Software Guide
Page 2
...Cisco and any other countries. The use of Cisco Systems, Inc.; and certain other company. (0208R) Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 Copyright © 2000-2003, Cisco Systems, Inc. THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL...conjunction with the Software Configuration Guide and the Command Reference for your switch. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. The Cisco implementation of TCP header compression is to Increase Your Internet Quotient, and...
...Cisco and any other countries. The use of Cisco Systems, Inc.; and certain other company. (0208R) Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 Copyright © 2000-2003, Cisco Systems, Inc. THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL...conjunction with the Software Configuration Guide and the Command Reference for your switch. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. The Cisco implementation of TCP header compression is to Increase Your Internet Quotient, and...
Software Guide
Page 18
....1x Globally 27-40 Enabling and Initializing 802.1x Authentication for Individual Ports 27-40 Setting and Enabling Automatic Reauthentication of the Supplicant 27-41 Manually Reauthenticating the Supplicant 27-42 Enabling Multiple Hosts 27-42 Disabling Multiple Hosts 27-42 Setting the Quiet Period 27-43 Setting the Authenticator-to... Authorization Events 27-49 TACACS+ Primary Options and Fallback Options 27-49 TACACS+ Command Authorization 27-50 RADIUS Authorization 27-50 xviii Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02
....1x Globally 27-40 Enabling and Initializing 802.1x Authentication for Individual Ports 27-40 Setting and Enabling Automatic Reauthentication of the Supplicant 27-41 Manually Reauthenticating the Supplicant 27-42 Enabling Multiple Hosts 27-42 Disabling Multiple Hosts 27-42 Setting the Quiet Period 27-43 Setting the Authenticator-to... Authorization Events 27-49 TACACS+ Primary Options and Fallback Options 27-49 TACACS+ Command Authorization 27-50 RADIUS Authorization 27-50 xviii Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02
Software Guide
Page 23
... of this manual, how it is for configuring and maintaining Catalyst enterprise LAN switches. Describes how to obtain additional documentaion and technical support. Describes how to perform a baseline configuration of the Catalyst enterprise LAN switches. Describes how to configure Fast EtherChannel and Gigabit EtherChannel port bundles. 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G...
... of this manual, how it is for configuring and maintaining Catalyst enterprise LAN switches. Describes how to obtain additional documentaion and technical support. Describes how to perform a baseline configuration of the Catalyst enterprise LAN switches. Describes how to configure Fast EtherChannel and Gigabit EtherChannel port bundles. 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G...
Software Guide
Page 45
..." Loading diagnostics... You can load a system image manually from Flash memory or the network interface (me1). Enter the ? command to enter ROM monitor mode. WS-X4012 bootrom version 4.5(1), built on , reset, or when a fatal exception occurs. Type control-C to the Command Reference-Catalyst 4000 Family, Catalyst 2948G, and Catalyst 2980G Switches. Power-on -self-test for Module...
..." Loading diagnostics... You can load a system image manually from Flash memory or the network interface (me1). Enter the ? command to enter ROM monitor mode. WS-X4012 bootrom version 4.5(1), built on , reset, or when a fatal exception occurs. Type control-C to the Command Reference-Catalyst 4000 Family, Catalyst 2948G, and Catalyst 2980G Switches. Power-on -self-test for Module...
Software Guide
Page 49
...message is received from the DHCP server: • Manual allocation-The network administrator maps the switch MAC address to ten seconds after all supported options contained in the message. Chapter 3 Configuring the Switch IP Address and Default Gateway Understanding Automatic IP Configuration...address Static route NTP servers 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 3-3 There are three methods for a specified period of this period, and the switch surrenders the address. The IP address is brought down , requests...
...message is received from the DHCP server: • Manual allocation-The network administrator maps the switch MAC address to ten seconds after all supported options contained in the message. Chapter 3 Configuring the Switch IP Address and Default Gateway Understanding Automatic IP Configuration...address Static route NTP servers 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 3-3 There are three methods for a specified period of this period, and the switch surrenders the address. The IP address is brought down , requests...
Software Guide
Page 56
... offset from UTC is 7 hours 58 minutes Timezone set to '', offset from DHCP Server 172.20.25.254 3-10 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02 NTP server 172.16.25.253 added NTP server 172.16.25.252 added %MGMT-5-DHCP_S:....20.25.244 from UTC is necessary only if using the manual allocation method.) show interface interface IP address, subnet mask, and broadcast address are set correctly. The switch broadcasts DHCP and RARP requests only when the switch boots up. For DHCP, confirm that the sc0 show module...
... offset from UTC is 7 hours 58 minutes Timezone set to '', offset from DHCP Server 172.20.25.254 3-10 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02 NTP server 172.16.25.253 added NTP server 172.16.25.252 added %MGMT-5-DHCP_S:....20.25.244 from UTC is necessary only if using the manual allocation method.) show interface interface IP address, subnet mask, and broadcast address are set correctly. The switch broadcasts DHCP and RARP requests only when the switch boots up. For DHCP, confirm that the sc0 show module...
Software Guide
Page 66
...at the next timeout: Port ErrDisable Reason 3/1 udld 3/8 bpdu-guard 6/5 udld 7/24 duplex-mismatch Console> (enable) Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 4-6 78-12647-02 Console> (enable) This example shows how to set the errdisable timeout interval to ... cause of causes other Disable Interval: 300 seconds Ports that will be manually reenabled. Configuring Ethernet and Fast Ethernet Ports Chapter 4 Configuring Ethernet and Fast Ethernet Switching Configuring a Timeout Period for enabling a port is 300 seconds.
...at the next timeout: Port ErrDisable Reason 3/1 udld 3/8 bpdu-guard 6/5 udld 7/24 duplex-mismatch Console> (enable) Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 4-6 78-12647-02 Console> (enable) This example shows how to set the errdisable timeout interval to ... cause of causes other Disable Interval: 300 seconds Ports that will be manually reenabled. Configuring Ethernet and Fast Ethernet Ports Chapter 4 Configuring Ethernet and Fast Ethernet Switching Configuring a Timeout Period for enabling a port is 300 seconds.
Software Guide
Page 80
...port within the EtherChannel. Only ports belonging to the same administrative group can assign an administrative group number manually or let the system software assign the next available administrative group number automatically. In addition, on your hardware..."EtherChannel Configuration Guidelines and Restrictions" section on page 6-4 and Chapter 11, "Configuring VLAN Trunks on the switch. Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 6-2 78-12647-02 Understanding How EtherChannel Works Chapter 6 Configuring Fast EtherChannel ...
...port within the EtherChannel. Only ports belonging to the same administrative group can assign an administrative group number manually or let the system software assign the next available administrative group number automatically. In addition, on your hardware..."EtherChannel Configuration Guidelines and Restrictions" section on page 6-4 and Chapter 11, "Configuring VLAN Trunks on the switch. Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 6-2 78-12647-02 Understanding How EtherChannel Works Chapter 6 Configuring Fast EtherChannel ...
Software Guide
Page 84
... 50 3/6 Console> (enable) Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 6-6 78-12647-02... To define an EtherChannel administrative group, perform this task in the group. Configuring EtherChannel Chapter 6 Configuring Fast EtherChannel and Gigabit EtherChannel Port Device-ID Port-ID Platform 3/5 069003103(5500) 3/5 WS-C4000 3/6 069003103(5500) 3/6 WS... can define an EtherChannel administrative group manually to identify groups of ports that ...
... 50 3/6 Console> (enable) Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 6-6 78-12647-02... To define an EtherChannel administrative group, perform this task in the group. Configuring EtherChannel Chapter 6 Configuring Fast EtherChannel and Gigabit EtherChannel Port Device-ID Port-ID Platform 3/5 069003103(5500) 3/5 WS-C4000 3/6 069003103(5500) 3/6 WS... can define an EtherChannel administrative group manually to identify groups of ports that ...
Software Guide
Page 100
... uses a 16-bit format that are selected. You can also manually assign port costs between 1-65535. Table 8-1 shows the default port cost values that yields values from the switch to the root switch. • Ports included in your network to use the short ...; One switch is elected as the root switch. • The shortest distance to the root switch is calculated for each switch is used to calculate the port cost unless you can calculate and assign lower path cost values (port costs) to 65535 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, ...
... uses a 16-bit format that are selected. You can also manually assign port costs between 1-65535. Table 8-1 shows the default port cost values that yields values from the switch to the root switch. • Ports included in your network to use the short ...; One switch is elected as the root switch. • The shortest distance to the root switch is calculated for each switch is used to calculate the port cost unless you can calculate and assign lower path cost values (port costs) to 65535 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, ...
Software Guide
Page 101
...software release 5.4(2) or later releases. These changes in changes to recalculation of the port by the switch and the recommended cost values and ranges for all the ARP entries belonging to the VLAN interface ... will not result in bandwidth lead to the cost of these states: 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 7-5 Learning the entries immediately following a topology change . They must wait... Spanning Tree Port States Topology changes can also manually assign port costs between 1-200,000,000.
...software release 5.4(2) or later releases. These changes in changes to recalculation of the port by the switch and the recommended cost values and ranges for all the ARP entries belonging to the VLAN interface ... will not result in bandwidth lead to the cost of these states: 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 7-5 Learning the entries immediately following a topology change . They must wait... Spanning Tree Port States Topology changes can also manually assign port costs between 1-200,000,000.
Software Guide
Page 123
... of the MISTP instances associated with the VLAN, the MAC addresses of the root switches that instance. The timer is already mapped to which they are flooded. 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 7-27 When you disable spanning tree on the list...-00-01 inactive 10 The Delay timer shows the time in seconds remaining before the entry will join the instance. When you must manually remove the incorrect mapping(s) from the MISTP instances to an instance (the timer has expired), or the VLAN is used to it...
... of the MISTP instances associated with the VLAN, the MAC addresses of the root switches that instance. The timer is already mapped to which they are flooded. 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 7-27 When you disable spanning tree on the list...-00-01 inactive 10 The Delay timer shows the time in seconds remaining before the entry will join the instance. When you must manually remove the incorrect mapping(s) from the MISTP instances to an instance (the timer has expired), or the VLAN is used to it...
Software Guide
Page 135
...BPDUs. Configuring PortFast BPDU Guard These sections describe how to configure PortFast BPDU guard on the switch, spanning tree applies BPDU guard to disable PortFast on ports that port. Command set spantree ...switch: • Enabling PortFast BPDU Guard, page 8-4 • Disabling PortFast BPDU Guard, page 8-5 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 8-3 The most secure implementation of putting them into an errdisable state when a BPDU is to invalid configurations because the administrator must manually...
...BPDUs. Configuring PortFast BPDU Guard These sections describe how to configure PortFast BPDU guard on the switch, spanning tree applies BPDU guard to disable PortFast on ports that port. Command set spantree ...switch: • Enabling PortFast BPDU Guard, page 8-4 • Disabling PortFast BPDU Guard, page 8-5 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 8-3 The most secure implementation of putting them into an errdisable state when a BPDU is to invalid configurations because the administrator must manually...
Software Guide
Page 164
Traffic between VLANs must be assigned to VLANs using this method, it is assigned manually on the same VLAN directly without a router. Port VLAN membership on the switch is known as Logically Defined Networks Cisco router Catalyst 4000 Engineering VLAN Marketing VLAN Fast Ethernet Catalyst 4000 Catalyst 4000 Accounting VLAN Floor 3 Floor 2 43990 Floor 1 VLANs are overwritten. If you assign...
Traffic between VLANs must be assigned to VLANs using this method, it is assigned manually on the same VLAN directly without a router. Port VLAN membership on the switch is known as Logically Defined Networks Cisco router Catalyst 4000 Engineering VLAN Marketing VLAN Fast Ethernet Catalyst 4000 Catalyst 4000 Accounting VLAN Floor 3 Floor 2 43990 Floor 1 VLANs are overwritten. If you assign...
Software Guide
Page 172
...root bridge. • BPDU guard mode is system wide and is enabled once the first port is enabled on the system. You should manually double check the STP configuration to ensure that VLAN with its associated isolated and community VLANs. Creating a Private VLAN To create a private... primary, isolated, and community VLANs spanning tree topologies match. • If you enable MAC address reduction on a Catalyst 4000 series switch, you enable MAC address reduction on some switches using MAC address reduction, and others (mixed environment), you will have to use SPAN on only one VLAN to ...
...root bridge. • BPDU guard mode is system wide and is enabled once the first port is enabled on the system. You should manually double check the STP configuration to ensure that VLAN with its associated isolated and community VLANs. Creating a Private VLAN To create a private... primary, isolated, and community VLANs spanning tree topologies match. • If you enable MAC address reduction on a Catalyst 4000 series switch, you enable MAC address reduction on some switches using MAC address reduction, and others (mixed environment), you will have to use SPAN on only one VLAN to ...
Software Guide
Page 178
... hardware-dependent. However, you can use the show port capabilities command to be in a different domain. For example, the Catalyst 4000 family switch modules support only 802.1Q encapsulation. Table 11-1 Fast Ethernet and Gigabit Ethernet Trunking Modes Mode on Fast Ethernet and Gigabit ..., Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02 For more information on VTP domains, see your hardware supports trunking, and to on Fast Ethernet and Gigabit Ethernet ports, the ports must configure the neighboring port manually as a trunk port to convert the link into ...
... hardware-dependent. However, you can use the show port capabilities command to be in a different domain. For example, the Catalyst 4000 family switch modules support only 802.1Q encapsulation. Table 11-1 Fast Ethernet and Gigabit Ethernet Trunking Modes Mode on Fast Ethernet and Gigabit ..., Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02 For more information on VTP domains, see your hardware supports trunking, and to on Fast Ethernet and Gigabit Ethernet ports, the ports must configure the neighboring port manually as a trunk port to convert the link into ...
Software Guide
Page 179
...Function Specifies 802.1Q encapsulation on ports connected to non-switch devices if you do not intend to trunk across ... Neighbor: Nontrunk Neighbor: Nontrunk Neighbor: Nontrunk on a link to a Cisco router, use the nonegotiate keyword to cause the port to -point protocol.... However, some internetworking devices might forward DTP frames improperly. When manually enabling trunking on dot1q Local: Nontrunk Local: 1Q trunk Local: ...trunk Local: Nontrunk Neighbor: Nontrunk Note DTP is supported in Catalyst 4000 family with 802.1Q-capable hardware. Automatic negotiation of Possible Fast...
...Function Specifies 802.1Q encapsulation on ports connected to non-switch devices if you do not intend to trunk across ... Neighbor: Nontrunk Neighbor: Nontrunk Neighbor: Nontrunk on a link to a Cisco router, use the nonegotiate keyword to cause the port to -point protocol.... However, some internetworking devices might forward DTP frames improperly. When manually enabling trunking on dot1q Local: Nontrunk Local: 1Q trunk Local: ...trunk Local: Nontrunk Neighbor: Nontrunk Note DTP is supported in Catalyst 4000 family with 802.1Q-capable hardware. Automatic negotiation of Possible Fast...
Software Guide
Page 209
...222 Auxiliaryvlan 222 configuration successful. Console> (enable) 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 12-11 All such tagged packets are considered to...Guidelines" section on auxiliary VLANs and Cisco voice-over-IP networks, refer to the "Configuring a Voice-over-IP Network" chapter in the Catalyst 6000 Family Software Configuration Guide. Console... the auxiliary VLAN ID is not dynamic, you need to configure it manually. Configuring Dynamic Port VLAN Membership with Auxiliary VLANs This example shows how...
...222 Auxiliaryvlan 222 configuration successful. Console> (enable) 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 12-11 All such tagged packets are considered to...Guidelines" section on auxiliary VLANs and Cisco voice-over-IP networks, refer to the "Configuring a Voice-over-IP Network" chapter in the Catalyst 6000 Family Software Configuration Guide. Console... the auxiliary VLAN ID is not dynamic, you need to configure it manually. Configuring Dynamic Port VLAN Membership with Auxiliary VLANs This example shows how...
Software Guide
Page 215
...1 Step 2 Task Configure fixed registration on the trunk port. 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 13-5 show gvrp configuration This example shows how to configure fixed ...13 Configuring GVRP Configuring GVRP Configuring GVRP Registration These sections describe how to configure GVRP registration modes on switch ports: • Setting GVRP Normal Registration, page 13-5 • Setting GVRP Fixed Registration, ... in fixed registration mode allows manual creation and registration of VLANs on port 1/1.
...1 Step 2 Task Configure fixed registration on the trunk port. 78-12647-02 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 13-5 show gvrp configuration This example shows how to configure fixed ...13 Configuring GVRP Configuring GVRP Configuring GVRP Registration These sections describe how to configure GVRP registration modes on switch ports: • Setting GVRP Normal Registration, page 13-5 • Setting GVRP Fixed Registration, ... in fixed registration mode allows manual creation and registration of VLANs on port 1/1.
Software Guide
Page 236
... learned and show multicast router [mod_num/port_num] manually configured multicast router ports. [vlan_id] Display information only on those multicast router ports that the entry was configured manually): Console> (enable) show multicast router cgmp CGMP...Chapter 15 Configuring Multicast Services Displaying Multicast Router Information When you enable CGMP, the switch automatically learns to which ports a multicast router is connected. Configured Console> (enable) 15-6 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02
... learned and show multicast router [mod_num/port_num] manually configured multicast router ports. [vlan_id] Display information only on those multicast router ports that the entry was configured manually): Console> (enable) show multicast router cgmp CGMP...Chapter 15 Configuring Multicast Services Displaying Multicast Router Information When you enable CGMP, the switch automatically learns to which ports a multicast router is connected. Configured Console> (enable) 15-6 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02