Software Configuration Guide
Page 1
Catalyst 2950 Desktop Switch Software Configuration Guide Cisco IOS Release 12.1(11)EA1 and 12.1(11)YJ November 2002 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Customer Order Number: DOC-7814982= Text Part Number: 78-14982-01
Catalyst 2950 Desktop Switch Software Configuration Guide Cisco IOS Release 12.1(11)EA1 and 12.1(11)YJ November 2002 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Customer Order Number: DOC-7814982= Text Part Number: 78-14982-01
Software Configuration Guide
Page 2
... Regents of the University of the word partner does not imply a partnership relationship Catalyst 2950 Desktop Switch Software Configuration Guide Copyright © 2001-2002, Cisco Systems, Inc. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT ... BY THIS REFERENCE. and Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, the Cisco IOS logo, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Empowering the Internet Generation, Enterprise/Solver,...
... Regents of the University of the word partner does not imply a partnership relationship Catalyst 2950 Desktop Switch Software Configuration Guide Copyright © 2001-2002, Cisco Systems, Inc. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT ... BY THIS REFERENCE. and Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCNA, CCNP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, the Cisco IOS logo, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Empowering the Internet Generation, Enterprise/Solver,...
Software Configuration Guide
Page 3
... Cisco TAC Escalation Center xxxii Overview 1-1 Features 1-1 Management Options 1-7 Management Interface Options 1-7 Advantages of Using CMS and Clustering Switches 1-7 Network Configuration Examples 1-8 Design Concepts for Using the Switch 1-8 Small to Medium-Sized Network Configuration 1-11 Collapsed Backbone and Switch Cluster Configuration 1-13 Large Campus Configuration 1-14 Hotel Network Configuration 1-16 Multidwelling Network Using Catalyst 2950 Switches...
... Cisco TAC Escalation Center xxxii Overview 1-1 Features 1-1 Management Options 1-7 Management Interface Options 1-7 Advantages of Using CMS and Clustering Switches 1-7 Network Configuration Examples 1-8 Design Concepts for Using the Switch 1-8 Small to Medium-Sized Network Configuration 1-11 Collapsed Backbone and Switch Cluster Configuration 1-13 Large Campus Configuration 1-14 Hotel Network Configuration 1-16 Multidwelling Network Using Catalyst 2950 Switches...
Software Configuration Guide
Page 4
... Options 3-15 Menus and Toolbar 3-15 Menu Bar 3-15 Toolbar 3-20 Front Panel View Popup Menus 3-21 Device Popup Menu 3-21 Port Popup Menu 3-21 Catalyst 2950 Desktop Switch Software Configuration Guide iv 78-14982-01
... Options 3-15 Menus and Toolbar 3-15 Menu Bar 3-15 Toolbar 3-20 Front Panel View Popup Menus 3-21 Device Popup Menu 3-21 Port Popup Menu 3-21 Catalyst 2950 Desktop Switch Software Configuration Guide iv 78-14982-01
Software Configuration Guide
Page 5
... Your Configuration 3-33 CMS Preferences 3-33 Using Different Versions of CMS 3-34 Where to Go Next 3-34 Assigning the Switch IP Address and Default Gateway 4-1 Understanding the Boot Process 4-1 Assigning Switch Information 4-2 Default Switch Information 4-3 Understanding DHCP-Based Autoconfiguration 4-3 DHCP Client Request Process 4-4 Configuring the DHCP Server 4-5 Configuring the TFTP Server 4-5 Configuring the...
... Your Configuration 3-33 CMS Preferences 3-33 Using Different Versions of CMS 3-34 Where to Go Next 3-34 Assigning the Switch IP Address and Default Gateway 4-1 Understanding the Boot Process 4-1 Assigning Switch Information 4-2 Default Switch Information 4-3 Understanding DHCP-Based Autoconfiguration 4-3 DHCP Client Request Process 4-4 Configuring the DHCP Server 4-5 Configuring the TFTP Server 4-5 Configuring the...
Software Configuration Guide
Page 6
... Switch Characteristics 6-3 Candidate Switch and Member Switch Characteristics 6-4 Planning a Switch Cluster 6-5 Automatic Discovery of Cluster Candidates and Members 6-5 Discovery through CDP Hops 6-6 Discovery through Non-CDP-Capable and Noncluster-Capable Devices 6-7 Discovery through the Same Management VLAN 6-8 Discovery through Different Management VLANs 6-9 Discovery of Newly Installed Switches 6-10 HSRP and Standby Command Switches 6-12 Catalyst 2950 Desktop Switch...
... Switch Characteristics 6-3 Candidate Switch and Member Switch Characteristics 6-4 Planning a Switch Cluster 6-5 Automatic Discovery of Cluster Candidates and Members 6-5 Discovery through CDP Hops 6-6 Discovery through Non-CDP-Capable and Noncluster-Capable Devices 6-7 Discovery through the Same Management VLAN 6-8 Discovery through Different Management VLANs 6-9 Discovery of Newly Installed Switches 6-10 HSRP and Standby Command Switches 6-12 Catalyst 2950 Desktop Switch...
Software Configuration Guide
Page 7
... Profiles 6-18 Availability of Switch-Specific Features in Switch Clusters 6-19 Creating a Switch Cluster 6-19 Enabling a Command Switch 6-19 Adding Member Switches 6-20 Creating a Cluster Standby Group 6-22 Verifying a Switch Cluster 6-24 Using the CLI to Manage Switch Clusters 6-25 Catalyst 1900 and Catalyst 2820 CLI Considerations 6-25 Using SNMP to Manage Switch Clusters 6-26 Administering the Switch 7-1 Preventing Unauthorized Access to...
... Profiles 6-18 Availability of Switch-Specific Features in Switch Clusters 6-19 Creating a Switch Cluster 6-19 Enabling a Command Switch 6-19 Adding Member Switches 6-20 Creating a Cluster Standby Group 6-22 Verifying a Switch Cluster 6-24 Using the CLI to Manage Switch Clusters 6-25 Catalyst 1900 and Catalyst 2820 CLI Considerations 6-25 Using SNMP to Manage Switch Clusters 6-26 Administering the Switch 7-1 Preventing Unauthorized Access to...
Software Configuration Guide
Page 8
...Authentication 7-14 Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 7-16 Starting TACACS+ Accounting 7-17 Displaying the TACACS+ Configuration 7-17 Controlling Switch Access with RADIUS 7-18 Understanding RADIUS 7-18 RADIUS Operation 7-19 Configuring RADIUS 7-20 Default RADIUS Configuration 7-20 Identifying the RADIUS Server Host 7-20 ...System Clock 7-44 Displaying the Time and Date Configuration 7-44 Configuring the Time Zone 7-45 Configuring Summer Time (Daylight Saving Time) 7-46 Catalyst 2950 Desktop Switch Software Configuration Guide viii 78-14982-01
...Authentication 7-14 Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 7-16 Starting TACACS+ Accounting 7-17 Displaying the TACACS+ Configuration 7-17 Controlling Switch Access with RADIUS 7-18 Understanding RADIUS 7-18 RADIUS Operation 7-19 Configuring RADIUS 7-20 Default RADIUS Configuration 7-20 Identifying the RADIUS Server Host 7-20 ...System Clock 7-44 Displaying the Time and Date Configuration 7-44 Configuring the Time Zone 7-45 Configuring Summer Time (Daylight Saving Time) 7-46 Catalyst 2950 Desktop Switch Software Configuration Guide viii 78-14982-01
Software Configuration Guide
Page 9
...Static Address Entries 7-58 Adding and Removing Secure Addresses 7-59 Displaying Address Table Entries 7-60 Managing the ARP Table 7-61 Switch Software Releases 7-61 Configuring 802.1X Port-Based Authentication 8-1 Understanding 802.1X Port-Based Authentication 8-1 Device Roles 8-2 Authentication ...1X Authentication 8-5 Default 802.1X Configuration 8-6 802.1X Configuration Guidelines 8-7 Enabling 802.1X Authentication 8-8 Configuring the Switch-to-RADIUS-Server Communication 8-9 Enabling Periodic Re-Authentication 8-10 Manually Re-Authenticating a Client Connected to a Port 8-11 Changing the Quiet...
...Static Address Entries 7-58 Adding and Removing Secure Addresses 7-59 Displaying Address Table Entries 7-60 Managing the ARP Table 7-61 Switch Software Releases 7-61 Configuring 802.1X Port-Based Authentication 8-1 Understanding 802.1X Port-Based Authentication 8-1 Device Roles 8-2 Authentication ...1X Authentication 8-5 Default 802.1X Configuration 8-6 802.1X Configuration Guidelines 8-7 Enabling 802.1X Authentication 8-8 Configuring the Switch-to-RADIUS-Server Communication 8-9 Enabling Periodic Re-Authentication 8-10 Manually Re-Authenticating a Client Connected to a Port 8-11 Changing the Quiet...
Software Configuration Guide
Page 10
...Connecting Interfaces 9-3 Using the Interface Command 9-4 Procedures for Configuring Interfaces 9-4 Configuring a Range of Interfaces 9-6 Configuring and Using Interface-Range Macros 9-8 Configuring Switch Interfaces 9-9 Default Ethernet Interface Configuration 9-10 SFP Configuration 9-10 Configuring Interface Speed and Duplex Mode 9-11 Configuration Guidelines 9-12 Setting the Interface Speed and... 10-2 LRE Sequences 10-4 CPE Ethernet Links 10-5 Configuring LRE Ports 10-5 Environmental Guidelines for LRE Links 10-6 Catalyst 2950 Desktop Switch Software Configuration Guide x 78-14982-01
...Connecting Interfaces 9-3 Using the Interface Command 9-4 Procedures for Configuring Interfaces 9-4 Configuring a Range of Interfaces 9-6 Configuring and Using Interface-Range Macros 9-8 Configuring Switch Interfaces 9-9 Default Ethernet Interface Configuration 9-10 SFP Configuration 9-10 Configuring Interface Speed and Duplex Mode 9-11 Configuration Guidelines 9-12 Setting the Interface Speed and... 10-2 LRE Sequences 10-4 CPE Ethernet Links 10-5 Configuring LRE Ports 10-5 Environmental Guidelines for LRE Links 10-6 Catalyst 2950 Desktop Switch Software Configuration Guide x 78-14982-01
Software Configuration Guide
Page 11
Contents 11 C H A P T E R 78-14982-01 Guidelines for Using LRE Profiles 10-7 CPE Ethernet Link Guidelines 10-7 Considerations for Connected Cisco 575 LRE CPEs 10-7 Considerations for Connected Cisco 585 LRE CPEs 10-8 Assigning a Global Profile to All LRE Ports 10-8 Assigning a Profile to a Specific LRE Port 10-9 Assigning a Global Sequence to All LRE... 11-7 Listening State 11-7 Learning State 11-7 Forwarding State 11-7 Disabled State 11-8 Spanning-Tree Address Management 11-8 STP and IEEE 802.1Q Trunks 11-8 Catalyst 2950 Desktop Switch Software Configuration Guide xi
Contents 11 C H A P T E R 78-14982-01 Guidelines for Using LRE Profiles 10-7 CPE Ethernet Link Guidelines 10-7 Considerations for Connected Cisco 575 LRE CPEs 10-7 Considerations for Connected Cisco 585 LRE CPEs 10-8 Assigning a Global Profile to All LRE Ports 10-8 Assigning a Profile to a Specific LRE Port 10-9 Assigning a Global Sequence to All LRE... 11-7 Listening State 11-7 Learning State 11-7 Forwarding State 11-7 Disabled State 11-8 Spanning-Tree Address Management 11-8 STP and IEEE 802.1Q Trunks 11-8 Catalyst 2950 Desktop Switch Software Configuration Guide xi
Software Configuration Guide
Page 12
... Configuration 11-10 STP Configuration Guidelines 11-10 Disabling STP 11-12 Configuring the Root Switch 11-12 Configuring a Secondary Root Switch 11-14 Configuring the Port Priority 11-15 Configuring the Path Cost 11-16 Configuring the Switch Priority of a VLAN 11-18 Configuring the Hello Time 11-19 Configuring the Forwarding... and MSTP Configuration 12-12 RSTP and MSTP Configuration Guidelines 12-12 Specifying the MST Region Configuration and Enabling MSTP 12-13 Configuring the Root Switch 12-14 Catalyst 2950 Desktop Switch Software Configuration Guide xii 78-14982-01
... Configuration 11-10 STP Configuration Guidelines 11-10 Disabling STP 11-12 Configuring the Root Switch 11-12 Configuring a Secondary Root Switch 11-14 Configuring the Port Priority 11-15 Configuring the Path Cost 11-16 Configuring the Switch Priority of a VLAN 11-18 Configuring the Hello Time 11-19 Configuring the Forwarding... and MSTP Configuration 12-12 RSTP and MSTP Configuration Guidelines 12-12 Specifying the MST Region Configuration and Enabling MSTP 12-13 Configuring the Root Switch 12-14 Catalyst 2950 Desktop Switch Software Configuration Guide xii 78-14982-01
Software Configuration Guide
Page 13
...-16 Configuring the Port Priority 12-17 Configuring the Path Cost 12-18 Configuring the Switch Priority 12-19 Configuring the Hello Time 12-19 Configuring the Forwarding-Delay Time 12-20 Configuring the Maximum-Aging Time 12-21 Configuring the ... Enabling BackboneFast 13-19 Enabling Root Guard 13-19 Enabling Loop Guard 13-20 Displaying the Spanning-Tree Status 13-21 Contents 78-14982-01 Catalyst 2950 Desktop Switch Software Configuration Guide xiii
...-16 Configuring the Port Priority 12-17 Configuring the Path Cost 12-18 Configuring the Switch Priority 12-19 Configuring the Hello Time 12-19 Configuring the Forwarding-Delay Time 12-20 Configuring the Maximum-Aging Time 12-21 Configuring the ... Enabling BackboneFast 13-19 Enabling Root Guard 13-19 Enabling Loop Guard 13-20 Displaying the Spanning-Tree Status 13-21 Contents 78-14982-01 Catalyst 2950 Desktop Switch Software Configuration Guide xiii
Software Configuration Guide
Page 14
... Load Sharing Using STP 14-21 Load Sharing Using STP Port Priorities 14-21 Load Sharing Using STP Path Cost 14-23 Configuring VMPS 14-24 Understanding VMPS 14-25 Dynamic Port VLAN Membership 14-25 VMPS Database Configuration File 14-26 Default VMPS Configuration 14-27 VMPS Configuration Guidelines 14...
... Load Sharing Using STP 14-21 Load Sharing Using STP Port Priorities 14-21 Load Sharing Using STP Path Cost 14-23 Configuring VMPS 14-24 Understanding VMPS 14-25 Dynamic Port VLAN Membership 14-25 VMPS Database Configuration File 14-26 Default VMPS Configuration 14-27 VMPS Configuration Guidelines 14...
Software Configuration Guide
Page 15
...-9 Configuring a VTP Client 15-11 Disabling VTP (VTP Transparent Mode) 15-12 Enabling VTP Version 2 15-13 Enabling VTP Pruning 15-14 Adding a VTP Client Switch to a VTP Domain 15-15 Monitoring VTP 15-16 Configuring Voice VLAN 16-1 Understanding Voice VLAN 16-1 Configuring Voice VLAN 16...
...-9 Configuring a VTP Client 15-11 Disabling VTP (VTP Transparent Mode) 15-12 Enabling VTP Version 2 15-13 Enabling VTP Pruning 15-14 Adding a VTP Client Switch to a VTP Domain 15-15 Monitoring VTP 15-16 Configuring Voice VLAN 16-1 Understanding Voice VLAN 16-1 Configuring Voice VLAN 16...
Software Configuration Guide
Page 16
Contents 17 C H A P T E R Default Voice VLAN Configuration 16-2 Voice VLAN Configuration Guidelines 16-3 Configuring a Port to Connect to a Cisco 7960 IP Phone 16-3 Configuring Ports to Carry Voice Traffic in 802.1Q Frames 16-4 Configuring Ports to Carry Voice Traffic in 802.1P Priority ...-21 Configuring IGMP Profiles 17-21 Applying IGMP Profiles 17-22 Setting the Maximum Number of IGMP Groups 17-23 Displaying IGMP Filtering Configuration 17-24 Catalyst 2950 Desktop Switch Software Configuration Guide xvi 78-14982-01
Contents 17 C H A P T E R Default Voice VLAN Configuration 16-2 Voice VLAN Configuration Guidelines 16-3 Configuring a Port to Connect to a Cisco 7960 IP Phone 16-3 Configuring Ports to Carry Voice Traffic in 802.1Q Frames 16-4 Configuring Ports to Carry Voice Traffic in 802.1P Priority ...-21 Configuring IGMP Profiles 17-21 Applying IGMP Profiles 17-22 Setting the Maximum Number of IGMP Groups 17-23 Displaying IGMP Filtering Configuration 17-24 Catalyst 2950 Desktop Switch Software Configuration Guide xvi 78-14982-01
Software Configuration Guide
Page 17
... an Interface 20-4 Monitoring and Maintaining CDP 20-5 Configuring SPAN and RSPAN 21-1 Understanding SPAN and RSPAN 21-1 SPAN and RSPAN Concepts and Terminology 21-3 Catalyst 2950 Desktop Switch Software Configuration Guide xvii
... an Interface 20-4 Monitoring and Maintaining CDP 20-5 Configuring SPAN and RSPAN 21-1 Understanding SPAN and RSPAN 21-1 SPAN and RSPAN Concepts and Terminology 21-3 Catalyst 2950 Desktop Switch Software Configuration Guide xvii
Software Configuration Guide
Page 18
... Logging 23-1 Configuring System Message Logging 23-2 System Log Message Format 23-2 Default System Message Logging Configuration 23-3 Disabling and Enabling Message Logging 23-4 xviii Catalyst 2950 Desktop Switch Software Configuration Guide 78-14982-01
... Logging 23-1 Configuring System Message Logging 23-2 System Log Message Format 23-2 Default System Message Logging Configuration 23-3 Disabling and Enabling Message Logging 23-4 xviii Catalyst 2950 Desktop Switch Software Configuration Guide 78-14982-01
Software Configuration Guide
Page 19
... Examples 24-14 Displaying SNMP Status 24-15 Configuring Network Security with ACLs 25-1 Understanding ACLs 25-2 Handling Fragmented and Unfragmented Traffic 25-3 Understanding Access Control Parameters 25-4 Guidelines for Applying ACLs to Physical Interfaces 25-6 Configuring ACLs 25-6 Unsupported Features 25-7 Creating Standard and Extended IP ACLs 25-7 Catalyst 2950 Desktop Switch Software...
... Examples 24-14 Displaying SNMP Status 24-15 Configuring Network Security with ACLs 25-1 Understanding ACLs 25-2 Handling Fragmented and Unfragmented Traffic 25-3 Understanding Access Control Parameters 25-4 Guidelines for Applying ACLs to Physical Interfaces 25-6 Configuring ACLs 25-6 Unsupported Features 25-7 Creating Standard and Extended IP ACLs 25-7 Catalyst 2950 Desktop Switch Software...
Software Configuration Guide
Page 20
... Trust States 26-10 Configuring the Trust State on Ports within the QoS Domain 26-11 Configuring the CoS Value for an Interface 26-13 Catalyst 2950 Desktop Switch Software Configuration Guide xx 78-14982-01
... Trust States 26-10 Configuring the Trust State on Ports within the QoS Domain 26-11 Configuring the CoS Value for an Interface 26-13 Catalyst 2950 Desktop Switch Software Configuration Guide xx 78-14982-01