Software Guide
Page 7
... MAC Address Notification Traps 6-22 Adding and Removing Static Address Entries 6-24 Configuring Unicast MAC Address Filtering 6-25 Displaying Address Table Entries 6-26 ... the SDM Template 7-2 .Displaying the SDM Templates 7-3 Configuring Switch-Based Authentication 8-1 Preventing Unauthorized Access to Your Switch 8-1 Protecting Access to Privileged EXEC Commands 8-2 Default Password and...the Default Privilege Level for Lines 8-9 Logging into and Exiting a Privilege Level 8-9 Controlling Switch Access with TACACS+ 8-10 Understanding TACACS+ 8-10 TACACS+ Operation 8-12 Configuring TACACS+ ...
... MAC Address Notification Traps 6-22 Adding and Removing Static Address Entries 6-24 Configuring Unicast MAC Address Filtering 6-25 Displaying Address Table Entries 6-26 ... the SDM Template 7-2 .Displaying the SDM Templates 7-3 Configuring Switch-Based Authentication 8-1 Preventing Unauthorized Access to Your Switch 8-1 Protecting Access to Privileged EXEC Commands 8-2 Default Password and...the Default Privilege Level for Lines 8-9 Logging into and Exiting a Privilege Level 8-9 Controlling Switch Access with TACACS+ 8-10 Understanding TACACS+ 8-10 TACACS+ Operation 8-12 Configuring TACACS+ ...
Software Guide
Page 9
... Bypass 9-22 Upgrading from a Previous Software Release 9-22 Configuring IEEE 802.1x Authentication 9-22 Configuring the Switch-to-RADIUS-Server Communication 9-24 Configuring the Host Mode 9-25 Configuring Periodic Re-Authentication 9-25 Manually Re-Authenticating a Client Connected to a... Changing the Switch-to-Client Retransmission Time 9-27 Setting the Switch-to-Client Frame-Retransmission Number 9-28 Setting the Re-Authentication Number 9-28 Configuring IEEE 802.1x Accounting 9-29 Configuring a Guest VLAN 9-30 Configuring a Restricted VLAN 9-31 Catalyst 2960 Switch Software Configuration ...
... Bypass 9-22 Upgrading from a Previous Software Release 9-22 Configuring IEEE 802.1x Authentication 9-22 Configuring the Switch-to-RADIUS-Server Communication 9-24 Configuring the Host Mode 9-25 Configuring Periodic Re-Authentication 9-25 Manually Re-Authenticating a Client Connected to a... Changing the Switch-to-Client Retransmission Time 9-27 Setting the Switch-to-Client Frame-Retransmission Number 9-28 Setting the Re-Authentication Number 9-28 Configuring IEEE 802.1x Accounting 9-29 Configuring a Guest VLAN 9-30 Configuring a Restricted VLAN 9-31 Catalyst 2960 Switch Software Configuration ...
Software Guide
Page 12
... Sharing Using STP Port Priorities 12-20 Load Sharing Using STP Path Cost 12-22 Configuring VMPS 12-23 Understanding VMPS 12-24 Dynamic-Access Port VLAN Membership 12-24 Default VMPS Client Configuration 12-25 VMPS Configuration Guidelines 12-25 Configuring the VMPS Client 12-25 Entering the IP Address of... a VTP Server 13-9 Configuring a VTP Client 13-11 Disabling VTP (VTP Transparent Mode) 13-12 Enabling VTP Version 2 13-13 Enabling VTP Pruning 13-14 Catalyst 2960 Switch Software Configuration Guide xii OL-8603-04
... Sharing Using STP Port Priorities 12-20 Load Sharing Using STP Path Cost 12-22 Configuring VMPS 12-23 Understanding VMPS 12-24 Dynamic-Access Port VLAN Membership 12-24 Default VMPS Client Configuration 12-25 VMPS Configuration Guidelines 12-25 Configuring the VMPS Client 12-25 Entering the IP Address of... a VTP Server 13-9 Configuring a VTP Client 13-11 Disabling VTP (VTP Transparent Mode) 13-12 Enabling VTP Version 2 13-13 Enabling VTP Pruning 13-14 Catalyst 2960 Switch Software Configuration Guide xii OL-8603-04
Software Guide
Page 15
...-22 Configuring the Forwarding-Delay Time 16-23 Configuring the Maximum-Aging Time 16-23 Configuring the Maximum-Hop Count 16-24 Specifying the Link Type to Ensure Rapid Transitions 16-24 Designating the Neighbor Type 16-25 Restarting the Protocol Migration Process 16-25 Displaying the MST Configuration and Status 16... Enabling Loop Guard 17-15 Displaying the Spanning-Tree Status 17-16 Configuring IGMP Snooping and MVR 18-1 Understanding IGMP Snooping 18-1 IGMP Versions 18-2 Catalyst 2960 Switch Software Configuration Guide xv
...-22 Configuring the Forwarding-Delay Time 16-23 Configuring the Maximum-Aging Time 16-23 Configuring the Maximum-Hop Count 16-24 Specifying the Link Type to Ensure Rapid Transitions 16-24 Designating the Neighbor Type 16-25 Restarting the Protocol Migration Process 16-25 Displaying the MST Configuration and Status 16... Enabling Loop Guard 17-15 Displaying the Spanning-Tree Status 17-16 Configuring IGMP Snooping and MVR 18-1 Understanding IGMP Snooping 18-1 IGMP Versions 18-2 Catalyst 2960 Switch Software Configuration Guide xv
Software Guide
Page 16
... 18-24 Configuring IGMP Profiles 18-24 Applying IGMP Profiles 18-25 Setting the Maximum Number of IGMP Groups 18-26 Configuring the IGMP Throttling Action 18-27 Displaying IGMP Filtering and Throttling Configuration 18-28 19 C H A P T E R Configuring Port-Based Traffic Control 19-1 Configuring Storm Control 19-1 Understanding Storm Control 19-1 Catalyst 2960 Switch Software...
... 18-24 Configuring IGMP Profiles 18-24 Applying IGMP Profiles 18-25 Setting the Maximum Number of IGMP Groups 18-26 Configuring the IGMP Throttling Action 18-27 Displaying IGMP Filtering and Throttling Configuration 18-28 19 C H A P T E R Configuring Port-Based Traffic Control 19-1 Configuring Storm Control 19-1 Understanding Storm Control 19-1 Catalyst 2960 Switch Software...
Software Guide
Page 19
...21 Displaying SPAN and RSPAN Status 23-22 Configuring RMON 24-1 Understanding RMON 24-1 Configuring RMON 24-2 Default RMON Configuration 24-3 Configuring RMON Alarms and Events 24-3 Collecting Group History Statistics on an Interface 24-5 Collecting Group Ethernet Statistics on an Interface 24-5 Displaying RMON Status 24-6 Configuring System Message Logging 25-1 Understanding System Message ... 26-1 SNMP Versions 26-2 SNMP Manager Functions 26-3 SNMP Agent Functions 26-4 SNMP Community Strings 26-4 Using SNMP to Access MIB Variables 26-4 Catalyst 2960 Switch Software Configuration Guide xix
...21 Displaying SPAN and RSPAN Status 23-22 Configuring RMON 24-1 Understanding RMON 24-1 Configuring RMON 24-2 Default RMON Configuration 24-3 Configuring RMON Alarms and Events 24-3 Collecting Group History Statistics on an Interface 24-5 Collecting Group Ethernet Statistics on an Interface 24-5 Displaying RMON Status 24-6 Configuring System Message Logging 25-1 Understanding System Message ... 26-1 SNMP Versions 26-2 SNMP Manager Functions 26-3 SNMP Agent Functions 26-4 SNMP Community Strings 26-4 Using SNMP to Access MIB Variables 26-4 Catalyst 2960 Switch Software Configuration Guide xix
Software Guide
Page 21
...-04 Contents Packet Modification 28-18 Configuring Auto-QoS 28-19 Generated Auto-QoS Configuration 28-20 Effects of Auto-QoS on the Configuration 28-24 Auto-QoS Configuration Guidelines 28-25 Enabling Auto-QoS for VoIP 28-25 Auto-QoS Configuration Example 28-27 Displaying Auto-QoS Information 28-29... Ingress Queue and Setting WTD Thresholds 28-58 Allocating Buffer Space Between the Ingress Queues 28-59 Allocating Bandwidth Between the Ingress Queues 28-60 Catalyst 2960 Switch Software Configuration Guide xxi
...-04 Contents Packet Modification 28-18 Configuring Auto-QoS 28-19 Generated Auto-QoS Configuration 28-20 Effects of Auto-QoS on the Configuration 28-24 Auto-QoS Configuration Guidelines 28-25 Enabling Auto-QoS for VoIP 28-25 Auto-QoS Configuration Example 28-27 Displaying Auto-QoS Information 28-29... Ingress Queue and Setting WTD Thresholds 28-58 Allocating Buffer Space Between the Ingress Queues 28-59 Allocating Bandwidth Between the Ingress Queues 28-60 Catalyst 2960 Switch Software Configuration Guide xxi
Software Guide
Page 26
...I X D A P P E N D I X Working with Software Images B-23 Image Location on the Switch B-24 tar File Format of Images on a Server or Cisco.com B-24 Copying Image Files By Using TFTP B-25 Preparing to Download or Upload an Image File By Using TFTP B-26 ... B-35 Uploading an Image File By Using RCP B-37 B-38 Recommendations for Upgrading a Catalyst 2950 Switch to a Catalyst 2960 Switch C-1 Configuration Compatibility Issues C-1 Feature Behavior Incompatibilities C-5 Unsupported Commands in Cisco IOS Release 12.2(40)SE D-1 Access Control Lists D-1 Unsupported Privileged EXEC Commands D-1 Unsupported...
...I X D A P P E N D I X Working with Software Images B-23 Image Location on the Switch B-24 tar File Format of Images on a Server or Cisco.com B-24 Copying Image Files By Using TFTP B-25 Preparing to Download or Upload an Image File By Using TFTP B-26 ... B-35 Uploading an Image File By Using RCP B-37 B-38 Recommendations for Upgrading a Catalyst 2950 Switch to a Catalyst 2960 Switch C-1 Configuration Compatibility Issues C-1 Feature Behavior Incompatibilities C-5 Unsupported Commands in Cisco IOS Release 12.2(40)SE D-1 Access Control Lists D-1 Unsupported Privileged EXEC Commands D-1 Unsupported...
Software Guide
Page 44
...network bandwidth, it takes longer to Medium-Sized Network Using Catalyst 2960 Switches" section on page 1-16 • "Long-Distance, High-Bandwidth Transport Configuration" section on the console. For more information, see Chapter 24, "Configuring RMON." • Syslog messages are configured. ...Configuration Examples This section provides network configuration concepts and includes examples of the network applications that they use. 1-12 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 For more information, see Chapter 19, "Configuring Port-Based Traffic Control." -...
...network bandwidth, it takes longer to Medium-Sized Network Using Catalyst 2960 Switches" section on page 1-16 • "Long-Distance, High-Bandwidth Transport Configuration" section on the console. For more information, see Chapter 24, "Configuring RMON." • Syslog messages are configured. ...Configuration Examples This section provides network configuration concepts and includes examples of the network applications that they use. 1-12 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 For more information, see Chapter 19, "Configuring Port-Based Traffic Control." -...
Software Guide
Page 68
...10 10.0.0.2 tftpserver or 10.0.0.3 Switch D 00e0.9f1e.2004 10.0.0.24 255.255.255.0 10.0.0.10 10.0.0.2 tftpserver or 10.0.0.3 Catalyst 2960 Switch Software Configuration Guide 3-8 OL-8603-04 Assigning Switch Information Chapter 3 Assigning the Switch IP Address and Default Gateway The ... file is truncated to eight characters. Figure 3-3 DHCP-Based Autoconfiguration Network Example Switch 1 Switch 2 Switch 3 Switch 4 00e0.9f1e.2001 00e0.9f1e.2002 00e0.9f1e.2003 00e0.9f1e.2004 Cisco router 10.0.0.10 10.0.0.1 10.0.0.2 10.0.0.3 111394 DHCP server DNS server TFTP server...
...10 10.0.0.2 tftpserver or 10.0.0.3 Switch D 00e0.9f1e.2004 10.0.0.24 255.255.255.0 10.0.0.10 10.0.0.2 tftpserver or 10.0.0.3 Catalyst 2960 Switch Software Configuration Guide 3-8 OL-8603-04 Assigning Switch Information Chapter 3 Assigning the Switch IP Address and Default Gateway The ... file is truncated to eight characters. Figure 3-3 DHCP-Based Autoconfiguration Network Example Switch 1 Switch 2 Switch 3 Switch 4 00e0.9f1e.2001 00e0.9f1e.2002 00e0.9f1e.2003 00e0.9f1e.2004 Cisco router 10.0.0.10 10.0.0.1 10.0.0.2 10.0.0.3 111394 DHCP server DNS server TFTP server...
Software Guide
Page 69
... host switcha 10.0.0.21 ip host switchb 10.0.0.22 ip host switchc 10.0.0.23 ip host switchd 10.0.0.24 DHCP Client Configuration No configuration file is given in the same way. OL-8603-04 Catalyst 2960 Switch Software Configuration Guide 3-9 This directory contains the network-confg file used in this display: prompt> cd /tftpserver...
... host switcha 10.0.0.21 ip host switchb 10.0.0.22 ip host switchc 10.0.0.23 ip host switchd 10.0.0.24 DHCP Client Configuration No configuration file is given in the same way. OL-8603-04 Catalyst 2960 Switch Software Configuration Guide 3-9 This directory contains the network-confg file used in this display: prompt> cd /tftpserver...
Software Guide
Page 76
... day | day month] [text] This command schedules a reload of the software to take place within approximately 24 days. Scheduling a Reload of the Software Image Chapter 3 Assigning the Switch IP Address and Default Gateway Scheduling a Reload of the Software Image You can schedule a reload of the software... late at night or during the weekend when the switch is used less), or you can specify the reason for 19:30:00 UTC Wed Jun 5 1996 (in 2 hours and 25 minutes) Proceed with reload? [confirm] 3-16 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 Configuring a Scheduled Reload...
... day | day month] [text] This command schedules a reload of the software to take place within approximately 24 days. Scheduling a Reload of the Software Image Chapter 3 Assigning the Switch IP Address and Default Gateway Scheduling a Reload of the Software Image You can schedule a reload of the software... late at night or during the weekend when the switch is used less), or you can specify the reason for 19:30:00 UTC Wed Jun 5 1996 (in 2 hours and 25 minutes) Proceed with reload? [confirm] 3-16 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 Configuring a Scheduled Reload...
Software Guide
Page 117
... the fields in these displays, see the Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 from the Cisco.com page under Documentation > Cisco IOS Software > 12.2 Mainline > Command ...References. If you have an outside source to manually set the system clock. on the network that you do not need to which the switch...Purpose Manually set 13:32:00 23 July 2001 OL-8603-04 Catalyst 2960 Switch Software Configuration Guide 6-11 The time specified is relative to the configured time...
... the fields in these displays, see the Cisco IOS Configuration Fundamentals Command Reference, Release 12.2 from the Cisco.com page under Documentation > Cisco IOS Software > 12.2 Mainline > Command ...References. If you have an outside source to manually set the system clock. on the network that you do not need to which the switch...Purpose Manually set 13:32:00 23 July 2001 OL-8603-04 Catalyst 2960 Switch Software Configuration Guide 6-11 The time specified is relative to the configured time...
Software Guide
Page 119
... of the week (Sunday, Monday...). • (Optional) For month, specify the month (January, February...). • (Optional) For hh:mm, specify the time (24-hour format) in the southern hemisphere. The first part of minutes to summer time. This example shows how to specify that you specify clock summer... time is after the ending month, the system assumes that summer time starts on the first Sunday in April at 02:00: Switch(config)# clock summer-time PDT recurring 1 Sunday April 2:00 last Sunday October 2:00 OL-8603-04 Catalyst 2960 Switch Software Configuration Guide 6-13
... of the week (Sunday, Monday...). • (Optional) For month, specify the month (January, February...). • (Optional) For hh:mm, specify the time (24-hour format) in the southern hemisphere. The first part of minutes to summer time. This example shows how to specify that you specify clock summer... time is after the ending month, the system assumes that summer time starts on the first Sunday in April at 02:00: Switch(config)# clock summer-time PDT recurring 1 Sunday April 2:00 last Sunday October 2:00 OL-8603-04 Catalyst 2960 Switch Software Configuration Guide 6-13
Software Guide
Page 120
... the month (January, February...). • (Optional) For hh:mm, specify the time (24-hour format) in hours and minutes. • (Optional) For offset, specify the number ...Cisco.com page, select Documentation > Cisco IOS Software > 12.2 Mainline > Command References and see the Cisco IOS Configuration Fundamentals Command Reference and the Cisco IOS IP Command Reference, Volume 2 of the system name are Switch...configured a system prompt, the first 20 characters of 3: Routing Protocols. 6-14 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 end Return to start on October 12, ...
... the month (January, February...). • (Optional) For hh:mm, specify the time (24-hour format) in hours and minutes. • (Optional) For offset, specify the number ...Cisco.com page, select Documentation > Cisco IOS Software > 12.2 Mainline > Command References and see the Cisco IOS Configuration Fundamentals Command Reference and the Cisco IOS IP Command Reference, Volume 2 of the system name are Switch...configured a system prompt, the first 20 characters of 3: Routing Protocols. 6-14 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 end Return to start on October 12, ...
Software Guide
Page 126
...that are not in use. Each VLAN maintains its associated port number to individual workstations, repeaters, switches, routers, or other VLAN. 6-20 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 MAC Addresses and VLANs All addresses are associated with the destination address... Entries, page 6-22 • Configuring MAC Address Notification Traps, page 6-22 • Adding and Removing Static Address Entries, page 6-24 • Configuring Unicast MAC Address Filtering, page 6-25 • Displaying Address Table Entries, page 6-26 Building the Address Table With ...
...that are not in use. Each VLAN maintains its associated port number to individual workstations, repeaters, switches, routers, or other VLAN. 6-20 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 MAC Addresses and VLANs All addresses are associated with the destination address... Entries, page 6-22 • Configuring MAC Address Notification Traps, page 6-22 • Adding and Removing Static Address Entries, page 6-24 • Configuring Unicast MAC Address Filtering, page 6-25 • Displaying Address Table Entries, page 6-26 Building the Address Table With ...
Software Guide
Page 130
You can be a unicast or multicast address. • It does not age and is forwarded to the specified port: Switch(config)# mac address-table static c2f3.220a.12f4 vlan 4 interface gigabitethernet0/1 6-24 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 Beginning in privileged EXEC mode, follow these characteristics: • It is manually entered in VLAN...
You can be a unicast or multicast address. • It does not age and is forwarded to the specified port: Switch(config)# mac address-table static c2f3.220a.12f4 vlan 4 interface gigabitethernet0/1 6-24 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 Beginning in privileged EXEC mode, follow these characteristics: • It is manually entered in VLAN...
Software Guide
Page 160
...are used in the database by using the username password global configuration command. - Use the password password line configuration command. - Controlling Switch Access with the aaa authentication login command. You must define an enable password by using the enable password global configuration command. - .... Return to a line or set of lines. • If you must enter username information in the configuration file. 8-24 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 Verify your entries. (Optional) Save your entries in the database.
...are used in the database by using the username password global configuration command. - Use the password password line configuration command. - Controlling Switch Access with the aaa authentication login command. You must define an enable password by using the enable password global configuration command. - .... Return to a line or set of lines. • If you must enter username information in the configuration file. 8-24 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 Verify your entries. (Optional) Save your entries in the database.
Software Guide
Page 178
...system (usually located in the configuration file. The range is 5. For example: https://209.165.129:1026 or https://host.domain.com:1026 8-42 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 The range is 86400. The maximum value is 1 to 600 seconds. Step 14 copy running-config startup-config (... connection. Step 10 ip http max-connections value (Optional) Set the maximum number of this command assumes you have a reason to 86400 seconds (24 hours). Step 11 ip http timeout-policy idle seconds life (Optional) Specify how long a connection to privileged EXEC mode.
...system (usually located in the configuration file. The range is 5. For example: https://209.165.129:1026 or https://host.domain.com:1026 8-42 Catalyst 2960 Switch Software Configuration Guide OL-8603-04 The range is 86400. The maximum value is 1 to 600 seconds. Step 14 copy running-config startup-config (... connection. Step 10 ip http max-connections value (Optional) Set the maximum number of this command assumes you have a reason to 86400 seconds (24 hours). Step 11 ip http timeout-policy idle seconds life (Optional) Specify how long a connection to privileged EXEC mode.
Software Guide
Page 700
...priority 14-6 trust priority 14-6 CoS input queue threshold map for QoS 28-15 CoS output queue threshold map for QoS 28-18 IN-6 Catalyst 2960 Switch Software Configuration Guide CoS-to-DSCP map for QoS 28-52 counters, clearing interface 10-19 crashinfo file 32-21 critical authentication, IEEE 802...auto-QoS 28-20 banners 6-17 booting 3-12 CDP 20-2 DNS 6-16 EtherChannel 31-9 Ethernet interfaces 10-9 IGMP filtering 18-24 IGMP snooping 18-6, 30-5, 30-6 IGMP throttling 18-24 initial switch information 3-3 IP SLAs 27-5 IPv6 29-8 Layer 2 interfaces 10-9 LLDP 21-3 MAC address table 6-21 MSTP 16-14 ...
...priority 14-6 trust priority 14-6 CoS input queue threshold map for QoS 28-15 CoS output queue threshold map for QoS 28-18 IN-6 Catalyst 2960 Switch Software Configuration Guide CoS-to-DSCP map for QoS 28-52 counters, clearing interface 10-19 crashinfo file 32-21 critical authentication, IEEE 802...auto-QoS 28-20 banners 6-17 booting 3-12 CDP 20-2 DNS 6-16 EtherChannel 31-9 Ethernet interfaces 10-9 IGMP filtering 18-24 IGMP snooping 18-6, 30-5, 30-6 IGMP throttling 18-24 initial switch information 3-3 IP SLAs 27-5 IPv6 29-8 Layer 2 interfaces 10-9 LLDP 21-3 MAC address table 6-21 MSTP 16-14 ...