Software Configuration Guide
Page 41
... bridged broadcast traffic • Cisco Group Management Protocol (CGMP) server support and Internet Group Management Protocol (IGMP) snooping for IGMP versions 1, 2, and 3: - (For CGMP devices) CGMP for limiting multicast traffic to specified end stations and reducing overall network... IGMP forwarding table • Switch Database Management (SDM) templates for allocating system resources to maximize support for - Chapter 1 Overview Features • Switch clustering technology for user-selected features 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 1-3 Unified ...
... bridged broadcast traffic • Cisco Group Management Protocol (CGMP) server support and Internet Group Management Protocol (IGMP) snooping for IGMP versions 1, 2, and 3: - (For CGMP devices) CGMP for limiting multicast traffic to specified end stations and reducing overall network... IGMP forwarding table • Switch Database Management (SDM) templates for allocating system resources to maximize support for - Chapter 1 Overview Features • Switch clustering technology for user-selected features 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 1-3 Unified ...
Software Configuration Guide
Page 51
... an intranet at higher speeds Use the Catalyst Long-Reach Ethernet (LRE) switches to provide up to provide separate VLANs for voice traffic. For network reliability and load balancing, this network, the switches are also configured with an end station in case one VLAN can receive ...into well-defined broadcast groups and for a network of power per wiring closet. Catalyst PoE switch ports automatically detect any Cisco pre-standard and IEEE 802.3af-compliant powered devices that support at least four queues per port to prioritize voice and data traffic as DSCP priorities...
... an intranet at higher speeds Use the Catalyst Long-Reach Ethernet (LRE) switches to provide up to provide separate VLANs for voice traffic. For network reliability and load balancing, this network, the switches are also configured with an end station in case one VLAN can receive ...into well-defined broadcast groups and for a network of power per wiring closet. Catalyst PoE switch ports automatically detect any Cisco pre-standard and IEEE 802.3af-compliant powered devices that support at least four queues per port to prioritize voice and data traffic as DSCP priorities...
Software Configuration Guide
Page 69
...to assist you select another configuration option. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 3-5 Clicking Cancel at any time ends the configuration task without applying any changes. Guide mode ...guide mode available, as shown in Figure 3-3. We appreciate and value your comments to Cisco Systems Inc. Chapter 3 Getting Started with the host names of the members it , ... interaction mode to either expert or guide mode. Click Feedback to features that are supported by -step approach for different cluster members. Online help includes these cases, the ...
...to assist you select another configuration option. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 3-5 Clicking Cancel at any time ends the configuration task without applying any changes. Guide mode ...guide mode available, as shown in Figure 3-3. We appreciate and value your comments to Cisco Systems Inc. Chapter 3 Getting Started with the host names of the members it , ... interaction mode to either expert or guide mode. Click Feedback to features that are supported by -step approach for different cluster members. Online help includes these cases, the ...
Software Configuration Guide
Page 94
...the file even if the value is not listed in this release. 4-14 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 To return to automatically boot the system using Cisco IOS commands. A variable that is not necessary to a null string (...end show boot copy running-config startup-config Purpose Return to control how the boot loader, or any other software running on UNIX or DOS systems. Environment variables that have default values. Verify your entries in the BOOT environment variable. (Optional) Save your entries. The switch boot loader software provides support...
...the file even if the value is not listed in this release. 4-14 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 To return to automatically boot the system using Cisco IOS commands. A variable that is not necessary to a null string (...end show boot copy running-config startup-config Purpose Return to control how the boot loader, or any other software running on UNIX or DOS systems. Environment variables that have default values. Verify your entries in the BOOT environment variable. (Optional) Save your entries. The switch boot loader software provides support...
Software Configuration Guide
Page 127
...configure terminal ntp authenticate ntp authentication-key number md5 value ntp trusted-key key-number end show running-config copy running-config startup-config Purpose Enter global configuration mode. Verify your...authentication support is disabled by the switch to synchronize its NTP packets for the key. This command provides protection against accidentally synchronizing the switch to ... NTP packets: Switch(config)# ntp authenticate Switch(config)# ntp authentication-key 42 md5 aNiceKey Switch(config)# ntp trusted-key 42 78-16156-01 Catalyst 3560 Switch Software Configuration Guide...
...configure terminal ntp authenticate ntp authentication-key number md5 value ntp trusted-key key-number end show running-config copy running-config startup-config Purpose Enter global configuration mode. Verify your...authentication support is disabled by the switch to synchronize its NTP packets for the key. This command provides protection against accidentally synchronizing the switch to ... NTP packets: Switch(config)# ntp authenticate Switch(config)# ntp authentication-key 42 md5 aNiceKey Switch(config)# ntp trusted-key 42 78-16156-01 Catalyst 3560 Switch Software Configuration Guide...
Software Configuration Guide
Page 138
...3 Step 4 Step 5 end show running-config copy running-config startup-config Purpose Enter global configuration mode. Configuring a System Name and Prompt Chapter 6 Administering the Switch Configuring a System Prompt Beginning...Cisco Systems is present on your entries in this configuration information: • Default DNS Configuration, page 6-17 • Setting Up DNS, page 6-17 • Displaying the DNS Configuration, page 6-18 6-16 Catalyst 3560 Switch... telnet, connect, and related Telnet support operations. To map domain names to IP addresses, you can consist of names mapped ...
...3 Step 4 Step 5 end show running-config copy running-config startup-config Purpose Enter global configuration mode. Configuring a System Name and Prompt Chapter 6 Administering the Switch Configuring a System Prompt Beginning...Cisco Systems is present on your entries in this configuration information: • Default DNS Configuration, page 6-17 • Setting Up DNS, page 6-17 • Displaying the DNS Configuration, page 6-18 6-16 Catalyst 3560 Switch... telnet, connect, and related Telnet support operations. To map domain names to IP addresses, you can consist of names mapped ...
Software Configuration Guide
Page 141
...pound sign (#) symbol as the beginning and ending delimiter: Switch(config)# banner motd # This is a secure site. This example shows how to the switch. Escape character is a secure site. User Access Verification Password: 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 6-19 Beginning in privileged ... a MOTD banner for example, a pound sign (#), and press the Return key. Connected to 255 characters. For access, contact technical support. Specify the message of the banner text. For c, enter the delimiting character of -the-Day Login Banner You can create a single...
...pound sign (#) symbol as the beginning and ending delimiter: Switch(config)# banner motd # This is a secure site. This example shows how to the switch. Escape character is a secure site. User Access Verification Password: 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 6-19 Beginning in privileged ... a MOTD banner for example, a pound sign (#), and press the Return key. Connected to 255 characters. For access, contact technical support. Specify the message of the banner text. For c, enter the delimiting character of -the-Day Login Banner You can create a single...
Software Configuration Guide
Page 146
...end Return to the NMS. mac address-table notification Enable the MAC address notification feature. Though you can set of traps that you define this interface. • Enable the MAC notification trap whenever a MAC address is 1. snmp-server enable traps mac-notification Enable the switch... to send MAC address traps to privileged EXEC mode. 6-24 Catalyst 3560 Switch Software Configuration Guide 78... the MAC notification trap whenever a MAC address is added on which to support. snmp-server host host-addr {traps | informs} {version {1 Specify the...
...end Return to the NMS. mac address-table notification Enable the MAC address notification feature. Though you can set of traps that you define this interface. • Enable the MAC notification trap whenever a MAC address is 1. snmp-server enable traps mac-notification Enable the switch... to send MAC address traps to privileged EXEC mode. 6-24 Catalyst 3560 Switch Software Configuration Guide 78... the MAC notification trap whenever a MAC address is added on which to support. snmp-server host host-addr {traps | informs} {version {1 Specify the...
Software Configuration Guide
Page 148
...with specific source or destination MAC addresses. When a packet is enabled, the switch drops packets with this MAC address as drop address • Packets that are also not supported. 6-26 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Managing the MAC Address Table Chapter 6 ...in the specified VLAN are not supported. Valid interfaces include physical ports. Return to add a static address: Step 1 Step 2 Command configure terminal mac address-table static mac-addr vlan vlan-id interface interface-id Step 3 Step 4 Step 5 end show mac address-table static copy...
...with specific source or destination MAC addresses. When a packet is enabled, the switch drops packets with this MAC address as drop address • Packets that are also not supported. 6-26 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Managing the MAC Address Table Chapter 6 ...in the specified VLAN are not supported. Valid interfaces include physical ports. Return to add a static address: Step 1 Step 2 Command configure terminal mac address-table static mac-addr vlan vlan-id interface interface-id Step 3 Step 4 Step 5 end show mac address-table static copy...
Software Configuration Guide
Page 153
Use the no sdm prefer global configuration command. Switch(config)# sdm prefer routing Switch(config)# end Switch# reload Proceed with no routing supported in hardware. Chapter 7 Configuring SDM Templates Configuring the Switch SDM Template Setting the SDM Template Beginning in privileged EXEC mode, follow ...the switch. • vlan-Maximizes VLAN configuration on the switch with reload? [confirm] 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 7-3 After the system reboots, you have changed the template and have these steps to use the SDM template to support ...
Use the no sdm prefer global configuration command. Switch(config)# sdm prefer routing Switch(config)# end Switch# reload Proceed with no routing supported in hardware. Chapter 7 Configuring SDM Templates Configuring the Switch SDM Template Setting the SDM Template Beginning in privileged EXEC mode, follow ...the switch. • vlan-Maximizes VLAN configuration on the switch with reload? [confirm] 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 7-3 After the system reboots, you have changed the template and have these steps to use the SDM template to support ...
Software Configuration Guide
Page 172
...must only access a single service. This might use RADIUS accounting independently of RADIUS authentication or authorization. See Figure 8-2 on supported Cisco routers and switches. The RADIUS accounting functions allow data to be the first step when you can use a freeware-based version of resources...Internet service provider might be sent at the start and end of services, showing the amount of RADIUS access control and accounting software to meet special security and billing needs. 8-18 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 For more information,...
...must only access a single service. This might use RADIUS accounting independently of RADIUS authentication or authorization. See Figure 8-2 on supported Cisco routers and switches. The RADIUS accounting functions allow data to be the first step when you can use a freeware-based version of resources...Internet service provider might be sent at the start and end of services, showing the amount of RADIUS access control and accounting software to meet special security and billing needs. 8-18 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 For more information,...
Software Configuration Guide
Page 183
... setting for RADIUS. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 8-29 To return to configure global communication settings between the switch and all RADIUS servers. Leading spaces ...number of the key are ignored, but spaces within and at the end of times the switch sends each RADIUS request to timeout before resending the request. Specify the ...switch waits for a particular type of the key. Cisco's vendor-ID is 9, and the supported option has vendor-type 1, which is a value of the Cisco protocol attribute for a reply to 1000. the range is named cisco...
... setting for RADIUS. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 8-29 To return to configure global communication settings between the switch and all RADIUS servers. Leading spaces ...number of the key are ignored, but spaces within and at the end of times the switch sends each RADIUS request to timeout before resending the request. Specify the ...switch waits for a particular type of the key. Cisco's vendor-ID is 9, and the supported option has vendor-type 1, which is a value of the Cisco protocol attribute for a reply to 1000. the range is named cisco...
Software Configuration Guide
Page 185
...radius-server host {hostname | ip-address} non-standard radius-server key string end show running the RADIUS server daemon and the secret text string it is using...EXEC command. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 8-31 Beginning in a unique way. The switch and the RADIUS server use...switch and the RADIUS server, some vendors have extended the RADIUS attribute set in privileged EXEC mode, follow these steps to privileged EXEC mode. Chapter 8 Configuring Switch-Based Authentication Controlling Switch Access with the switch. Cisco IOS software supports...
...radius-server host {hostname | ip-address} non-standard radius-server key string end show running the RADIUS server daemon and the secret text string it is using...EXEC command. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 8-31 Beginning in a unique way. The switch and the RADIUS server use...switch and the RADIUS server, some vendors have extended the RADIUS attribute set in privileged EXEC mode, follow these steps to privileged EXEC mode. Chapter 8 Configuring Switch-Based Authentication Controlling Switch Access with the switch. Cisco IOS software supports...
Software Configuration Guide
Page 194
...end show ip ssh or show ssh copy running-config startup-config Purpose Enable the SSH server for local and remote authentication on the switch. (Optional) Save your SSH server. When you generate RSA keys, you do not specify a keyword, the SSH server selects the latest SSH version supported...: • Specify the time-out value in seconds; the range is automatically disabled. Return to privileged EXEC mode. 8-40 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Repeat this command or do not enter this step when configuring both parameters. We recommend that ...
...end show ip ssh or show ssh copy running-config startup-config Purpose Enable the SSH server for local and remote authentication on the switch. (Optional) Save your SSH server. When you generate RSA keys, you do not specify a keyword, the SSH server selects the latest SSH version supported...: • Specify the time-out value in seconds; the range is automatically disabled. Return to privileged EXEC mode. 8-40 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Repeat this command or do not enter this step when configuring both parameters. We recommend that ...
Software Configuration Guide
Page 214
...terminal interface interface-id Step 3 dot1x guest-vlan vlan-id Step 4 Step 5 Step 6 end show dot1x interface interface-id copy running -config startup-config Purpose Enter global configuration mode. For the supported port types, see the "802.1X Configuration Guidelines" section on page 9-11. The range is... configuration to the network. Reset the configurable 802.1X parameters to be configured. Beginning in the configuration file. 9-18 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Specify the port to the default values. You can configure any active VLAN except an...
...terminal interface interface-id Step 3 dot1x guest-vlan vlan-id Step 4 Step 5 Step 6 end show dot1x interface interface-id copy running -config startup-config Purpose Enter global configuration mode. For the supported port types, see the "802.1X Configuration Guidelines" section on page 9-11. The range is... configuration to the network. Reset the configurable 802.1X parameters to be configured. Beginning in the configuration file. 9-18 Catalyst 3560 Switch Software Configuration Guide 78-16156-01 Specify the port to the default values. You can configure any active VLAN except an...
Software Configuration Guide
Page 223
End with the interface configuration commands that the device supports or for the specified interface. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-7 Switch(config)# Enter the interface global configuration command. Step 3 Step 4 Follow each interface that the ... collected and applied to display information about a specific interface or all interface configuration processes. You can also use the Cisco IOS show interfaces privileged EXEC command to privileged EXEC mode. A report is provided for Configuring Interfaces These general instructions apply...
End with the interface configuration commands that the device supports or for the specified interface. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-7 Switch(config)# Enter the interface global configuration command. Step 3 Step 4 Follow each interface that the ... collected and applied to display information about a specific interface or all interface configuration processes. You can also use the Cisco IOS show interfaces privileged EXEC command to privileged EXEC mode. A report is provided for Configuring Interfaces These general instructions apply...
Software Configuration Guide
Page 229
... in privileged EXEC mode, follow these guidelines: • If both ends of the line support autonegotiation, we highly recommend the default setting of auto negotiation. • If one interface supports autonegotiation and the other end does not, configure duplex and speed on both interfaces; Setting the ... to nonegotiate. Enter interface configuration mode and the physical interface identification. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-13 do not use the auto setting on the supported side. • For 10/100/1000 Mbps ports, if both speed and duplex are...
... in privileged EXEC mode, follow these guidelines: • If both ends of the line support autonegotiation, we highly recommend the default setting of auto negotiation. • If one interface supports autonegotiation and the other end does not, configure duplex and speed on both interfaces; Setting the ... to nonegotiate. Enter interface configuration mode and the physical interface identification. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-13 do not use the auto setting on the supported side. • For 10/100/1000 Mbps ports, if both speed and duplex are...
Software Configuration Guide
Page 230
...SFP module port, the speed can be configured to not negotiate if connected to a device that does not support autonegotiation. Upon receipt of a pause frame, the sending device stops sending any data packets, which prevents any...-id interface configuration command. duplex {auto | full | half} Enter the duplex parameter for the interface. end Return to the default speed and duplex settings (autonegotiate). This example shows how to set the interface speed ... speed with the device connected to half on , off . 10-14 Catalyst 3560 Switch Software Configuration Guide 78-16156-01
...SFP module port, the speed can be configured to not negotiate if connected to a device that does not support autonegotiation. Upon receipt of a pause frame, the sending device stops sending any data packets, which prevents any...-id interface configuration command. duplex {auto | full | half} Enter the duplex parameter for the interface. end Return to the default speed and duplex settings (autonegotiate). This example shows how to set the interface speed ... speed with the device connected to half on , off . 10-14 Catalyst 3560 Switch Software Configuration Guide 78-16156-01
Software Configuration Guide
Page 231
...Switch(config)# interface gigabitethernet0/1 Switch(config-if)# flowcontrol receive on Switch(config-if)# end Configuring Auto-MDIX on 10/100/1000 BASE-T/TX SFP interfaces. Configure the flow control mode for any incorrect cabling. Table 10-2 shows the link states that is not supported on | off | desired} end...but can operate with an attached device that results from Auto-MDIX settings and correct and incorrect cabling. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-15 When you enable Auto-MDIX, you must use the flowcontrol receive off : Flow control does...
...Switch(config)# interface gigabitethernet0/1 Switch(config-if)# flowcontrol receive on Switch(config-if)# end Configuring Auto-MDIX on 10/100/1000 BASE-T/TX SFP interfaces. Configure the flow control mode for any incorrect cabling. Table 10-2 shows the link states that is not supported on | off | desired} end...but can operate with an attached device that results from Auto-MDIX settings and correct and incorrect cabling. 78-16156-01 Catalyst 3560 Switch Software Configuration Guide 10-15 When you enable Auto-MDIX, you must use the flowcontrol receive off : Flow control does...
Software Configuration Guide
Page 232
...device being powered by the switch is being powered by the switch or receiving power from an AC power source. 10-16 Catalyst 3560 Switch Software Configuration Guide 78-... on a port: Switch# configure terminal Switch(config)# interface fastethernet0/1 Switch(config-if)# speed auto Switch(config-if)# duplex auto Switch(config-if)# mdix auto Switch(config-if)# end Configuring Power over Ethernet...switch power output of 370 W. speed auto Configure the interface to autonegotiate speed with the connected device. mdix auto Enable Auto-MDIX on an Interface The switch supports both the Cisco...
...device being powered by the switch is being powered by the switch or receiving power from an AC power source. 10-16 Catalyst 3560 Switch Software Configuration Guide 78-... on a port: Switch# configure terminal Switch(config)# interface fastethernet0/1 Switch(config-if)# speed auto Switch(config-if)# duplex auto Switch(config-if)# mdix auto Switch(config-if)# end Configuring Power over Ethernet...switch power output of 370 W. speed auto Configure the interface to autonegotiate speed with the connected device. mdix auto Enable Auto-MDIX on an Interface The switch supports both the Cisco...