Software Guide
Page 4
...Interface on the Console Port 7 Using BOOTP, DHCP, or RARP to Obtain an IP Address 9 Renewing and Releasing a DHCP-Assigned IP Address 10 Configuring Ethernet, Fast Ethernet, and Gigabit Ethernet Switching 1 Understanding How Ethernet Works 1 Switching Frames Between Segments 2 Building the Address Table 2 Understanding How Port Negotiation Works 2 Default Ethernet, Fast Ethernet, and Gigabit Ethernet Configuration 3 Setting the Port Configuration 4 Setting the Port Name 4 Setting the Port Speed 5 Setting the Port Duplex Mode 5 Configuring IEEE 802.3X Flow Control 6 Enabling and Disabling Port...
...Interface on the Console Port 7 Using BOOTP, DHCP, or RARP to Obtain an IP Address 9 Renewing and Releasing a DHCP-Assigned IP Address 10 Configuring Ethernet, Fast Ethernet, and Gigabit Ethernet Switching 1 Understanding How Ethernet Works 1 Switching Frames Between Segments 2 Building the Address Table 2 Understanding How Port Negotiation Works 2 Default Ethernet, Fast Ethernet, and Gigabit Ethernet Configuration 3 Setting the Port Configuration 4 Setting the Port Name 4 Setting the Port Speed 5 Setting the Port Duplex Mode 5 Configuring IEEE 802.3X Flow Control 6 Enabling and Disabling Port...
Software Guide
Page 28
... UniDirectional Link Detection (UDLD) protocol. Configuring GVRP Describes how to check connectivity using the VLAN Management Policy Server (VMPS). Checking Port Status and Connectivity Describes how to display information about modules and switch ports and how to configure GARP VLAN Registration Protocol (GVRP) on the switch. Configuring Access Control Describes how to the CLI. Configuring Switch Access Using AAA Describes how to configure authentication, authorization, and accounting (AAA) to monitor and control access to configure access control lists...
... UniDirectional Link Detection (UDLD) protocol. Configuring GVRP Describes how to check connectivity using the VLAN Management Policy Server (VMPS). Checking Port Status and Connectivity Describes how to display information about modules and switch ports and how to configure GARP VLAN Registration Protocol (GVRP) on the switch. Configuring Access Control Describes how to the CLI. Configuring Switch Access Using AAA Describes how to configure authentication, authorization, and accounting (AAA) to monitor and control access to configure access control lists...
Software Guide
Page 32
Cisco.com registered users have complete access to help you can obtain online documentation, troubleshooting tips, and sample configurations from anywhere in service contracts, when applicable. Obtaining Technical Assistance Preface Documentation Feedback You can submit comments electronically on the Cisco TAC website, including TAC tools and utilities. Cisco.com provides a broad range of interactive, networked services that you access Cisco information, networking solutions, services, programs, and resources at any time, from...
Cisco.com registered users have complete access to help you can obtain online documentation, troubleshooting tips, and sample configurations from anywhere in service contracts, when applicable. Obtaining Technical Assistance Preface Documentation Feedback You can submit comments electronically on the Cisco TAC website, including TAC tools and utilities. Cisco.com provides a broad range of interactive, networked services that you access Cisco information, networking solutions, services, programs, and resources at any time, from...
Software Guide
Page 60
... MAC address of a link must have the same setting. Ports on a typical Ethernet hub all connect to all devices attached to a single port without flooding any entries. You cannot disable port negotiation with the port on which workstations or servers connect to the hub is removed from one port and disabled on the other stations attached to the network. The switch uses an aging mechanism, defined by all ports. Understanding How Ethernet Works...
... MAC address of a link must have the same setting. Ports on a typical Ethernet hub all connect to all devices attached to a single port without flooding any entries. You cannot disable port negotiation with the port on which workstations or servers connect to the hub is removed from one port and disabled on the other stations attached to the network. The switch uses an aging mechanism, defined by all ports. Understanding How Ethernet Works...
Software Guide
Page 109
... devices connected by an asymmetrical link - Devices connected by an asymmetrical link. • An interconnected network cannot have redundant paths to two different edge switches in privileged mode: Step 1 Step 2 Task Configure tunneling support on 802.1Q trunks, dropping any untagged traffic, including untagged traffic in any switch that configures a switch to forward all ports in the EtherChannel must have redundant paths to support 802.1Q tunneling, perform this command on any VLAN used...
... devices connected by an asymmetrical link - Devices connected by an asymmetrical link. • An interconnected network cannot have redundant paths to two different edge switches in privileged mode: Step 1 Step 2 Task Configure tunneling support on 802.1Q trunks, dropping any untagged traffic, including untagged traffic in any switch that configures a switch to forward all ports in the EtherChannel must have redundant paths to support 802.1Q tunneling, perform this command on any VLAN used...
Software Guide
Page 380
... module number and the port number to see the "Checking Module Status" section on page 19-1. 19-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02 For more information, see detailed information about the specified port. Specify a particular module number to a particular port, you must specify the appropriate logical module. Checking Port Status Chapter 19 Checking Port Status and Connectivity Console> (enable) show module Mod Slot Ports Module-Type Model Status 11 2 1000BaseX Supervisor WS-X6K-SUP1-2GE ok 2 2 24 100BaseFX MM Ethernet...
... module number and the port number to see the "Checking Module Status" section on page 19-1. 19-2 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02 For more information, see detailed information about the specified port. Specify a particular module number to a particular port, you must specify the appropriate logical module. Checking Port Status Chapter 19 Checking Port Status and Connectivity Console> (enable) show module Mod Slot Ports Module-Type Model Status 11 2 1000BaseX Supervisor WS-X6K-SUP1-2GE ok 2 2 24 100BaseFX MM Ethernet...
Software Guide
Page 382
... the switch to access other devices in a switch using Telnet. Up to display the port capabilities for switch ports: Console> (enable) show port capabilities 1/1 Model WS-X6K-SUP1A-2GE Port 1/1 Type No Connector Speed 1000 Duplex full Trunk encap type 802.1Q,ISL Trunk mode on,off,desirable,auto,nonegotiate Channel yes Broadcast suppression percentage(0-100) Flow control receive-(off,on,desired),send-(off,on,desired) Security yes Membership static,dynamic Fast start yes QOS scheduling...
... the switch to access other devices in a switch using Telnet. Up to display the port capabilities for switch ports: Console> (enable) show port capabilities 1/1 Model WS-X6K-SUP1A-2GE Port 1/1 Type No Connector Speed 1000 Duplex full Trunk encap type 802.1Q,ISL Trunk mode on,off,desirable,auto,nonegotiate Channel yes Broadcast suppression percentage(0-100) Flow control receive-(off,on,desired),send-(off,on,desired) Security yes Membership static,dynamic Fast start yes QOS scheduling...
Software Guide
Page 424
... Login Password The login password controls access to the user mode CLI. set to enable local authentication only for console and telnet session. You do not need to perform this task in releases prior to activate case sensitivity. 21-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02 You must reset the password after installing software release 5.4 to software release 5.4 remain non-case sensitive. Note Passwords set in privileged mode: Step 1 Step 2 Step 3 Task Command Enable local login authentication on the switch...
... Login Password The login password controls access to the user mode CLI. set to enable local authentication only for console and telnet session. You do not need to perform this task in releases prior to activate case sensitivity. 21-14 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02 You must reset the password after installing software release 5.4 to software release 5.4 remain non-case sensitive. Note Passwords set in privileged mode: Step 1 Step 2 Step 3 Task Command Enable local login authentication on the switch...
Software Guide
Page 425
... must reset the password after installing software release 5.4 to 19 characters, and use any printable character, including a space. Passwords are case sensitive, contain up to activate case sensitivity. Enter your old password (press Return on the switch: Console> (enable) set the enable password for local authentication, perform this task in privileged mode: Task Command Set the login password for privileged mode. Console> (enable) Setting the Enable Password The login password controls access to set the login password on a switch with no password configured), enter...
... must reset the password after installing software release 5.4 to 19 characters, and use any printable character, including a space. Passwords are case sensitive, contain up to activate case sensitivity. Enter your old password (press Return on the switch: Console> (enable) set the enable password for local authentication, perform this task in privileged mode: Task Command Set the login password for privileged mode. Console> (enable) Setting the Enable Password The login password controls access to set the login password on a switch with no password configured), enter...
Software Guide
Page 427
... privileged mode: Step 1 Step 2 Task Command Specify the IP address of one or more TACACS+ set tacacs server 172.20.52.2 primary 172.20.52.2 added to the console port. The login password is the primary server, unless you are connected to TACACS server table as backup server. Enter and confirm your old password, press Return. Enter privileged mode using the primary keyword. Chapter 21 Configuring Switch Access Using AAA Configuring Authentication Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 At the "Enter Password" prompt...
... privileged mode: Step 1 Step 2 Task Command Specify the IP address of one or more TACACS+ set tacacs server 172.20.52.2 primary 172.20.52.2 added to the console port. The login password is the primary server, unless you are connected to TACACS server table as backup server. Enter and confirm your old password, press Return. Enter privileged mode using the primary keyword. Chapter 21 Configuring Switch Access Using AAA Configuring Authentication Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 At the "Enter Password" prompt...
Software Guide
Page 521
... that the MSFC be manually booted each time the switch is reset. Setting the MSFC Configuration Register For manual-mode MSFC redundancy, set the configuration registers to operations personnel (out-of-band access through terminal server or modem). The procedures in the show module command display issued from the supervisor engine. Note The standby MSFC does not appear in this section use the switch console command to access the MSFC. Manually Booting the MSFC If...
... that the MSFC be manually booted each time the switch is reset. Setting the MSFC Configuration Register For manual-mode MSFC redundancy, set the configuration registers to operations personnel (out-of-band access through terminal server or modem). The procedures in the show module command display issued from the supervisor engine. Note The standby MSFC does not appear in this section use the switch console command to access the MSFC. Manually Booting the MSFC If...
Software Guide
Page 659
... supervisor engine you add or remove ports from the operational source. Use the following guidelines for VSPAN sessions: • Trunk ports are modified accordingly. WS-X6K-SUP1-2GE, WS-X6K-SUP1A-2GE-Only one or more VLANs. You can configure a port as follows based upon the type of the network traffic in the source VLANs become RSPAN VLANs. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 38-3 Ingress SPAN Ingress SPAN copies network traffic...
... supervisor engine you add or remove ports from the operational source. Use the following guidelines for VSPAN sessions: • Trunk ports are modified accordingly. WS-X6K-SUP1-2GE, WS-X6K-SUP1A-2GE-Only one or more VLANs. You can configure a port as follows based upon the type of the network traffic in the source VLANs become RSPAN VLANs. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 38-3 Ingress SPAN Ingress SPAN copies network traffic...
Software Guide
Page 682
... enabled on a switch if GMRP is described in hardware by allowing directed switching of both the Cisco router and the switch. You can distinguish IGMP control traffic from which allow the switch to RFC 1112. Multicast group membership lists can manage both IP multicast traffic and any Catalyst 6000 family supervisor engine model (Supervisor Engine 1, Supervisor Engine 1A, and Supervisor Engine 2). Understanding How IGMP Snooping Works Note You can use IGMP snooping to configure Layer 2 interfaces dynamically so that IP multicast traffic is forwarded to the port list...
... enabled on a switch if GMRP is described in hardware by allowing directed switching of both the Cisco router and the switch. You can distinguish IGMP control traffic from which allow the switch to RFC 1112. Multicast group membership lists can manage both IP multicast traffic and any Catalyst 6000 family supervisor engine model (Supervisor Engine 1, Supervisor Engine 1A, and Supervisor Engine 2). Understanding How IGMP Snooping Works Note You can use IGMP snooping to configure Layer 2 interfaces dynamically so that IP multicast traffic is forwarded to the port list...
Software Guide
Page 701
...40 Configuring Multicast Services Configuring Multicast Router Ports and Group Entries Configuring Multicast Groups To configure a multicast group manually, perform this task in privileged mode: Task Clear specific, manually configured multicast router ports. Console> (enable) set cam {static | permanent} multicast_mac CAM table. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-21 Command clear multicast router mod/port clear multicast router all manually configured multicast router ports. Step 1 Step 2 Task Command Add...
...40 Configuring Multicast Services Configuring Multicast Router Ports and Group Entries Configuring Multicast Groups To configure a multicast group manually, perform this task in privileged mode: Task Clear specific, manually configured multicast router ports. Console> (enable) set cam {static | permanent} multicast_mac CAM table. Console> (enable) 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 40-21 Command clear multicast router mod/port clear multicast router all manually configured multicast router ports. Step 1 Step 2 Task Command Add...
Software Guide
Page 714
... 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02 Enter the show module command for the supervisor engine to be one of the following: • Supervisor Engine 2 (WS-X6K-SUP2-2GE) with Layer 3 Switching Engine II (WS-F6K-PFC2-Policy Feature Card 2 or PFC2) • Supervisor Engine 1 (WS-X6K-SUP1A-2GE or WS-X6K-SUP1-2GE) with one of the following: - Layer 2 Switching Engine II (WS-F6020A) - The two Layer 2 switching engines support the same QoS feature set on your switching engine configuration. No Write...
... 6000 Family Software Configuration Guide-Releases 6.3 and 6.4 78-13315-02 Enter the show module command for the supervisor engine to be one of the following: • Supervisor Engine 2 (WS-X6K-SUP2-2GE) with Layer 3 Switching Engine II (WS-F6K-PFC2-Policy Feature Card 2 or PFC2) • Supervisor Engine 1 (WS-X6K-SUP1A-2GE or WS-X6K-SUP1-2GE) with one of the following: - Layer 2 Switching Engine II (WS-F6020A) - The two Layer 2 switching engines support the same QoS feature set on your switching engine configuration. No Write...
Software Guide
Page 741
... -profile packets with the normal rate to create a microflow policing rule with the specific value entered. Console> (enable) show qos policer config aggregate test QoS aggregate policers: QoS aggregate policers: Aggregate name Normal rate (kbps) Burst size (kb) Normal action...because tokens are multiples of -profile traffic: Console> (enable) set qos policer microflow my-micro rate 1000 burst 10000 policed-dscp Hardware programming in the normal markdown DSCP map (for aggregate test2 created successfully. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and...
... -profile packets with the normal rate to create a microflow policing rule with the specific value entered. Console> (enable) show qos policer config aggregate test QoS aggregate policers: QoS aggregate policers: Aggregate name Normal rate (kbps) Burst size (kb) Normal action...because tokens are multiples of -profile traffic: Console> (enable) set qos policer microflow my-micro rate 1000 burst 10000 policed-dscp Hardware programming in the normal markdown DSCP map (for aggregate test2 created successfully. 78-13315-02 Catalyst 6000 Family Software Configuration Guide-Releases 6.3 and...
Software Guide
Page 789
... IP address of each server. • Ensure that the routers are on the same subnet as the virtual-IP address to allow the router to the switch and specify the server and router configuration using the set lda server and set lda router commands. Connect the active and backup LocalDirectors to 1024 virtual-IP/TCP port pairs are supported. The default router on each server is 171.1.1.1. Chapter 42 Configuring ASLB Configuring ASLB IP Addresses Follow these supervisor engine configuration guidelines: • Up to 32 router MAC addresses...
... IP address of each server. • Ensure that the routers are on the same subnet as the virtual-IP address to allow the router to the switch and specify the server and router configuration using the set lda server and set lda router commands. Connect the active and backup LocalDirectors to 1024 virtual-IP/TCP port pairs are supported. The default router on each server is 171.1.1.1. Chapter 42 Configuring ASLB Configuring ASLB IP Addresses Follow these supervisor engine configuration guidelines: • Up to 32 router MAC addresses...
Software Guide
Page 823
... file server. When used to integrate a VoIP network with POTS devices, PBXs, or the PSTN. All control information, such as a Media Gateway Control Protocol (MGCP) gateway. During registration, Cisco CallManager downloads the key pad template and the feature capability for connection to the data network. The configuration file includs the IP address of ring tone to the called IP phone through this channel. Each time a phone boots up and uses DHCP to get a different IP address. If a call is updated...
... file server. When used to integrate a VoIP network with POTS devices, PBXs, or the PSTN. All control information, such as a Media Gateway Control Protocol (MGCP) gateway. During registration, Cisco CallManager downloads the key pad template and the feature capability for connection to the data network. The configuration file includs the IP address of ring tone to the called IP phone through this channel. Each time a phone boots up and uses DHCP to get a different IP address. If a call is updated...
Software Guide
Page 827
... a voice daughter card. Command show module command, the WS-X6348 modules both display as a submodule. Console> (enable) show module Mod Slot Ports Module-Type Model Sub Status 11 2 1000BaseX Supervisor WS-X6K-SUP1A-2GE yes ok 15 1 1 Multilayer Switch Feature WS-F6K-MSFC no ok 8 8 48 10/100BaseTX Ethernet WS-X6348-RJ-45 no ok 9 9 48 10/100BaseTX Ethernet WS-X6348-RJ-45 yes ok Mod Module-Name Serial-Num 1 SAD03436055 15 SAD03432597 9 SAD03414268 Mod MAC-Address(es) Hw...
... a voice daughter card. Command show module command, the WS-X6348 modules both display as a submodule. Console> (enable) show module Mod Slot Ports Module-Type Model Sub Status 11 2 1000BaseX Supervisor WS-X6K-SUP1A-2GE yes ok 15 1 1 Multilayer Switch Feature WS-F6K-MSFC no ok 8 8 48 10/100BaseTX Ethernet WS-X6348-RJ-45 no ok 9 9 48 10/100BaseTX Ethernet WS-X6348-RJ-45 yes ok Mod Module-Name Serial-Num 1 SAD03436055 15 SAD03432597 9 SAD03414268 Mod MAC-Address(es) Hw...
Software Guide
Page 828
... the CLI, SNMP, or a configuration file to the port; show version [mod] This example shows the version of modules and submodules: Console> (enable) show version 2 Mod Port Model Serial # Versions 2 2 WS-X6K-SUP2-2GE SAD04450LF1 Hw : 1.1 Fw : 6.1(2) Fw1: 6.1(3) Sw : 6.3(0.62)PAN Sw1: 6.3(0.62)PAN WS-F6K-PFC2 SAD04440HVU Hw : 1.0 Console> Power Management Modes Each port is configured through the set port inlinepower CLI command): • Auto-The supervisor engine directs the switching module to power up the port only if the switching module discovers the phone. •...
... the CLI, SNMP, or a configuration file to the port; show version [mod] This example shows the version of modules and submodules: Console> (enable) show version 2 Mod Port Model Serial # Versions 2 2 WS-X6K-SUP2-2GE SAD04450LF1 Hw : 1.1 Fw : 6.1(2) Fw1: 6.1(3) Sw : 6.3(0.62)PAN Sw1: 6.3(0.62)PAN WS-F6K-PFC2 SAD04440HVU Hw : 1.0 Console> Power Management Modes Each port is configured through the set port inlinepower CLI command): • Auto-The supervisor engine directs the switching module to power up the port only if the switching module discovers the phone. •...