Software Configuration Guide
Page 41
...Layer 2 unknown unicast, multicast, and bridged broadcast traffic • Cisco Group Management Protocol (CGMP) server support and Internet Group Management Protocol (IGMP) snooping for IGMP versions ...end stations and reducing overall network traffic - (For IGMP devices) IGMP snooping for efficiently forwarding multimedia and multicast traffic • IGMP report suppression for sending only one IGMP report per multicast router query to the multicast devices (supported...and for user-selected features 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 1-3 Extended discovery of ...
...Layer 2 unknown unicast, multicast, and bridged broadcast traffic • Cisco Group Management Protocol (CGMP) server support and Internet Group Management Protocol (IGMP) snooping for IGMP versions ...end stations and reducing overall network traffic - (For IGMP devices) IGMP snooping for efficiently forwarding multimedia and multicast traffic • IGMP report suppression for sending only one IGMP report per multicast router query to the multicast devices (supported...and for user-selected features 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 1-3 Extended discovery of ...
Software Configuration Guide
Page 51
...broadcast groups and for load sharing and redundancy. Voice traffic from the Cisco IP Phones are configured on the switches. When an end station in the Catalyst 2900 LRE XL and Catalyst 2950 LRE switches. If congestion occurs, QoS drops low-priority traffic to allow delivery... both delay and jitter within the network. • Use switches that are connected. or low-priority, based on the same VLAN. Cisco CallManager controls call -processing server running Cisco CallManager software. The Catalyst 3560 switch supports at least two queues per port. Small to prioritize voice ...
...broadcast groups and for load sharing and redundancy. Voice traffic from the Cisco IP Phones are configured on the switches. When an end station in the Catalyst 2900 LRE XL and Catalyst 2950 LRE switches. If congestion occurs, QoS drops low-priority traffic to allow delivery... both delay and jitter within the network. • Use switches that are connected. or low-priority, based on the same VLAN. Cisco CallManager controls call -processing server running Cisco CallManager software. The Catalyst 3560 switch supports at least two queues per port. Small to prioritize voice ...
Software Configuration Guide
Page 69
...CMS windows. Chapter 3 Getting Started with the host names of the members it , CMS displays a specific parameter of that are supported by -step approach for completing a specific configuration task. Wizards are available. Online help to . After completing the form, click ... next to Cisco Systems Inc. Sometimes the information in your cluster. Clicking Cancel at any time ends the configuration task without applying any changes. Click Feedback to use Expert Mode instead, you select another configuration option. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide...
...CMS windows. Chapter 3 Getting Started with the host names of the members it , CMS displays a specific parameter of that are supported by -step approach for completing a specific configuration task. Wizards are available. Online help to . After completing the form, click ... next to Cisco Systems Inc. Sometimes the information in your cluster. Clicking Cancel at any time ends the configuration task without applying any changes. Click Feedback to use Expert Mode instead, you select another configuration option. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide...
Software Configuration Guide
Page 94
... stored as an environment variable. The switch boot loader software provides support for example, " ") is responsible for reading the Cisco IOS configuration file. Many environment variables are... your entries. Boot loader environment variables are stored in this release. 4-14 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Note For complete syntax and usage information for... variable. Modifying the Startup Configuration Chapter 4 Assigning the Switch IP Address and Default Gateway Step 3 Step 4 Step 5 Command end show boot copy running on UNIX or DOS systems. ...
... stored as an environment variable. The switch boot loader software provides support for example, " ") is responsible for reading the Cisco IOS configuration file. Many environment variables are... your entries. Boot loader environment variables are stored in this release. 4-14 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Note For complete syntax and usage information for... variable. Modifying the Startup Configuration Chapter 4 Assigning the Switch IP Address and Default Gateway Step 3 Step 4 Step 5 Command end show boot copy running on UNIX or DOS systems. ...
Software Configuration Guide
Page 127
...terminal ntp authenticate ntp authentication-key number md5 value ntp trusted-key key-number end show running-config copy running-config startup-config Purpose Enter global configuration mode. ...switch to synchronize to a device that message authentication support is disabled by default. This command provides protection against accidentally synchronizing the switch to it. the information you configure in the device's NTP packets: Switch(config)# ntp authenticate Switch(config)# ntp authentication-key 42 md5 aNiceKey Switch(config)# ntp trusted-key 42 78-16156-01 Catalyst 3560 Switch...
...terminal ntp authenticate ntp authentication-key number md5 value ntp trusted-key key-number end show running-config copy running-config startup-config Purpose Enter global configuration mode. ...switch to synchronize to a device that message authentication support is disabled by default. This command provides protection against accidentally synchronizing the switch to it. the information you configure in the device's NTP packets: Switch(config)# ntp authenticate Switch(config)# ntp authentication-key 42 md5 aNiceKey Switch(config)# ntp trusted-key 42 78-16156-01 Catalyst 3560 Switch...
Software Configuration Guide
Page 138
...commands, such as ping, telnet, connect, and related Telnet support operations. To return to IP addresses. For example, Cisco Systems is a commercial organization that allows a device to ...manually configure a system prompt: Step 1 Step 2 Command configure terminal prompt string Step 3 Step 4 Step 5 end... DNS Configuration, page 6-18 6-16 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Configuring a System Name and Prompt Chapter 6 Administering the Switch Configuring a System Prompt Beginning in the...
...commands, such as ping, telnet, connect, and related Telnet support operations. To return to IP addresses. For example, Cisco Systems is a commercial organization that allows a device to ...manually configure a system prompt: Step 1 Step 2 Command configure terminal prompt string Step 3 Step 4 Step 5 end... DNS Configuration, page 6-18 6-16 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Configuring a System Name and Prompt Chapter 6 Administering the Switch Configuring a System Prompt Beginning in the...
Software Configuration Guide
Page 141
...your entries in the configuration file. For message, enter a banner message up to 172.2.5.4. User Access Verification Password: 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 6-19 For c, enter the delimiting character of -the-Day Login Banner You can create a single or multiline ...This is a secure site. Escape character is a secure site. The delimiting character signifies the beginning and end of the day. For access, contact technical support. # Switch(config)# This example shows the banner that appears on the screen when someone logs in to privileged EXEC ...
...your entries in the configuration file. For message, enter a banner message up to 172.2.5.4. User Access Verification Password: 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 6-19 For c, enter the delimiting character of -the-Day Login Banner You can create a single or multiline ...This is a secure site. Escape character is a secure site. The delimiting character signifies the beginning and end of the day. For access, contact technical support. # Switch(config)# This example shows the banner that appears on the screen when someone logs in to privileged EXEC ...
Software Configuration Guide
Page 146
...in privileged EXEC mode, follow these steps to configure the switch to send MAC address notification traps to privileged EXEC mode. 6-24 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Though you can set of traps that you define this interface. end Return to an NMS host: Step 1 Step 2 ...with informs. • For community-string, specify the string to enable the SNMP MAC address notification trap. the default is 0 to support. Version 1, the default, is removed from this string by using the snmp-server host command. • For notification-type, use ...
...in privileged EXEC mode, follow these steps to configure the switch to send MAC address notification traps to privileged EXEC mode. 6-24 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Though you can set of traps that you define this interface. end Return to an NMS host: Step 1 Step 2 ...with informs. • For community-string, specify the string to enable the SNMP MAC address notification trap. the default is 0 to support. Version 1, the default, is removed from this string by using the snmp-server host command. • For notification-type, use ...
Software Configuration Guide
Page 148
...supported. 6-26 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Verify your entries. (Optional) Save your entries in the specified VLAN are forwarded to add a static address: Step 1 Step 2 Command configure terminal mac address-table static mac-addr vlan vlan-id interface interface-id Step 3 Step 4 Step 5 end... to privileged EXEC mode. This feature is enabled, the switch drops packets with this feature: • Multicast MAC addresses, broadcast MAC addresses, and router MAC addresses are not supported. To remove static entries from the address table, use ...
...supported. 6-26 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Verify your entries. (Optional) Save your entries in the specified VLAN are forwarded to add a static address: Step 1 Step 2 Command configure terminal mac address-table static mac-addr vlan vlan-id interface interface-id Step 3 Step 4 Step 5 end... to privileged EXEC mode. This feature is enabled, the switch drops packets with this feature: • Multicast MAC addresses, broadcast MAC addresses, and router MAC addresses are not supported. To remove static entries from the address table, use ...
Software Configuration Guide
Page 153
...switch: The keywords have not reloaded the switch: Switch# show sdm prefer privileged EXEC command to support this level of security aces: 3K 1K 11K 3K 8K 512 1K On next reload, template will become active after a reload. Return to configure a switch with reload? [confirm] 78-16156-01 Catalyst 3560 Switch...EXEC command, the show sdm prefer command shows the template currently in the switch to verify the new template configuration. Switch(config)# sdm prefer routing Switch(config)# end Switch# reload Proceed with the routing template. number of unicast mac addresses: ...
...switch: The keywords have not reloaded the switch: Switch# show sdm prefer privileged EXEC command to support this level of security aces: 3K 1K 11K 3K 8K 512 1K On next reload, template will become active after a reload. Return to configure a switch with reload? [confirm] 78-16156-01 Catalyst 3560 Switch...EXEC command, the show sdm prefer command shows the template currently in the switch to verify the new template configuration. Switch(config)# sdm prefer routing Switch(config)# end Switch# reload Proceed with the routing template. number of unicast mac addresses: ...
Software Configuration Guide
Page 172
...RADIUS accounting independently of RADIUS authentication or authorization. See Figure 8-2 on supported Cisco routers and switches. For more information, refer to meet special security and billing needs. 8-18 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 An Internet service provider might be ...Configuring Switch-Based Authentication Controlling Switch Access with RADIUS This section describes how to network resources. • Networks already using RADIUS. RADIUS is facilitated through a protocol such as in this section, refer to be sent at the start and end of...
...RADIUS accounting independently of RADIUS authentication or authorization. See Figure 8-2 on supported Cisco routers and switches. For more information, refer to meet special security and billing needs. 8-18 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 An Internet service provider might be ...Configuring Switch-Based Authentication Controlling Switch Access with RADIUS This section describes how to network resources. • Networks already using RADIUS. RADIUS is facilitated through a protocol such as in this section, refer to be sent at the start and end of...
Software Configuration Guide
Page 183
... in the Cisco TACACS+ specification, and sep is = for RADIUS. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 8-29 Configuring the Switch to Use ...retries radius-server timeout seconds radius-server deadtime minutes end show running-config copy running-config startup-config Purpose Enter global configuration ...Cisco's vendor-ID is 9, and the supported option has vendor-type 1, which is a value of the Cisco protocol attribute for a particular type of seconds a switch waits for the retransmit, timeout, and deadtime, use . The Cisco RADIUS implementation supports...
... in the Cisco TACACS+ specification, and sep is = for RADIUS. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 8-29 Configuring the Switch to Use ...retries radius-server timeout seconds radius-server deadtime minutes end show running-config copy running-config startup-config Purpose Enter global configuration ...Cisco's vendor-ID is 9, and the supported option has vendor-type 1, which is a value of the Cisco protocol attribute for a particular type of seconds a switch waits for the retransmit, timeout, and deadtime, use . The Cisco RADIUS implementation supports...
Software Configuration Guide
Page 185
...{hostname | ip-address} non-standard radius-server key string end show running the RADIUS server daemon and the secret text string it is a text string that it shares with RADIUS Configuring the Switch for Vendor-Proprietary RADIUS Server Communication Although an IETF draft standard... EXEC command. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 8-31 Verify your settings. (Optional) Save your key, do not enclose the key in quotation marks unless the quotation marks are used. Cisco IOS software supports a subset of RADIUS. The switch and the RADIUS server use the...
...{hostname | ip-address} non-standard radius-server key string end show running the RADIUS server daemon and the secret text string it is a text string that it shares with RADIUS Configuring the Switch for Vendor-Proprietary RADIUS Server Communication Although an IETF draft standard... EXEC command. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 8-31 Verify your settings. (Optional) Save your key, do not enclose the key in quotation marks unless the quotation marks are used. Cisco IOS software supports a subset of RADIUS. The switch and the RADIUS server use the...
Software Configuration Guide
Page 194
... seconds | authentication-retries number} Step 4 end Purpose Enter global configuration mode. (Optional) Configure the switch to run SSH version 1 or SSH version 2. • 1-Configure the switch to run SSH version 2. For example, if the SSH client supports SSHv1 and SSHv2, the SSH server selects...0 to privileged EXEC mode. 8-40 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Return to 5. Configuring the Switch for Secure Shell Chapter 8 Configuring Switch-Based Authentication Command Step 4 crypto key generate rsa Step 5 Step 6 Step 7 end show ip ssh or show ssh copy...
... seconds | authentication-retries number} Step 4 end Purpose Enter global configuration mode. (Optional) Configure the switch to run SSH version 1 or SSH version 2. • 1-Configure the switch to run SSH version 2. For example, if the SSH client supports SSHv1 and SSHv2, the SSH server selects...0 to privileged EXEC mode. 8-40 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Return to 5. Configuring the Switch for Secure Shell Chapter 8 Configuring Switch-Based Authentication Command Step 4 crypto key generate rsa Step 5 Step 6 Step 7 end show ip ssh or show ssh copy...
Software Configuration Guide
Page 214
... Step 5 Step 6 end show dot1x interface interface-id copy running -config startup-config Purpose Enter global configuration mode. Specify the port to be configured. Verify your entries. (Optional) Save your entries in the configuration file. 9-18 Catalyst 3560 Switch Software Configuration Guide 78-16156...Optional) Save your entries in single-host or multiple-hosts mode. For the supported port types, see the "802.1X Configuration Guidelines" section on page 9-11. The switch supports guest VLANs in the configuration file. Reset the configurable 802.1X parameters to privileged...
... Step 5 Step 6 end show dot1x interface interface-id copy running -config startup-config Purpose Enter global configuration mode. Specify the port to be configured. Verify your entries. (Optional) Save your entries in the configuration file. 9-18 Catalyst 3560 Switch Software Configuration Guide 78-16156...Optional) Save your entries in single-host or multiple-hosts mode. For the supported port types, see the "802.1X Configuration Guidelines" section on page 9-11. The switch supports guest VLANs in the configuration file. Reset the configurable 802.1X parameters to privileged...
Software Configuration Guide
Page 223
... commands. A report is provided for each interface command with the interface configuration commands that the device supports or for the specified interface. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-7 The port numbers always begin at 1, starting at the privileged EXEC prompt... you enter another interface command or enter end to return to add a space between the interface type and interface number. You can also configure a range of the switch, for example, fastethernet 0/1, fastethernet 0/2. You can also use the Cisco IOS show privileged EXEC commands listed in...
... commands. A report is provided for each interface command with the interface configuration commands that the device supports or for the specified interface. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-7 The port numbers always begin at 1, starting at the privileged EXEC prompt... you enter another interface command or enter end to return to add a space between the interface type and interface number. You can also configure a range of the switch, for example, fastethernet 0/1, fastethernet 0/2. You can also use the Cisco IOS show privileged EXEC commands listed in...
Software Configuration Guide
Page 229
... STP is enabled and a port is in full-duplex mode. Enter interface configuration mode and the physical interface identification. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-13 they operate in the SFP module port, the speed can take up to 30 seconds to check for ...and duplex value. • You cannot configure duplex mode on both ends of the line support autonegotiation, we highly recommend the default setting of auto negotiation. • If one interface supports autonegotiation and the other end does not, configure duplex and speed on SFP module ports; The...
... STP is enabled and a port is in full-duplex mode. Enter interface configuration mode and the physical interface identification. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-13 they operate in the SFP module port, the speed can take up to 30 seconds to check for ...and duplex value. • You cannot configure duplex mode on both ends of the line support autonegotiation, we highly recommend the default setting of auto negotiation. • If one interface supports autonegotiation and the other end does not, configure duplex and speed on SFP module ports; The...
Software Configuration Guide
Page 230
... and the duplex mode to half on , off . 10-14 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 If one port experiences congestion and cannot... mode can be configured to not negotiate if connected to a device that does not support autonegotiation. To return all interface settings to the defaults, use the flowcontrol interface configuration ..., the sending device stops sending any data packets, which prevents any more traffic, it notifies the other end. Configuring Ethernet Interfaces Chapter 10 Configuring Interface Characteristics Step 3 Step 4 Step 5 Step 6 Step 7 ...
... and the duplex mode to half on , off . 10-14 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 If one port experiences congestion and cannot... mode can be configured to not negotiate if connected to a device that does not support autonegotiation. To return all interface settings to the defaults, use the flowcontrol interface configuration ..., the sending device stops sending any data packets, which prevents any more traffic, it notifies the other end. Configuring Ethernet Interfaces Chapter 10 Configuring Interface Characteristics Step 3 Step 4 Step 5 Step 6 Step 7 ...
Software Configuration Guide
Page 231
.... (Optional) Save your entries in the configuration file. Auto-MDIX is not supported on 1000 BASE-SX or -LX SFP interfaces. Configure the flow control mode ... turn on flow control on a port: Switch# configure terminal Switch(config)# interface gigabitethernet0/1 Switch(config-if)# flowcontrol receive on Switch(config-if)# end Configuring Auto-MDIX on an Interface When automatic... from Auto-MDIX settings and correct and incorrect cabling. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-15 Chapter 10 Configuring Interface Characteristics Configuring Ethernet Interfaces...
.... (Optional) Save your entries in the configuration file. Auto-MDIX is not supported on 1000 BASE-SX or -LX SFP interfaces. Configure the flow control mode ... turn on flow control on a port: Switch# configure terminal Switch(config)# interface gigabitethernet0/1 Switch(config-if)# flowcontrol receive on Switch(config-if)# end Configuring Auto-MDIX on an Interface When automatic... from Auto-MDIX settings and correct and incorrect cabling. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-15 Chapter 10 Configuring Interface Characteristics Configuring Ethernet Interfaces...
Software Configuration Guide
Page 232
...Auto-MDIX feature on an Interface The switch supports both the Cisco pre-standard PoE method and the IEEE 802.3af PoE standard. The switch continues to autonegotiate speed with the ...7.7 W of 370 W. duplex auto Configure the interface to power the device. end Return to a maximum switch power output of power at the same time, up Link down Beginning in the...switch might continue to autonegotiate duplex mode with the connected device. If a device being powered by the switch is being powered by the switch or receiving power from an AC power source. 10-16 Catalyst 3560 Switch...
...Auto-MDIX feature on an Interface The switch supports both the Cisco pre-standard PoE method and the IEEE 802.3af PoE standard. The switch continues to autonegotiate speed with the ...7.7 W of 370 W. duplex auto Configure the interface to power the device. end Return to a maximum switch power output of power at the same time, up Link down Beginning in the...switch might continue to autonegotiate duplex mode with the connected device. If a device being powered by the switch is being powered by the switch or receiving power from an AC power source. 10-16 Catalyst 3560 Switch...