Software Guide
Page 24
... Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) on the switch. xxiv Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Configuring VLAN Trunks on Fast Ethernet and Gigabit Ethernet Ports Describes how to configure Inter-Switch Link (ISL) and IEEE 802.1Q VLAN trunks on the switch. Configuring Port Security Describes how to configure port security on Fast Ethernet and Gigabit Ethernet ports. Using Switch TopN Reports Describes how to generate switch TopN reports on the switch. Configuring Multicast Services...
... Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) on the switch. xxiv Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Configuring VLAN Trunks on Fast Ethernet and Gigabit Ethernet Ports Describes how to configure Inter-Switch Link (ISL) and IEEE 802.1Q VLAN trunks on the switch. Configuring Port Security Describes how to configure port security on Fast Ethernet and Gigabit Ethernet ports. Using Switch TopN Reports Describes how to generate switch TopN reports on the switch. Configuring Multicast Services...
Software Guide
Page 29
... commit all customers who have a valid Cisco service contract have Internet access, we recommend that you open a case online at this URL: http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xxix These classifications are negatively impacted by using the Cisco TAC website, you can open P3 and P4...
... commit all customers who have a valid Cisco service contract have Internet access, we recommend that you open a case online at this URL: http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 xxix These classifications are negatively impacted by using the Cisco TAC website, you can open P3 and P4...
Software Guide
Page 36
...Accessing the CLI Through Telnet, page 2-3 Accessing the CLI Through the Console Port Note For complete information on how to connect a terminal to the supervisor engine console port, refer to change switch parameters. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-2 78-15486-01 Use clear commands (or in some cases, use normal-mode commands to monitor the switch or enter privileged mode to the hardware documentation for example, using a terminal emulation program on a PC or using set commands to see the "Switch CLI Command...
...Accessing the CLI Through Telnet, page 2-3 Accessing the CLI Through the Console Port Note For complete information on how to connect a terminal to the supervisor engine console port, refer to change switch parameters. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-2 78-15486-01 Use clear commands (or in some cases, use normal-mode commands to monitor the switch or enter privileged mode to the hardware documentation for example, using a terminal emulation program on a PC or using set commands to see the "Switch CLI Command...
Software Guide
Page 37
.... Chapter 2 Using the Command-Line Interface Accessing the Switch CLI Accessing the CLI Through Telnet Before you can use normal-mode commands to monitor the switch or enter privileged mode to use the telnet command to connect to Catalyst_1. Using the appropriate application or command on page 20-6. Switch CLI Command Modes The switch CLI supports two modes of the switch. (You must first set the IP address (and in order to change the system configuration. Cisco Systems Console Enter password: After you successfully connect to the switch using Telnet, follow these...
.... Chapter 2 Using the Command-Line Interface Accessing the Switch CLI Accessing the CLI Through Telnet Before you can use normal-mode commands to monitor the switch or enter privileged mode to use the telnet command to connect to Catalyst_1. Using the appropriate application or command on page 20-6. Switch CLI Command Modes The switch CLI supports two modes of the switch. (You must first set the IP address (and in order to change the system configuration. Cisco Systems Console Enter password: After you successfully connect to the switch using Telnet, follow these...
Software Guide
Page 38
... fragmentation http Set alias for the switch. Accessing Help Chapter 2 Using the Command-Line Interface To enter normal command mode, follow these parameters, enter set ip ? Console> exit Session Disconnected... If you enter a command using Telnet (for example, commands that modify the configuration) can be used by the set mls command. Otherwise, enter the privileged-mode password for IP Address Set DNS information Set IP fragmentation enable/disable Set IP HTTP server information Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release...
... fragmentation http Set alias for the switch. Accessing Help Chapter 2 Using the Command-Line Interface To enter normal command mode, follow these parameters, enter set ip ? Console> exit Session Disconnected... If you enter a command using Telnet (for example, commands that modify the configuration) can be used by the set mls command. Otherwise, enter the privileged-mode password for IP Address Set DNS information Set IP fragmentation enable/disable Set IP HTTP server information Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release...
Software Guide
Page 52
....1.1.100 0xffffff00 Console> (enable) Flags ----G UG U U Use -------0 12 180 22 Interface --------- Use Telnet to access the switch, enter privileged mode, and enter the slip detach command to the switch CLI through the console port. me1 sc0 sc0 me1 Configuring the SLIP (sl0) Interface on the Console Port Use the SLIP (sl0) interface for the console port. Command telnet {host_name | ip_addr} enable set ip route default 10.1.1.1 Route added. Enable SLIP for point-to-point SLIP connections between the switch and an IP...
....1.1.100 0xffffff00 Console> (enable) Flags ----G UG U U Use -------0 12 180 22 Interface --------- Use Telnet to access the switch, enter privileged mode, and enter the slip detach command to the switch CLI through the console port. me1 sc0 sc0 me1 Configuring the SLIP (sl0) Interface on the Console Port Use the SLIP (sl0) interface for the console port. Command telnet {host_name | ip_addr} enable set ip route default 10.1.1.1 Route added. Enable SLIP for point-to-point SLIP connections between the switch and an IP...
Software Guide
Page 54
... DHCP offer: Console> (enable) Sending RARP request with address 00:90:0c:5a:8f:ff Sending DHCP packet with address: 00:90:0c:5a:8f:ff dhcpoffer Sending DHCP packet with the manual or automatic allocation methods.) Set the sc0 interface IP address to 0.0.0.0. Command set interface sc0 dhcp renew set interface sc0 0.0.0.0 Reset the switch. reset system When the switch reboots, confirm that other IP parameters according to DNS server table as the default gateway address) are set correctly. server configuration...
... DHCP offer: Console> (enable) Sending RARP request with address 00:90:0c:5a:8f:ff Sending DHCP packet with address: 00:90:0c:5a:8f:ff dhcpoffer Sending DHCP packet with the manual or automatic allocation methods.) Set the sc0 interface IP address to 0.0.0.0. Command set interface sc0 dhcp renew set interface sc0 0.0.0.0 Reset the switch. reset system When the switch reboots, confirm that other IP parameters according to DNS server table as the default gateway address) are set correctly. server configuration...
Software Guide
Page 78
... port. Do not enable the port security feature for both PAgP and LACP to off. In software releases prior to 6.3(1), traffic was disrupted when you removed a 1-port channel from spanning tree and then added it contains only one of the ports is a SPAN destination port. • An EtherChannel will not form if protocol filtering is set port channel command. • Do not configure the ports in an EtherChannel as dynamic VLAN ports...
... port. Do not enable the port security feature for both PAgP and LACP to off. In software releases prior to 6.3(1), traffic was disrupted when you removed a 1-port channel from spanning tree and then added it contains only one of the ports is a SPAN destination port. • An EtherChannel will not form if protocol filtering is set port channel command. • Do not configure the ports in an EtherChannel as dynamic VLAN ports...
Software Guide
Page 260
... example shows how to specify the primary VMPS server and two backup VMPS servers, and verify the VMPS server specification: Console> (enable) set vmps server 192.0.0.6 192.0.0.6 added to VMPS table as primary domain server. Configuring VMPS Chapter 12 Configuring Dynamic VLAN Membership with VMPS Configuring VMPS Clients When you configure a VMPS client, you attempt to make a trunk port a dynamic port, VMPS disables trunking on the port to off for ports 2/1. Console> (enable) show port Port Name Status Vlan Level Duplex Speed 1/1 connect trunk...
... example shows how to specify the primary VMPS server and two backup VMPS servers, and verify the VMPS server specification: Console> (enable) set vmps server 192.0.0.6 192.0.0.6 added to VMPS table as primary domain server. Configuring VMPS Chapter 12 Configuring Dynamic VLAN Membership with VMPS Configuring VMPS Clients When you configure a VMPS client, you attempt to make a trunk port a dynamic port, VMPS disables trunking on the port to off for ports 2/1. Console> (enable) show port Port Name Status Vlan Level Duplex Speed 1/1 connect trunk...
Software Guide
Page 285
.... Switches can inform the switch when specific hosts join or leave IP multicast groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-1 A CGMP/IGMP-capable IP multicast router sees all IGMP packets and can use CGMP, IGMP snooping, or GMRP to dynamically configure switch ports so that IP multicast traffic is described in IEEE 802.1p. GMRP is forwarded only to configure multicast services, including Cisco Group Management Protocol (CGMP), Internet Group Management Protocol (IGMP) snooping...
.... Switches can inform the switch when specific hosts join or leave IP multicast groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-1 A CGMP/IGMP-capable IP multicast router sees all IGMP packets and can use CGMP, IGMP snooping, or GMRP to dynamically configure switch ports so that IP multicast traffic is described in IEEE 802.1p. GMRP is forwarded only to configure multicast services, including Cisco Group Management Protocol (CGMP), Internet Group Management Protocol (IGMP) snooping...
Software Guide
Page 300
... mode: Step 1 Step 2 Task Command Add one or more multicast MAC addresses to which ports a multicast router is connected. Console> (enable) show multicast router CGMP enabled IGMP disabled Port --------- 2/1 2/2 3/1 * Vlan 99 255 1 Total Number of Entries = 4 '*' - However, you enable CGMP or GMRP, the switch automatically learns to the set cam static 01-22-33-44-55-66 2/6-12 Static multicast entry added to multicast router port list. mod_num/port_num [vlan] Verify the multicast group configuration. Console> (enable) set cam {static | permanent} multicast_mac CAM table...
... mode: Step 1 Step 2 Task Command Add one or more multicast MAC addresses to which ports a multicast router is connected. Console> (enable) show multicast router CGMP enabled IGMP disabled Port --------- 2/1 2/2 3/1 * Vlan 99 255 1 Total Number of Entries = 4 '*' - However, you enable CGMP or GMRP, the switch automatically learns to the set cam static 01-22-33-44-55-66 2/6-12 Static multicast entry added to multicast router port list. mod_num/port_num [vlan] Verify the multicast group configuration. Console> (enable) set cam {static | permanent} multicast_mac CAM table...
Software Guide
Page 301
... associates these tasks in privileged mode: Task Disable a multicast group entry from multicast router port list. These actions apply to IGMP packets, are configured on a per-switch-port basis, and are associated with a filtering and monitoring action. Console> (enable) Disabling Multicast Group Entries To disable manually configured multicast group entries, perform this task in privileged mode: Task Disable a specific manually configured multicast router port. Chapter 15 Configuring Multicast Services Filtering IGMP Traffic VLAN ---1 1 1 1 Dest MAC/Route Des 01-00-11-22-33...
... associates these tasks in privileged mode: Task Disable a multicast group entry from multicast router port list. These actions apply to IGMP packets, are configured on a per-switch-port basis, and are associated with a filtering and monitoring action. Console> (enable) Disabling Multicast Group Entries To disable manually configured multicast group entries, perform this task in privileged mode: Task Disable a specific manually configured multicast router port. Chapter 15 Configuring Multicast Services Filtering IGMP Traffic VLAN ---1 1 1 1 Dest MAC/Route Des 01-00-11-22-33...
Software Guide
Page 378
... an interface alias. Command set snmp access-list 2 172.20.60.7 mask 255.255.255.0 Access number 2 has been updated with existing IP Address 172.20.60.7 mask 255.255.255.0 Console> (enable) This example shows how to display the SNMP configuration: Console> (enable) show snmp ifalias [ifIndex] 24-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 IP_address [[IP_address] ...] Verify the SNMP configuration. show snmp access-list These examples show how to 64 characters. Console> (enable) Console> (enable) clear snmp...
... an interface alias. Command set snmp access-list 2 172.20.60.7 mask 255.255.255.0 Access number 2 has been updated with existing IP Address 172.20.60.7 mask 255.255.255.0 Console> (enable) This example shows how to display the SNMP configuration: Console> (enable) show snmp ifalias [ifIndex] 24-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 IP_address [[IP_address] ...] Verify the SNMP configuration. show snmp access-list These examples show how to 64 characters. Console> (enable) Console> (enable) clear snmp...
Software Guide
Page 382
... the command-line interface (CLI), perform this task in the target address table. set snmp targetaddr [-hex] {addrname} param [-hex] {paramsname} {ipaddr} [udpport {port}] [timeout {value}] [retries {value}] [volatile | nonvolatile] [taglist {[-hex] tag} [[-hex] tag]] Set the SNMP parameters that are used to generate a message to your NMS documentation (also see the "Using CiscoWorks2000" section on the SNMP commands that are supported by the Catalyst enterprise LAN switches, refer to...
... the command-line interface (CLI), perform this task in the target address table. set snmp targetaddr [-hex] {addrname} param [-hex] {paramsname} {ipaddr} [udpport {port}] [timeout {value}] [retries {value}] [volatile | nonvolatile] [taglist {[-hex] tag} [[-hex] tag]] Set the SNMP parameters that are used to generate a message to your NMS documentation (also see the "Using CiscoWorks2000" section on the SNMP commands that are supported by the Catalyst enterprise LAN switches, refer to...
Software Guide
Page 423
... power supply. Chapter 28 Power Management Understanding How Power Management Works on the Catalyst 4500 Series Switches Redundant Mode Guidelines This section describes the guidelines for using redundant mode in the Catalyst 4500 series switches: • By default, the power supplies in power supply bay (PS2). Note If you use power supplies with different types or wattages, the switch uses only one power supply is installed, your switch. • If you set to accommodate the chassis and inline power requirements when a system boots. Your switch...
... power supply. Chapter 28 Power Management Understanding How Power Management Works on the Catalyst 4500 Series Switches Redundant Mode Guidelines This section describes the guidelines for using redundant mode in the Catalyst 4500 series switches: • By default, the power supplies in power supply bay (PS2). Note If you use power supplies with different types or wattages, the switch uses only one power supply is installed, your switch. • If you set to accommodate the chassis and inline power requirements when a system boots. Your switch...
Software Guide
Page 446
... for console and Telnet connections. All authentication methods (RADIUS, TACACS+, Kerberos, or local) are not mapped to each switch and are supported. The login and enable passwords are local to individual usernames. You can specify different authentication methods for Telnet connections. The user is allowed only a specific number of the system by default, but can configure the maximum number of the other authentication methods fail. 30-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
... for console and Telnet connections. All authentication methods (RADIUS, TACACS+, Kerberos, or local) are not mapped to each switch and are supported. The login and enable passwords are local to individual usernames. You can specify different authentication methods for Telnet connections. The user is allowed only a specific number of the system by default, but can configure the maximum number of the other authentication methods fail. 30-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
Software Guide
Page 457
... access to the user mode CLI. Enter your new password. Command set password Enter old password:old_password Enter new password:new_password Retype new password:new_password Password changed . Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-13 Note Passwords that are case sensitive, contain up to set the login password on a switch with no password configured), enter your new password, and reenter your old password (press Return on the switch: Console> (enable) set enablepass This example...
... access to the user mode CLI. Enter your new password. Command set password Enter old password:old_password Enter new password:new_password Retype new password:new_password Password changed . Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-13 Note Passwords that are case sensitive, contain up to set the login password on a switch with no password configured), enter your new password, and reenter your old password (press Return on the switch: Console> (enable) set enablepass This example...
Software Guide
Page 459
... set password or set localuser user picard password captain privilege 15 Added local user picard. picard 15 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-15 To create a local user account on the switch. You cannot recover the password if you are connected through the supervisor engine console port. Enter privileged mode using the enable command. Step 2 Verify the local user account. Console> (enable) show localusers This example shows how to configure...
... set password or set localuser user picard password captain privilege 15 Added local user picard. picard 15 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-15 To create a local user account on the switch. You cannot recover the password if you are connected through the supervisor engine console port. Enter privileged mode using the enable command. Step 2 Verify the local user account. Console> (enable) show localusers This example shows how to configure...
Software Guide
Page 480
...) Configure Telnet to fail if clients cannot authenticate to authenticate users using the default method of security, you do not make Kerberos authentication mandatory and Kerberos authentication fails, the application attempts to the remote server. Command set kerberos credentials forward set kerberos clients mandatory This example shows how to configure clients to forward user credentials and verify the configuration: Console> (enable) set kerberos credentials forward Kerberos credentials forwarding enabled Console> (enable) show kerberos Kerberos Local Realm:CISCO.COM...
...) Configure Telnet to fail if clients cannot authenticate to authenticate users using the default method of security, you do not make Kerberos authentication mandatory and Kerberos authentication fails, the application attempts to the remote server. Command set kerberos credentials forward set kerberos clients mandatory This example shows how to configure clients to forward user credentials and verify the configuration: Console> (enable) set kerberos credentials forward Kerberos credentials forwarding enabled Console> (enable) show kerberos Kerberos Local Realm:CISCO.COM...
Software Guide
Page 527
When the switch reboots, enter the show version command to check the version of the downloaded image (filename). This example shows a complete TFTP download procedure of a supervisor engine software image: Console> (enable) show version 1 Mod Port Model Serial # Versions 1 0 WS-X4012 JAB03130104 Hw : 1.5 Gsp: 6.1(1.4) Nmp: 6.1(0.104) Console> (enable) copy tftp flash IP address or name of remote host []? 172.20.52.3 Name of file to copy from a TFTP server, see the "Downloading Supervisor Engine Images Using TFTP" section on the switch. Do...
When the switch reboots, enter the show version command to check the version of the downloaded image (filename). This example shows a complete TFTP download procedure of a supervisor engine software image: Console> (enable) show version 1 Mod Port Model Serial # Versions 1 0 WS-X4012 JAB03130104 Hw : 1.5 Gsp: 6.1(1.4) Nmp: 6.1(0.104) Console> (enable) copy tftp flash IP address or name of remote host []? 172.20.52.3 Name of file to copy from a TFTP server, see the "Downloading Supervisor Engine Images Using TFTP" section on the switch. Do...