Software Configuration Guide
Page 12
...19 Configuring an Ethernet Interface as a Trunk Port 12-19 Interaction with Other Features 12-20 Configuring a Trunk Port 12-20 Defining the Allowed VLANs on ...for Untagged Traffic 12-23 Configuring Trunk Ports for Load Sharing 12-24 Load Sharing Using STP Port Priorities 12-24 Load Sharing Using STP Path Cost 12...-26 Configuring VMPS 12-27 Understanding VMPS 12-27 Dynamic-Access Port... the IP Address of the VMPS 12-30 Configuring Dynamic-Access Ports on VMPS Clients 12-30 Reconfirming VLAN Memberships 12-31 Changing ...
...19 Configuring an Ethernet Interface as a Trunk Port 12-19 Interaction with Other Features 12-20 Configuring a Trunk Port 12-20 Defining the Allowed VLANs on ...for Untagged Traffic 12-23 Configuring Trunk Ports for Load Sharing 12-24 Load Sharing Using STP Port Priorities 12-24 Load Sharing Using STP Path Cost 12...-26 Configuring VMPS 12-27 Understanding VMPS 12-27 Dynamic-Access Port... the IP Address of the VMPS 12-30 Configuring Dynamic-Access Ports on VMPS Clients 12-30 Reconfirming VLAN Memberships 12-31 Changing ...
Software Configuration Guide
Page 17
... of IGMP Groups 19-24 Configuring the IGMP Throttling Action 19-24 Displaying IGMP Filtering and Throttling Configuration 19-26 Configuring Port-Based Traffic Control 20-1...Ports 20-5 Default Protected Port Configuration 20-5 Protected Port Configuration Guidelines 20-5 Configuring a Protected Port 20-5 Configuring Port Blocking 20-6 Default Port Blocking Configuration 20-6 Blocking Flooded Traffic on an Interface 20-6 Configuring Port Security 20-7 Understanding Port Security 20-7 Secure MAC Addresses 20-8 Security Violations 20-9 Default Port Security Configuration 20-10 Catalyst 3560 Switch...
... of IGMP Groups 19-24 Configuring the IGMP Throttling Action 19-24 Displaying IGMP Filtering and Throttling Configuration 19-26 Configuring Port-Based Traffic Control 20-1...Ports 20-5 Default Protected Port Configuration 20-5 Protected Port Configuration Guidelines 20-5 Configuring a Protected Port 20-5 Configuring Port Blocking 20-6 Default Port Blocking Configuration 20-6 Blocking Flooded Traffic on an Interface 20-6 Configuring Port Security 20-7 Understanding Port Security 20-7 Secure MAC Addresses 20-8 Security Violations 20-9 Default Port Security Configuration 20-10 Catalyst 3560 Switch...
Software Configuration Guide
Page 19
Contents 24 C H A P T E R 25 C H A P T E R 78-16156-01 Destination Port 23-7 RSPAN VLAN 23-8 SPAN and RSPAN Interaction with Other Features 23-8 Configuring SPAN and RSPAN 23-9 Default SPAN and RSPAN Configuration 23-9 Configuring Local ... 25-5 Enabling and Disabling Time Stamps on Log Messages 25-7 Enabling and Disabling Sequence Numbers in Log Messages 25-7 Defining the Message Severity Level 25-8 Catalyst 3560 Switch Software Configuration Guide xix
Contents 24 C H A P T E R 25 C H A P T E R 78-16156-01 Destination Port 23-7 RSPAN VLAN 23-8 SPAN and RSPAN Interaction with Other Features 23-8 Configuring SPAN and RSPAN 23-9 Default SPAN and RSPAN Configuration 23-9 Configuring Local ... 25-5 Enabling and Disabling Time Stamps on Log Messages 25-7 Enabling and Disabling Sequence Numbers in Log Messages 25-7 Defining the Message Severity Level 25-8 Catalyst 3560 Switch Software Configuration Guide xix
Software Configuration Guide
Page 22
...22 Auto-QoS Configuration Guidelines 28-22 Enabling Auto-QoS for VoIP 28-23 Auto-QoS Configuration Example 28-24 Displaying Auto-QoS Information 28-26 Configuring Standard QoS 28-26 Default Standard QoS Configuration 28-27 Default ... Standard QoS Configuration Guidelines 28-29 Enabling QoS Globally 28-30 Configuring Classification Using Port Trust States 28-30 Configuring the Trust State on Ports within the QoS Domain 28-31 Configuring the CoS Value for an Interface 28-... Map 28-50 Configuring the DSCP-to-DSCP-Mutation Map 28-51 Catalyst 3560 Switch Software Configuration Guide xxii 78-16156-01
...22 Auto-QoS Configuration Guidelines 28-22 Enabling Auto-QoS for VoIP 28-23 Auto-QoS Configuration Example 28-24 Displaying Auto-QoS Information 28-26 Configuring Standard QoS 28-26 Default Standard QoS Configuration 28-27 Default ... Standard QoS Configuration Guidelines 28-29 Enabling QoS Globally 28-30 Configuring Classification Using Port Trust States 28-30 Configuring the Trust State on Ports within the QoS Domain 28-31 Configuring the CoS Value for an Interface 28-... Map 28-50 Configuring the DSCP-to-DSCP-Mutation Map 28-51 Catalyst 3560 Switch Software Configuration Guide xxii 78-16156-01
Software Configuration Guide
Page 46
...networks (requires the EMI) • DHCP relay for power, and grants power only when it is no power on the circuit • 24-port PoE switch provides 15.4 W of power on each VLAN to maintain its own autonomous data-link domain • Policy-based routing (PBR) for ...Power over Ethernet (PoE) Features • Ability to provide power to connected Cisco pre-standard and IEEE 802.3af-compliant powered devices from all 10/100 Ethernet ports if the switch senses that there is available Catalyst 3560 Switch Software Configuration Guide 1-8 78-16156-01 Features Chapter 1 Overview Layer 3 ...
...networks (requires the EMI) • DHCP relay for power, and grants power only when it is no power on the circuit • 24-port PoE switch provides 15.4 W of power on each VLAN to maintain its own autonomous data-link domain • Policy-based routing (PBR) for ...Power over Ethernet (PoE) Features • Ability to provide power to connected Cisco pre-standard and IEEE 802.3af-compliant powered devices from all 10/100 Ethernet ports if the switch senses that there is available Catalyst 3560 Switch Software Configuration Guide 1-8 78-16156-01 Features Chapter 1 Overview Layer 3 ...
Software Configuration Guide
Page 89
...host name to be assigned to the switch based on UNIX) The TFTP server base directory is set to multiple switched virtual interfaces (SVIs) or ports: Step 1 Step 2 Command configure ...mode. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 4-9 Switches B through Switch D. Manually Assigning IP Information Beginning in the same way. Configuration Explanation In Figure 4-3, Switch A reads its host name...switchc 10.0.0.23 ip host switchd 10.0.0.24 DHCP Client Configuration No configuration file is given in the DHCP server reply, Switch A reads the network-confg file from...
...host name to be assigned to the switch based on UNIX) The TFTP server base directory is set to multiple switched virtual interfaces (SVIs) or ports: Step 1 Step 2 Command configure ...mode. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 4-9 Switches B through Switch D. Manually Assigning IP Information Beginning in the same way. Configuration Explanation In Figure 4-3, Switch A reads its host name...switchc 10.0.0.23 ip host switchd 10.0.0.24 DHCP Client Configuration No configuration file is given in the DHCP server reply, Switch A reads the network-confg file from...
Software Configuration Guide
Page 118
... (cisco WS-C37xx-24, HC, ...) stack1 (cisco WS-3750-48, CC, 0) G-M-C3550-24 (cisco WS-C3550-24, H Active command switch. Enter the command-switch password. Verifying a Switch Cluster Figure 5-11 Standby Command Configuration Window Chapter 5 Clustering Switches stack10 (cisco WS-C3750-24TS, HC, .. Must be changed. 93336 Verifying a Switch Cluster When you can also display port and switch statistics from a cluster member switch. 5-20 Catalyst 3560 Switch...
... (cisco WS-C37xx-24, HC, ...) stack1 (cisco WS-3750-48, CC, 0) G-M-C3550-24 (cisco WS-C3550-24, H Active command switch. Enter the command-switch password. Verifying a Switch Cluster Figure 5-11 Standby Command Configuration Window Chapter 5 Clustering Switches stack10 (cisco WS-C3750-24TS, HC, .. Must be changed. 93336 Verifying a Switch Cluster When you can also display port and switch statistics from a cluster member switch. 5-20 Catalyst 3560 Switch...
Software Configuration Guide
Page 178
... information in default situations. You must define an enable password by using the enable password global configuration command. - This procedure is automatically applied to all ports. • For list-name, specify a character string to configure login authentication. For more information, see the "Identifying the RADIUS Server Host" section ... for authentication. Use the password password line configuration command. - Enter line configuration mode, and configure the lines to apply the authentication list. 8-24 Catalyst 3560 Switch Software Configuration Guide 78-16156-01
... information in default situations. You must define an enable password by using the enable password global configuration command. - This procedure is automatically applied to all ports. • For list-name, specify a character string to configure login authentication. For more information, see the "Identifying the RADIUS Server Host" section ... for authentication. Use the password password line configuration command. - Enter line configuration mode, and configure the lines to apply the authentication list. 8-24 Catalyst 3560 Switch Software Configuration Guide 78-16156-01
Software Configuration Guide
Page 232
... Catalyst 3560 Switch Software Configuration Guide 78-16156-01 mdix auto Enable Auto-MDIX on the interface. On a 48-port PoE switch, any 24 of the 48 10/100 ports provide 15.4 W of power, or any combination of ports provide an average of 7.7 W of 370 W. show controllers ethernet-controller Verify the operational state of power. On a 24-port PoE switch...
... Catalyst 3560 Switch Software Configuration Guide 78-16156-01 mdix auto Enable Auto-MDIX on the interface. On a 48-port PoE switch, any 24 of the 48 10/100 ports provide 15.4 W of power, or any combination of ports provide an average of 7.7 W of 370 W. show controllers ethernet-controller Verify the operational state of power. On a 24-port PoE switch...
Software Configuration Guide
Page 260
...ports, and configuration information. For more Ethernet switch interfaces and another networking device such as a router or a switch. Ethernet trunks carry the traffic of switches that are available on all Ethernet interfaces: • Inter-Switch Link (ISL)-ISL is Cisco... (accessed by ISL trunks. 12-16 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Displaying...Port, page 12-19 • Configuring Trunk Ports for monitoring VLANs. Display status of all VLANs or the specified VLAN on the switch. Table 12-3 lists the commands for Load Sharing, page 12-24...
...ports, and configuration information. For more Ethernet switch interfaces and another networking device such as a router or a switch. Ethernet trunks carry the traffic of switches that are available on all Ethernet interfaces: • Inter-Switch Link (ISL)-ISL is Cisco... (accessed by ISL trunks. 12-16 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Displaying...Port, page 12-19 • Configuring Trunk Ports for monitoring VLANs. Display status of all VLANs or the specified VLAN on the switch. Table 12-3 lists the commands for Load Sharing, page 12-24...
Software Configuration Guide
Page 264
...; We recommend that you configure no more than 24 trunk ports in PVST mode and no more than 40 trunk ports in MST mode. • If you try to all ports follow these ways: • A trunk port cannot be grouped into EtherChannel port groups, but all trunks in the group must... interface stops trunking. 12-20 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 You must have the same configuration. If you try to change the configuration of an 802.1X-enabled port to dynamic, the port mode is not enabled. Configuring a Trunk Port Beginning in privileged EXEC mode, ...
...; We recommend that you configure no more than 24 trunk ports in PVST mode and no more than 40 trunk ports in MST mode. • If you try to all ports follow these ways: • A trunk port cannot be grouped into EtherChannel port groups, but all trunks in the group must... interface stops trunking. 12-20 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 You must have the same configuration. If you try to change the configuration of an 802.1X-enabled port to dynamic, the port mode is not enabled. Configuring a Trunk Port Beginning in privileged EXEC mode, ...
Software Configuration Guide
Page 268
... 10 retain the default port priority of 128 on trunk ports by Using STP Port Priorities Switch A Trunk 1 VLANs 8 - 10 (priority 16) VLANs 3 - 6 (priority 128) Switch B Trunk 2 VLANs 3 - 6 (priority 16) VLANs 8 - 10 (priority 128) 93370 12-24 Catalyst 3560 Switch Software Configuration Guide 78-...16156-01 You can be connected to the default native VLAN, VLAN 1, use the no switchport trunk native vlan interface configuration command. The trunk port with the higher priority (lower values) for...
... 10 retain the default port priority of 128 on trunk ports by Using STP Port Priorities Switch A Trunk 1 VLANs 8 - 10 (priority 16) VLANs 3 - 6 (priority 128) Switch B Trunk 2 VLANs 3 - 6 (priority 16) VLANs 8 - 10 (priority 128) 93370 12-24 Catalyst 3560 Switch Software Configuration Guide 78-...16156-01 You can be connected to the default native VLAN, VLAN 1, use the no switchport trunk native vlan interface configuration command. The trunk port with the higher priority (lower values) for...
Software Configuration Guide
Page 269
... Step 13 Step 14 Step 15 Step 16 Step 17 Step 18 Step 19 Step 20 Step 21 Step 22 Step 23 Step 24 Command configure terminal vtp domain domain-name vtp mode server end show vtp status show vlan configure terminal interface gigabitethernet 0/1 switchport trunk ... exist in the configuration file. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 12-25 Return to privileged EXEC mode. Verify that connect to the trunk ports configured on Switch A. Assign the port priority of 10 for VLANs 3 through 11 on Switch A. Enter interface configuration mode, and define the ...
... Step 13 Step 14 Step 15 Step 16 Step 17 Step 18 Step 19 Step 20 Step 21 Step 22 Step 23 Step 24 Command configure terminal vtp domain domain-name vtp mode server end show vtp status show vlan configure terminal interface gigabitethernet 0/1 switchport trunk ... exist in the configuration file. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 12-25 Return to privileged EXEC mode. Verify that connect to the trunk ports configured on Switch A. Assign the port priority of 10 for VLANs 3 through 11 on Switch A. Enter interface configuration mode, and define the ...
Software Configuration Guide
Page 318
.... For cost, the range is derived from the media speed of VLANs separated by using spanning-tree port priorities, see the "Configuring Trunk Ports for Load Sharing" section on page 12-24. A lower path cost represents higher-speed transmission. • For vlan-id, you want selected first...all interfaces have the same cost value, spanning tree puts the interface with the lowest interface number in the configuration file. 15-18 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 This procedure is 1 to put in privileged EXEC mode, follow these steps to privileged EXEC mode....
.... For cost, the range is derived from the media speed of VLANs separated by using spanning-tree port priorities, see the "Configuring Trunk Ports for Load Sharing" section on page 12-24. A lower path cost represents higher-speed transmission. • For vlan-id, you want selected first...all interfaces have the same cost value, spanning tree puts the interface with the lowest interface number in the configuration file. 15-18 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 This procedure is 1 to put in privileged EXEC mode, follow these steps to privileged EXEC mode....
Software Configuration Guide
Page 319
...ports by a hyphen, or a series of a VLAN. • For vlan-id, you use the show running -config startup-config Purpose Enter global configuration mode. For information on how to the default setting, use the no spanning-tree vlan vlan-id priority global configuration command. 78-16156-01 Catalyst 3560 Switch...Features Note The show spanning-tree interface interface-id privileged EXEC command displays information only for Load Sharing" section on page 12-24. Otherwise, you can specify a single VLAN identified by VLAN ID number, a range of VLANs separated by using this command...
...ports by a hyphen, or a series of a VLAN. • For vlan-id, you use the show running -config startup-config Purpose Enter global configuration mode. For information on how to the default setting, use the no spanning-tree vlan vlan-id priority global configuration command. 78-16156-01 Catalyst 3560 Switch...Features Note The show spanning-tree interface interface-id privileged EXEC command displays information only for Load Sharing" section on page 12-24. Otherwise, you can specify a single VLAN identified by VLAN ID number, a range of VLANs separated by using this command...
Software Configuration Guide
Page 392
...also can use this command to return to the default, which is set to an EtherChannel port group. • When the maximum group limitation is no effect. 19-24 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 The interface can be applied to have no maximum set....be applied to an EtherChannel port group. To remove the maximum group limitation and return to it by using the ip igmp max-groups action replace interface configuration command. Switch(config)# interface gigabitethernet0/2 Switch(config-if)# ip igmp max-groups 25 Switch(config-if)# end Configuring the...
...also can use this command to return to the default, which is set to an EtherChannel port group. • When the maximum group limitation is no effect. 19-24 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 The interface can be applied to have no maximum set....be applied to an EtherChannel port group. To remove the maximum group limitation and return to it by using the ip igmp max-groups action replace interface configuration command. Switch(config)# interface gigabitethernet0/2 Switch(config-if)# ip igmp max-groups 25 Switch(config-if)# end Configuring the...
Software Configuration Guide
Page 506
...255.255 and denies any source to an IP ACL This example denies HTTP traffic on IP on a Layer 3 port. Switch(config)# time-range udp-yes Switch(config)# periodic weekend 12:00 to incoming traffic on Monday through 179.69.255.255 with ACLs Named ACLs This ...1.2.3.4. Switch(config)# ip access-list extended strict Switch(config-ext-nacl)# deny tcp any any eq www time-range no switchport Switch(config-if)# ip address 2.0.5.1 255.255.255.0 Switch(config-if)# ip access-group Internet_filter out Switch(config-if)# ip access-group marketing_group in 27-24 Catalyst 3560 Switch Software...
...255.255 and denies any source to an IP ACL This example denies HTTP traffic on IP on a Layer 3 port. Switch(config)# time-range udp-yes Switch(config)# periodic weekend 12:00 to incoming traffic on Monday through 179.69.255.255 with ACLs Named ACLs This ...1.2.3.4. Switch(config)# ip access-list extended strict Switch(config-ext-nacl)# deny tcp any any eq www time-range no switchport Switch(config-if)# ip address 2.0.5.1 255.255.255.0 Switch(config-if)# ip access-group Internet_filter out Switch(config-if)# ip access-group marketing_group in 27-24 Catalyst 3560 Switch Software...
Software Configuration Guide
Page 543
...47 Switch(config)# mls qos srr-queue output dscp-map queue 2 threshold 3 24 25 26 27 28 29 30 31 Switch(...Switch(config-if)# srr-queue bandwidth shape 10 0 0 0 Switch(config-if)# srr-queue bandwidth share 10 10 60 20 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 28-21 Switch(config)# no mls qos srr-queue input dscp-map Switch...63 Switch(config)# mls qos srr-queue input dscp-map queue 2 threshold 3 24 25 27 28 29 30 31 40 Switch(...-QoS Configuration (continued) Description Automatically Generated Command The switch automatically maps DSCP values to an ingress queue and ...
...47 Switch(config)# mls qos srr-queue output dscp-map queue 2 threshold 3 24 25 26 27 28 29 30 31 Switch(...Switch(config-if)# srr-queue bandwidth shape 10 0 0 0 Switch(config-if)# srr-queue bandwidth share 10 10 60 20 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 28-21 Switch(config)# no mls qos srr-queue input dscp-map Switch...63 Switch(config)# mls qos srr-queue input dscp-map queue 2 threshold 3 24 25 27 28 29 30 31 40 Switch(...-QoS Configuration (continued) Description Automatically Generated Command The switch automatically maps DSCP values to an ingress queue and ...
Software Configuration Guide
Page 702
...RPF Check Network 151.10.0.0/16 198.14.32.0/32 204.1.16.0/24 Port Gigabit Ethernet 0/1 Gigabit Ethernet 0/3 Gigabit Ethernet 0/4 32-6 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 The router or multilayer switch examines the source address of the arriving multicast packet to decide ...IP address in the packet, by a multicast group address in the destination address field of the IP packet. Understanding Cisco's Implementation of IP Multicast Routing Chapter 32 Configuring IP Multicast Routing Multicast Forwarding and Reverse Path Check With unicast routing, routers and...
...RPF Check Network 151.10.0.0/16 198.14.32.0/32 204.1.16.0/24 Port Gigabit Ethernet 0/1 Gigabit Ethernet 0/3 Gigabit Ethernet 0/4 32-6 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 The router or multilayer switch examines the source address of the arriving multicast packet to decide ...IP address in the packet, by a multicast group address in the destination address field of the IP packet. Understanding Cisco's Implementation of IP Multicast Routing Chapter 32 Configuring IP Multicast Routing Multicast Forwarding and Reverse Path Check With unicast routing, routers and...
Software Configuration Guide
Page 858
...conflicts, configuration 35-11 connections, secure remote 8-38 connectivity problems 35-13, 35-14, 35-16 consistency checks in VTP version 2 13-4 console port, connecting to 2-9 conventions command xxxiv for examples xxxiv publication xxxiv text xxxiv corrupted software, recovery steps with XMODEM 35-2 CoS in Layer 2 frames 28... bridging 34-3 HSRP 31-4 IGMP 32-26 IGMP filtering 19-21 IGMP snooping 19-7 IGMP throttling 19-21 IGRP 30-24 initial switch information 4-3 IP addressing, IP routing 30-4 IP multicast routing 32-8 IN-8 Catalyst 3560 Switch Software Configuration Guide 78-16156-01
...conflicts, configuration 35-11 connections, secure remote 8-38 connectivity problems 35-13, 35-14, 35-16 consistency checks in VTP version 2 13-4 console port, connecting to 2-9 conventions command xxxiv for examples xxxiv publication xxxiv text xxxiv corrupted software, recovery steps with XMODEM 35-2 CoS in Layer 2 frames 28... bridging 34-3 HSRP 31-4 IGMP 32-26 IGMP filtering 19-21 IGMP snooping 19-7 IGMP throttling 19-21 IGRP 30-24 initial switch information 4-3 IP addressing, IP routing 30-4 IP multicast routing 32-8 IN-8 Catalyst 3560 Switch Software Configuration Guide 78-16156-01