Software Guide
Page 24
... to configure IP permit list on the switch. Configuring Dynamic VLAN Membership with VMPS Describes how to check connectivity using ping, Telnet, and IP traceroute. Checking Status and Connectivity Describes how to display information about modules and switch ports and how to configure VLAN Membership Policy Server (VMPS) and dynamic ports on the switch. Using Switch TopN Reports Describes how to configure GARP VLAN Registration Protocol (GVRP) on the switch. xxiv Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release...
... to configure IP permit list on the switch. Configuring Dynamic VLAN Membership with VMPS Describes how to check connectivity using ping, Telnet, and IP traceroute. Checking Status and Connectivity Describes how to display information about modules and switch ports and how to configure VLAN Membership Policy Server (VMPS) and dynamic ports on the switch. Using Switch TopN Reports Describes how to configure GARP VLAN Registration Protocol (GVRP) on the switch. xxiv Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release...
Software Guide
Page 36
... must connect a console terminal to overwrite or erase configuration parameters. Enter set commands) to the console port through a Telnet session. If the switch is already booted, press Enter to a specific module, port, or VLAN. Use clear commands (or in some cases, use normal-mode commands to monitor the switch or enter privileged mode to change the configuration. If the switch is not on page 2-9). Accessing the Switch CLI You can use set commands to change switch parameters. Accessing the Switch CLI Chapter 2 Using the Command-Line Interface The Catalyst enterprise...
... must connect a console terminal to overwrite or erase configuration parameters. Enter set commands) to the console port through a Telnet session. If the switch is already booted, press Enter to a specific module, port, or VLAN. Use clear commands (or in some cases, use normal-mode commands to monitor the switch or enter privileged mode to change the configuration. If the switch is not on page 2-9). Accessing the Switch CLI You can use set commands to change switch parameters. Accessing the Switch CLI Chapter 2 Using the Command-Line Interface The Catalyst enterprise...
Software Guide
Page 37
..."Using Telnet" section on configuring passwords and controlling access to Catalyst_1. For more information about setting the IP address and default gateway, see Chapter 30, "Configuring Switch Access Using AAA." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-3 Use normal-mode commands for the switch. Connected to the switch, see Chapter 3, "Configuring the Switch IP Address and Default Gateway." Note For complete information on page 20-6. Chapter 2 Using the Command-Line Interface Accessing the Switch CLI...
..."Using Telnet" section on configuring passwords and controlling access to Catalyst_1. For more information about setting the IP address and default gateway, see Chapter 30, "Configuring Switch Access Using AAA." 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-3 Use normal-mode commands for the switch. Connected to the switch, see Chapter 3, "Configuring the Switch IP Address and Default Gateway." Note For complete information on page 20-6. Chapter 2 Using the Command-Line Interface Accessing the Switch CLI...
Software Guide
Page 38
... mode prompt. Otherwise, enter the privileged-mode password for IP Address Set DNS information Set IP fragmentation enable/disable Set IP HTTP server information Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-4 78-15486-01 Console> (enable) disable Console> Accessing Help Enter help menu, and, when appropriate, parameter ranges are connecting to the switch CLI through the console port or using the wrong number of valid keywords and arguments for more information, see the user-level command-line prompt. Command...
... mode prompt. Otherwise, enter the privileged-mode password for IP Address Set DNS information Set IP fragmentation enable/disable Set IP HTTP server information Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 2-4 78-15486-01 Console> (enable) disable Console> Accessing Help Enter help menu, and, when appropriate, parameter ranges are connecting to the switch CLI through the console port or using the wrong number of valid keywords and arguments for more information, see the user-level command-line prompt. Command...
Software Guide
Page 52
... console port connection. Use Telnet to access the switch, enter privileged mode, and enter the slip detach command to the switch CLI through the console port. Set the console port SLIP address and the destination address of the attached host. Configuring the SLIP (sl0) Interface on the Console Port Chapter 3 Configuring the Switch IP Address and Default Gateway default 10.1.1.10 0x0 G 0 sc0 10.0.0.0 10.1.1.100 0xff000000 U 75 sc0 default default 0xff000000 UH 0 sl0 Console> (enable) This example shows how to configure two default gateways on a Catalyst...
... console port connection. Use Telnet to access the switch, enter privileged mode, and enter the slip detach command to the switch CLI through the console port. Set the console port SLIP address and the destination address of the attached host. Configuring the SLIP (sl0) Interface on the Console Port Chapter 3 Configuring the Switch IP Address and Default Gateway default 10.1.1.10 0x0 G 0 sc0 10.0.0.0 10.1.1.100 0xff000000 U 75 sc0 default default 0xff000000 UH 0 sl0 Console> (enable) This example shows how to configure two default gateways on a Catalyst...
Software Guide
Page 54
... interface IP address to DNS server table as the default gateway address) are using DHCP for the switch. (With DHCP, this step is 7 hours 58 minutes 172.16.30.32 added to DNS server table as primary server. 172.16.31.32 added to DNS server table as backup server. 172.16.32.32 added to 0.0.0.0. Release the lease on a DHCP-assigned IP address. set interface sc0 dhcp release 3-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
... interface IP address to DNS server table as the default gateway address) are using DHCP for the switch. (With DHCP, this step is 7 hours 58 minutes 172.16.30.32 added to DNS server table as primary server. 172.16.31.32 added to DNS server table as backup server. 172.16.32.32 added to 0.0.0.0. Release the lease on a DHCP-assigned IP address. set interface sc0 dhcp release 3-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
Software Guide
Page 78
... state. • Ports with different dot1q port types cannot form a channel. • Ports with different jumbo frame configurations cannot form a channel. • Ports with different dynamic configurations cannot form a channel. • If one port in an EtherChannel is preserved even if it to spanning tree as a trunk, configure the same trunk mode on its channeling configuration and state, and the links are cleared on all the ports in a trunking EtherChannel. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-4 78...
... state. • Ports with different dot1q port types cannot form a channel. • Ports with different jumbo frame configurations cannot form a channel. • Ports with different dynamic configurations cannot form a channel. • If one port in an EtherChannel is preserved even if it to spanning tree as a trunk, configure the same trunk mode on its channeling configuration and state, and the links are cleared on all the ports in a trunking EtherChannel. Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 6-4 78...
Software Guide
Page 260
... VMPS table as backup domain server. Console> (enable) set port membership mod_num/port_num dynamic Verify the dynamic port assignments. show port Port Name Status Vlan Level Duplex Speed 1/1 connect trunk normal full 100 1/2 connect trunk normal half 100 2/1 connect dyn normal full 155 3/1 connect dyn-5 normal half 10 Type 100 BASE-TX 100 BASE-TX OC3 MMF ATM 10 BASE-T 12-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Console> show port [mod_num[/port_num]] This example...
... VMPS table as backup domain server. Console> (enable) set port membership mod_num/port_num dynamic Verify the dynamic port assignments. show port Port Name Status Vlan Level Duplex Speed 1/1 connect trunk normal full 100 1/2 connect trunk normal half 100 2/1 connect dyn normal full 155 3/1 connect dyn-5 normal half 10 Type 100 BASE-TX 100 BASE-TX OC3 MMF ATM 10 BASE-T 12-8 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 Console> show port [mod_num[/port_num]] This example...
Software Guide
Page 285
...the Cisco router and the switch. Understanding Multicasting and Multicast Services Operation CGMP, IGMP snooping, and GMRP manage multicast traffic in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. Switches can inform the switch when specific hosts join or leave IP multicast groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-1 15 C H A P T E R Configuring Multicast Services This chapter describes how to configure multicast services, including Cisco...
...the Cisco router and the switch. Understanding Multicasting and Multicast Services Operation CGMP, IGMP snooping, and GMRP manage multicast traffic in this chapter, refer to the Catalyst 4500 Series, Catalyst 2948G, and Catalyst 2980G Switches Command Reference. Switches can inform the switch when specific hosts join or leave IP multicast groups. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 15-1 15 C H A P T E R Configuring Multicast Services This chapter describes how to configure multicast services, including Cisco...
Software Guide
Page 300
...> (enable) set multicast router 3/1 Port 3/1 added to CAM table. Configured Console> (enable) Configuring Multicast Groups To configure a multicast group manually, perform this task in privileged mode: Step 1 Step 2 Task Command Add one or more multicast MAC addresses to the set cam static 01-22-33-44-55-66 2/6-12 Static multicast entry added to multicast router port list. mod_num/port_num [vlan] Verify the multicast group configuration. Console> (enable) set cam {static | permanent} multicast_mac CAM table. show multicast router [mod_num/port_num] [vlan_id] This example...
...> (enable) set multicast router 3/1 Port 3/1 added to CAM table. Configured Console> (enable) Configuring Multicast Groups To configure a multicast group manually, perform this task in privileged mode: Step 1 Step 2 Task Command Add one or more multicast MAC addresses to the set cam static 01-22-33-44-55-66 2/6-12 Static multicast entry added to multicast router port list. mod_num/port_num [vlan] Verify the multicast group configuration. Console> (enable) set cam {static | permanent} multicast_mac CAM table. show multicast router [mod_num/port_num] [vlan_id] This example...
Software Guide
Page 301
... IGMP Traffic VLAN ---1 1 1 1 Dest MAC/Route Des 01-00-11-22-33-44* 01-11-22-33-44-55* 01-22-33-44-55-66* 01-33-44-55-66-77* Destination Ports or VCs / [Protocol Type 2/6-12 2/6-12 2/6-12 2/6-12 Total Number of Entries = 4 Console> (enable) Disabling Multicast Router Ports To disable manually configured multicast router ports, perform one or more ranges of these profiles with the physical port. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
... IGMP Traffic VLAN ---1 1 1 1 Dest MAC/Route Des 01-00-11-22-33-44* 01-11-22-33-44-55* 01-22-33-44-55-66* 01-33-44-55-66-77* Destination Ports or VCs / [Protocol Type 2/6-12 2/6-12 2/6-12 2/6-12 Total Number of Entries = 4 Console> (enable) Disabling Multicast Router Ports To disable manually configured multicast router ports, perform one or more ranges of these profiles with the physical port. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
Software Guide
Page 378
...2 Task Command Clear IP addresses that are associated with access clear snmp access-list access_number numbers. Console> (enable) Clearing IP Addresses Associated with Access Numbers To clear IP addresses that are associated with access numbers from the CLI Chapter 24 Configuring SNMP Console> (enable) set snmp access-list 2 172.20.60.7 Access number 2 has been updated with new IP Address 172.20.60.7 Console> (enable) set snmp ifalias {ifIndex} [ifAlias] show snmp ifalias [ifIndex] 24-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
...2 Task Command Clear IP addresses that are associated with access clear snmp access-list access_number numbers. Console> (enable) Clearing IP Addresses Associated with Access Numbers To clear IP addresses that are associated with access numbers from the CLI Chapter 24 Configuring SNMP Console> (enable) set snmp access-list 2 172.20.60.7 Access number 2 has been updated with new IP Address 172.20.60.7 Console> (enable) set snmp ifalias {ifIndex} [ifAlias] show snmp ifalias [ifIndex] 24-10 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
Software Guide
Page 382
... basic SNMP v3 configuration information. To configure SNMPv3 from the command-line interface (CLI), perform this task in privileged mode: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Task Command Set the SNMP-Server EngineID set snmp engineid engineid name for a group with a certain security model in the target address table. set snmp access [-hex] {groupname} {security-model v3} {noauthentication | authentication | privacy} [read -write-all) 24-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
... basic SNMP v3 configuration information. To configure SNMPv3 from the command-line interface (CLI), perform this task in privileged mode: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Task Command Set the SNMP-Server EngineID set snmp engineid engineid name for a group with a certain security model in the target address table. set snmp access [-hex] {groupname} {security-model v3} {noauthentication | authentication | privacy} [read -write-all) 24-14 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
Software Guide
Page 423
... available power for chassis and inline power for each power supply. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-3 Chapter 28 Power Management Understanding How Power Management Works on the Catalyst 4500 Series Switches Redundant Mode Guidelines This section describes the guidelines for using redundant mode in the Catalyst 4500 series switches: • By default, the power supplies in a Catalyst 4500 series switch are set to redundant mode. • The two power supplies must be the same type. Modules are...
... available power for chassis and inline power for each power supply. 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 28-3 Chapter 28 Power Management Understanding How Power Management Works on the Catalyst 4500 Series Switches Redundant Mode Guidelines This section describes the guidelines for using redundant mode in the Catalyst 4500 series switches: • By default, the power supplies in a Catalyst 4500 series switch are set to redundant mode. • The two power supplies must be the same type. Modules are...
Software Guide
Page 446
... work . If local authentication is enabled. You can configure the maximum number of the other authentication methods fail. 30-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 All authentication methods (RADIUS, TACACS+, Kerberos, or local) are not mapped to set login limits for console and Telnet connections. The switch closes any subsequent accesses and captures the user ID and the IP address of attempts to set a delay time...
... work . If local authentication is enabled. You can configure the maximum number of the other authentication methods fail. 30-2 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 78-15486-01 All authentication methods (RADIUS, TACACS+, Kerberos, or local) are not mapped to set login limits for console and Telnet connections. The switch closes any subsequent accesses and captures the user ID and the IP address of attempts to set a delay time...
Software Guide
Page 453
... 30 Configuring Switch Access Using AAA Configuring Authentication Table 30-2 Default Authentication Configuration (continued) Feature Kerberos login authentication (console and Telnet) Kerberos enable authentication (console and Telnet) Kerberos server IP address Kerberos DES key Kerberos server auth-port Kerberos local-realm name Kerberos credentials forwarding Kerberos clients mandatory Kerberos preauthentication Default Disabled Disabled None specified None specified Port 750 NULL string Disabled Not mandatory Disabled Authentication Configuration Guidelines This section lists the...
... 30 Configuring Switch Access Using AAA Configuring Authentication Table 30-2 Default Authentication Configuration (continued) Feature Kerberos login authentication (console and Telnet) Kerberos enable authentication (console and Telnet) Kerberos server IP address Kerberos DES key Kerberos server auth-port Kerberos local-realm name Kerberos credentials forwarding Kerberos clients mandatory Kerberos preauthentication Default Disabled Disabled None specified None specified Port 750 NULL string Disabled Not mandatory Disabled Authentication Configuration Guidelines This section lists the...
Software Guide
Page 457
.... Command set enablepass This example shows how to 30 characters, and use any printable ASCII characters, including a space. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-13 Enter your new password. Note Passwords that are case sensitive, contain up to set the enable password on the switch: Console> (enable) set in software release 5.3 and earlier releases remain non-case sensitive. You must reset the password after installing software...
.... Command set enablepass This example shows how to 30 characters, and use any printable ASCII characters, including a space. Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-13 Enter your new password. Note Passwords that are case sensitive, contain up to set the enable password on the switch: Console> (enable) set in software release 5.3 and earlier releases remain non-case sensitive. You must reset the password after installing software...
Software Guide
Page 459
... engine console port. The enable password is null for 30 seconds when you are connected to the console port. picard 15 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-15 Console> (enable) show localusers This example shows how to configure local user authentication authentication on the switch, perform this task in length and can consist of any alphanumeric characters. Enter privileged mode using the enable command. When...
... engine console port. The enable password is null for 30 seconds when you are connected to the console port. picard 15 Console> (enable) 78-15486-01 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide-Release 8.1 30-15 Console> (enable) show localusers This example shows how to configure local user authentication authentication on the switch, perform this task in length and can consist of any alphanumeric characters. Enter privileged mode using the enable command. When...
Software Guide
Page 480
... users using the default method of security, you do not make Kerberos authentication mandatory and Kerberos authentication fails, the application attempts to the remote server. Configuring Authentication Chapter 30 Configuring Switch Access Using AAA As an additional layer of authentication for that network service. To configure clients to forward user credentials as they connect to other services on the network with Kerberized clients. clear kerberos credentials forward 30-36 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
... users using the default method of security, you do not make Kerberos authentication mandatory and Kerberos authentication fails, the application attempts to the remote server. Configuring Authentication Chapter 30 Configuring Switch Access Using AAA As an additional layer of authentication for that network service. To configure clients to forward user credentials as they connect to other services on the network with Kerberized clients. clear kerberos credentials forward 30-36 Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide...
Software Guide
Page 527
... command, so that show version 1 Mod Port Model Serial # Versions 1 0 WS-X4012 JAB03130104 Hw : 1.5 Gsp: 6.1(1.4) Nmp: 6.1(0.104) Console> (enable) copy tftp flash IP address or name of remote host []? 172.20.52.3 Name of a supervisor engine software image: Console> (enable) show complete TFTP download procedures for downloading a supervisor engine software image from []? Sample TFTP Download Procedures To see the "Downloading Supervisor Engine Images Using TFTP" section on page 3. cat4000.6-1-1.bin Flash device [bootflash]? Reset the switch using the set boot...
... command, so that show version 1 Mod Port Model Serial # Versions 1 0 WS-X4012 JAB03130104 Hw : 1.5 Gsp: 6.1(1.4) Nmp: 6.1(0.104) Console> (enable) copy tftp flash IP address or name of remote host []? 172.20.52.3 Name of a supervisor engine software image: Console> (enable) show complete TFTP download procedures for downloading a supervisor engine software image from []? Sample TFTP Download Procedures To see the "Downloading Supervisor Engine Images Using TFTP" section on page 3. cat4000.6-1-1.bin Flash device [bootflash]? Reset the switch using the set boot...