Software Configuration Guide
Page 1
Catalyst 2950 Desktop Switch Software Configuration Guide Cisco IOS Release 12.1(11)EA1 and 12.1(11)YJ November 2002 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Customer Order Number: DOC-7814982= Text Part Number: 78-14982-01
Catalyst 2950 Desktop Switch Software Configuration Guide Cisco IOS Release 12.1(11)EA1 and 12.1(11)YJ November 2002 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Customer Order Number: DOC-7814982= Text Part Number: 78-14982-01
Software Configuration Guide
Page 2
... KIND, EXPRESS OR IMPLIED. Copyright © 1981, Regents of the University of the word partner does not imply a partnership relationship Catalyst 2950 Desktop Switch Software Configuration Guide Copyright © 2001-2002, Cisco Systems, Inc. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED "AS IS" WITH ALL...
... KIND, EXPRESS OR IMPLIED. Copyright © 1981, Regents of the University of the word partner does not imply a partnership relationship Catalyst 2950 Desktop Switch Software Configuration Guide Copyright © 2001-2002, Cisco Systems, Inc. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED "AS IS" WITH ALL...
Software Configuration Guide
Page 3
... Cisco TAC Escalation Center xxxii Overview 1-1 Features 1-1 Management Options 1-7 Management Interface Options 1-7 Advantages of Using CMS and Clustering Switches 1-7 Network Configuration Examples 1-8 Design Concepts for Using the Switch 1-8 Small to Medium-Sized Network Configuration 1-11 Collapsed Backbone and Switch Cluster Configuration 1-13 Large Campus Configuration 1-14 Hotel Network Configuration 1-16 Multidwelling Network Using Catalyst 2950 Switches...
... Cisco TAC Escalation Center xxxii Overview 1-1 Features 1-1 Management Options 1-7 Management Interface Options 1-7 Advantages of Using CMS and Clustering Switches 1-7 Network Configuration Examples 1-8 Design Concepts for Using the Switch 1-8 Small to Medium-Sized Network Configuration 1-11 Collapsed Backbone and Switch Cluster Configuration 1-13 Large Campus Configuration 1-14 Hotel Network Configuration 1-16 Multidwelling Network Using Catalyst 2950 Switches...
Software Configuration Guide
Page 4
... Options 3-15 Menus and Toolbar 3-15 Menu Bar 3-15 Toolbar 3-20 Front Panel View Popup Menus 3-21 Device Popup Menu 3-21 Port Popup Menu 3-21 Catalyst 2950 Desktop Switch Software Configuration Guide iv 78-14982-01
... Options 3-15 Menus and Toolbar 3-15 Menu Bar 3-15 Toolbar 3-20 Front Panel View Popup Menus 3-21 Device Popup Menu 3-21 Port Popup Menu 3-21 Catalyst 2950 Desktop Switch Software Configuration Guide iv 78-14982-01
Software Configuration Guide
Page 5
... Your Configuration 3-33 CMS Preferences 3-33 Using Different Versions of CMS 3-34 Where to Go Next 3-34 Assigning the Switch IP Address and Default Gateway 4-1 Understanding the Boot Process 4-1 Assigning Switch Information 4-2 Default Switch Information 4-3 Understanding DHCP-Based Autoconfiguration 4-3 DHCP Client Request Process 4-4 Configuring the DHCP Server 4-5 Configuring the TFTP Server 4-5 Configuring the...
... Your Configuration 3-33 CMS Preferences 3-33 Using Different Versions of CMS 3-34 Where to Go Next 3-34 Assigning the Switch IP Address and Default Gateway 4-1 Understanding the Boot Process 4-1 Assigning Switch Information 4-2 Default Switch Information 4-3 Understanding DHCP-Based Autoconfiguration 4-3 DHCP Client Request Process 4-4 Configuring the DHCP Server 4-5 Configuring the TFTP Server 4-5 Configuring the...
Software Configuration Guide
Page 6
... Switch Characteristics 6-3 Candidate Switch and Member Switch Characteristics 6-4 Planning a Switch Cluster 6-5 Automatic Discovery of Cluster Candidates and Members 6-5 Discovery through CDP Hops 6-6 Discovery through Non-CDP-Capable and Noncluster-Capable Devices 6-7 Discovery through the Same Management VLAN 6-8 Discovery through Different Management VLANs 6-9 Discovery of Newly Installed Switches 6-10 HSRP and Standby Command Switches 6-12 Catalyst 2950 Desktop Switch...
... Switch Characteristics 6-3 Candidate Switch and Member Switch Characteristics 6-4 Planning a Switch Cluster 6-5 Automatic Discovery of Cluster Candidates and Members 6-5 Discovery through CDP Hops 6-6 Discovery through Non-CDP-Capable and Noncluster-Capable Devices 6-7 Discovery through the Same Management VLAN 6-8 Discovery through Different Management VLANs 6-9 Discovery of Newly Installed Switches 6-10 HSRP and Standby Command Switches 6-12 Catalyst 2950 Desktop Switch...
Software Configuration Guide
Page 7
... Profiles 6-18 Availability of Switch-Specific Features in Switch Clusters 6-19 Creating a Switch Cluster 6-19 Enabling a Command Switch 6-19 Adding Member Switches 6-20 Creating a Cluster Standby Group 6-22 Verifying a Switch Cluster 6-24 Using the CLI to Manage Switch Clusters 6-25 Catalyst 1900 and Catalyst 2820 CLI Considerations 6-25 Using SNMP to Manage Switch Clusters 6-26 Administering the Switch 7-1 Preventing Unauthorized Access to...
... Profiles 6-18 Availability of Switch-Specific Features in Switch Clusters 6-19 Creating a Switch Cluster 6-19 Enabling a Command Switch 6-19 Adding Member Switches 6-20 Creating a Cluster Standby Group 6-22 Verifying a Switch Cluster 6-24 Using the CLI to Manage Switch Clusters 6-25 Catalyst 1900 and Catalyst 2820 CLI Considerations 6-25 Using SNMP to Manage Switch Clusters 6-26 Administering the Switch 7-1 Preventing Unauthorized Access to...
Software Configuration Guide
Page 8
...Authentication 7-14 Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 7-16 Starting TACACS+ Accounting 7-17 Displaying the TACACS+ Configuration 7-17 Controlling Switch Access with RADIUS 7-18 Understanding RADIUS 7-18 RADIUS Operation 7-19 Configuring RADIUS 7-20 Default RADIUS Configuration 7-20 Identifying the RADIUS Server Host 7-20 ...System Clock 7-44 Displaying the Time and Date Configuration 7-44 Configuring the Time Zone 7-45 Configuring Summer Time (Daylight Saving Time) 7-46 Catalyst 2950 Desktop Switch Software Configuration Guide viii 78-14982-01
...Authentication 7-14 Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services 7-16 Starting TACACS+ Accounting 7-17 Displaying the TACACS+ Configuration 7-17 Controlling Switch Access with RADIUS 7-18 Understanding RADIUS 7-18 RADIUS Operation 7-19 Configuring RADIUS 7-20 Default RADIUS Configuration 7-20 Identifying the RADIUS Server Host 7-20 ...System Clock 7-44 Displaying the Time and Date Configuration 7-44 Configuring the Time Zone 7-45 Configuring Summer Time (Daylight Saving Time) 7-46 Catalyst 2950 Desktop Switch Software Configuration Guide viii 78-14982-01
Software Configuration Guide
Page 9
...Static Address Entries 7-58 Adding and Removing Secure Addresses 7-59 Displaying Address Table Entries 7-60 Managing the ARP Table 7-61 Switch Software Releases 7-61 Configuring 802.1X Port-Based Authentication 8-1 Understanding 802.1X Port-Based Authentication 8-1 Device Roles 8-2 Authentication ...1X Authentication 8-5 Default 802.1X Configuration 8-6 802.1X Configuration Guidelines 8-7 Enabling 802.1X Authentication 8-8 Configuring the Switch-to-RADIUS-Server Communication 8-9 Enabling Periodic Re-Authentication 8-10 Manually Re-Authenticating a Client Connected to a Port 8-11 Changing the Quiet...
...Static Address Entries 7-58 Adding and Removing Secure Addresses 7-59 Displaying Address Table Entries 7-60 Managing the ARP Table 7-61 Switch Software Releases 7-61 Configuring 802.1X Port-Based Authentication 8-1 Understanding 802.1X Port-Based Authentication 8-1 Device Roles 8-2 Authentication ...1X Authentication 8-5 Default 802.1X Configuration 8-6 802.1X Configuration Guidelines 8-7 Enabling 802.1X Authentication 8-8 Configuring the Switch-to-RADIUS-Server Communication 8-9 Enabling Periodic Re-Authentication 8-10 Manually Re-Authenticating a Client Connected to a Port 8-11 Changing the Quiet...
Software Configuration Guide
Page 10
...Connecting Interfaces 9-3 Using the Interface Command 9-4 Procedures for Configuring Interfaces 9-4 Configuring a Range of Interfaces 9-6 Configuring and Using Interface-Range Macros 9-8 Configuring Switch Interfaces 9-9 Default Ethernet Interface Configuration 9-10 SFP Configuration 9-10 Configuring Interface Speed and Duplex Mode 9-11 Configuration Guidelines 9-12 Setting the Interface Speed and... 10-2 LRE Sequences 10-4 CPE Ethernet Links 10-5 Configuring LRE Ports 10-5 Environmental Guidelines for LRE Links 10-6 Catalyst 2950 Desktop Switch Software Configuration Guide x 78-14982-01
...Connecting Interfaces 9-3 Using the Interface Command 9-4 Procedures for Configuring Interfaces 9-4 Configuring a Range of Interfaces 9-6 Configuring and Using Interface-Range Macros 9-8 Configuring Switch Interfaces 9-9 Default Ethernet Interface Configuration 9-10 SFP Configuration 9-10 Configuring Interface Speed and Duplex Mode 9-11 Configuration Guidelines 9-12 Setting the Interface Speed and... 10-2 LRE Sequences 10-4 CPE Ethernet Links 10-5 Configuring LRE Ports 10-5 Environmental Guidelines for LRE Links 10-6 Catalyst 2950 Desktop Switch Software Configuration Guide x 78-14982-01
Software Configuration Guide
Page 11
Contents 11 C H A P T E R 78-14982-01 Guidelines for Using LRE Profiles 10-7 CPE Ethernet Link Guidelines 10-7 Considerations for Connected Cisco 575 LRE CPEs 10-7 Considerations for Connected Cisco 585 LRE CPEs 10-8 Assigning a Global Profile to All LRE Ports 10-8 Assigning a Profile to a Specific LRE Port 10-9 Assigning a Global Sequence to All LRE... 11-7 Listening State 11-7 Learning State 11-7 Forwarding State 11-7 Disabled State 11-8 Spanning-Tree Address Management 11-8 STP and IEEE 802.1Q Trunks 11-8 Catalyst 2950 Desktop Switch Software Configuration Guide xi
Contents 11 C H A P T E R 78-14982-01 Guidelines for Using LRE Profiles 10-7 CPE Ethernet Link Guidelines 10-7 Considerations for Connected Cisco 575 LRE CPEs 10-7 Considerations for Connected Cisco 585 LRE CPEs 10-8 Assigning a Global Profile to All LRE Ports 10-8 Assigning a Profile to a Specific LRE Port 10-9 Assigning a Global Sequence to All LRE... 11-7 Listening State 11-7 Learning State 11-7 Forwarding State 11-7 Disabled State 11-8 Spanning-Tree Address Management 11-8 STP and IEEE 802.1Q Trunks 11-8 Catalyst 2950 Desktop Switch Software Configuration Guide xi
Software Configuration Guide
Page 12
... Configuration 11-10 STP Configuration Guidelines 11-10 Disabling STP 11-12 Configuring the Root Switch 11-12 Configuring a Secondary Root Switch 11-14 Configuring the Port Priority 11-15 Configuring the Path Cost 11-16 Configuring the Switch Priority of a VLAN 11-18 Configuring the Hello Time 11-19 Configuring the Forwarding... and MSTP Configuration 12-12 RSTP and MSTP Configuration Guidelines 12-12 Specifying the MST Region Configuration and Enabling MSTP 12-13 Configuring the Root Switch 12-14 Catalyst 2950 Desktop Switch Software Configuration Guide xii 78-14982-01
... Configuration 11-10 STP Configuration Guidelines 11-10 Disabling STP 11-12 Configuring the Root Switch 11-12 Configuring a Secondary Root Switch 11-14 Configuring the Port Priority 11-15 Configuring the Path Cost 11-16 Configuring the Switch Priority of a VLAN 11-18 Configuring the Hello Time 11-19 Configuring the Forwarding... and MSTP Configuration 12-12 RSTP and MSTP Configuration Guidelines 12-12 Specifying the MST Region Configuration and Enabling MSTP 12-13 Configuring the Root Switch 12-14 Catalyst 2950 Desktop Switch Software Configuration Guide xii 78-14982-01
Software Configuration Guide
Page 13
...-16 Configuring the Port Priority 12-17 Configuring the Path Cost 12-18 Configuring the Switch Priority 12-19 Configuring the Hello Time 12-19 Configuring the Forwarding-Delay Time 12-20 Configuring the Maximum-Aging Time 12-21 Configuring the ... Enabling BackboneFast 13-19 Enabling Root Guard 13-19 Enabling Loop Guard 13-20 Displaying the Spanning-Tree Status 13-21 Contents 78-14982-01 Catalyst 2950 Desktop Switch Software Configuration Guide xiii
...-16 Configuring the Port Priority 12-17 Configuring the Path Cost 12-18 Configuring the Switch Priority 12-19 Configuring the Hello Time 12-19 Configuring the Forwarding-Delay Time 12-20 Configuring the Maximum-Aging Time 12-21 Configuring the ... Enabling BackboneFast 13-19 Enabling Root Guard 13-19 Enabling Loop Guard 13-20 Displaying the Spanning-Tree Status 13-21 Contents 78-14982-01 Catalyst 2950 Desktop Switch Software Configuration Guide xiii
Software Configuration Guide
Page 14
... Load Sharing Using STP 14-21 Load Sharing Using STP Port Priorities 14-21 Load Sharing Using STP Path Cost 14-23 Configuring VMPS 14-24 Understanding VMPS 14-25 Dynamic Port VLAN Membership 14-25 VMPS Database Configuration File 14-26 Default VMPS Configuration 14-27 VMPS Configuration Guidelines 14...
... Load Sharing Using STP 14-21 Load Sharing Using STP Port Priorities 14-21 Load Sharing Using STP Path Cost 14-23 Configuring VMPS 14-24 Understanding VMPS 14-25 Dynamic Port VLAN Membership 14-25 VMPS Database Configuration File 14-26 Default VMPS Configuration 14-27 VMPS Configuration Guidelines 14...
Software Configuration Guide
Page 15
...-9 Configuring a VTP Client 15-11 Disabling VTP (VTP Transparent Mode) 15-12 Enabling VTP Version 2 15-13 Enabling VTP Pruning 15-14 Adding a VTP Client Switch to a VTP Domain 15-15 Monitoring VTP 15-16 Configuring Voice VLAN 16-1 Understanding Voice VLAN 16-1 Configuring Voice VLAN 16...
...-9 Configuring a VTP Client 15-11 Disabling VTP (VTP Transparent Mode) 15-12 Enabling VTP Version 2 15-13 Enabling VTP Pruning 15-14 Adding a VTP Client Switch to a VTP Domain 15-15 Monitoring VTP 15-16 Configuring Voice VLAN 16-1 Understanding Voice VLAN 16-1 Configuring Voice VLAN 16...
Software Configuration Guide
Page 16
Contents 17 C H A P T E R Default Voice VLAN Configuration 16-2 Voice VLAN Configuration Guidelines 16-3 Configuring a Port to Connect to a Cisco 7960 IP Phone 16-3 Configuring Ports to Carry Voice Traffic in 802.1Q Frames 16-4 Configuring Ports to Carry Voice Traffic in 802.1P Priority ...-21 Configuring IGMP Profiles 17-21 Applying IGMP Profiles 17-22 Setting the Maximum Number of IGMP Groups 17-23 Displaying IGMP Filtering Configuration 17-24 Catalyst 2950 Desktop Switch Software Configuration Guide xvi 78-14982-01
Contents 17 C H A P T E R Default Voice VLAN Configuration 16-2 Voice VLAN Configuration Guidelines 16-3 Configuring a Port to Connect to a Cisco 7960 IP Phone 16-3 Configuring Ports to Carry Voice Traffic in 802.1Q Frames 16-4 Configuring Ports to Carry Voice Traffic in 802.1P Priority ...-21 Configuring IGMP Profiles 17-21 Applying IGMP Profiles 17-22 Setting the Maximum Number of IGMP Groups 17-23 Displaying IGMP Filtering Configuration 17-24 Catalyst 2950 Desktop Switch Software Configuration Guide xvi 78-14982-01
Software Configuration Guide
Page 17
... an Interface 20-4 Monitoring and Maintaining CDP 20-5 Configuring SPAN and RSPAN 21-1 Understanding SPAN and RSPAN 21-1 SPAN and RSPAN Concepts and Terminology 21-3 Catalyst 2950 Desktop Switch Software Configuration Guide xvii
... an Interface 20-4 Monitoring and Maintaining CDP 20-5 Configuring SPAN and RSPAN 21-1 Understanding SPAN and RSPAN 21-1 SPAN and RSPAN Concepts and Terminology 21-3 Catalyst 2950 Desktop Switch Software Configuration Guide xvii
Software Configuration Guide
Page 18
... Logging 23-1 Configuring System Message Logging 23-2 System Log Message Format 23-2 Default System Message Logging Configuration 23-3 Disabling and Enabling Message Logging 23-4 xviii Catalyst 2950 Desktop Switch Software Configuration Guide 78-14982-01
... Logging 23-1 Configuring System Message Logging 23-2 System Log Message Format 23-2 Default System Message Logging Configuration 23-3 Disabling and Enabling Message Logging 23-4 xviii Catalyst 2950 Desktop Switch Software Configuration Guide 78-14982-01
Software Configuration Guide
Page 19
... Examples 24-14 Displaying SNMP Status 24-15 Configuring Network Security with ACLs 25-1 Understanding ACLs 25-2 Handling Fragmented and Unfragmented Traffic 25-3 Understanding Access Control Parameters 25-4 Guidelines for Applying ACLs to Physical Interfaces 25-6 Configuring ACLs 25-6 Unsupported Features 25-7 Creating Standard and Extended IP ACLs 25-7 Catalyst 2950 Desktop Switch Software...
... Examples 24-14 Displaying SNMP Status 24-15 Configuring Network Security with ACLs 25-1 Understanding ACLs 25-2 Handling Fragmented and Unfragmented Traffic 25-3 Understanding Access Control Parameters 25-4 Guidelines for Applying ACLs to Physical Interfaces 25-6 Configuring ACLs 25-6 Unsupported Features 25-7 Creating Standard and Extended IP ACLs 25-7 Catalyst 2950 Desktop Switch Software...
Software Configuration Guide
Page 20
... Trust States 26-10 Configuring the Trust State on Ports within the QoS Domain 26-11 Configuring the CoS Value for an Interface 26-13 Catalyst 2950 Desktop Switch Software Configuration Guide xx 78-14982-01
... Trust States 26-10 Configuring the Trust State on Ports within the QoS Domain 26-11 Configuring the CoS Value for an Interface 26-13 Catalyst 2950 Desktop Switch Software Configuration Guide xx 78-14982-01