Software Guide
Page 24
... how to configure IP permit list on Fast Ethernet and Gigabit Ethernet Ports Describes how to configure quality of service (QoS). Chapter 17 Configuring the IP Permit List Describes how to configure port security on the switch. Chapter 22 Configuring UDLD Describes how to check connectivity using ping, Telnet, and IP traceroute. Part 6-Monitoring and Managing the Switch Chapter 19 Checking Port Status and Connectivity Describes how to display information about modules and switch ports and how to configure the UniDirectional Link Detection...
... how to configure IP permit list on Fast Ethernet and Gigabit Ethernet Ports Describes how to configure quality of service (QoS). Chapter 17 Configuring the IP Permit List Describes how to configure port security on the switch. Chapter 22 Configuring UDLD Describes how to check connectivity using ping, Telnet, and IP traceroute. Part 6-Monitoring and Managing the Switch Chapter 19 Checking Port Status and Connectivity Describes how to display information about modules and switch ports and how to configure the UniDirectional Link Detection...
Software Guide
Page 38
... cable. Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 2-2 78-12647-02 You configure the switch using the tip command on a PC or using set commands to a specific module, port, or VLAN. Accessing the CLI Through Telnet Before you must connect a console terminal to change switch parameters. To access the switch CLI through a Telnet session. Accessing the Switch CLI Chapter 2 Using the Command-Line Interface The Catalyst enterprise LAN switches are multimodule systems. Commands you first must first set the IP address...
... cable. Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 2-2 78-12647-02 You configure the switch using the tip command on a PC or using set commands to a specific module, port, or VLAN. Accessing the CLI Through Telnet Before you must connect a console terminal to change switch parameters. To access the switch CLI through a Telnet session. Accessing the Switch CLI Chapter 2 Using the Command-Line Interface The Catalyst enterprise LAN switches are multimodule systems. Commands you first must first set the IP address...
Software Guide
Page 39
... Command-Line Interface Switch CLI Command Modes Note For more information about using Telnet (for more information, see the "Accessing the Switch CLI" section on page 2-2). Both modes are connecting to a new switch, press Return at the Enter Password prompt. On a new switch, the normal-mode password is '^]'. To enter normal command mode, follow these steps: Step 1 Step 2 Connect to change the system configuration. You will see the user level command-line prompt: Enter Password: Console> 78-12647-02 Software Configuration Guide-Catalyst 4000...
... Command-Line Interface Switch CLI Command Modes Note For more information about using Telnet (for more information, see the "Accessing the Switch CLI" section on page 2-2). Both modes are connecting to a new switch, press Return at the Enter Password prompt. On a new switch, the normal-mode password is '^]'. To enter normal command mode, follow these steps: Step 1 Step 2 Connect to change the system configuration. You will see the user level command-line prompt: Enter Password: Console> 78-12647-02 Software Configuration Guide-Catalyst 4000...
Software Guide
Page 55
... Step 3 Task Command Access the switch from a remote host with Telnet. Cisco Systems, Inc. Console> (enable) 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 3-9 slip detach This example shows how to 172.20.52.38. Chapter 3 Configuring the Switch IP Address and Default Gateway Configuring the SLIP (sl0) Interface on the Console Port To enable and attach SLIP on the switch. Console Enter password: Console> enable Enter password: Console> (enable) set interface sl0 10.1.1.1 10.1.1.2 Interface sl0 slip and...
... Step 3 Task Command Access the switch from a remote host with Telnet. Cisco Systems, Inc. Console> (enable) 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 3-9 slip detach This example shows how to 172.20.52.38. Chapter 3 Configuring the Switch IP Address and Default Gateway Configuring the SLIP (sl0) Interface on the Console Port To enable and attach SLIP on the switch. Console Enter password: Console> enable Enter password: Console> (enable) set interface sl0 10.1.1.1 10.1.1.2 Interface sl0 slip and...
Software Guide
Page 56
... necessary only if using the manual or automatic allocation methods.) Set the sc0 interface IP address to DNS server table as default gateway address) are set to obtain an IP address for each switch in the MAC address range for the switch. (With DHCP, this task: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Task Command Make sure there is a DHCP, BOOTP, or RARP - reset system When the switch reboots, confirm that other...
... necessary only if using the manual or automatic allocation methods.) Set the sc0 interface IP address to DNS server table as default gateway address) are set to obtain an IP address for each switch in the MAC address range for the switch. (With DHCP, this task: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Task Command Make sure there is a DHCP, BOOTP, or RARP - reset system When the switch reboots, confirm that other...
Software Guide
Page 63
... Connection Port 1/1 name set the name for Ports in privileged mode: Step 1 Step 2 Task Assign a name to a port. Command set port name mod_num/port_num [name_string] show port [mod_num[/port_num]] This example shows how to set . 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 4-3 Chapter 4 Configuring Ethernet and Fast Ethernet Switching Configuring Ethernet and Fast Ethernet Ports Table 4-1 Ethernet and Fast Ethernet Default Configuration (continued) Feature Port priority Duplex mode Native VLAN Spanning tree...
... Connection Port 1/1 name set the name for Ports in privileged mode: Step 1 Step 2 Task Assign a name to a port. Command set port name mod_num/port_num [name_string] show port [mod_num[/port_num]] This example shows how to set . 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 4-3 Chapter 4 Configuring Ethernet and Fast Ethernet Switching Configuring Ethernet and Fast Ethernet Ports Table 4-1 Ethernet and Fast Ethernet Default Configuration (continued) Feature Port priority Duplex mode Native VLAN Spanning tree...
Software Guide
Page 80
... an administrative group number creates a new automatically numbered administrative group consisting of the ports you configure as an EtherChannel. EtherChannel IDs are stored in the channel. The channel is then added to the remaining ports within an EtherChannel fails, traffic previously carried over the failed port switches to the spanning tree as trunk links. Use the show channel group admin_group command to which the EtherChannel belongs. Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases...
... an administrative group number creates a new automatically numbered administrative group consisting of the ports you configure as an EtherChannel. EtherChannel IDs are stored in the channel. The channel is then added to the remaining ports within an EtherChannel fails, traffic previously carried over the failed port switches to the spanning tree as trunk links. Use the show channel group admin_group command to which the EtherChannel belongs. Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases...
Software Guide
Page 82
... packets for a 6-slot chassis. Table 6-2 Fast EtherChannel and Gigabit EtherChannel Default Configuration Feature Fast EtherChannel Gigabit EtherChannel Frame-distribution method Default Value auto silent mode on all Fast Ethernet ports auto silent mode on both ends of service (QoS) parameters. • Do not configure the ports in an EtherChannel as a trunk, configure the same trunk mode on all trunks in different trunk modes can adversely affect switch performance. • Make sure port security is hardware-dependent. Configuring ports in an EtherChannel in a channel, trunk...
... packets for a 6-slot chassis. Table 6-2 Fast EtherChannel and Gigabit EtherChannel Default Configuration Feature Fast EtherChannel Gigabit EtherChannel Frame-distribution method Default Value auto silent mode on all Fast Ethernet ports auto silent mode on both ends of service (QoS) parameters. • Do not configure the ports in an EtherChannel as a trunk, configure the same trunk mode on all trunks in different trunk modes can adversely affect switch performance. • Make sure port security is hardware-dependent. Configuring ports in an EtherChannel in a channel, trunk...
Software Guide
Page 153
... Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 9-1 Configuring VTP CH A P T E R 9 This chapter describes how to the Command Reference-Catalyst 4000 Family, Catalyst 2948G, and Catalyst 2980G Switches. This chapter consists of these sections: • Understanding How VTP Works, page 9-1 • Default VTP Configuration, page 9-5 • VTP Configuration Guidelines, page 9-5 • Configuring VTP, page 9-5 Understanding How VTP Works Before you create virtual LANs (VLANs), you can result in the network...
... Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 9-1 Configuring VTP CH A P T E R 9 This chapter describes how to the Command Reference-Catalyst 4000 Family, Catalyst 2948G, and Catalyst 2980G Switches. This chapter consists of these sections: • Understanding How VTP Works, page 9-1 • Default VTP Configuration, page 9-5 • VTP Configuration Guidelines, page 9-5 • Configuring VTP, page 9-5 Understanding How VTP Works Before you create virtual LANs (VLANs), you can result in the network...
Software Guide
Page 169
... normal VLANs from the same Catalyst 4000 family switch. 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 10-7 Caution When you delete a VLAN, any ports assigned to continue(y/n) [n]?y Vlan 500 deleted Console> (enable) Configuring Private VLANs These sections describe how private VLANs work: • Understanding How Private VLANs Work, page 10-7 • Private VLAN Configuration Guidelines, page 10-9 • Creating a Private VLAN, page 10-10 • Viewing the Port Capability of supporting VLANs that VLAN become...
... normal VLANs from the same Catalyst 4000 family switch. 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 10-7 Caution When you delete a VLAN, any ports assigned to continue(y/n) [n]?y Vlan 500 deleted Console> (enable) Configuring Private VLANs These sections describe how private VLANs work: • Understanding How Private VLANs Work, page 10-7 • Private VLAN Configuration Guidelines, page 10-9 • Creating a Private VLAN, page 10-10 • Viewing the Port Capability of supporting VLANs that VLAN become...
Software Guide
Page 172
..., in a network where private VLANs are not supported in privileged mode: Step 1 Step 2 Step 3 Step 4 Step 5 Task Create the primary VLAN. You should manually double check the STP configuration to ensure that the primary, isolated, and community VLANs spanning tree topologies match. • If you enable MAC address reduction on a Catalyst 4000 series switch, you will have to use SPAN on the system. Configuring Private VLANs Chapter 10 Configuring VLANs • In networks with some switches and disable it...
..., in a network where private VLANs are not supported in privileged mode: Step 1 Step 2 Step 3 Step 4 Step 5 Task Create the primary VLAN. You should manually double check the STP configuration to ensure that the primary, isolated, and community VLANs spanning tree topologies match. • If you enable MAC address reduction on a Catalyst 4000 series switch, you will have to use SPAN on the system. Configuring Private VLANs Chapter 10 Configuring VLANs • In networks with some switches and disable it...
Software Guide
Page 178
...the change . Fast Ethernet and Gigabit Ethernet trunk ports support five different trunking modes (see Chapter 6, "Configuring Fast EtherChannel and Gigabit EtherChannel." For trunking to establish a trunk link. Trunking Modes and Encapsulation Types Table 11-1 lists the trunking modes used with the set trunk command and describes how it is set to determine which encapsulation types a particular port supports. 11-2 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02 The port becomes a trunk port...
...the change . Fast Ethernet and Gigabit Ethernet trunk ports support five different trunking modes (see Chapter 6, "Configuring Fast EtherChannel and Gigabit EtherChannel." For trunking to establish a trunk link. Trunking Modes and Encapsulation Types Table 11-1 lists the trunking modes used with the set trunk command and describes how it is set to determine which encapsulation types a particular port supports. 11-2 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02 The port becomes a trunk port...
Software Guide
Page 231
... forwarded only to the Command Reference-Catalyst 4000 Family, Catalyst 2948G, and Catalyst 2980G Switches. Note For more information on the Catalyst enterprise LAN switches: • Understanding Multicasting and Multicast Services Operation, page 15-1 • Joining a Multicast Group, page 15-2 • Leaving a Multicast Group, page 15-2 • Understanding GMRP Operation, page 15-3 Understanding Multicasting and Multicast Services Operation CGMP, IGMP snooping, and GMRP manage multicast traffic in IEEE 802.1p. 78-12647-02 Software Configuration Guide-Catalyst 4000...
... forwarded only to the Command Reference-Catalyst 4000 Family, Catalyst 2948G, and Catalyst 2980G Switches. Note For more information on the Catalyst enterprise LAN switches: • Understanding Multicasting and Multicast Services Operation, page 15-1 • Joining a Multicast Group, page 15-2 • Leaving a Multicast Group, page 15-2 • Understanding GMRP Operation, page 15-3 Understanding Multicasting and Multicast Services Operation CGMP, IGMP snooping, and GMRP manage multicast traffic in IEEE 802.1p. 78-12647-02 Software Configuration Guide-Catalyst 4000...
Software Guide
Page 247
... table. Console> (enable) 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 15-17 Console> (enable) show multicast group CGMP enabled IGMP disabled VLAN ---1 1 1 1 Dest MAC/Route Des 01-00-11-22-33-44* 01-11-22-33-44-55* 01-22-33-44-55-66* 01-33-44-55-66-77* Destination Ports or VCs / [Protocol Type 2/6-12 2/6-12 2/6-12 2/6-12 Total Number of Entries = 4 Console> (enable) Clearing Multicast Router Ports To clear manually configured multicast router ports...
... table. Console> (enable) 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 15-17 Console> (enable) show multicast group CGMP enabled IGMP disabled VLAN ---1 1 1 1 Dest MAC/Route Des 01-00-11-22-33-44* 01-11-22-33-44-55* 01-22-33-44-55-66* 01-33-44-55-66-77* Destination Ports or VCs / [Protocol Type 2/6-12 2/6-12 2/6-12 2/6-12 Total Number of Entries = 4 Console> (enable) Clearing Multicast Router Ports To clear manually configured multicast router ports...
Software Guide
Page 350
... to the Catalyst 4000 Family Installation Guide. Power Management Chapter 26 Administering the Switch In systems with redundant power supplies, both power supplies must be empty. The set power budget command. The 1+1 redundancy mode is designed and optimized for a total of the same wattage. The 1+1 redundancy mode cannot support a fully loaded chassis, regardless of the module configuration, and, therefore, one slot of the chassis must change the system configuration from the default 2+1redundancy mode to...
... to the Catalyst 4000 Family Installation Guide. Power Management Chapter 26 Administering the Switch In systems with redundant power supplies, both power supplies must be empty. The set power budget command. The 1+1 redundancy mode is designed and optimized for a total of the same wattage. The 1+1 redundancy mode cannot support a fully loaded chassis, regardless of the module configuration, and, therefore, one slot of the chassis must change the system configuration from the default 2+1redundancy mode to...
Software Guide
Page 358
... configure a RADIUS key on the network in Kerberos. 27-4 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02 You can specify which the ticket was issued. If local authentication is disabled and you configure a key on the client, it receives from one configured on the switch: • Enable or disable RADIUS authentication to control login access • Enable or disable RADIUS authentication to control enable access • Specify the IP addresses and UDP ports...
... configure a RADIUS key on the network in Kerberos. 27-4 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02 You can specify which the ticket was issued. If local authentication is disabled and you configure a key on the client, it receives from one configured on the switch: • Enable or disable RADIUS authentication to control login access • Enable or disable RADIUS authentication to control enable access • Specify the IP addresses and UDP ports...
Software Guide
Page 369
... may be unable to log in releases prior to the switch. 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 27-15 Enter your old password (press Return on the switch: Console> (enable) set enablepass Enter old password: Enter new password: Retype new password: Password changed . set enablepass This example shows how to the privileged mode CLI. Console> (enable) Setting the Enable Password The enable password controls access to set the enable password on a switch with no password configured), enter your new...
... may be unable to log in releases prior to the switch. 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 27-15 Enter your old password (press Return on the switch: Console> (enable) set enablepass Enter old password: Enter new password: Retype new password: Password changed . set enablepass This example shows how to the privileged mode CLI. Console> (enable) Setting the Enable Password The enable password controls access to set the enable password on a switch with no password configured), enter your new...
Software Guide
Page 371
... Command Specify the IP address of one or more TACACS+ servers before you explicitly make one or more TACACS+ set tacacs server ip_addr [primary] servers. Console> (enable) set tacacs server 172.20.52.10 172.20.52.10 added to TACACS server table as backup server. When prompted for your new password. show tacacs Login Authentication tacacs radius local Console Session disabled disabled enabled(primary) Telnet Session disabled disabled enabled(primary) 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst...
... Command Specify the IP address of one or more TACACS+ servers before you explicitly make one or more TACACS+ set tacacs server ip_addr [primary] servers. Console> (enable) set tacacs server 172.20.52.10 172.20.52.10 added to TACACS server table as backup server. When prompted for your new password. show tacacs Login Authentication tacacs radius local Console Session disabled disabled enabled(primary) Telnet Session disabled disabled enabled(primary) 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst...
Software Guide
Page 389
... Method set to mandatory Console> (enable) 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 27-35 However, if forwarding is not enabled and a user tries to list credentials after users authenticate to it to authenticate to a host on the network. Chapter 27 Configuring Switch Access Using AAA Configuring Authentication This example shows how to clear a SRVTAB entry: Console> (enable) clear kerberos srvtab entry host/niners.cisco.com@CISCO.COM 0 Console> (enable) Enabling Credentials Forwarding A user authenticated...
... Method set to mandatory Console> (enable) 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 27-35 However, if forwarding is not enabled and a user tries to list credentials after users authenticate to it to authenticate to a host on the network. Chapter 27 Configuring Switch Access Using AAA Configuring Authentication This example shows how to clear a SRVTAB entry: Console> (enable) clear kerberos srvtab entry host/niners.cisco.com@CISCO.COM 0 Console> (enable) Enabling Credentials Forwarding A user authenticated...
Software Guide
Page 431
... switch reboots, enter the show version 1 Mod Port Model Serial # Versions 1 0 WS-X4012 JAB03130104 Hw : 1.5 Gsp: 6.1(1.4) Nmp: 6.1(0.104) Console> (enable) copy tftp flash IP address or name of remote host []? 172.20.52.3 Name of the code on device bootflash, proceed (y/n) [n]? If you want to the bootflash. Do you are connected to the Switch Using TFTP Note The Catalyst 4000 family, 2948G, and 2980G switches have only one Flash device (bootflash). y CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCCCCCCCCCCCCCCC File...
... switch reboots, enter the show version 1 Mod Port Model Serial # Versions 1 0 WS-X4012 JAB03130104 Hw : 1.5 Gsp: 6.1(1.4) Nmp: 6.1(0.104) Console> (enable) copy tftp flash IP address or name of remote host []? 172.20.52.3 Name of the code on device bootflash, proceed (y/n) [n]? If you want to the bootflash. Do you are connected to the Switch Using TFTP Note The Catalyst 4000 family, 2948G, and 2980G switches have only one Flash device (bootflash). y CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC CCCCCCCCCCCCCCCCCCC File...