Hardware Installation Guide
Page 24
... information about CMS, the CLI, and SNMP refer to the switch console port or by using SNMP management applications such as CiscoWorks2000 LAN Management Suite (LMS) and HP OpenView. Catalyst 2900 Series XL Hardware Installation Guide 1-4 78-6461-04 and port-level settings. • Command-line Interface (CLI)-The switch IOS CLI software is already installed on the model, the switch front panels can have a set of LEDs and a Mode button. You can fully configure and monitor the switch and switch cluster members from anywhere...
... information about CMS, the CLI, and SNMP refer to the switch console port or by using SNMP management applications such as CiscoWorks2000 LAN Management Suite (LMS) and HP OpenView. Catalyst 2900 Series XL Hardware Installation Guide 1-4 78-6461-04 and port-level settings. • Command-line Interface (CLI)-The switch IOS CLI software is already installed on the model, the switch front panels can have a set of LEDs and a Mode button. You can fully configure and monitor the switch and switch cluster members from anywhere...
Hardware Installation Guide
Page 26
... high-speed workstations, Cisco IP Phones, servers, hubs, routers, and other switches through , twisted-pair cable. Pinouts for autonegotiation, the port senses the speed and duplex settings of half duplex, full duplex, 10 Mbps, or 100 Mbps. Catalyst 2900 Series XL Hardware Installation Guide 1-6 78-6461-04 Unlike the 3524-PWR XL switch, the Catalyst 2900 XL switches do not provide inline power. When set for 100BASE-TX traffic. The 10/100 switch ports can be connected...
... high-speed workstations, Cisco IP Phones, servers, hubs, routers, and other switches through , twisted-pair cable. Pinouts for autonegotiation, the port senses the speed and duplex settings of half duplex, full duplex, 10 Mbps, or 100 Mbps. Catalyst 2900 Series XL Hardware Installation Guide 1-6 78-6461-04 Unlike the 3524-PWR XL switch, the Catalyst 2900 XL switches do not provide inline power. When set for 100BASE-TX traffic. The 10/100 switch ports can be connected...
Hardware Installation Guide
Page 89
... Catalyst 2900 Series XL Hardware Installation Guide 3-1 As each turn off , starting with your SNMP application for troubleshooting problems: • Understanding POST Results • Diagnosing Problems Understanding POST Results Each time the switch is powered on, eight POSTs run automatically to 8x each test runs, the port status LEDs turn green. They show failures in turn amber for ports 2x to check the most important system components before the switch begins forwarding packets. CH A P T E R 3 Troubleshooting The LEDs...
... Catalyst 2900 Series XL Hardware Installation Guide 3-1 As each turn off , starting with your SNMP application for troubleshooting problems: • Understanding POST Results • Diagnosing Problems Understanding POST Results Each time the switch is powered on, eight POSTs run automatically to 8x each test runs, the port status LEDs turn green. They show failures in turn amber for ports 2x to check the most important system components before the switch begins forwarding packets. CH A P T E R 3 Troubleshooting The LEDs...
Software Guide
Page 24
...the switch. Checking Status and Connectivity Describes how to display information about modules and switch ports and how to configure quality of service (QoS). Using Switch TopN Reports Describes how to generate switch TopN reports on the switch. Configuring SPAN and RSPAN Describes how to configure the Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) on the switch. xxiv Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Configuring Dynamic VLAN Membership with VMPS Describes how to configure VLAN Membership...
...the switch. Checking Status and Connectivity Describes how to display information about modules and switch ports and how to configure quality of service (QoS). Using Switch TopN Reports Describes how to generate switch TopN reports on the switch. Configuring SPAN and RSPAN Describes how to configure the Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) on the switch. xxiv Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Configuring Dynamic VLAN Membership with VMPS Describes how to configure VLAN Membership...
Software Guide
Page 29
...://www.cisco.com/warp/public/687/Directory/DirTAC.shtml 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xxix You and Cisco will commit all customers who have a valid Cisco service contract have a login ID or password, go to urgency: • Priority level 4 (P4)-You need technical assistance with Cisco products and technologies. These classifications are negatively impacted by using the Cisco TAC...
...://www.cisco.com/warp/public/687/Directory/DirTAC.shtml 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xxix You and Cisco will commit all customers who have a valid Cisco service contract have a login ID or password, go to urgency: • Priority level 4 (P4)-You need technical assistance with Cisco products and technologies. These classifications are negatively impacted by using the Cisco TAC...
Software Guide
Page 36
...Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-2 78-15486-01 Accessing the Switch CLI You can use set and clear commands. Make sure that the terminal is connected to the supervisor engine console port using the tip command on the terminal (for your switch. Use clear commands (or in some cases, use normal-mode commands to monitor the switch or enter privileged mode to see the "Example of a Catalyst 4003 Bootup Display" section on page 2-3. Accessing the Switch CLI Chapter 2 Using the Command-Line Interface The Catalyst...
...Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-2 78-15486-01 Accessing the Switch CLI You can use set and clear commands. Make sure that the terminal is connected to the supervisor engine console port using the tip command on the terminal (for your switch. Use clear commands (or in some cases, use normal-mode commands to monitor the switch or enter privileged mode to see the "Example of a Catalyst 4003 Bootup Display" section on page 2-3. Accessing the Switch CLI Chapter 2 Using the Command-Line Interface The Catalyst...
Software Guide
Page 37
For more information about setting the IP address and default gateway, see Chapter 30, "Configuring Switch Access Using AAA." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-3 For information about using Telnet, you must configure DNS properly on the switch and on and is '^]'. Cisco Systems Console Enter password: After you successfully connect to the switch using Telnet, see Chapter 38, "Configuring DNS.") This example shows how to use DNS host names. Note For complete...
For more information about setting the IP address and default gateway, see Chapter 30, "Configuring Switch Access Using AAA." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-3 For information about using Telnet, you must configure DNS properly on the switch and on and is '^]'. Cisco Systems Console Enter password: After you successfully connect to the switch using Telnet, see Chapter 38, "Configuring DNS.") This example shows how to use DNS host names. Note For complete...
Software Guide
Page 38
... privileged-mode password for IP Address Set DNS information Set IP fragmentation enable/disable Set IP HTTP server information Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-4 78-15486-01 Console> enable Enter password: Console> (enable) To exit privileged mode and return to see the "Accessing the Switch CLI" section on page 2-2). For example, eight parameters are provided if you are connecting to the switch CLI through the console port or using the wrong number of valid keywords and arguments for example, commands...
... privileged-mode password for IP Address Set DNS information Set IP fragmentation enable/disable Set IP HTTP server information Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-4 78-15486-01 Console> enable Enter password: Console> (enable) To exit privileged mode and return to see the "Accessing the Switch CLI" section on page 2-2). For example, eight parameters are provided if you are connecting to the switch CLI through the console port or using the wrong number of valid keywords and arguments for example, commands...
Software Guide
Page 52
....1.1.255 Console> (enable) set ip route default 172.20.52.33 Route added. Use Telnet to access the switch, enter privileged mode, and enter the slip detach command to restore the console port connection. Set the console port SLIP address and the destination address of the attached host. Verify the SLIP interface configuration. When the SLIP connection is enabled and SLIP is attached on the switch. Command telnet {host_name | ip_addr} enable set ip route default 10.1.1.1 Route added. Enter privileged mode on the console port, an...
....1.1.255 Console> (enable) set ip route default 172.20.52.33 Route added. Use Telnet to access the switch, enter privileged mode, and enter the slip detach command to restore the console port connection. Set the console port SLIP address and the destination address of the attached host. Verify the SLIP interface configuration. When the SLIP connection is enabled and SLIP is attached on the switch. Command telnet {host_name | ip_addr} enable set ip route default 10.1.1.1 Route added. Enter privileged mode on the console port, an...
Software Guide
Page 260
... a trunk port a dynamic port, VMPS disables trunking on the port to make it a dynamic port, and verify the port configuration: Console> (enable) set port membership 3/1-3 dynamic Ports 3/1-3 vlan assignment set to make trunk ports or secure ports a dynamic port. show port Port Name Status Vlan Level Duplex Speed 1/1 connect trunk normal full 100 1/2 connect trunk normal half 100 2/1 connect dyn normal full 155 3/1 connect dyn-5 normal half 10 Type 100 BASE-TX 100 BASE-TX OC3 MMF ATM 10 BASE-T 12-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software...
... a trunk port a dynamic port, VMPS disables trunking on the port to make it a dynamic port, and verify the port configuration: Console> (enable) set port membership 3/1-3 dynamic Ports 3/1-3 vlan assignment set to make trunk ports or secure ports a dynamic port. show port Port Name Status Vlan Level Duplex Speed 1/1 connect trunk normal full 100 1/2 connect trunk normal half 100 2/1 connect dyn normal full 155 3/1 connect dyn-5 normal half 10 Type 100 BASE-TX 100 BASE-TX OC3 MMF ATM 10 BASE-T 12-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software...
Software Guide
Page 285
....1p. Understanding Multicasting and Multicast Services Operation CGMP, IGMP snooping, and GMRP manage multicast traffic in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. Switches can inform the switch when specific hosts join or leave IP multicast groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-1 A CGMP/IGMP-capable IP multicast router sees all IGMP packets and can use CGMP, IGMP snooping, or GMRP to dynamically configure switch ports so that...
....1p. Understanding Multicasting and Multicast Services Operation CGMP, IGMP snooping, and GMRP manage multicast traffic in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. Switches can inform the switch when specific hosts join or leave IP multicast groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-1 A CGMP/IGMP-capable IP multicast router sees all IGMP packets and can use CGMP, IGMP snooping, or GMRP to dynamically configure switch ports so that...
Software Guide
Page 300
... privileged mode: Step 1 Step 2 Task Command Add one or more multicast MAC addresses to the set cam static 01-33-44-55-66-77 2/6-12 Static multicast entry added to CAM table. Console> (enable) set cam static 01-11-22-33-44-55 2/6-12 Static multicast entry added to CAM table. Console> (enable) show multicast group CGMP enabled IGMP disabled 15-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 mod_num/port_num [vlan] Verify the multicast group configuration. Console> (enable) set cam static...
... privileged mode: Step 1 Step 2 Task Command Add one or more multicast MAC addresses to the set cam static 01-33-44-55-66-77 2/6-12 Static multicast entry added to CAM table. Console> (enable) set cam static 01-11-22-33-44-55 2/6-12 Static multicast entry added to CAM table. Console> (enable) show multicast group CGMP enabled IGMP disabled 15-16 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 mod_num/port_num [vlan] Verify the multicast group configuration. Console> (enable) set cam static...
Software Guide
Page 301
...enable) clear multicast router 2/12 Port 2/12 cleared from multicast router port list. Console> (enable) Filtering IGMP Traffic Internet Group Management Protocol (IGMP) filtering allows an administrator to disable a multicast group entry from the CAM table. Command clear cam mac_addr [vlan] This example shows how to configure IP multicast group profiles consisting of one of IP multicast addresses. Console> (enable) Disabling Multicast Group Entries To disable manually configured multicast group entries, perform this task in privileged mode: Task Disable a specific manually...
...enable) clear multicast router 2/12 Port 2/12 cleared from multicast router port list. Console> (enable) Filtering IGMP Traffic Internet Group Management Protocol (IGMP) filtering allows an administrator to disable a multicast group entry from the CAM table. Command clear cam mac_addr [vlan] This example shows how to configure IP multicast group profiles consisting of one of IP multicast addresses. Console> (enable) Disabling Multicast Group Entries To disable manually configured multicast group entries, perform this task in privileged mode: Task Disable a specific manually...
Software Guide
Page 378
... Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 IP_address [[IP_address] ...] Verify the SNMP configuration. The length of the alias can specify and display an interface alias. To specify and display an interface alias, perform this task in privileged mode: Step 1 Step 2 Task Specify an interface alias. Command set snmp access-list 2 172.20.60.7 mask 255.255.255.0 Access number 2 has been updated with 172.20.60.8 Console> (enable...
... Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 IP_address [[IP_address] ...] Verify the SNMP configuration. The length of the alias can specify and display an interface alias. To specify and display an interface alias, perform this task in privileged mode: Step 1 Step 2 Task Specify an interface alias. Command set snmp access-list 2 172.20.60.7 mask 255.255.255.0 Access number 2 has been updated with 172.20.60.8 Console> (enable...
Software Guide
Page 382
... table from the NMS. Configuring SNMPv3 from the command-line interface (CLI), perform this task in different security levels. Configure the MIB views. Configuring SNMPv3 from an NMS Chapter 24 Configuring SNMP Configuring SNMPv3 from an NMS To configure SNMP from a Network Management System (NMS), refer to your NMS documentation (also see the "Using CiscoWorks2000" section on the SNMP commands that are supported by the Catalyst enterprise LAN switches, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. set snmp...
... table from the NMS. Configuring SNMPv3 from the command-line interface (CLI), perform this task in different security levels. Configure the MIB views. Configuring SNMPv3 from an NMS Chapter 24 Configuring SNMP Configuring SNMPv3 from an NMS To configure SNMP from a Network Management System (NMS), refer to your NMS documentation (also see the "Using CiscoWorks2000" section on the SNMP commands that are supported by the Catalyst enterprise LAN switches, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. set snmp...
Software Guide
Page 423
... W DC power supply with different types or wattages, the switch uses only one power supply is P + (P * ratio). • See Table 28-1 on page 28-4 for a list of the maximum available power for chassis and inline power for each power supply. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-3 If you use power supplies with different types or wattages in your switch is set your switch to combined mode and only one power supply. Note...
... W DC power supply with different types or wattages, the switch uses only one power supply is P + (P * ratio). • See Table 28-1 on page 28-4 for a list of the maximum available power for chassis and inline power for each power supply. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-3 If you use power supplies with different types or wattages in your switch is set your switch to combined mode and only one power supply. Note...
Software Guide
Page 446
... fail. 30-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Understanding How Authentication Works Chapter 30 Configuring Switch Access Using AAA • Local user authentication • TACACS+ authentication • RADIUS authentication • Kerberos authentication Note Kerberos authentication does not work . When local authentication is enabled together with the set authentication login lockout command. (You would use the set authentication enable attempt command to set a delay time for Telnet connections...
... fail. 30-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Understanding How Authentication Works Chapter 30 Configuring Switch Access Using AAA • Local user authentication • TACACS+ authentication • RADIUS authentication • Kerberos authentication Note Kerberos authentication does not work . When local authentication is enabled together with the set authentication login lockout command. (You would use the set authentication enable attempt command to set a delay time for Telnet connections...
Software Guide
Page 457
Console> (enable) Setting the Enable Password The enable password controls access to the user mode CLI. Command set the login password for privileged mode. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-13 To set enablepass This example shows how to activate case sensitivity. Note Passwords that are set in privileged mode: Task Set the password for local authentication, perform this task in software release 5.3 and earlier releases remain non-case sensitive. You must reset the...
Console> (enable) Setting the Enable Password The enable password controls access to the user mode CLI. Command set the login password for privileged mode. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-13 To set enablepass This example shows how to activate case sensitivity. Note Passwords that are set in privileged mode: Task Set the password for local authentication, perform this task in software release 5.3 and earlier releases remain non-case sensitive. You must reset the...
Software Guide
Page 459
.... Step 2 Verify the local user account. Command set enablepass command, as appropriate. picard 15 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-15 The login password is null for 30 seconds when you are connected to the console port. Chapter 30 Configuring Switch Access Using AAA Configuring Authentication Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Connect to the switch through a Telnet connection. At the "Enter Password" prompt, press Return...
.... Step 2 Verify the local user account. Command set enablepass command, as appropriate. picard 15 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-15 The login password is null for 30 seconds when you are connected to the console port. Chapter 30 Configuring Switch Access Using AAA Configuring Authentication Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Connect to the switch through a Telnet connection. At the "Enter Password" prompt, press Return...
Software Guide
Page 480
... Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Configuring Authentication Chapter 30 Configuring Switch Access Using AAA As an additional layer of security, you do not make Kerberos authentication mandatory and Kerberos authentication fails, the application attempts to authenticate users using the default method of authentication for a password. Command set kerberos credentials forward set kerberos clients mandatory This example shows how to configure clients to forward user credentials and verify the configuration: Console> (enable...
... Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Configuring Authentication Chapter 30 Configuring Switch Access Using AAA As an additional layer of security, you do not make Kerberos authentication mandatory and Kerberos authentication fails, the application attempts to authenticate users using the default method of authentication for a password. Command set kerberos credentials forward set kerberos clients mandatory This example shows how to configure clients to forward user credentials and verify the configuration: Console> (enable...