[PDF] Catalyst 3550 Multilayer Switch Software Configuration Guide

View - Download Catalyst 3550 Multilayer Switch Software Configuration Guide

Previous PDF

Next PDF

Corporate Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 526-4100

Catalyst 3550 Multilayer Switch

Software Configuration Guide

Cisco IOS Release 12.2(25)SE

November 2004

Customer Order Number: DOC-7816610=

Text Part Number: 78-16610-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL

STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT

WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT

SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE

OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public

domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED "AS IS" WITH

ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT

LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF

DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,

WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO

OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

CCSP, the Cisco Square Bridge logo, Cisco Unity, Follow Me Browsing, FormShare, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work,

Live, Play, and Learn, and iQuick Study are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco,

the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Empowering the Internet Generation,

Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net

Readiness Scorecard, LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing,

ProConnect, RateMUX, Registrar, ScriptShare, SlideCast, SMARTnet, StrataView Plus, SwitchProbe, TeleRouter, The Fastest Way to Increase Your Internet Quotient,

TransPath, and VCO are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship

between Cisco and any other company. (0406R) Catalyst 3550 Multilayer Switch Software Configuration Guide Copyright © 2004 Cisco Systems, Inc. All rights reserved. iii Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-01

CONTENTS

Prefacexxxv

Audiencexxxv

Purposexxxv

Conventionsxxxvi

Related Publicationsxxxvii

Obtaining Documentationxxxvii

Cisco.comxxxviii

Ordering Documentationxxxviii

Documentation Feedbackxxxviii

Obtaining Technical Assistancexxxviii

Cisco Technical Support Websitexxxix

Submitting a Service Requestxxxix

Definitions of Service Request Severityxxxix

Obtaining Additional Publications and Informationxl

CHAPTER 1Overview1-1

Features1-1

Ease of Use and Ease of Deployment1-1

Performance1-2

Manageability1-3

Redundancy1-3

VLAN Support1-4

Security1-5

Quality of Service (QoS) and Class of Service (CoS)1-6

Layer 3 Support1-7

Monitoring1-7

Power over Ethernet Support for the Catalyst 3550-24PWR Switch1-8

Management Options1-8

Management Interface Options1-8

Advantages of Using Network Assistant and Clustering Switches1-9

Network Configuration Examples1-10

Design Concepts for Using the Switch1-10

Small to Medium-Sized Network Using Mixed Switches1-13 Large Network Using Only Catalyst 3550 Switches1-15

Contents

iv Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-01

Multidwelling Network Using Catalyst 3550 Switches1-16 Long-Distance, High-Bandwidth Transport Configuration1-18

Where to Go Next1-18

CHAPTER 2Using the Command-Line Interface2-1

Cisco IOS Command Modes2-1

Getting Help2-3

Abbreviating Commands2-3

Using no and default Forms of Commands2-3

Understanding CLI Messages2-4

Using Command History2-4

Changing the Command History Buffer Size2-4

Recalling Commands2-5

Disabling the Command History Feature2-5

Using Editing Features2-5

Enabling and Disabling Editing Features2-6

Editing Commands through Keystrokes2-6

Editing Command Lines that Wrap2-7

Searching and Filtering Output of show and more Commands2-8

Accessing the CLI2-8

CHAPTER 3Assigning the Switch IP Address and Default Gateway3-1

Understanding the Boot Process3-1

Assigning Switch Information3-2

Default Switch Information3-3

Understanding DHCP-Based Autoconfiguration3-3

DHCP Client Request Process3-4

Configuring DHCP-Based Autoconfiguration3-5

DHCP Server Configuration Guidelines3-5

Configuring the TFTP Server3-6

Configuring the DNS3-6

Configuring the Relay Device3-6

Obtaining Configuration Files3-7

Example Configuration3-8

Manually Assigning IP Information3-10

Checking and Saving the Running Configuration3-11

Contents

v Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-01

Modifying the Startup Configuration3-11

Default Boot Configuration3-11

Automatically Downloading a Configuration File3-12 Specifying the Filename to Read and Write the System Configuration3-12

Booting Manually3-12

Booting a Specific Software Image3-13

Controlling Environment Variables3-14

Scheduling a Reload of the Software Image3-16

Configuring a Scheduled Reload3-16

Displaying Scheduled Reload Information3-17

CHAPTER 4Configuring IE2100 CNS Agents4-1

Understanding IE2100 Series Configuration Registrar Software4-1

CNS Configuration Service4-2

CNS Event Service4-3

NameSpace Mapper4-3

What You Should Know About ConfigID, DeviceID, and Host Name4-3

ConfigID4-3

DeviceID4-4

Host Name and DeviceID4-4

Using Host Name, DeviceID, and ConfigID4-4

Understanding CNS Embedded Agents4-5

Initial Configuration4-5

Incremental (Partial) Configuration4-6

Synchronized Configuration4-6

Configuring CNS Embedded Agents4-6

Enabling Automated CNS Configuration4-6

Enabling the CNS Event Agent4-8

Enabling the CNS Configuration Agent4-9

Enabling an Initial Configuration4-9

Enabling a Partial Configuration4-12

Displaying CNS Configuration4-13

CHAPTER 5Clustering Switches5-1

Understanding Switch Clusters5-1

Clustering Overview5-1

Cluster Command Switch Characteristics5-2

Standby Command Switch Characteristics5-2

Candidate Switch and Member Switch Characteristics5-3

Contents

vi Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-01

Using the CLI to Manage Switch Clusters5-3

Catalyst 1900 and Catalyst 2820 CLI Considerations5-4

Using SNMP to Manage Switch Clusters5-4

CHAPTER 6Administering the Switch6-1

Managing the System Time and Date6-1

Understanding the System Clock 6-1

Understanding Network Time Protocol6-2

Configuring NTP6-4

Default NTP Configuration6-4

Configuring NTP Authentication6-5

Configuring NTP Associations6-6

Configuring NTP Broadcast Service6-7

Configuring NTP Access Restrictions6-8

Configuring the Source IP Address for NTP Packets6-10

Displaying the NTP Configuration6-11

Configuring Time and Date Manually6-11

Setting the System Clock6-11

Displaying the Time and Date Configuration6-12

Configuring the Time Zone 6-12

Configuring Summer Time (Daylight Saving Time)6-13

Configuring a System Name and Prompt6-15

Default System Name and Prompt Configuration6-15

Configuring a System Name6-15

Configuring a System Prompt6-16

Understanding DNS6-16

Default DNS Configuration6-17

Setting Up DNS6-17

Displaying the DNS Configuration6-18

Creating a Banner6-18

Default Banner Configuration6-18

Configuring a Message-of-the-Day Login Banner6-19

Configuring a Login Banner6-20

Managing the MAC Address Table6-20

Building the Address Table6-21

MAC Addresses and VLANs6-21

Default MAC Address Table Configuration6-22

Changing the Address Aging Time6-22

Removing Dynamic Address Entries6-23

Contents

vii Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-01

Configuring MAC Address Notification Traps6-23

Adding and Removing Static Address Entries6-25

Configuring Unicast MAC Address Filtering6-26

Displaying Address Table Entries6-27

Optimizing System Resources for User-Selected Features6-27

Using the Templates6-29

Managing the ARP Table6-30

CHAPTER 7Configuring Switch-Based Authentication7-1

Preventing Unauthorized Access to Your Switch7-1

Protecting Access to Privileged EXEC Commands7-2

Default Password and Privilege Level Configuration7-2

Setting or Changing a Static Enable Password7-3

Protecting Enable and Enable Secret Passwords with Encryption7-4

Disabling Password Recovery7-5

Setting a Telnet Password for a Terminal Line7-6

Configuring Username and Password Pairs7-7

Configuring Multiple Privilege Levels7-8

Setting the Privilege Level for a Command7-8

Changing the Default Privilege Level for Lines7-9

Logging into and Exiting a Privilege Level7-10

Controlling Switch Access with TACACS+7-10

Understanding TACACS+7-10

TACACS+ Operation7-12

Configuring TACACS+7-12

Default TACACS+ Configuration7-13

Identifying the TACACS+ Server Host and Setting the Authentication Key7-13

Configuring TACACS+ Login Authentication7-14

Configuring TACACS+ Authorization for Privileged EXEC Access and Network Services7-16

Starting TACACS+ Accounting7-17

Displaying the TACACS+ Configuration7-17

Controlling Switch Access with RADIUS7-17

Understanding RADIUS7-18

RADIUS Operation7-19

Contents

viii Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-01

Configuring RADIUS7-20

Default RADIUS Configuration7-20

Identifying the RADIUS Server Host 7-20

Configuring RADIUS Login Authentication7-23

Defining AAA Server Groups7-25

Configuring RADIUS Authorization for User Privileged Access and Network Services7-27

Starting RADIUS Accounting7-28

Configuring Settings for All RADIUS Servers7-29

Configuring the Switch to Use Vendor-Specific RADIUS Attributes7-29 Configuring the Switch for Vendor-Proprietary RADIUS Server Communication7-31

Displaying the RADIUS Configuration7-31

Controlling Switch Access with Kerberos7-32

Understanding Kerberos7-32

Kerberos Operation7-34

Authenticating to a Boundary Switch7-34

Obtaining a TGT from a KDC7-35

Authenticating to Network Services7-35

Configuring Kerberos7-35

Configuring the Switch for Local Authentication and Authorization7-36

Configuring the Switch for Secure Shell7-37

Understanding SSH7-38

SSH Servers, Integrated Clients, and Supported Versions7-38

Limitations7-38

Configuring SSH7-39

Configuration Guidelines7-39

Setting Up the Switch to Run SSH7-39

Configuring the SSH Server7-40

Displaying the SSH Configuration and Status7-41

Configuring the Switch for Secure Socket Layer HTTP7-41

Understanding Secure HTTP Servers and Clients7-42

Certificate Authority Trustpoints7-42

CipherSuites7-43

Configuring Secure HTTP Servers and Clients7-44

Default SSL Configuration7-44

SSL Configuration Guidelines7-44

Configuring a CA Trustpoint7-44

Configuring the Secure HTTP Server7-45

Configuring the Secure HTTP Client7-47

Displaying Secure HTTP Server and Client Status7-47

Contents

ix Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-01

CHAPTER 8Configuring 802.1x Port-Based Authentication8-1

Understanding 802.1x Port-Based Authentication8-1

Device Roles8-2

Authentication Initiation and Message Exchange8-3

Ports in Authorized and Unauthorized States8-4

802.1x Accounting8-5

802.1x Host Mode8-5

Using 802.1x with Port Security8-6

Using 802.1x with Voice VLAN Ports8-7

Using 802.1x with VLAN Assignment8-7

Using 802.1x with Guest VLAN8-8

Using 802.1x with Per-User ACLs8-9

Configuring 802.1x Authentication8-10

Default 802.1x Configuration8-10

802.1x Configuration Guidelines8-11

Upgrading from a Previous Software Release8-12

Enabling 802.1x Authentication8-13

Configuring the Switch-to-RADIUS-Server Communication8-14

Enabling Periodic Re-Authentication8-15

Manually Re-Authenticating a Client Connected to a Port8-16

Changing the Quiet Period8-16

Changing the Switch-to-Client Retransmission Time8-17 Setting the Switch-to-Client Frame-Retransmission Number8-17

Setting the Re-Authentication Number8-18

Configuring the Host Mode8-19

Configuring a Guest VLAN8-19

Resetting the 802.1x Configuration to the Default Values8-21

Configuring 802.1x Authentication8-21

Configuring 802.1x Accounting8-23

Displaying 802.1x Statistics and Status8-24

CHAPTER 9Configuring Interface Characteristics9-1

Understanding Interface Types9-1

Port-Based VLANs9-2

Switch Ports9-2

Access Ports9-3

Trunk Ports9-3

Tunnel Ports9-4

Switch Virtual Interfaces9-4

Contents

x Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-01

Routed Ports9-4

EtherChannel Port Groups9-5

Power Over Ethernet Ports9-5

Supported Protocols and Standards9-6

Powered-Device Detection and Initial Power Allocation9-6

Power Management Modes9-7

Connecting Interfaces9-8

Using the Interface Command9-9

Procedures for Configuring Interfaces9-10

Configuring a Range of Interfaces9-10

Configuring and Using Interface Range Macros9-12

Configuring Ethernet Interfaces9-14

Default Ethernet Interface Configuration9-14

Configuring Interface Speed and Duplex Mode9-15

Configuration Guidelines9-16

Setting the Interface Speed and Duplex Parameters9-16 Configuring Power over Ethernet on the Catalyst 3550-24PWR Ports9-17

Configuring IEEE 802.3z Flow Control9-18

Adding a Description for an Interface9-19

Configuring Layer 3 Interfaces9-20

Monitoring and Maintaining the Interfaces9-21

Monitoring Interface and Controller Status9-21

Clearing and Resetting Interfaces and Counters9-22

Shutting Down and Restarting the Interface9-23

CHAPTER 10Configuring Smartports Macros10-1

Understanding Smartports Macros10-1

Configuring Smartports Macros10-2

Default Smartports Macro Configuration10-2

Smartports Macro Configuration Guidelines10-3

Creating Smartports Macros10-4

Applying Smartports Macros10-5

Applying Cisco-Default Smartports Macros10-6

Displaying Smartports Macros10-8

CHAPTER 11Configuring VLANs11-1

Understanding VLANs11-1

Supported VLANs11-2

VLAN Port Membership Modes11-3

Contents

xi Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-01

Configuring Normal-Range VLANs11-4

Token Ring VLANs11-5

Normal-Range VLAN Configuration Guidelines11-5

VLAN Configuration Mode Options11-6

VLAN Configuration in config-vlan Mode11-6

VLAN Configuration in VLAN Configuration Mode11-6

Saving VLAN Configuration11-7

Default Ethernet VLAN Configuration11-7

Creating or Modifying an Ethernet VLAN11-8

Deleting a VLAN11-10

Assigning Static-Access Ports to a VLAN11-11

Configuring Extended-Range VLANs11-11

Default VLAN Configuration11-12

Extended-Range VLAN Configuration Guidelines11-12

Creating an Extended-Range VLAN11-13

Creating an Extended-Range VLAN with an Internal VLAN ID11-14

Displaying VLANs11-15

Configuring VLAN Trunks11-15

Trunking Overview11-16

Encapsulation Types11-18

802.1Q Configuration Considerations11-18

Default Layer 2 Ethernet Interface VLAN Configuration11-19 Configuring an Ethernet Interface as a Trunk Port11-19

Interaction with Other Features11-19

Configuring a Trunk Port11-20

quotesdbs_dbs22.pdfusesText_28

[PDF] multilevel feedback queue implementation

[PDF] multilevel feedback queue scheduling tutorialspoint

[PDF] multilevel feedback queue scheduling code in java

[PDF] multilevel feedback queue scheduling program in c++

[PDF] multilevel inverter block diagram

[PDF] multilevel inverter ppt

[PDF] multilevel inverter project report

[PDF] multilevel inverter switching pattern

[PDF] multilevel inverter thesis

[PDF] multilevel inverters syllabus

[PDF] multilevel queue scheduling

[PDF] multimedia powerpoint presentation examples

[PDF] multimedia presentation software examples

[PDF] multimedia presentations

[PDF] multinational company profile pdf