 Configur ing Smartpor ts Macros Configuring Smartports Macros Y ou ca n delete a global macro-a pplied c onfiguration on a switch only by enteri ng the no ver sion of ea ch comm and th at is in t he macro.
11-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 11 Configur ing Smart ports Mac ros Displaying Smartpor ts Macros Displaying Smartports Macros T o display th e Smartports macros, use one or mo re of the pri vileged EXE C command s in T abl e 11-2 .
C HAPTER 12-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 12 Configuring VLANs This c hapter describ es how to c onfigure norm al- range VL ANs (V LAN IDs 1 t o 100 5) and extended-ra nge VLA Ns (VLA N IDs 1006 to 409 4) on the Cata lyst 2 960 swi tch.
12-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Unders tanding VL ANs Figure 12-1 shows an exampl e of VL ANs segme nted into logic ally de fined networ ks. Figur e 12 -1 VLANs as Logica lly Defined N etwor ks VLANs are of ten assoc iated with IP su bnetw orks.
12-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Unde rsta ndin g VLAN s VLAN Port M embership M odes Y ou co nfigure a port to belong to a VLA N by assigning a mem bership mode that spec ifies the kind of traf fic the p ort car ries and t he numb er of V LANs to whic h it can belong.
12-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configur ing Normal- Range VLA Ns Configuring Normal -Range VLANs Normal- range V LANs a re VL ANs with VLAN IDs 1 to 1005 .
12-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Config uri ng Nor mal-R ang e VLA Ns These sec tions co ntain normal -ran ge VLAN configurat ion info r.
12-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configur ing Normal- Range VLA Ns are se ve ral adj acent switch es that all h av e run o ut of span ning-tree instances.
12-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Config uri ng Nor mal-R ang e VLA Ns When you save VLAN and VTP infor mation (i ncluding extended-r ang.
12-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configur ing Normal- Range VLA Ns Creating or Modifyin g an Et hernet VLAN Each E therne t VLA N in the VLAN d ataba se has a uni que, 4- digit I D tha t ca n be a nu mber fr om 1 to 1001.
12-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Config uri ng Nor mal-R ang e VLA Ns Y ou ca n also cre ate or mod ify Ethe rnet VL ANs by using the VL AN datab ase co nfiguration mo de. Note VLA N data base configurati on m ode doe s not sup port RSP AN VLAN c onfiguratio n or extende d-range VLANs.
12-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configur ing Normal- Range VLA Ns Cautio n When you delete a VL AN, an y ports a ssigned to that VLAN become in acti ve. They remain assoc iated with th e VLAN ( and thus in acti ve) until y ou assign th em to a n ew VLAN.
12-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Confi guring Exte nded-Ra nge VL ANs T o return an interfac e to its default conf iguration, use the defaul t interface interface-id interface configurati on c ommand.
12-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configur ing Extend ed-Range VLANs Extended -Ran ge VLAN Con figuration Gu idelines Foll ow these gui.
12-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Displaying VL ANs T o delete an ex tended- range VLAN, use the no vlan vlan -id gl obal con figurati on comm and. The proc edure fo r assign ing stat ic-acc ess port s to an ext ended-r ange VLAN is the s ame as for normal-ra nge VL ANs.
12-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configur ing VLAN Tr unks For more detail s about the show comman d options an d explanat ions of outp ut fields, see the comm and refere nce fo r th is rel ease.
12-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Config uri ng V LAN Trunk s IEEE 802.1Q Configuration Considerations The IE EE 8 02.1Q t runks i mpose these limita tions o n the trun king stra tegy for a network: • In a ne twork of Cisco switch es conne cted through IEEE 802.
12-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configur ing VLAN Tr unks Default Layer 2 Ethernet Inte rface VLAN Con figuration T ab le 12-5 shows the default L ayer 2 Et herne t inte rface V LAN configurat ion.
12-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Config uri ng V LAN Trunk s • If you try to enabl e IEEE 802 .1x on a t runk por t, an err or message appear s, and IE EE 802.1x is not enab led. If you try to chan ge the mode of an IEEE 802.
12-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configur ing VLAN Tr unks Defining the Allowed VLANs on a Trunk By default, a trunk port sends traf fic to and recei ves traf fic from all VLANs. All VLAN IDs, 1 to 4094, are al lo wed on each t runk.
12-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Config uri ng V LAN Trunk s T o return to the def ault allo wed VLAN l ist of all V LANs, use the no switchport trunk allowed vlan interf ace conf iguration comman d.
12-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configur ing VLAN Tr unks For informa tion ab out IEEE 802.1Q con figuratio n issues , see the “IEE E 802.1 Q Configurati on Consider ation s” sect ion on page 12-15 .
12-21 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Config uri ng V LAN Trunk s Figure 12-2 shows two trunks conne cting s upporte d switche s. In this example, t he switches ar e configured as f oll ows: • VLANs 8 through 10 ar e assigne d a port prio rity of 16 on Trunk 1.
12-22 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configur ing VLAN Tr unks Load Sharing Using STP Path C ost Y ou ca n configure para llel tru nks to .
12-23 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Configuring VMPS Beginn ing in priv ileg ed EXEC mode, follo w these steps to co nfigur e the networ k.
12-24 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configuring VMPS • “T rouble shoot ing Dynami c-Acce ss Port VLAN M embership ” secti on on pag.
12-25 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Configuring VMPS If the link goes down on a dy namic -access por t, the p ort r eturns to an is olated st ate and do es not be long to a VLAN.
12-26 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configuring VMPS Configuring the VMPS Client Y ou c onfigure dy namic V LANs by usi ng the VMPS (s erver). Th e switc h can b e a VMPS cli ent; it canno t be a VMPS server .
12-27 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Configuring VMPS T o return an interfac e to its default conf iguration, use the defaul t interface interface-id interface conf iguration command.
12-28 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configuring VMPS Changing the Retry Count Beginn ing in pri vileg ed EXEC mode, follo w th ese step s.
12-29 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 2 Configuring VLANs Configuring VMPS Troublesho oting Dyna mic-Acce ss Port V LAN Memb ership The VMPS shuts down a dynamic -access port unde r these cond itions: • The VMPS is in secure mode, and it does not allo w the host to connect to the port.
12-30 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 12 Configuring VLANs Configuring VMPS Figur e 12 -4 Dynamic P or t VLAN M embership Con figur ation Primar y VMPS Ser ver 1 Catalyst 6500 series Secondar y VMPS Ser ver 2 Catalyst 6500 series Secondar y VMPS Ser ver 3 172.
C HAPTER 13-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 13 Configuring VTP This c hapter describ es how to us e t he VLA N Trunking Prot ocol ( VTP) a nd the VLAN databa se fo r managing VLANs with the Catalyst 2960 switc h.
13-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 13 Configuring VTP Unders tanding VTP These sect ions co ntain this co nceptu al in forma tion: • The VTP Do main, pa ge .
13-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 13 Configur ing VTP Understanding VTP VTP Mode s Y ou ca n configure a supp orted switc h to be in one of the VT P modes listed i n Ta b l e 1 3 - 1 .
13-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 13 Configuring VTP Unders tanding VTP • Update id entity an d update timestamp • MD5 diges t VLAN co nf igurat ion, in clud ing max imum tr ansmi ssion unit (M TU) si ze fo r each VLAN.
13-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 13 Configur ing VTP Understanding VTP Figure 13-1 shows a switched network w ithout VTP pruni ng enabled. Port 1 on Switch A and Port 2 on Switch D are assigned to the Red VLAN .
13-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 13 Configuring VTP Conf igu rin g VTP See the “Enabling VT P Pruning” section on page 13-1 4 . VTP pr uning t akes effect sev eral sec onds aft er you enable it. VTP pruni ng does no t prune traffic from VLANs tha t are pruni ng-ineligi ble.
13-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 13 Configur ing VTP Configuring VTP VTP Configuration Options Y ou ca n configure VTP by using th ese configurat ion mode s.
13-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 13 Configuring VTP Conf igu rin g VTP VTP Configu ra tion Guidelines These sec tions descr ibe guid eline s you should fol low when implem entin g VTP in your ne twork. Domain Names When co nfiguring VT P for t he first tim e, you must a lways assign a doma in nam e.
13-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 13 Configur ing VTP Configuring VTP • Do not enable VTP V ersion 2 on a switch unless all of the switches in the same VTP domain are V ersion-2-ca pabl e. When yo u enable V ersion 2 on a switc h, all of the V ersion-2- capable sw itches in the domain en able V ersion 2.
13-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 13 Configuring VTP Conf igu rin g VTP When you con figure a domain na me, it cannot be rem oved; you can only rea ssign a switc h to a different domain. T o r eturn the sw itch to a no-passwor d stat e, u se the no vtp password global co nfigurati on comman d.
13-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 13 Configur ing VTP Configuring VTP Configuring a VTP Client When a switch i s in VTP clie nt mode, you ca nnot cha nge its VLAN configuration .
13-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 13 Configuring VTP Conf igu rin g VTP Disabling V TP (VTP Tr anspar ent Mod e) When you conf igure the switch fo r VTP transparent mode, VTP is disable d on the switch.
13-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 13 Configur ing VTP Configuring VTP Enabling V TP Versio n 2 VTP V ersion 2 is disabled by default on VTP V ersion 2-capab le switches. When you enabl e VTP V ersion 2 on a switch, e very VTP V ersion 2-capable switc h in the VTP domai n enables V ersion 2.
13-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 13 Configuring VTP Conf igu rin g VTP Enabling V TP Prunin g Pruning inc reases available bandwi dth by restric ting flood ed traffic to those trunk lin ks that the traff ic must use to acces s the destinat ion devices.
13-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 13 Configur ing VTP Configuring VTP Beginning i n privileged E XEC mo de, follow these steps to ver ify an d res et the VTP .
13-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 13 Configuring VTP Monito ring VTP Monitoring VTP Y ou monito r VTP by disp layin g VTP c onfiguration i nforma tion: th e dom ain na me, t he cur rent VT P revision, and the n umber of VLAN s.
C HAPTER 14-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 14 Configuring Voic e VLAN This chap ter des cribes how t o conf igure the v oice VLAN feature on the Catalyst 2 960 switch . V oice VLAN is referr ed to as an auxi liary VLAN in some Catalyst 650 0 family switc h documen tation.
14-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 14 Configuring Voice V LAN Unders tanding Voice VL AN Figur e 14 -1 Cisco 7960 IP Phone Conne ct ed t o a S witc h Cisco IP.
14-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 4 Configuring Voice VLA N Configuring Voice VLAN Configuring Vo ice VLAN These sec tions co ntain this co nfiguration info .
14-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 14 Configuring Voice V LAN Configuring Voice VLAN • If the Ci sco IP Phone an d a d e vice a ttached t o the Ci sco IP Ph one ar e in t he same VLAN, they must be in the same IP subnet.
14-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 4 Configuring Voice VLA N Configuring Voice VLAN Configuring IP Phone Voi ce Traffic Y ou c an con figure a port connec ted to the Cisco IP Phone to send CDP pac kets to th e phone to configu re the wa y in whic h the phon e sends voic e traf fic.
14-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 14 Configuring Voice V LAN Displa ying Vo ice VLA N T o return the port to its defa ult setting, use the no swit chport v oice vlan inter face co nfig uration comm and.
C HAPTER 15-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 15 Configuring STP This chapt er desc ribes how to configure the Sp anni ng T ree Protoc ol (STP) on port-ba sed VLAN s on the Catalyst 296 0 switch. Th e switch ca n use either th e per-VLAN span ning-tre e plus (PVST+) protocol based o n th e IEEE 802.
15-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 15 Configuring STP Unders tanding Spa nning-Tree Featu res • Spanning- T ree Interoper ability and Backwar d Compatibility , page 15-10 • STP and IEEE 802.
15-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 15 Configur ing STP Unders tanding Spanni ng-Tree Featu res Spannin g-Tr ee Topo logy and BP DUs The stable, ac tiv e spannin.
15-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 15 Configuring STP Unders tanding Spa nning-Tree Featu res Bridge ID, Switch Priority , an d Extended Syste m ID The IE EE 80 2.
15-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 15 Configur ing STP Unders tanding Spanni ng-Tree Featu res An interfac e mov es through these state s: • From initiali zat.
15-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 15 Configuring STP Unders tanding Spa nning-Tree Featu res Blocking State A Layer 2 interf ace in th e blocking state does not p articipate in frame f orwardin g. After initi alization , a BPDU is sent to each swi tch interface.
15-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 15 Configur ing STP Unders tanding Spanni ng-Tree Featu res Disabled State A Laye r 2 int erface in th e disab led state do es not parti cipa te in frame forwar ding or in the span ning tree.
15-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 15 Configuring STP Unders tanding Spa nning-Tree Featu res Spanning Tree and Redun dant Conn ectiv ity Y ou c an crea te a .
15-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 15 Configur ing STP Unders tanding Spanni ng-Tree Featu res Becau se each VLAN is a sepa rate span ning- tree ins tance, th e switch a ccelerate s aging o n a per -VLAN basis .
15-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 15 Configuring STP Configur ing Spannin g-Tree Feat ures Spanning-Tree Interoperability and Backward Compatibility T ab le 15-2 lists the inter operability and compatibility among the s upported s panning-tree mo des in a network.
15-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 15 Configur ing STP Confi guring S panni ng-Tree Featu res • Disabling Spann ing Tree, page 1 5-13 (optiona l) • Configu.
15-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 15 Configuring STP Configur ing Spannin g-Tree Feat ures If 128 insta nces of spa nning tr ee are alread y in use, yo u can disabl e spanni ng tree on one of th e VLANs and then enable it on th e VLAN where yo u want it to run.
15-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 15 Configur ing STP Confi guring S panni ng-Tree Featu res T o return to the def ault settin g, use the no spanning-tr ee mode globa l configurat ion com mand.
15-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 15 Configuring STP Configur ing Spannin g-Tree Feat ures Beginning in privileged EXEC mo de, fol low these steps to disabl e spanni ng-tree on a per-VLAN basi s. This proc edure is option al.
15-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 15 Configur ing STP Confi guring S panni ng-Tree Featu res Note After conf iguring the switch as the roo t switch, we recomm.
15-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 15 Configuring STP Configur ing Spannin g-Tree Feat ures Beginn ing in pri vile ged EXEC mode, follo w these step s to confi gure a switch to b ecome the second ary root for the speci fied VLAN.
15-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 15 Configur ing STP Confi guring S panni ng-Tree Featu res Note Th e show spanning-tree inter face interface- id privileged EXEC command displa ys informa tion only if th e port is in a l ink-up oper ative state.
15-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 15 Configuring STP Configur ing Spannin g-Tree Feat ures Beginn ing in pri vileg ed EXEC mode, follo w these steps to conf igure the cost of an interf ace. This procedur e is optional.
15-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 15 Configur ing STP Confi guring S panni ng-Tree Featu res Configuring th e Switch Priority of a VLAN Y ou can con fi gure the swit ch pri ority and make it more lik ely that the switc h will b e chosen as the root switch.
15-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 15 Configuring STP Configur ing Spannin g-Tree Feat ures The sectio ns that f ollow prov ide the c onfi guration ste ps.
15-21 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 15 Configur ing STP Confi guring S panni ng-Tree Featu res Configuring the Forwarding -Delay Time fo r a VLAN Beginning i n privileged E XEC mode, follow these ste ps to c onfigure t he forwarding -del ay ti me for a VLAN.
15-22 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 15 Configuring STP Displaying the Spannin g-Tree Stat us Displaying the Sp anning-Tre e Status T o display th e spannin g-.
C HAPTER 16-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 16 Configuring MSTP This chapte r describes ho w to conf igure the Ci sco implementation of the Multiple STP (MSTP) on the Catalyst 296 0 switc h.
16-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 16 Configuring MSTP Unders tanding MST P Understandin g MSTP MSTP , which uses RSTP for ra pid con vergence, en ables VL AN.
16-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 16 Configur ing MSTP Unde rsta ndi ng M STP IST, CIST, an d CST Unlik e PVST+ and rapid PVST+ in which all the spanni ng-tre .
16-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 16 Configuring MSTP Unders tanding MST P Operations Between M ST Regions If there are multip le regio ns or legac y 802.1D switches wit hin the network, MSTP esta blishes and maintains the CST , which includes all MST reg ions and all leg acy STP switches in the network.
16-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 16 Configur ing MSTP Unde rsta ndi ng M STP Hop Count The IST and M ST inst ances do not use the mes sage- age an d maxi mum-age infor mation in the configurati on BPDU to c ompute the sp anni ng-tre e topolo gy .
16-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 16 Configuring MSTP Unders tanding RSTP Ho we ver , the switch does not autom atically re vert to t he MSTP mode if it no l onger rece iv es IEEE 802.
16-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 16 Configur ing MSTP Understa nding RST P In a st able to pology with co nsisten t po rt roles througho ut the networ k, the .
16-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 16 Configuring MSTP Unders tanding RSTP When S witc h C is co nnecte d to Swi tch B , a simil ar set of hands haki ng mes sag es are exch an ged.
16-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 16 Configur ing MSTP Understa nding RST P Figur e 16 -3 Sequence of Ev ents Dur ing Rapid Con ve r gence Bridge Protoco l Data Unit Format an d Process ing The R STP BP DU for mat is th e sam e as t he IEEE 802.
16-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 16 Configuring MSTP Unders tanding RSTP The RSTP does not have a separate topo logy chan ge notificati on (TCN) BPD U. It uses the topology change (TC) f lag to show the topolo gy changes.
16-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 16 Configur ing MSTP Confi guring MST P Featu res • Protoc ol mi gration—F or backwa rd co mpatibil ity with IEEE 8 02.1D swi tches, RSTP selecti vely sends IEEE 802.1D configuratio n BPDUs and TCN BPDU s on a per-port basis.
16-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 16 Configuring MSTP Configur ing MSTP Featur es For informat ion about the suppor ted numbe r of spanni ng-tree instan ces, see the “Supp orted Spanning -T ree In stan ces” se ction on pag e 15-9 .
16-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 16 Configur ing MSTP Confi guring MST P Featu res Specifying the MST Region Co nfiguration and En abling MST P For two or mo.
16-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 16 Configuring MSTP Configur ing MSTP Featur es T o r etur n to th e defa ult M ST region c onfigurati on, u se th e no spanning-tree mst configurat ion globa l conf iguration c ommand.
16-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 16 Configur ing MSTP Confi guring MST P Featu res forward- delay ti me, and max imum-a ge time for a network of tha t diamet er , which ca n significantl y reduce the co n ve rg ence time.
16-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 16 Configuring MSTP Configur ing MSTP Featur es T o return the switch to it s def ault setting, use the no spanning-tree mst instance-id roo t global configurati on c ommand.
16-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 16 Configur ing MSTP Confi guring MST P Featu res Note Th e show sp anning-t ree mst inte rface interface-id privileged EXEC comma nd displa ys informa tion only if the port is in a link- up oper ative state.
16-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 16 Configuring MSTP Configur ing MSTP Featur es Note Th e show sp anning-t ree mst inte rface interface-id privileged EXEC comma nd displa ys informa tion only for por ts that are in a link-up ope rative state.
16-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 16 Configur ing MSTP Confi guring MST P Featu res Beginning in privileged EXEC mod e, fo llow these steps to co nfigure the sw itch pri ority .
16-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 16 Configuring MSTP Configur ing MSTP Featur es Configuring th e Forwarding-Dela y Time Beginn ing in pri vilege d EXEC mode, follo w th ese steps to conf igure the forwarding-d elay time for all MST inst ance s.
16-21 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 16 Configur ing MSTP Confi guring MST P Featu res Configuring th e Maximum-H op Cou nt Beginning i n privileged E XEC mo de, follow these steps to con figure th e ma ximum- hop c ount fo r all MST inst ance s.
16-22 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 16 Configuring MSTP Displaying the MST Configu ration and Stat us Restarting the Protocol Mi gration Proce ss A switch r unning M STP supp orts a built-in pr otocol migrat ion mecha nism that enable s it to i nteroper ate with legacy IEEE 802.
C HAPTER 17-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 17 Configuring Optional Spannin g-Tree Features This chap ter desc ribes how to configure optio nal spanni ng-tr ee featur es on th e Catalyst 2 960 swi tch.
17-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapte r 17 Configu ring Opti onal Sp anning -Tree Feature s Unders tanding O ptional Spann ing-Tre e Features Understand ing Port .
17-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 7 Configuring Op tional Spa nning-Tree Features Unders tanding Opt ional Spanning- Tree Featu res Understanding BPDU Guard .
17-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapte r 17 Configu ring Opti onal Sp anning -Tree Feature s Unders tanding O ptional Spann ing-Tre e Features Understanding UplinkFast Switches i n hie rarchic al ne tworks can be grou ped into bac kbone sw itches, distri bution switc hes, an d acces s switches .
17-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 7 Configuring Op tional Spa nning-Tree Features Unders tanding Opt ional Spanning- Tree Featu res Figur e 1 7 -3 U plinkF a.
17-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapte r 17 Configu ring Opti onal Sp anning -Tree Feature s Unders tanding O ptional Spann ing-Tre e Features The swit ch tries to f ind if it has an alt ernate pa th to the r oot switch.
17-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 7 Configuring Op tional Spa nning-Tree Features Unders tanding Opt ional Spanning- Tree Featu res Figur e 1 7 -6 Ba ckbon e.
17-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapte r 17 Configu ring Opti onal Sp anning -Tree Feature s Unders tanding O ptional Spann ing-Tre e Features Unders tanding Root Gu ard The Laye r 2 network of a service provide r (SP) can in clude ma ny connectio ns to swit ches that ar e not owned by the SP .
17-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 7 Configuring Op tional Spa nning-Tree Features Confi guring Opti onal Spa nning- Tree Featu res Understand ing Loop Guard .
17-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapte r 17 Configu ring Opti onal Sp anning -Tree Feature s Configur ing Opti onal Spanni ng-Tree Features Optional Spa nning-Tre.
17-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 7 Configuring Op tional Spa nning-Tree Features Confi guring Opti onal Spa nning- Tree Featu res Note Y ou can use the spanning-tree portf ast default global configurat ion co mmand to gl oball y enab le the Port Fast featur e on all nont runking por ts.
17-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapte r 17 Configu ring Opti onal Sp anning -Tree Feature s Configur ing Opti onal Spanni ng-Tree Features Enabling BPDU Filterin.
17-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 7 Configuring Op tional Spa nning-Tree Features Confi guring Opti onal Spa nning- Tree Featu res Enabling Up linkFast for Us e with R edundan t Link s UplinkFas t can not be enab led on VLAN s that have been configured with a swi tch p riority .
17-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapte r 17 Configu ring Opti onal Sp anning -Tree Feature s Configur ing Opti onal Spanni ng-Tree Features Enabling Ba ckbon eFast Y ou ca n enab le Backb oneFast to dete ct indire ct link fail ures and to star t the span ning-t ree reconfigur ation sooner.
17-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 7 Configuring Op tional Spa nning-Tree Features Confi guring Opti onal Spa nning- Tree Featu res Y ou ca n use the show interfaces status err -disabled privileged EXEC co mman d to show which switch ports are disabled because of an Ethe rChannel misconfigu ration.
17-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapte r 17 Configu ring Opti onal Sp anning -Tree Feature s Displaying the Spannin g-Tree Stat us Beginn ing in priv ileg ed EXEC mode, follo w these steps to enable lo op guard. This procedur e is optional.
C HAPTER 18-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 18 Configuring Flex Link s This ch apter describ es how to configure Flex Links, a pair of interfaces o n the Cat alyst 2 960 switch tha t are use d to prov ide a mu tual ba ckup.
18-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 18 Configuring Flex Links Configur ing Flex L inks Figur e 1 8-1 Flex Link s Configu ratio n Example If a p rimary (for warding) li nk go es down, a trap n otifies the network mana gement stations.
18-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 8 Configuring Fl ex Links Monitor ing Flex Li nks Configurin g Flex Link s Beginning i n privileged E XEC mo de, follow the.
18-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 18 Configuring Flex Links Monito ring Flex L inks.
C HAPTER 19-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 19 Configuring DHCP Features This ch apt er descri bes how to configur e DHC P snoopi ng and t he o ption-82 d ata in sertion featu res on the Catalyst 296 0 switc h.
19-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 19 Configuri ng DHCP Feature s Unders tanding DHCP Feat ures DHCP Server The DHCP server as signs IP addresse s from sp ecified address pools on a switch or router to DHCP clients a nd manag es them .
19-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 9 Configuring DH CP Features Understa nding DHCP Fe atures The s witch d rops a DHCP pack et when one of the se si tuations.
19-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 19 Configuri ng DHCP Feature s Unders tanding DHCP Feat ures Figur e 1 9-1 DHCP Relay A g ent in a Metr opolitan Ether net .
19-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 9 Configuring DH CP Features Understa nding DHCP Fe atures In the port field of th e circu it ID subopt ion, the port numbers st art at 3.
19-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 19 Configuri ng DHCP Feature s Configur ing DHCP Fe atures This is the format of the f ile with bindings: <initial-checksum> TYPE DHCP-SNOOPING VERSION 1 BEGIN <entry-1> <checksum-1> <entry-2> <checksum-1-2> .
19-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 9 Configuring DH CP Features Config uring DHC P Features Default DHCP Co nfiguration T ab le 19-1 shows the default DH CP co nfiguration. DHCP Snooping Config uration Guidelines These ar e the configur ation guidelin es for DHCP snoo ping.
19-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 19 Configuri ng DHCP Feature s Configur ing DHCP Fe atures • Before co nfiguring the DHCP sn ooping inf ormatio n optio n on your switch, be sure to configure t he de vice t hat is actin g as the DHCP serv er .
19-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 9 Configuring DH CP Features Config uring DHC P Features Enabling DHC P Snoo ping and Op tion 82 Beginning in privileged EX.
19-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 19 Configuri ng DHCP Feature s Configur ing DHCP Fe atures T o disab le DHCP snoopi ng, use the no ip dhcp snooping global configurat ion comm and.
19-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 1 9 Configuring DH CP Features Displaying DHCP Snooping Information T o s top u sing the da tabas e ag ent a nd bindi ng files, use the no ip dhcp snooping database global configurat ion c omma nd.
19-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 19 Configuri ng DHCP Feature s Display ing DHCP Sno oping Inform ation.
C HAPTER 20-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 20 Configuring IGMP Sno oping and MVR This cha pter descr ibes how to configure Int ernet Group Ma nageme nt Proto col (IGMP) snooping on the Catalyst 29 60 switch, incl uding an applicat ion of l ocal IGMP sno oping, Mu lticast VLAN Registrati on (MVR).
20-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Unders tanding IGM P Snoopin g Note For mor e inf ormati on on IP m ulticast and IG MP , see RFC 1112 and RFC 2236. The multica st router sends out periodic gener al queri es to all VL ANs.
20-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Understanding IGMP Snooping Note IGM Pv3 join an d leave messages are not suppo rted on switc hes runn ing IGMP filtering or MVR.
20-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Unders tanding IGM P Snoopin g The switc h hardware ca n distingui sh IGMP informa tion packet s from othe r packets for th e multic ast group.
20-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Understanding IGMP Snooping When hosts want to lea v e a multicast group, the y can silently leav e, or the y can send a lea ve message.
20-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Configuring IGMP Snooping If you di sable IGMP report supp ression, al l IGMP rep orts are fo rwarded t o the multic ast router s. Fo r configuration steps, see the “Disabling IG MP R eport Suppressi on” sec tion on page 20 -14 .
20-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping Global IGMP sn ooping overri des the V LAN IGMP sn ooping. If glo bal snoo ping is disabl ed, yo u canno t enab le VLAN sno oping.
20-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Configuring IGMP Snooping Note If you w ant to use CGMP as th e learn ing method a nd no mu lticast rou ters in t he VLAN ar e CGMP proxy-en abl ed, you mu st enter th e ip cgmp router -only comm and to dyna micall y access the router .
20-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping T o remo ve a multicas t router port from the VLAN , use the no ip igmp snooping vlan vlan-id mr outer interface inte rface-id global configurat ion comm and.
20-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Configuring IGMP Snooping Note Im media te Leave is supported only on IGM P V er sion 2 h osts.
20-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping T o globally reset the IGMP lea ve timer to the default setting, use the no ip igmp snooping last-member -query-int erva l global configura tion co mman d.
20-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Configuring IGMP Snooping Recovering from Flood Mode When a topology change occurs, t he span ning- tree roo t sends a speci al IGMP leave message (also known as global lea ve) with the group multic ast address 0.
20-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Configuring IGMP Snooping Configuring th e IGMP S nooping Qu erier Follow these guideli nes wh en configuring t he IGMP snoo ping queri er: • Conf igure the VLAN in glob al conf iguration mode.
20-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Displaying IGMP Snooping Information This exam ple sh ows how to set th e IGM P snoop ing q uerie r sour ce add ress to 10.0.0 .64: Switch# configure terminal Switch(config)# ip igmp snooping querier 10.
20-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Displaying IGMP Snooping Information T o d isplay IGMP snoo ping i nform ation , use one or mo re of t he privileged EX EC comm ands in T ab le 20-4 .
20-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Unde rs tand ing M ult icas t VLA N Re gist rat ion Understandin g Multicast VL AN Re.
20-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Understanding Multicast VLAN Registration Figur e 20-3 Multica st VLAN Registr ation.
20-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Conf igu rin g MVR These messa ges dynamically re gister for streams o f multicast traf fic in the multicast VL AN on the Layer 3 device.
20-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Configuring MVR • Because MVR on the switch uses IP multicast ad dresses instead of MA C m ulticast add resses, aliased IP multicast addresses are allo wed on the switch .
20-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Conf igu rin g MVR T o return the switch to its defau lt settings, use th e no mvr [ mode | group ip- ad dress | querytime | vlan ] global configurat ion comm ands.
20-21 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Displaying MVR Information T o return the interfa ce to its default setti ngs, use the no mvr [ ty pe | immediate | vl an vlan -id | gro up ] interf ace conf iguration comman ds.
20-22 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Con figur ing IGM P Fil te ring and Thro ttli ng Configuring IGMP Fi lteri ng and Thr.
20-23 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Configuring IGMP Filtering and Throttling Default IGMP Filtering and Throttling Configuration T ab le 20-7 shows the def ault IGMP filter ing config uration.
20-24 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Con figur ing IGM P Fil te ring and Thro ttli ng T o delete a prof ile, us e the no ip ig mp pro f ile pr ofile number gl obal co nfigurati on comm and.
20-25 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Configuring IGMP Filtering and Throttling T o remo ve a p rof ile fro m an interf ace, u se the no ip igmp f ilter pr ofile nu mber inter face c onfigu ration comm and.
20-26 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Con figur ing IGM P Fil te ring and Thro ttli ng Foll ow these gui delines when conf .
20-27 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 0 Configuring IGMP Sno oping and M VR Displaying IGMP Filtering and Throttling Configuration T o return to the def ault action of dro pping the repor t, use the no ip igmp max-groups ac tion interfac e configurati on c ommand.
20-28 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 20 Configuring IGMP Snooping and MVR Displaying IGMP Filterin g and Thro ttling Configu ration.
C HAPTER 21-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 21 Configuring Port-Base d Traffic Con trol This chapte r descr ibes ho w to con fig ure the por t-base d traf f ic contro l featur es on the Cata lyst 2960 switch.
21-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 21 C onfiguring Port-Based Traffic Contro l Configuring Storm Control Storm contro l use s one o f these metho ds to m easu.
21-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 1 Configuring Port-B ased Traff ic Control Configuring Storm Control Default Storm Control Configuration By default, unicast, broad cast, and multicast sto rm control are disabled on the swit ch interf aces; that is, the suppression le ve l is 100 percent.
21-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 21 C onfiguring Port-Based Traffic Contro l Configuring Storm Control Step 3 sto rm- con tr ol { br oadcast | mul ticast | unicast } le vel { le vel [ lev el-low ] | bps bps [ bps-low ] | pps pps [ pps-low ]} Configure broa dcast, m ultica st, or unica st storm c ontrol .
21-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 1 Configuring Port-B ased Traff ic Control Configuring Protected Ports T o disabl e storm co ntrol, use the no storm-control { br oadcast | multicast | unicast } level interface configurati on c ommand.
21-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 21 C onfiguring Port-Based Traffic Contro l Configur ing Port Block ing Prot ected P ort Co n figuration Guidelines Y ou ca.
21-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 1 Configuring Port-B ased Traff ic Control Confi guring Port Securi ty Blocking Flooded Tra ffic on an Interface Note Th e inter face can be a physica l interfac e or an Ether Chann el group.
21-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 21 C onfiguring Port-Based Traffic Contro l Configuring Port Security • Enab ling and Configurin g Port Se curity , page .
21-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 1 Configuring Port-B ased Traff ic Control Confi guring Port Securi ty Security Violations It is a security violatio n when.
21-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 21 C onfiguring Port-Based Traffic Contro l Configuring Port Security Default Port Security Configuration T ab le 21-2 shows the def ault port security conf iguration for an interface.
21-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 1 Configuring Port-B ased Traff ic Control Confi guring Port Securi ty T ab le 21-3 summarizes port secu rity compati bility with other por t-based f eatures.
21-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 21 C onfiguring Port-Based Traffic Contro l Configuring Port Security Step 6 switchport port-security [ maximum value [ vlan { vlan-list | { acces s | vo i ce }}]] (Opti onal) Set th e maxim um number of se cure MAC addresses for the interfa ce.
21-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 1 Configuring Port-B ased Traff ic Control Confi guring Port Securi ty Step 8 switchport port-security [ mac-addre ss mac-ad dr ess [ vlan { vlan-id | { access | voice }}] (Optiona l) En ter a secu re M A C addr ess fo r th e int erface.
21-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 21 C onfiguring Port-Based Traffic Contro l Configuring Port Security T o return the in terface to the defau lt conditi on as not a secu re port, use the no switchport port-se curity interf ace conf iguration command.
21-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 1 Configuring Port-B ased Traff ic Control Confi guring Port Securi ty Switch(config-if)# switchport port-security mac-address 0000.0000.0003 Switch(config-if)# switchport port-security mac-address sticky 0000.
21-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 21 C onfiguring Port-Based Traffic Contro l Displaying Port-Base d Traffic Cont rol Settings T o di sable port se curity agi ng for all sec ure addr esses on a port, use the no switchport port-security aging tim e interfac e conf igur ation comma nd.
C HAPTER 22-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 22 Configuring CDP This c hapter d escrib es how to configure Cisco Discovery Protoco l (C DP) on the Catalyst 2960 swi tch.
22-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapte r 22 Co nfigu ring CD P Conf igu rin g CD P Configuring CDP These sec tions co ntain this co nfiguration in format ion: • .
22-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 2 Configuring CDP Configuring CDP Use the no form of the CDP commands to return to the def ault settings.
22-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapte r 22 Co nfigu ring CD P Conf igu rin g CD P Disabling an d Enab ling CDP on a n Interfac e CDP is enabled by def ault on all supported inter faces to send and to rece iv e CDP information .
22-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 2 Configuring CDP Monitoring and Maintaining CDP Monitoring and Maintaining CDP T o m onito r and m aintai n CDP on your device, per form one or mor e of these tasks, begi nning in privileged EXEC mode .
22-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapte r 22 Co nfigu ring CD P Monito ring and Mai ntainin g CDP.
C HAPTER 23-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 23 Configuring SPAN and RSPAN This chap ter des cribes ho w to conf igure Switc hed Port Analyzer (S P AN) and Rem ote SP AN (RSP AN) on the Ca talyst 29 60 sw itch.
23-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Understan ding SPAN and RSPA N These sect ions co ntain this co nceptu al in forma tion: • .
23-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Understandi ng SPAN and RS PAN Figur e 23 -2 Example of R SP AN Configur ation SPAN and RS PAN Conc epts a nd Terminology This secti on descri bes conce pts an d terminology associat ed with SP A N and RSP AN co nfiguration.
23-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Understan ding SPAN and RSPA N An RSP AN source sessio n is ver y similar to a lo cal SP AN session, ex cept for where the pack et stre am is directe d.
23-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Understandi ng SPAN and RS PAN • T rans mit (T x) SP A N—Th e goal of tran smi t (or egress.
23-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Understan ding SPAN and RSPA N • It ca n be a n acce ss por t, trunk port , or voic e VLA N port . • It ca nnot be a de stinati on po rt. • Source por ts can be in the same or differen t VLANs.
23-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Understandi ng SPAN and RS PAN A destinati on port has th ese charact eristics: • For a local SP A N session, the d estinat ion port must reside on the same sw itch as the source port.
23-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Understan ding SPAN and RSPA N RSPAN V LAN The RSP AN VLAN c arries SP AN traf f ic betwe en RSP AN source and destination se ssions. It has these special ch aracter istics: • All traf fic i n the RS P AN VLAN i s alw ays flooded.
23-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Config uring SPAN and RSPAN If a physi cal por t that be longs to an Ethe rChan nel gro up is a.
23-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Configuring SPAN and RSPAN Configuring Local SPAN These sec tions co ntain this co nfigurati.
23-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Config uring SPAN and RSPAN Step 3 monitor s ession session_numbe r source { interface in terface-id | vl an vlan-id } [ , | - ] [ both | rx | tx ] Specify the SP AN sessio n an d the source p ort (monit ored po rt).
23-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Configuring SPAN and RSPAN T o delete a SP AN session, use the no mo nitor session session _number gl obal c onfiguration c ommand.
23-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Config uring SPAN and RSPAN This exampl e shows ho w to disab le rece iv ed traffic monitorin .
23-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Configuring SPAN and RSPAN T o delete a SP AN session, use the no mo nitor session session _number gl obal c onfiguration c ommand.
23-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Config uring SPAN and RSPAN This example shows how to remov e any existing configuration on SP.
23-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Configuring SPAN and RSPAN T o monitor all VLANs on the trunk port, use the no monitor session session_nu mber filt er global configurati on c ommand.
23-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Config uring SPAN and RSPAN • RSP AN VLANs a re included as sou rces for port- based RSP A N sessions when source trunk por ts ha ve acti ve RSP AN VLANs.
23-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Configuring SPAN and RSPAN Creating an RSPAN S ource Session Beginning in privileged EXEC mo.
23-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Config uring SPAN and RSPAN T o rem ove a source port or VLAN fro m the SP AN ses sion, use the no monitor session session_n umber sour ce { interface interface-id | vlan vlan-i d } global conf iguration comman d.
23-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Configuring SPAN and RSPAN T o delete a SP AN session, use the no mo nitor session session _number gl obal c onfiguration c ommand.
23-21 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Config uring SPAN and RSPAN T o delete an RSP AN session, use the no monitor session session_number global configuration comman d.
23-22 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Configuring SPAN and RSPAN Specifying VLANs to Filter Beginning in privileged EXEC mo de, fo.
23-23 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Displaying SPAN and RS PAN Sta tus Displaying SPAN and RSPAN Status T o displ ay the cu rrent SP AN or RSP AN configurat ion, use the show monitor user EXEC comm and.
23-24 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 23 Configuring SPAN and RSPAN Display ing SPAN and RSPAN Status.
C HAPTER 24-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 24 Configuring UDLD This c hapter descri bes how to c onfigure t he Un iDirec tional Link D etect ion (U DLD) protoc ol on t he Catalyst 2960 switch.
24-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 24 Configuring UDLD Unders tanding U DLD In norm al mode, UDL D detect s a unidirec tional li nk when f iber strand s in a fi ber -opt ic port are misconnecte d and the Layer 1 mechanisms do not de tect this misconnec tion.
24-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 4 Configuring UD LD Understand ing UDLD • Ev ent-dr iv en det ection an d echoin g UDLD re lies on echo ing as its detec tion m echanism .
24-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 24 Configuring UDLD Conf igu ring U DLD Configuring UDLD These sec tions co ntain this co nfiguration in format ion: • De.
24-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 4 Configuring UD LD Configur ing UDLD Enabling UDL D Globally Beginn ing in pri vilege d EXEC mode, follo w th ese steps to.
24-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 24 Configuring UDLD Displa ying U DLD Statu s Resetting an Interface Disabled by UDLD Beginn ing in pri vilege d EXEC mode,.
C HAPTER 25-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 25 Configuring RMON This c hapter describ es how to c onfigure Remo te N etwork Mo nitori ng (RMO N) on the C ataly st 2960 switch.
25-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 25 Configuring RMON Conf igu ring R MON Figur e 25 -1 Remote Monito r ing Ex ample The switc h supports these RM ON groups .
25-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 25 Configur ing RMON Confi guring RMON Default RMON Configuration RMON is disa bled by default ; no alarms or events are configur ed.
25-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 25 Configuring RMON Conf igu ring R MON T o disable an alarm, use the no rm on al arm number global c onfigurati on com mand on e ach al arm you configured . Y o u ca nnot di sable at on ce al l the a larms that yo u con figured.
25-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 25 Configur ing RMON Confi guring RMON Collectin g Group Hist ory St atistics on an Interface Y ou must first c onfigure RM ON al arms an d events to displ ay co llec tion inf ormat ion.
25-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 25 Configuring RMON Displa ying RM ON Sta tus Collectin g Group Et hernet St atistics on an Interface Beginn ing in pr iv ileged EXEC mode, follo w thes e steps to collect g roup Ethernet statistic s on an interf ace.
C HAPTER 26-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 26 Configuring System Message Logg ing This chapter descr ibes ho w to configure syst em message logging on the Catalyst 2960 switch .
26-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 26 Config uring Syste m Message Logg ing Configur ing System Message L ogging Configuring Sy stem Message Lo gging These se.
26-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 6 Configuring Syste m Message L ogging Config uring Syst em Message Logging This example shows a partial switch system mess.
26-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 26 Config uring Syste m Message Logg ing Configur ing System Message L ogging Beginning i n privileged E XEC mo de, follow these s teps to di sable message loggi ng. Thi s proc edure is optional.
26-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 6 Configuring Syste m Message L ogging Config uring Syst em Message Logging The logging buffered globa l configur ation comm and c opies l ogging messa ges to a n inte rnal buffer .
26-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 26 Config uring Syste m Message Logg ing Configur ing System Message L ogging is retu rned. Ther efore , unsolici ted messag es and deb ug command output ar e not inter sperse d with solicite d device o utput and p rompts.
26-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 6 Configuring Syste m Message L ogging Config uring Syst em Message Logging Enabling a nd Disab ling Time S tamps on Log M essages By default, log message s are not time-stam ped.
26-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 26 Config uring Syste m Message Logg ing Configur ing System Message L ogging T o di sable seq uenc e numbers, use the no service seque nce-numbers global co nfiguration c omman d.
26-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 6 Configuring Syste m Message L ogging Config uring Syst em Message Logging T ab le 26-3 descri bes the le vel keywords. It also li sts the corre sponding UNIX syslog definitions f rom the most se vere le vel to the least sev ere le v el.
26-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 26 Config uring Syste m Message Logg ing Configur ing System Message L ogging Beginn ing in pr iv ilege d EXEC mode, follo w the se steps to change th e le ve l and hi story table si ze defaults.
26-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 6 Configuring Syste m Message L ogging Config uring Syst em Message Logging Logging Messages to a UNIX Syslog Daemo n Before yo u can send system log messages to a UNIX syslog server , you must con figure the syslog daemon on a UNIX ser ver .
26-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 26 Config uring Syste m Message Logg ing Display ing the Log ging Confi guration T o remo ve a syslog serv er , use the no logging ho st gl obal c onfiguration comm and, and specif y the syslo g server IP address.
C HAPTER 27-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 27 Configuring SNMP This chapt er describ es ho w to configure the Simpl e Network Mana gement Proto col (SNM P) on the Catalyst 2960 switch.
27-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 27 Co nfiguring SNMP Unders tanding SNM P • Using SNMP to Access MIB V a riables, page 27-4 • SNMP Notif ications, page.
27-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 27 Configur ing SNMP Underst anding SN MP T ab le 27-1 identif ies the charac teristics of the dif ferent combinations of secur ity models and le vels. Y ou must configure the SN MP agent to use the SNMP version supp orted by the mana gement station.
27-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 27 Co nfiguring SNMP Unders tanding SNM P SNMP Agen t Fun ctions The SNMP a gent responds to SNMP manage r requests as follo ws: • Get a MIB v ariable—Th e SNMP agent be gins this functi on in response to a request f rom the NMS.
27-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 27 Configur ing SNMP Underst anding SN MP Figur e 27 -1 SNMP Networ k For informati on on suppor ted MIBs and how to access them, see Appen dix A, “ Suppor ted MIBs.
27-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 27 Co nfiguring SNMP Conf igu rin g SNMP The swi tch u ses on e of the v alue s in T able 2 7-3 to assign an ifInde x valu e to an interfac e: Note The switch m ight not use s equential va lues with in a ran ge.
27-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 27 Configur ing SNMP Configuring SNMP SNMP Config ura tion Guidelines If the swi tch star ts and the wit ch startup conf igurat ion has at le ast one snmp-serv er globa l configuration comm and, the SNM P ag ent i s en ab led.
27-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 27 Co nfiguring SNMP Conf igu rin g SNMP Disabling the SNMP Agent Beginn ing in pr iv ileged EXEC mode, f ollo w these step.
27-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 27 Configur ing SNMP Configuring SNMP Note T o disa ble a ccess for an SNMP c ommunity , set th e commu nity string for th at com munity to the null string (do not enter a value for th e communi ty string ).
27-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 27 Co nfiguring SNMP Conf igu rin g SNMP Beginn ing in pri vileg ed EXEC mode, follo w th ese step s to configur e SNMP on the switch: Command Purpo se Step 1 co nfigure term ina l En ter global co nfiguration mo de.
27-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 27 Configur ing SNMP Configuring SNMP Configuring SNMP Notifications A trap manag er is a mana geme nt statio n that recei ves and pr ocesses traps. T raps are sy stem aler ts that the switc h gen erates wh en cert ain events occu r .
27-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 27 Co nfiguring SNMP Conf igu rin g SNMP Note Th ough v isible in the com mand- line he lp strin gs, the cpu [ thre shol d ], insertion , a nd removal ke yword s are not sup ported.
27-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 27 Configur ing SNMP Configuring SNMP Beginn ing in pri vileg ed EXEC mode, f ollow these steps to conf igure th e switch to send traps or infor ms to a host: Command Purpose Step 1 conf igure terminal Enter globa l configurati on mode.
27-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 27 Co nfiguring SNMP Conf igu rin g SNMP The snmp-ser ver host comman d speci fies which h osts r ecei ve the n otif ications. The snmp-ser ver enab le trap command global ly enable s the mech anism for t he specif ied notif ication (f or trap s and informs ).
27-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 27 Configur ing SNMP Configuring SNMP Limiting TFTP Server s Used Thr ough SNM P Beginning i n privileged E XEC mo de, follo.
27-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 27 Co nfiguring SNMP Displaying SNMP Status This e xample shows h ow to allo w r ead-only ac cess for all objects to members of access list 4 that use the coma ccess community string.
C HAPTER 28-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 28 Configuring Network Security with ACLs This c hapter d escribes how to configure ne twork sec urity on the C atalyst 2960 switch by using acc ess contr ol lists (A CLs), which in comman ds and tables are also refer red to as access lists.
28-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 28 Configuring Network Security with ACLs Unders tandin g ACLs Y ou co nfigure acc ess lists on a switc h to provide ba sic secur ity for your ne twork.
28-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 8 Configuring Netw ork Securit y with ACLs Unde rsta ndi ng AC Ls Figur e 28 -1 Using A CLs t o Contr ol T ra ff ic t o a Netw or k When you apply a port A CL to a trunk port, the A CL filters traf fic on all VLANs presen t on the trunk port.
28-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 28 Configuring Network Security with ACLs Conf iguri ng I Pv4 AC Ls Consid er acc ess l ist 102, conf igured wi th these command s, ap plied t o thre e frag mented p ackets : Switch(config)# access-list 102 permit tcp any host 10.
28-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 8 Configuring Netw ork Securit y with ACLs Configuring IPv4 ACLs The sw itch does not support these Cisco IOS router ACL-re.
28-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 28 Configuring Network Security with ACLs Conf iguri ng I Pv4 AC Ls Access List Numbers The numbe r you use to denote your ACL sho w s the type of access list that you are cre ating.
28-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 8 Configuring Netw ork Securit y with ACLs Configuring IPv4 ACLs Creating a Numbered Standard ACL Beginning in privileged E.
28-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 28 Configuring Network Security with ACLs Conf iguri ng I Pv4 AC Ls The switch alwa ys re writes th e order of sta ndard acce ss lists so that e ntries with host matche s and en tries with mat ches having a do n’t car e mask of 0.
28-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 8 Configuring Netw ork Securit y with ACLs Configuring IPv4 ACLs Beginn ing in pri vileg ed EXEC mode, follo w th ese step s to create an extended A CL: Command Purpo se Step 1 co nfi gure terminal En ter glob al co nfiguration mo de.
28-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 28 Configuring Network Security with ACLs Conf iguri ng I Pv4 AC Ls or access-list access-list-number { deny | permit } pr.
28-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 8 Configuring Netw ork Securit y with ACLs Configuring IPv4 ACLs Use the no access-lis t access- list-number global con figur ation command to delete the enti re access list.
28-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 28 Configuring Network Security with ACLs Conf iguri ng I Pv4 AC Ls After c reating a numb ered e xtended A CL, you can ap.
28-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 8 Configuring Netw ork Securit y with ACLs Configuring IPv4 ACLs T o remo ve a na med st andar d A CL, us e the no ip access-list standard name globa l configuratio n comm and.
28-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 28 Configuring Network Security with ACLs Conf iguri ng I Pv4 AC Ls After y ou creat e an A CL, any ad dition s are plac ed at the en d of the list. Y ou cannot se lecti v ely add A CL entrie s to a specif ic A CL.
28-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 8 Configuring Netw ork Securit y with ACLs Configuring IPv4 ACLs Repeat the steps if you ha ve multiple items that you w ant in ef fect at dif ferent times.
28-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 28 Configuring Network Security with ACLs Conf iguri ng I Pv4 AC Ls The rem ark ca n go before or after a permi t or deny statem ent.
28-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 8 Configuring Netw ork Securit y with ACLs Configuring IPv4 ACLs T o remo ve an A CL from a term inal line, use the no access-class access- list-number { in | out } l ine configurati on c ommand.
28-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 28 Configuring Network Security with ACLs Conf iguri ng I Pv4 AC Ls IPv4 ACL Co nfiguration E xamples This se ction provides examples of con figuring a nd appl ying I Pv4 ACLs.
28-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 8 Configuring Netw ork Securit y with ACLs Configuring IPv4 ACLs Named ACLs This exam ple c reates a n extende d A CL nam ed m arketing_group .The marketing_g r oup A CL allo ws any TCP T elne t traff ic to th e destina tion ad dress and w ildcar d 171.
28-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 28 Configuring Network Security with ACLs Creating Nam ed MAC Ext ended ACL s In this example of a named A CL, the Jones s.
28-21 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 8 Configuring Netw ork Securit y with ACLs Creat ing N ame d MA C Ex tend ed AC Ls Use the no mac access-list extended name global conf igurati on command to delete the entire A CL.
28-22 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 28 Configuring Network Security with ACLs Display ing IPv4 AC L Configu ration After receiv ing a packet, the switc h checks i t agains t the inbou nd A CL. If the A CL permits it , the swit ch continue s to proc ess the pa cket.
C HAPTER 29-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 29 Configuring QoS This chapte r describes ho w to conf igure quality of service (QoS) b y using automatic QoS (au to-QoS) comman ds or by using standard Q oS comman ds on the Ca talyst 2960 sw itch.
29-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Unders tanding Q oS The QoS imple mentatio n is based on the Dif ferent iated Servi ces (Dif f- Serv) arc hitectur e, an emer gin g standar d from the In ternet Engineer ing T ask Forc e (IET F).
29-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Unde rsta ndi ng QoS Figur e 29 -1 QoS Classificat ion La yer s in F r ames and P ac k ets All swi tches.
29-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Unders tanding Q oS Figure 29-2 sh o ws the basic QoS model.
29-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Unde rsta ndi ng QoS Classification Classification is the pro cess of distingu ishing one kind of traffic from anothe r by e xamin ing the fields in the packe t.
29-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Unders tanding Q oS After cla ssification, th e pac ket is sent to the polic ing, marki ng, and the ing ress queue ing and schedul ing stag es. Figur e 29 -3 Classification Flow chart 86834 Generate the DSCP based on IP precedence in pack et.
29-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Unde rsta ndi ng QoS Classification Based on QoS ACLs Y ou c an us e IP sta ndard, IP extende d, or Layer 2 MA C ACLs to define a group of packet s with the sa me char act eris tics ( class ).
29-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Unders tanding Q oS Y o u creat e and name a p olic y map b y using the policy-map global con figuratio n comma nd. Wh en you enter this c ommand, the switch ente rs the polic y-map conf igur ation mode.
29-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Unde rsta ndi ng QoS Policing on Physical Ports In policy m aps o n physic al por ts, y ou can create these types of pol icers: • Individual QoS applies the bandwid th limits specif ied in the policer separate ly to each matched traf f ic class.
29-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Unders tanding Q oS Figur e 29 -4 Po licing and M ar king Fl ow c hart o n Ph ysi cal P orts Mappin.
29-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Unde rsta ndi ng QoS • Before the traf fic reache s the sched uling stag e, QoS stores th e pack et in an ingr ess and an e gress queue acco rding to the QoS lab el.
29-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Unders tanding Q oS Weighted Tail Drop Both the in gress an d egr ess queu es use an enh anced v ersion of the tail-d rop cong estion -a vo idance mecha nism ca lled weight ed ta il dr op (WTD ).
29-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Unde rsta ndi ng QoS In shar ed mod e, the queues share th e band width am ong th em ac cordi ng to the configured weight s. The bandwidt h is guarante ed at t his level but not limit ed to i t.
29-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Unders tanding Q oS The switch supports tw o conf igurable in gress queues, wh ich are se rviced b y SRR in shar ed mode only . T ab le 29-1 descr ibes the que ues.
29-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Unde rsta ndi ng QoS Priorit y Queueing Y ou ca n configure one ingress que ue as the prio rity qu eue by using the mls qos srr -queue input priority-queue queue-id ba ndwi dt h weight globa l configura tion com mand .
29-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Unders tanding Q oS Figur e 29 -8 Queueing and Sc hedulin g Flow char t for Eg r ess P orts Each por t supports fo ur egress queue s, one of w hich (queue 1) can be the egress expedite qu eue.
29-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Unde rsta ndi ng QoS b uf fers) or not empty (f ree b uff ers). If the queue is no t ove r- limit, the sw itch can alloca te bu f fer space from t he r eserved poo l or f rom th e co mmon pool (if it is n ot emp ty).
29-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Unders tanding Q oS ID 1 a nd ID 2. T he drop thresho ld f or thre shold I D 3 i s pre set t o the queue-f ull sta te, and you c annot modify it .
29-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Configuring Auto-QoS The input mutatio n causes the DSCP to be rewritten depe nding on the new v alue of DSC P chosen. The set action in a polic y map also causes the DSCP to be re written.
29-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Conf igu rin g Aut o-Q oS T ab le 29-3 shows the genera ted aut o-QoS c onfiguration for the ing ress q ueues. T ab le 29-4 shows the genera ted aut o-QoS c onfiguration for t he egress q ueues.
29-21 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Configuring Auto-QoS • When y ou enter the auto qos voip cisco-softphone interface co nfiguration c o.
29-22 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Conf igu rin g Aut o-Q oS The switch au tomatical ly maps DSCP v alues to an ingress queue and t o a t hres hold ID.
29-23 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Configuring Auto-QoS The s witch a utoma tically configures the egre ss que ue buffer size s. It c onfigures t he bandw idth and th e SRR m ode ( shaped or shared) on the egress queues ma pped to the por t.
29-24 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Conf igu rin g Aut o-Q oS Effects of Auto-QoS on the Configuration When auto- QoS is en abled, th e aut o qo s v oip inter face configurat ion comm and and the gener ated configurati on are adde d to the ru nning configu ration.
29-25 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Configuring Auto-QoS Enabling Auto-QoS for VoIP Beginn ing in pri vilege d EXEC mode, follo w th ese st.
29-26 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Conf igu rin g Aut o-Q oS This e xample sho ws how to enable auto-QoS an d to trust the QoS labels .
29-27 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Configuring Auto-QoS Note Y o u shou ld no t configure a ny standard QoS com mands before enteri ng the auto-Qo S com mands.
29-28 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Displa ying Aut o-QoS In format ion Displaying Auto-Q oS Information T o display the initial auto-Q oS conf iguration, use the show auto qos [ interfa ce [ interface-id ]] privileged EXEC comm and.
29-29 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Default Standard QoS Configuration QoS is disa bled. Ther e is no conce pt of tru sted or untru sted por ts be cause the packet s are not m odified (the CoS, DSCP , and IP preceden ce v alues in the pack et are not changed).
29-30 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS Default Egress Queue Configur ation T ab le 29-9 shows the default egre ss queue con figuration for ea ch qu eue-set when QoS is ena bled.
29-31 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Default Mapping Table Conf iguration The default CoS-to-DSCP map is sho wn in T able 29- 12 on pa ge 2 9-51 . The default IP-pre cedenc e-to-D SCP map is shown in T able 29-13 on pa ge 29-52 .
29-32 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS • On a po rt configu red f or QoS, a ll t raff ic re ceived through the po rt is class ified, poli ced, a nd ma rked accord ing to the policy map atta ched to t he port.
29-33 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS • Enabl ing DS CP T ransparen cy Mo de, page 29-36 • Configuring the DSCP.
29-34 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS Beginn ing in pr iv ilege d EXEC mode, follo w the se steps to conf igur.
29-35 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Beginn ing in pri vilege d EXEC mode, follo w these steps to def ine the def .
29-36 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS W ith the t ruste d setti ng, you also c an use t he trusted bounda ry fea ture to prevent misuse o f a high-pr iority qu eue if a user bypasses the tel ephone a nd conne cts the PC di rectly to t he switch.
29-37 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS If D SCP t rans par ency is en able d by u sin g the no mls qos rewrite ip ds.
29-38 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS Figur e 29 -12 DSCP -T rust ed Stat e on a P or t Bor der ing Another Qo.
29-39 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS T o return a port to its non-trusted state , use the no mls qos trust interfa ce conf igurat ion comm and.
29-40 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS Classifying Traffic by Using ACLs Y ou ca n classif y IP traffic by using IP standard or IP extended A CLs; you can classify no n-IP traffi c by usin g Laye r 2 MA C A CLs.
29-41 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Beginn ing in pri vileg ed EXEC mode, follo w these steps to create an IP exte nded A CL for IP traff ic: T o delete an acc ess list, u se the no access-list access-l ist-number gl obal con f igura tion co mmand .
29-42 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS Beginning in privileged EXEC mod e, follow these st eps to c reate a L a.
29-43 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Classifying Traffic by Using Class Ma ps Y ou use the class-map global con fig uration command to name and to i solate a spe cifi c traf fic flo w (or class) f rom all oth er traf fic.
29-44 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS T o delete an existin g policy map, use the no policy-map poli cy-map- nam e global con figuration comm and.
29-45 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Classifying, Policing, and Marking Traff ic on Physical Ports by Using Policy Maps Y ou can confi gure a polic y map on a physical port that spec ifies which traff ic class to act on.
29-46 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS Step 3 policy-map policy- map-nam e Creat e a po licy ma p by ente ring the p olicy map name , and e nter pol icy -map co nf igur ation mode .
29-47 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS T o delete an existin g policy map, use the no policy-map poli cy-map- nam e global con figuration comm and. T o delet e an existing cl ass map, use the no class class-map-na me policy-map c onfiguration comm and.
29-48 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS This e x ample sho ws ho w to creat e a polic y map and a ttach it to an ingress port. I n the co nf iguratio n, the IP standard A CL perm its tr aff ic from network 10 .
29-49 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Beginn ing in pri vileg ed EXEC mode, follo w th ese step s to create an aggre gate policer: Comma nd Purp ose Step 1 conf igure t erminal Enter glob al configur ation mo de.
29-50 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS T o r emove the specified a ggregate pol icer from a pol icy map, use th e no police agg reg ate aggr egate-poli cer-nam e policy m ap c onfiguratio n mode .
29-51 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Configuring DSCP Maps These sec tions co ntain this co nfiguration info rmat .
29-52 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS T o return to the defau lt map, use the no mls qos cos-dscp global configurati on com mand.
29-53 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS T o return to the defau lt map, use the no mls qos ip-pr ec-dscp global configurati on comm and.
29-54 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS This exam ple sh ows ho w to map DSCP 50 t o 57 to a marked-down DS CP v.
29-55 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS T o return to the defau lt map, use the no mls qos dscp-cos global c onfiguration com mand.
29-56 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS Beginning in privileged EXEC mo de, foll ow these steps to mod ify the DSCP-t o-DS CP-mutati on map . This proc edure is option al.
29-57 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Note In the above DSCP-to- DSCP-m utati on map, t he mutat ed values are shown in the bod y of the matrix.
29-58 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS T o re turn to the defau lt CoS input que ue thre shold ma p or the de f.
29-59 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS In this example, the DS CP values (0 to 6) are assigned the WT D thr eshold of 50 perce nt and will be dropped soone r than the D SCP values (2 0 to 26 ) assi gned to t he WTD thres hold of 70 pe rcent.
29-60 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS Allocating Bandwidth Between the Ingress Que ues Y ou nee d to specify how much of the av a ilable bandwi dth is alloca ted bet ween the i ngress queue s.
29-61 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Configuring the Ingress Priority Queue Y ou should use the prior ity queue o nly for tr af f ic that nee ds to be e xpedi ted (for exam ple, v oice traf fic , which n eeds minimum d elay and ji tter).
29-62 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS Configuring E gress Queu e Characteristic s Depend ing on the co mplexity of yo ur networ k and your Qo S solution, you mig ht need to pe rform al l of the tasks in the ne xt sections.
29-63 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Beginning i n privileged EXEC mode, follow these steps to configure the me mory al loca tion and to drop thresholds for a queue-se t.
29-64 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS T o return to the de fault settin g, use the no mls qos queue- set output qse t-id bu ff e r s global conf igurati on comm and.
29-65 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS T o r eturn to th e defaul t DSCP output queu e thre shold m ap o r the defau.
29-66 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS Configuring SRR Sh aped Weights on Egress Queues Y ou ca n specif y how much of t he av ailab le bandwi dth is all ocated to each queu e.
29-67 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Confi guring Standard QoS Configuring SRR Sh ared Weights on Egress Queues In shar ed mod e, the queues share th e band width am ong th em ac cordi ng to the configured weight s.
29-68 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Configur ing Standar d QoS Configuring the Egress Expedite Que ue Y ou can ensure that ce rtain pack ets ha ve prio rity o ver all oth ers by que uing them in the e gress e xpedite queue.
29-69 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 2 9 Configuring Qo S Displaying Standard QoS Information Beginning i n privileged E XEC mo de, follow these steps to li mit t he band width on a n egress po rt. This procedur e is optional.
29-70 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapt er 29 Conf igur ing Q oS Display ing Standar d QoS Inform ation show mls qos queue-set [ qset-id ] D isplay QoS settings for the egress queues.
C HAPTER 30-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 30 Configuring EtherChannels This c hapter d escrib es how to configu re Et herChann els on Laye r 2 por ts on the C atalyst 2 960 sw itch. Ether Channel provides fault-tol erant high-spe ed links between sw itches, ro uter s, and ser vers.
30-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 0 Config uring E therChan nels Unders tanding Ether Channel s EtherChann el Overview An EtherCh annel c onsists of individual Fast Ethernet or Giga bit Ether net links bundled int o a single logical lin k as shown in Figu re 30 -1 .
30-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 0 Configuring EtherCh annels Understa nding Et herChann els Port-Chan nel Interfaces When you cre ate a La yer 2 Ethe rChan nel, a por t-c hannel logical i nterfac e is in volved.
30-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 0 Config uring E therChan nels Unders tanding Ether Channel s Port Aggreg ation Pro tocol The Port Aggr egation Protocol (P AgP) is a Cisco -propr ietary pr otocol that can be run only on Ci sco switches and on tho se switches lice nsed by vendors to suppo rt P AgP .
30-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 0 Configuring EtherCh annels Understa nding Et herChann els PAgP Interaction with Other Features The Dyna mic Trunking Protocol (DT P) and the Ci sco Discovery Protoco l (CDP) send and receive packets over the physica l ports in the Et herChann el.
30-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 0 Config uring E therChan nels Unders tanding Ether Channel s LACP Interaction with O ther Features The DT P and the CD P send a nd receive packets over the physical ports in t he Ether Chann el.
30-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 0 Configuring EtherCh annels Understa nding Et herChann els W ith source -and-de stinati on MAC address forwardi ng, when p.
30-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 0 Config uring E therChan nels Configur ing EtherChann els Figur e 30 -3 Load Distr ibution and F orwa rdin g Methods Con.
30-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 0 Configuring EtherCh annels Config uring Et herCh annels Default EtherCh annel Con figuratio n T ab le 30-3 shows the default E therCh annel co nfiguration .
30-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 0 Config uring E therChan nels Configur ing EtherChann els • Do not configure an EtherC hanne l in bo th the P AgP an d LACP modes. Ether Channel group s running P AgP an d LACP can c oexist on the s ame sw itch.
30-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 0 Configuring EtherCh annels Config uring Et herCh annels T o r emove a p ort from t he E therCha nnel gro up, us e the no channel-group interface co nfiguration comm and.
30-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 0 Config uring E therChan nels Configur ing EtherChann els This example shows how to configure an EtherChann el.
30-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 0 Configuring EtherCh annels Config uring Et herCh annels T o return E therChannel load bala ncing to th e defa ult conf igura tion, use the no port-c hannel load-balanc e global con figurati on comm and.
30-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 0 Config uring E therChan nels Configur ing EtherChann els T o return the priority to its def ault setting, us e the no pagp port-priority interf ace c onfigu ration command.
30-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 0 Configuring EtherCh annels Config uring Et herCh annels Determ ining wh ich p orts ar e act i ve and wh ich ar e hot st andby is a two-ste p proc edure. First th e syst em with a numerically lo wer sy stem priority and system-id is placed in char ge of the decision.
30-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 0 Config uring E therChan nels Displaying Eth erChannel, PA gP, and LACP Status Note If LA CP is not able to aggrega te .
30-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 0 Configuring EtherCh annels Displaying EtherC hannel, P AgP, and LACP Status Y ou can clear L A CP c hannel -group i nform ation a nd t raff ic c ounters by using the clear lacp { channel -gr oup-numb er counters | counter s } pri vile ged EXEC com mand.
30-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 3 0 Config uring E therChan nels Displaying Eth erChannel, PA gP, and LACP Status.
C HAPTER 31-1 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 31 Troubleshooting This chapter descr ibes how to iden tify and resolve softw are problems relat ed to the Cisco IOS software on the Cataly st 2960 switch.
31-2 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 31 Trouble shooting Recovering f rom a Softwa re Failure Recovering fro m a Software Failure Switch software c an be c orru pted du ring an upgr ade, by downlo ading th e wr ong file to the swi tch, and by d eleting the im age f ile.
31-3 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 1 Troubleshooti ng Recoverin g from a Lost or For gotten Passwo rd Step 8 If yo u had set the co nsole po rt sp eed to anything other than 9600, it ha s been reset to th at p articula r speed.
31-4 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 31 Trouble shooting Recoveri ng from a Los t or Forgotten Password Se ver al lines of information about the softw are appear with instruct ions, informing you if the password recovery proc edure has b een di sabled or n ot.
31-5 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 1 Troubleshooti ng Recoverin g from a Lost or For gotten Passwo rd Step 5 Rename the conf ig uration file to conf ig.text.ol d. This file cont ains the passwo rd definition. switch: rename flash: config.
31-6 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 31 Trouble shooting Recoveri ng from a Los t or Forgotten Password Step 14 Reload the switch: Switch# reload Procedure w it.
31-7 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 1 Troubleshooti ng Recovering from a Command Switch Failure Step 5 At the swit ch prom pt, en ter privileged EXE C mode : S.
31-8 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 31 Trouble shooting Recoveri ng from a Com mand Switc h Failure Y ou can prep are f or a comma nd sw itch fai lure by assig.
31-9 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 1 Troubleshooti ng Recovering from a Command Switch Failure Would you like to enter basic management setup? [yes/no]: Step 10 En ter Y at th e f irst p rompt.
31-10 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 31 Trouble shooting Recoveri ng from a Com mand Switc h Failure Step 4 Ente r the pa ssw ord of th e failed command swit ch. Step 5 Use the setup progra m to configur e the switc h IP informa tion.
31-11 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 1 Troubleshooti ng Recoveri ng from Lost Cluste r Member Con nectivi ty Recovering fro m Lost Cluster Member Connecti vity Some conf ig urations can prev ent the com mand switch from maintai ning contact wi th member switches.
31-12 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 31 Trouble shooting Monitorin g SFP Modu le Status Note The security error message r eferences the GBIC_S ECURITY facility . The switch supports SFP modules and doe s not support GBIC modul es.
31-13 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 1 Troubleshooti ng Using Layer 2 Tr aceroute Executing Ping Beginning in privileged EXEC mode , use this co mman d to ping.
31-14 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 31 Trouble shooting Using La yer 2 Tra cerout e Understand ing Layer 2 T raceroute The Lay er 2 tra cerou te feat ure al lows the swit ch to id entif y the physic al pat h that a packet takes fr om a source device to a destin ation device.
31-15 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 1 Troubleshooti ng Using IP Traceroute • When multipl e dev ices are at tached to one port t hrough hubs (f or example , multiple CDP neighbors are de tecte d on a port) , the Layer 2 tra cerou te fea ture i s not support ed.
31-16 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 31 Trouble shooting Using I P Trac eroute T o learn when a datagram reach es its destination, trace route sets the UDP destinati on port number in the datagram to a v ery larg e v alue that the destin ation host is unlikel y to be using.
31-17 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 1 Troubleshooti ng Usin g TDR T o end a trace in progres s, enter the escape seq uence ( Ctrl-^ X by default). Simulta neously pres s and release th e Ctrl , Shif t , and 6 keys and then press t he X key .
31-18 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 31 Trouble shooting Using D ebug Command s Using Debug Commands These sec tions explains how you use debug comma nds t o d.
31-19 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 1 Troubleshooti ng Using the show platf orm forwa rd Command Enabling All-Sy stem Diag nostics Beginn ing in pri vileged E.
31-20 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 31 Trouble shooting Using the s how platfo rm forward Co mmand This is an example of the out put from the s how p l at for m fo rw a rd comm and on port 1 in VLAN 5 whe n the packe t enteri ng tha t port is addr essed to unknown MAC addresses.
31-21 Catalyst 2960 Switch Software Configuration Guide 78-16881-01 Chapter 3 1 Troubleshooti ng Usin g th e cr ashi nfo F ile Packet 1 Lookup Key-Used Index-Hit A-Data OutptACL 50_0D020202_0D010101-00_40000014_000A0000 01FFE 03000000 Port Vlan SrcMac DstMac Cos Dscpv Gi0/2 0005 0001.
31-22 Catalyst 2960 Swi tch Software Configu ration Guide 78-16881-01 Chapter 31 Trouble shooting Using t he c rashinfo File.
A- 1 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 APPEND IX A Supported MIBs This append ix li sts the supp orted manage ment inf orma tion base (MIBs) for this r elea se on the Catalyst 29 60 switch.
A- 2 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendi x A Supported MI Bs MIB Li st • CISC O- P AGP-MI B • CISCO-PING-MIB • CISCO-PR ODUCTS-MIB • CISCO-PR OCESS-MIB • .
A-3 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix A Supported M IBs Using FTP to Access the MIB Files • SNMPv 2-MIB • TCP-M IB • UDP-MIB Note Y ou ca n also use th is URL for a lis t of support ed MIBs for the Catal yst 2960 swit ch: ftp://ftp.
A- 4 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendi x A Supported MI Bs Usin g FTP to Acc es s the MIB Files.
B-1 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 APPEND IX B Working with the Cisco IOS File System, Configuration Files, an d Software Images This a ppendix descri bes how to m ani.
B-2 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Work ing wit h the Flas h File Sys tem.
B-3 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with the Flash File System.
B-4 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Work ing wit h the Flas h File Sys tem.
B-5 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with the Flash File System Some in valid combin ation s of source and de stinatio n exist.
B-6 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Work ing wit h the Flas h File Sys tem.
B-7 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with the Flash File System This e xample shows h ow to display the contents of a switch tar f ile that is in flash memory: Switch# archive tar /table flash:c2960-lanbase-mz.
B-8 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working wit h Configura tion Files Dis.
B-9 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files .
B-10 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working wit h Configura tion Files Cr.
B-11 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files .
B-12 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working wit h Configura tion Files The file is uploade d to the TFT P server .
B-13 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files .
B-14 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working wit h Configura tion Files Th.
B-15 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files .
B-16 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working wit h Configura tion Files • The r emote usern ame asso cia ted wi th the curre nt TTY (te rmina l) pr oces s.
B-17 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Configuration Files .
B-18 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working wit h Configura tion Files Up.
B-19 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Clea.
B-20 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working w ith Softwa re Images • Co.
B-21 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Copying Imag e Files By Us ing TF TP Y ou can do wnload a switc h image from a T FTP serv er or upload the image from the switch to a TFTP server .
B-22 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working w ith Softwa re Images Note Y ou must restart the in etd daemon af ter modifyi ng the /etc/in etd.
B-23 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images The .
B-24 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working w ith Softwa re Images Uploading an Image File By Using TFTP Y ou can upl oad an ima ge from the switch to a TFTP server .
B-25 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Thes.
B-26 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working w ith Softwa re Images Before yo u begin dow nload ing or uplo ading an image file b y using FTP , do these tasks: • Ensur e that the swit ch has a route to th e FTP serve r .
B-27 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images The .
B-28 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working w ith Softwa re Images The alg orithm instal ls the downloaded image onto the syste m board fla sh device (flash: ).
B-29 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images The .
B-30 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working w ith Softwa re Images • The r emote usern ame asso cia ted wi th the curre nt TTY (te rmina l) pr oces s.
B-31 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Downloading an Image File By Using RCP Y ou can d o wnload a ne w imag e f ile and replac e or k eep the curr ent ima ge.
B-32 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working w ith Softwa re Images The do.
B-33 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix B Working with th e Cisco IOS File Sy stem, Conf iguration F iles, and Softw are Images Working with Software Images Begi.
B-34 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix B W orking with the Cisco IOS File System, Co nfiguration Files, and Software Images Working w ith Softwa re Images.
C-1 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 APPEND IX C Recommendations for Upgrading a Catalyst 2950 Switch to a Catalyst 29 60 Switch This app endix describes th e confi gura.
C-2 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix C Recommendatio ns for Upgradi ng a Catalyst 2950 S witch to a Catalyst 2960 Switch Configura tion Compat ibility Issues T .
C-3 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix C Recommendati ons for Upgrad ing a Catalyst 2950 Switch to a Catal yst 2960 Switc h Configuration Compatibility Issues IEEE 802.1x In Ci sco IOS 12.1E A, the Cat alyst 2950 swit ch ranges for t he IEE E 80 2.
C-4 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix C Recommendatio ns for Upgradi ng a Catalyst 2950 S witch to a Catalyst 2960 Switch Configura tion Compat ibility Issues QoS 2 There i s limite d QoS conf igura tion compa tibility between the Cataly st 2950 switch and the Ca talyst 2960 switch.
C-5 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix C Recommendati ons for Upgrad ing a Catalyst 2950 Switch to a Catal yst 2960 Switc h Feature Behavior Incompatibilities Fe.
C-6 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix C Recommendatio ns for Upgradi ng a Catalyst 2950 S witch to a Catalyst 2960 Switch Feature B ehavi or Incom patibil ities .
D- 1 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 APPEND IX D Unsupported Co mmands in Cisco IOS Release 1 2.2(25) FX This app endix lists som e of the command-li ne interfa ce (CLI.
D- 2 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix D Unsuppo rted Co mmands in Cisco IOS Release 12.2( 25)FX IGMP Snooping Commands IGMP Snooping Comman ds Unsupporte d Glob.
D-3 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix D Unsu pported Com mands in Cisco IO S Release 1 2.2(25) FX Miscell aneous Note Use the show ip igmp snoo ping groups privile ged EXE C command to display Laye r 2 multicast addr ess-tab le entrie s for a VLAN.
D- 4 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix D Unsuppo rted Co mmands in Cisco IOS Release 12.2( 25)FX RADIUS Unsupporte d Interface Configuration Commands priority-gr.
D-5 Catalyst 2960 Switch Softwar e Configur ation Guide 78-16881-01 Append ix D Unsu pported Com mands in Cisco IO S Release 1 2.2(25) FX VTP Unsupported v lan-config Command private-vlan Unsupported .
D- 6 Catalyst 2960 Swit ch Software Configu ration Guide 78-16881-01 Appendix D Unsuppo rted Co mmands in Cisco IOS Release 12.2( 25)FX VTP.
IN-1 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 INDEX A abbrev iati ng comm ands 2-4 acces s-class comman d 28-16 acces s control entries See ACEs access-de nied r espons e, VM PS 12-24 access group s, appl ying IPv4 AC Ls to interf aces 28-17 access lists See ACLs access port s, define d 10-2 accoun ting with 80 2.
Index IN-2 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 ACLs ( continue d) standa rd IPv4 crea ting 28-7 matc hing cri teria 28-5 support fo r 1-6 support in h ardware 28-17 time ra.
Inde x IN-3 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 autoc onfigura tion 3-3 automatic QoS See QoS auto -MDIX config uring 10-15 describe d 10-15 autonegotiati on duplex mo de 1.
Index IN-4 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 CA trust point config uring 8-40 defined 8-38 caution , descr ibed xxviii CDP and truste d bounda ry 29-36 config uring 22-2 .
Inde x IN-5 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 comm and-l ine i nte rfac e See CLI comm and m odes 2-1 comm ands abbrev iating 2-4 no and defaul t 2-4 commands, sett ing p.
Index IN-6 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 CoS in Layer 2 frames 29-2 override prior ity 14-6 trust pr iority 14-6 CoS input queue threshold map for QoS 29-14 CoS outp .
Inde x IN-7 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 device disco very prot ocol 22-1 device ma nager benefit s 1-2 describe d 1-2, 1-3 in- band ma nage ment 1-4 requir ements x.
Index IN-8 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 DHCP sno oping b inding datab ase (cont inued) delay va lue 19-11 timeout value 19-11 DHCP sno oping b inding tabl e See DHCP.
Inde x IN-9 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 E editing featu res ena bling and di sabl ing 2-7 keystro kes us ed 2-7 wrapped l ines 2-8 enab le pass word 8-3 enable secr.
Index IN- 10 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 F features, in compatible 21-11 fiber- optic, de tecting u nidirec tional li nks 24-1 files copying B- 4 cras hinfo descrip.
Inde x IN- 11 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 H hello time MSTP 16-19 STP 15-20 help, for the command line 2-3 history chan ging t he b uffer siz e 2-5 describe d 2-5 d.
Index IN- 12 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 IGMP (c onti nued ) queries 20-3 report su ppression describe d 20-5 disabling 20-14 supported ve rsions 20-2 support fo r .
Inde x IN- 13 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 interfac es (continue d) restar ting 10-19 shutting down 10-19 speed a nd du plex , co nfiguri ng 10-13 status 10-18 suppo.
Index IN- 14 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 Link A ggrega tion C ontrol Pro tocol See E ther Chann el link re dundan cy See F lex Links links, unidirec tional 24-1 loc.
Inde x IN- 15 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 maximu m hop count , MSTP 16-21 member ship mod e, VLAN por t 12-3 member swit ch defined 5-2 managing 5-3 recove ring fr .
Index IN- 16 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 MSTP (c ontinued) exten ded sy stem ID effec ts on ro ot swit ch 16-14 effec ts on se conda ry root swit ch 16-15 unexpec t.
Inde x IN- 17 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Network Assistant benefit s 1-2 describe d 1-3 dow nloa ding ima ge f iles 1-2 gui de m ode 1-2 manageme nt options 1-2 re.
Index IN- 18 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 password s (conti nued) recove ry of 31-3 setting enab le 8-3 enab le sec ret 8-3 Telne t 8-6 with user names 8-7 VTP domai.
Inde x IN- 19 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 port-base d auth enticati on ( continue d) ports author izatio n state and dot 1x port -cont rol comm and 9-4 autho rized .
Index IN- 20 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 privileg e levels (continued ) logging i nto 8-10 mapping on me mber switc hes 5-4 overvi ew 8-2, 8-8 setting a command wit.
Inde x IN- 21 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 QoS (conti nued) config uring (cont inued) policy m aps on physica l port s 29-45 port trust states with in the domain 29-.
Index IN- 22 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 QoS (conti nued) queues (cont inued) high pr iority (expedi te) 29-18, 29-68 location of 29-11 SRR, descri bed 29-12 WTD , .
Inde x IN- 23 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Remote Authent ication Dial -In User Service See RADIUS Remote C opy Pro toco l See RCP Remote Networ k Monitoring See RMO.
Index IN- 24 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 RSTP (contin ued) designated switch , define d 16-6 interoper ability with IEEE 802.
Inde x IN- 25 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 Sim ple Netw ork Ma nage ment Protoc ol See SNMP Smartports macros applying Cisco- defaul t macros 11-6 applyi ng glo bal .
Index IN- 26 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 source- IP addre ss based forw arding , Ethe rChanne l 30-7 source- MAC addre ss forw arding, EtherCh annel 30-6 SPAN confi.
Inde x IN- 27 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 statistics (cont inued) RMON group hist ory 25-5 SNMP input an d output 27-16 VTP 13-16 sticky l earning 21-8 storm contr .
Index IN- 28 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 STP (continued) loop gu ard describe d 17-9 enab lin g 17-15 modes sup ported 15-9 multi cast addre sses , effec t of 15-8 .
Inde x IN- 29 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 system messa ge logging (c ontinued ) UNIX sysl og se rver s configur ing the daemon 26-11 configurin g the logging facili.
Index IN- 30 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 tracer oute, Lay er 2 and AR P 31-14 and CD P 31-14 broa dcas t tra ffic 31-14 describe d 31-14 IP addresse s and sub nets .
Inde x IN- 31 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 UDLD ( continue d) echoi ng detect ion mech anism 24-3 enab lin g globall y 24-5 per inter face 24-5 link- detect ion mech.
Index IN- 32 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 vlan d ataba se comm and 12-6 VLAN filter ing and SPAN 23-6 vlan g lobal c onfigur ation comm and 12-6 VLAN ID, disc overin.
Inde x IN- 33 Catalyst 2960 Switch S oftware Configur ation Guide 78-16881-01 voice V LAN (co ntinued) default confi guration 14-3 describe d 14-1 displaying 14-6 IP phone data tra ffic, descri bed 14.
Index IN- 34 Catalyst 2960 Switch Softwa re Co nfiguration Guide 78-16881-01 WTD describe d 29-12 setting thresholds egress queue -sets 29-62 ingress qu eues 29-57 support fo r 1-7, 1-8 X Xmodem prot .
Een belangrijk punt na aankoop van elk apparaat Cisco Systems 2960 (of zelfs voordat je het koopt) is om de handleiding te lezen. Dit moeten wij doen vanwege een paar simpele redenen:
Als u nog geen Cisco Systems 2960 heb gekocht dan nu is een goed moment om kennis te maken met de basisgegevens van het product. Eerst kijk dan naar de eerste pagina\'s van de handleiding, die je hierboven vindt. Je moet daar de belangrijkste technische gegevens Cisco Systems 2960 vinden. Op dit manier kan je controleren of het apparaat aan jouw behoeften voldoet. Op de volgende pagina's van de handleiding Cisco Systems 2960 leer je over alle kenmerken van het product en krijg je informatie over de werking. De informatie die je over Cisco Systems 2960 krijgt, zal je zeker helpen om een besluit over de aankoop te nemen.
In een situatie waarin je al een beziter van Cisco Systems 2960 bent, maar toch heb je de instructies niet gelezen, moet je het doen voor de hierboven beschreven redenen. Je zult dan weten of je goed de alle beschikbare functies heb gebruikt, en of je fouten heb gemaakt die het leven van de Cisco Systems 2960 kunnen verkorten.
Maar de belangrijkste taak van de handleiding is om de gebruiker bij het oplossen van problemen te helpen met Cisco Systems 2960 . Bijna altijd, zal je daar het vinden Troubleshooting met de meest voorkomende storingen en defecten #MANUAl# samen met de instructies over hun opplosinge. Zelfs als je zelf niet kan om het probleem op te lossen, zal de instructie je de weg wijzen naar verdere andere procedure, bijv. door contact met de klantenservice of het dichtstbijzijnde servicecentrum.
