Software Guide
Page 2
... version of the word partner does not imply a partnership relationship between Cisco and any other company. (0304R) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide Copyright © 2000-2003, Cisco Systems, Inc. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, ... WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS...
... version of the word partner does not imply a partnership relationship between Cisco and any other company. (0304R) Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide Copyright © 2000-2003, Cisco Systems, Inc. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, ... WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS...
Software Guide
Page 19
...Message Exchange 31-3 Ports in Authorized and Unauthorized States 31-4 Authentication Server 31-5 802.1x Parameters Configurable on the Switch 31-6 802.1x VLAN Assignment Using a RADIUS Server 31-6 Authentication Default Configuration 31-7 Authentication Configuration Guidelines 31-8 Configuring 802....Authentication on the Switch 31-8 Enabling 802.1x Globally 31-8 Disabling 802.1x Globally 31-8 Enabling and Initializing 802.1x Authentication for Individual Ports 31-9 Setting and Enabling Automatic Reauthentication of the Host 31-10 Manually Reauthenticating the Host 31-10 Enabling Multiple Hosts ...
...Message Exchange 31-3 Ports in Authorized and Unauthorized States 31-4 Authentication Server 31-5 802.1x Parameters Configurable on the Switch 31-6 802.1x VLAN Assignment Using a RADIUS Server 31-6 Authentication Default Configuration 31-7 Authentication Configuration Guidelines 31-8 Configuring 802....Authentication on the Switch 31-8 Enabling 802.1x Globally 31-8 Disabling 802.1x Globally 31-8 Enabling and Initializing 802.1x Authentication for Individual Ports 31-9 Setting and Enabling Automatic Reauthentication of the Host 31-10 Manually Reauthenticating the Host 31-10 Enabling Multiple Hosts ...
Software Guide
Page 43
... 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-9 switch registers: . switch port 8: . switch sram: . switch port 10: . Autobooting image: "bootflash:cat4000.5-1-1a.bin" CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCCCCCCCCCC Starting Off-line Diagnostics Mapping in 5 seconds. switch port 3: . You can load a system image manually from Flash memory or the network interface (me1). cpu sdram: . switch port 0: . switch port 9: . switch port 1: . switch port 7: . The display...
... 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-9 switch registers: . switch port 8: . switch sram: . switch port 10: . Autobooting image: "bootflash:cat4000.5-1-1a.bin" CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCCCCCCCCCC Starting Off-line Diagnostics Mapping in 5 seconds. switch port 3: . You can load a system image manually from Flash memory or the network interface (me1). cpu sdram: . switch port 0: . switch port 9: . switch port 1: . switch port 7: . The display...
Software Guide
Page 47
.... In addition to the sc0 interface IP address, the switch can obtain an IP address and other information. If a DHCPOFFER message is received from the DHCP server: • Manual allocation-The network administrator maps the switch MAC address to an IP address at the end of the... switch ports are unconfigured (IP address 0.0.0.0), the me1 interface is configured down to allow the switch to 10 seconds after all the supported options that ...
.... In addition to the sc0 interface IP address, the switch can obtain an IP address and other information. If a DHCPOFFER message is received from the DHCP server: • Manual allocation-The network administrator maps the switch MAC address to an IP address at the end of the... switch ports are unconfigured (IP address 0.0.0.0), the me1 interface is configured down to allow the switch to 10 seconds after all the supported options that ...
Software Guide
Page 53
...manual allocation method.) show interface sl0: flags=51 slip 10.1.1.1 dest 10.1.1.2 sc0: flags=63 vlan 522 inet 172.20.52.38 netmask 255.255.255.240 broadcast 172.20.52.7 me1: flags=62 inet 10.1.1.100 netmask 255.255.255.0 broadcast 10.1.1.255 Console> (enable) slip attach Console Port now running SLIP. Cisco... task: Step 1 Step 2 Task Command Make sure that there is a DHCP, BOOTP, or RARP server on the - Chapter 3 Configuring the Switch IP Address and Default Gateway Using DHCP or RARP to configure SLIP on the console port and verify the configuration: sparc20% telnet 172.20.52...
...manual allocation method.) show interface sl0: flags=51 slip 10.1.1.1 dest 10.1.1.2 sc0: flags=63 vlan 522 inet 172.20.52.38 netmask 255.255.255.240 broadcast 172.20.52.7 me1: flags=62 inet 10.1.1.100 netmask 255.255.255.0 broadcast 10.1.1.255 Console> (enable) slip attach Console Port now running SLIP. Cisco... task: Step 1 Step 2 Task Command Make sure that there is a DHCP, BOOTP, or RARP server on the - Chapter 3 Configuring the Switch IP Address and Default Gateway Using DHCP or RARP to configure SLIP on the console port and verify the configuration: sparc20% telnet 172.20.52...
Software Guide
Page 54
... sc0 dhcp release 3-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 To renew or release a DHCP-assigned IP address on the in-band (sc0) management interface, perform one of the switch to the IP configuration information for the switch. (With DHCP, this...address 00:90:0c:5a:8f:ff Sending DHCP packet with address: 00:90:0c:5a:8f:ff dhcpoffer Sending DHCP packet with the manual or automatic allocation methods.) Set the sc0 interface IP address to '', offset from DHCP Server 172.20.25.254 Console> (enable)...
... sc0 dhcp release 3-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 To renew or release a DHCP-assigned IP address on the in-band (sc0) management interface, perform one of the switch to the IP configuration information for the switch. (With DHCP, this...address 00:90:0c:5a:8f:ff Sending DHCP packet with address: 00:90:0c:5a:8f:ff dhcpoffer Sending DHCP packet with the manual or automatic allocation methods.) Set the sc0 interface IP address to '', offset from DHCP Server 172.20.25.254 Console> (enable)...
Software Guide
Page 63
... process checks to 450 seconds. At every t seconds, where t is 30 to 86,400 seconds (30 seconds to disable; You can manually prevent a particular port from being enabled by setting the errdisable timeout for errdisable timeout. This example shows how to 450 seconds: Console> ...command syntax are reenabled when the global timer times out. Console>(enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-7 With the new timeout enhancement, you specify a reason of the reasons available for the set ("enabled...
... process checks to 450 seconds. At every t seconds, where t is 30 to 86,400 seconds (30 seconds to disable; You can manually prevent a particular port from being enabled by setting the errdisable timeout for errdisable timeout. This example shows how to 450 seconds: Console> ...command syntax are reenabled when the global timer times out. Console>(enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 4-7 With the new timeout enhancement, you specify a reason of the reasons available for the set ("enabled...
Software Guide
Page 77
... spantree command. A syslog message is generated when this change the protocol at any ) is suppressed. the show port command to be configured manually, with LACP, use the same protocol; Setting different port path costs does not, by the set back to full duplex. 78-15486-01... Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-3 With LACP, when all ports in the EtherChannel. • You cannot assign a port to more than one of...
... spantree command. A syslog message is generated when this change the protocol at any ) is suppressed. the show port command to be configured manually, with LACP, use the same protocol; Setting different port path costs does not, by the set back to full duplex. 78-15486-01... Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-3 With LACP, when all ports in the EtherChannel. • You cannot assign a port to more than one of...
Software Guide
Page 80
.... EtherChannel IDs are stored in NVRAM and remain the same after the switch is automatically assigned a unique EtherChannel ID. The ID can form a channel... 6-9 • Removing an EtherChannel Bundle, page 6-9 • Displaying EtherChannel Configuration Information, page 6-10 • Displaying EtherChannel Traffic Statistics, page 6-11 • Displaying EtherChannel PAgP Statistics, page 6-12...EtherChannel is reset or power cycled. You can assign an administrative group number manually or let the system software assign the next available administrative group number automatically...
.... EtherChannel IDs are stored in NVRAM and remain the same after the switch is automatically assigned a unique EtherChannel ID. The ID can form a channel... 6-9 • Removing an EtherChannel Bundle, page 6-9 • Displaying EtherChannel Configuration Information, page 6-10 • Displaying EtherChannel Traffic Statistics, page 6-11 • Displaying EtherChannel PAgP Statistics, page 6-12...EtherChannel is reset or power cycled. You can assign an administrative group number manually or let the system software assign the next available administrative group number automatically...
Software Guide
Page 81
...on connected ports causes the specified ports to forwarding mode). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-7 Caution Modifying the EtherChannel administrative group on Port(s) 3/5-6 are assigned to form an ...Port Device-ID Port-ID Platform 3/5 069003103(5500) 3/5 WS-C4000 3/6 069003103(5500) 3/6 WS-C4000 Console> (enable) Defining an EtherChannel Administrative Group You can define EtherChannel administrative groups manually to identify groups of ports that is limited by specifying the...
...on connected ports causes the specified ports to forwarding mode). 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-7 Caution Modifying the EtherChannel administrative group on Port(s) 3/5-6 are assigned to form an ...Port Device-ID Port-ID Platform 3/5 069003103(5500) 3/5 WS-C4000 3/6 069003103(5500) 3/6 WS-C4000 Console> (enable) Defining an EtherChannel Administrative Group You can define EtherChannel administrative groups manually to identify groups of ports that is limited by specifying the...
Software Guide
Page 90
...Status Channel Channel Neighbor Neighbor mode status device port 3/1 connected on channel WS-C4003 JAB023806JR( 2/1 3/2 connected on channel WS-C4003 JAB023806JR( 2/2 Switch_B> (enable) Understanding the LACP Use the information ...prevents the port from channeling. 6-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Table 6-2 EtherChannel Modes That Use LACP...packets. If you need to verify the configuration. If you may manually turn on channeling by setting the port channel mode to channel without ...
...Status Channel Channel Neighbor Neighbor mode status device port 3/1 connected on channel WS-C4003 JAB023806JR( 2/1 3/2 connected on channel WS-C4003 JAB023806JR( 2/2 Switch_B> (enable) Understanding the LACP Use the information ...prevents the port from channeling. 6-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Table 6-2 EtherChannel Modes That Use LACP...packets. If you need to verify the configuration. If you may manually turn on channeling by setting the port channel mode to channel without ...
Software Guide
Page 91
.... LACP mode that you may configure four ports in a channel using LACP active mode and the remaining four ports in a manually configured channel using the on page 6-19). Port physical characteristics, such as data rate, duplex capability, and point-to aggregate... have more restrictive hardware limitations), then the system places all compatible ports from aggregating. • Administrative key Each port in the switch must have an administrative key value. Chapter 6 Configuring Fast EtherChannel and Gigabit EtherChannel Understanding the LACP Table 6-2 EtherChannel Modes That Use...
.... LACP mode that you may configure four ports in a channel using LACP active mode and the remaining four ports in a manually configured channel using the on page 6-19). Port physical characteristics, such as data rate, duplex capability, and point-to aggregate... have more restrictive hardware limitations), then the system places all compatible ports from aggregating. • Administrative key Each port in the switch must have an administrative key value. Chapter 6 Configuring Fast EtherChannel and Gigabit EtherChannel Understanding the LACP Table 6-2 EtherChannel Modes That Use...
Software Guide
Page 100
...of the transmitting port The switch sends configuration BPDUs to the root. • A port for calculating port cost. All switches connected to transmit data. You can also manually assign port costs between 1-65535. A MAC frame conveying a BPDU sends the switch group address to higher ...bandwidth ports by the switch for port cost. This is based on page 7-26...
...of the transmitting port The switch sends configuration BPDUs to the root. • A port for calculating port cost. All switches connected to transmit data. You can also manually assign port costs between 1-65535. A MAC frame conveying a BPDU sends the switch group address to higher ...bandwidth ports by the switch for port cost. This is based on page 7-26...
Software Guide
Page 101
... frames. When a switch port transitions directly from links that have been forwarded using the old topology. Chapter 7 Configuring Spanning Tree Understanding How STPs Work Table 7-1 Default Port Cost Values Using the Short Method Port Speed 10 Mbps 100 Mbps 1 Gbps Default Cost Value 100 19 4 Default Range...could lead to the default port cost or changes resulting from nonparticipation in bandwidth lead to the forwarding state, it can also manually assign port costs between 1-200,000,000. Therefore, the aggregated port uses the same port cost parameters as a standalone port...
... frames. When a switch port transitions directly from links that have been forwarded using the old topology. Chapter 7 Configuring Spanning Tree Understanding How STPs Work Table 7-1 Default Port Cost Values Using the Short Method Port Speed 10 Mbps 100 Mbps 1 Gbps Default Cost Value 100 19 4 Default Range...could lead to the default port cost or changes resulting from nonparticipation in bandwidth lead to the forwarding state, it can also manually assign port costs between 1-200,000,000. Therefore, the aggregated port uses the same port cost parameters as a standalone port...
Software Guide
Page 114
...8226; Loop prevention is always present. each time you commit the MST configuration. 7-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 MST Configuration MST configuration has three parts as a single SST or pseudobridge. This difference does... by either of all other ports. - In a Catalyst 4500 series switch running PVST+, the VLAN 1 spanning tree corresponds to 16 instances; Note You must set and update the revision number manually, because it does not auto-increment each spanning tree instance is made to...
...8226; Loop prevention is always present. each time you commit the MST configuration. 7-18 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 MST Configuration MST configuration has three parts as a single SST or pseudobridge. This difference does... by either of all other ports. - In a Catalyst 4500 series switch running PVST+, the VLAN 1 spanning tree corresponds to 16 instances; Note You must set and update the revision number manually, because it does not auto-increment each spanning tree instance is made to...
Software Guide
Page 115
...integer, corresponds to other regions. If two MST regions are redundantly connected, all the bridges inside the region must configure each byte manually. The IST port at the boundary can process MST BPDUs. The first byte that corresponds to VLAN 0 and the 4096th byte that... on the LAN can take up any port role except a backup port role. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-19 Chapter 7 Configuring Spanning Tree Understanding How MST Works • MST configuration table-An array of MST regions ...
...integer, corresponds to other regions. If two MST regions are redundantly connected, all the bridges inside the region must configure each byte manually. The IST port at the boundary can process MST BPDUs. The first byte that corresponds to VLAN 0 and the 4096th byte that... on the LAN can take up any port role except a backup port role. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 7-19 Chapter 7 Configuring Spanning Tree Understanding How MST Works • MST configuration table-An array of MST regions ...
Software Guide
Page 133
... in the list are associated with different MISTP instances, the VLAN is mapped. Verify that are associated with the mapping of the root switches that are sending the BPDUs containing the VLAN mapping information, and the timers that the VLAN is in conflict. Chapter 7 Configuring Spanning...• You can only map Ethernet VLANs to MISTP instances. • At least one VLAN in the instance must manually remove the incorrect mapping(s) from the root switch. The remaining entry on the list becomes the official mapping. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G...
... in the list are associated with different MISTP instances, the VLAN is mapped. Verify that are associated with the mapping of the root switches that are sending the BPDUs containing the VLAN mapping information, and the timers that the VLAN is in conflict. Chapter 7 Configuring Spanning...• You can only map Ethernet VLANs to MISTP instances. • At least one VLAN in the instance must manually remove the incorrect mapping(s) from the root switch. The remaining entry on the list becomes the official mapping. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G...
Software Guide
Page 158
...such as connection of going through the listening, learning, and forwarding states. Because PortFast can be enabled on nontrunking ports connecting two switches, spanning tree loops can occur because BPDUs are connected to an end system. If a PortFast-configured interface receives a BPDU, an... to invalid configurations because the administrator must manually put the interface back in the forwarding state immediately, instead of an unauthorized device. BDPU filtering is on a switch or trunk port, the port is enabled on the switch, spanning tree places ports in service. ...
...such as connection of going through the listening, learning, and forwarding states. Because PortFast can be enabled on nontrunking ports connecting two switches, spanning tree loops can occur because BPDUs are connected to an end system. If a PortFast-configured interface receives a BPDU, an... to invalid configurations because the administrator must manually put the interface back in the forwarding state immediately, instead of an unauthorized device. BDPU filtering is on a switch or trunk port, the port is enabled on the switch, spanning tree places ports in service. ...
Software Guide
Page 192
... part of the domain. Figure 9-5 shows a VTP domain that cannot automatically be partitioned. In VTP version 3, you manually designate it as the new primary server. This behavior of VTP version 3 protects the domain from accepting a conflicting configuration after...9-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Understanding How VTP Version 3 Works Figure 9-4 VTP Version 3: Partitioned VTP Domain Domain Cisco Primary Server X Domain Cisco Primary Server Y Chapter 9 Configuring VTP 94282 Partitions...
... part of the domain. Figure 9-5 shows a VTP domain that cannot automatically be partitioned. In VTP version 3, you manually designate it as the new primary server. This behavior of VTP version 3 protects the domain from accepting a conflicting configuration after...9-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Understanding How VTP Version 3 Works Figure 9-4 VTP Version 3: Partitioned VTP Domain Domain Cisco Primary Server X Domain Cisco Primary Server Y Chapter 9 Configuring VTP 94282 Partitions...
Software Guide
Page 208
...IP address and assign the interface to VLANs using this method, it is assigned manually on a port-by-port basis. You can be assigned to the same VLAN...VLAN membership on the same VLAN directly without a router. Understanding How VLANs Work Chapter 10 Configuring VLANs Figure 10-1 VLANs as port-based, or static, VLAN membership. For example, all the end... VLAN number to use when translating from one VLAN type to another switch on the switch is known as Logically Defined Networks Cisco router Catalyst 4000 Engineering VLAN Marketing VLAN Fast Ethernet Catalyst 4000 Catalyst ...
...IP address and assign the interface to VLANs using this method, it is assigned manually on a port-by-port basis. You can be assigned to the same VLAN...VLAN membership on the same VLAN directly without a router. Understanding How VLANs Work Chapter 10 Configuring VLANs Figure 10-1 VLANs as port-based, or static, VLAN membership. For example, all the end... VLAN number to use when translating from one VLAN type to another switch on the switch is known as Logically Defined Networks Cisco router Catalyst 4000 Engineering VLAN Marketing VLAN Fast Ethernet Catalyst 4000 Catalyst ...