Software Guide
Page 11
... Allowed VLANs on a Trunk 8-29 Changing the Pruning-Eligible List 8-30 Configuring the Native VLAN for Untagged Traffic 8-30 Configuring 802.1p Class of Service 8-31 How Class of Service Works 8-31 Port Priority 8-31 Port Scheduling 8-31 Configuring the CoS Port Priorities 8-32 Load Sharing Using STP 8-32 Load Sharing Using STP Port Priorities 8-32 Configuring STP Port Priorities and Load Sharing 8-33 Load Sharing Using STP Path Cost 8-34 Contents Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide...
... Allowed VLANs on a Trunk 8-29 Changing the Pruning-Eligible List 8-30 Configuring the Native VLAN for Untagged Traffic 8-30 Configuring 802.1p Class of Service 8-31 How Class of Service Works 8-31 Port Priority 8-31 Port Scheduling 8-31 Configuring the CoS Port Priorities 8-32 Load Sharing Using STP 8-32 Load Sharing Using STP Port Priorities 8-32 Configuring STP Port Priorities and Load Sharing 8-33 Load Sharing Using STP Path Cost 8-34 Contents Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide...
Software Guide
Page 16
... using the Cisco IOS CLI. Note This reference manual provides commands and command descriptions that have been created or changed for using the CMS windows. It does not repeat the commands and command descriptions already documented in the Catalyst 2900 Series XL and Catalyst 3500 Series XL Command Reference. Organization The organization of this guide is most easily performed through CMS, this release and provides examples of the CMS web-based, switch management interface. Chapter 4, "General Switch Administration," includes the switch-configuration default settings...
... using the Cisco IOS CLI. Note This reference manual provides commands and command descriptions that have been created or changed for using the CMS windows. It does not repeat the commands and command descriptions already documented in the Catalyst 2900 Series XL and Catalyst 3500 Series XL Command Reference. Organization The organization of this guide is most easily performed through CMS, this release and provides examples of the CMS web-based, switch management interface. Chapter 4, "General Switch Administration," includes the switch-configuration default settings...
Software Guide
Page 25
... Ethernet ports for redundant backbone connections and loop-free networks. Port Fast mode for eliminating forward delay by enabling a port to immediately change and for achieving load balancing between the switch and other Cisco devices on page 8-2). 78-6511-08 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 1-3 This feature is available in Flash memory to ensure that the switch can forward traffic with IP address information and a configuration file that it receives during startup with minimal user...
... Ethernet ports for redundant backbone connections and loop-free networks. Port Fast mode for eliminating forward delay by enabling a port to immediately change and for achieving load balancing between the switch and other Cisco devices on page 8-2). 78-6511-08 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 1-3 This feature is available in Flash memory to ensure that the switch can forward traffic with IP address information and a configuration file that it receives during startup with minimal user...
Software Guide
Page 26
... and time-sensitive traffic from data, voice, and telephony applications • Voice VLAN (VVID) for creating subnets for voice traffic from Cisco IP Phones Security • Password-protected access (read-only and read-write access) to management interfaces (CMS and CLI) for protection against unauthorized configuration changes • Multilevel security for a choice of security level, notification, and resulting actions • Static MAC addressing for ensuring security • MAC-based port security for restricting the use of a switch port to a specific group of source addresses...
... and time-sensitive traffic from data, voice, and telephony applications • Voice VLAN (VVID) for creating subnets for voice traffic from Cisco IP Phones Security • Password-protected access (read-only and read-write access) to management interfaces (CMS and CLI) for protection against unauthorized configuration changes • Multilevel security for a choice of security level, notification, and resulting actions • Static MAC addressing for ensuring security • MAC-based port security for restricting the use of a switch port to a specific group of source addresses...
Software Guide
Page 29
... easiest interface to use and makes switch and switch cluster management accessible to 16 interconnected supported Catalyst switches through VLAN and voice VLAN (VVID) configuration. • Use a wizard that can join a cluster. Port configuration such as if they were a single entity. NTP, STP, VLAN, and quality of globally setting and managing multiple ports and switches: - Port and console port security - You can also use Cisco switch clustering technology to manage up to authorized users from any PC on the front-panel images. Group software upgrade • View...
... easiest interface to use and makes switch and switch cluster management accessible to 16 interconnected supported Catalyst switches through VLAN and voice VLAN (VVID) configuration. • Use a wizard that can join a cluster. Port configuration such as if they were a single entity. NTP, STP, VLAN, and quality of globally setting and managing multiple ports and switches: - Port and console port security - You can also use Cisco switch clustering technology to manage up to authorized users from any PC on the front-panel images. Group software upgrade • View...
Software Guide
Page 35
...The IP phone can manage a cluster through , twisted-pair cable with workstations running Cisco CallManager software, a DHCP server, or an IP/TV multicast server). Voice traffic from an AC power source. 78-6511-08 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 1-13 Cisco IP Phones are configured on separate VVIDs. Each 10/100 inline-power port on WAN access. Chapter 1 Overview Network Configuration Examples Collapsed Backbone and Switch Cluster Configuration Figure 1-3 shows a configuration for monitoring and controlling the network. Users with...
...The IP phone can manage a cluster through , twisted-pair cable with workstations running Cisco CallManager software, a DHCP server, or an IP/TV multicast server). Voice traffic from an AC power source. 78-6511-08 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 1-13 Cisco IP Phones are configured on separate VVIDs. Each 10/100 inline-power port on WAN access. Chapter 1 Overview Network Configuration Examples Collapsed Backbone and Switch Cluster Configuration Figure 1-3 shows a configuration for monitoring and controlling the network. Users with...
Software Guide
Page 82
... examples in user mode, often called user EXEC mode. To have access to the Cisco IOS Release 12.0 documentation on Cisco.com. Only a limited subset of Commands" section on page 3-5 • "Redisplaying a Command" section on page 3-5 • "Getting Help" section on page 3-5 For complete information about CLI usage, refer to all commands, you can enter interface configuration mode and line configuration mode. From global configuration mode, you must enter privileged EXEC mode. Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide...
... examples in user mode, often called user EXEC mode. To have access to the Cisco IOS Release 12.0 documentation on Cisco.com. Only a limited subset of Commands" section on page 3-5 • "Redisplaying a Command" section on page 3-5 • "Getting Help" section on page 3-5 For complete information about CLI usage, refer to all commands, you can enter interface configuration mode and line configuration mode. From global configuration mode, you must enter privileged EXEC mode. Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide...
Software Guide
Page 87
.../doc/product/lan/c2900xl/index.htm). To access the CLI from a Browser This procedure assumes you exit the browser session. Caution Copies of the Cisco Systems Access page. For information about configuring the switch for assigning this information to end the browser session. 78-6511-08 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 3-7 Changes made by clicking Web Console - Considerations for Telnet access, see the "SNMP Network Management Platforms...
.../doc/product/lan/c2900xl/index.htm). To access the CLI from a Browser This procedure assumes you exit the browser session. Caution Copies of the Cisco Systems Access page. For information about configuring the switch for assigning this information to end the browser session. 78-6511-08 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 3-7 Changes made by clicking Web Console - Considerations for Telnet access, see the "SNMP Network Management Platforms...
Software Guide
Page 98
... Disabled Internet Group Management Protocol (IGMP) filtering Disabled Network Port Disabled Network Redundancy Hot Standby Router Protocol2 Spanning Tree Protocol Unidirectional link detection (UDLD) UDLD error detection Disabled Enabled Disabled Enabled UDLD error recovery Disabled Port grouping Diagnostics Displaying statistics, graphs, and reports Switch Port Analyzer (SPAN) port monitoring Console, buffer, and file logging None assigned Enabled Disabled Disabled Remote monitoring (RMON) Disabled Concepts and CLI Procedures CMS Option "Configuring Flooding Controls" section...
... Disabled Internet Group Management Protocol (IGMP) filtering Disabled Network Port Disabled Network Redundancy Hot Standby Router Protocol2 Spanning Tree Protocol Unidirectional link detection (UDLD) UDLD error detection Disabled Enabled Disabled Enabled UDLD error recovery Disabled Port grouping Diagnostics Displaying statistics, graphs, and reports Switch Port Analyzer (SPAN) port monitoring Console, buffer, and file logging None assigned Enabled Disabled Disabled Remote monitoring (RMON) Disabled Concepts and CLI Procedures CMS Option "Configuring Flooding Controls" section...
Software Guide
Page 131
...XL and Catalyst 3500 Series XL Software Configuration Guide 6-3 Verify that the information was removed by unicast TFTP messages. With DHCP-based autoconfiguration, your switch. Understanding DHCP-Based Autoconfiguration The DHCP provides configuration information to configure the DHCP server for various lease options. However, you need to remove the IP information from a DHCP server to a device and one for allocating network addresses to dynamically configured devices. A relay device forwards broadcast traffic between two directly connected LANs. DHCP-based autoconfiguration replaces...
...XL and Catalyst 3500 Series XL Software Configuration Guide 6-3 Verify that the information was removed by unicast TFTP messages. With DHCP-based autoconfiguration, your switch. Understanding DHCP-Based Autoconfiguration The DHCP provides configuration information to configure the DHCP server for various lease options. However, you need to remove the IP information from a DHCP server to a device and one for allocating network addresses to dynamically configured devices. A relay device forwards broadcast traffic between two directly connected LANs. DHCP-based autoconfiguration replaces...
Software Guide
Page 139
... to the config.text file where you should password-protect these commands to prevent unauthorized use this section Note You can change a password only by the switches that change the enable secret password. Catalyst 2900 XL and Catalyst 3500 XL switches have two commands for setting passwords: • enable secret password (a very secure, encrypted password) • enable password password (a less secure, unencrypted password) You must be an enable secret password. • CMS provides two levels of access to the configuration options: read...
... to the config.text file where you should password-protect these commands to prevent unauthorized use this section Note You can change a password only by the switches that change the enable secret password. Catalyst 2900 XL and Catalyst 3500 XL switches have two commands for setting passwords: • enable secret password (a very secure, encrypted password) • enable password password (a less secure, unencrypted password) You must be an enable secret password. • CMS provides two levels of access to the configuration options: read...
Software Guide
Page 145
... table. or show mac-address-table notification (Optional) Verify your network. To disable the MAC address notification traps on the port. | removed] Step 8 end Return to PRIV EXEC mode. If you have many users coming to 500. Step 7 SNMP trap mac-notification [added Enable or disable MAC address traps on a specific interface, use the no snmp-server enable traps mac-notification global configuration command. Step 2 SNMP-server enable traps mac-notification Enable SNMP notification of entries in seconds between each hardware port for dynamic and secure MAC addresses...
... table. or show mac-address-table notification (Optional) Verify your network. To disable the MAC address notification traps on the port. | removed] Step 8 end Return to PRIV EXEC mode. If you have many users coming to 500. Step 7 SNMP trap mac-notification [added Enable or disable MAC address traps on a specific interface, use the no snmp-server enable traps mac-notification global configuration command. Step 2 SNMP-server enable traps mac-notification Enable SNMP notification of entries in seconds between each hardware port for dynamic and secure MAC addresses...
Software Guide
Page 202
... Catalyst 3500 Series XL Software Configuration Guide 7-4 78-6511-08 The falling threshold is reached. show port storm-control [interface] Verify your entries. Enabling Storm Control A packet storm occurs when a large number of broadcast, unicast, or multicast packets are received on unicast packets, use the port storm-control unicast command.) Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Command Purpose configure terminal Enter global configuration mode. Storm control is configured for errors before forwarding is the most error-free...
... Catalyst 3500 Series XL Software Configuration Guide 7-4 78-6511-08 The falling threshold is reached. show port storm-control [interface] Verify your entries. Enabling Storm Control A packet storm occurs when a large number of broadcast, unicast, or multicast packets are received on unicast packets, use the port storm-control unicast command.) Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Command Purpose configure terminal Enter global configuration mode. Storm control is configured for errors before forwarding is the most error-free...
Software Guide
Page 205
.... Beginning in error-disabled state, which is an operational state similar to enable UDLD on an individual port. Verify the entry by UDLD. Creating EtherChannel Port Groups Fast EtherChannel (FEC) and Gigabit EtherChannel port groups act as single, logical ports for high-bandwidth connections between switches or between switches and servers. Enable UDLD on all ports that has both port speeds. The errdisable recovery global configuration command automatically re-enables the port after a specified time, so...
.... Beginning in error-disabled state, which is an operational state similar to enable UDLD on an individual port. Verify the entry by UDLD. Creating EtherChannel Port Groups Fast EtherChannel (FEC) and Gigabit EtherChannel port groups act as single, logical ports for high-bandwidth connections between switches or between switches and servers. Enable UDLD on all ports that has both port speeds. The errdisable recovery global configuration command automatically re-enables the port after a specified time, so...
Software Guide
Page 219
... the remote device supports 802.1X full-duplex flow control. The default speed for Connected Cisco 575 LRE CPEs You can only monitor the Ethernet links on page 2-10 and the Catalyst 2900 Series XL Hardware Installation Guide. The default duplex mode is automatically enabled in half-duplex mode and is half duplex with back pressure. Keep these considerations in performance between the CPE Ethernet port and a remote Ethernet device, such as a PC. The PC user...
... the remote device supports 802.1X full-duplex flow control. The default speed for Connected Cisco 575 LRE CPEs You can only monitor the Ethernet links on page 2-10 and the Catalyst 2900 Series XL Hardware Installation Guide. The default duplex mode is automatically enabled in half-duplex mode and is half duplex with back pressure. Keep these considerations in performance between the CPE Ethernet port and a remote Ethernet device, such as a PC. The PC user...
Software Guide
Page 236
... VLANs enabled on the network, you configure it is 0. For more information about using vtp transparent mode, refer to disable VTP on the switch and then change its VLAN information without a password or with the correct domain name and the domain password and change the VTP mode to VTP server. 8-14 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 78-6511-08 Using VTP Chapter 8 Configuring VLANs Step 9 Step 10 Command exit show vtp status Purpose Update...
... VLANs enabled on the network, you configure it is 0. For more information about using vtp transparent mode, refer to disable VTP on the switch and then change its VLAN information without a password or with the correct domain name and the domain password and change the VTP mode to VTP server. 8-14 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide 78-6511-08 Using VTP Chapter 8 Configuring VLANs Step 9 Step 10 Command exit show vtp status Purpose Update...
Software Guide
Page 254
... a VLAN is enabled and which VLAN the traffic belongs. Enter the interface to privileged EXEC mode. For more information about STP, see the "Configuring STP" section on the same switch form a loop, the STP port priority setting determines which port is forwarding traffic for that VLAN. Figure 8-5 shows two trunks connecting supported switches. Verify your entries. Load Sharing Using STP Chapter 8 Configuring VLANs Configuring the CoS Port Priorities Beginning in a blocking state for that VLAN. Load Sharing Using...
... a VLAN is enabled and which VLAN the traffic belongs. Enter the interface to privileged EXEC mode. For more information about STP, see the "Configuring STP" section on the same switch form a loop, the STP port priority setting determines which port is forwarding traffic for that VLAN. Figure 8-5 shows two trunks connecting supported switches. Verify your entries. Load Sharing Using STP Chapter 8 Configuring VLANs Configuring the CoS Port Priorities Beginning in a blocking state for that VLAN. Load Sharing Using...
Software Guide
Page 282
.... Troubleshooting Switch Software Upgrades Chapter 9 Troubleshooting Troubleshooting Switch Software Upgrades Table 9-8 lists problems commonly encountered when upgrading the switch: Table 9-8 Problems Encountered When Upgrading the Switch Problem Getting "Address Range" error message and boot up a switch prompt. 1. Getting "Permission Denied" error message during bootup. Go to Setting BOOT Parameters at ROMMON (Switch: Prompt) to verify and set correctly. The file with the correct image. 9-16 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide...
.... Troubleshooting Switch Software Upgrades Chapter 9 Troubleshooting Troubleshooting Switch Software Upgrades Table 9-8 lists problems commonly encountered when upgrading the switch: Table 9-8 Problems Encountered When Upgrading the Switch Problem Getting "Address Range" error message and boot up a switch prompt. 1. Getting "Permission Denied" error message during bootup. Go to Setting BOOT Parameters at ROMMON (Switch: Prompt) to verify and set correctly. The file with the correct image. 9-16 Catalyst 2900 Series XL and Catalyst 3500 Series XL Software Configuration Guide...
Software Guide
Page 285
... 9 Troubleshooting Recovery Procedures Replacing a Failed Command Switch with a Cluster Member Follow these steps to replace a failed command switch with a command-capable member of the same cluster: Step 1 Step 2 Step 3 Step 4 Disconnect the command switch from the member switches, and physically remove it from the switch. You can access the CLI by using the console port or, if an IP address has been assigned to the switch, by using the console port, refer to the switch installation guide. Step 7 From global configuration mode, remove...
... 9 Troubleshooting Recovery Procedures Replacing a Failed Command Switch with a Cluster Member Follow these steps to replace a failed command switch with a command-capable member of the same cluster: Step 1 Step 2 Step 3 Step 4 Disconnect the command switch from the member switches, and physically remove it from the switch. You can access the CLI by using the console port or, if an IP address has been assigned to the switch, by using the console port, refer to the switch installation guide. Step 7 From global configuration mode, remove...
Software Guide
Page 361
... RPS LED 2-7 RTD messages A-34 Runtime Diagnostic See RTD messages S saving changes in CMS 2-34 SC (standby command switch) 5-12, 5-23 secure address count 7-10 secure addresses adding 6-18 described 6-18 removing 6-18 secure ports address-security violations 7-10 disabling 7-11 enabling 7-10 maximum secure address count 7-10 and trunks 8-27 security port 7-10 RADIUS 6-55 TACACS+ 6-51 violations, address 7-10 Serial Line Internet Protocol See SLIP server, domain name 6-6 server mode, VTP 8-10 servers, BOOTP 6-3 set-request operation 4-6 settings default, changing 4-7 duplex mode...
... RPS LED 2-7 RTD messages A-34 Runtime Diagnostic See RTD messages S saving changes in CMS 2-34 SC (standby command switch) 5-12, 5-23 secure address count 7-10 secure addresses adding 6-18 described 6-18 removing 6-18 secure ports address-security violations 7-10 disabling 7-11 enabling 7-10 maximum secure address count 7-10 and trunks 8-27 security port 7-10 RADIUS 6-55 TACACS+ 6-51 violations, address 7-10 Serial Line Internet Protocol See SLIP server, domain name 6-6 server mode, VTP 8-10 servers, BOOTP 6-3 set-request operation 4-6 settings default, changing 4-7 duplex mode...