Installation Guide
Page 2
..., TransPath, WebEx, and the WebEx logo are registered trademarks of California. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. The following information... TRADE PRACTICE. Cisco IE 3000 Switch Hardware Installation Guide © 2008 Cisco Systems, Inc. In that is unintentional and coincidental. CCDE, CCENT, Cisco Eos, Cisco Lumin, Cisco StadiumVision, the Cisco logo, DCE,... pursuant to operate the product. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, ...
..., TransPath, WebEx, and the WebEx logo are registered trademarks of California. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. The following information... TRADE PRACTICE. Cisco IE 3000 Switch Hardware Installation Guide © 2008 Cisco Systems, Inc. In that is unintentional and coincidental. CCDE, CCENT, Cisco Eos, Cisco Lumin, Cisco StadiumVision, the Cisco logo, DCE,... pursuant to operate the product. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, ...
Software Configuration Guide
Page 2
Cisco IE 3000 Switch Software Configuration Guide Copyright © 2008-2009 Cisco Systems, Inc. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS... REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR ...
Cisco IE 3000 Switch Software Configuration Guide Copyright © 2008-2009 Cisco Systems, Inc. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS... REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR ...
Software Configuration Guide
Page 80
...flash memory card installed and supports any attempt to be used only to a power cycle or user action. The trap-door mechanism provides enough access to the flash file system before the operating system is...by using the Xmodem Protocol, recover from a Lost or Forgotten Password" section on the switch, see the Cisco IE 3000 Hardware Installation Guide. After the boot loader gives the operating system control of assigning a Telnet password (to ... through the switch setup program, through a DHCP server, or manually. For more information, see the hardware installation guide.
...flash memory card installed and supports any attempt to be used only to a power cycle or user action. The trap-door mechanism provides enough access to the flash file system before the operating system is...by using the Xmodem Protocol, recover from a Lost or Forgotten Password" section on the switch, see the Cisco IE 3000 Hardware Installation Guide. After the boot loader gives the operating system control of assigning a Telnet password (to ... through the switch setup program, through a DHCP server, or manually. For more information, see the hardware installation guide.
Software Configuration Guide
Page 81
Note If you are using DHCP to relay the configuration file location on the network, you are an experienced user familiar with IP address information and a configuration file. No password is defined. Disabled. DHCP is built on...both a DHCP client and a DHCP server. OL-13018-03 Cisco IE 3000 Switch Software Configuration Guide 4-3 These sections contain this configuration information: • Default Switch Information, page 4-3 • Understanding DHCP-Based Autoconfiguration, page 4-3 • Manually Assigning IP Information, page 4-14 Default Switch Information Table 4-1 shows...
Note If you are using DHCP to relay the configuration file location on the network, you are an experienced user familiar with IP address information and a configuration file. No password is defined. Disabled. DHCP is built on...both a DHCP client and a DHCP server. OL-13018-03 Cisco IE 3000 Switch Software Configuration Guide 4-3 These sections contain this configuration information: • Default Switch Information, page 4-3 • Understanding DHCP-Based Autoconfiguration, page 4-3 • Manually Assigning IP Information, page 4-14 Default Switch Information Table 4-1 shows...
Software Configuration Guide
Page 98
... later time (for example, late at night or during the weekend when the switch is used less), or you can specify the reason for manual booting, do not specify the month and day, the reload takes place at the specified time on the current day (if the specified time... than the current time) or on the switch. This restriction prevents the switch from the remote user's control. Note A scheduled reload must take affect in 344 hours and 53 minutes) 4-20 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 To schedule reloads across several switches to occur simultaneously, the...
... later time (for example, late at night or during the weekend when the switch is used less), or you can specify the reason for manual booting, do not specify the month and day, the reload takes place at the specified time on the current day (if the specified time... than the current time) or on the switch. This restriction prevents the switch from the remote user's control. Note A scheduled reload must take affect in 344 hours and 53 minutes) 4-20 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 To schedule reloads across several switches to occur simultaneously, the...
Software Configuration Guide
Page 152
... information flow is one-way only. For configuration information, see the "Configuring Time and Date Manually" section on . NTP runs over IP. no more than the others, even if its time...server receives its time source the device with the lowest stratum number with which runs over User Datagram Protocol (UDP), which it communicates through NTP from an authoritative time source. The ... usually gets its stratum is lower. However, in RFC 1305. you should form associations. Cisco IE 3000 Switch Software Configuration Guide 8-2 OL-13018-03 NTP is not possible to connect to a...
... information flow is one-way only. For configuration information, see the "Configuring Time and Date Manually" section on . NTP runs over IP. no more than the others, even if its time...server receives its time source the device with the lowest stratum number with which runs over User Datagram Protocol (UDP), which it communicates through NTP from an authoritative time source. The ... usually gets its stratum is lower. However, in RFC 1305. you should form associations. Cisco IE 3000 Switch Software Configuration Guide 8-2 OL-13018-03 NTP is not possible to connect to a...
Software Configuration Guide
Page 169
... signifies the beginning and end of your choice, for authorized users only. You cannot use the delimiting character in the address ...Changing the Address Aging Time, page 8-21 • Removing Dynamic Address Entries, page 8-21 OL-13018-03 Cisco IE 3000 Switch Software Configuration Guide 8-19 The address table lists the destination MAC address, the associated VLAN ID, and...the type (static or dynamic). To delete the login banner, use . • Static address: a manually entered unicast address that does not age and that the switch uses to forward traffic between ports. The address...
... signifies the beginning and end of your choice, for authorized users only. You cannot use the delimiting character in the address ...Changing the Address Aging Time, page 8-21 • Removing Dynamic Address Entries, page 8-21 OL-13018-03 Cisco IE 3000 Switch Software Configuration Guide 8-19 The address table lists the destination MAC address, the associated VLAN ID, and...the type (static or dynamic). To delete the login banner, use . • Static address: a manually entered unicast address that does not age and that the switch uses to forward traffic between ports. The address...
Software Configuration Guide
Page 191
...) and the VLAN database file (vlan.dat) are deleted. OL-13018-03 Cisco IE 3000 Switch Software Configuration Guide 11-5 Return to boot up manually by using the Xmodem protocol. Note If you disable password recovery, we recommend that is enabled, the end user can recover from a Lost or Forgotten Password" section on the switch...
...) and the VLAN database file (vlan.dat) are deleted. OL-13018-03 Cisco IE 3000 Switch Software Configuration Guide 11-5 Return to boot up manually by using the Xmodem protocol. Note If you disable password recovery, we recommend that is enabled, the end user can recover from a Lost or Forgotten Password" section on the switch...
Software Configuration Guide
Page 250
...in the secure host table (unless port security static aging has been enabled). 12-20 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 You can then limit the number or group of... to the port security list of 802.1x authentication. When a client is authenticated and manually configured for port security, it . Understanding IEEE 802.1x Port-Based Authentication Chapter 12 ...Voice VLAN-Inaccessible authentication bypass is compatible with voice VLAN, but the RADIUS-configured or user-specified access VLAN and the voice VLAN must be different. • Remote Switched Port...
...in the secure host table (unless port security static aging has been enabled). 12-20 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 You can then limit the number or group of... to the port security list of 802.1x authentication. When a client is authenticated and manually configured for port security, it . Understanding IEEE 802.1x Port-Based Authentication Chapter 12 ...Voice VLAN-Inaccessible authentication bypass is compatible with voice VLAN, but the RADIUS-configured or user-specified access VLAN and the voice VLAN must be different. • Remote Switched Port...
Software Configuration Guide
Page 268
...to 4000: Switch(config-if)# dot1x reauthentication Switch(config-if)# dot1x timeout reauth-period 4000 Manually Re-Authenticating a Client Connected to a Port You can provide a faster response time to the user by entering the dot1x re-authenticate interface interface-id privileged EXEC command. This example shows ...quiet time on page 12-37. This example shows how to 30 seconds: Switch(config-if)# dot1x timeout quiet-period 30 12-38 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 Set the number of time and then tries again. Specify the port to privileged EXEC mode....
...to 4000: Switch(config-if)# dot1x reauthentication Switch(config-if)# dot1x timeout reauth-period 4000 Manually Re-Authenticating a Client Connected to a Port You can provide a faster response time to the user by entering the dot1x re-authenticate interface interface-id privileged EXEC command. This example shows ...quiet time on page 12-37. This example shows how to 30 seconds: Switch(config-if)# dot1x timeout quiet-period 30 12-38 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 Set the number of time and then tries again. Specify the port to privileged EXEC mode....
Software Configuration Guide
Page 512
...continuously send multicast streams in these multicast streams by IGMP snooping. 25-16 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 One can originate from the subscriber ... IGMP Version-2-compatible host with the specified group IP address. • user-Display only the user-configured multicast entries. MVR allows a subscriber on the network-wide multicast ... VLAN Registration (MVR) is connected. Although MVR operates on dynamically learned and manually configured multicast router interfaces. Display information on the underlying mechanism of IGMP snooping,...
...continuously send multicast streams in these multicast streams by IGMP snooping. 25-16 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 One can originate from the subscriber ... IGMP Version-2-compatible host with the specified group IP address. • user-Display only the user-configured multicast entries. MVR allows a subscriber on the network-wide multicast ... VLAN Registration (MVR) is connected. Although MVR operates on dynamically learned and manually configured multicast router interfaces. Display information on the underlying mechanism of IGMP snooping,...
Software Configuration Guide
Page 576
...RSPAN characteristic are propagated by VTP. SPAN and RSPAN Interaction with Other Features SPAN interacts with monitored egress. 30-8 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 If a port is removed from a monitored EtherChannel group, it participates ...an RSPAN VLAN ID in VLAN membership or trunk settings for a source port immediately take effect until you must manually configure all intermediate switches. However, changes in the extended VLAN range (1006 to 4094), you remove the ...network, monitoring the same RSPAN VLAN and presenting traffic to the user.
...RSPAN characteristic are propagated by VTP. SPAN and RSPAN Interaction with Other Features SPAN interacts with monitored egress. 30-8 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 If a port is removed from a monitored EtherChannel group, it participates ...an RSPAN VLAN ID in VLAN membership or trunk settings for a source port immediately take effect until you must manually configure all intermediate switches. However, changes in the extended VLAN range (1006 to 4094), you remove the ...network, monitoring the same RSPAN VLAN and presenting traffic to the user.
Software Configuration Guide
Page 611
...Facility Type Keyword auth cron daemon kern local0-7 lpr mail news sys9-14 syslog user uucp Description Authorization system Cron facility System daemon Kernel Locally defined messages Line printer system... the no logging trap global configuration command. For information about these facilities, consult the operator's manual for facility-type keywords. Be default, syslog servers receive informational messages and lower. See Table... about the fields in the configuration file. OL-13018-03 Cisco IE 3000 Switch Software Configuration Guide 32-13 See Table 32-3 on page 32-13 for your ...
...Facility Type Keyword auth cron daemon kern local0-7 lpr mail news sys9-14 syslog user uucp Description Authorization system Cron facility System daemon Kernel Locally defined messages Line printer system... the no logging trap global configuration command. For information about these facilities, consult the operator's manual for facility-type keywords. Be default, syslog servers receive informational messages and lower. See Table... about the fields in the configuration file. OL-13018-03 Cisco IE 3000 Switch Software Configuration Guide 32-13 See Table 32-3 on page 32-13 for your ...
Software Configuration Guide
Page 735
... transport mapping to simultaneously support IPv4 and IPv6. OL-13018-03 Cisco IE 3000 Switch Software Configuration Guide 37-5 Static Routes for IPv6 Static routes are...the switch applies IPv4 QoS and ACLs in hardware. • IPv6 QoS and ACLs are manually configured and define an explicit route between two networking devices. SNMP and Syslog Over IPv6 To...and syslog over IPv6 provide these transports. These SNMP actions support IPv6 transport management: • Opens User Datagram Protocol (UDP) SNMP socket with default settings • Provides a new transport mechanism called ...
... transport mapping to simultaneously support IPv4 and IPv6. OL-13018-03 Cisco IE 3000 Switch Software Configuration Guide 37-5 Static Routes for IPv6 Static routes are...the switch applies IPv4 QoS and ACLs in hardware. • IPv6 QoS and ACLs are manually configured and define an explicit route between two networking devices. SNMP and Syslog Over IPv6 To...and syslog over IPv6 provide these transports. These SNMP actions support IPv6 transport management: • Opens User Datagram Protocol (UDP) SNMP socket with default settings • Provides a new transport mechanism called ...
Software Configuration Guide
Page 748
... EtherChannels, the first port in the bundle provides its MAC address to manually configure an EtherChannel. The on criteria such as the modes are compatible. In the on mode. 38-6 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 Ports that are not compatible are ...an EtherChannel without negotiations. Understanding EtherChannels Chapter 38 Configuring EtherChannels and Link-State Tracking LACP Modes Table 38-2 shows the user-configurable EtherChannel LACP modes for the active or passive mode. This setting minimizes the transmission of the remaining ports in ...
... EtherChannels, the first port in the bundle provides its MAC address to manually configure an EtherChannel. The on criteria such as the modes are compatible. In the on mode. 38-6 Cisco IE 3000 Switch Software Configuration Guide OL-13018-03 Ports that are not compatible are ...an EtherChannel without negotiations. Understanding EtherChannels Chapter 38 Configuring EtherChannels and Link-State Tracking LACP Modes Table 38-2 shows the user-configurable EtherChannel LACP modes for the active or passive mode. This setting minimizes the transmission of the remaining ports in ...
Software Configuration Guide
Page 851
... 6-1 Network Assistant 1-2 overview 1-4 management VLAN considerations in switch clusters 7-7 discovery through different management VLANs 7-7 manual preemption, REP, configuring 21-12 mapping tables for QoS configuring CoS-to-DSCP 36-51 DSCP 36-50 ...from lost connectivity 39-7 requirements 7-3 See also candidate switch, cluster standby group, and standby command switch messages, to users through banners 8-17 MIBs accessing files with FTP A-3 location of files A-3 overview 33-1 SNMP interaction with 33-4... protection 26-19 PTP 9-4 REP 21-13 Cisco IE 3000 Switch Software Configuration Guide IN-19
... 6-1 Network Assistant 1-2 overview 1-4 management VLAN considerations in switch clusters 7-7 discovery through different management VLANs 7-7 manual preemption, REP, configuring 21-12 mapping tables for QoS configuring CoS-to-DSCP 36-51 DSCP 36-50 ...from lost connectivity 39-7 requirements 7-3 See also candidate switch, cluster standby group, and standby command switch messages, to users through banners 8-17 MIBs accessing files with FTP A-3 location of files A-3 overview 33-1 SNMP interaction with 33-4... protection 26-19 PTP 9-4 REP 21-13 Cisco IE 3000 Switch Software Configuration Guide IN-19
Software Configuration Guide
Page 855
...18 PC (passive command switch) 7-9 performance, network design 1-13 performance features 1-3 persistent self-signed certificate 11-38 per-user ACLs and Filter-Ids 12-8 per-VLAN spanning-tree plus See PVST+ physical ports 13-2 PIM-DVMRP, as snooping ... configuring 802.1x authentication 12-32 guest VLAN 12-42 host mode 12-35 inaccessible authentication bypass 12-45 manual re-authentication of a client 12-38 periodic re-authentication 12-37 quiet period 12-38 RADIUS server 12... 12-27 described 12-1 device roles 12-2 displaying statistics 12-59 Cisco IE 3000 Switch Software Configuration Guide IN-23
...18 PC (passive command switch) 7-9 performance, network design 1-13 performance features 1-3 persistent self-signed certificate 11-38 per-user ACLs and Filter-Ids 12-8 per-VLAN spanning-tree plus See PVST+ physical ports 13-2 PIM-DVMRP, as snooping ... configuring 802.1x authentication 12-32 guest VLAN 12-42 host mode 12-35 inaccessible authentication bypass 12-45 manual re-authentication of a client 12-38 periodic re-authentication 12-37 quiet period 12-38 RADIUS server 12... 12-27 described 12-1 device roles 12-2 displaying statistics 12-59 Cisco IE 3000 Switch Software Configuration Guide IN-23
Software Configuration Guide
Page 865
...10 SSH configuring 11-34 cryptographic software image 11-33 described 1-6, 11-33 encryption methods 11-34 user authentication methods, supported 11-34 SSL configuration guidelines 11-40 configuring a secure HTTP client 11-43 ... and HSRP standby group, cluster See cluster standby group and HSRP standby links 22-2 startup configuration booting manually 4-17 specific image 4-18 clearing B-19 OL-13018-03 Index startup configuration (continued) configuration file automatically...disabling 26-5 displaying 26-19 support for 1-3 thresholds 26-1 Cisco IE 3000 Switch Software Configuration Guide IN-33
...10 SSH configuring 11-34 cryptographic software image 11-33 described 1-6, 11-33 encryption methods 11-34 user authentication methods, supported 11-34 SSL configuration guidelines 11-40 configuring a secure HTTP client 11-43 ... and HSRP standby group, cluster See cluster standby group and HSRP standby links 22-2 startup configuration booting manually 4-17 specific image 4-18 clearing B-19 OL-13018-03 Index startup configuration (continued) configuration file automatically...disabling 26-5 displaying 26-19 support for 1-3 thresholds 26-1 Cisco IE 3000 Switch Software Configuration Guide IN-33
Software Configuration Guide
Page 868
...configuring the daemon 32-12 configuring the logging facility 32-12 facilities supported 32-13 system name default configuration 8-15 default setting 8-15 manual configuration 8-15 See also DNS system name TLV 27-2 system prompt, default setting 8-14, 8-15 system resources, optimizing 10-1 ...16 operation of 11-12 overview 11-10 support for 1-9 tracking services accessed by user 11-17 tar files creating B-6 displaying the contents of B-6 extracting B-7 image file format B-24 IN-36 Cisco IE 3000 Switch Software Configuration Guide TDR 1-11 Telnet accessing management interfaces 2-10 number of ...
...configuring the daemon 32-12 configuring the logging facility 32-12 facilities supported 32-13 system name default configuration 8-15 default setting 8-15 manual configuration 8-15 See also DNS system name TLV 27-2 system prompt, default setting 8-14, 8-15 system resources, optimizing 10-1 ...16 operation of 11-12 overview 11-10 support for 1-9 tracking services accessed by user 11-17 tar files creating B-6 displaying the contents of B-6 extracting B-7 image file format B-24 IN-36 Cisco IE 3000 Switch Software Configuration Guide TDR 1-11 Telnet accessing management interfaces 2-10 number of ...
Message Guide
Page 2
...USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO... Cisco Systems, Inc. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. All rights reserved. Cisco IE 3000 Switch System Message Guide © 2008 Cisco...
...USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO... Cisco Systems, Inc. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. All rights reserved. Cisco IE 3000 Switch System Message Guide © 2008 Cisco...